# Vulnerabilities published in 2025


- [MAL-2025-189507](https://insights.sbomify.com/MAL-2025-189507/): Malicious code in singularity-bunyan-eslint-config-publish (npm) (malicious package)
- [MAL-2025-189506](https://insights.sbomify.com/MAL-2025-189506/): Malicious code in singularitarianism-prosthetics-wolf-exosphere (npm) (malicious package)
- [MAL-2025-189505](https://insights.sbomify.com/MAL-2025-189505/): Malicious code in singularitarianism-interferometry-cryovolcano-mocha (npm) (malicious package)
- [MAL-2025-189504](https://insights.sbomify.com/MAL-2025-189504/): Malicious code in singularitarianism-europa-spectroscopy-lithosphere (npm) (malicious package)
- [MAL-2025-189503](https://insights.sbomify.com/MAL-2025-189503/): Malicious code in simulate-small-enum-protected-cluster (npm) (malicious package)
- [MAL-2025-189502](https://insights.sbomify.com/MAL-2025-189502/): Malicious code in simulate-refactor-java-route-beta (npm) (malicious package)
- [MAL-2025-189501](https://insights.sbomify.com/MAL-2025-189501/): Malicious code in simple-load-info-error-cold (npm) (malicious package)
- [MAL-2025-189500](https://insights.sbomify.com/MAL-2025-189500/): Malicious code in simple-file-omicron-function-decrypt (npm) (malicious package)
- [MAL-2025-18950](https://insights.sbomify.com/MAL-2025-18950/): Malicious code in dtljayqkgwxrmvku (npm) (malicious package)
- [MAL-2025-1895](https://insights.sbomify.com/MAL-2025-1895/): Malicious code in meli-utils (npm) (malicious package)
- [MAL-2025-189499](https://insights.sbomify.com/MAL-2025-189499/): Malicious code in simple-await-try-book-epsilon (npm) (malicious package)
- [MAL-2025-189498](https://insights.sbomify.com/MAL-2025-189498/): Malicious code in signal-view-stub-interface-async (npm) (malicious package)
- [MAL-2025-189497](https://insights.sbomify.com/MAL-2025-189497/): Malicious code in signal-throw-pi-sun-sigma (npm) (malicious package)
- [MAL-2025-189496](https://insights.sbomify.com/MAL-2025-189496/): Malicious code in signal-star-benchmark-report-small (npm) (malicious package)
- [MAL-2025-189495](https://insights.sbomify.com/MAL-2025-189495/): Malicious code in signal-quick-proxy-data-web (npm) (malicious package)
- [MAL-2025-189494](https://insights.sbomify.com/MAL-2025-189494/): Malicious code in signal-authenticate-cluster-await-byte (npm) (malicious package)
- [MAL-2025-189493](https://insights.sbomify.com/MAL-2025-189493/): Malicious code in signal-array-report-reject-cat (npm) (malicious package)
- [MAL-2025-189492](https://insights.sbomify.com/MAL-2025-189492/): Malicious code in sigma-web-unix-interpret-earth (npm) (malicious package)
- [MAL-2025-189491](https://insights.sbomify.com/MAL-2025-189491/): Malicious code in sigma-try-deserialize-slow-omega (npm) (malicious package)
- [MAL-2025-189490](https://insights.sbomify.com/MAL-2025-189490/): Malicious code in sigma-rain-omicron-emulate-char (npm) (malicious package)
- [MAL-2025-18949](https://insights.sbomify.com/MAL-2025-18949/): Malicious code in dtcleaner (npm) (malicious package)
- [MAL-2025-189489](https://insights.sbomify.com/MAL-2025-189489/): Malicious code in sigma-query-interpret-phi-process (npm) (malicious package)
- [MAL-2025-189488](https://insights.sbomify.com/MAL-2025-189488/): Malicious code in sigma-file-signal-log-report (npm) (malicious package)
- [MAL-2025-189487](https://insights.sbomify.com/MAL-2025-189487/): Malicious code in sigma-compile-simulate-integer-bash (npm) (malicious package)
- [MAL-2025-189486](https://insights.sbomify.com/MAL-2025-189486/): Malicious code in sigma-class-new-root-reject (npm) (malicious package)
- [MAL-2025-189485](https://insights.sbomify.com/MAL-2025-189485/): Malicious code in sigma-byte-minify-cache-float (npm) (malicious package)
- [MAL-2025-189484](https://insights.sbomify.com/MAL-2025-189484/): Malicious code in sigma-awk-abstract-error-kappa (npm) (malicious package)
- [MAL-2025-189483](https://insights.sbomify.com/MAL-2025-189483/): Malicious code in short-shell-data-private-bash (npm) (malicious package)
- [MAL-2025-189482](https://insights.sbomify.com/MAL-2025-189482/): Malicious code in short-public-permission-grid-throw (npm) (malicious package)
- [MAL-2025-189481](https://insights.sbomify.com/MAL-2025-189481/): Malicious code in short-load-user-slow-easy (npm) (malicious package)
- [MAL-2025-189480](https://insights.sbomify.com/MAL-2025-189480/): Malicious code in short-encrypt-root-visualize-visualize (npm) (malicious package)
- [MAL-2025-18948](https://insights.sbomify.com/MAL-2025-18948/): Malicious code in dt-oneagent-tailor (npm) (malicious package)
- [MAL-2025-189479](https://insights.sbomify.com/MAL-2025-189479/): Malicious code in short-easy-epsilon-beta-container (npm) (malicious package)
- [MAL-2025-189478](https://insights.sbomify.com/MAL-2025-189478/): Malicious code in short-easy-cat-mock-daemon (npm) (malicious package)
- [MAL-2025-189477](https://insights.sbomify.com/MAL-2025-189477/): Malicious code in shelljs-zephyr-ariel-brane (npm) (malicious package)
- [MAL-2025-189476](https://insights.sbomify.com/MAL-2025-189476/): Malicious code in shelljs-test-mira-neptune (npm) (malicious package)
- [MAL-2025-189475](https://insights.sbomify.com/MAL-2025-189475/): Malicious code in shelljs-package-writable-jabbah (npm) (malicious package)
- [MAL-2025-189474](https://insights.sbomify.com/MAL-2025-189474/): Malicious code in shelljs-fermiparadox-bootes-xml (npm) (malicious package)
- [MAL-2025-189473](https://insights.sbomify.com/MAL-2025-189473/): Malicious code in shelljs-biotechnology-leda-europa (npm) (malicious package)
- [MAL-2025-189472](https://insights.sbomify.com/MAL-2025-189472/): Malicious code in shell-process-eta-star-omicron (npm) (malicious package)
- [MAL-2025-189471](https://insights.sbomify.com/MAL-2025-189471/): Malicious code in shell-omicron-dog-bash-simple (npm) (malicious package)
- [MAL-2025-189470](https://insights.sbomify.com/MAL-2025-189470/): Malicious code in shell-integer-optimize-log-promise (npm) (malicious package)
- [MAL-2025-18947](https://insights.sbomify.com/MAL-2025-18947/): Malicious code in dsvqozpircyntxgb (npm) (malicious package)
- [MAL-2025-189469](https://insights.sbomify.com/MAL-2025-189469/): Malicious code in shell-double-gamma-shell-kappa (npm) (malicious package)
- [MAL-2025-189468](https://insights.sbomify.com/MAL-2025-189468/): Malicious code in shell-class-encrypt-info-zeta (npm) (malicious package)
- [MAL-2025-189467](https://insights.sbomify.com/MAL-2025-189467/): Malicious code in server-weywot-ablation-ablation (npm) (malicious package)
- [MAL-2025-189466](https://insights.sbomify.com/MAL-2025-189466/): Malicious code in server-redis-umbra-fornax (npm) (malicious package)
- [MAL-2025-189465](https://insights.sbomify.com/MAL-2025-189465/): Malicious code in server-publish-ultra-ultra (npm) (malicious package)
- [MAL-2025-189464](https://insights.sbomify.com/MAL-2025-189464/): Malicious code in server-nestjs-selenium-cassini (npm) (malicious package)
- [MAL-2025-189463](https://insights.sbomify.com/MAL-2025-189463/): Malicious code in server-nebula-cosmiconfig-umbra (npm) (malicious package)
- [MAL-2025-189462](https://insights.sbomify.com/MAL-2025-189462/): Malicious code in server-filament-framework-css-minimizer-webpack-plugin (npm) (malicious package)
- [MAL-2025-189461](https://insights.sbomify.com/MAL-2025-189461/): Malicious code in server-child-process-cosmicray-extremophile (npm) (malicious package)
- [MAL-2025-189460](https://insights.sbomify.com/MAL-2025-189460/): Malicious code in server-carpo-carpo-cosmicray (npm) (malicious package)
- [MAL-2025-18946](https://insights.sbomify.com/MAL-2025-18946/): Malicious code in dspython (npm) (malicious package)
- [MAL-2025-189459](https://insights.sbomify.com/MAL-2025-189459/): Malicious code in server-callback-css-loader-archaeoastronomy (npm) (malicious package)
- [MAL-2025-189458](https://insights.sbomify.com/MAL-2025-189458/): Malicious code in server-astrometry-ceres-aether (npm) (malicious package)
- [MAL-2025-189457](https://insights.sbomify.com/MAL-2025-189457/): Malicious code in server-asteroid-foundation-native (npm) (malicious package)
- [MAL-2025-189456](https://insights.sbomify.com/MAL-2025-189456/): Malicious code in serialize-stack-omega-node-authorize (npm) (malicious package)
- [MAL-2025-189455](https://insights.sbomify.com/MAL-2025-189455/): Malicious code in serialize-short-grep-async-float (npm) (malicious package)
- [MAL-2025-189454](https://insights.sbomify.com/MAL-2025-189454/): Malicious code in serialize-quick-alpha-book-resolve (npm) (malicious package)
- [MAL-2025-189453](https://insights.sbomify.com/MAL-2025-189453/): Malicious code in serialize-minify-decompress-mu-cron (npm) (malicious package)
- [MAL-2025-189452](https://insights.sbomify.com/MAL-2025-189452/): Malicious code in serialize-final-beta-deserialize-await (npm) (malicious package)
- [MAL-2025-189451](https://insights.sbomify.com/MAL-2025-189451/): Malicious code in serialize-eta-authenticate-authorize-sigma (npm) (malicious package)
- [MAL-2025-189450](https://insights.sbomify.com/MAL-2025-189450/): Malicious code in serialize-cloud-key-array-secure (npm) (malicious package)
- [MAL-2025-18945](https://insights.sbomify.com/MAL-2025-18945/): Malicious code in dspreso (npm) (malicious package)
- [MAL-2025-189449](https://insights.sbomify.com/MAL-2025-189449/): Malicious code in serialize-bash-authenticate-execute-cloud (npm) (malicious package)
- [MAL-2025-189448](https://insights.sbomify.com/MAL-2025-189448/): Malicious code in sequelize-slidev-forever-rollup (npm) (malicious package)
- [MAL-2025-189447](https://insights.sbomify.com/MAL-2025-189447/): Malicious code in sequelize-phoebe-bunyan-test (npm) (malicious package)
- [MAL-2025-189446](https://insights.sbomify.com/MAL-2025-189446/): Malicious code in sequelize-paleontology-gravity-webdriver-manager (npm) (malicious package)
- [MAL-2025-189445](https://insights.sbomify.com/MAL-2025-189445/): Malicious code in sequelize-ophiuchus-parcel-procyon (npm) (malicious package)
- [MAL-2025-189444](https://insights.sbomify.com/MAL-2025-189444/): Malicious code in sequelize-hawkingradiation-protractor-quasarjet (npm) (malicious package)
- [MAL-2025-189443](https://insights.sbomify.com/MAL-2025-189443/): Malicious code in sequelize-eris-europa-sails (npm) (malicious package)
- [MAL-2025-189442](https://insights.sbomify.com/MAL-2025-189442/): Malicious code in sequelize-configstore-neuromorphic-petrology (npm) (malicious package)
- [MAL-2025-189441](https://insights.sbomify.com/MAL-2025-189441/): Malicious code in semantic-ui-redis-dendrochronology-run-script (npm) (malicious package)
- [MAL-2025-189440](https://insights.sbomify.com/MAL-2025-189440/): Malicious code in semantic-release-webdriver-mocha-holography-init (npm) (malicious package)
- [MAL-2025-18944](https://insights.sbomify.com/MAL-2025-18944/): Malicious code in dspmgr (npm) (malicious package)
- [MAL-2025-189439](https://insights.sbomify.com/MAL-2025-189439/): Malicious code in semantic-release-boson-lepton-kastra (npm) (malicious package)
- [MAL-2025-189438](https://insights.sbomify.com/MAL-2025-189438/): Malicious code in semantic-release-aether-buffer-concurrently (npm) (malicious package)
- [MAL-2025-189437](https://insights.sbomify.com/MAL-2025-189437/): Malicious code in selenology-zenobia-loglevel-prettier-stylelint (npm) (malicious package)
- [MAL-2025-189436](https://insights.sbomify.com/MAL-2025-189436/): Malicious code in selenology-tailwindcss-cosmogenic-antares (npm) (malicious package)
- [MAL-2025-189435](https://insights.sbomify.com/MAL-2025-189435/): Malicious code in selenology-dione-envconfig-avior (npm) (malicious package)
- [MAL-2025-189434](https://insights.sbomify.com/MAL-2025-189434/): Malicious code in selenium-uranology-quantum-computing-framework (npm) (malicious package)
- [MAL-2025-189433](https://insights.sbomify.com/MAL-2025-189433/): Malicious code in selenium-troposphere-nebula-betelgeuse (npm) (malicious package)
- [MAL-2025-189432](https://insights.sbomify.com/MAL-2025-189432/): Malicious code in selenium-neptunology-nucleosynthesis-axios (npm) (malicious package)
- [MAL-2025-189431](https://insights.sbomify.com/MAL-2025-189431/): Malicious code in selenium-halley-algol-init (npm) (malicious package)
- [MAL-2025-189430](https://insights.sbomify.com/MAL-2025-189430/): Malicious code in selenium-dotenv-parse-variables-gacrux-vega (npm) (malicious package)
- [MAL-2025-18943](https://insights.sbomify.com/MAL-2025-18943/): Malicious code in dsounite (npm) (malicious package)
- [MAL-2025-189429](https://insights.sbomify.com/MAL-2025-189429/): Malicious code in selenium-cluster-framework-eleventy (npm) (malicious package)
- [MAL-2025-189428](https://insights.sbomify.com/MAL-2025-189428/): Malicious code in selenium-avior-antimatter-registry (npm) (malicious package)
- [MAL-2025-189427](https://insights.sbomify.com/MAL-2025-189427/): Malicious code in seismology-paleomagnetism-fermiparadox-spectroscopy (npm) (malicious package)
- [MAL-2025-189426](https://insights.sbomify.com/MAL-2025-189426/): Malicious code in seismology-meteor-odin-galaxy (npm) (malicious package)
- [MAL-2025-189425](https://insights.sbomify.com/MAL-2025-189425/): Malicious code in seismology-jabbah-exosphere-mini-css-extract-plugin (npm) (malicious package)
- [MAL-2025-189424](https://insights.sbomify.com/MAL-2025-189424/): Malicious code in seismology-fornax-frontend-neutronstar (npm) (malicious package)
- [MAL-2025-189423](https://insights.sbomify.com/MAL-2025-189423/): Malicious code in seismology-enceladus-comet-singularity (npm) (malicious package)
- [MAL-2025-189422](https://insights.sbomify.com/MAL-2025-189422/): Malicious code in seismology-configstore-vuepress-global (npm) (malicious package)
- [MAL-2025-189421](https://insights.sbomify.com/MAL-2025-189421/): Malicious code in sedna-telesto-webpack-public (npm) (malicious package)
- [MAL-2025-189420](https://insights.sbomify.com/MAL-2025-189420/): Malicious code in sedna-shelljs-tailwindcss-photon (npm) (malicious package)
- [MAL-2025-18942](https://insights.sbomify.com/MAL-2025-18942/): Malicious code in dsnippets (npm) (malicious package)
- [MAL-2025-189419](https://insights.sbomify.com/MAL-2025-189419/): Malicious code in sedna-semantic-release-meissa-winston (npm) (malicious package)
- [MAL-2025-189418](https://insights.sbomify.com/MAL-2025-189418/): Malicious code in sedna-rigel-package-xenos (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/938/