# Vulnerabilities published in 2025


- [MAL-2025-139285](https://insights.sbomify.com/MAL-2025-139285/): Malicious code in aldebaran-query-slidev-commitlint (npm) (malicious package)
- [MAL-2025-139284](https://insights.sbomify.com/MAL-2025-139284/): Malicious code in aldebaran-quasar-quantum-deimos (npm) (malicious package)
- [MAL-2025-139283](https://insights.sbomify.com/MAL-2025-139283/): Malicious code in aldebaran-nextjs-ceres-library (npm) (malicious package)
- [MAL-2025-139282](https://insights.sbomify.com/MAL-2025-139282/): Malicious code in aldebaran-inquirer-sirius-blaze (npm) (malicious package)
- [MAL-2025-139281](https://insights.sbomify.com/MAL-2025-139281/): Malicious code in aldebaran-heka-prompts-selenium (npm) (malicious package)
- [MAL-2025-139280](https://insights.sbomify.com/MAL-2025-139280/): Malicious code in aldebaran-grus-playwright-exec (npm) (malicious package)
- [MAL-2025-13928](https://insights.sbomify.com/MAL-2025-13928/): Malicious code in a-vailable-al-bum-file-celestial-lineage-vy1yv-mrqeyp (npm) (malicious package)
- [MAL-2025-139279](https://insights.sbomify.com/MAL-2025-139279/): Malicious code in aldebaran-grunt-cross-env-heka (npm) (malicious package)
- [MAL-2025-139278](https://insights.sbomify.com/MAL-2025-139278/): Malicious code in aldebaran-gatsby-phoenix-toml (npm) (malicious package)
- [MAL-2025-139277](https://insights.sbomify.com/MAL-2025-139277/): Malicious code in aldebaran-framework-hyperion-grunt (npm) (malicious package)
- [MAL-2025-139276](https://insights.sbomify.com/MAL-2025-139276/): Malicious code in aldebaran-fetch-node-sass-koa (npm) (malicious package)
- [MAL-2025-139275](https://insights.sbomify.com/MAL-2025-139275/): Malicious code in aldebaran-europa-rehype-mensa (npm) (malicious package)
- [MAL-2025-139274](https://insights.sbomify.com/MAL-2025-139274/): Malicious code in aldebaran-elektra-alphard-vuepress (npm) (malicious package)
- [MAL-2025-139273](https://insights.sbomify.com/MAL-2025-139273/): Malicious code in aldebaran-electron-builder-subscription-testcafe (npm) (malicious package)
- [MAL-2025-139272](https://insights.sbomify.com/MAL-2025-139272/): Malicious code in aldebaran-cressida-morgan-kinetic (npm) (malicious package)
- [MAL-2025-139271](https://insights.sbomify.com/MAL-2025-139271/): Malicious code in aldebaran-charon-pegasus-heka (npm) (malicious package)
- [MAL-2025-139270](https://insights.sbomify.com/MAL-2025-139270/): Malicious code in aldebaran-celeste-fusion-configstore (npm) (malicious package)
- [MAL-2025-13927](https://insights.sbomify.com/MAL-2025-13927/): Malicious code in a-vailable-al-bum-file-a-thing-called-the-divine-fits-zkxbj-wjiufg (npm) (malicious package)
- [MAL-2025-139269](https://insights.sbomify.com/MAL-2025-139269/): Malicious code in aldebaran-cache-repository-npm (npm) (malicious package)
- [MAL-2025-139268](https://insights.sbomify.com/MAL-2025-139268/): Malicious code in aldebaran-bootstrap-mensa-graphql (npm) (malicious package)
- [MAL-2025-139267](https://insights.sbomify.com/MAL-2025-139267/): Malicious code in aldebaran-barnard-quasar-lyra (npm) (malicious package)
- [MAL-2025-139266](https://insights.sbomify.com/MAL-2025-139266/): Malicious code in airbnb-vortex-lint-hugo (npm) (malicious package)
- [MAL-2025-139265](https://insights.sbomify.com/MAL-2025-139265/): Malicious code in airbnb-unuk-cosmos-eridanus (npm) (malicious package)
- [MAL-2025-139264](https://insights.sbomify.com/MAL-2025-139264/): Malicious code in airbnb-transform-apollo-terser-webpack-plugin (npm) (malicious package)
- [MAL-2025-139263](https://insights.sbomify.com/MAL-2025-139263/): Malicious code in airbnb-terser-deneb-terser (npm) (malicious package)
- [MAL-2025-139262](https://insights.sbomify.com/MAL-2025-139262/): Malicious code in airbnb-relay-hydra-nova (npm) (malicious package)
- [MAL-2025-139261](https://insights.sbomify.com/MAL-2025-139261/): Malicious code in airbnb-prettier-plugin-markdown-envconfig-helmet (npm) (malicious package)
- [MAL-2025-139260](https://insights.sbomify.com/MAL-2025-139260/): Malicious code in airbnb-node-sass-leda-procyon (npm) (malicious package)
- [MAL-2025-13926](https://insights.sbomify.com/MAL-2025-13926/): Malicious code in a-vailable-al-bum-file-9447-dots-and-loops-ee4hh-qjicit (npm) (malicious package)
- [MAL-2025-139259](https://insights.sbomify.com/MAL-2025-139259/): Malicious code in airbnb-node-sass-kastra-miranda (npm) (malicious package)
- [MAL-2025-139258](https://insights.sbomify.com/MAL-2025-139258/): Malicious code in airbnb-module-winston-cosmos (npm) (malicious package)
- [MAL-2025-139257](https://insights.sbomify.com/MAL-2025-139257/): Malicious code in airbnb-karma-lynx-lint-staged (npm) (malicious package)
- [MAL-2025-139256](https://insights.sbomify.com/MAL-2025-139256/): Malicious code in airbnb-janus-uninstall-mini-css-extract-plugin (npm) (malicious package)
- [MAL-2025-139255](https://insights.sbomify.com/MAL-2025-139255/): Malicious code in airbnb-geckodriver-indus-barnard (npm) (malicious package)
- [MAL-2025-139254](https://insights.sbomify.com/MAL-2025-139254/): Malicious code in airbnb-gacrux-concurrently-betelgeuse (npm) (malicious package)
- [MAL-2025-139253](https://insights.sbomify.com/MAL-2025-139253/): Malicious code in airbnb-fork-mutation-fusion (npm) (malicious package)
- [MAL-2025-139252](https://insights.sbomify.com/MAL-2025-139252/): Malicious code in airbnb-colors-sync-hapi (npm) (malicious package)
- [MAL-2025-139251](https://insights.sbomify.com/MAL-2025-139251/): Malicious code in airbnb-chariklo-elara-phenomic (npm) (malicious package)
- [MAL-2025-139250](https://insights.sbomify.com/MAL-2025-139250/): Malicious code in airbnb-centaurus-command-dynamo (npm) (malicious package)
- [MAL-2025-13925](https://insights.sbomify.com/MAL-2025-13925/): Malicious code in a-vailable-al-bum-file-86031-the-multiplication-table-gooza-naepif (npm) (malicious package)
- [MAL-2025-139249](https://insights.sbomify.com/MAL-2025-139249/): Malicious code in airbnb-capella-lint-pulsar (npm) (malicious package)
- [MAL-2025-139248](https://insights.sbomify.com/MAL-2025-139248/): Malicious code in airbnb-antares-terser-webpack-plugin-oauth (npm) (malicious package)
- [MAL-2025-139247](https://insights.sbomify.com/MAL-2025-139247/): Malicious code in aether-yaml-xo-xo (npm) (malicious package)
- [MAL-2025-139246](https://insights.sbomify.com/MAL-2025-139246/): Malicious code in aether-xenos-xenon-elektra (npm) (malicious package)
- [MAL-2025-139245](https://insights.sbomify.com/MAL-2025-139245/): Malicious code in aether-vulcan-nightwatch-release-it (npm) (malicious package)
- [MAL-2025-139244](https://insights.sbomify.com/MAL-2025-139244/): Malicious code in aether-transform-capella-warp (npm) (malicious package)
- [MAL-2025-139243](https://insights.sbomify.com/MAL-2025-139243/): Malicious code in aether-tailwindcss-wolf-gatsby (npm) (malicious package)
- [MAL-2025-139242](https://insights.sbomify.com/MAL-2025-139242/): Malicious code in aether-sqlite-meissa-quasar (npm) (malicious package)
- [MAL-2025-139241](https://insights.sbomify.com/MAL-2025-139241/): Malicious code in aether-redis-eris-slidev (npm) (malicious package)
- [MAL-2025-139240](https://insights.sbomify.com/MAL-2025-139240/): Malicious code in aether-promise-airbnb-procyon (npm) (malicious package)
- [MAL-2025-13924](https://insights.sbomify.com/MAL-2025-13924/): Malicious code in a-vailable-al-bum-file-32170-electro-glide-in-blue-fzp30-hsjmrf (npm) (malicious package)
- [MAL-2025-139239](https://insights.sbomify.com/MAL-2025-139239/): Malicious code in aether-procyon-corvus-phoebe (npm) (malicious package)
- [MAL-2025-139238](https://insights.sbomify.com/MAL-2025-139238/): Malicious code in aether-prettier-stylelint-umbriel-rollup-plugin (npm) (malicious package)
- [MAL-2025-139237](https://insights.sbomify.com/MAL-2025-139237/): Malicious code in aether-playwright-wolf-child-process (npm) (malicious package)
- [MAL-2025-139236](https://insights.sbomify.com/MAL-2025-139236/): Malicious code in aether-parcel-equinox-cordelia (npm) (malicious package)
- [MAL-2025-139235](https://insights.sbomify.com/MAL-2025-139235/): Malicious code in aether-nebula-sequelize-readable (npm) (malicious package)
- [MAL-2025-139234](https://insights.sbomify.com/MAL-2025-139234/): Malicious code in aether-mysql-eslint-config-html-webpack-plugin (npm) (malicious package)
- [MAL-2025-139233](https://insights.sbomify.com/MAL-2025-139233/): Malicious code in aether-link-request-promise (npm) (malicious package)
- [MAL-2025-139232](https://insights.sbomify.com/MAL-2025-139232/): Malicious code in aether-io-quasar-oberon (npm) (malicious package)
- [MAL-2025-139231](https://insights.sbomify.com/MAL-2025-139231/): Malicious code in aether-fomalhaut-server-centauri (npm) (malicious package)
- [MAL-2025-139230](https://insights.sbomify.com/MAL-2025-139230/): Malicious code in aether-deneb-upgrade-quantum (npm) (malicious package)
- [MAL-2025-13923](https://insights.sbomify.com/MAL-2025-13923/): Malicious code in a-vailable-al-bum-file-26451-e-a-9vudr-dkjlzi (npm) (malicious package)
- [MAL-2025-139229](https://insights.sbomify.com/MAL-2025-139229/): Malicious code in aether-cygnus-nodejs-got (npm) (malicious package)
- [MAL-2025-139228](https://insights.sbomify.com/MAL-2025-139228/): Malicious code in aether-cli-ariel-spawn (npm) (malicious package)
- [MAL-2025-139227](https://insights.sbomify.com/MAL-2025-139227/): Malicious code in aether-cache-telesto-janus (npm) (malicious package)
- [MAL-2025-139226](https://insights.sbomify.com/MAL-2025-139226/): Malicious code in aether-build-rest-epimetheus (npm) (malicious package)
- [MAL-2025-139225](https://insights.sbomify.com/MAL-2025-139225/): Malicious code in aether-buffer-uglify-js-pulsar (npm) (malicious package)
- [MAL-2025-139224](https://insights.sbomify.com/MAL-2025-139224/): Malicious code in aether-avior-enceladus-concurrently (npm) (malicious package)
- [MAL-2025-139223](https://insights.sbomify.com/MAL-2025-139223/): Malicious code in aether-antares-nuxtjs-got (npm) (malicious package)
- [MAL-2025-139222](https://insights.sbomify.com/MAL-2025-139222/): Malicious code in aether-achernar-comet-pyxis (npm) (malicious package)
- [MAL-2025-139221](https://insights.sbomify.com/MAL-2025-139221/): Malicious code in adonis-xenos-got-gacrux (npm) (malicious package)
- [MAL-2025-139220](https://insights.sbomify.com/MAL-2025-139220/): Malicious code in adonis-wasat-aquarius-perseus (npm) (malicious package)
- [MAL-2025-13922](https://insights.sbomify.com/MAL-2025-13922/): Malicious code in a-vailable-al-bum-file-21779-stoosh-ejqig-iuyzvg (npm) (malicious package)
- [MAL-2025-139219](https://insights.sbomify.com/MAL-2025-139219/): Malicious code in adonis-virgo-cordelia-arcturus (npm) (malicious package)
- [MAL-2025-139218](https://insights.sbomify.com/MAL-2025-139218/): Malicious code in adonis-tool-optimize-css-assets-webpack-plugin-spectron (npm) (malicious package)
- [MAL-2025-139217](https://insights.sbomify.com/MAL-2025-139217/): Malicious code in adonis-sass-loader-eslint-config-convict (npm) (malicious package)
- [MAL-2025-139216](https://insights.sbomify.com/MAL-2025-139216/): Malicious code in adonis-rest-stream-non-blocking (npm) (malicious package)
- [MAL-2025-139215](https://insights.sbomify.com/MAL-2025-139215/): Malicious code in adonis-polaris-umbriel-wolf (npm) (malicious package)
- [MAL-2025-139214](https://insights.sbomify.com/MAL-2025-139214/): Malicious code in adonis-norma-install-selenium (npm) (malicious package)
- [MAL-2025-139213](https://insights.sbomify.com/MAL-2025-139213/): Malicious code in adonis-leda-lynx-vuepress (npm) (malicious package)
- [MAL-2025-139212](https://insights.sbomify.com/MAL-2025-139212/): Malicious code in adonis-inquirer-webdriver-mocha-publish (npm) (malicious package)
- [MAL-2025-139211](https://insights.sbomify.com/MAL-2025-139211/): Malicious code in adonis-gulp-ini-soap (npm) (malicious package)
- [MAL-2025-139210](https://insights.sbomify.com/MAL-2025-139210/): Malicious code in adonis-bulma-metalsmith-triton (npm) (malicious package)
- [MAL-2025-13921](https://insights.sbomify.com/MAL-2025-13921/): Malicious code in a-vailable-al-bum-file-214683-i-love-the-new-sky-mdctg-bpldzg (npm) (malicious package)
- [MAL-2025-139209](https://insights.sbomify.com/MAL-2025-139209/): Malicious code in adonis-barnard-commitlint-config-angular-tool (npm) (malicious package)
- [MAL-2025-139208](https://insights.sbomify.com/MAL-2025-139208/): Malicious code in adonis-astro-phoenix-karma (npm) (malicious package)
- [MAL-2025-139207](https://insights.sbomify.com/MAL-2025-139207/): Malicious code in adonis-apex-docusaurus-apollo (npm) (malicious package)
- [MAL-2025-139206](https://insights.sbomify.com/MAL-2025-139206/): Malicious code in adonis-antd-delphinus-xenon (npm) (malicious package)
- [MAL-2025-139205](https://insights.sbomify.com/MAL-2025-139205/): Malicious code in achernar-stop-octans-public (npm) (malicious package)
- [MAL-2025-139204](https://insights.sbomify.com/MAL-2025-139204/): Malicious code in achernar-spinner-phoebe-callback (npm) (malicious package)
- [MAL-2025-139203](https://insights.sbomify.com/MAL-2025-139203/): Malicious code in achernar-rimraf-neptune-cassini (npm) (malicious package)
- [MAL-2025-139202](https://insights.sbomify.com/MAL-2025-139202/): Malicious code in achernar-morgan-gulp-octans (npm) (malicious package)
- [MAL-2025-139201](https://insights.sbomify.com/MAL-2025-139201/): Malicious code in achernar-magellan-server-auth0 (npm) (malicious package)
- [MAL-2025-139200](https://insights.sbomify.com/MAL-2025-139200/): Malicious code in achernar-hyperion-magellan-helios (npm) (malicious package)
- [MAL-2025-13920](https://insights.sbomify.com/MAL-2025-13920/): Malicious code in a-vailable-al-bum-file-212807-good-souls-better-angels-ydvzu-zkfgom (npm) (malicious package)
- [MAL-2025-1392](https://insights.sbomify.com/MAL-2025-1392/): Malicious code in bifinance (npm) (malicious package)
- [MAL-2025-139199](https://insights.sbomify.com/MAL-2025-139199/): Malicious code in achernar-hexo-betelgeuse-shelljs (npm) (malicious package)
- [MAL-2025-139198](https://insights.sbomify.com/MAL-2025-139198/): Malicious code in achernar-halley-dotenv-safe-foundation (npm) (malicious package)
- [MAL-2025-139197](https://insights.sbomify.com/MAL-2025-139197/): Malicious code in achernar-geckodriver-element-ui-shelljs (npm) (malicious package)
- [MAL-2025-139196](https://insights.sbomify.com/MAL-2025-139196/): Malicious code in achernar-eris-halley-wolf (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1496/