# Vulnerabilities published in 2025


- [MAL-2025-190046](https://insights.sbomify.com/MAL-2025-190046/): Malicious code in umbriel-kastra-gacrux-google (npm) (malicious package)
- [MAL-2025-190045](https://insights.sbomify.com/MAL-2025-190045/): Malicious code in umbriel-gulp-sqlite-shelljs (npm) (malicious package)
- [MAL-2025-190044](https://insights.sbomify.com/MAL-2025-190044/): Malicious code in umbriel-eslint-config-kardashevscale-jwt (npm) (malicious package)
- [MAL-2025-190043](https://insights.sbomify.com/MAL-2025-190043/): Malicious code in umbriel-bootstrap-polaris-comet (npm) (malicious package)
- [MAL-2025-190042](https://insights.sbomify.com/MAL-2025-190042/): Malicious code in umbriel-ariel-rigel-metalsmith (npm) (malicious package)
- [MAL-2025-190041](https://insights.sbomify.com/MAL-2025-190041/): Malicious code in umbra-octans-ablation-deneb (npm) (malicious package)
- [MAL-2025-190040](https://insights.sbomify.com/MAL-2025-190040/): Malicious code in umbra-mensa-bunyan-non-blocking (npm) (malicious package)
- [MAL-2025-19004](https://insights.sbomify.com/MAL-2025-19004/): Malicious code in dvee3 (npm) (malicious package)
- [MAL-2025-190039](https://insights.sbomify.com/MAL-2025-190039/): Malicious code in umbra-jekyll-foundation-graphql (npm) (malicious package)
- [MAL-2025-190038](https://insights.sbomify.com/MAL-2025-190038/): Malicious code in umbra-iota-graphql-callback (npm) (malicious package)
- [MAL-2025-190037](https://insights.sbomify.com/MAL-2025-190037/): Malicious code in umbra-farout-barnard-redshift (npm) (malicious package)
- [MAL-2025-190036](https://insights.sbomify.com/MAL-2025-190036/): Malicious code in umbra-enif-sirius-lightyear (npm) (malicious package)
- [MAL-2025-190035](https://insights.sbomify.com/MAL-2025-190035/): Malicious code in umbra-australis-dotenv-safe-google (npm) (malicious package)
- [MAL-2025-190034](https://insights.sbomify.com/MAL-2025-190034/): Malicious code in ultra-winston-standard-neutrino (npm) (malicious package)
- [MAL-2025-190033](https://insights.sbomify.com/MAL-2025-190033/): Malicious code in ultra-mira-centaurus-io (npm) (malicious package)
- [MAL-2025-190032](https://insights.sbomify.com/MAL-2025-190032/): Malicious code in ultra-library-remark-transform (npm) (malicious package)
- [MAL-2025-190031](https://insights.sbomify.com/MAL-2025-190031/): Malicious code in ultra-karma-nuxtjs-nanotechnology (npm) (malicious package)
- [MAL-2025-190030](https://insights.sbomify.com/MAL-2025-190030/): Malicious code in ultra-html-webpack-plugin-zenith-quito (npm) (malicious package)
- [MAL-2025-19003](https://insights.sbomify.com/MAL-2025-19003/): Malicious code in dvdstore (npm) (malicious package)
- [MAL-2025-190029](https://insights.sbomify.com/MAL-2025-190029/): Malicious code in uglify-zeta-tree-delta-runtime (npm) (malicious package)
- [MAL-2025-190028](https://insights.sbomify.com/MAL-2025-190028/): Malicious code in uglify-view-stub-simulate-short (npm) (malicious package)
- [MAL-2025-190027](https://insights.sbomify.com/MAL-2025-190027/): Malicious code in uglify-parse-socket-new-error (npm) (malicious package)
- [MAL-2025-190026](https://insights.sbomify.com/MAL-2025-190026/): Malicious code in uglify-js-leda-epigenetics-speleology (npm) (malicious package)
- [MAL-2025-190025](https://insights.sbomify.com/MAL-2025-190025/): Malicious code in uglify-js-gravity-upgrade-aether (npm) (malicious package)
- [MAL-2025-190024](https://insights.sbomify.com/MAL-2025-190024/): Malicious code in uglify-js-gatsby-mocha-titan (npm) (malicious package)
- [MAL-2025-190023](https://insights.sbomify.com/MAL-2025-190023/): Malicious code in uglify-js-buffer-exosphere-soap (npm) (malicious package)
- [MAL-2025-190022](https://insights.sbomify.com/MAL-2025-190022/): Malicious code in uglify-bash-index-beta-interface (npm) (malicious package)
- [MAL-2025-190021](https://insights.sbomify.com/MAL-2025-190021/): Malicious code in typeorm-xanthus-solis-soap (npm) (malicious package)
- [MAL-2025-190020](https://insights.sbomify.com/MAL-2025-190020/): Malicious code in typeorm-warp-procyon-non-blocking (npm) (malicious package)
- [MAL-2025-19002](https://insights.sbomify.com/MAL-2025-19002/): Malicious code in dvdrental (npm) (malicious package)
- [MAL-2025-190019](https://insights.sbomify.com/MAL-2025-190019/): Malicious code in typeorm-protractor-cryovolcano-concurrently (npm) (malicious package)
- [MAL-2025-190018](https://insights.sbomify.com/MAL-2025-190018/): Malicious code in typeorm-postcss-process-biomimicry (npm) (malicious package)
- [MAL-2025-190017](https://insights.sbomify.com/MAL-2025-190017/): Malicious code in typeorm-nestjs-equinox-europa (npm) (malicious package)
- [MAL-2025-190016](https://insights.sbomify.com/MAL-2025-190016/): Malicious code in typeorm-kuiperbelt-miranda-tachyon (npm) (malicious package)
- [MAL-2025-190015](https://insights.sbomify.com/MAL-2025-190015/): Malicious code in typeorm-indus-restart-update (npm) (malicious package)
- [MAL-2025-190014](https://insights.sbomify.com/MAL-2025-190014/): Malicious code in typeorm-csv-troposphere-socketio (npm) (malicious package)
- [MAL-2025-190013](https://insights.sbomify.com/MAL-2025-190013/): Malicious code in try-stub-yaml-query-awk (npm) (malicious package)
- [MAL-2025-190012](https://insights.sbomify.com/MAL-2025-190012/): Malicious code in try-signal-lambda-execute-kernel (npm) (malicious package)
- [MAL-2025-190011](https://insights.sbomify.com/MAL-2025-190011/): Malicious code in try-phi-lambda-public-validate (npm) (malicious package)
- [MAL-2025-190010](https://insights.sbomify.com/MAL-2025-190010/): Malicious code in try-import-fork-socket-beta (npm) (malicious package)
- [MAL-2025-19001](https://insights.sbomify.com/MAL-2025-19001/): Malicious code in duygusal (npm) (malicious package)
- [MAL-2025-190009](https://insights.sbomify.com/MAL-2025-190009/): Malicious code in try-data-signal-cloud-report (npm) (malicious package)
- [MAL-2025-190008](https://insights.sbomify.com/MAL-2025-190008/): Malicious code in try-benchmark-assert-module-protected (npm) (malicious package)
- [MAL-2025-190007](https://insights.sbomify.com/MAL-2025-190007/): Malicious code in try-alert-hash-catch-index (npm) (malicious package)
- [MAL-2025-190006](https://insights.sbomify.com/MAL-2025-190006/): Malicious code in troposphere-passport-dotenv-safe-zooarchaeology (npm) (malicious package)
- [MAL-2025-190005](https://insights.sbomify.com/MAL-2025-190005/): Malicious code in troposphere-elektra-supernova-antares (npm) (malicious package)
- [MAL-2025-190004](https://insights.sbomify.com/MAL-2025-190004/): Malicious code in troposphere-comet-changelog-html-webpack-plugin (npm) (malicious package)
- [MAL-2025-190003](https://insights.sbomify.com/MAL-2025-190003/): Malicious code in triton-subduction-gravitationalwave-sociobiology (npm) (malicious package)
- [MAL-2025-190002](https://insights.sbomify.com/MAL-2025-190002/): Malicious code in triton-subduction-darkenergy-boson (npm) (malicious package)
- [MAL-2025-190001](https://insights.sbomify.com/MAL-2025-190001/): Malicious code in triton-radiant-epimetheus-await (npm) (malicious package)
- [MAL-2025-190000](https://insights.sbomify.com/MAL-2025-190000/): Malicious code in triton-proxima-impulse-dotenv-parse-variables (npm) (malicious package)
- [MAL-2025-19000](https://insights.sbomify.com/MAL-2025-19000/): Malicious code in duverger (npm) (malicious package)
- [MAL-2025-1900](https://insights.sbomify.com/MAL-2025-1900/): Malicious code in meta-connect (npm) (malicious package)
- [MAL-2025-190](https://insights.sbomify.com/MAL-2025-190/): Malicious code in frontend-testing-redefined (npm) (malicious package)
- [MAL-2025-19](https://insights.sbomify.com/MAL-2025-19/): Malicious code in nativescript-gainsight-px2 (npm) (malicious package)
- [MAL-2025-189999](https://insights.sbomify.com/MAL-2025-189999/): Malicious code in triton-perseus-paleobotany-changelog (npm) (malicious package)
- [MAL-2025-189998](https://insights.sbomify.com/MAL-2025-189998/): Malicious code in triton-nconf-sublimation-grus (npm) (malicious package)
- [MAL-2025-189997](https://insights.sbomify.com/MAL-2025-189997/): Malicious code in triton-meissa-indus-phenomic (npm) (malicious package)
- [MAL-2025-189996](https://insights.sbomify.com/MAL-2025-189996/): Malicious code in tree-validate-info-signal-abstract (npm) (malicious package)
- [MAL-2025-189995](https://insights.sbomify.com/MAL-2025-189995/): Malicious code in tree-psi-air-moon-air (npm) (malicious package)
- [MAL-2025-189994](https://insights.sbomify.com/MAL-2025-189994/): Malicious code in tree-notify-report-decrypt-scale (npm) (malicious package)
- [MAL-2025-189993](https://insights.sbomify.com/MAL-2025-189993/): Malicious code in tree-notify-fire-resolve-scale (npm) (malicious package)
- [MAL-2025-189992](https://insights.sbomify.com/MAL-2025-189992/): Malicious code in tree-function-kappa-decrypt-assert (npm) (malicious package)
- [MAL-2025-189991](https://insights.sbomify.com/MAL-2025-189991/): Malicious code in tree-awk-notify-beta-cloud (npm) (malicious package)
- [MAL-2025-189990](https://insights.sbomify.com/MAL-2025-189990/): Malicious code in transport-xanadu-delphinus-achernar (npm) (malicious package)
- [MAL-2025-18999](https://insights.sbomify.com/MAL-2025-18999/): Malicious code in dusthelpers-supplement (npm) (malicious package)
- [MAL-2025-189989](https://insights.sbomify.com/MAL-2025-189989/): Malicious code in transport-ursa-spinner-pulsar (npm) (malicious package)
- [MAL-2025-189988](https://insights.sbomify.com/MAL-2025-189988/): Malicious code in transport-technocracy-geomorphology-bellatrix (npm) (malicious package)
- [MAL-2025-189987](https://insights.sbomify.com/MAL-2025-189987/): Malicious code in transport-semantic-release-cressida-middleware (npm) (malicious package)
- [MAL-2025-189986](https://insights.sbomify.com/MAL-2025-189986/): Malicious code in transport-registry-slidev-upgrade (npm) (malicious package)
- [MAL-2025-189985](https://insights.sbomify.com/MAL-2025-189985/): Malicious code in transport-postcss-loader-terser-betelgeuse (npm) (malicious package)
- [MAL-2025-189984](https://insights.sbomify.com/MAL-2025-189984/): Malicious code in transport-command-tachyon-foundation (npm) (malicious package)
- [MAL-2025-189983](https://insights.sbomify.com/MAL-2025-189983/): Malicious code in transport-betelgeuse-cluster-juno (npm) (malicious package)
- [MAL-2025-189982](https://insights.sbomify.com/MAL-2025-189982/): Malicious code in transport-babel-dagda-electron (npm) (malicious package)
- [MAL-2025-189981](https://insights.sbomify.com/MAL-2025-189981/): Malicious code in transpile-refactor-protected-promise-interface (npm) (malicious package)
- [MAL-2025-189980](https://insights.sbomify.com/MAL-2025-189980/): Malicious code in transpile-pi-cron-secure-double (npm) (malicious package)
- [MAL-2025-18998](https://insights.sbomify.com/MAL-2025-18998/): Malicious code in dusthelpers-onboarding (npm) (malicious package)
- [MAL-2025-189979](https://insights.sbomify.com/MAL-2025-189979/): Malicious code in transpile-new-cache-iota-quick (npm) (malicious package)
- [MAL-2025-189978](https://insights.sbomify.com/MAL-2025-189978/): Malicious code in transpile-double-grep-book-iota (npm) (malicious package)
- [MAL-2025-189977](https://insights.sbomify.com/MAL-2025-189977/): Malicious code in transpile-bundle-upsilon-decrypt-secure (npm) (malicious package)
- [MAL-2025-189976](https://insights.sbomify.com/MAL-2025-189976/): Malicious code in transhumanism-release-it-neptune-init (npm) (malicious package)
- [MAL-2025-189975](https://insights.sbomify.com/MAL-2025-189975/): Malicious code in transhumanism-registry-nucleosynthesis-axios (npm) (malicious package)
- [MAL-2025-189974](https://insights.sbomify.com/MAL-2025-189974/): Malicious code in transhumanism-mesosphere-sirius-tectonophysics (npm) (malicious package)
- [MAL-2025-189973](https://insights.sbomify.com/MAL-2025-189973/): Malicious code in transhumanism-cli-superflare-hermes (npm) (malicious package)
- [MAL-2025-189972](https://insights.sbomify.com/MAL-2025-189972/): Malicious code in transhumanism-blueshift-thuban-geckodriver (npm) (malicious package)
- [MAL-2025-189971](https://insights.sbomify.com/MAL-2025-189971/): Malicious code in transhumanism-auriga-markdownlint-canopus (npm) (malicious package)
- [MAL-2025-189970](https://insights.sbomify.com/MAL-2025-189970/): Malicious code in transform-version-sequelize-native (npm) (malicious package)
- [MAL-2025-18997](https://insights.sbomify.com/MAL-2025-18997/): Malicious code in dusk_rynw0_ewjbk_jewel (npm) (malicious package)
- [MAL-2025-189969](https://insights.sbomify.com/MAL-2025-189969/): Malicious code in transform-semantic-ui-eleventy-phoebe (npm) (malicious package)
- [MAL-2025-189968](https://insights.sbomify.com/MAL-2025-189968/): Malicious code in transform-robotics-filament-orbit (npm) (malicious package)
- [MAL-2025-189967](https://insights.sbomify.com/MAL-2025-189967/): Malicious code in transform-pegasus-await-volcanology (npm) (malicious package)
- [MAL-2025-189966](https://insights.sbomify.com/MAL-2025-189966/): Malicious code in transform-galaxy-writable-slides (npm) (malicious package)
- [MAL-2025-189965](https://insights.sbomify.com/MAL-2025-189965/): Malicious code in transform-forever-quantum-computing-archaeoastronomy (npm) (malicious package)
- [MAL-2025-189964](https://insights.sbomify.com/MAL-2025-189964/): Malicious code in transform-ethology-weywot-style-loader (npm) (malicious package)
- [MAL-2025-189963](https://insights.sbomify.com/MAL-2025-189963/): Malicious code in transform-command-cors-parcel (npm) (malicious package)
- [MAL-2025-189962](https://insights.sbomify.com/MAL-2025-189962/): Malicious code in transform-carpo-charon-hapi (npm) (malicious package)
- [MAL-2025-189961](https://insights.sbomify.com/MAL-2025-189961/): Malicious code in transform-blitz-element-ui-helios (npm) (malicious package)
- [MAL-2025-189960](https://insights.sbomify.com/MAL-2025-189960/): Malicious code in tool-webdriver-mocha-prettier-axios (npm) (malicious package)
- [MAL-2025-18996](https://insights.sbomify.com/MAL-2025-18996/): Malicious code in dusk_75hjv_dbhkq_pine (npm) (malicious package)
- [MAL-2025-189959](https://insights.sbomify.com/MAL-2025-189959/): Malicious code in tool-wavefunction-ultra-gridsome (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/932/