# Vulnerabilities published in 2025


- [MAL-2025-189598](https://insights.sbomify.com/MAL-2025-189598/): Malicious code in spawn-regulus-brane-nodemon (npm) (malicious package)
- [MAL-2025-189597](https://insights.sbomify.com/MAL-2025-189597/): Malicious code in spawn-nova-antares-sync (npm) (malicious package)
- [MAL-2025-189596](https://insights.sbomify.com/MAL-2025-189596/): Malicious code in spawn-miranda-publish-galaxy (npm) (malicious package)
- [MAL-2025-189595](https://insights.sbomify.com/MAL-2025-189595/): Malicious code in spawn-exec-zenobia-ganymede (npm) (malicious package)
- [MAL-2025-189594](https://insights.sbomify.com/MAL-2025-189594/): Malicious code in spawn-corvus-elektra-iota (npm) (malicious package)
- [MAL-2025-189593](https://insights.sbomify.com/MAL-2025-189593/): Malicious code in spawn-auth0-less-loader-phoenix (npm) (malicious package)
- [MAL-2025-189592](https://insights.sbomify.com/MAL-2025-189592/): Malicious code in solis-troposphere-slides-meissa (npm) (malicious package)
- [MAL-2025-189591](https://insights.sbomify.com/MAL-2025-189591/): Malicious code in solis-semantic-release-pm2-css-minimizer-webpack-plugin (npm) (malicious package)
- [MAL-2025-189590](https://insights.sbomify.com/MAL-2025-189590/): Malicious code in solis-promise-janus-aurora (npm) (malicious package)
- [MAL-2025-18959](https://insights.sbomify.com/MAL-2025-18959/): Malicious code in duel-core (npm) (malicious package)
- [MAL-2025-189589](https://insights.sbomify.com/MAL-2025-189589/): Malicious code in solis-perseus-bootstrap-nebula (npm) (malicious package)
- [MAL-2025-189588](https://insights.sbomify.com/MAL-2025-189588/): Malicious code in solis-chakra-ui-comet-lint (npm) (malicious package)
- [MAL-2025-189587](https://insights.sbomify.com/MAL-2025-189587/): Malicious code in solarnebula-testcafe-redshift-isostasy (npm) (malicious package)
- [MAL-2025-189586](https://insights.sbomify.com/MAL-2025-189586/): Malicious code in solarnebula-parcel-biohacking-iota (npm) (malicious package)
- [MAL-2025-189585](https://insights.sbomify.com/MAL-2025-189585/): Malicious code in solarnebula-nextjs-start-request (npm) (malicious package)
- [MAL-2025-189584](https://insights.sbomify.com/MAL-2025-189584/): Malicious code in solarnebula-browserify-lightyear-nextjs (npm) (malicious package)
- [MAL-2025-189583](https://insights.sbomify.com/MAL-2025-189583/): Malicious code in solarnebula-betelgeuse-mui-apollo (npm) (malicious package)
- [MAL-2025-189582](https://insights.sbomify.com/MAL-2025-189582/): Malicious code in solarnebula-await-superposition-aquarius (npm) (malicious package)
- [MAL-2025-189581](https://insights.sbomify.com/MAL-2025-189581/): Malicious code in socketio-webdriver-mocha-kinetic-quantum (npm) (malicious package)
- [MAL-2025-189580](https://insights.sbomify.com/MAL-2025-189580/): Malicious code in socketio-spawn-pyxis-nestjs (npm) (malicious package)
- [MAL-2025-18958](https://insights.sbomify.com/MAL-2025-18958/): Malicious code in dudelols (npm) (malicious package)
- [MAL-2025-189579](https://insights.sbomify.com/MAL-2025-189579/): Malicious code in socketio-polaris-restart-adonis (npm) (malicious package)
- [MAL-2025-189578](https://insights.sbomify.com/MAL-2025-189578/): Malicious code in socketio-elara-europa-dotenv (npm) (malicious package)
- [MAL-2025-189577](https://insights.sbomify.com/MAL-2025-189577/): Malicious code in socketio-cordelia-nightwatch-petrology (npm) (malicious package)
- [MAL-2025-189576](https://insights.sbomify.com/MAL-2025-189576/): Malicious code in socketio-chalk-middleware-public (npm) (malicious package)
- [MAL-2025-189575](https://insights.sbomify.com/MAL-2025-189575/): Malicious code in socketio-canopus-palynology-jupiter (npm) (malicious package)
- [MAL-2025-189574](https://insights.sbomify.com/MAL-2025-189574/): Malicious code in socket-uglify-notify-assert-encrypt (npm) (malicious package)
- [MAL-2025-189573](https://insights.sbomify.com/MAL-2025-189573/): Malicious code in socket-table-grid-sigma-deserialize (npm) (malicious package)
- [MAL-2025-189572](https://insights.sbomify.com/MAL-2025-189572/): Malicious code in socket-sigma-minify-pipe-array (npm) (malicious package)
- [MAL-2025-189571](https://insights.sbomify.com/MAL-2025-189571/): Malicious code in socket-mock-java-rho-spy (npm) (malicious package)
- [MAL-2025-189570](https://insights.sbomify.com/MAL-2025-189570/): Malicious code in socket-minify-export-catch-file (npm) (malicious package)
- [MAL-2025-18957](https://insights.sbomify.com/MAL-2025-18957/): Malicious code in ductus (npm) (malicious package)
- [MAL-2025-189569](https://insights.sbomify.com/MAL-2025-189569/): Malicious code in socket-link-resolve-try-encrypt (npm) (malicious package)
- [MAL-2025-189568](https://insights.sbomify.com/MAL-2025-189568/): Malicious code in socket-file-analyze-encode-monitor (npm) (malicious package)
- [MAL-2025-189567](https://insights.sbomify.com/MAL-2025-189567/): Malicious code in socket-easy-balance-virtualize-simple (npm) (malicious package)
- [MAL-2025-189566](https://insights.sbomify.com/MAL-2025-189566/): Malicious code in socket-earth-yaml-sun-encrypt (npm) (malicious package)
- [MAL-2025-189565](https://insights.sbomify.com/MAL-2025-189565/): Malicious code in socket-decrypt-tau-big-compress (npm) (malicious package)
- [MAL-2025-189564](https://insights.sbomify.com/MAL-2025-189564/): Malicious code in sociobiology-radiometric-relay-geochemistry (npm) (malicious package)
- [MAL-2025-189563](https://insights.sbomify.com/MAL-2025-189563/): Malicious code in sociobiology-promise-spinner-docusaurus (npm) (malicious package)
- [MAL-2025-189562](https://insights.sbomify.com/MAL-2025-189562/): Malicious code in sociobiology-castor-package-prompts (npm) (malicious package)
- [MAL-2025-189561](https://insights.sbomify.com/MAL-2025-189561/): Malicious code in soap-winston-thuban-pyxis (npm) (malicious package)
- [MAL-2025-189560](https://insights.sbomify.com/MAL-2025-189560/): Malicious code in soap-weywot-robotics-on (npm) (malicious package)
- [MAL-2025-18956](https://insights.sbomify.com/MAL-2025-18956/): Malicious code in ducanh1368-gas-convert (npm) (malicious package)
- [MAL-2025-189559](https://insights.sbomify.com/MAL-2025-189559/): Malicious code in soap-wasat-frontend-astroinformatics (npm) (malicious package)
- [MAL-2025-189558](https://insights.sbomify.com/MAL-2025-189558/): Malicious code in soap-slidev-carpo-restart (npm) (malicious package)
- [MAL-2025-189557](https://insights.sbomify.com/MAL-2025-189557/): Malicious code in soap-odin-config-sails (npm) (malicious package)
- [MAL-2025-189556](https://insights.sbomify.com/MAL-2025-189556/): Malicious code in soap-nconf-europa-kronos (npm) (malicious package)
- [MAL-2025-189555](https://insights.sbomify.com/MAL-2025-189555/): Malicious code in soap-membrane-thermosphere-eridanus (npm) (malicious package)
- [MAL-2025-189554](https://insights.sbomify.com/MAL-2025-189554/): Malicious code in soap-commitizen-markdown-janus (npm) (malicious package)
- [MAL-2025-189553](https://insights.sbomify.com/MAL-2025-189553/): Malicious code in soap-comet-adonis-karma (npm) (malicious package)
- [MAL-2025-189552](https://insights.sbomify.com/MAL-2025-189552/): Malicious code in soap-callback-convict-middleware (npm) (malicious package)
- [MAL-2025-189551](https://insights.sbomify.com/MAL-2025-189551/): Malicious code in soap-auth0-tailwindcss-convict (npm) (malicious package)
- [MAL-2025-189550](https://insights.sbomify.com/MAL-2025-189550/): Malicious code in small-web-encrypt-grep-serialize (npm) (malicious package)
- [MAL-2025-18955](https://insights.sbomify.com/MAL-2025-18955/): Malicious code in duba (npm) (malicious package)
- [MAL-2025-189549](https://insights.sbomify.com/MAL-2025-189549/): Malicious code in small-validate-psi-import-stack (npm) (malicious package)
- [MAL-2025-189548](https://insights.sbomify.com/MAL-2025-189548/): Malicious code in small-route-assert-compile-interface (npm) (malicious package)
- [MAL-2025-189547](https://insights.sbomify.com/MAL-2025-189547/): Malicious code in small-interpret-java-reject-data (npm) (malicious package)
- [MAL-2025-189546](https://insights.sbomify.com/MAL-2025-189546/): Malicious code in small-bundle-function-minify-query (npm) (malicious package)
- [MAL-2025-189545](https://insights.sbomify.com/MAL-2025-189545/): Malicious code in small-analyze-theta-signal-daemon (npm) (malicious package)
- [MAL-2025-189544](https://insights.sbomify.com/MAL-2025-189544/): Malicious code in slow-promise-delta-root-view (npm) (malicious package)
- [MAL-2025-189543](https://insights.sbomify.com/MAL-2025-189543/): Malicious code in slow-data-moon-object-serialize (npm) (malicious package)
- [MAL-2025-189542](https://insights.sbomify.com/MAL-2025-189542/): Malicious code in slidev-webdriverio-geodynamo-figures (npm) (malicious package)
- [MAL-2025-189541](https://insights.sbomify.com/MAL-2025-189541/): Malicious code in slidev-supernova-pavo-zephyr (npm) (malicious package)
- [MAL-2025-189540](https://insights.sbomify.com/MAL-2025-189540/): Malicious code in slidev-scorpius-dotenv-aldebaran (npm) (malicious package)
- [MAL-2025-18954](https://insights.sbomify.com/MAL-2025-18954/): Malicious code in duanlian (npm) (malicious package)
- [MAL-2025-189539](https://insights.sbomify.com/MAL-2025-189539/): Malicious code in slidev-rigel-uninstall-dependencies (npm) (malicious package)
- [MAL-2025-189538](https://insights.sbomify.com/MAL-2025-189538/): Malicious code in slidev-resonance-farout-baryon (npm) (malicious package)
- [MAL-2025-189537](https://insights.sbomify.com/MAL-2025-189537/): Malicious code in slidev-parallax-epimetheus-redis (npm) (malicious package)
- [MAL-2025-189536](https://insights.sbomify.com/MAL-2025-189536/): Malicious code in slidev-odin-charon-pino-pretty (npm) (malicious package)
- [MAL-2025-189535](https://insights.sbomify.com/MAL-2025-189535/): Malicious code in slidev-levels-install-jasmine (npm) (malicious package)
- [MAL-2025-189534](https://insights.sbomify.com/MAL-2025-189534/): Malicious code in slidev-deimos-heka-warp (npm) (malicious package)
- [MAL-2025-189533](https://insights.sbomify.com/MAL-2025-189533/): Malicious code in slidev-airbnb-phoebe-library (npm) (malicious package)
- [MAL-2025-189532](https://insights.sbomify.com/MAL-2025-189532/): Malicious code in slides-quark-thermochronology-meteor (npm) (malicious package)
- [MAL-2025-189531](https://insights.sbomify.com/MAL-2025-189531/): Malicious code in slides-public-alphard-canopus (npm) (malicious package)
- [MAL-2025-189530](https://insights.sbomify.com/MAL-2025-189530/): Malicious code in slides-photon-nightwatch-stratigraphy (npm) (malicious package)
- [MAL-2025-18953](https://insights.sbomify.com/MAL-2025-18953/): Malicious code in duabot (npm) (malicious package)
- [MAL-2025-189529](https://insights.sbomify.com/MAL-2025-189529/): Malicious code in slides-install-dynamo-dotenv-parse-variables (npm) (malicious package)
- [MAL-2025-189528](https://insights.sbomify.com/MAL-2025-189528/): Malicious code in slides-convict-husky-kaus (npm) (malicious package)
- [MAL-2025-189527](https://insights.sbomify.com/MAL-2025-189527/): Malicious code in slides-callisto-algol-sagitta (npm) (malicious package)
- [MAL-2025-189526](https://insights.sbomify.com/MAL-2025-189526/): Malicious code in sirius-yonder-algol-quantum (npm) (malicious package)
- [MAL-2025-189525](https://insights.sbomify.com/MAL-2025-189525/): Malicious code in sirius-stop-umbra-spawn (npm) (malicious package)
- [MAL-2025-189524](https://insights.sbomify.com/MAL-2025-189524/): Malicious code in sirius-spectron-webdriver-mutation-glaciology (npm) (malicious package)
- [MAL-2025-189523](https://insights.sbomify.com/MAL-2025-189523/): Malicious code in sirius-scorpius-sirius-parsec (npm) (malicious package)
- [MAL-2025-189522](https://insights.sbomify.com/MAL-2025-189522/): Malicious code in sirius-robotics-loopback-cosmicray (npm) (malicious package)
- [MAL-2025-189521](https://insights.sbomify.com/MAL-2025-189521/): Malicious code in sirius-registry-webpack-quasar (npm) (malicious package)
- [MAL-2025-189520](https://insights.sbomify.com/MAL-2025-189520/): Malicious code in sirius-react-bootstrap-ignite-pegasus (npm) (malicious package)
- [MAL-2025-18952](https://insights.sbomify.com/MAL-2025-18952/): Malicious code in dtrundle (npm) (malicious package)
- [MAL-2025-189519](https://insights.sbomify.com/MAL-2025-189519/): Malicious code in sirius-phoebe-zenobia-babel (npm) (malicious package)
- [MAL-2025-189518](https://insights.sbomify.com/MAL-2025-189518/): Malicious code in sirius-nuxtjs-genomics-hydrogeology (npm) (malicious package)
- [MAL-2025-189517](https://insights.sbomify.com/MAL-2025-189517/): Malicious code in sirius-miranda-astrometry-exoplanetology (npm) (malicious package)
- [MAL-2025-189516](https://insights.sbomify.com/MAL-2025-189516/): Malicious code in sirius-lynx-antares-server (npm) (malicious package)
- [MAL-2025-189515](https://insights.sbomify.com/MAL-2025-189515/): Malicious code in sirius-darkmatter-lint-staged-cli (npm) (malicious package)
- [MAL-2025-189514](https://insights.sbomify.com/MAL-2025-189514/): Malicious code in sirius-darkenergy-selenium-stream (npm) (malicious package)
- [MAL-2025-189513](https://insights.sbomify.com/MAL-2025-189513/): Malicious code in sirius-blaze-decoherence-scripts (npm) (malicious package)
- [MAL-2025-189512](https://insights.sbomify.com/MAL-2025-189512/): Malicious code in sirius-astroinformatics-ursa-futurology (npm) (malicious package)
- [MAL-2025-189511](https://insights.sbomify.com/MAL-2025-189511/): Malicious code in singularity-rigel-quasarjet-husky (npm) (malicious package)
- [MAL-2025-189510](https://insights.sbomify.com/MAL-2025-189510/): Malicious code in singularity-restart-helmet-auriga (npm) (malicious package)
- [MAL-2025-18951](https://insights.sbomify.com/MAL-2025-18951/): Malicious code in dtmcsbhjevgqnxua (npm) (malicious package)
- [MAL-2025-189509](https://insights.sbomify.com/MAL-2025-189509/): Malicious code in singularity-kuiperbelt-loopback-fermiparadox (npm) (malicious package)
- [MAL-2025-189508](https://insights.sbomify.com/MAL-2025-189508/): Malicious code in singularity-darkmatter-janus-browserify (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/937/