# Vulnerabilities published in 2025


- [MAL-2025-139555](https://insights.sbomify.com/MAL-2025-139555/): Malicious code in aquarius-ultra-grus-yildun (npm) (malicious package)
- [MAL-2025-139554](https://insights.sbomify.com/MAL-2025-139554/): Malicious code in aquarius-testcafe-puppeteer-izar (npm) (malicious package)
- [MAL-2025-139553](https://insights.sbomify.com/MAL-2025-139553/): Malicious code in aquarius-testcafe-javascript-lacerta (npm) (malicious package)
- [MAL-2025-139552](https://insights.sbomify.com/MAL-2025-139552/): Malicious code in aquarius-style-loader-start-semantic-ui (npm) (malicious package)
- [MAL-2025-139551](https://insights.sbomify.com/MAL-2025-139551/): Malicious code in aquarius-socketio-jupiter-iota (npm) (malicious package)
- [MAL-2025-139550](https://insights.sbomify.com/MAL-2025-139550/): Malicious code in aquarius-sedna-lint-hermes (npm) (malicious package)
- [MAL-2025-13955](https://insights.sbomify.com/MAL-2025-13955/): Malicious code in ablation-dotenv-safe-coronalmassejection-non-blocking (npm) (malicious package)
- [MAL-2025-139549](https://insights.sbomify.com/MAL-2025-139549/): Malicious code in aquarius-schema-link-capella (npm) (malicious package)
- [MAL-2025-139548](https://insights.sbomify.com/MAL-2025-139548/): Malicious code in aquarius-sass-loader-morgan-unuk (npm) (malicious package)
- [MAL-2025-139547](https://insights.sbomify.com/MAL-2025-139547/): Malicious code in aquarius-sagitta-delphinus-lacerta (npm) (malicious package)
- [MAL-2025-139546](https://insights.sbomify.com/MAL-2025-139546/): Malicious code in aquarius-rocket-vuepress-eris (npm) (malicious package)
- [MAL-2025-139545](https://insights.sbomify.com/MAL-2025-139545/): Malicious code in aquarius-phoenix-prompts-run-script (npm) (malicious package)
- [MAL-2025-139544](https://insights.sbomify.com/MAL-2025-139544/): Malicious code in aquarius-perseus-cross-env-csrf (npm) (malicious package)
- [MAL-2025-139543](https://insights.sbomify.com/MAL-2025-139543/): Malicious code in aquarius-ophiuchus-jabbah-eridanus (npm) (malicious package)
- [MAL-2025-139542](https://insights.sbomify.com/MAL-2025-139542/): Malicious code in aquarius-npm-telesto-proxima (npm) (malicious package)
- [MAL-2025-139541](https://insights.sbomify.com/MAL-2025-139541/): Malicious code in aquarius-nodejs-electron-registry (npm) (malicious package)
- [MAL-2025-139540](https://insights.sbomify.com/MAL-2025-139540/): Malicious code in aquarius-mdx-parcel-subscription (npm) (malicious package)
- [MAL-2025-13954](https://insights.sbomify.com/MAL-2025-13954/): Malicious code in abiogenesis-webpack-innercore-request (npm) (malicious package)
- [MAL-2025-139539](https://insights.sbomify.com/MAL-2025-139539/): Malicious code in aquarius-markdownlint-shelljs-arcturus (npm) (malicious package)
- [MAL-2025-139538](https://insights.sbomify.com/MAL-2025-139538/): Malicious code in aquarius-jwt-bulma-webdriver-mocha (npm) (malicious package)
- [MAL-2025-139537](https://insights.sbomify.com/MAL-2025-139537/): Malicious code in aquarius-hermes-indus-link (npm) (malicious package)
- [MAL-2025-139536](https://insights.sbomify.com/MAL-2025-139536/): Malicious code in aquarius-fornax-mocha-resolvers (npm) (malicious package)
- [MAL-2025-139535](https://insights.sbomify.com/MAL-2025-139535/): Malicious code in aquarius-express-winston-spica (npm) (malicious package)
- [MAL-2025-139534](https://insights.sbomify.com/MAL-2025-139534/): Malicious code in aquarius-epimetheus-mensa-ganymede (npm) (malicious package)
- [MAL-2025-139533](https://insights.sbomify.com/MAL-2025-139533/): Malicious code in aquarius-adonis-vuetify-xml (npm) (malicious package)
- [MAL-2025-139532](https://insights.sbomify.com/MAL-2025-139532/): Malicious code in apollo-ursa-tailwindcss-uglify-js (npm) (malicious package)
- [MAL-2025-139531](https://insights.sbomify.com/MAL-2025-139531/): Malicious code in apollo-soap-publish-pino-pretty (npm) (malicious package)
- [MAL-2025-139530](https://insights.sbomify.com/MAL-2025-139530/): Malicious code in apollo-server-terser-webpack-plugin-quantum (npm) (malicious package)
- [MAL-2025-13953](https://insights.sbomify.com/MAL-2025-13953/): Malicious code in abiogenesis-luminescence-uglify-js-mesosphere (npm) (malicious package)
- [MAL-2025-139529](https://insights.sbomify.com/MAL-2025-139529/): Malicious code in apollo-sedna-jupiter-weywot (npm) (malicious package)
- [MAL-2025-139528](https://insights.sbomify.com/MAL-2025-139528/): Malicious code in apollo-sails-vuepress-chai (npm) (malicious package)
- [MAL-2025-139527](https://insights.sbomify.com/MAL-2025-139527/): Malicious code in apollo-repository-uglify-js-nextjs (npm) (malicious package)
- [MAL-2025-139526](https://insights.sbomify.com/MAL-2025-139526/): Malicious code in apollo-readable-iota-bulma (npm) (malicious package)
- [MAL-2025-139525](https://insights.sbomify.com/MAL-2025-139525/): Malicious code in apollo-rate-limiter-hermes-atlas (npm) (malicious package)
- [MAL-2025-139524](https://insights.sbomify.com/MAL-2025-139524/): Malicious code in apollo-quasar-hermes-dactyl (npm) (malicious package)
- [MAL-2025-139523](https://insights.sbomify.com/MAL-2025-139523/): Malicious code in apollo-non-blocking-local-csrf (npm) (malicious package)
- [MAL-2025-139522](https://insights.sbomify.com/MAL-2025-139522/): Malicious code in apollo-nightwatch-jest-non-blocking (npm) (malicious package)
- [MAL-2025-139521](https://insights.sbomify.com/MAL-2025-139521/): Malicious code in apollo-nightwatch-iota-miranda (npm) (malicious package)
- [MAL-2025-139520](https://insights.sbomify.com/MAL-2025-139520/): Malicious code in apollo-mocha-atlas-test (npm) (malicious package)
- [MAL-2025-13952](https://insights.sbomify.com/MAL-2025-13952/): Malicious code in abiogenesis-cosmochemistry-palynology-gulp (npm) (malicious package)
- [MAL-2025-139519](https://insights.sbomify.com/MAL-2025-139519/): Malicious code in apollo-library-metalsmith-tool (npm) (malicious package)
- [MAL-2025-139518](https://insights.sbomify.com/MAL-2025-139518/): Malicious code in apollo-jest-titan-meteor (npm) (malicious package)
- [MAL-2025-139517](https://insights.sbomify.com/MAL-2025-139517/): Malicious code in apollo-jasmine-pegasus-aquarius (npm) (malicious package)
- [MAL-2025-139516](https://insights.sbomify.com/MAL-2025-139516/): Malicious code in apollo-indus-run-script-lyra (npm) (malicious package)
- [MAL-2025-139515](https://insights.sbomify.com/MAL-2025-139515/): Malicious code in apollo-hapi-soap-testcafe (npm) (malicious package)
- [MAL-2025-139514](https://insights.sbomify.com/MAL-2025-139514/): Malicious code in apollo-halley-cosmiconfig-cypress (npm) (malicious package)
- [MAL-2025-139513](https://insights.sbomify.com/MAL-2025-139513/): Malicious code in apollo-fornax-parcel-frontend (npm) (malicious package)
- [MAL-2025-139512](https://insights.sbomify.com/MAL-2025-139512/): Malicious code in apollo-fornax-mdx-eleventy (npm) (malicious package)
- [MAL-2025-139511](https://insights.sbomify.com/MAL-2025-139511/): Malicious code in apollo-express-await-sadr (npm) (malicious package)
- [MAL-2025-139510](https://insights.sbomify.com/MAL-2025-139510/): Malicious code in apollo-envconfig-jest-jest (npm) (malicious package)
- [MAL-2025-13951](https://insights.sbomify.com/MAL-2025-13951/): Malicious code in abiogenesis-astroinformatics-europa-superflare (npm) (malicious package)
- [MAL-2025-139509](https://insights.sbomify.com/MAL-2025-139509/): Malicious code in apollo-element-ui-magellan-sedna (npm) (malicious package)
- [MAL-2025-139508](https://insights.sbomify.com/MAL-2025-139508/): Malicious code in apollo-elektra-bellatrix-neptune (npm) (malicious package)
- [MAL-2025-139507](https://insights.sbomify.com/MAL-2025-139507/): Malicious code in apollo-elara-dotenv-parse-variables-charon (npm) (malicious package)
- [MAL-2025-139506](https://insights.sbomify.com/MAL-2025-139506/): Malicious code in apollo-dotenv-safe-adonis-slidev (npm) (malicious package)
- [MAL-2025-139505](https://insights.sbomify.com/MAL-2025-139505/): Malicious code in apollo-docusaurus-postgres-kronos (npm) (malicious package)
- [MAL-2025-139504](https://insights.sbomify.com/MAL-2025-139504/): Malicious code in apollo-deimos-resolvers-arcturus (npm) (malicious package)
- [MAL-2025-139503](https://insights.sbomify.com/MAL-2025-139503/): Malicious code in apollo-cypress-hugo-capella (npm) (malicious package)
- [MAL-2025-139502](https://insights.sbomify.com/MAL-2025-139502/): Malicious code in apollo-cordelia-winston-mongodb (npm) (malicious package)
- [MAL-2025-139501](https://insights.sbomify.com/MAL-2025-139501/): Malicious code in apollo-commitizen-koa-farout (npm) (malicious package)
- [MAL-2025-139500](https://insights.sbomify.com/MAL-2025-139500/): Malicious code in apollo-command-prompts-electron (npm) (malicious package)
- [MAL-2025-13950](https://insights.sbomify.com/MAL-2025-13950/): Malicious code in abinothac (npm) (malicious package)
- [MAL-2025-1395](https://insights.sbomify.com/MAL-2025-1395/): Malicious code in bitstamp-dev (npm) (malicious package)
- [MAL-2025-139499](https://insights.sbomify.com/MAL-2025-139499/): Malicious code in apollo-colors-hapi-library (npm) (malicious package)
- [MAL-2025-139498](https://insights.sbomify.com/MAL-2025-139498/): Malicious code in apollo-bunyan-gravity-altair (npm) (malicious package)
- [MAL-2025-139497](https://insights.sbomify.com/MAL-2025-139497/): Malicious code in apollo-bulma-polaris-inquirer (npm) (malicious package)
- [MAL-2025-139496](https://insights.sbomify.com/MAL-2025-139496/): Malicious code in apollo-blaze-rate-limiter-vega (npm) (malicious package)
- [MAL-2025-139495](https://insights.sbomify.com/MAL-2025-139495/): Malicious code in apollo-backend-callback-cordelia (npm) (malicious package)
- [MAL-2025-139494](https://insights.sbomify.com/MAL-2025-139494/): Malicious code in apollo-await-europa-markdown (npm) (malicious package)
- [MAL-2025-139493](https://insights.sbomify.com/MAL-2025-139493/): Malicious code in apollo-antares-acamar-server (npm) (malicious package)
- [MAL-2025-139492](https://insights.sbomify.com/MAL-2025-139492/): Malicious code in apollo-andromeda-unuk-reveal-md (npm) (malicious package)
- [MAL-2025-139491](https://insights.sbomify.com/MAL-2025-139491/): Malicious code in apollo-aldebaran-restart-xanthus (npm) (malicious package)
- [MAL-2025-139490](https://insights.sbomify.com/MAL-2025-139490/): Malicious code in apollo-acamar-babel-neptune (npm) (malicious package)
- [MAL-2025-13949](https://insights.sbomify.com/MAL-2025-13949/): Malicious code in abide-yearn-lze294-project (npm) (malicious package)
- [MAL-2025-139489](https://insights.sbomify.com/MAL-2025-139489/): Malicious code in apex-yildun-iota-schema (npm) (malicious package)
- [MAL-2025-139488](https://insights.sbomify.com/MAL-2025-139488/): Malicious code in apex-websockets-bellatrix-luna (npm) (malicious package)
- [MAL-2025-139487](https://insights.sbomify.com/MAL-2025-139487/): Malicious code in apex-unuk-postgres-standard (npm) (malicious package)
- [MAL-2025-139486](https://insights.sbomify.com/MAL-2025-139486/): Malicious code in apex-resolvers-wolf-middleware (npm) (malicious package)
- [MAL-2025-139485](https://insights.sbomify.com/MAL-2025-139485/): Malicious code in apex-request-relay-sails (npm) (malicious package)
- [MAL-2025-139484](https://insights.sbomify.com/MAL-2025-139484/): Malicious code in apex-pino-neptune-magellan (npm) (malicious package)
- [MAL-2025-139483](https://insights.sbomify.com/MAL-2025-139483/): Malicious code in apex-neptune-ariel-remark (npm) (malicious package)
- [MAL-2025-139482](https://insights.sbomify.com/MAL-2025-139482/): Malicious code in apex-native-html-webpack-plugin-betelgeuse (npm) (malicious package)
- [MAL-2025-139481](https://insights.sbomify.com/MAL-2025-139481/): Malicious code in apex-magellan-winston-phoebe (npm) (malicious package)
- [MAL-2025-139480](https://insights.sbomify.com/MAL-2025-139480/): Malicious code in apex-html-webpack-plugin-configstore-polaris (npm) (malicious package)
- [MAL-2025-13948](https://insights.sbomify.com/MAL-2025-13948/): Malicious code in abi-pack-framework (npm) (malicious package)
- [MAL-2025-139479](https://insights.sbomify.com/MAL-2025-139479/): Malicious code in apex-hexo-europa-neptune (npm) (malicious package)
- [MAL-2025-139478](https://insights.sbomify.com/MAL-2025-139478/): Malicious code in apex-frontend-jasmine-bellatrix (npm) (malicious package)
- [MAL-2025-139477](https://insights.sbomify.com/MAL-2025-139477/): Malicious code in apex-frontend-bootstrap-dynamo (npm) (malicious package)
- [MAL-2025-139476](https://insights.sbomify.com/MAL-2025-139476/): Malicious code in apex-dotenv-parse-variables-wezen-ora (npm) (malicious package)
- [MAL-2025-139475](https://insights.sbomify.com/MAL-2025-139475/): Malicious code in apex-charon-bellatrix-npm (npm) (malicious package)
- [MAL-2025-139474](https://insights.sbomify.com/MAL-2025-139474/): Malicious code in apex-castor-gridsome-avior (npm) (malicious package)
- [MAL-2025-139473](https://insights.sbomify.com/MAL-2025-139473/): Malicious code in apex-bellatrix-lyra-hyperion (npm) (malicious package)
- [MAL-2025-139472](https://insights.sbomify.com/MAL-2025-139472/): Malicious code in apex-aldebaran-sass-loader-puppeteer (npm) (malicious package)
- [MAL-2025-139471](https://insights.sbomify.com/MAL-2025-139471/): Malicious code in antd-yaml-rate-limiter-zenobia (npm) (malicious package)
- [MAL-2025-139470](https://insights.sbomify.com/MAL-2025-139470/): Malicious code in antd-websockets-promise-eridanus (npm) (malicious package)
- [MAL-2025-13947](https://insights.sbomify.com/MAL-2025-13947/): Malicious code in abhijeet (npm) (malicious package)
- [MAL-2025-139469](https://insights.sbomify.com/MAL-2025-139469/): Malicious code in antd-taurus-sass-loader-publish (npm) (malicious package)
- [MAL-2025-139468](https://insights.sbomify.com/MAL-2025-139468/): Malicious code in antd-solis-rehype-levels (npm) (malicious package)
- [MAL-2025-139467](https://insights.sbomify.com/MAL-2025-139467/): Malicious code in antd-sagitta-meissa-rollup (npm) (malicious package)
- [MAL-2025-139466](https://insights.sbomify.com/MAL-2025-139466/): Malicious code in antd-rigel-cressida-ophiuchus (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1493/