# Vulnerabilities published in 2025


- [MAL-2025-190226](https://insights.sbomify.com/MAL-2025-190226/): Malicious code in warp-ora-duplex-jekyll (npm) (malicious package)
- [MAL-2025-190225](https://insights.sbomify.com/MAL-2025-190225/): Malicious code in warp-mdx-hermes-europa (npm) (malicious package)
- [MAL-2025-190224](https://insights.sbomify.com/MAL-2025-190224/): Malicious code in warp-luminescence-ionosphere-baryon (npm) (malicious package)
- [MAL-2025-190223](https://insights.sbomify.com/MAL-2025-190223/): Malicious code in warp-jwt-mongoose-mira (npm) (malicious package)
- [MAL-2025-190222](https://insights.sbomify.com/MAL-2025-190222/): Malicious code in warp-hyperion-quasar-quark (npm) (malicious package)
- [MAL-2025-190221](https://insights.sbomify.com/MAL-2025-190221/): Malicious code in warp-elara-leda-bulma (npm) (malicious package)
- [MAL-2025-190220](https://insights.sbomify.com/MAL-2025-190220/): Malicious code in warp-dotenv-safe-andromeda-uglify-js (npm) (malicious package)
- [MAL-2025-19022](https://insights.sbomify.com/MAL-2025-19022/): Malicious code in dxjfnwthkpsvuzog (npm) (malicious package)
- [MAL-2025-190219](https://insights.sbomify.com/MAL-2025-190219/): Malicious code in warp-boson-callback-supercluster (npm) (malicious package)
- [MAL-2025-190218](https://insights.sbomify.com/MAL-2025-190218/): Malicious code in warp-asthenosphere-ganymede-publish (npm) (malicious package)
- [MAL-2025-190217](https://insights.sbomify.com/MAL-2025-190217/): Malicious code in warn-spy-grep-compress-load (npm) (malicious package)
- [MAL-2025-190216](https://insights.sbomify.com/MAL-2025-190216/): Malicious code in warn-sigma-cat-interpret-pipe (npm) (malicious package)
- [MAL-2025-190215](https://insights.sbomify.com/MAL-2025-190215/): Malicious code in warn-shell-async-virtualize-mu (npm) (malicious package)
- [MAL-2025-190214](https://insights.sbomify.com/MAL-2025-190214/): Malicious code in warn-pi-visualize-catch-slow (npm) (malicious package)
- [MAL-2025-190213](https://insights.sbomify.com/MAL-2025-190213/): Malicious code in warn-function-assert-report-thread (npm) (malicious package)
- [MAL-2025-190212](https://insights.sbomify.com/MAL-2025-190212/): Malicious code in warn-class-proxy-cron-earth (npm) (malicious package)
- [MAL-2025-190211](https://insights.sbomify.com/MAL-2025-190211/): Malicious code in warn-bash-grep-array-test (npm) (malicious package)
- [MAL-2025-190210](https://insights.sbomify.com/MAL-2025-190210/): Malicious code in warn-array-container-grid-stub (npm) (malicious package)
- [MAL-2025-19021](https://insights.sbomify.com/MAL-2025-19021/): Malicious code in dxfiles (npm) (malicious package)
- [MAL-2025-190209](https://insights.sbomify.com/MAL-2025-190209/): Malicious code in vulcan-semantic-release-pino-adonis (npm) (malicious package)
- [MAL-2025-190208](https://insights.sbomify.com/MAL-2025-190208/): Malicious code in vulcan-rimraf-sirius-enceladus (npm) (malicious package)
- [MAL-2025-190207](https://insights.sbomify.com/MAL-2025-190207/): Malicious code in vulcan-quasar-prettier-europa (npm) (malicious package)
- [MAL-2025-190206](https://insights.sbomify.com/MAL-2025-190206/): Malicious code in vulcan-nestjs-pm2-biohacking (npm) (malicious package)
- [MAL-2025-190205](https://insights.sbomify.com/MAL-2025-190205/): Malicious code in vulcan-delphinus-protoplanetarydisk-gatsby (npm) (malicious package)
- [MAL-2025-190204](https://insights.sbomify.com/MAL-2025-190204/): Malicious code in vulcan-astrobiology-wavefunction-delphinus (npm) (malicious package)
- [MAL-2025-190203](https://insights.sbomify.com/MAL-2025-190203/): Malicious code in vulcan-asthenosphere-babel-exoplanet (npm) (malicious package)
- [MAL-2025-190202](https://insights.sbomify.com/MAL-2025-190202/): Malicious code in vuetify-xanadu-stratigraphy-sedimentology (npm) (malicious package)
- [MAL-2025-190201](https://insights.sbomify.com/MAL-2025-190201/): Malicious code in vuetify-thermochronology-csv-cryovolcano (npm) (malicious package)
- [MAL-2025-190200](https://insights.sbomify.com/MAL-2025-190200/): Malicious code in vuetify-solis-ariel-helios (npm) (malicious package)
- [MAL-2025-19020](https://insights.sbomify.com/MAL-2025-19020/): Malicious code in dxball (npm) (malicious package)
- [MAL-2025-1902](https://insights.sbomify.com/MAL-2025-1902/): Malicious code in metamask-sdk-e2e (npm) (malicious package)
- [MAL-2025-190199](https://insights.sbomify.com/MAL-2025-190199/): Malicious code in vuetify-ophiuchus-request-kaus (npm) (malicious package)
- [MAL-2025-190198](https://insights.sbomify.com/MAL-2025-190198/): Malicious code in vuetify-greatfilter-terser-dysonswarm (npm) (malicious package)
- [MAL-2025-190197](https://insights.sbomify.com/MAL-2025-190197/): Malicious code in vuetify-firebase-darkmatter-mineralogy (npm) (malicious package)
- [MAL-2025-190196](https://insights.sbomify.com/MAL-2025-190196/): Malicious code in vuepress-winston-deneb-vulcan (npm) (malicious package)
- [MAL-2025-190195](https://insights.sbomify.com/MAL-2025-190195/): Malicious code in vuepress-update-canopus-zooarchaeology (npm) (malicious package)
- [MAL-2025-190194](https://insights.sbomify.com/MAL-2025-190194/): Malicious code in vuepress-toml-magellan-rimraf (npm) (malicious package)
- [MAL-2025-190193](https://insights.sbomify.com/MAL-2025-190193/): Malicious code in vuepress-process-sagitta-postgres (npm) (malicious package)
- [MAL-2025-190192](https://insights.sbomify.com/MAL-2025-190192/): Malicious code in vuepress-parallax-socketio-juno (npm) (malicious package)
- [MAL-2025-190191](https://insights.sbomify.com/MAL-2025-190191/): Malicious code in vuepress-mineralogy-aldebaran-taphonomy (npm) (malicious package)
- [MAL-2025-190190](https://insights.sbomify.com/MAL-2025-190190/): Malicious code in vuepress-centauri-transhumanism-astrobiology (npm) (malicious package)
- [MAL-2025-19019](https://insights.sbomify.com/MAL-2025-19019/): Malicious code in dxahgyofjmlesnbr (npm) (malicious package)
- [MAL-2025-190189](https://insights.sbomify.com/MAL-2025-190189/): Malicious code in vuepress-auth0-meteor-duplex (npm) (malicious package)
- [MAL-2025-190188](https://insights.sbomify.com/MAL-2025-190188/): Malicious code in vuepress-apollo-kuiperbelt-hercules (npm) (malicious package)
- [MAL-2025-190187](https://insights.sbomify.com/MAL-2025-190187/): Malicious code in vortex-husky-sqlite-exobiology (npm) (malicious package)
- [MAL-2025-190186](https://insights.sbomify.com/MAL-2025-190186/): Malicious code in vortex-enceladus-slides-xanthus (npm) (malicious package)
- [MAL-2025-190185](https://insights.sbomify.com/MAL-2025-190185/): Malicious code in vortex-auth0-string-holography (npm) (malicious package)
- [MAL-2025-190184](https://insights.sbomify.com/MAL-2025-190184/): Malicious code in volcanology-yakutsk-phenomic-xo (npm) (malicious package)
- [MAL-2025-190183](https://insights.sbomify.com/MAL-2025-190183/): Malicious code in void-uglify-warn-export-zero (npm) (malicious package)
- [MAL-2025-190182](https://insights.sbomify.com/MAL-2025-190182/): Malicious code in void-oberon-supernova-package (npm) (malicious package)
- [MAL-2025-190181](https://insights.sbomify.com/MAL-2025-190181/): Malicious code in void-kernel-integer-visualize-string (npm) (malicious package)
- [MAL-2025-190180](https://insights.sbomify.com/MAL-2025-190180/): Malicious code in void-grus-superagent-planckscale (npm) (malicious package)
- [MAL-2025-19018](https://insights.sbomify.com/MAL-2025-19018/): Malicious code in dwslibs (npm) (malicious package)
- [MAL-2025-190179](https://insights.sbomify.com/MAL-2025-190179/): Malicious code in void-fork-zero-log-code (npm) (malicious package)
- [MAL-2025-190178](https://insights.sbomify.com/MAL-2025-190178/): Malicious code in void-exoplanet-ganymede-geodynamo (npm) (malicious package)
- [MAL-2025-190177](https://insights.sbomify.com/MAL-2025-190177/): Malicious code in void-cassini-thermosphere-cosmicsilence (npm) (malicious package)
- [MAL-2025-190176](https://insights.sbomify.com/MAL-2025-190176/): Malicious code in vite-chunk-master (npm) (malicious package)
- [MAL-2025-190175](https://insights.sbomify.com/MAL-2025-190175/): Malicious code in visualize-visualize-test-assert-monitor (npm) (malicious package)
- [MAL-2025-190174](https://insights.sbomify.com/MAL-2025-190174/): Malicious code in visualize-validate-array-hot-analyze (npm) (malicious package)
- [MAL-2025-190173](https://insights.sbomify.com/MAL-2025-190173/): Malicious code in visualize-object-xml-long-sigma (npm) (malicious package)
- [MAL-2025-190172](https://insights.sbomify.com/MAL-2025-190172/): Malicious code in visualize-interface-byte-char-chi (npm) (malicious package)
- [MAL-2025-190171](https://insights.sbomify.com/MAL-2025-190171/): Malicious code in visualize-decompress-finally-abstract-final (npm) (malicious package)
- [MAL-2025-190170](https://insights.sbomify.com/MAL-2025-190170/): Malicious code in visualize-cache-web-float-slow (npm) (malicious package)
- [MAL-2025-19017](https://insights.sbomify.com/MAL-2025-19017/): Malicious code in dwellio (npm) (malicious package)
- [MAL-2025-190169](https://insights.sbomify.com/MAL-2025-190169/): Malicious code in virtualreality-paleoecology-nova-zooarchaeology (npm) (malicious package)
- [MAL-2025-190168](https://insights.sbomify.com/MAL-2025-190168/): Malicious code in virtualreality-gatsby-brane-lynx (npm) (malicious package)
- [MAL-2025-190167](https://insights.sbomify.com/MAL-2025-190167/): Malicious code in virtualreality-bootstrap-geochronology-nuxtjs (npm) (malicious package)
- [MAL-2025-190166](https://insights.sbomify.com/MAL-2025-190166/): Malicious code in virtualreality-biotechnology-standard-chakra-ui (npm) (malicious package)
- [MAL-2025-190165](https://insights.sbomify.com/MAL-2025-190165/): Malicious code in virtualreality-algol-loglevel-nebula (npm) (malicious package)
- [MAL-2025-190164](https://insights.sbomify.com/MAL-2025-190164/): Malicious code in virtualreality-abiogenesis-passport-chalk (npm) (malicious package)
- [MAL-2025-190163](https://insights.sbomify.com/MAL-2025-190163/): Malicious code in virtualize-reject-secure-finally-function (npm) (malicious package)
- [MAL-2025-190162](https://insights.sbomify.com/MAL-2025-190162/): Malicious code in virtualize-kernel-string-cluster-mu (npm) (malicious package)
- [MAL-2025-190161](https://insights.sbomify.com/MAL-2025-190161/): Malicious code in virtualize-cache-cloud-cat-slow (npm) (malicious package)
- [MAL-2025-190160](https://insights.sbomify.com/MAL-2025-190160/): Malicious code in virgo-terser-webpack-plugin-resonance-jekyll (npm) (malicious package)
- [MAL-2025-19016](https://insights.sbomify.com/MAL-2025-19016/): Malicious code in dwarf-zamia-cpzy (npm) (malicious package)
- [MAL-2025-190159](https://insights.sbomify.com/MAL-2025-190159/): Malicious code in virgo-joviology-proxima-install (npm) (malicious package)
- [MAL-2025-190158](https://insights.sbomify.com/MAL-2025-190158/): Malicious code in virgo-framework-dependencies-firebase (npm) (malicious package)
- [MAL-2025-190157](https://insights.sbomify.com/MAL-2025-190157/): Malicious code in virgo-css-loader-whitedwarf-mongoose (npm) (malicious package)
- [MAL-2025-190156](https://insights.sbomify.com/MAL-2025-190156/): Malicious code in virgo-build-equinox-init (npm) (malicious package)
- [MAL-2025-190155](https://insights.sbomify.com/MAL-2025-190155/): Malicious code in virgo-async-astrobiology-nashira (npm) (malicious package)
- [MAL-2025-190154](https://insights.sbomify.com/MAL-2025-190154/): Malicious code in virgo-arcturus-hydra-stream (npm) (malicious package)
- [MAL-2025-190153](https://insights.sbomify.com/MAL-2025-190153/): Malicious code in virgo-airbnb-accretion-backend (npm) (malicious package)
- [MAL-2025-190152](https://insights.sbomify.com/MAL-2025-190152/): Malicious code in view-warn-bash-rain-old (npm) (malicious package)
- [MAL-2025-190151](https://insights.sbomify.com/MAL-2025-190151/): Malicious code in view-visualize-nu-shell-small (npm) (malicious package)
- [MAL-2025-190150](https://insights.sbomify.com/MAL-2025-190150/): Malicious code in view-omicron-unix-compress-authorize (npm) (malicious package)
- [MAL-2025-19015](https://insights.sbomify.com/MAL-2025-19015/): Malicious code in dwarf-whiskey-fpcz (npm) (malicious package)
- [MAL-2025-190149](https://insights.sbomify.com/MAL-2025-190149/): Malicious code in view-object-promise-xi-table (npm) (malicious package)
- [MAL-2025-190148](https://insights.sbomify.com/MAL-2025-190148/): Malicious code in view-fire-data-simple-uglify (npm) (malicious package)
- [MAL-2025-190147](https://insights.sbomify.com/MAL-2025-190147/): Malicious code in view-deploy-scale-promise-await (npm) (malicious package)
- [MAL-2025-190146](https://insights.sbomify.com/MAL-2025-190146/): Malicious code in version-virtualreality-scorpius-wezen (npm) (malicious package)
- [MAL-2025-190145](https://insights.sbomify.com/MAL-2025-190145/): Malicious code in version-sass-loader-webpack-quantum-computing (npm) (malicious package)
- [MAL-2025-190144](https://insights.sbomify.com/MAL-2025-190144/): Malicious code in version-pyxis-spawn-epimetheus (npm) (malicious package)
- [MAL-2025-190143](https://insights.sbomify.com/MAL-2025-190143/): Malicious code in version-meteor-jupiter-chariklo (npm) (malicious package)
- [MAL-2025-190142](https://insights.sbomify.com/MAL-2025-190142/): Malicious code in version-dactyl-npm-colors (npm) (malicious package)
- [MAL-2025-190141](https://insights.sbomify.com/MAL-2025-190141/): Malicious code in version-aquarius-run-script-nova (npm) (malicious package)
- [MAL-2025-190140](https://insights.sbomify.com/MAL-2025-190140/): Malicious code in venus-phoebe-heliophysics-winston (npm) (malicious package)
- [MAL-2025-19014](https://insights.sbomify.com/MAL-2025-19014/): Malicious code in dwarf-orange-puti (npm) (malicious package)
- [MAL-2025-190139](https://insights.sbomify.com/MAL-2025-190139/): Malicious code in venus-nextjs-heka-solis (npm) (malicious package)
- [MAL-2025-190138](https://insights.sbomify.com/MAL-2025-190138/): Malicious code in venus-epimetheus-halley-json (npm) (malicious package)
- [MAL-2025-190137](https://insights.sbomify.com/MAL-2025-190137/): Malicious code in venus-dactyl-publish-markdownlint (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/930/