# Vulnerabilities published in 2025


- [MAL-2025-189958](https://insights.sbomify.com/MAL-2025-189958/): Malicious code in tool-tailwindcss-cosmology-native (npm) (malicious package)
- [MAL-2025-189957](https://insights.sbomify.com/MAL-2025-189957/): Malicious code in tool-pino-xenos-rollup (npm) (malicious package)
- [MAL-2025-189956](https://insights.sbomify.com/MAL-2025-189956/): Malicious code in tool-nightmare-cryovolcano-cryptography (npm) (malicious package)
- [MAL-2025-189955](https://insights.sbomify.com/MAL-2025-189955/): Malicious code in tool-dotenv-parse-variables-gravitationalwave-luna (npm) (malicious package)
- [MAL-2025-189954](https://insights.sbomify.com/MAL-2025-189954/): Malicious code in tool-dependencies-dotenv-library (npm) (malicious package)
- [MAL-2025-189953](https://insights.sbomify.com/MAL-2025-189953/): Malicious code in tool-callisto-betelgeuse-axios (npm) (malicious package)
- [MAL-2025-189952](https://insights.sbomify.com/MAL-2025-189952/): Malicious code in toml-terser-webpack-plugin-process-prompts (npm) (malicious package)
- [MAL-2025-189951](https://insights.sbomify.com/MAL-2025-189951/): Malicious code in toml-superflare-rollup-algol (npm) (malicious package)
- [MAL-2025-189950](https://insights.sbomify.com/MAL-2025-189950/): Malicious code in toml-slidev-nebula-antares (npm) (malicious package)
- [MAL-2025-18995](https://insights.sbomify.com/MAL-2025-18995/): Malicious code in dusk_75hdw_bfic8_zenith (npm) (malicious package)
- [MAL-2025-189949](https://insights.sbomify.com/MAL-2025-189949/): Malicious code in toml-protractor-spinner-inflation (npm) (malicious package)
- [MAL-2025-189948](https://insights.sbomify.com/MAL-2025-189948/): Malicious code in toml-jwt-docusaurus-celeste (npm) (malicious package)
- [MAL-2025-189947](https://insights.sbomify.com/MAL-2025-189947/): Malicious code in toml-json-express-event (npm) (malicious package)
- [MAL-2025-189946](https://insights.sbomify.com/MAL-2025-189946/): Malicious code in toml-ethology-cordelia-carpo (npm) (malicious package)
- [MAL-2025-189945](https://insights.sbomify.com/MAL-2025-189945/): Malicious code in toml-csrf-quark-geodynamo (npm) (malicious package)
- [MAL-2025-189944](https://insights.sbomify.com/MAL-2025-189944/): Malicious code in toml-apollo-materialize-hexo (npm) (malicious package)
- [MAL-2025-189943](https://insights.sbomify.com/MAL-2025-189943/): Malicious code in toml-airbnb-cosmicsilence-bionics (npm) (malicious package)
- [MAL-2025-189942](https://insights.sbomify.com/MAL-2025-189942/): Malicious code in titan-soap-request-framework (npm) (malicious package)
- [MAL-2025-189941](https://insights.sbomify.com/MAL-2025-189941/): Malicious code in titan-luna-luna-prompts (npm) (malicious package)
- [MAL-2025-189940](https://insights.sbomify.com/MAL-2025-189940/): Malicious code in titan-link-wolf-unuk (npm) (malicious package)
- [MAL-2025-18994](https://insights.sbomify.com/MAL-2025-18994/): Malicious code in dusk_6qvsq_mq3yi_kale (npm) (malicious package)
- [MAL-2025-189939](https://insights.sbomify.com/MAL-2025-189939/): Malicious code in titan-iota-carina-vuepress (npm) (malicious package)
- [MAL-2025-189938](https://insights.sbomify.com/MAL-2025-189938/): Malicious code in titan-fusion-virgo-slides (npm) (malicious package)
- [MAL-2025-189937](https://insights.sbomify.com/MAL-2025-189937/): Malicious code in titan-enceladus-release-it-callisto (npm) (malicious package)
- [MAL-2025-189936](https://insights.sbomify.com/MAL-2025-189936/): Malicious code in titan-despina-zenobia-antares (npm) (malicious package)
- [MAL-2025-189935](https://insights.sbomify.com/MAL-2025-189935/): Malicious code in titan-bootstrap-lynx-comet (npm) (malicious package)
- [MAL-2025-189934](https://insights.sbomify.com/MAL-2025-189934/): Malicious code in thuban-zooarchaeology-norma-palynology (npm) (malicious package)
- [MAL-2025-189933](https://insights.sbomify.com/MAL-2025-189933/): Malicious code in thuban-run-script-octans-eslint (npm) (malicious package)
- [MAL-2025-189932](https://insights.sbomify.com/MAL-2025-189932/): Malicious code in thuban-charon-uninstall-nextjs (npm) (malicious package)
- [MAL-2025-189931](https://insights.sbomify.com/MAL-2025-189931/): Malicious code in thuban-areology-event-quasar (npm) (malicious package)
- [MAL-2025-189930](https://insights.sbomify.com/MAL-2025-189930/): Malicious code in throw-uglify-old-spy-water (npm) (malicious package)
- [MAL-2025-18993](https://insights.sbomify.com/MAL-2025-18993/): Malicious code in dusk_2osvn_jw7zd_honey (npm) (malicious package)
- [MAL-2025-189929](https://insights.sbomify.com/MAL-2025-189929/): Malicious code in throw-simple-old-export-info (npm) (malicious package)
- [MAL-2025-189928](https://insights.sbomify.com/MAL-2025-189928/): Malicious code in throw-omega-catch-hot-sanitize (npm) (malicious package)
- [MAL-2025-189927](https://insights.sbomify.com/MAL-2025-189927/): Malicious code in throw-long-stub-thread-small (npm) (malicious package)
- [MAL-2025-189926](https://insights.sbomify.com/MAL-2025-189926/): Malicious code in throw-deploy-throw-error-iota (npm) (malicious package)
- [MAL-2025-189925](https://insights.sbomify.com/MAL-2025-189925/): Malicious code in throw-bad-orchestrate-analyze-cat (npm) (malicious package)
- [MAL-2025-189924](https://insights.sbomify.com/MAL-2025-189924/): Malicious code in throw-async-object-public-integer (npm) (malicious package)
- [MAL-2025-189923](https://insights.sbomify.com/MAL-2025-189923/): Malicious code in throw-analyze-cat-finally-assert (npm) (malicious package)
- [MAL-2025-189922](https://insights.sbomify.com/MAL-2025-189922/): Malicious code in thread-simulate-meta-small-cat (npm) (malicious package)
- [MAL-2025-189921](https://insights.sbomify.com/MAL-2025-189921/): Malicious code in thread-monitor-async-omicron-optimize (npm) (malicious package)
- [MAL-2025-189920](https://insights.sbomify.com/MAL-2025-189920/): Malicious code in thread-link-code-stack-old (npm) (malicious package)
- [MAL-2025-18992](https://insights.sbomify.com/MAL-2025-18992/): Malicious code in dusk-ogkuk-nvgzy-zenith-project (npm) (malicious package)
- [MAL-2025-189919](https://insights.sbomify.com/MAL-2025-189919/): Malicious code in thread-daemon-try-omega-mock (npm) (malicious package)
- [MAL-2025-189918](https://insights.sbomify.com/MAL-2025-189918/): Malicious code in thread-compile-parse-decrypt-air (npm) (malicious package)
- [MAL-2025-189917](https://insights.sbomify.com/MAL-2025-189917/): Malicious code in theta-yaml-compress-rain-star (npm) (malicious package)
- [MAL-2025-189916](https://insights.sbomify.com/MAL-2025-189916/): Malicious code in theta-validate-meta-air-cat (npm) (malicious package)
- [MAL-2025-189915](https://insights.sbomify.com/MAL-2025-189915/): Malicious code in theta-daemon-moon-char-info (npm) (malicious package)
- [MAL-2025-189914](https://insights.sbomify.com/MAL-2025-189914/): Malicious code in theta-air-char-import-phi (npm) (malicious package)
- [MAL-2025-189913](https://insights.sbomify.com/MAL-2025-189913/): Malicious code in thermosphere-node-sass-farout-seismology (npm) (malicious package)
- [MAL-2025-189912](https://insights.sbomify.com/MAL-2025-189912/): Malicious code in thermochronology-plutology-magnetar-nightwatch (npm) (malicious package)
- [MAL-2025-189911](https://insights.sbomify.com/MAL-2025-189911/): Malicious code in thermochronology-paleoclimatology-redgiant-celeste (npm) (malicious package)
- [MAL-2025-189910](https://insights.sbomify.com/MAL-2025-189910/): Malicious code in thermochronology-metabolomics-semantic-ui-aquarius (npm) (malicious package)
- [MAL-2025-18991](https://insights.sbomify.com/MAL-2025-18991/): Malicious code in dusk-lvvgg-m58r7-obsidian-project (npm) (malicious package)
- [MAL-2025-189909](https://insights.sbomify.com/MAL-2025-189909/): Malicious code in thermochronology-gravity-commitlint-element-ui (npm) (malicious package)
- [MAL-2025-189908](https://insights.sbomify.com/MAL-2025-189908/): Malicious code in thermochronology-dorado-epigenetics-regulus (npm) (malicious package)
- [MAL-2025-189907](https://insights.sbomify.com/MAL-2025-189907/): Malicious code in tethys-schema-proteomics-nuxtjs (npm) (malicious package)
- [MAL-2025-189906](https://insights.sbomify.com/MAL-2025-189906/): Malicious code in tethys-primatology-selenium-yonder (npm) (malicious package)
- [MAL-2025-189905](https://insights.sbomify.com/MAL-2025-189905/): Malicious code in tethys-geodynamo-mongoose-venus (npm) (malicious package)
- [MAL-2025-189904](https://insights.sbomify.com/MAL-2025-189904/): Malicious code in tethys-deimos-spinner-eslint-config (npm) (malicious package)
- [MAL-2025-189903](https://insights.sbomify.com/MAL-2025-189903/): Malicious code in tethys-acamar-protractor-html-webpack-plugin (npm) (malicious package)
- [MAL-2025-189902](https://insights.sbomify.com/MAL-2025-189902/): Malicious code in testcafe-titan-fornax-astro (npm) (malicious package)
- [MAL-2025-189901](https://insights.sbomify.com/MAL-2025-189901/): Malicious code in testcafe-scripts-phoebe-nconf (npm) (malicious package)
- [MAL-2025-189900](https://insights.sbomify.com/MAL-2025-189900/): Malicious code in testcafe-postcss-europa-atlas (npm) (malicious package)
- [MAL-2025-18990](https://insights.sbomify.com/MAL-2025-18990/): Malicious code in durex-app (npm) (malicious package)
- [MAL-2025-1899](https://insights.sbomify.com/MAL-2025-1899/): Malicious code in meta-checkout (npm) (malicious package)
- [MAL-2025-189899](https://insights.sbomify.com/MAL-2025-189899/): Malicious code in testcafe-pegasus-neptune-remark (npm) (malicious package)
- [MAL-2025-189898](https://insights.sbomify.com/MAL-2025-189898/): Malicious code in testcafe-miranda-electron-umbriel (npm) (malicious package)
- [MAL-2025-189897](https://insights.sbomify.com/MAL-2025-189897/): Malicious code in testcafe-markdownlint-antares-jsonp (npm) (malicious package)
- [MAL-2025-189896](https://insights.sbomify.com/MAL-2025-189896/): Malicious code in testcafe-jsonp-lyra-antd (npm) (malicious package)
- [MAL-2025-189895](https://insights.sbomify.com/MAL-2025-189895/): Malicious code in testcafe-janus-sqlite-bulma (npm) (malicious package)
- [MAL-2025-189894](https://insights.sbomify.com/MAL-2025-189894/): Malicious code in testcafe-chalk-magellan-figures (npm) (malicious package)
- [MAL-2025-189893](https://insights.sbomify.com/MAL-2025-189893/): Malicious code in testcafe-canopus-graphql-markdownlint (npm) (malicious package)
- [MAL-2025-189892](https://insights.sbomify.com/MAL-2025-189892/): Malicious code in test-umbra-elektra-update (npm) (malicious package)
- [MAL-2025-189891](https://insights.sbomify.com/MAL-2025-189891/): Malicious code in test-theta-old-yaml-eta (npm) (malicious package)
- [MAL-2025-189890](https://insights.sbomify.com/MAL-2025-189890/): Malicious code in test-sudo-notify-meta-orchestrate (npm) (malicious package)
- [MAL-2025-18989](https://insights.sbomify.com/MAL-2025-18989/): Malicious code in dupocracy (npm) (malicious package)
- [MAL-2025-189889](https://insights.sbomify.com/MAL-2025-189889/): Malicious code in test-star-web-zeta-minify (npm) (malicious package)
- [MAL-2025-189888](https://insights.sbomify.com/MAL-2025-189888/): Malicious code in test-slides-bellatrix-io (npm) (malicious package)
- [MAL-2025-189887](https://insights.sbomify.com/MAL-2025-189887/): Malicious code in test-sigma-reject-daemon-cold (npm) (malicious package)
- [MAL-2025-189886](https://insights.sbomify.com/MAL-2025-189886/): Malicious code in test-playwright-primatology-asteroid (npm) (malicious package)
- [MAL-2025-189885](https://insights.sbomify.com/MAL-2025-189885/): Malicious code in test-on-spinner-docusaurus (npm) (malicious package)
- [MAL-2025-189884](https://insights.sbomify.com/MAL-2025-189884/): Malicious code in test-meissa-stream-leda (npm) (malicious package)
- [MAL-2025-189883](https://insights.sbomify.com/MAL-2025-189883/): Malicious code in test-janus-eslint-config-materialize (npm) (malicious package)
- [MAL-2025-189882](https://insights.sbomify.com/MAL-2025-189882/): Malicious code in test-fork-gravity-puppeteer (npm) (malicious package)
- [MAL-2025-189881](https://insights.sbomify.com/MAL-2025-189881/): Malicious code in test-cache-rehype-backend (npm) (malicious package)
- [MAL-2025-189880](https://insights.sbomify.com/MAL-2025-189880/): Malicious code in test-book-final-epsilon-char (npm) (malicious package)
- [MAL-2025-18988](https://insights.sbomify.com/MAL-2025-18988/): Malicious code in duplex-electron-proxima-entanglement (npm) (malicious package)
- [MAL-2025-189879](https://insights.sbomify.com/MAL-2025-189879/): Malicious code in terser-weywot-typeorm-regulus (npm) (malicious package)
- [MAL-2025-189878](https://insights.sbomify.com/MAL-2025-189878/): Malicious code in terser-webpack-plugin-spectron-webdriver-sirius-enceladus (npm) (malicious package)
- [MAL-2025-189877](https://insights.sbomify.com/MAL-2025-189877/): Malicious code in terser-webpack-plugin-rollup-plugin-cybernetics-lacerta (npm) (malicious package)
- [MAL-2025-189876](https://insights.sbomify.com/MAL-2025-189876/): Malicious code in terser-webpack-plugin-nucleosynthesis-hadron-taurus (npm) (malicious package)
- [MAL-2025-189875](https://insights.sbomify.com/MAL-2025-189875/): Malicious code in terser-webpack-plugin-nestjs-umbriel-cluster (npm) (malicious package)
- [MAL-2025-189874](https://insights.sbomify.com/MAL-2025-189874/): Malicious code in terser-webpack-plugin-mechatronics-rest-neptunology (npm) (malicious package)
- [MAL-2025-189873](https://insights.sbomify.com/MAL-2025-189873/): Malicious code in terser-webpack-plugin-delphinus-membrane-cryovolcano (npm) (malicious package)
- [MAL-2025-189872](https://insights.sbomify.com/MAL-2025-189872/): Malicious code in terser-webpack-plugin-centaurus-version-duplex (npm) (malicious package)
- [MAL-2025-189871](https://insights.sbomify.com/MAL-2025-189871/): Malicious code in terser-webpack-plugin-canopus-troposphere-ichnology (npm) (malicious package)
- [MAL-2025-189870](https://insights.sbomify.com/MAL-2025-189870/): Malicious code in terser-webpack-plugin-andromeda-zenobia-pavo (npm) (malicious package)
- [MAL-2025-18987](https://insights.sbomify.com/MAL-2025-18987/): Malicious code in duokusdk (npm) (malicious package)
- [MAL-2025-189869](https://insights.sbomify.com/MAL-2025-189869/): Malicious code in terser-subscription-kuiperbelt-cryptography (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/933/