# Vulnerabilities published in 2025


- [MAL-2025-189688](https://insights.sbomify.com/MAL-2025-189688/): Malicious code in stream-sequelize-writable-local (npm) (malicious package)
- [MAL-2025-189687](https://insights.sbomify.com/MAL-2025-189687/): Malicious code in stream-redis-bellatrix-oscillation (npm) (malicious package)
- [MAL-2025-189686](https://insights.sbomify.com/MAL-2025-189686/): Malicious code in stream-polaris-json-ursa (npm) (malicious package)
- [MAL-2025-189685](https://insights.sbomify.com/MAL-2025-189685/): Malicious code in stream-janus-soap-juno (npm) (malicious package)
- [MAL-2025-189684](https://insights.sbomify.com/MAL-2025-189684/): Malicious code in stream-indus-dendrochronology-run-script (npm) (malicious package)
- [MAL-2025-189683](https://insights.sbomify.com/MAL-2025-189683/): Malicious code in stream-ichnology-plutology-hermes (npm) (malicious package)
- [MAL-2025-189682](https://insights.sbomify.com/MAL-2025-189682/): Malicious code in stream-build-ganymede-corvus (npm) (malicious package)
- [MAL-2025-189681](https://insights.sbomify.com/MAL-2025-189681/): Malicious code in stream-andromeda-proxima-loglevel (npm) (malicious package)
- [MAL-2025-189680](https://insights.sbomify.com/MAL-2025-189680/): Malicious code in stratosphere-speleology-rollup-plugin-hapi (npm) (malicious package)
- [MAL-2025-18968](https://insights.sbomify.com/MAL-2025-18968/): Malicious code in dune-eprt0-ov9mj-boulder-project (npm) (malicious package)
- [MAL-2025-189679](https://insights.sbomify.com/MAL-2025-189679/): Malicious code in stratosphere-spectron-webdriver-deimos-dynamo (npm) (malicious package)
- [MAL-2025-189678](https://insights.sbomify.com/MAL-2025-189678/): Malicious code in stratosphere-outercore-carpo-adonis (npm) (malicious package)
- [MAL-2025-189677](https://insights.sbomify.com/MAL-2025-189677/): Malicious code in stratigraphy-stream-module-deneb (npm) (malicious package)
- [MAL-2025-189676](https://insights.sbomify.com/MAL-2025-189676/): Malicious code in stratigraphy-helios-janus-electron-builder (npm) (malicious package)
- [MAL-2025-189675](https://insights.sbomify.com/MAL-2025-189675/): Malicious code in stratigraphy-castor-subduction-thermochronology (npm) (malicious package)
- [MAL-2025-189674](https://insights.sbomify.com/MAL-2025-189674/): Malicious code in stratigraphy-archaeogenetics-pino-figures (npm) (malicious package)
- [MAL-2025-189673](https://insights.sbomify.com/MAL-2025-189673/): Malicious code in stop-prompts-fusion-private (npm) (malicious package)
- [MAL-2025-189672](https://insights.sbomify.com/MAL-2025-189672/): Malicious code in stop-cressida-prompts-quasar (npm) (malicious package)
- [MAL-2025-189671](https://insights.sbomify.com/MAL-2025-189671/): Malicious code in stop-chalk-build-less-loader (npm) (malicious package)
- [MAL-2025-189670](https://insights.sbomify.com/MAL-2025-189670/): Malicious code in stop-callback-wezen-quark (npm) (malicious package)
- [MAL-2025-18967](https://insights.sbomify.com/MAL-2025-18967/): Malicious code in dune-bonfire-nvp542-project (npm) (malicious package)
- [MAL-2025-189669](https://insights.sbomify.com/MAL-2025-189669/): Malicious code in stop-auth-epigenetics-neutronstar (npm) (malicious package)
- [MAL-2025-189668](https://insights.sbomify.com/MAL-2025-189668/): Malicious code in stop-apex-singularity-nightmare (npm) (malicious package)
- [MAL-2025-189667](https://insights.sbomify.com/MAL-2025-189667/): Malicious code in steganography-yaml-quark-geochronology (npm) (malicious package)
- [MAL-2025-189666](https://insights.sbomify.com/MAL-2025-189666/): Malicious code in steganography-hadron-stratosphere-polaris (npm) (malicious package)
- [MAL-2025-189665](https://insights.sbomify.com/MAL-2025-189665/): Malicious code in steganography-aether-on-envconfig (npm) (malicious package)
- [MAL-2025-189664](https://insights.sbomify.com/MAL-2025-189664/): Malicious code in static-view-warn-cluster-catch (npm) (malicious package)
- [MAL-2025-189663](https://insights.sbomify.com/MAL-2025-189663/): Malicious code in static-transpile-sanitize-emulate-parse (npm) (malicious package)
- [MAL-2025-189662](https://insights.sbomify.com/MAL-2025-189662/): Malicious code in static-stub-dog-epsilon-final (npm) (malicious package)
- [MAL-2025-189661](https://insights.sbomify.com/MAL-2025-189661/): Malicious code in static-refactor-grep-yaml-emulate (npm) (malicious package)
- [MAL-2025-189660](https://insights.sbomify.com/MAL-2025-189660/): Malicious code in static-public-omega-abstract-upsilon (npm) (malicious package)
- [MAL-2025-18966](https://insights.sbomify.com/MAL-2025-18966/): Malicious code in dune-0ilyc-fiapo-moondust-project (npm) (malicious package)
- [MAL-2025-189659](https://insights.sbomify.com/MAL-2025-189659/): Malicious code in start-iota-webpack-cli (npm) (malicious package)
- [MAL-2025-189658](https://insights.sbomify.com/MAL-2025-189658/): Malicious code in start-io-nightwatch-install (npm) (malicious package)
- [MAL-2025-189657](https://insights.sbomify.com/MAL-2025-189657/): Malicious code in star-secure-alpha-omega-key (npm) (malicious package)
- [MAL-2025-189656](https://insights.sbomify.com/MAL-2025-189656/): Malicious code in star-route-query-export-process (npm) (malicious package)
- [MAL-2025-189655](https://insights.sbomify.com/MAL-2025-189655/): Malicious code in star-private-minify-bad-compress (npm) (malicious package)
- [MAL-2025-189654](https://insights.sbomify.com/MAL-2025-189654/): Malicious code in star-permission-parse-assert-small (npm) (malicious package)
- [MAL-2025-189653](https://insights.sbomify.com/MAL-2025-189653/): Malicious code in star-earth-small-execute-decrypt (npm) (malicious package)
- [MAL-2025-189652](https://insights.sbomify.com/MAL-2025-189652/): Malicious code in standard-thuban-commitlint-config-angular-got (npm) (malicious package)
- [MAL-2025-189651](https://insights.sbomify.com/MAL-2025-189651/): Malicious code in standard-seismology-sync-native (npm) (malicious package)
- [MAL-2025-189650](https://insights.sbomify.com/MAL-2025-189650/): Malicious code in standard-saturnology-webpack-pm2 (npm) (malicious package)
- [MAL-2025-18965](https://insights.sbomify.com/MAL-2025-18965/): Malicious code in duncand (npm) (malicious package)
- [MAL-2025-189649](https://insights.sbomify.com/MAL-2025-189649/): Malicious code in standard-parallax-chalk-hologram (npm) (malicious package)
- [MAL-2025-189648](https://insights.sbomify.com/MAL-2025-189648/): Malicious code in standard-kuiperbelt-neuromorphic-sedimentology (npm) (malicious package)
- [MAL-2025-189647](https://insights.sbomify.com/MAL-2025-189647/): Malicious code in standard-frontend-glaciology-selenology (npm) (malicious package)
- [MAL-2025-189646](https://insights.sbomify.com/MAL-2025-189646/): Malicious code in standard-cygnus-quasarjet-joviology (npm) (malicious package)
- [MAL-2025-189645](https://insights.sbomify.com/MAL-2025-189645/): Malicious code in standard-browserify-petrology-oscillation (npm) (malicious package)
- [MAL-2025-189644](https://insights.sbomify.com/MAL-2025-189644/): Malicious code in standard-barnard-quark-yildun (npm) (malicious package)
- [MAL-2025-189643](https://insights.sbomify.com/MAL-2025-189643/): Malicious code in standard-apollo-tardigrade-perseus (npm) (malicious package)
- [MAL-2025-189642](https://insights.sbomify.com/MAL-2025-189642/): Malicious code in standard-altair-izar-sync (npm) (malicious package)
- [MAL-2025-189641](https://insights.sbomify.com/MAL-2025-189641/): Malicious code in stack-theta-meta-index-web (npm) (malicious package)
- [MAL-2025-189640](https://insights.sbomify.com/MAL-2025-189640/): Malicious code in stack-compress-nu-zeta-mock (npm) (malicious package)
- [MAL-2025-18964](https://insights.sbomify.com/MAL-2025-18964/): Malicious code in dumbrocks (npm) (malicious package)
- [MAL-2025-189639](https://insights.sbomify.com/MAL-2025-189639/): Malicious code in stack-bundle-public-air-user (npm) (malicious package)
- [MAL-2025-189638](https://insights.sbomify.com/MAL-2025-189638/): Malicious code in stack-authenticate-boolean-compile-kappa (npm) (malicious package)
- [MAL-2025-189637](https://insights.sbomify.com/MAL-2025-189637/): Malicious code in sqlite-winston-scripts-uninstall (npm) (malicious package)
- [MAL-2025-189636](https://insights.sbomify.com/MAL-2025-189636/): Malicious code in sqlite-telesto-commitlint-figures (npm) (malicious package)
- [MAL-2025-189635](https://insights.sbomify.com/MAL-2025-189635/): Malicious code in sqlite-oauth-quito-graphql (npm) (malicious package)
- [MAL-2025-189634](https://insights.sbomify.com/MAL-2025-189634/): Malicious code in sqlite-duplex-robotics-loglevel (npm) (malicious package)
- [MAL-2025-189633](https://insights.sbomify.com/MAL-2025-189633/): Malicious code in spy-visualize-array-spy-index (npm) (malicious package)
- [MAL-2025-189632](https://insights.sbomify.com/MAL-2025-189632/): Malicious code in spy-sun-byte-debug-import (npm) (malicious package)
- [MAL-2025-189631](https://insights.sbomify.com/MAL-2025-189631/): Malicious code in spy-fire-kappa-emulate-async (npm) (malicious package)
- [MAL-2025-189630](https://insights.sbomify.com/MAL-2025-189630/): Malicious code in spinner-uranology-terser-astrophysics (npm) (malicious package)
- [MAL-2025-18963](https://insights.sbomify.com/MAL-2025-18963/): Malicious code in duinomite (npm) (malicious package)
- [MAL-2025-189629](https://insights.sbomify.com/MAL-2025-189629/): Malicious code in spinner-spectron-electron-builder-loglevel (npm) (malicious package)
- [MAL-2025-189628](https://insights.sbomify.com/MAL-2025-189628/): Malicious code in spinner-rest-standard-writable (npm) (malicious package)
- [MAL-2025-189627](https://insights.sbomify.com/MAL-2025-189627/): Malicious code in spinner-proxima-cybernetics-cosmochemistry (npm) (malicious package)
- [MAL-2025-189626](https://insights.sbomify.com/MAL-2025-189626/): Malicious code in spinner-cryptography-acamar-elara (npm) (malicious package)
- [MAL-2025-189625](https://insights.sbomify.com/MAL-2025-189625/): Malicious code in spinner-command-solis-taphonomy (npm) (malicious package)
- [MAL-2025-189624](https://insights.sbomify.com/MAL-2025-189624/): Malicious code in spica-oberon-sirius-local (npm) (malicious package)
- [MAL-2025-189623](https://insights.sbomify.com/MAL-2025-189623/): Malicious code in spica-html-webpack-plugin-kronos-husky (npm) (malicious package)
- [MAL-2025-189622](https://insights.sbomify.com/MAL-2025-189622/): Malicious code in speleology-unuk-hydrogeology-supernova (npm) (malicious package)
- [MAL-2025-189621](https://insights.sbomify.com/MAL-2025-189621/): Malicious code in speleology-pipe-pino-puppeteer (npm) (malicious package)
- [MAL-2025-189620](https://insights.sbomify.com/MAL-2025-189620/): Malicious code in speleology-phenomic-nova-resonance (npm) (malicious package)
- [MAL-2025-18962](https://insights.sbomify.com/MAL-2025-18962/): Malicious code in duhovni (npm) (malicious package)
- [MAL-2025-189619](https://insights.sbomify.com/MAL-2025-189619/): Malicious code in speleology-ganymede-halley-panspermia (npm) (malicious package)
- [MAL-2025-189618](https://insights.sbomify.com/MAL-2025-189618/): Malicious code in spectroscopy-webdriver-manager-await-bootstrap (npm) (malicious package)
- [MAL-2025-189617](https://insights.sbomify.com/MAL-2025-189617/): Malicious code in spectroscopy-dotenv-cassini-sedimentology (npm) (malicious package)
- [MAL-2025-189616](https://insights.sbomify.com/MAL-2025-189616/): Malicious code in spectron-webdriver-nodemon-sedimentology-on (npm) (malicious package)
- [MAL-2025-189615](https://insights.sbomify.com/MAL-2025-189615/): Malicious code in spectron-webdriver-commitlint-apollo-mysql (npm) (malicious package)
- [MAL-2025-189614](https://insights.sbomify.com/MAL-2025-189614/): Malicious code in spectron-webdriver-async-primatology-canopus (npm) (malicious package)
- [MAL-2025-189613](https://insights.sbomify.com/MAL-2025-189613/): Malicious code in spectron-ursa-yonder-command (npm) (malicious package)
- [MAL-2025-189612](https://insights.sbomify.com/MAL-2025-189612/): Malicious code in spectron-pegasus-interstellarmedium-ultra (npm) (malicious package)
- [MAL-2025-189611](https://insights.sbomify.com/MAL-2025-189611/): Malicious code in spectron-neuromorphic-crust-inquirer (npm) (malicious package)
- [MAL-2025-189610](https://insights.sbomify.com/MAL-2025-189610/): Malicious code in spectron-mini-css-extract-plugin-enif-commitizen (npm) (malicious package)
- [MAL-2025-18961](https://insights.sbomify.com/MAL-2025-18961/): Malicious code in duemail (npm) (malicious package)
- [MAL-2025-189609](https://insights.sbomify.com/MAL-2025-189609/): Malicious code in spectron-markdown-avior-auth0 (npm) (malicious package)
- [MAL-2025-189608](https://insights.sbomify.com/MAL-2025-189608/): Malicious code in spectron-grunt-auth-europa (npm) (malicious package)
- [MAL-2025-189607](https://insights.sbomify.com/MAL-2025-189607/): Malicious code in spectron-flare-css-loader-tethys (npm) (malicious package)
- [MAL-2025-189606](https://insights.sbomify.com/MAL-2025-189606/): Malicious code in spectron-csv-dynamo-bunyan (npm) (malicious package)
- [MAL-2025-189605](https://insights.sbomify.com/MAL-2025-189605/): Malicious code in spectron-config-cluster-command (npm) (malicious package)
- [MAL-2025-189604](https://insights.sbomify.com/MAL-2025-189604/): Malicious code in spectron-commitizen-server-jwt (npm) (malicious package)
- [MAL-2025-189603](https://insights.sbomify.com/MAL-2025-189603/): Malicious code in spectron-chromedriver-thermosphere-cosmogenic (npm) (malicious package)
- [MAL-2025-189602](https://insights.sbomify.com/MAL-2025-189602/): Malicious code in spawn-webpack-nightwatch-slides (npm) (malicious package)
- [MAL-2025-189601](https://insights.sbomify.com/MAL-2025-189601/): Malicious code in spawn-venus-hydra-cordelia (npm) (malicious package)
- [MAL-2025-189600](https://insights.sbomify.com/MAL-2025-189600/): Malicious code in spawn-scorpius-antares-hexo (npm) (malicious package)
- [MAL-2025-18960](https://insights.sbomify.com/MAL-2025-18960/): Malicious code in duelstick (npm) (malicious package)
- [MAL-2025-1896](https://insights.sbomify.com/MAL-2025-1896/): Malicious code in meta-analytics (npm) (malicious package)
- [MAL-2025-189599](https://insights.sbomify.com/MAL-2025-189599/): Malicious code in spawn-rigel-petrology-ganymede (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/936/