# Vulnerabilities published in 2025


- [MAL-2025-190497](https://insights.sbomify.com/MAL-2025-190497/): Malicious code in tailwindcss-setflex (npm) (malicious package)
- [MAL-2025-190496](https://insights.sbomify.com/MAL-2025-190496/): Malicious code in loger-parser (npm) (malicious package)
- [MAL-2025-190495](https://insights.sbomify.com/MAL-2025-190495/): Malicious code in chain-test-async (npm) (malicious package)
- [MAL-2025-190494](https://insights.sbomify.com/MAL-2025-190494/): Malicious code in chai-test-async (npm) (malicious package)
- [MAL-2025-190493](https://insights.sbomify.com/MAL-2025-190493/): Malicious code in com.unity.polyspatial (npm) (malicious package)
- [MAL-2025-190492](https://insights.sbomify.com/MAL-2025-190492/): Malicious code in worldskills (npm) (malicious package)
- [MAL-2025-190491](https://insights.sbomify.com/MAL-2025-190491/): Malicious code in form-classifier (npm) (malicious package)
- [MAL-2025-190490](https://insights.sbomify.com/MAL-2025-190490/): Malicious code in bitsight (npm) (malicious package)
- [MAL-2025-19049](https://insights.sbomify.com/MAL-2025-19049/): Malicious code in dztools (npm) (malicious package)
- [MAL-2025-190489](https://insights.sbomify.com/MAL-2025-190489/): Malicious code in zooarchaeology-nodemon-semantic-release-backend (npm) (malicious package)
- [MAL-2025-190488](https://insights.sbomify.com/MAL-2025-190488/): Malicious code in zooarchaeology-mocha-markdown-neptunology (npm) (malicious package)
- [MAL-2025-190487](https://insights.sbomify.com/MAL-2025-190487/): Malicious code in zooarchaeology-install-aether-extremophile (npm) (malicious package)
- [MAL-2025-190486](https://insights.sbomify.com/MAL-2025-190486/): Malicious code in zooarchaeology-gammarayburst-blueshift-vuepress (npm) (malicious package)
- [MAL-2025-190485](https://insights.sbomify.com/MAL-2025-190485/): Malicious code in zooarchaeology-darkmatter-higgs-algol (npm) (malicious package)
- [MAL-2025-190484](https://insights.sbomify.com/MAL-2025-190484/): Malicious code in zooarchaeology-configstore-google-darkenergy (npm) (malicious package)
- [MAL-2025-190483](https://insights.sbomify.com/MAL-2025-190483/): Malicious code in zeta-try-stack-alert-cache (npm) (malicious package)
- [MAL-2025-190482](https://insights.sbomify.com/MAL-2025-190482/): Malicious code in zeta-transpile-encode-pi-table (npm) (malicious package)
- [MAL-2025-190481](https://insights.sbomify.com/MAL-2025-190481/): Malicious code in zeta-permission-beta-short-async (npm) (malicious package)
- [MAL-2025-190480](https://insights.sbomify.com/MAL-2025-190480/): Malicious code in zeta-lambda-info-view-star (npm) (malicious package)
- [MAL-2025-19048](https://insights.sbomify.com/MAL-2025-19048/): Malicious code in dzsagbkorawrpkwehtvm (npm) (malicious package)
- [MAL-2025-190479](https://insights.sbomify.com/MAL-2025-190479/): Malicious code in zeta-lambda-abstract-eta-secure (npm) (malicious package)
- [MAL-2025-190478](https://insights.sbomify.com/MAL-2025-190478/): Malicious code in zeta-cold-notify-fire-easy (npm) (malicious package)
- [MAL-2025-190477](https://insights.sbomify.com/MAL-2025-190477/): Malicious code in zeta-beta-secure-secure-load (npm) (malicious package)
- [MAL-2025-190476](https://insights.sbomify.com/MAL-2025-190476/): Malicious code in zero-warn-char-class-visualize (npm) (malicious package)
- [MAL-2025-190475](https://insights.sbomify.com/MAL-2025-190475/): Malicious code in zero-finally-new-easy-phi (npm) (malicious package)
- [MAL-2025-190474](https://insights.sbomify.com/MAL-2025-190474/): Malicious code in zero-epsilon-bash-cache-query (npm) (malicious package)
- [MAL-2025-190473](https://insights.sbomify.com/MAL-2025-190473/): Malicious code in zero-daemon-small-fire-pi (npm) (malicious package)
- [MAL-2025-190472](https://insights.sbomify.com/MAL-2025-190472/): Malicious code in zephyr-yakutsk-update-fornax (npm) (malicious package)
- [MAL-2025-190471](https://insights.sbomify.com/MAL-2025-190471/): Malicious code in zephyr-sadr-child-process-bootes (npm) (malicious package)
- [MAL-2025-190470](https://insights.sbomify.com/MAL-2025-190470/): Malicious code in zephyr-promise-morgan-indus (npm) (malicious package)
- [MAL-2025-19047](https://insights.sbomify.com/MAL-2025-19047/): Malicious code in dzsagbkopkwehtvm (npm) (malicious package)
- [MAL-2025-190469](https://insights.sbomify.com/MAL-2025-190469/): Malicious code in zephyr-prettier-sequelize-callisto (npm) (malicious package)
- [MAL-2025-190468](https://insights.sbomify.com/MAL-2025-190468/): Malicious code in zephyr-neptune-dactyl-aurora (npm) (malicious package)
- [MAL-2025-190467](https://insights.sbomify.com/MAL-2025-190467/): Malicious code in zephyr-mongodb-wavefunction-pm2 (npm) (malicious package)
- [MAL-2025-190466](https://insights.sbomify.com/MAL-2025-190466/): Malicious code in zephyr-local-hexo-meteor (npm) (malicious package)
- [MAL-2025-190465](https://insights.sbomify.com/MAL-2025-190465/): Malicious code in zephyr-leda-procyon-pegasus (npm) (malicious package)
- [MAL-2025-190464](https://insights.sbomify.com/MAL-2025-190464/): Malicious code in zephyr-hyperion-cypress-pulsar (npm) (malicious package)
- [MAL-2025-190463](https://insights.sbomify.com/MAL-2025-190463/): Malicious code in zephyr-ganymede-fomalhaut-hercules (npm) (malicious package)
- [MAL-2025-190462](https://insights.sbomify.com/MAL-2025-190462/): Malicious code in zephyr-eris-spinner-quasar (npm) (malicious package)
- [MAL-2025-190461](https://insights.sbomify.com/MAL-2025-190461/): Malicious code in zephyr-dotenv-technosignature-uranology (npm) (malicious package)
- [MAL-2025-190460](https://insights.sbomify.com/MAL-2025-190460/): Malicious code in zephyr-barnard-troposphere-nucleosynthesis (npm) (malicious package)
- [MAL-2025-19046](https://insights.sbomify.com/MAL-2025-19046/): Malicious code in dzialki (npm) (malicious package)
- [MAL-2025-190459](https://insights.sbomify.com/MAL-2025-190459/): Malicious code in zephyr-auriga-node-config-wolf (npm) (malicious package)
- [MAL-2025-190458](https://insights.sbomify.com/MAL-2025-190458/): Malicious code in zenobia-zephyr-dactyl-planetology (npm) (malicious package)
- [MAL-2025-190457](https://insights.sbomify.com/MAL-2025-190457/): Malicious code in zenobia-terser-chromedriver-paleoclimatology (npm) (malicious package)
- [MAL-2025-190456](https://insights.sbomify.com/MAL-2025-190456/): Malicious code in zenobia-sirius-paleoclimatology-enceladus (npm) (malicious package)
- [MAL-2025-190455](https://insights.sbomify.com/MAL-2025-190455/): Malicious code in zenobia-rate-limiter-cosmos-csrf (npm) (malicious package)
- [MAL-2025-190454](https://insights.sbomify.com/MAL-2025-190454/): Malicious code in zenobia-quantum-yakutsk-superflare (npm) (malicious package)
- [MAL-2025-190453](https://insights.sbomify.com/MAL-2025-190453/): Malicious code in zenobia-nightwatch-rigel-javascript (npm) (malicious package)
- [MAL-2025-190452](https://insights.sbomify.com/MAL-2025-190452/): Malicious code in zenobia-mdx-phoenix-kronos (npm) (malicious package)
- [MAL-2025-190451](https://insights.sbomify.com/MAL-2025-190451/): Malicious code in zenobia-grus-readable-semantic-ui (npm) (malicious package)
- [MAL-2025-190450](https://insights.sbomify.com/MAL-2025-190450/): Malicious code in zenobia-google-readable-paleobotany (npm) (malicious package)
- [MAL-2025-19045](https://insights.sbomify.com/MAL-2025-19045/): Malicious code in dystatic (npm) (malicious package)
- [MAL-2025-190449](https://insights.sbomify.com/MAL-2025-190449/): Malicious code in zenobia-colors-neptunology-darkmatter (npm) (malicious package)
- [MAL-2025-190448](https://insights.sbomify.com/MAL-2025-190448/): Malicious code in zenith-registry-materialize-quasar (npm) (malicious package)
- [MAL-2025-190447](https://insights.sbomify.com/MAL-2025-190447/): Malicious code in zenith-geckodriver-rimraf-non-blocking (npm) (malicious package)
- [MAL-2025-190446](https://insights.sbomify.com/MAL-2025-190446/): Malicious code in zenith-cosmiconfig-miranda-standard (npm) (malicious package)
- [MAL-2025-190445](https://insights.sbomify.com/MAL-2025-190445/): Malicious code in zenith-cladistics-plutology-luna (npm) (malicious package)
- [MAL-2025-190444](https://insights.sbomify.com/MAL-2025-190444/): Malicious code in zenith-algol-nodejs-pegasus (npm) (malicious package)
- [MAL-2025-190443](https://insights.sbomify.com/MAL-2025-190443/): Malicious code in yonder-xerxes-xanthus-halley (npm) (malicious package)
- [MAL-2025-190442](https://insights.sbomify.com/MAL-2025-190442/): Malicious code in yonder-webdriverio-lynx-blackhole (npm) (malicious package)
- [MAL-2025-190441](https://insights.sbomify.com/MAL-2025-190441/): Malicious code in yonder-sedna-innercore-slidev (npm) (malicious package)
- [MAL-2025-190440](https://insights.sbomify.com/MAL-2025-190440/): Malicious code in yonder-sass-loader-firebase-cosmicsilence (npm) (malicious package)
- [MAL-2025-19044](https://insights.sbomify.com/MAL-2025-19044/): Malicious code in dysonswarm-virtualreality-cypress-phoebe (npm) (malicious package)
- [MAL-2025-190439](https://insights.sbomify.com/MAL-2025-190439/): Malicious code in yonder-rollup-dynamo-build (npm) (malicious package)
- [MAL-2025-190438](https://insights.sbomify.com/MAL-2025-190438/): Malicious code in yonder-mineralogy-ablation-achernar (npm) (malicious package)
- [MAL-2025-190437](https://insights.sbomify.com/MAL-2025-190437/): Malicious code in yonder-less-loader-ini-auth (npm) (malicious package)
- [MAL-2025-190436](https://insights.sbomify.com/MAL-2025-190436/): Malicious code in yonder-fermion-delphinus-transform (npm) (malicious package)
- [MAL-2025-190435](https://insights.sbomify.com/MAL-2025-190435/): Malicious code in yildun-tethys-eigenstate-alphard (npm) (malicious package)
- [MAL-2025-190434](https://insights.sbomify.com/MAL-2025-190434/): Malicious code in yildun-mesosphere-redis-spectron (npm) (malicious package)
- [MAL-2025-190433](https://insights.sbomify.com/MAL-2025-190433/): Malicious code in yildun-fork-chalk-farout (npm) (malicious package)
- [MAL-2025-190432](https://insights.sbomify.com/MAL-2025-190432/): Malicious code in yildun-cors-convict-ursa (npm) (malicious package)
- [MAL-2025-190431](https://insights.sbomify.com/MAL-2025-190431/): Malicious code in yildun-blitz-miranda-accretion (npm) (malicious package)
- [MAL-2025-190430](https://insights.sbomify.com/MAL-2025-190430/): Malicious code in yaml-root-xml-process-proxy (npm) (malicious package)
- [MAL-2025-19043](https://insights.sbomify.com/MAL-2025-19043/): Malicious code in dysonswarm-eslint-config-jwt-deimos (npm) (malicious package)
- [MAL-2025-190429](https://insights.sbomify.com/MAL-2025-190429/): Malicious code in yaml-phoenix-sequelize-redshift (npm) (malicious package)
- [MAL-2025-190428](https://insights.sbomify.com/MAL-2025-190428/): Malicious code in yaml-notify-authorize-code-web (npm) (malicious package)
- [MAL-2025-190427](https://insights.sbomify.com/MAL-2025-190427/): Malicious code in yaml-kappa-integer-uglify-serialize (npm) (malicious package)
- [MAL-2025-190426](https://insights.sbomify.com/MAL-2025-190426/): Malicious code in yaml-iota-jasmine-norma (npm) (malicious package)
- [MAL-2025-190425](https://insights.sbomify.com/MAL-2025-190425/): Malicious code in yaml-halley-astrobiology-mutation (npm) (malicious package)
- [MAL-2025-190424](https://insights.sbomify.com/MAL-2025-190424/): Malicious code in yaml-entanglement-radiant-geodynamo (npm) (malicious package)
- [MAL-2025-190423](https://insights.sbomify.com/MAL-2025-190423/): Malicious code in yaml-chi-cloud-nu-code (npm) (malicious package)
- [MAL-2025-190422](https://insights.sbomify.com/MAL-2025-190422/): Malicious code in yaml-cache-sails-jwt (npm) (malicious package)
- [MAL-2025-190421](https://insights.sbomify.com/MAL-2025-190421/): Malicious code in yaml-barnard-jekyll-magnetar (npm) (malicious package)
- [MAL-2025-190420](https://insights.sbomify.com/MAL-2025-190420/): Malicious code in yakutsk-server-hydrogeology-saturnology (npm) (malicious package)
- [MAL-2025-19042](https://insights.sbomify.com/MAL-2025-19042/): Malicious code in dysonswarm-antares-eventhoriz-process (npm) (malicious package)
- [MAL-2025-190419](https://insights.sbomify.com/MAL-2025-190419/): Malicious code in yakutsk-saturnology-grus-prosthetics (npm) (malicious package)
- [MAL-2025-190418](https://insights.sbomify.com/MAL-2025-190418/): Malicious code in yakutsk-metalsmith-astrochemistry-terser (npm) (malicious package)
- [MAL-2025-190417](https://insights.sbomify.com/MAL-2025-190417/): Malicious code in yakutsk-luna-nova-triton (npm) (malicious package)
- [MAL-2025-190416](https://insights.sbomify.com/MAL-2025-190416/): Malicious code in yakutsk-electron-nebula-jekyll (npm) (malicious package)
- [MAL-2025-190415](https://insights.sbomify.com/MAL-2025-190415/): Malicious code in yakutsk-blueshift-supervisor-socketio (npm) (malicious package)
- [MAL-2025-190414](https://insights.sbomify.com/MAL-2025-190414/): Malicious code in yakutsk-alphard-winston-nconf (npm) (malicious package)
- [MAL-2025-190413](https://insights.sbomify.com/MAL-2025-190413/): Malicious code in xo-sequelize-thermochronology-resonance (npm) (malicious package)
- [MAL-2025-190412](https://insights.sbomify.com/MAL-2025-190412/): Malicious code in xo-quasarjet-publish-npm (npm) (malicious package)
- [MAL-2025-190411](https://insights.sbomify.com/MAL-2025-190411/): Malicious code in xo-phylogenetics-kastra-triton (npm) (malicious package)
- [MAL-2025-190410](https://insights.sbomify.com/MAL-2025-190410/): Malicious code in xo-nightmare-magellan-eslint-plugin (npm) (malicious package)
- [MAL-2025-19041](https://insights.sbomify.com/MAL-2025-19041/): Malicious code in dyqwcllhdjugn7b4rgbead00oywfmaai (npm) (malicious package)
- [MAL-2025-190409](https://insights.sbomify.com/MAL-2025-190409/): Malicious code in xo-morgan-css-loader-prompts (npm) (malicious package)
- [MAL-2025-190408](https://insights.sbomify.com/MAL-2025-190408/): Malicious code in xo-mini-css-extract-plugin-vega-koa (npm) (malicious package)
- [MAL-2025-190407](https://insights.sbomify.com/MAL-2025-190407/): Malicious code in xo-koa-metalsmith-perseus (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/927/