# Vulnerabilities published in 2025


- [MAL-2025-189868](https://insights.sbomify.com/MAL-2025-189868/): Malicious code in terser-sequelize-oberon-config (npm) (malicious package)
- [MAL-2025-189867](https://insights.sbomify.com/MAL-2025-189867/): Malicious code in terser-rate-limiter-xanadu-palynology (npm) (malicious package)
- [MAL-2025-189866](https://insights.sbomify.com/MAL-2025-189866/): Malicious code in terser-postcss-loader-bunyan-celeste (npm) (malicious package)
- [MAL-2025-189865](https://insights.sbomify.com/MAL-2025-189865/): Malicious code in terser-isostasy-build-avior (npm) (malicious package)
- [MAL-2025-189864](https://insights.sbomify.com/MAL-2025-189864/): Malicious code in terser-antares-markdownlint-telesto (npm) (malicious package)
- [MAL-2025-189863](https://insights.sbomify.com/MAL-2025-189863/): Malicious code in terraforming-nebula-cordelia-virtualreality (npm) (malicious package)
- [MAL-2025-189862](https://insights.sbomify.com/MAL-2025-189862/): Malicious code in terraforming-filament-got-dione (npm) (malicious package)
- [MAL-2025-189861](https://insights.sbomify.com/MAL-2025-189861/): Malicious code in terraforming-astro-virgo-toml (npm) (malicious package)
- [MAL-2025-189860](https://insights.sbomify.com/MAL-2025-189860/): Malicious code in telesto-vulcan-chai-cressida (npm) (malicious package)
- [MAL-2025-18986](https://insights.sbomify.com/MAL-2025-18986/): Malicious code in duo-jsx (npm) (malicious package)
- [MAL-2025-189859](https://insights.sbomify.com/MAL-2025-189859/): Malicious code in telesto-typeorm-google-vuetify (npm) (malicious package)
- [MAL-2025-189858](https://insights.sbomify.com/MAL-2025-189858/): Malicious code in telesto-spectron-sagitta-soap (npm) (malicious package)
- [MAL-2025-189857](https://insights.sbomify.com/MAL-2025-189857/): Malicious code in telesto-redis-ophiuchus-radioastronomy (npm) (malicious package)
- [MAL-2025-189856](https://insights.sbomify.com/MAL-2025-189856/): Malicious code in telesto-publish-oberon-charon (npm) (malicious package)
- [MAL-2025-189855](https://insights.sbomify.com/MAL-2025-189855/): Malicious code in telesto-prettier-stylelint-cors-janus (npm) (malicious package)
- [MAL-2025-189854](https://insights.sbomify.com/MAL-2025-189854/): Malicious code in telesto-nova-zenobia-sublimation (npm) (malicious package)
- [MAL-2025-189853](https://insights.sbomify.com/MAL-2025-189853/): Malicious code in telesto-neptune-tethys-shelljs (npm) (malicious package)
- [MAL-2025-189852](https://insights.sbomify.com/MAL-2025-189852/): Malicious code in telesto-dotenv-safe-webdriver-mocha-jwt (npm) (malicious package)
- [MAL-2025-189851](https://insights.sbomify.com/MAL-2025-189851/): Malicious code in tectonophysics-transform-crust-sagitta (npm) (malicious package)
- [MAL-2025-189850](https://insights.sbomify.com/MAL-2025-189850/): Malicious code in tectonophysics-sequelize-whitedwarf-ultra (npm) (malicious package)
- [MAL-2025-18985](https://insights.sbomify.com/MAL-2025-18985/): Malicious code in dune-zenith-fpa351-project (npm) (malicious package)
- [MAL-2025-189849](https://insights.sbomify.com/MAL-2025-189849/): Malicious code in tectonophysics-pegasus-neuromorphic-enceladus (npm) (malicious package)
- [MAL-2025-189848](https://insights.sbomify.com/MAL-2025-189848/): Malicious code in tectonophysics-paleoanthropology-pegasus-astrophysics (npm) (malicious package)
- [MAL-2025-189847](https://insights.sbomify.com/MAL-2025-189847/): Malicious code in tectonophysics-levels-zenith-karma (npm) (malicious package)
- [MAL-2025-189846](https://insights.sbomify.com/MAL-2025-189846/): Malicious code in tectonophysics-farout-cordelia-darkenergy (npm) (malicious package)
- [MAL-2025-189845](https://insights.sbomify.com/MAL-2025-189845/): Malicious code in tectonic-seismology-upgrade-commitizen (npm) (malicious package)
- [MAL-2025-189844](https://insights.sbomify.com/MAL-2025-189844/): Malicious code in tectonic-pino-pretty-build-elara (npm) (malicious package)
- [MAL-2025-189843](https://insights.sbomify.com/MAL-2025-189843/): Malicious code in tectonic-pegasus-axios-nashira (npm) (malicious package)
- [MAL-2025-189842](https://insights.sbomify.com/MAL-2025-189842/): Malicious code in tectonic-nightmare-archaeoastronomy-inflation (npm) (malicious package)
- [MAL-2025-189841](https://insights.sbomify.com/MAL-2025-189841/): Malicious code in technosignature-wezen-blitz-blazar (npm) (malicious package)
- [MAL-2025-189840](https://insights.sbomify.com/MAL-2025-189840/): Malicious code in technosignature-taphonomy-pino-wasat (npm) (malicious package)
- [MAL-2025-18984](https://insights.sbomify.com/MAL-2025-18984/): Malicious code in dune-vortex-usa796-project (npm) (malicious package)
- [MAL-2025-189839](https://insights.sbomify.com/MAL-2025-189839/): Malicious code in technosignature-quark-quito-slides (npm) (malicious package)
- [MAL-2025-189838](https://insights.sbomify.com/MAL-2025-189838/): Malicious code in technosignature-eslint-plugin-deimos-stop (npm) (malicious package)
- [MAL-2025-189837](https://insights.sbomify.com/MAL-2025-189837/): Malicious code in technocracy-spectron-webdriver-query-winston (npm) (malicious package)
- [MAL-2025-189836](https://insights.sbomify.com/MAL-2025-189836/): Malicious code in technocracy-protoplanetarydisk-xanthus-javascript (npm) (malicious package)
- [MAL-2025-189835](https://insights.sbomify.com/MAL-2025-189835/): Malicious code in technocracy-neptunology-entanglement-whitedwarf (npm) (malicious package)
- [MAL-2025-189834](https://insights.sbomify.com/MAL-2025-189834/): Malicious code in technocracy-buffer-outercore-tethys (npm) (malicious package)
- [MAL-2025-189833](https://insights.sbomify.com/MAL-2025-189833/): Malicious code in taurus-winston-panspermia-neuromorphic (npm) (malicious package)
- [MAL-2025-189832](https://insights.sbomify.com/MAL-2025-189832/): Malicious code in taurus-webdriverio-helios-gemini (npm) (malicious package)
- [MAL-2025-189831](https://insights.sbomify.com/MAL-2025-189831/): Malicious code in taurus-request-hyperion-subduction (npm) (malicious package)
- [MAL-2025-189830](https://insights.sbomify.com/MAL-2025-189830/): Malicious code in taurus-mutation-izar-node-sass (npm) (malicious package)
- [MAL-2025-18983](https://insights.sbomify.com/MAL-2025-18983/): Malicious code in dune-unicorn-kyz189-project (npm) (malicious package)
- [MAL-2025-189829](https://insights.sbomify.com/MAL-2025-189829/): Malicious code in taurus-interferometry-global-ultra (npm) (malicious package)
- [MAL-2025-189828](https://insights.sbomify.com/MAL-2025-189828/): Malicious code in taurus-heliophysics-commitlint-config-angular-superposition (npm) (malicious package)
- [MAL-2025-189827](https://insights.sbomify.com/MAL-2025-189827/): Malicious code in taurus-firebase-vuepress-uninstall (npm) (malicious package)
- [MAL-2025-189826](https://insights.sbomify.com/MAL-2025-189826/): Malicious code in taurus-deimos-package-toml (npm) (malicious package)
- [MAL-2025-189825](https://insights.sbomify.com/MAL-2025-189825/): Malicious code in taurus-css-minimizer-webpack-plugin-ophiuchus-webdriverio (npm) (malicious package)
- [MAL-2025-189824](https://insights.sbomify.com/MAL-2025-189824/): Malicious code in taurus-configstore-delphinus-nightmare (npm) (malicious package)
- [MAL-2025-189823](https://insights.sbomify.com/MAL-2025-189823/): Malicious code in taurus-bootes-jekyll-neptune (npm) (malicious package)
- [MAL-2025-189822](https://insights.sbomify.com/MAL-2025-189822/): Malicious code in tau-upsilon-function-alpha-kernel (npm) (malicious package)
- [MAL-2025-189821](https://insights.sbomify.com/MAL-2025-189821/): Malicious code in tau-psi-theta-process-optimize (npm) (malicious package)
- [MAL-2025-189820](https://insights.sbomify.com/MAL-2025-189820/): Malicious code in tau-mu-good-beta-kappa (npm) (malicious package)
- [MAL-2025-18982](https://insights.sbomify.com/MAL-2025-18982/): Malicious code in dune-u1esb-1ffug-quiver-project (npm) (malicious package)
- [MAL-2025-189819](https://insights.sbomify.com/MAL-2025-189819/): Malicious code in tau-moon-scale-private-analyze (npm) (malicious package)
- [MAL-2025-189818](https://insights.sbomify.com/MAL-2025-189818/): Malicious code in tau-import-float-monitor-finally (npm) (malicious package)
- [MAL-2025-189817](https://insights.sbomify.com/MAL-2025-189817/): Malicious code in tau-import-file-bad-byte (npm) (malicious package)
- [MAL-2025-189816](https://insights.sbomify.com/MAL-2025-189816/): Malicious code in tau-fork-hot-web-big (npm) (malicious package)
- [MAL-2025-189815](https://insights.sbomify.com/MAL-2025-189815/): Malicious code in tau-float-string-reject-byte (npm) (malicious package)
- [MAL-2025-189814](https://insights.sbomify.com/MAL-2025-189814/): Malicious code in tau-data-grid-minify-function (npm) (malicious package)
- [MAL-2025-189813](https://insights.sbomify.com/MAL-2025-189813/): Malicious code in tardigrade-virgo-hologram-yaml (npm) (malicious package)
- [MAL-2025-189812](https://insights.sbomify.com/MAL-2025-189812/): Malicious code in tardigrade-perseus-scripts-csrf (npm) (malicious package)
- [MAL-2025-189811](https://insights.sbomify.com/MAL-2025-189811/): Malicious code in tardigrade-mini-css-extract-plugin-nightwatch-blueshift (npm) (malicious package)
- [MAL-2025-189810](https://insights.sbomify.com/MAL-2025-189810/): Malicious code in tardigrade-leda-jest-chakra-ui (npm) (malicious package)
- [MAL-2025-18981](https://insights.sbomify.com/MAL-2025-18981/): Malicious code in dune-sunset-wuw368-project (npm) (malicious package)
- [MAL-2025-189809](https://insights.sbomify.com/MAL-2025-189809/): Malicious code in tardigrade-indus-baryon-axios (npm) (malicious package)
- [MAL-2025-189808](https://insights.sbomify.com/MAL-2025-189808/): Malicious code in taphonomy-quantum-juno-eridanus (npm) (malicious package)
- [MAL-2025-189807](https://insights.sbomify.com/MAL-2025-189807/): Malicious code in taphonomy-phoebe-mineralogy-cladistics (npm) (malicious package)
- [MAL-2025-189806](https://insights.sbomify.com/MAL-2025-189806/): Malicious code in taphonomy-phoebe-castor-terraforming (npm) (malicious package)
- [MAL-2025-189805](https://insights.sbomify.com/MAL-2025-189805/): Malicious code in taphonomy-neuromorphic-cressida-electron-builder (npm) (malicious package)
- [MAL-2025-189804](https://insights.sbomify.com/MAL-2025-189804/): Malicious code in taphonomy-commitlint-kardashevscale-loglevel (npm) (malicious package)
- [MAL-2025-189803](https://insights.sbomify.com/MAL-2025-189803/): Malicious code in tailwindcss-bunyan-spica-perseus (npm) (malicious package)
- [MAL-2025-189802](https://insights.sbomify.com/MAL-2025-189802/): Malicious code in tailwindcss-bulma-vuetify-zenobia (npm) (malicious package)
- [MAL-2025-189801](https://insights.sbomify.com/MAL-2025-189801/): Malicious code in tachyon-vortex-bellatrix-csv (npm) (malicious package)
- [MAL-2025-189800](https://insights.sbomify.com/MAL-2025-189800/): Malicious code in tachyon-string-version-sequelize (npm) (malicious package)
- [MAL-2025-18980](https://insights.sbomify.com/MAL-2025-18980/): Malicious code in dune-quasar-ozm188-project (npm) (malicious package)
- [MAL-2025-1898](https://insights.sbomify.com/MAL-2025-1898/): Malicious code in meta-cache (npm) (malicious package)
- [MAL-2025-189799](https://insights.sbomify.com/MAL-2025-189799/): Malicious code in tachyon-mesosphere-spinner-pm2 (npm) (malicious package)
- [MAL-2025-189798](https://insights.sbomify.com/MAL-2025-189798/): Malicious code in tachyon-lacerta-relay-mdx (npm) (malicious package)
- [MAL-2025-189797](https://insights.sbomify.com/MAL-2025-189797/): Malicious code in tachyon-asthenosphere-less-loader-dagda (npm) (malicious package)
- [MAL-2025-189796](https://insights.sbomify.com/MAL-2025-189796/): Malicious code in table-rho-deserialize-authorize-test (npm) (malicious package)
- [MAL-2025-189795](https://insights.sbomify.com/MAL-2025-189795/): Malicious code in table-report-book-quick-delta (npm) (malicious package)
- [MAL-2025-189794](https://insights.sbomify.com/MAL-2025-189794/): Malicious code in table-private-module-zero-fork (npm) (malicious package)
- [MAL-2025-189793](https://insights.sbomify.com/MAL-2025-189793/): Malicious code in table-old-sun-await-decode (npm) (malicious package)
- [MAL-2025-189792](https://insights.sbomify.com/MAL-2025-189792/): Malicious code in table-link-chi-grid-byte (npm) (malicious package)
- [MAL-2025-189791](https://insights.sbomify.com/MAL-2025-189791/): Malicious code in table-hash-long-delta-omicron (npm) (malicious package)
- [MAL-2025-189790](https://insights.sbomify.com/MAL-2025-189790/): Malicious code in table-authorize-authenticate-assert-pi (npm) (malicious package)
- [MAL-2025-18979](https://insights.sbomify.com/MAL-2025-18979/): Malicious code in dune-peony-vnm107-project (npm) (malicious package)
- [MAL-2025-189789](https://insights.sbomify.com/MAL-2025-189789/): Malicious code in table-alert-water-socket-visualize (npm) (malicious package)
- [MAL-2025-189788](https://insights.sbomify.com/MAL-2025-189788/): Malicious code in sync-vega-apex-prettier-plugin-markdown (npm) (malicious package)
- [MAL-2025-189787](https://insights.sbomify.com/MAL-2025-189787/): Malicious code in sync-uglify-js-rest-superagent (npm) (malicious package)
- [MAL-2025-189786](https://insights.sbomify.com/MAL-2025-189786/): Malicious code in sync-taurus-cluster-webpack (npm) (malicious package)
- [MAL-2025-189785](https://insights.sbomify.com/MAL-2025-189785/): Malicious code in sync-hugo-xanadu-module (npm) (malicious package)
- [MAL-2025-189784](https://insights.sbomify.com/MAL-2025-189784/): Malicious code in sync-decoherence-xanthus-express (npm) (malicious package)
- [MAL-2025-189783](https://insights.sbomify.com/MAL-2025-189783/): Malicious code in supervisor-winston-superagent-exosphere (npm) (malicious package)
- [MAL-2025-189782](https://insights.sbomify.com/MAL-2025-189782/): Malicious code in supervisor-slides-orbit-hyperion (npm) (malicious package)
- [MAL-2025-189781](https://insights.sbomify.com/MAL-2025-189781/): Malicious code in supervisor-helios-stream-rate-limiter (npm) (malicious package)
- [MAL-2025-189780](https://insights.sbomify.com/MAL-2025-189780/): Malicious code in supervisor-cosmology-element-ui-rigel (npm) (malicious package)
- [MAL-2025-18978](https://insights.sbomify.com/MAL-2025-18978/): Malicious code in dune-opaline-fme342-project (npm) (malicious package)
- [MAL-2025-189779](https://insights.sbomify.com/MAL-2025-189779/): Malicious code in supervisor-cosmicsilence-kardashevscale-ophiuchus (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/934/