# Vulnerabilities published in 2025


- [MAL-2025-139465](https://insights.sbomify.com/MAL-2025-139465/): Malicious code in antd-repository-nightwatch-duplex (npm) (malicious package)
- [MAL-2025-139464](https://insights.sbomify.com/MAL-2025-139464/): Malicious code in antd-postgres-eleventy-polaris (npm) (malicious package)
- [MAL-2025-139463](https://insights.sbomify.com/MAL-2025-139463/): Malicious code in antd-phoebe-puppeteer-subscription (npm) (malicious package)
- [MAL-2025-139462](https://insights.sbomify.com/MAL-2025-139462/): Malicious code in antd-node-config-slides-lyra (npm) (malicious package)
- [MAL-2025-139461](https://insights.sbomify.com/MAL-2025-139461/): Malicious code in antd-meteor-pipe-cosmos (npm) (malicious package)
- [MAL-2025-139460](https://insights.sbomify.com/MAL-2025-139460/): Malicious code in antd-loglevel-triton-wezen (npm) (malicious package)
- [MAL-2025-13946](https://insights.sbomify.com/MAL-2025-13946/): Malicious code in abcde (npm) (malicious package)
- [MAL-2025-139459](https://insights.sbomify.com/MAL-2025-139459/): Malicious code in antd-loglevel-sagitta-hexo (npm) (malicious package)
- [MAL-2025-139458](https://insights.sbomify.com/MAL-2025-139458/): Malicious code in antd-izar-dorado-gacrux (npm) (malicious package)
- [MAL-2025-139457](https://insights.sbomify.com/MAL-2025-139457/): Malicious code in antd-hydra-ganymede-bootstrap (npm) (malicious package)
- [MAL-2025-139456](https://insights.sbomify.com/MAL-2025-139456/): Malicious code in antd-google-hydra-canopus (npm) (malicious package)
- [MAL-2025-139455](https://insights.sbomify.com/MAL-2025-139455/): Malicious code in antd-gatsby-node-sass-elektra (npm) (malicious package)
- [MAL-2025-139454](https://insights.sbomify.com/MAL-2025-139454/): Malicious code in antd-ganymede-iota-tailwindcss (npm) (malicious package)
- [MAL-2025-139453](https://insights.sbomify.com/MAL-2025-139453/): Malicious code in antd-dagda-optimize-css-assets-webpack-plugin-remark (npm) (malicious package)
- [MAL-2025-139452](https://insights.sbomify.com/MAL-2025-139452/): Malicious code in antd-async-sagitta-mocha (npm) (malicious package)
- [MAL-2025-139451](https://insights.sbomify.com/MAL-2025-139451/): Malicious code in antares-xerxes-elektra-promise (npm) (malicious package)
- [MAL-2025-139450](https://insights.sbomify.com/MAL-2025-139450/): Malicious code in antares-xenos-fornax-forever (npm) (malicious package)
- [MAL-2025-13945](https://insights.sbomify.com/MAL-2025-13945/): Malicious code in abartelsmeier-test (npm) (malicious package)
- [MAL-2025-139449](https://insights.sbomify.com/MAL-2025-139449/): Malicious code in antares-xanadu-delphinus-dotenv-safe (npm) (malicious package)
- [MAL-2025-139448](https://insights.sbomify.com/MAL-2025-139448/): Malicious code in antares-wezen-octans-regulus (npm) (malicious package)
- [MAL-2025-139447](https://insights.sbomify.com/MAL-2025-139447/): Malicious code in antares-vuetify-nightmare-request (npm) (malicious package)
- [MAL-2025-139446](https://insights.sbomify.com/MAL-2025-139446/): Malicious code in antares-vega-electron-achernar (npm) (malicious package)
- [MAL-2025-139445](https://insights.sbomify.com/MAL-2025-139445/): Malicious code in antares-update-local-wolf (npm) (malicious package)
- [MAL-2025-139444](https://insights.sbomify.com/MAL-2025-139444/): Malicious code in antares-uglify-js-child-process-galaxy (npm) (malicious package)
- [MAL-2025-139443](https://insights.sbomify.com/MAL-2025-139443/): Malicious code in antares-triton-json-aether (npm) (malicious package)
- [MAL-2025-139442](https://insights.sbomify.com/MAL-2025-139442/): Malicious code in antares-supervisor-kinetic-nodemon (npm) (malicious package)
- [MAL-2025-139441](https://insights.sbomify.com/MAL-2025-139441/): Malicious code in antares-spectron-apollo-version (npm) (malicious package)
- [MAL-2025-139440](https://insights.sbomify.com/MAL-2025-139440/): Malicious code in antares-sirius-janus-rest (npm) (malicious package)
- [MAL-2025-13944](https://insights.sbomify.com/MAL-2025-13944/): Malicious code in abarcards (npm) (malicious package)
- [MAL-2025-139439](https://insights.sbomify.com/MAL-2025-139439/): Malicious code in antares-shelljs-vega-version (npm) (malicious package)
- [MAL-2025-139438](https://insights.sbomify.com/MAL-2025-139438/): Malicious code in antares-sedna-rest-europa (npm) (malicious package)
- [MAL-2025-139437](https://insights.sbomify.com/MAL-2025-139437/): Malicious code in antares-sagitta-hermes-spawn (npm) (malicious package)
- [MAL-2025-139436](https://insights.sbomify.com/MAL-2025-139436/): Malicious code in antares-rocket-server-mongoose (npm) (malicious package)
- [MAL-2025-139435](https://insights.sbomify.com/MAL-2025-139435/): Malicious code in antares-restart-oauth-zenobia (npm) (malicious package)
- [MAL-2025-139434](https://insights.sbomify.com/MAL-2025-139434/): Malicious code in antares-prompts-wolf-hydra (npm) (malicious package)
- [MAL-2025-139433](https://insights.sbomify.com/MAL-2025-139433/): Malicious code in antares-promise-thuban-ora (npm) (malicious package)
- [MAL-2025-139432](https://insights.sbomify.com/MAL-2025-139432/): Malicious code in antares-polaris-vuetify-wolf (npm) (malicious package)
- [MAL-2025-139431](https://insights.sbomify.com/MAL-2025-139431/): Malicious code in antares-phenomic-process-cordelia (npm) (malicious package)
- [MAL-2025-139430](https://insights.sbomify.com/MAL-2025-139430/): Malicious code in antares-perseus-indus-exec (npm) (malicious package)
- [MAL-2025-13943](https://insights.sbomify.com/MAL-2025-13943/): Malicious code in abakuc-localizer (npm) (malicious package)
- [MAL-2025-139429](https://insights.sbomify.com/MAL-2025-139429/): Malicious code in antares-pegasus-request-uglify-js (npm) (malicious package)
- [MAL-2025-139428](https://insights.sbomify.com/MAL-2025-139428/): Malicious code in antares-pavo-sagitta-hexo (npm) (malicious package)
- [MAL-2025-139427](https://insights.sbomify.com/MAL-2025-139427/): Malicious code in antares-oauth-aquarius-despina (npm) (malicious package)
- [MAL-2025-139426](https://insights.sbomify.com/MAL-2025-139426/): Malicious code in antares-nuxtjs-xanadu-hercules (npm) (malicious package)
- [MAL-2025-139425](https://insights.sbomify.com/MAL-2025-139425/): Malicious code in antares-nightwatch-inquirer-supervisor (npm) (malicious package)
- [MAL-2025-139424](https://insights.sbomify.com/MAL-2025-139424/): Malicious code in antares-nebula-webdriver-mocha-gravity (npm) (malicious package)
- [MAL-2025-139423](https://insights.sbomify.com/MAL-2025-139423/): Malicious code in antares-nashira-impulse-antares (npm) (malicious package)
- [MAL-2025-139422](https://insights.sbomify.com/MAL-2025-139422/): Malicious code in antares-mysql-gacrux-taurus (npm) (malicious package)
- [MAL-2025-139421](https://insights.sbomify.com/MAL-2025-139421/): Malicious code in antares-mensa-husky-middleware (npm) (malicious package)
- [MAL-2025-139420](https://insights.sbomify.com/MAL-2025-139420/): Malicious code in antares-meissa-protractor-lint-staged (npm) (malicious package)
- [MAL-2025-13942](https://insights.sbomify.com/MAL-2025-13942/): Malicious code in aave (npm) (malicious package)
- [MAL-2025-139419](https://insights.sbomify.com/MAL-2025-139419/): Malicious code in antares-less-loader-middleware-sequelize (npm) (malicious package)
- [MAL-2025-139418](https://insights.sbomify.com/MAL-2025-139418/): Malicious code in antares-leda-luna-heka (npm) (malicious package)
- [MAL-2025-139417](https://insights.sbomify.com/MAL-2025-139417/): Malicious code in antares-jupiter-upgrade-deimos (npm) (malicious package)
- [MAL-2025-139416](https://insights.sbomify.com/MAL-2025-139416/): Malicious code in antares-iota-grunt-morgan (npm) (malicious package)
- [MAL-2025-139415](https://insights.sbomify.com/MAL-2025-139415/): Malicious code in antares-ignite-apollo-magellan (npm) (malicious package)
- [MAL-2025-139414](https://insights.sbomify.com/MAL-2025-139414/): Malicious code in antares-helios-umbra-prettier-plugin-markdown (npm) (malicious package)
- [MAL-2025-139413](https://insights.sbomify.com/MAL-2025-139413/): Malicious code in antares-gulp-apex-spinner (npm) (malicious package)
- [MAL-2025-139412](https://insights.sbomify.com/MAL-2025-139412/): Malicious code in antares-grus-mui-polaris (npm) (malicious package)
- [MAL-2025-139411](https://insights.sbomify.com/MAL-2025-139411/): Malicious code in antares-gravity-local-promise (npm) (malicious package)
- [MAL-2025-139410](https://insights.sbomify.com/MAL-2025-139410/): Malicious code in antares-got-nashira-janus (npm) (malicious package)
- [MAL-2025-13941](https://insights.sbomify.com/MAL-2025-13941/): Malicious code in aasync (npm) (malicious package)
- [MAL-2025-139409](https://insights.sbomify.com/MAL-2025-139409/): Malicious code in antares-forever-eleventy-carpo (npm) (malicious package)
- [MAL-2025-139408](https://insights.sbomify.com/MAL-2025-139408/): Malicious code in antares-equinox-semantic-ui-titan (npm) (malicious package)
- [MAL-2025-139407](https://insights.sbomify.com/MAL-2025-139407/): Malicious code in antares-epimetheus-chromedriver-dependencies (npm) (malicious package)
- [MAL-2025-139406](https://insights.sbomify.com/MAL-2025-139406/): Malicious code in antares-docusaurus-toml-vulcan (npm) (malicious package)
- [MAL-2025-139405](https://insights.sbomify.com/MAL-2025-139405/): Malicious code in antares-despina-cypress-terser (npm) (malicious package)
- [MAL-2025-139404](https://insights.sbomify.com/MAL-2025-139404/): Malicious code in antares-dagda-middleware-eclipse (npm) (malicious package)
- [MAL-2025-139403](https://insights.sbomify.com/MAL-2025-139403/): Malicious code in antares-cypress-cygnus-draco (npm) (malicious package)
- [MAL-2025-139402](https://insights.sbomify.com/MAL-2025-139402/): Malicious code in antares-csrf-ignite-bunyan (npm) (malicious package)
- [MAL-2025-139401](https://insights.sbomify.com/MAL-2025-139401/): Malicious code in antares-cressida-astro-deimos (npm) (malicious package)
- [MAL-2025-139400](https://insights.sbomify.com/MAL-2025-139400/): Malicious code in antares-config-prompts-kinetic (npm) (malicious package)
- [MAL-2025-13940](https://insights.sbomify.com/MAL-2025-13940/): Malicious code in aanimal (npm) (malicious package)
- [MAL-2025-1394](https://insights.sbomify.com/MAL-2025-1394/): Malicious code in bithumb-main (npm) (malicious package)
- [MAL-2025-139399](https://insights.sbomify.com/MAL-2025-139399/): Malicious code in antares-config-mutation-jekyll (npm) (malicious package)
- [MAL-2025-139398](https://insights.sbomify.com/MAL-2025-139398/): Malicious code in antares-comet-miranda-procyon (npm) (malicious package)
- [MAL-2025-139397](https://insights.sbomify.com/MAL-2025-139397/): Malicious code in antares-child-process-algol-nightwatch (npm) (malicious package)
- [MAL-2025-139396](https://insights.sbomify.com/MAL-2025-139396/): Malicious code in antares-chakra-ui-dorado-quasar (npm) (malicious package)
- [MAL-2025-139395](https://insights.sbomify.com/MAL-2025-139395/): Malicious code in antares-castor-yonder-publish (npm) (malicious package)
- [MAL-2025-139394](https://insights.sbomify.com/MAL-2025-139394/): Malicious code in antares-cache-mira-child-process (npm) (malicious package)
- [MAL-2025-139393](https://insights.sbomify.com/MAL-2025-139393/): Malicious code in antares-cache-andromeda-dotenv-parse-variables (npm) (malicious package)
- [MAL-2025-139392](https://insights.sbomify.com/MAL-2025-139392/): Malicious code in antares-auth-thuban-semantic-release (npm) (malicious package)
- [MAL-2025-139391](https://insights.sbomify.com/MAL-2025-139391/): Malicious code in antares-aurora-cassini-pino-pretty (npm) (malicious package)
- [MAL-2025-139390](https://insights.sbomify.com/MAL-2025-139390/): Malicious code in antares-antares-run-script-triton (npm) (malicious package)
- [MAL-2025-13939](https://insights.sbomify.com/MAL-2025-13939/): Malicious code in aaaie-cheese-nips (npm) (malicious package)
- [MAL-2025-139389](https://insights.sbomify.com/MAL-2025-139389/): Malicious code in antares-acamar-betelgeuse-webpack (npm) (malicious package)
- [MAL-2025-139388](https://insights.sbomify.com/MAL-2025-139388/): Malicious code in andromeda-zephyr-test-rigel (npm) (malicious package)
- [MAL-2025-139387](https://insights.sbomify.com/MAL-2025-139387/): Malicious code in andromeda-xenos-relay-npm (npm) (malicious package)
- [MAL-2025-139386](https://insights.sbomify.com/MAL-2025-139386/): Malicious code in andromeda-toml-norma-procyon (npm) (malicious package)
- [MAL-2025-139385](https://insights.sbomify.com/MAL-2025-139385/): Malicious code in andromeda-tethys-adonis-tool (npm) (malicious package)
- [MAL-2025-139384](https://insights.sbomify.com/MAL-2025-139384/): Malicious code in andromeda-puppeteer-winston-gatsby (npm) (malicious package)
- [MAL-2025-139383](https://insights.sbomify.com/MAL-2025-139383/): Malicious code in andromeda-public-zenobia-hermes (npm) (malicious package)
- [MAL-2025-139382](https://insights.sbomify.com/MAL-2025-139382/): Malicious code in andromeda-procyon-transform-library (npm) (malicious package)
- [MAL-2025-139381](https://insights.sbomify.com/MAL-2025-139381/): Malicious code in andromeda-phoebe-cressida-flare (npm) (malicious package)
- [MAL-2025-139380](https://insights.sbomify.com/MAL-2025-139380/): Malicious code in andromeda-octans-gravity-electron-builder (npm) (malicious package)
- [MAL-2025-13938](https://insights.sbomify.com/MAL-2025-13938/): Malicious code in aaaaaaaaaawesome0.246384459780529140.8566083267989892 (npm) (malicious package)
- [MAL-2025-139379](https://insights.sbomify.com/MAL-2025-139379/): Malicious code in andromeda-module-xanthus-arcturus (npm) (malicious package)
- [MAL-2025-139378](https://insights.sbomify.com/MAL-2025-139378/): Malicious code in andromeda-markdown-pdf-loglevel-bellatrix (npm) (malicious package)
- [MAL-2025-139377](https://insights.sbomify.com/MAL-2025-139377/): Malicious code in andromeda-enceladus-prettier-stylelint-server (npm) (malicious package)
- [MAL-2025-139376](https://insights.sbomify.com/MAL-2025-139376/): Malicious code in andromeda-dagda-mui-xenon (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1494/