# Vulnerabilities published in 2025


- [MAL-2025-139195](https://insights.sbomify.com/MAL-2025-139195/): Malicious code in achernar-draco-redis-winston (npm) (malicious package)
- [MAL-2025-139194](https://insights.sbomify.com/MAL-2025-139194/): Malicious code in achernar-cluster-wasat-achernar (npm) (malicious package)
- [MAL-2025-139193](https://insights.sbomify.com/MAL-2025-139193/): Malicious code in achernar-charon-triton-stream (npm) (malicious package)
- [MAL-2025-139192](https://insights.sbomify.com/MAL-2025-139192/): Malicious code in achernar-cassini-antares-meissa (npm) (malicious package)
- [MAL-2025-139191](https://insights.sbomify.com/MAL-2025-139191/): Malicious code in acamar-xanthus-apollo-solis (npm) (malicious package)
- [MAL-2025-139190](https://insights.sbomify.com/MAL-2025-139190/): Malicious code in acamar-vuepress-ursa-sirius (npm) (malicious package)
- [MAL-2025-13919](https://insights.sbomify.com/MAL-2025-13919/): Malicious code in a-vailable-al-bum-file-211195-the-caretaker-qpj4e-vojhua (npm) (malicious package)
- [MAL-2025-139189](https://insights.sbomify.com/MAL-2025-139189/): Malicious code in acamar-update-postgres-standard (npm) (malicious package)
- [MAL-2025-139188](https://insights.sbomify.com/MAL-2025-139188/): Malicious code in acamar-toml-hexo-algol (npm) (malicious package)
- [MAL-2025-139187](https://insights.sbomify.com/MAL-2025-139187/): Malicious code in acamar-sirius-janus-commitlint (npm) (malicious package)
- [MAL-2025-139186](https://insights.sbomify.com/MAL-2025-139186/): Malicious code in acamar-quark-native-chakra-ui (npm) (malicious package)
- [MAL-2025-139185](https://insights.sbomify.com/MAL-2025-139185/): Malicious code in acamar-postcss-eleventy-deneb (npm) (malicious package)
- [MAL-2025-139184](https://insights.sbomify.com/MAL-2025-139184/): Malicious code in acamar-pm2-deimos-canopus (npm) (malicious package)
- [MAL-2025-139183](https://insights.sbomify.com/MAL-2025-139183/): Malicious code in acamar-perseus-rehype-iota (npm) (malicious package)
- [MAL-2025-139182](https://insights.sbomify.com/MAL-2025-139182/): Malicious code in acamar-perseus-leda-cors (npm) (malicious package)
- [MAL-2025-139181](https://insights.sbomify.com/MAL-2025-139181/): Malicious code in acamar-ora-vega-triton (npm) (malicious package)
- [MAL-2025-139180](https://insights.sbomify.com/MAL-2025-139180/): Malicious code in acamar-npm-fusion-express (npm) (malicious package)
- [MAL-2025-13918](https://insights.sbomify.com/MAL-2025-13918/): Malicious code in a-vailable-al-bum-file-2016-53720-my-best-human-face-ut6vi-wmlvvn (npm) (malicious package)
- [MAL-2025-139179](https://insights.sbomify.com/MAL-2025-139179/): Malicious code in acamar-nightmare-ophiuchus-postcss (npm) (malicious package)
- [MAL-2025-139178](https://insights.sbomify.com/MAL-2025-139178/): Malicious code in acamar-morgan-janus-server (npm) (malicious package)
- [MAL-2025-139177](https://insights.sbomify.com/MAL-2025-139177/): Malicious code in acamar-link-backend-miranda (npm) (malicious package)
- [MAL-2025-139176](https://insights.sbomify.com/MAL-2025-139176/): Malicious code in acamar-jasmine-phoebe-charon (npm) (malicious package)
- [MAL-2025-139175](https://insights.sbomify.com/MAL-2025-139175/): Malicious code in acamar-helios-redis-chakra-ui (npm) (malicious package)
- [MAL-2025-139174](https://insights.sbomify.com/MAL-2025-139174/): Malicious code in acamar-gulp-forever-solis (npm) (malicious package)
- [MAL-2025-139173](https://insights.sbomify.com/MAL-2025-139173/): Malicious code in acamar-dagda-koa-quark (npm) (malicious package)
- [MAL-2025-139172](https://insights.sbomify.com/MAL-2025-139172/): Malicious code in acamar-dagda-canopus-xanthus (npm) (malicious package)
- [MAL-2025-139171](https://insights.sbomify.com/MAL-2025-139171/): Malicious code in acamar-cygnus-hyperion-mongodb (npm) (malicious package)
- [MAL-2025-139170](https://insights.sbomify.com/MAL-2025-139170/): Malicious code in acamar-css-loader-style-loader-readable (npm) (malicious package)
- [MAL-2025-13917](https://insights.sbomify.com/MAL-2025-13917/): Malicious code in a-vailable-al-bum-file-192011-from-this-place-nx95v-minwrk (npm) (malicious package)
- [MAL-2025-139169](https://insights.sbomify.com/MAL-2025-139169/): Malicious code in acamar-cosmos-start-request (npm) (malicious package)
- [MAL-2025-139168](https://insights.sbomify.com/MAL-2025-139168/): Malicious code in acamar-cordelia-hyperion-rest (npm) (malicious package)
- [MAL-2025-139167](https://insights.sbomify.com/MAL-2025-139167/): Malicious code in acamar-chai-command-inquirer (npm) (malicious package)
- [MAL-2025-139166](https://insights.sbomify.com/MAL-2025-139166/): Malicious code in acamar-centauri-izar-spica (npm) (malicious package)
- [MAL-2025-139165](https://insights.sbomify.com/MAL-2025-139165/): Malicious code in acamar-canopus-mui-dependencies (npm) (malicious package)
- [MAL-2025-139164](https://insights.sbomify.com/MAL-2025-139164/): Malicious code in acamar-arcturus-procyon-csv (npm) (malicious package)
- [MAL-2025-139163](https://insights.sbomify.com/MAL-2025-139163/): Malicious code in acamar-antares-prompts-solis (npm) (malicious package)
- [MAL-2025-139162](https://insights.sbomify.com/MAL-2025-139162/): Malicious code in acamar-aether-bunyan-postgres (npm) (malicious package)
- [MAL-2025-139161](https://insights.sbomify.com/MAL-2025-139161/): Malicious code in vivid_finch_z3n (npm) (malicious package)
- [MAL-2025-139160](https://insights.sbomify.com/MAL-2025-139160/): Malicious code in toxic_falcon_z3n (npm) (malicious package)
- [MAL-2025-13916](https://insights.sbomify.com/MAL-2025-13916/): Malicious code in a-vailable-al-bum-file-185797-likewise-tc2je-eosyti (npm) (malicious package)
- [MAL-2025-139159](https://insights.sbomify.com/MAL-2025-139159/): Malicious code in testy_caterpillar_z3n (npm) (malicious package)
- [MAL-2025-139158](https://insights.sbomify.com/MAL-2025-139158/): Malicious code in tasty_ostrich_z3n (npm) (malicious package)
- [MAL-2025-139157](https://insights.sbomify.com/MAL-2025-139157/): Malicious code in solar_hummingbird_z3n (npm) (malicious package)
- [MAL-2025-139156](https://insights.sbomify.com/MAL-2025-139156/): Malicious code in significant_dragonfly_z3n (npm) (malicious package)
- [MAL-2025-139155](https://insights.sbomify.com/MAL-2025-139155/): Malicious code in shaky_egret_z3n (npm) (malicious package)
- [MAL-2025-139154](https://insights.sbomify.com/MAL-2025-139154/): Malicious code in sensitive_gerbil_z3n (npm) (malicious package)
- [MAL-2025-139153](https://insights.sbomify.com/MAL-2025-139153/): Malicious code in rough_wildebeest_z3n (npm) (malicious package)
- [MAL-2025-139152](https://insights.sbomify.com/MAL-2025-139152/): Malicious code in rear_quelea_z3n (npm) (malicious package)
- [MAL-2025-139151](https://insights.sbomify.com/MAL-2025-139151/): Malicious code in quixotic_yak_z3n (npm) (malicious package)
- [MAL-2025-139150](https://insights.sbomify.com/MAL-2025-139150/): Malicious code in odd_moth_z3n (npm) (malicious package)
- [MAL-2025-13915](https://insights.sbomify.com/MAL-2025-13915/): Malicious code in a-vailable-al-bum-file-13575-forts-fsk2p-gmeawq (npm) (malicious package)
- [MAL-2025-139149](https://insights.sbomify.com/MAL-2025-139149/): Malicious code in neighbouring_hedgehog_z3n (npm) (malicious package)
- [MAL-2025-139148](https://insights.sbomify.com/MAL-2025-139148/): Malicious code in near_owl_z3n (npm) (malicious package)
- [MAL-2025-139147](https://insights.sbomify.com/MAL-2025-139147/): Malicious code in narrow_goose_z3n (npm) (malicious package)
- [MAL-2025-139146](https://insights.sbomify.com/MAL-2025-139146/): Malicious code in mixed_bear_z3n (npm) (malicious package)
- [MAL-2025-139145](https://insights.sbomify.com/MAL-2025-139145/): Malicious code in mental_mite_z3n (npm) (malicious package)
- [MAL-2025-139144](https://insights.sbomify.com/MAL-2025-139144/): Malicious code in lavahala (npm) (malicious package)
- [MAL-2025-139143](https://insights.sbomify.com/MAL-2025-139143/): Malicious code in institutional_guineafowl_z3n (npm) (malicious package)
- [MAL-2025-139142](https://insights.sbomify.com/MAL-2025-139142/): Malicious code in improved_mockingbird_z3n (npm) (malicious package)
- [MAL-2025-139141](https://insights.sbomify.com/MAL-2025-139141/): Malicious code in horizontal_xerinae_z3n (npm) (malicious package)
- [MAL-2025-139140](https://insights.sbomify.com/MAL-2025-139140/): Malicious code in happy_swan_z3n (npm) (malicious package)
- [MAL-2025-13914](https://insights.sbomify.com/MAL-2025-13914/): Malicious code in a-simple-cache (npm) (malicious package)
- [MAL-2025-139139](https://insights.sbomify.com/MAL-2025-139139/): Malicious code in gradual_rhinoceros_z3n (npm) (malicious package)
- [MAL-2025-139138](https://insights.sbomify.com/MAL-2025-139138/): Malicious code in governing_prawn_z3n (npm) (malicious package)
- [MAL-2025-139137](https://insights.sbomify.com/MAL-2025-139137/): Malicious code in excited_silverfish_z3n (npm) (malicious package)
- [MAL-2025-139136](https://insights.sbomify.com/MAL-2025-139136/): Malicious code in embarrassing_piranha_z3n (npm) (malicious package)
- [MAL-2025-139135](https://insights.sbomify.com/MAL-2025-139135/): Malicious code in effective_ptarmigan_z3n (npm) (malicious package)
- [MAL-2025-139134](https://insights.sbomify.com/MAL-2025-139134/): Malicious code in distant_chickadee_z3n (npm) (malicious package)
- [MAL-2025-139133](https://insights.sbomify.com/MAL-2025-139133/): Malicious code in breezy_bass_z3n (npm) (malicious package)
- [MAL-2025-139132](https://insights.sbomify.com/MAL-2025-139132/): Malicious code in zestful-gold-falcon (npm) (malicious package)
- [MAL-2025-139131](https://insights.sbomify.com/MAL-2025-139131/): Malicious code in yucky-jade-stoat (npm) (malicious package)
- [MAL-2025-139130](https://insights.sbomify.com/MAL-2025-139130/): Malicious code in ytterbic-azure-muskox (npm) (malicious package)
- [MAL-2025-13913](https://insights.sbomify.com/MAL-2025-13913/): Malicious code in a-lbum-do-wnload-avai-lable-file-nevermind-1-6utup-ncqpuh (npm) (malicious package)
- [MAL-2025-139129](https://insights.sbomify.com/MAL-2025-139129/): Malicious code in yielding-white-vicuna (npm) (malicious package)
- [MAL-2025-139128](https://insights.sbomify.com/MAL-2025-139128/): Malicious code in yettapetty (npm) (malicious package)
- [MAL-2025-139127](https://insights.sbomify.com/MAL-2025-139127/): Malicious code in yelling-peach-wildcat (npm) (malicious package)
- [MAL-2025-139126](https://insights.sbomify.com/MAL-2025-139126/): Malicious code in yeasty-tomato-butterfly (npm) (malicious package)
- [MAL-2025-139125](https://insights.sbomify.com/MAL-2025-139125/): Malicious code in yeasty-beige-kite (npm) (malicious package)
- [MAL-2025-139124](https://insights.sbomify.com/MAL-2025-139124/): Malicious code in yearning-azure-aardwolf (npm) (malicious package)
- [MAL-2025-139123](https://insights.sbomify.com/MAL-2025-139123/): Malicious code in yawning-tan-whitefish (npm) (malicious package)
- [MAL-2025-139122](https://insights.sbomify.com/MAL-2025-139122/): Malicious code in yappy-silver-warbler (npm) (malicious package)
- [MAL-2025-139121](https://insights.sbomify.com/MAL-2025-139121/): Malicious code in yabbering-brown-woodpecker (npm) (malicious package)
- [MAL-2025-139120](https://insights.sbomify.com/MAL-2025-139120/): Malicious code in xenophobic-moccasin-barnacle (npm) (malicious package)
- [MAL-2025-13912](https://insights.sbomify.com/MAL-2025-13912/): Malicious code in a-lbum-do-wnload-avai-lable-file-8408-voices-of-animals-and-men-oam0j-dsqkip (npm) (malicious package)
- [MAL-2025-139119](https://insights.sbomify.com/MAL-2025-139119/): Malicious code in xenacious-brown-hyena (npm) (malicious package)
- [MAL-2025-139118](https://insights.sbomify.com/MAL-2025-139118/): Malicious code in worthy-jade-crow (npm) (malicious package)
- [MAL-2025-139117](https://insights.sbomify.com/MAL-2025-139117/): Malicious code in worldwide-violet-impala (npm) (malicious package)
- [MAL-2025-139116](https://insights.sbomify.com/MAL-2025-139116/): Malicious code in worldwide-ivory-harrier (npm) (malicious package)
- [MAL-2025-139115](https://insights.sbomify.com/MAL-2025-139115/): Malicious code in wooden-teal-gayal (npm) (malicious package)
- [MAL-2025-139114](https://insights.sbomify.com/MAL-2025-139114/): Malicious code in wispy-tan-cod (npm) (malicious package)
- [MAL-2025-139113](https://insights.sbomify.com/MAL-2025-139113/): Malicious code in wily-emerald-chicken (npm) (malicious package)
- [MAL-2025-139112](https://insights.sbomify.com/MAL-2025-139112/): Malicious code in wicked-red-owl (npm) (malicious package)
- [MAL-2025-139111](https://insights.sbomify.com/MAL-2025-139111/): Malicious code in well-coffee-goose (npm) (malicious package)
- [MAL-2025-139110](https://insights.sbomify.com/MAL-2025-139110/): Malicious code in weekly-salmon-fox (npm) (malicious package)
- [MAL-2025-13911](https://insights.sbomify.com/MAL-2025-13911/): Malicious code in a-lbum-do-wnload-avai-lable-file-467383-bronco-nxky8-uhnoxf (npm) (malicious package)
- [MAL-2025-139109](https://insights.sbomify.com/MAL-2025-139109/): Malicious code in weary-gold-quail (npm) (malicious package)
- [MAL-2025-139108](https://insights.sbomify.com/MAL-2025-139108/): Malicious code in weary-bronze-barracuda (npm) (malicious package)
- [MAL-2025-139107](https://insights.sbomify.com/MAL-2025-139107/): Malicious code in vulnerable-plum-pigeon (npm) (malicious package)
- [MAL-2025-139106](https://insights.sbomify.com/MAL-2025-139106/): Malicious code in voiceless-white-donkey (npm) (malicious package)
- [MAL-2025-139105](https://insights.sbomify.com/MAL-2025-139105/): Malicious code in voiceless-gold-ferret (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1497/