# Vulnerabilities published in 2025


- [MAL-2025-190406](https://insights.sbomify.com/MAL-2025-190406/): Malicious code in xo-indus-procyon-indus (npm) (malicious package)
- [MAL-2025-190405](https://insights.sbomify.com/MAL-2025-190405/): Malicious code in xo-helios-child-process-pm2 (npm) (malicious package)
- [MAL-2025-190404](https://insights.sbomify.com/MAL-2025-190404/): Malicious code in xo-halley-less-loader-cache (npm) (malicious package)
- [MAL-2025-190403](https://insights.sbomify.com/MAL-2025-190403/): Malicious code in xo-csrf-radiant-halley (npm) (malicious package)
- [MAL-2025-190402](https://insights.sbomify.com/MAL-2025-190402/): Malicious code in xo-castor-frontend-indus (npm) (malicious package)
- [MAL-2025-190401](https://insights.sbomify.com/MAL-2025-190401/): Malicious code in xml-sigma-meta-daemon-delta (npm) (malicious package)
- [MAL-2025-190400](https://insights.sbomify.com/MAL-2025-190400/): Malicious code in xml-sails-cluster-mysql (npm) (malicious package)
- [MAL-2025-19040](https://insights.sbomify.com/MAL-2025-19040/): Malicious code in dyplot (npm) (malicious package)
- [MAL-2025-1904](https://insights.sbomify.com/MAL-2025-1904/): Malicious code in my-node-startup (npm) (malicious package)
- [MAL-2025-190399](https://insights.sbomify.com/MAL-2025-190399/): Malicious code in xml-proxima-rest-process (npm) (malicious package)
- [MAL-2025-190398](https://insights.sbomify.com/MAL-2025-190398/): Malicious code in xml-procyon-css-minimizer-webpack-plugin-iota (npm) (malicious package)
- [MAL-2025-190397](https://insights.sbomify.com/MAL-2025-190397/): Malicious code in xml-phoebe-protoplanetarydisk-magnetar (npm) (malicious package)
- [MAL-2025-190396](https://insights.sbomify.com/MAL-2025-190396/): Malicious code in xml-oberon-axios-neuromorphic (npm) (malicious package)
- [MAL-2025-190395](https://insights.sbomify.com/MAL-2025-190395/): Malicious code in xml-ganymede-blackhole-chalk (npm) (malicious package)
- [MAL-2025-190394](https://insights.sbomify.com/MAL-2025-190394/): Malicious code in xml-eris-lyra-tectonophysics (npm) (malicious package)
- [MAL-2025-190393](https://insights.sbomify.com/MAL-2025-190393/): Malicious code in xi-moon-star-fire-await (npm) (malicious package)
- [MAL-2025-190392](https://insights.sbomify.com/MAL-2025-190392/): Malicious code in xi-minify-bundle-sigma-query (npm) (malicious package)
- [MAL-2025-190391](https://insights.sbomify.com/MAL-2025-190391/): Malicious code in xi-grid-module-sed-warn (npm) (malicious package)
- [MAL-2025-190390](https://insights.sbomify.com/MAL-2025-190390/): Malicious code in xi-abstract-user-alert-parse (npm) (malicious package)
- [MAL-2025-19039](https://insights.sbomify.com/MAL-2025-19039/): Malicious code in dynseg-util (npm) (malicious package)
- [MAL-2025-190389](https://insights.sbomify.com/MAL-2025-190389/): Malicious code in xerxes-perseus-antd-subscription (npm) (malicious package)
- [MAL-2025-190388](https://insights.sbomify.com/MAL-2025-190388/): Malicious code in xerxes-paleontology-dorado-pavo (npm) (malicious package)
- [MAL-2025-190387](https://insights.sbomify.com/MAL-2025-190387/): Malicious code in xerxes-nuxtjs-enif-superposition (npm) (malicious package)
- [MAL-2025-190386](https://insights.sbomify.com/MAL-2025-190386/): Malicious code in xerxes-non-blocking-baryon-solarnebula (npm) (malicious package)
- [MAL-2025-190385](https://insights.sbomify.com/MAL-2025-190385/): Malicious code in xerxes-koa-promise-meteor (npm) (malicious package)
- [MAL-2025-190384](https://insights.sbomify.com/MAL-2025-190384/): Malicious code in xerxes-coronalmassejection-flare-filament (npm) (malicious package)
- [MAL-2025-190383](https://insights.sbomify.com/MAL-2025-190383/): Malicious code in xerxes-auth-jekyll-ionosphere (npm) (malicious package)
- [MAL-2025-190382](https://insights.sbomify.com/MAL-2025-190382/): Malicious code in xenos-xanthus-celeste-react-bootstrap (npm) (malicious package)
- [MAL-2025-190381](https://insights.sbomify.com/MAL-2025-190381/): Malicious code in xenos-upgrade-orbit-kinetic (npm) (malicious package)
- [MAL-2025-190380](https://insights.sbomify.com/MAL-2025-190380/): Malicious code in xenos-nconf-aurora-redis (npm) (malicious package)
- [MAL-2025-19038](https://insights.sbomify.com/MAL-2025-19038/): Malicious code in dynlog (npm) (malicious package)
- [MAL-2025-190379](https://insights.sbomify.com/MAL-2025-190379/): Malicious code in xenos-lepton-cosmogenic-telesto (npm) (malicious package)
- [MAL-2025-190378](https://insights.sbomify.com/MAL-2025-190378/): Malicious code in xenos-cladistics-dotenv-safe-joviology (npm) (malicious package)
- [MAL-2025-190377](https://insights.sbomify.com/MAL-2025-190377/): Malicious code in xenos-chai-changelog-helmet (npm) (malicious package)
- [MAL-2025-190376](https://insights.sbomify.com/MAL-2025-190376/): Malicious code in xenon-sirius-scripts-regulus (npm) (malicious package)
- [MAL-2025-190375](https://insights.sbomify.com/MAL-2025-190375/): Malicious code in xenon-release-it-telesto-jabbah (npm) (malicious package)
- [MAL-2025-190374](https://insights.sbomify.com/MAL-2025-190374/): Malicious code in xenon-proxima-whitedwarf-jsonp (npm) (malicious package)
- [MAL-2025-190373](https://insights.sbomify.com/MAL-2025-190373/): Malicious code in xenon-prettier-plugin-markdown-csv-barnard (npm) (malicious package)
- [MAL-2025-190372](https://insights.sbomify.com/MAL-2025-190372/): Malicious code in xenon-graviton-gravity-pulsar (npm) (malicious package)
- [MAL-2025-190371](https://insights.sbomify.com/MAL-2025-190371/): Malicious code in xenon-ganymede-got-fusion (npm) (malicious package)
- [MAL-2025-190370](https://insights.sbomify.com/MAL-2025-190370/): Malicious code in xenon-command-futurology-quasar (npm) (malicious package)
- [MAL-2025-19037](https://insights.sbomify.com/MAL-2025-19037/): Malicious code in dyneinsle (npm) (malicious package)
- [MAL-2025-190369](https://insights.sbomify.com/MAL-2025-190369/): Malicious code in xenon-comet-xo-quantum (npm) (malicious package)
- [MAL-2025-190368](https://insights.sbomify.com/MAL-2025-190368/): Malicious code in xenon-apex-ultra-zenith (npm) (malicious package)
- [MAL-2025-190367](https://insights.sbomify.com/MAL-2025-190367/): Malicious code in xenobiology-technocracy-dotenv-safe-brane (npm) (malicious package)
- [MAL-2025-190366](https://insights.sbomify.com/MAL-2025-190366/): Malicious code in xenobiology-materialize-epimetheus-atlas (npm) (malicious package)
- [MAL-2025-190365](https://insights.sbomify.com/MAL-2025-190365/): Malicious code in xenobiology-hermes-selenology-umbriel (npm) (malicious package)
- [MAL-2025-190364](https://insights.sbomify.com/MAL-2025-190364/): Malicious code in xenobiology-galaxy-supervisor-ophiuchus (npm) (malicious package)
- [MAL-2025-190363](https://insights.sbomify.com/MAL-2025-190363/): Malicious code in xenobiology-electron-deneb-rimraf (npm) (malicious package)
- [MAL-2025-190362](https://insights.sbomify.com/MAL-2025-190362/): Malicious code in xenobiology-darkmatter-fermion-io (npm) (malicious package)
- [MAL-2025-190361](https://insights.sbomify.com/MAL-2025-190361/): Malicious code in xanthus-zenobia-entanglement-prompts (npm) (malicious package)
- [MAL-2025-190360](https://insights.sbomify.com/MAL-2025-190360/): Malicious code in xanthus-websockets-helios-duplex (npm) (malicious package)
- [MAL-2025-19036](https://insights.sbomify.com/MAL-2025-19036/): Malicious code in dynamoeasy (npm) (malicious package)
- [MAL-2025-190359](https://insights.sbomify.com/MAL-2025-190359/): Malicious code in xanthus-tectonic-levels-xanadu (npm) (malicious package)
- [MAL-2025-190358](https://insights.sbomify.com/MAL-2025-190358/): Malicious code in xanthus-redis-scripts-fomalhaut (npm) (malicious package)
- [MAL-2025-190357](https://insights.sbomify.com/MAL-2025-190357/): Malicious code in xanthus-got-telesto-accretion (npm) (malicious package)
- [MAL-2025-190356](https://insights.sbomify.com/MAL-2025-190356/): Malicious code in xanthus-fusion-oauth-halley (npm) (malicious package)
- [MAL-2025-190355](https://insights.sbomify.com/MAL-2025-190355/): Malicious code in xanthus-dotenv-safe-markdownlint-xerxes (npm) (malicious package)
- [MAL-2025-190354](https://insights.sbomify.com/MAL-2025-190354/): Malicious code in xanthus-cosmiconfig-nightwatch-eridanus (npm) (malicious package)
- [MAL-2025-190353](https://insights.sbomify.com/MAL-2025-190353/): Malicious code in xanthus-child-process-radiant-biotechnology (npm) (malicious package)
- [MAL-2025-190352](https://insights.sbomify.com/MAL-2025-190352/): Malicious code in xanadu-singularitarianism-fetch-fermion (npm) (malicious package)
- [MAL-2025-190351](https://insights.sbomify.com/MAL-2025-190351/): Malicious code in xanadu-proxima-transport-hermes (npm) (malicious package)
- [MAL-2025-190350](https://insights.sbomify.com/MAL-2025-190350/): Malicious code in xanadu-paleontology-zooarchaeology-triton (npm) (malicious package)
- [MAL-2025-19035](https://insights.sbomify.com/MAL-2025-19035/): Malicious code in dynamo-x9oeo-poe19-horizon-project (npm) (malicious package)
- [MAL-2025-190349](https://insights.sbomify.com/MAL-2025-190349/): Malicious code in xanadu-ganymede-thuban-polaris (npm) (malicious package)
- [MAL-2025-190348](https://insights.sbomify.com/MAL-2025-190348/): Malicious code in xanadu-dotenv-safe-markdownlint-materialize (npm) (malicious package)
- [MAL-2025-190347](https://insights.sbomify.com/MAL-2025-190347/): Malicious code in writable-lint-helmet-betelgeuse (npm) (malicious package)
- [MAL-2025-190346](https://insights.sbomify.com/MAL-2025-190346/): Malicious code in writable-jovian-pino-markdownlint (npm) (malicious package)
- [MAL-2025-190345](https://insights.sbomify.com/MAL-2025-190345/): Malicious code in wormhole-passport-norma-gravitationalwave (npm) (malicious package)
- [MAL-2025-190344](https://insights.sbomify.com/MAL-2025-190344/): Malicious code in wormhole-gammarayburst-nanotechnology-umbriel (npm) (malicious package)
- [MAL-2025-190343](https://insights.sbomify.com/MAL-2025-190343/): Malicious code in wolf-baryon-pino-phenomic (npm) (malicious package)
- [MAL-2025-190342](https://insights.sbomify.com/MAL-2025-190342/): Malicious code in winston-writable-betelgeuse-jekyll (npm) (malicious package)
- [MAL-2025-190341](https://insights.sbomify.com/MAL-2025-190341/): Malicious code in winston-tectonophysics-quito-luna (npm) (malicious package)
- [MAL-2025-190340](https://insights.sbomify.com/MAL-2025-190340/): Malicious code in winston-process-fetch-server (npm) (malicious package)
- [MAL-2025-19034](https://insights.sbomify.com/MAL-2025-19034/): Malicious code in dynamo-r1fvy-txt19-yarn-project (npm) (malicious package)
- [MAL-2025-190339](https://insights.sbomify.com/MAL-2025-190339/): Malicious code in winston-polaris-rollup-despina (npm) (malicious package)
- [MAL-2025-190338](https://insights.sbomify.com/MAL-2025-190338/): Malicious code in winston-pino-jasmine-jupiter (npm) (malicious package)
- [MAL-2025-190337](https://insights.sbomify.com/MAL-2025-190337/): Malicious code in winston-neutrino-commitlint-tachyon (npm) (malicious package)
- [MAL-2025-190336](https://insights.sbomify.com/MAL-2025-190336/): Malicious code in winston-lint-staged-ganymede-parcel (npm) (malicious package)
- [MAL-2025-190335](https://insights.sbomify.com/MAL-2025-190335/): Malicious code in winston-leda-mesosphere-umbra (npm) (malicious package)
- [MAL-2025-190334](https://insights.sbomify.com/MAL-2025-190334/): Malicious code in winston-kinetic-zenith-corvus (npm) (malicious package)
- [MAL-2025-190333](https://insights.sbomify.com/MAL-2025-190333/): Malicious code in winston-jwt-vuepress-prettier (npm) (malicious package)
- [MAL-2025-190332](https://insights.sbomify.com/MAL-2025-190332/): Malicious code in winston-html-webpack-plugin-hologram-meteor (npm) (malicious package)
- [MAL-2025-190331](https://insights.sbomify.com/MAL-2025-190331/): Malicious code in winston-hadron-neptune-biomimicry (npm) (malicious package)
- [MAL-2025-190330](https://insights.sbomify.com/MAL-2025-190330/): Malicious code in winston-gridsome-oortcloud-pegasus (npm) (malicious package)
- [MAL-2025-19033](https://insights.sbomify.com/MAL-2025-19033/): Malicious code in dynamo-brane-mechatronics-aether (npm) (malicious package)
- [MAL-2025-190329](https://insights.sbomify.com/MAL-2025-190329/): Malicious code in winston-boson-publish-cluster (npm) (malicious package)
- [MAL-2025-190328](https://insights.sbomify.com/MAL-2025-190328/): Malicious code in winston-adonis-dotenv-parse-variables-dagda (npm) (malicious package)
- [MAL-2025-190327](https://insights.sbomify.com/MAL-2025-190327/): Malicious code in wind-sun-stub-function-import (npm) (malicious package)
- [MAL-2025-190326](https://insights.sbomify.com/MAL-2025-190326/): Malicious code in wind-quick-char-yaml-thread (npm) (malicious package)
- [MAL-2025-190325](https://insights.sbomify.com/MAL-2025-190325/): Malicious code in wind-psi-zeta-debug-zeta (npm) (malicious package)
- [MAL-2025-190324](https://insights.sbomify.com/MAL-2025-190324/): Malicious code in wind-phi-pi-zeta-virtualize (npm) (malicious package)
- [MAL-2025-190323](https://insights.sbomify.com/MAL-2025-190323/): Malicious code in wind-execute-authorize-mu-byte (npm) (malicious package)
- [MAL-2025-190322](https://insights.sbomify.com/MAL-2025-190322/): Malicious code in wind-char-function-resolve-enum (npm) (malicious package)
- [MAL-2025-190321](https://insights.sbomify.com/MAL-2025-190321/): Malicious code in whitedwarf-tectonic-izar-hermes (npm) (malicious package)
- [MAL-2025-190320](https://insights.sbomify.com/MAL-2025-190320/): Malicious code in whitedwarf-selenology-jsonp-version (npm) (malicious package)
- [MAL-2025-19032](https://insights.sbomify.com/MAL-2025-19032/): Malicious code in dynamo-asthenosphere-protractor-phoebe (npm) (malicious package)
- [MAL-2025-190319](https://insights.sbomify.com/MAL-2025-190319/): Malicious code in whitedwarf-meissa-standard-mira (npm) (malicious package)
- [MAL-2025-190318](https://insights.sbomify.com/MAL-2025-190318/): Malicious code in whitedwarf-inquirer-csv-blitz (npm) (malicious package)
- [MAL-2025-190317](https://insights.sbomify.com/MAL-2025-190317/): Malicious code in whitedwarf-fomalhaut-nodemon-pipe (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/928/