# Vulnerabilities published in 2025 - [MAL-2025-45551](https://insights.sbomify.com/MAL-2025-45551/): Malicious code in phoenix-pipe-whitedwarf-meissa (npm) (malicious package) - [MAL-2025-45550](https://insights.sbomify.com/MAL-2025-45550/): Malicious code in phoenix-cygnus-forever-fermion (npm) (malicious package) - [MAL-2025-4555](https://insights.sbomify.com/MAL-2025-4555/): Malicious code in dependency-conftest (npm) (malicious package) - [MAL-2025-45549](https://insights.sbomify.com/MAL-2025-45549/): Malicious code in phoenix-carina-pipe-dagda (npm) (malicious package) - [MAL-2025-45548](https://insights.sbomify.com/MAL-2025-45548/): Malicious code in phoebe-phylogenetics-vuepress-kaus (npm) (malicious package) - [MAL-2025-45547](https://insights.sbomify.com/MAL-2025-45547/): Malicious code in phoebe-hermes-hapi-neutrino (npm) (malicious package) - [MAL-2025-45546](https://insights.sbomify.com/MAL-2025-45546/): Malicious code in phenomic-sadr-envconfig-zenobia (npm) (malicious package) - [MAL-2025-45545](https://insights.sbomify.com/MAL-2025-45545/): Malicious code in petrology-loop-ganymede-transform (npm) (malicious package) - [MAL-2025-45544](https://insights.sbomify.com/MAL-2025-45544/): Malicious code in perturbation-technocracy-lepton-carina (npm) (malicious package) - [MAL-2025-45543](https://insights.sbomify.com/MAL-2025-45543/): Malicious code in perturbation-magellan-pulsar-zenobia (npm) (malicious package) - [MAL-2025-45542](https://insights.sbomify.com/MAL-2025-45542/): Malicious code in perseus-postgres-jwt-config (npm) (malicious package) - [MAL-2025-45541](https://insights.sbomify.com/MAL-2025-45541/): Malicious code in perseus-cladistics-ophiuchus-fusion (npm) (malicious package) - [MAL-2025-45540](https://insights.sbomify.com/MAL-2025-45540/): Malicious code in perseus-changelog-await-postcss (npm) (malicious package) - [MAL-2025-4554](https://insights.sbomify.com/MAL-2025-4554/): Malicious code in cspotcode (npm) (malicious package) - [MAL-2025-45539](https://insights.sbomify.com/MAL-2025-45539/): Malicious code in perfect-before-found (npm) (malicious package) - [MAL-2025-45538](https://insights.sbomify.com/MAL-2025-45538/): Malicious code in peony-spruce-fgt180-project (npm) (malicious package) - [MAL-2025-45537](https://insights.sbomify.com/MAL-2025-45537/): Malicious code in peony-koala-jmv647-project (npm) (malicious package) - [MAL-2025-45536](https://insights.sbomify.com/MAL-2025-45536/): Malicious code in penguin-yellow-wne519-project (npm) (malicious package) - [MAL-2025-45535](https://insights.sbomify.com/MAL-2025-45535/): Malicious code in pencil-perfect-baseball (npm) (malicious package) - [MAL-2025-45534](https://insights.sbomify.com/MAL-2025-45534/): Malicious code in pen-fourth-opposite (npm) (malicious package) - [MAL-2025-45533](https://insights.sbomify.com/MAL-2025-45533/): Malicious code in pegasus-npm-transport-ultra (npm) (malicious package) - [MAL-2025-45532](https://insights.sbomify.com/MAL-2025-45532/): Malicious code in pegasus-meissa-metalsmith-mantle (npm) (malicious package) - [MAL-2025-45531](https://insights.sbomify.com/MAL-2025-45531/): Malicious code in peerinstruction_888 (npm) (malicious package) - [MAL-2025-45530](https://insights.sbomify.com/MAL-2025-45530/): Malicious code in peerinstruction (npm) (malicious package) - [MAL-2025-4553](https://insights.sbomify.com/MAL-2025-4553/): Malicious code in csp-bypass-poc (npm) (malicious package) - [MAL-2025-45529](https://insights.sbomify.com/MAL-2025-45529/): Malicious code in paystack-music (npm) (malicious package) - [MAL-2025-45528](https://insights.sbomify.com/MAL-2025-45528/): Malicious code in pavo-nashira-commitlint-loop (npm) (malicious package) - [MAL-2025-45527](https://insights.sbomify.com/MAL-2025-45527/): Malicious code in pavo-juno-thermochronology-remark (npm) (malicious package) - [MAL-2025-45526](https://insights.sbomify.com/MAL-2025-45526/): Malicious code in pavo-figures-enif-astrochemistry (npm) (malicious package) - [MAL-2025-45525](https://insights.sbomify.com/MAL-2025-45525/): Malicious code in patria-tumis33-kyuki (npm) (malicious package) - [MAL-2025-45524](https://insights.sbomify.com/MAL-2025-45524/): Malicious code in patria-tongseng77-breki (npm) (malicious package) - [MAL-2025-45523](https://insights.sbomify.com/MAL-2025-45523/): Malicious code in patria-tongseng54-breki (npm) (malicious package) - [MAL-2025-45522](https://insights.sbomify.com/MAL-2025-45522/): Malicious code in patria-toge44-breki (npm) (malicious package) - [MAL-2025-45521](https://insights.sbomify.com/MAL-2025-45521/): Malicious code in patria-teh53-breki (npm) (malicious package) - [MAL-2025-45520](https://insights.sbomify.com/MAL-2025-45520/): Malicious code in patria-sate35-breki (npm) (malicious package) - [MAL-2025-4552](https://insights.sbomify.com/MAL-2025-4552/): Malicious code in ccv-token-manager (npm) (malicious package) - [MAL-2025-45519](https://insights.sbomify.com/MAL-2025-45519/): Malicious code in patria-sambel58-kyuki (npm) (malicious package) - [MAL-2025-45518](https://insights.sbomify.com/MAL-2025-45518/): Malicious code in patria-rangi14-breki (npm) (malicious package) - [MAL-2025-45517](https://insights.sbomify.com/MAL-2025-45517/): Malicious code in patria-mieaceh97-breki (npm) (malicious package) - [MAL-2025-45516](https://insights.sbomify.com/MAL-2025-45516/): Malicious code in patria-mendoan37-kyuki (npm) (malicious package) - [MAL-2025-45515](https://insights.sbomify.com/MAL-2025-45515/): Malicious code in patria-mangut45-kyuki (npm) (malicious package) - [MAL-2025-45514](https://insights.sbomify.com/MAL-2025-45514/): Malicious code in patria-kue91-breki (npm) (malicious package) - [MAL-2025-45513](https://insights.sbomify.com/MAL-2025-45513/): Malicious code in patria-jengkol19-breki (npm) (malicious package) - [MAL-2025-45512](https://insights.sbomify.com/MAL-2025-45512/): Malicious code in patria-enting33-breki (npm) (malicious package) - [MAL-2025-45511](https://insights.sbomify.com/MAL-2025-45511/): Malicious code in patria-donat41-kyuki (npm) (malicious package) - [MAL-2025-45510](https://insights.sbomify.com/MAL-2025-45510/): Malicious code in patria-bubur96-kyuki (npm) (malicious package) - [MAL-2025-4551](https://insights.sbomify.com/MAL-2025-4551/): Malicious code in aspirejavascript-vite (npm) (malicious package) - [MAL-2025-45509](https://insights.sbomify.com/MAL-2025-45509/): Malicious code in passport-pino-public-telesto (npm) (malicious package) - [MAL-2025-45508](https://insights.sbomify.com/MAL-2025-45508/): Malicious code in parsec-sociobiology-dotenv-safe-neutronstar (npm) (malicious package) - [MAL-2025-45507](https://insights.sbomify.com/MAL-2025-45507/): Malicious code in parsec-eris-enceladus-metabolomics (npm) (malicious package) - [MAL-2025-45506](https://insights.sbomify.com/MAL-2025-45506/): Malicious code in parse-logger (npm) (malicious package) - [MAL-2025-45505](https://insights.sbomify.com/MAL-2025-45505/): Malicious code in parcel-stop-paleontology-hydrogeology (npm) (malicious package) - [MAL-2025-45504](https://insights.sbomify.com/MAL-2025-45504/): Malicious code in paper-dropdown-menu (npm) (malicious package) - [MAL-2025-45503](https://insights.sbomify.com/MAL-2025-45503/): Malicious code in pandas-cookbook-code-notes (npm) (malicious package) - [MAL-2025-45502](https://insights.sbomify.com/MAL-2025-45502/): Malicious code in palynology-galaxy-fusion-playwright (npm) (malicious package) - [MAL-2025-45501](https://insights.sbomify.com/MAL-2025-45501/): Malicious code in paleomagnetism-betelgeuse-optimize-css-assets-webpack-plugin-koa (npm) (malicious package) - [MAL-2025-45500](https://insights.sbomify.com/MAL-2025-45500/): Malicious code in paleoclimatology-selenium-neptunology-uglify-js (npm) (malicious package) - [MAL-2025-4550](https://insights.sbomify.com/MAL-2025-4550/): Malicious code in angular-tealium (npm) (malicious package) - [MAL-2025-455](https://insights.sbomify.com/MAL-2025-455/): Malicious code in epicagames-utils (npm) (malicious package) - [MAL-2025-45499](https://insights.sbomify.com/MAL-2025-45499/): Malicious code in paleoceanography-aurora-carina-repository (npm) (malicious package) - [MAL-2025-45498](https://insights.sbomify.com/MAL-2025-45498/): Malicious code in paleobotany-multiverse-jasmine-antd (npm) (malicious package) - [MAL-2025-45497](https://insights.sbomify.com/MAL-2025-45497/): Malicious code in pahtkit-wasm (npm) (malicious package) - [MAL-2025-45496](https://insights.sbomify.com/MAL-2025-45496/): Malicious code in overiq-zh (npm) (malicious package) - [MAL-2025-45495](https://insights.sbomify.com/MAL-2025-45495/): Malicious code in outercore-oberon-library-jwt (npm) (malicious package) - [MAL-2025-45494](https://insights.sbomify.com/MAL-2025-45494/): Malicious code in outercore-blitz-upgrade-canopus (npm) (malicious package) - [MAL-2025-45493](https://insights.sbomify.com/MAL-2025-45493/): Malicious code in oscillation-slides-stratigraphy-sirius (npm) (malicious package) - [MAL-2025-45492](https://insights.sbomify.com/MAL-2025-45492/): Malicious code in oscillation-prettier-plugin-markdown-joviology-cluster (npm) (malicious package) - [MAL-2025-45491](https://insights.sbomify.com/MAL-2025-45491/): Malicious code in oscillation-exoplanet-areology-impulse (npm) (malicious package) - [MAL-2025-45490](https://insights.sbomify.com/MAL-2025-45490/): Malicious code in oscar-november-xigua-mkwas (npm) (malicious package) - [MAL-2025-4549](https://insights.sbomify.com/MAL-2025-4549/): Malicious code in @stepstone-genesis/components (npm) (malicious package) - [MAL-2025-45489](https://insights.sbomify.com/MAL-2025-45489/): Malicious code in oscar-india-mango-yakqf (npm) (malicious package) - [MAL-2025-45488](https://insights.sbomify.com/MAL-2025-45488/): Malicious code in oscar-hotel-date-gwstk (npm) (malicious package) - [MAL-2025-45487](https://insights.sbomify.com/MAL-2025-45487/): Malicious code in oscar-cherry-quebec-sojlo (npm) (malicious package) - [MAL-2025-45486](https://insights.sbomify.com/MAL-2025-45486/): Malicious code in oscar-banana-orange-akixx (npm) (malicious package) - [MAL-2025-45485](https://insights.sbomify.com/MAL-2025-45485/): Malicious code in orogeny-norma-supernova-cordelia (npm) (malicious package) - [MAL-2025-45484](https://insights.sbomify.com/MAL-2025-45484/): Malicious code in original-invented-blew (npm) (malicious package) - [MAL-2025-45483](https://insights.sbomify.com/MAL-2025-45483/): Malicious code in orchid-pinnacle-hxe645-project (npm) (malicious package) - [MAL-2025-45482](https://insights.sbomify.com/MAL-2025-45482/): Malicious code in orbit-miranda-rehype-phylogenetics (npm) (malicious package) - [MAL-2025-45481](https://insights.sbomify.com/MAL-2025-45481/): Malicious code in orbit-frontend-pino-mutation (npm) (malicious package) - [MAL-2025-45480](https://insights.sbomify.com/MAL-2025-45480/): Malicious code in orange-zulu-oscar-inwkq (npm) (malicious package) - [MAL-2025-4548](https://insights.sbomify.com/MAL-2025-4548/): Malicious code in @partners-types/generics (npm) (malicious package) - [MAL-2025-45479](https://insights.sbomify.com/MAL-2025-45479/): Malicious code in orange-india-charlie-vaxqa (npm) (malicious package) - [MAL-2025-45478](https://insights.sbomify.com/MAL-2025-45478/): Malicious code in orange-alpha-golf-vskhf (npm) (malicious package) - [MAL-2025-45477](https://insights.sbomify.com/MAL-2025-45477/): Malicious code in ora-xenon-perseus-thuban (npm) (malicious package) - [MAL-2025-45476](https://insights.sbomify.com/MAL-2025-45476/): Malicious code in ora-io-local-public (npm) (malicious package) - [MAL-2025-45475](https://insights.sbomify.com/MAL-2025-45475/): Malicious code in optional-native-module (npm) (malicious package) - [MAL-2025-45474](https://insights.sbomify.com/MAL-2025-45474/): Malicious code in optimize-css-assets-webpack-plugin-ultra-registry-nuxtjs (npm) (malicious package) - [MAL-2025-45473](https://insights.sbomify.com/MAL-2025-45473/): Malicious code in optimize-css-assets-webpack-plugin-izar-nuxtjs-toml (npm) (malicious package) - [MAL-2025-45472](https://insights.sbomify.com/MAL-2025-45472/): Malicious code in optimize-css-assets-webpack-plugin-fornax-global-markdownlint (npm) (malicious package) - [MAL-2025-45471](https://insights.sbomify.com/MAL-2025-45471/): Malicious code in optimize-css-assets-webpack-plugin-cassini-perturbation-biomimicry (npm) (malicious package) - [MAL-2025-45470](https://insights.sbomify.com/MAL-2025-45470/): Malicious code in optimize-css-assets-webpack-plugin-astrophysics-mechatronics-brane (npm) (malicious package) - [MAL-2025-4547](https://insights.sbomify.com/MAL-2025-4547/): Malicious code in @omnia-low-code/shared-components (npm) (malicious package) - [MAL-2025-45469](https://insights.sbomify.com/MAL-2025-45469/): Malicious code in opportunity-pain-bat (npm) (malicious package) - [MAL-2025-45468](https://insights.sbomify.com/MAL-2025-45468/): Malicious code in opinion-massage-ten (npm) (malicious package) - [MAL-2025-45467](https://insights.sbomify.com/MAL-2025-45467/): Malicious code in ophiuchus-sequelize-iota-selenium (npm) (malicious package) - [MAL-2025-45466](https://insights.sbomify.com/MAL-2025-45466/): Malicious code in ophiuchus-hercules-tool-gatsby (npm) (malicious package) - [MAL-2025-45465](https://insights.sbomify.com/MAL-2025-45465/): Malicious code in ophiuchus-dactyl-aether-dagda (npm) (malicious package) - [MAL-2025-45464](https://insights.sbomify.com/MAL-2025-45464/): Malicious code in ophiuchus-csv-husky-levels (npm) (malicious package) - [MAL-2025-45463](https://insights.sbomify.com/MAL-2025-45463/): Malicious code in ophiuchus-auth0-rollup-australis (npm) (malicious package) - [MAL-2025-45462](https://insights.sbomify.com/MAL-2025-45462/): Malicious code in opencv-doc-zh (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/608/