# Vulnerabilities published in 2025 - [MAL-2025-139645](https://insights.sbomify.com/MAL-2025-139645/): Malicious code in atlas-inquirer-jabbah-protractor (npm) (malicious package) - [MAL-2025-139644](https://insights.sbomify.com/MAL-2025-139644/): Malicious code in atlas-global-mysql-pegasus (npm) (malicious package) - [MAL-2025-139643](https://insights.sbomify.com/MAL-2025-139643/): Malicious code in atlas-duplex-astro-spectron (npm) (malicious package) - [MAL-2025-139642](https://insights.sbomify.com/MAL-2025-139642/): Malicious code in atlas-changelog-nebula-kinetic (npm) (malicious package) - [MAL-2025-139641](https://insights.sbomify.com/MAL-2025-139641/): Malicious code in atlas-callback-xenos-janus (npm) (malicious package) - [MAL-2025-139640](https://insights.sbomify.com/MAL-2025-139640/): Malicious code in atlas-browserify-commitlint-orbit (npm) (malicious package) - [MAL-2025-13964](https://insights.sbomify.com/MAL-2025-13964/): Malicious code in ac-console (npm) (malicious package) - [MAL-2025-139639](https://insights.sbomify.com/MAL-2025-139639/): Malicious code in async-yonder-node-sass-configstore (npm) (malicious package) - [MAL-2025-139638](https://insights.sbomify.com/MAL-2025-139638/): Malicious code in async-vega-jupiter-mensa (npm) (malicious package) - [MAL-2025-139637](https://insights.sbomify.com/MAL-2025-139637/): Malicious code in async-sedna-prompts-less-loader (npm) (malicious package) - [MAL-2025-139636](https://insights.sbomify.com/MAL-2025-139636/): Malicious code in async-procyon-webdriver-manager-private (npm) (malicious package) - [MAL-2025-139635](https://insights.sbomify.com/MAL-2025-139635/): Malicious code in async-pm2-subscription-vuepress (npm) (malicious package) - [MAL-2025-139634](https://insights.sbomify.com/MAL-2025-139634/): Malicious code in async-phenomic-cygnus-markdown-pdf (npm) (malicious package) - [MAL-2025-139633](https://insights.sbomify.com/MAL-2025-139633/): Malicious code in async-package-spinner-tethys (npm) (malicious package) - [MAL-2025-139632](https://insights.sbomify.com/MAL-2025-139632/): Malicious code in async-oberon-framework-ursa (npm) (malicious package) - [MAL-2025-139631](https://insights.sbomify.com/MAL-2025-139631/): Malicious code in async-node-sass-fork-pulsar (npm) (malicious package) - [MAL-2025-139630](https://insights.sbomify.com/MAL-2025-139630/): Malicious code in async-nightwatch-auriga-html-webpack-plugin (npm) (malicious package) - [MAL-2025-13963](https://insights.sbomify.com/MAL-2025-13963/): Malicious code in ac-addon (npm) (malicious package) - [MAL-2025-139629](https://insights.sbomify.com/MAL-2025-139629/): Malicious code in async-native-vortex-lynx (npm) (malicious package) - [MAL-2025-139628](https://insights.sbomify.com/MAL-2025-139628/): Malicious code in async-json-metalsmith-elektra (npm) (malicious package) - [MAL-2025-139627](https://insights.sbomify.com/MAL-2025-139627/): Malicious code in async-hyperion-blaze-kronos (npm) (malicious package) - [MAL-2025-139626](https://insights.sbomify.com/MAL-2025-139626/): Malicious code in async-hugo-yaml-rimraf (npm) (malicious package) - [MAL-2025-139625](https://insights.sbomify.com/MAL-2025-139625/): Malicious code in async-halley-adonis-rest (npm) (malicious package) - [MAL-2025-139624](https://insights.sbomify.com/MAL-2025-139624/): Malicious code in async-europa-exec-solis (npm) (malicious package) - [MAL-2025-139623](https://insights.sbomify.com/MAL-2025-139623/): Malicious code in async-development-jovian-jwt (npm) (malicious package) - [MAL-2025-139622](https://insights.sbomify.com/MAL-2025-139622/): Malicious code in async-centauri-sirius-vega (npm) (malicious package) - [MAL-2025-139621](https://insights.sbomify.com/MAL-2025-139621/): Malicious code in async-bootstrap-jovian-jasmine (npm) (malicious package) - [MAL-2025-139620](https://insights.sbomify.com/MAL-2025-139620/): Malicious code in astro-xo-dotenv-parse-variables-xml (npm) (malicious package) - [MAL-2025-13962](https://insights.sbomify.com/MAL-2025-13962/): Malicious code in abstract-permission-root-kappa-deploy (npm) (malicious package) - [MAL-2025-139619](https://insights.sbomify.com/MAL-2025-139619/): Malicious code in astro-vortex-commitlint-prompts (npm) (malicious package) - [MAL-2025-139618](https://insights.sbomify.com/MAL-2025-139618/): Malicious code in astro-test-corvus-impulse (npm) (malicious package) - [MAL-2025-139617](https://insights.sbomify.com/MAL-2025-139617/): Malicious code in astro-request-sequelize-nebula (npm) (malicious package) - [MAL-2025-139616](https://insights.sbomify.com/MAL-2025-139616/): Malicious code in astro-redis-telesto-test (npm) (malicious package) - [MAL-2025-139615](https://insights.sbomify.com/MAL-2025-139615/): Malicious code in astro-postgres-dependencies-bellatrix (npm) (malicious package) - [MAL-2025-139614](https://insights.sbomify.com/MAL-2025-139614/): Malicious code in astro-phoebe-meissa-lyra (npm) (malicious package) - [MAL-2025-139613](https://insights.sbomify.com/MAL-2025-139613/): Malicious code in astro-phenomic-yakutsk-charon (npm) (malicious package) - [MAL-2025-139612](https://insights.sbomify.com/MAL-2025-139612/): Malicious code in astro-oberon-airbnb-graphql (npm) (malicious package) - [MAL-2025-139611](https://insights.sbomify.com/MAL-2025-139611/): Malicious code in astro-nextjs-sedna-child-process (npm) (malicious package) - [MAL-2025-139610](https://insights.sbomify.com/MAL-2025-139610/): Malicious code in astro-lynx-spectron-webdriver-cluster (npm) (malicious package) - [MAL-2025-13961](https://insights.sbomify.com/MAL-2025-13961/): Malicious code in absolver (npm) (malicious package) - [MAL-2025-139609](https://insights.sbomify.com/MAL-2025-139609/): Malicious code in astro-izar-nova-buffer (npm) (malicious package) - [MAL-2025-139608](https://insights.sbomify.com/MAL-2025-139608/): Malicious code in astro-izar-enceladus-grunt (npm) (malicious package) - [MAL-2025-139607](https://insights.sbomify.com/MAL-2025-139607/): Malicious code in astro-got-spectron-halley (npm) (malicious package) - [MAL-2025-139606](https://insights.sbomify.com/MAL-2025-139606/): Malicious code in astro-geckodriver-radiant-enif (npm) (malicious package) - [MAL-2025-139605](https://insights.sbomify.com/MAL-2025-139605/): Malicious code in astro-geckodriver-janus-helios (npm) (malicious package) - [MAL-2025-139604](https://insights.sbomify.com/MAL-2025-139604/): Malicious code in astro-ganymede-commitizen-cypress (npm) (malicious package) - [MAL-2025-139603](https://insights.sbomify.com/MAL-2025-139603/): Malicious code in astro-fetch-orbit-celeste (npm) (malicious package) - [MAL-2025-139602](https://insights.sbomify.com/MAL-2025-139602/): Malicious code in astro-enceladus-postcss-loader-iota (npm) (malicious package) - [MAL-2025-139601](https://insights.sbomify.com/MAL-2025-139601/): Malicious code in ariel-zenobia-hugo-grunt (npm) (malicious package) - [MAL-2025-139600](https://insights.sbomify.com/MAL-2025-139600/): Malicious code in ariel-zenith-farout-draco (npm) (malicious package) - [MAL-2025-13960](https://insights.sbomify.com/MAL-2025-13960/): Malicious code in abroad (npm) (malicious package) - [MAL-2025-1396](https://insights.sbomify.com/MAL-2025-1396/): Malicious code in bitstamp-internal (npm) (malicious package) - [MAL-2025-139599](https://insights.sbomify.com/MAL-2025-139599/): Malicious code in ariel-ursa-nodemon-rate-limiter (npm) (malicious package) - [MAL-2025-139598](https://insights.sbomify.com/MAL-2025-139598/): Malicious code in ariel-umbra-ophiuchus-elektra (npm) (malicious package) - [MAL-2025-139597](https://insights.sbomify.com/MAL-2025-139597/): Malicious code in ariel-titan-forever-phoenix (npm) (malicious package) - [MAL-2025-139596](https://insights.sbomify.com/MAL-2025-139596/): Malicious code in ariel-spawn-commitlint-config-angular-cressida (npm) (malicious package) - [MAL-2025-139595](https://insights.sbomify.com/MAL-2025-139595/): Malicious code in ariel-postgres-ariel-proxima (npm) (malicious package) - [MAL-2025-139594](https://insights.sbomify.com/MAL-2025-139594/): Malicious code in ariel-polaris-rimraf-convict (npm) (malicious package) - [MAL-2025-139593](https://insights.sbomify.com/MAL-2025-139593/): Malicious code in ariel-ora-farout-wasat (npm) (malicious package) - [MAL-2025-139592](https://insights.sbomify.com/MAL-2025-139592/): Malicious code in ariel-octans-csrf-superagent (npm) (malicious package) - [MAL-2025-139591](https://insights.sbomify.com/MAL-2025-139591/): Malicious code in ariel-mocha-blaze-markdownlint (npm) (malicious package) - [MAL-2025-139590](https://insights.sbomify.com/MAL-2025-139590/): Malicious code in ariel-io-callisto-chai (npm) (malicious package) - [MAL-2025-13959](https://insights.sbomify.com/MAL-2025-13959/): Malicious code in abprofile (npm) (malicious package) - [MAL-2025-139589](https://insights.sbomify.com/MAL-2025-139589/): Malicious code in ariel-indus-telesto-fomalhaut (npm) (malicious package) - [MAL-2025-139588](https://insights.sbomify.com/MAL-2025-139588/): Malicious code in ariel-ganymede-octans-postcss-loader (npm) (malicious package) - [MAL-2025-139587](https://insights.sbomify.com/MAL-2025-139587/): Malicious code in ariel-flare-warp-aldebaran (npm) (malicious package) - [MAL-2025-139586](https://insights.sbomify.com/MAL-2025-139586/): Malicious code in ariel-epimetheus-husky-private (npm) (malicious package) - [MAL-2025-139585](https://insights.sbomify.com/MAL-2025-139585/): Malicious code in ariel-docusaurus-build-postcss (npm) (malicious package) - [MAL-2025-139584](https://insights.sbomify.com/MAL-2025-139584/): Malicious code in ariel-cosmos-arcturus-firebase (npm) (malicious package) - [MAL-2025-139583](https://insights.sbomify.com/MAL-2025-139583/): Malicious code in ariel-corvus-event-mongoose (npm) (malicious package) - [MAL-2025-139582](https://insights.sbomify.com/MAL-2025-139582/): Malicious code in ariel-cluster-yaml-vega (npm) (malicious package) - [MAL-2025-139581](https://insights.sbomify.com/MAL-2025-139581/): Malicious code in ariel-build-octans-cors (npm) (malicious package) - [MAL-2025-139580](https://insights.sbomify.com/MAL-2025-139580/): Malicious code in ariel-bellatrix-postcss-loader-jekyll (npm) (malicious package) - [MAL-2025-13958](https://insights.sbomify.com/MAL-2025-13958/): Malicious code in aboutabhishek1859 (npm) (malicious package) - [MAL-2025-139579](https://insights.sbomify.com/MAL-2025-139579/): Malicious code in ariel-atlas-xenon-chalk (npm) (malicious package) - [MAL-2025-139578](https://insights.sbomify.com/MAL-2025-139578/): Malicious code in ariel-airbnb-mira-kinetic (npm) (malicious package) - [MAL-2025-139577](https://insights.sbomify.com/MAL-2025-139577/): Malicious code in arcturus-toml-carpo-postcss-loader (npm) (malicious package) - [MAL-2025-139576](https://insights.sbomify.com/MAL-2025-139576/): Malicious code in arcturus-start-pegasus-aquarius (npm) (malicious package) - [MAL-2025-139575](https://insights.sbomify.com/MAL-2025-139575/): Malicious code in arcturus-proxima-cosmiconfig-websockets (npm) (malicious package) - [MAL-2025-139574](https://insights.sbomify.com/MAL-2025-139574/): Malicious code in arcturus-nightwatch-spawn-perseus (npm) (malicious package) - [MAL-2025-139573](https://insights.sbomify.com/MAL-2025-139573/): Malicious code in arcturus-nightwatch-galaxy-remark (npm) (malicious package) - [MAL-2025-139572](https://insights.sbomify.com/MAL-2025-139572/): Malicious code in arcturus-loopback-typeorm-vortex (npm) (malicious package) - [MAL-2025-139571](https://insights.sbomify.com/MAL-2025-139571/): Malicious code in arcturus-jabbah-private-magellan (npm) (malicious package) - [MAL-2025-139570](https://insights.sbomify.com/MAL-2025-139570/): Malicious code in arcturus-ignite-csrf-janus (npm) (malicious package) - [MAL-2025-13957](https://insights.sbomify.com/MAL-2025-13957/): Malicious code in ablejimmy (npm) (malicious package) - [MAL-2025-139569](https://insights.sbomify.com/MAL-2025-139569/): Malicious code in arcturus-fork-cassini-jwt (npm) (malicious package) - [MAL-2025-139568](https://insights.sbomify.com/MAL-2025-139568/): Malicious code in arcturus-dependencies-transport-child-process (npm) (malicious package) - [MAL-2025-139567](https://insights.sbomify.com/MAL-2025-139567/): Malicious code in arcturus-cluster-sagitta-algol (npm) (malicious package) - [MAL-2025-139566](https://insights.sbomify.com/MAL-2025-139566/): Malicious code in arcturus-chakra-ui-css-loader-gemini (npm) (malicious package) - [MAL-2025-139565](https://insights.sbomify.com/MAL-2025-139565/): Malicious code in arcturus-bunyan-bunyan-meteor (npm) (malicious package) - [MAL-2025-139564](https://insights.sbomify.com/MAL-2025-139564/): Malicious code in arcturus-ariel-install-eleventy (npm) (malicious package) - [MAL-2025-139563](https://insights.sbomify.com/MAL-2025-139563/): Malicious code in arcturus-aquarius-corvus-dependencies (npm) (malicious package) - [MAL-2025-139562](https://insights.sbomify.com/MAL-2025-139562/): Malicious code in aquarius-xanadu-zephyr-aldebaran (npm) (malicious package) - [MAL-2025-139561](https://insights.sbomify.com/MAL-2025-139561/): Malicious code in aquarius-webpack-ganymede-materialize (npm) (malicious package) - [MAL-2025-139560](https://insights.sbomify.com/MAL-2025-139560/): Malicious code in aquarius-webpack-apollo-xanthus (npm) (malicious package) - [MAL-2025-13956](https://insights.sbomify.com/MAL-2025-13956/): Malicious code in ablation-gammarayburst-betelgeuse-protractor (npm) (malicious package) - [MAL-2025-139559](https://insights.sbomify.com/MAL-2025-139559/): Malicious code in aquarius-webdriver-mocha-hyperion-cross-env (npm) (malicious package) - [MAL-2025-139558](https://insights.sbomify.com/MAL-2025-139558/): Malicious code in aquarius-vuetify-radiant-apex (npm) (malicious package) - [MAL-2025-139557](https://insights.sbomify.com/MAL-2025-139557/): Malicious code in aquarius-vuepress-kinetic-transport (npm) (malicious package) - [MAL-2025-139556](https://insights.sbomify.com/MAL-2025-139556/): Malicious code in aquarius-venus-nodejs-soap (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/1492/