# Vulnerabilities published in 2025


- [MAL-2025-190136](https://insights.sbomify.com/MAL-2025-190136/): Malicious code in vega-xerxes-meissa-chalk (npm) (malicious package)
- [MAL-2025-190135](https://insights.sbomify.com/MAL-2025-190135/): Malicious code in vega-toml-hexo-quito (npm) (malicious package)
- [MAL-2025-190134](https://insights.sbomify.com/MAL-2025-190134/): Malicious code in vega-panspermia-jwt-gemini (npm) (malicious package)
- [MAL-2025-190133](https://insights.sbomify.com/MAL-2025-190133/): Malicious code in vega-joviology-vega-bellatrix (npm) (malicious package)
- [MAL-2025-190132](https://insights.sbomify.com/MAL-2025-190132/): Malicious code in vega-eclipse-paleoclimatology-lacerta (npm) (malicious package)
- [MAL-2025-190131](https://insights.sbomify.com/MAL-2025-190131/): Malicious code in vega-cypress-miranda-tethys (npm) (malicious package)
- [MAL-2025-190130](https://insights.sbomify.com/MAL-2025-190130/): Malicious code in vega-commitlint-prosthetics-cressida (npm) (malicious package)
- [MAL-2025-19013](https://insights.sbomify.com/MAL-2025-19013/): Malicious code in dwarf-lima-g526 (npm) (malicious package)
- [MAL-2025-190129](https://insights.sbomify.com/MAL-2025-190129/): Malicious code in user-route-fast-easy-sigma (npm) (malicious package)
- [MAL-2025-190128](https://insights.sbomify.com/MAL-2025-190128/): Malicious code in user-root-node-transpile-class (npm) (malicious package)
- [MAL-2025-190127](https://insights.sbomify.com/MAL-2025-190127/): Malicious code in user-reject-good-code-sed (npm) (malicious package)
- [MAL-2025-190126](https://insights.sbomify.com/MAL-2025-190126/): Malicious code in user-refactor-cluster-transpile-eta (npm) (malicious package)
- [MAL-2025-190125](https://insights.sbomify.com/MAL-2025-190125/): Malicious code in user-lambda-decompress-benchmark-omega (npm) (malicious package)
- [MAL-2025-190124](https://insights.sbomify.com/MAL-2025-190124/): Malicious code in user-double-signal-node-upsilon (npm) (malicious package)
- [MAL-2025-190123](https://insights.sbomify.com/MAL-2025-190123/): Malicious code in user-boolean-info-decode-try (npm) (malicious package)
- [MAL-2025-190122](https://insights.sbomify.com/MAL-2025-190122/): Malicious code in user-book-gamma-notify-old (npm) (malicious package)
- [MAL-2025-190121](https://insights.sbomify.com/MAL-2025-190121/): Malicious code in user-benchmark-omega-benchmark-socket (npm) (malicious package)
- [MAL-2025-190120](https://insights.sbomify.com/MAL-2025-190120/): Malicious code in user-analyze-uglify-minify-easy (npm) (malicious package)
- [MAL-2025-19012](https://insights.sbomify.com/MAL-2025-19012/): Malicious code in dwarf-kangaroo-bfyu (npm) (malicious package)
- [MAL-2025-190119](https://insights.sbomify.com/MAL-2025-190119/): Malicious code in ursa-weywot-ursa-betelgeuse (npm) (malicious package)
- [MAL-2025-190118](https://insights.sbomify.com/MAL-2025-190118/): Malicious code in ursa-testcafe-innercore-planckscale (npm) (malicious package)
- [MAL-2025-190117](https://insights.sbomify.com/MAL-2025-190117/): Malicious code in ursa-rest-fetch-thermochronology (npm) (malicious package)
- [MAL-2025-190116](https://insights.sbomify.com/MAL-2025-190116/): Malicious code in ursa-readable-astrophysics-wolf (npm) (malicious package)
- [MAL-2025-190115](https://insights.sbomify.com/MAL-2025-190115/): Malicious code in ursa-protoplanetarydisk-electron-prettier-plugin-markdown (npm) (malicious package)
- [MAL-2025-190114](https://insights.sbomify.com/MAL-2025-190114/): Malicious code in ursa-process-query-metabolomics (npm) (malicious package)
- [MAL-2025-190113](https://insights.sbomify.com/MAL-2025-190113/): Malicious code in ursa-pino-pretty-petrology-quark (npm) (malicious package)
- [MAL-2025-190112](https://insights.sbomify.com/MAL-2025-190112/): Malicious code in ursa-neptune-private-scripts (npm) (malicious package)
- [MAL-2025-190111](https://insights.sbomify.com/MAL-2025-190111/): Malicious code in ursa-mui-rest-xerxes (npm) (malicious package)
- [MAL-2025-190110](https://insights.sbomify.com/MAL-2025-190110/): Malicious code in ursa-lynx-baryon-ophiuchus (npm) (malicious package)
- [MAL-2025-19011](https://insights.sbomify.com/MAL-2025-19011/): Malicious code in dwarf-jupiter-e8xo (npm) (malicious package)
- [MAL-2025-190109](https://insights.sbomify.com/MAL-2025-190109/): Malicious code in ursa-jest-antd-helmet (npm) (malicious package)
- [MAL-2025-190108](https://insights.sbomify.com/MAL-2025-190108/): Malicious code in ursa-inflation-atlas-taphonomy (npm) (malicious package)
- [MAL-2025-190107](https://insights.sbomify.com/MAL-2025-190107/): Malicious code in ursa-hawkingradiation-pulsar-superagent (npm) (malicious package)
- [MAL-2025-190106](https://insights.sbomify.com/MAL-2025-190106/): Malicious code in ursa-eslint-gemini-vortex (npm) (malicious package)
- [MAL-2025-190105](https://insights.sbomify.com/MAL-2025-190105/): Malicious code in ursa-eslint-config-draco-kronos (npm) (malicious package)
- [MAL-2025-190104](https://insights.sbomify.com/MAL-2025-190104/): Malicious code in ursa-comet-cosmogenic-virgo (npm) (malicious package)
- [MAL-2025-190103](https://insights.sbomify.com/MAL-2025-190103/): Malicious code in ursa-auth0-delphinus-nodejs (npm) (malicious package)
- [MAL-2025-190102](https://insights.sbomify.com/MAL-2025-190102/): Malicious code in uranology-version-flare-hydra (npm) (malicious package)
- [MAL-2025-190101](https://insights.sbomify.com/MAL-2025-190101/): Malicious code in uranology-sagitta-cors-cluster (npm) (malicious package)
- [MAL-2025-190100](https://insights.sbomify.com/MAL-2025-190100/): Malicious code in uranology-less-markdown-pdf-eclipse (npm) (malicious package)
- [MAL-2025-19010](https://insights.sbomify.com/MAL-2025-19010/): Malicious code in dwarf-echo-3jvk (npm) (malicious package)
- [MAL-2025-1901](https://insights.sbomify.com/MAL-2025-1901/): Malicious code in meta-event (npm) (malicious package)
- [MAL-2025-190099](https://insights.sbomify.com/MAL-2025-190099/): Malicious code in uranology-development-nucleosynthesis-rimraf (npm) (malicious package)
- [MAL-2025-190098](https://insights.sbomify.com/MAL-2025-190098/): Malicious code in uranology-blueshift-kuiperbelt-aether (npm) (malicious package)
- [MAL-2025-190097](https://insights.sbomify.com/MAL-2025-190097/): Malicious code in upsilon-socket-cluster-static-eta (npm) (malicious package)
- [MAL-2025-190096](https://insights.sbomify.com/MAL-2025-190096/): Malicious code in upsilon-sed-authenticate-await-tau (npm) (malicious package)
- [MAL-2025-190095](https://insights.sbomify.com/MAL-2025-190095/): Malicious code in upsilon-sandbox-static-module-validate (npm) (malicious package)
- [MAL-2025-190094](https://insights.sbomify.com/MAL-2025-190094/): Malicious code in upsilon-parse-module-virtualize-sandbox (npm) (malicious package)
- [MAL-2025-190093](https://insights.sbomify.com/MAL-2025-190093/): Malicious code in upsilon-fork-pi-index-emulate (npm) (malicious package)
- [MAL-2025-190092](https://insights.sbomify.com/MAL-2025-190092/): Malicious code in upsilon-fast-epsilon-optimize-interface (npm) (malicious package)
- [MAL-2025-190091](https://insights.sbomify.com/MAL-2025-190091/): Malicious code in upsilon-decode-long-socket-final (npm) (malicious package)
- [MAL-2025-190090](https://insights.sbomify.com/MAL-2025-190090/): Malicious code in upsilon-decode-catch-log-function (npm) (malicious package)
- [MAL-2025-19009](https://insights.sbomify.com/MAL-2025-19009/): Malicious code in dwarf-eagle-is7f (npm) (malicious package)
- [MAL-2025-190089](https://insights.sbomify.com/MAL-2025-190089/): Malicious code in upsilon-catch-new-epsilon-unix (npm) (malicious package)
- [MAL-2025-190088](https://insights.sbomify.com/MAL-2025-190088/): Malicious code in upgrade-quantum-computing-eslint-plugin-areology (npm) (malicious package)
- [MAL-2025-190087](https://insights.sbomify.com/MAL-2025-190087/): Malicious code in upgrade-ophiuchus-nightwatch-lyra (npm) (malicious package)
- [MAL-2025-190086](https://insights.sbomify.com/MAL-2025-190086/): Malicious code in upgrade-mysql-biomimicry-async (npm) (malicious package)
- [MAL-2025-190085](https://insights.sbomify.com/MAL-2025-190085/): Malicious code in upgrade-mesosphere-slides-sirius (npm) (malicious package)
- [MAL-2025-190084](https://insights.sbomify.com/MAL-2025-190084/): Malicious code in upgrade-hexo-gulp-cosmogenic (npm) (malicious package)
- [MAL-2025-190083](https://insights.sbomify.com/MAL-2025-190083/): Malicious code in upgrade-dysonswarm-node-config-got (npm) (malicious package)
- [MAL-2025-190082](https://insights.sbomify.com/MAL-2025-190082/): Malicious code in upgrade-async-forever-nextjs (npm) (malicious package)
- [MAL-2025-190081](https://insights.sbomify.com/MAL-2025-190081/): Malicious code in update-tethys-query-mensa (npm) (malicious package)
- [MAL-2025-190080](https://insights.sbomify.com/MAL-2025-190080/): Malicious code in update-proxima-xenobiology-sqlite (npm) (malicious package)
- [MAL-2025-19008](https://insights.sbomify.com/MAL-2025-19008/): Malicious code in dwarf-dragonfruit-95wq (npm) (malicious package)
- [MAL-2025-190079](https://insights.sbomify.com/MAL-2025-190079/): Malicious code in update-proxima-isostasy-archaeometry (npm) (malicious package)
- [MAL-2025-190078](https://insights.sbomify.com/MAL-2025-190078/): Malicious code in update-meteor-jupiter-kaus (npm) (malicious package)
- [MAL-2025-190077](https://insights.sbomify.com/MAL-2025-190077/): Malicious code in update-leda-ora-bootes (npm) (malicious package)
- [MAL-2025-190076](https://insights.sbomify.com/MAL-2025-190076/): Malicious code in update-hadron-rehype-phoenix (npm) (malicious package)
- [MAL-2025-190075](https://insights.sbomify.com/MAL-2025-190075/): Malicious code in update-dorado-farout-draco (npm) (malicious package)
- [MAL-2025-190074](https://insights.sbomify.com/MAL-2025-190074/): Malicious code in update-barnard-rigel-readable (npm) (malicious package)
- [MAL-2025-190073](https://insights.sbomify.com/MAL-2025-190073/): Malicious code in update-astroinformatics-technosignature-bellatrix (npm) (malicious package)
- [MAL-2025-190072](https://insights.sbomify.com/MAL-2025-190072/): Malicious code in unuk-uglify-js-astrochemistry-comet (npm) (malicious package)
- [MAL-2025-190071](https://insights.sbomify.com/MAL-2025-190071/): Malicious code in unuk-tethys-blueshift-cosmicsilence (npm) (malicious package)
- [MAL-2025-190070](https://insights.sbomify.com/MAL-2025-190070/): Malicious code in unuk-nightmare-antares-galaxy (npm) (malicious package)
- [MAL-2025-19007](https://insights.sbomify.com/MAL-2025-19007/): Malicious code in dwarf-delta-yrzo (npm) (malicious package)
- [MAL-2025-190069](https://insights.sbomify.com/MAL-2025-190069/): Malicious code in unuk-mui-antares-neuromorphic (npm) (malicious package)
- [MAL-2025-190068](https://insights.sbomify.com/MAL-2025-190068/): Malicious code in unuk-loop-mdx-mysql (npm) (malicious package)
- [MAL-2025-190067](https://insights.sbomify.com/MAL-2025-190067/): Malicious code in unuk-hapi-cross-env-nashira (npm) (malicious package)
- [MAL-2025-190066](https://insights.sbomify.com/MAL-2025-190066/): Malicious code in unuk-gatsby-dysonswarm-izar (npm) (malicious package)
- [MAL-2025-190065](https://insights.sbomify.com/MAL-2025-190065/): Malicious code in unuk-eris-paleontology-spectron (npm) (malicious package)
- [MAL-2025-190064](https://insights.sbomify.com/MAL-2025-190064/): Malicious code in unuk-deneb-pegasus-primatology (npm) (malicious package)
- [MAL-2025-190063](https://insights.sbomify.com/MAL-2025-190063/): Malicious code in unuk-cygnus-lyra-buffer (npm) (malicious package)
- [MAL-2025-190062](https://insights.sbomify.com/MAL-2025-190062/): Malicious code in unuk-cryonics-gravitationalwave-meteor (npm) (malicious package)
- [MAL-2025-190061](https://insights.sbomify.com/MAL-2025-190061/): Malicious code in unuk-chalk-proxima-test (npm) (malicious package)
- [MAL-2025-190060](https://insights.sbomify.com/MAL-2025-190060/): Malicious code in unix-zeta-star-execute-uglify (npm) (malicious package)
- [MAL-2025-19006](https://insights.sbomify.com/MAL-2025-19006/): Malicious code in dwarf-carrot-9tr9 (npm) (malicious package)
- [MAL-2025-190059](https://insights.sbomify.com/MAL-2025-190059/): Malicious code in unix-web-export-key-data (npm) (malicious package)
- [MAL-2025-190058](https://insights.sbomify.com/MAL-2025-190058/): Malicious code in unix-scale-protected-test-fire (npm) (malicious package)
- [MAL-2025-190057](https://insights.sbomify.com/MAL-2025-190057/): Malicious code in unix-execute-file-route-reject (npm) (malicious package)
- [MAL-2025-190056](https://insights.sbomify.com/MAL-2025-190056/): Malicious code in unix-earth-zero-decrypt-log (npm) (malicious package)
- [MAL-2025-190055](https://insights.sbomify.com/MAL-2025-190055/): Malicious code in uninstall-semantic-ui-await-postcss (npm) (malicious package)
- [MAL-2025-190054](https://insights.sbomify.com/MAL-2025-190054/): Malicious code in uninstall-sails-development-dynamo (npm) (malicious package)
- [MAL-2025-190053](https://insights.sbomify.com/MAL-2025-190053/): Malicious code in uninstall-higgs-aether-enceladus (npm) (malicious package)
- [MAL-2025-190052](https://insights.sbomify.com/MAL-2025-190052/): Malicious code in umbriel-zenobia-sedna-odin (npm) (malicious package)
- [MAL-2025-190051](https://insights.sbomify.com/MAL-2025-190051/): Malicious code in umbriel-transform-corvus-request (npm) (malicious package)
- [MAL-2025-190050](https://insights.sbomify.com/MAL-2025-190050/): Malicious code in umbriel-spica-rate-limiter-auriga (npm) (malicious package)
- [MAL-2025-19005](https://insights.sbomify.com/MAL-2025-19005/): Malicious code in dvrt-flux-react-router (npm) (malicious package)
- [MAL-2025-190049](https://insights.sbomify.com/MAL-2025-190049/): Malicious code in umbriel-singularity-auth0-polaris (npm) (malicious package)
- [MAL-2025-190048](https://insights.sbomify.com/MAL-2025-190048/): Malicious code in umbriel-paleoanthropology-aldebaran-areology (npm) (malicious package)
- [MAL-2025-190047](https://insights.sbomify.com/MAL-2025-190047/): Malicious code in umbriel-leda-pipe-process (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/931/