# Vulnerabilities published in 2025


- [MAL-2025-190316](https://insights.sbomify.com/MAL-2025-190316/): Malicious code in wezen-xerxes-vortex-adonis (npm) (malicious package)
- [MAL-2025-190315](https://insights.sbomify.com/MAL-2025-190315/): Malicious code in wezen-paleoanthropology-betelgeuse-asthenosphere (npm) (malicious package)
- [MAL-2025-190314](https://insights.sbomify.com/MAL-2025-190314/): Malicious code in wezen-mutation-ora-grunt (npm) (malicious package)
- [MAL-2025-190313](https://insights.sbomify.com/MAL-2025-190313/): Malicious code in wezen-lepton-bootes-ultra (npm) (malicious package)
- [MAL-2025-190312](https://insights.sbomify.com/MAL-2025-190312/): Malicious code in wezen-hexo-update-lithosphere (npm) (malicious package)
- [MAL-2025-190311](https://insights.sbomify.com/MAL-2025-190311/): Malicious code in wezen-halley-less-io (npm) (malicious package)
- [MAL-2025-190310](https://insights.sbomify.com/MAL-2025-190310/): Malicious code in wezen-centauri-mutation-link (npm) (malicious package)
- [MAL-2025-19031](https://insights.sbomify.com/MAL-2025-19031/): Malicious code in dynamic-import-webpack (npm) (malicious package)
- [MAL-2025-190309](https://insights.sbomify.com/MAL-2025-190309/): Malicious code in weywot-wezen-cryovolcano-auriga (npm) (malicious package)
- [MAL-2025-190308](https://insights.sbomify.com/MAL-2025-190308/): Malicious code in weywot-wezen-bootes-nodemon (npm) (malicious package)
- [MAL-2025-190307](https://insights.sbomify.com/MAL-2025-190307/): Malicious code in weywot-webdriver-mocha-loglevel-fornax (npm) (malicious package)
- [MAL-2025-190306](https://insights.sbomify.com/MAL-2025-190306/): Malicious code in weywot-wasat-galaxy-miranda (npm) (malicious package)
- [MAL-2025-190305](https://insights.sbomify.com/MAL-2025-190305/): Malicious code in weywot-tool-eslint-config-dotenv (npm) (malicious package)
- [MAL-2025-190304](https://insights.sbomify.com/MAL-2025-190304/): Malicious code in weywot-resolvers-vuepress-rollup (npm) (malicious package)
- [MAL-2025-190303](https://insights.sbomify.com/MAL-2025-190303/): Malicious code in weywot-prompts-nestjs-nuxtjs (npm) (malicious package)
- [MAL-2025-190302](https://insights.sbomify.com/MAL-2025-190302/): Malicious code in weywot-phoenix-betelgeuse-janus (npm) (malicious package)
- [MAL-2025-190301](https://insights.sbomify.com/MAL-2025-190301/): Malicious code in weywot-perseus-parallax-meteor (npm) (malicious package)
- [MAL-2025-190300](https://insights.sbomify.com/MAL-2025-190300/): Malicious code in weywot-less-meteor-jupiter (npm) (malicious package)
- [MAL-2025-19030](https://insights.sbomify.com/MAL-2025-19030/): Malicious code in dynamic-form-components (npm) (malicious package)
- [MAL-2025-1903](https://insights.sbomify.com/MAL-2025-1903/): Malicious code in mev-sdk (npm) (malicious package)
- [MAL-2025-190299](https://insights.sbomify.com/MAL-2025-190299/): Malicious code in weywot-astrobiology-biomimicry-postcss (npm) (malicious package)
- [MAL-2025-190298](https://insights.sbomify.com/MAL-2025-190298/): Malicious code in websockets-winston-neptune-ablation (npm) (malicious package)
- [MAL-2025-190297](https://insights.sbomify.com/MAL-2025-190297/): Malicious code in websockets-thuban-antares-yakutsk (npm) (malicious package)
- [MAL-2025-190296](https://insights.sbomify.com/MAL-2025-190296/): Malicious code in websockets-kinetic-janus-sedna (npm) (malicious package)
- [MAL-2025-190295](https://insights.sbomify.com/MAL-2025-190295/): Malicious code in websockets-hawkingradiation-redis-barnard (npm) (malicious package)
- [MAL-2025-190294](https://insights.sbomify.com/MAL-2025-190294/): Malicious code in websockets-areology-perseus-redgiant (npm) (malicious package)
- [MAL-2025-190293](https://insights.sbomify.com/MAL-2025-190293/): Malicious code in webpack-xenon-relay-carpo (npm) (malicious package)
- [MAL-2025-190292](https://insights.sbomify.com/MAL-2025-190292/): Malicious code in webpack-query-thermochronology-antimatter (npm) (malicious package)
- [MAL-2025-190291](https://insights.sbomify.com/MAL-2025-190291/): Malicious code in webpack-quantum-babel-dione (npm) (malicious package)
- [MAL-2025-190290](https://insights.sbomify.com/MAL-2025-190290/): Malicious code in webpack-less-heliophysics-wavefunction (npm) (malicious package)
- [MAL-2025-19029](https://insights.sbomify.com/MAL-2025-19029/): Malicious code in dynalogin (npm) (malicious package)
- [MAL-2025-190289](https://insights.sbomify.com/MAL-2025-190289/): Malicious code in webpack-exec-adonis-terser-webpack-plugin (npm) (malicious package)
- [MAL-2025-190288](https://insights.sbomify.com/MAL-2025-190288/): Malicious code in webpack-dotenv-safe-avior-nodejs (npm) (malicious package)
- [MAL-2025-190287](https://insights.sbomify.com/MAL-2025-190287/): Malicious code in webpack-borealis-paleoceanography-odin (npm) (malicious package)
- [MAL-2025-190286](https://insights.sbomify.com/MAL-2025-190286/): Malicious code in webdriverio-wavefunction-publish-asteroid (npm) (malicious package)
- [MAL-2025-190285](https://insights.sbomify.com/MAL-2025-190285/): Malicious code in webdriverio-vuetify-antares-wezen (npm) (malicious package)
- [MAL-2025-190284](https://insights.sbomify.com/MAL-2025-190284/): Malicious code in webdriverio-umbriel-sequelize-version (npm) (malicious package)
- [MAL-2025-190283](https://insights.sbomify.com/MAL-2025-190283/): Malicious code in webdriverio-thermosphere-cladistics-multiverse (npm) (malicious package)
- [MAL-2025-190282](https://insights.sbomify.com/MAL-2025-190282/): Malicious code in webdriverio-rate-limiter-wormhole-version (npm) (malicious package)
- [MAL-2025-190281](https://insights.sbomify.com/MAL-2025-190281/): Malicious code in webdriverio-npm-supervisor-blaze (npm) (malicious package)
- [MAL-2025-190280](https://insights.sbomify.com/MAL-2025-190280/): Malicious code in webdriverio-meissa-terser-node-sass (npm) (malicious package)
- [MAL-2025-19028](https://insights.sbomify.com/MAL-2025-19028/): Malicious code in dyna-travel-ui-select-air-trip (npm) (malicious package)
- [MAL-2025-190279](https://insights.sbomify.com/MAL-2025-190279/): Malicious code in webdriverio-less-loader-relay-venus (npm) (malicious package)
- [MAL-2025-190278](https://insights.sbomify.com/MAL-2025-190278/): Malicious code in webdriverio-jasmine-dione-perseus (npm) (malicious package)
- [MAL-2025-190277](https://insights.sbomify.com/MAL-2025-190277/): Malicious code in webdriverio-europa-perseus-metalsmith (npm) (malicious package)
- [MAL-2025-190276](https://insights.sbomify.com/MAL-2025-190276/): Malicious code in webdriver-mocha-tectonic-leda-antimatter (npm) (malicious package)
- [MAL-2025-190275](https://insights.sbomify.com/MAL-2025-190275/): Malicious code in webdriver-mocha-scripts-hadron-augmentedreality (npm) (malicious package)
- [MAL-2025-190274](https://insights.sbomify.com/MAL-2025-190274/): Malicious code in webdriver-mocha-nightwatch-cosmiconfig-despina (npm) (malicious package)
- [MAL-2025-190273](https://insights.sbomify.com/MAL-2025-190273/): Malicious code in webdriver-mocha-isostasy-arcturus-eslint-config (npm) (malicious package)
- [MAL-2025-190272](https://insights.sbomify.com/MAL-2025-190272/): Malicious code in webdriver-mocha-ionosphere-commitlint-inflation (npm) (malicious package)
- [MAL-2025-190271](https://insights.sbomify.com/MAL-2025-190271/): Malicious code in webdriver-mocha-electron-cache-dione (npm) (malicious package)
- [MAL-2025-190270](https://insights.sbomify.com/MAL-2025-190270/): Malicious code in webdriver-mocha-chromedriver-javascript-json (npm) (malicious package)
- [MAL-2025-19027](https://insights.sbomify.com/MAL-2025-19027/): Malicious code in dyna-travel-api (npm) (malicious package)
- [MAL-2025-190269](https://insights.sbomify.com/MAL-2025-190269/): Malicious code in webdriver-mocha-browserify-polaris-cache (npm) (malicious package)
- [MAL-2025-190268](https://insights.sbomify.com/MAL-2025-190268/): Malicious code in webdriver-mocha-apollo-server-shelljs (npm) (malicious package)
- [MAL-2025-190267](https://insights.sbomify.com/MAL-2025-190267/): Malicious code in webdriver-manager-venus-coronalmassejection-spica (npm) (malicious package)
- [MAL-2025-190266](https://insights.sbomify.com/MAL-2025-190266/): Malicious code in webdriver-manager-stratosphere-stratigraphy-stop (npm) (malicious package)
- [MAL-2025-190265](https://insights.sbomify.com/MAL-2025-190265/): Malicious code in webdriver-manager-sociobiology-wezen-winston (npm) (malicious package)
- [MAL-2025-190264](https://insights.sbomify.com/MAL-2025-190264/): Malicious code in webdriver-manager-parcel-innercore-redgiant (npm) (malicious package)
- [MAL-2025-190263](https://insights.sbomify.com/MAL-2025-190263/): Malicious code in webdriver-manager-neptunology-oscillation-fornax (npm) (malicious package)
- [MAL-2025-190262](https://insights.sbomify.com/MAL-2025-190262/): Malicious code in webdriver-manager-neptune-vulcan-scorpius (npm) (malicious package)
- [MAL-2025-190261](https://insights.sbomify.com/MAL-2025-190261/): Malicious code in webdriver-manager-ethology-kastra-biotechnology (npm) (malicious package)
- [MAL-2025-190260](https://insights.sbomify.com/MAL-2025-190260/): Malicious code in webdriver-manager-deneb-nconf-outercore (npm) (malicious package)
- [MAL-2025-19026](https://insights.sbomify.com/MAL-2025-19026/): Malicious code in dyismcwjuvrftako (npm) (malicious package)
- [MAL-2025-190259](https://insights.sbomify.com/MAL-2025-190259/): Malicious code in webdriver-manager-cosmos-mongoose-got (npm) (malicious package)
- [MAL-2025-190258](https://insights.sbomify.com/MAL-2025-190258/): Malicious code in webdriver-manager-bulma-pino-pretty-hercules (npm) (malicious package)
- [MAL-2025-190257](https://insights.sbomify.com/MAL-2025-190257/): Malicious code in webdriver-manager-aether-less-loader-mensa (npm) (malicious package)
- [MAL-2025-190256](https://insights.sbomify.com/MAL-2025-190256/): Malicious code in web-yaml-analyze-finally-short (npm) (malicious package)
- [MAL-2025-190255](https://insights.sbomify.com/MAL-2025-190255/): Malicious code in web-route-final-nu-route (npm) (malicious package)
- [MAL-2025-190254](https://insights.sbomify.com/MAL-2025-190254/): Malicious code in web-container-container-sigma-optimize (npm) (malicious package)
- [MAL-2025-190253](https://insights.sbomify.com/MAL-2025-190253/): Malicious code in web-compile-deploy-load-secure (npm) (malicious package)
- [MAL-2025-190252](https://insights.sbomify.com/MAL-2025-190252/): Malicious code in wavefunction-prompts-webdriver-mocha-vuetify (npm) (malicious package)
- [MAL-2025-190251](https://insights.sbomify.com/MAL-2025-190251/): Malicious code in wavefunction-procyon-archaeoastronomy-uranology (npm) (malicious package)
- [MAL-2025-190250](https://insights.sbomify.com/MAL-2025-190250/): Malicious code in wavefunction-perturbation-stratosphere-supercluster (npm) (malicious package)
- [MAL-2025-19025](https://insights.sbomify.com/MAL-2025-19025/): Malicious code in dxpress (npm) (malicious package)
- [MAL-2025-190249](https://insights.sbomify.com/MAL-2025-190249/): Malicious code in wavefunction-parallax-jovian-jasmine (npm) (malicious package)
- [MAL-2025-190248](https://insights.sbomify.com/MAL-2025-190248/): Malicious code in wavefunction-optimize-css-assets-webpack-plugin-development-ursa (npm) (malicious package)
- [MAL-2025-190247](https://insights.sbomify.com/MAL-2025-190247/): Malicious code in wavefunction-crust-interstellarmedium-bootstrap (npm) (malicious package)
- [MAL-2025-190246](https://insights.sbomify.com/MAL-2025-190246/): Malicious code in wavefunction-ariel-pavo-equinox (npm) (malicious package)
- [MAL-2025-190245](https://insights.sbomify.com/MAL-2025-190245/): Malicious code in water-user-link-protected-await (npm) (malicious package)
- [MAL-2025-190244](https://insights.sbomify.com/MAL-2025-190244/): Malicious code in water-user-fast-sanitize-test (npm) (malicious package)
- [MAL-2025-190243](https://insights.sbomify.com/MAL-2025-190243/): Malicious code in water-omega-compile-pipe-book (npm) (malicious package)
- [MAL-2025-190242](https://insights.sbomify.com/MAL-2025-190242/): Malicious code in water-execute-rain-root-cloud (npm) (malicious package)
- [MAL-2025-190241](https://insights.sbomify.com/MAL-2025-190241/): Malicious code in water-cloud-public-big-user (npm) (malicious package)
- [MAL-2025-190240](https://insights.sbomify.com/MAL-2025-190240/): Malicious code in water-catch-cloud-upsilon-java (npm) (malicious package)
- [MAL-2025-19024](https://insights.sbomify.com/MAL-2025-19024/): Malicious code in dxp-web (npm) (malicious package)
- [MAL-2025-190239](https://insights.sbomify.com/MAL-2025-190239/): Malicious code in water-balance-serialize-omicron-deploy (npm) (malicious package)
- [MAL-2025-190238](https://insights.sbomify.com/MAL-2025-190238/): Malicious code in water-await-kappa-byte-minify (npm) (malicious package)
- [MAL-2025-190237](https://insights.sbomify.com/MAL-2025-190237/): Malicious code in water-assert-file-data-emulate (npm) (malicious package)
- [MAL-2025-190236](https://insights.sbomify.com/MAL-2025-190236/): Malicious code in wasat-rimraf-csrf-halley (npm) (malicious package)
- [MAL-2025-190235](https://insights.sbomify.com/MAL-2025-190235/): Malicious code in wasat-pulsar-exobiology-link (npm) (malicious package)
- [MAL-2025-190234](https://insights.sbomify.com/MAL-2025-190234/): Malicious code in wasat-photon-await-mocha (npm) (malicious package)
- [MAL-2025-190233](https://insights.sbomify.com/MAL-2025-190233/): Malicious code in wasat-foundation-webdriverio-eslint (npm) (malicious package)
- [MAL-2025-190232](https://insights.sbomify.com/MAL-2025-190232/): Malicious code in wasat-dactyl-tailwindcss-dagda (npm) (malicious package)
- [MAL-2025-190231](https://insights.sbomify.com/MAL-2025-190231/): Malicious code in wasat-cosmochemistry-nucleosynthesis-nextjs (npm) (malicious package)
- [MAL-2025-190230](https://insights.sbomify.com/MAL-2025-190230/): Malicious code in wasat-carina-shelljs-sqlite (npm) (malicious package)
- [MAL-2025-19023](https://insights.sbomify.com/MAL-2025-19023/): Malicious code in dxmbyouhpsgiltka (npm) (malicious package)
- [MAL-2025-190229](https://insights.sbomify.com/MAL-2025-190229/): Malicious code in wasat-bioinformatics-leda-bionics (npm) (malicious package)
- [MAL-2025-190228](https://insights.sbomify.com/MAL-2025-190228/): Malicious code in wasat-betelgeuse-mini-css-extract-plugin-cosmos (npm) (malicious package)
- [MAL-2025-190227](https://insights.sbomify.com/MAL-2025-190227/): Malicious code in warp-sails-selenology-gravity (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/929/