# Vulnerabilities published in 2025


- [MAL-2025-189417](https://insights.sbomify.com/MAL-2025-189417/): Malicious code in sedna-request-dysonswarm-enif (npm) (malicious package)
- [MAL-2025-189416](https://insights.sbomify.com/MAL-2025-189416/): Malicious code in sedna-palynology-aquarius-lithosphere (npm) (malicious package)
- [MAL-2025-189415](https://insights.sbomify.com/MAL-2025-189415/): Malicious code in sedna-nova-readable-levels (npm) (malicious package)
- [MAL-2025-189414](https://insights.sbomify.com/MAL-2025-189414/): Malicious code in sedna-nextjs-baryon-ceres (npm) (malicious package)
- [MAL-2025-189413](https://insights.sbomify.com/MAL-2025-189413/): Malicious code in sedna-json-yildun-helios (npm) (malicious package)
- [MAL-2025-189412](https://insights.sbomify.com/MAL-2025-189412/): Malicious code in sedna-jest-init-delphinus (npm) (malicious package)
- [MAL-2025-189411](https://insights.sbomify.com/MAL-2025-189411/): Malicious code in sedna-geodynamo-holography-paleontology (npm) (malicious package)
- [MAL-2025-189410](https://insights.sbomify.com/MAL-2025-189410/): Malicious code in sedna-enif-fusion-colors (npm) (malicious package)
- [MAL-2025-18941](https://insights.sbomify.com/MAL-2025-18941/): Malicious code in dslive (npm) (malicious package)
- [MAL-2025-189409](https://insights.sbomify.com/MAL-2025-189409/): Malicious code in sedimentology-spinner-gravity-blueshift (npm) (malicious package)
- [MAL-2025-189408](https://insights.sbomify.com/MAL-2025-189408/): Malicious code in sedimentology-ablation-meteor-xml (npm) (malicious package)
- [MAL-2025-189407](https://insights.sbomify.com/MAL-2025-189407/): Malicious code in sed-sigma-mock-finally-virtualize (npm) (malicious package)
- [MAL-2025-189406](https://insights.sbomify.com/MAL-2025-189406/): Malicious code in sed-sigma-encrypt-catch-warn (npm) (malicious package)
- [MAL-2025-189405](https://insights.sbomify.com/MAL-2025-189405/): Malicious code in sed-shell-cat-encrypt-parse (npm) (malicious package)
- [MAL-2025-189404](https://insights.sbomify.com/MAL-2025-189404/): Malicious code in sed-sed-link-data-root (npm) (malicious package)
- [MAL-2025-189403](https://insights.sbomify.com/MAL-2025-189403/): Malicious code in sed-secure-rain-water-omicron (npm) (malicious package)
- [MAL-2025-189402](https://insights.sbomify.com/MAL-2025-189402/): Malicious code in sed-route-encrypt-refactor-public (npm) (malicious package)
- [MAL-2025-189401](https://insights.sbomify.com/MAL-2025-189401/): Malicious code in sed-promise-book-sun-lambda (npm) (malicious package)
- [MAL-2025-189400](https://insights.sbomify.com/MAL-2025-189400/): Malicious code in sed-node-shell-long-authorize (npm) (malicious package)
- [MAL-2025-18940](https://insights.sbomify.com/MAL-2025-18940/): Malicious code in dslash-parser (npm) (malicious package)
- [MAL-2025-1894](https://insights.sbomify.com/MAL-2025-1894/): Malicious code in meli-user (npm) (malicious package)
- [MAL-2025-189399](https://insights.sbomify.com/MAL-2025-189399/): Malicious code in sed-float-bad-void-stack (npm) (malicious package)
- [MAL-2025-189398](https://insights.sbomify.com/MAL-2025-189398/): Malicious code in secure-phi-web-yaml-socket (npm) (malicious package)
- [MAL-2025-189397](https://insights.sbomify.com/MAL-2025-189397/): Malicious code in secure-old-deploy-resolve-encode (npm) (malicious package)
- [MAL-2025-189396](https://insights.sbomify.com/MAL-2025-189396/): Malicious code in secure-eta-throw-index-fork (npm) (malicious package)
- [MAL-2025-189395](https://insights.sbomify.com/MAL-2025-189395/): Malicious code in secure-compress-phi-bash-orchestrate (npm) (malicious package)
- [MAL-2025-189394](https://insights.sbomify.com/MAL-2025-189394/): Malicious code in secure-big-user-unix-private (npm) (malicious package)
- [MAL-2025-189393](https://insights.sbomify.com/MAL-2025-189393/): Malicious code in scripts-yaml-janus-gacrux (npm) (malicious package)
- [MAL-2025-189392](https://insights.sbomify.com/MAL-2025-189392/): Malicious code in scripts-thermochronology-corvus-stop (npm) (malicious package)
- [MAL-2025-189391](https://insights.sbomify.com/MAL-2025-189391/): Malicious code in scripts-shelljs-quark-gridsome (npm) (malicious package)
- [MAL-2025-189390](https://insights.sbomify.com/MAL-2025-189390/): Malicious code in scripts-private-frontend-fornax (npm) (malicious package)
- [MAL-2025-18939](https://insights.sbomify.com/MAL-2025-18939/): Malicious code in dshelx (npm) (malicious package)
- [MAL-2025-189389](https://insights.sbomify.com/MAL-2025-189389/): Malicious code in scripts-octans-redis-technosignature (npm) (malicious package)
- [MAL-2025-189388](https://insights.sbomify.com/MAL-2025-189388/): Malicious code in scripts-jabbah-apollo-phenomic (npm) (malicious package)
- [MAL-2025-189387](https://insights.sbomify.com/MAL-2025-189387/): Malicious code in scripts-hermes-pulsar-neuromorphic (npm) (malicious package)
- [MAL-2025-189386](https://insights.sbomify.com/MAL-2025-189386/): Malicious code in scripts-geckodriver-jwt-draco (npm) (malicious package)
- [MAL-2025-189385](https://insights.sbomify.com/MAL-2025-189385/): Malicious code in scripts-duplex-innercore-mongoose (npm) (malicious package)
- [MAL-2025-189384](https://insights.sbomify.com/MAL-2025-189384/): Malicious code in scripts-chalk-nodemon-eigenstate (npm) (malicious package)
- [MAL-2025-189383](https://insights.sbomify.com/MAL-2025-189383/): Malicious code in scripts-apex-gravity-jest (npm) (malicious package)
- [MAL-2025-189382](https://insights.sbomify.com/MAL-2025-189382/): Malicious code in scorpius-vulcan-postcss-loader-centauri (npm) (malicious package)
- [MAL-2025-189381](https://insights.sbomify.com/MAL-2025-189381/): Malicious code in scorpius-version-convict-private (npm) (malicious package)
- [MAL-2025-189380](https://insights.sbomify.com/MAL-2025-189380/): Malicious code in scorpius-gemini-ionosphere-odin (npm) (malicious package)
- [MAL-2025-18938](https://insights.sbomify.com/MAL-2025-18938/): Malicious code in dshellx (npm) (malicious package)
- [MAL-2025-189379](https://insights.sbomify.com/MAL-2025-189379/): Malicious code in scorpius-elara-membrane-brane (npm) (malicious package)
- [MAL-2025-189378](https://insights.sbomify.com/MAL-2025-189378/): Malicious code in scorpius-cryptography-tethys-library (npm) (malicious package)
- [MAL-2025-189377](https://insights.sbomify.com/MAL-2025-189377/): Malicious code in scorpius-chalk-eleventy-kaus (npm) (malicious package)
- [MAL-2025-189376](https://insights.sbomify.com/MAL-2025-189376/): Malicious code in schema-wasat-development-bellatrix (npm) (malicious package)
- [MAL-2025-189375](https://insights.sbomify.com/MAL-2025-189375/): Malicious code in schema-terser-prompts-rollup (npm) (malicious package)
- [MAL-2025-189374](https://insights.sbomify.com/MAL-2025-189374/): Malicious code in schema-dependencies-paleoanthropology-xenos (npm) (malicious package)
- [MAL-2025-189373](https://insights.sbomify.com/MAL-2025-189373/): Malicious code in schema-bunyan-magnetar-bootstrap (npm) (malicious package)
- [MAL-2025-189372](https://insights.sbomify.com/MAL-2025-189372/): Malicious code in scale-phi-deserialize-nu-sed (npm) (malicious package)
- [MAL-2025-189371](https://insights.sbomify.com/MAL-2025-189371/): Malicious code in scale-parse-await-book-private (npm) (malicious package)
- [MAL-2025-189370](https://insights.sbomify.com/MAL-2025-189370/): Malicious code in scale-hot-tree-cache-execute (npm) (malicious package)
- [MAL-2025-18937](https://insights.sbomify.com/MAL-2025-18937/): Malicious code in dshelld (npm) (malicious package)
- [MAL-2025-189369](https://insights.sbomify.com/MAL-2025-189369/): Malicious code in scale-deserialize-function-optimize-hot (npm) (malicious package)
- [MAL-2025-189368](https://insights.sbomify.com/MAL-2025-189368/): Malicious code in scale-deploy-pi-simulate-load (npm) (malicious package)
- [MAL-2025-189367](https://insights.sbomify.com/MAL-2025-189367/): Malicious code in scale-compress-minify-wind-interface (npm) (malicious package)
- [MAL-2025-189366](https://insights.sbomify.com/MAL-2025-189366/): Malicious code in saturnology-webdriver-mocha-registry-blitz (npm) (malicious package)
- [MAL-2025-189365](https://insights.sbomify.com/MAL-2025-189365/): Malicious code in saturnology-titan-solis-astrometry (npm) (malicious package)
- [MAL-2025-189364](https://insights.sbomify.com/MAL-2025-189364/): Malicious code in saturnology-fusion-kinetic-astrophysics (npm) (malicious package)
- [MAL-2025-189363](https://insights.sbomify.com/MAL-2025-189363/): Malicious code in saturnology-fomalhaut-geckodriver-resolvers (npm) (malicious package)
- [MAL-2025-189362](https://insights.sbomify.com/MAL-2025-189362/): Malicious code in saturnology-equinox-cordelia-wavefunction (npm) (malicious package)
- [MAL-2025-189361](https://insights.sbomify.com/MAL-2025-189361/): Malicious code in saturnology-enceladus-jest-xml (npm) (malicious package)
- [MAL-2025-189360](https://insights.sbomify.com/MAL-2025-189360/): Malicious code in saturnology-darkenergy-sadr-paleobotany (npm) (malicious package)
- [MAL-2025-18936](https://insights.sbomify.com/MAL-2025-18936/): Malicious code in dshellb (npm) (malicious package)
- [MAL-2025-189359](https://insights.sbomify.com/MAL-2025-189359/): Malicious code in saturnology-blueshift-parcel-deimos (npm) (malicious package)
- [MAL-2025-189358](https://insights.sbomify.com/MAL-2025-189358/): Malicious code in saturnology-astroinformatics-release-it-test (npm) (malicious package)
- [MAL-2025-189357](https://insights.sbomify.com/MAL-2025-189357/): Malicious code in sass-loader-prompts-inquirer-blaze (npm) (malicious package)
- [MAL-2025-189356](https://insights.sbomify.com/MAL-2025-189356/): Malicious code in sass-loader-lepton-nebula-virgo (npm) (malicious package)
- [MAL-2025-189355](https://insights.sbomify.com/MAL-2025-189355/): Malicious code in sass-loader-iota-lyra-fomalhaut (npm) (malicious package)
- [MAL-2025-189354](https://insights.sbomify.com/MAL-2025-189354/): Malicious code in sass-loader-fornax-passport-geoarchaeology (npm) (malicious package)
- [MAL-2025-189353](https://insights.sbomify.com/MAL-2025-189353/): Malicious code in sass-loader-cluster-link-jekyll (npm) (malicious package)
- [MAL-2025-189352](https://insights.sbomify.com/MAL-2025-189352/): Malicious code in sass-loader-castor-prettier-stylelint-lint (npm) (malicious package)
- [MAL-2025-189351](https://insights.sbomify.com/MAL-2025-189351/): Malicious code in sass-loader-canopus-mesosphere-concurrently (npm) (malicious package)
- [MAL-2025-189350](https://insights.sbomify.com/MAL-2025-189350/): Malicious code in sanitize-sed-transpile-analyze-sandbox (npm) (malicious package)
- [MAL-2025-18935](https://insights.sbomify.com/MAL-2025-18935/): Malicious code in dshella (npm) (malicious package)
- [MAL-2025-189349](https://insights.sbomify.com/MAL-2025-189349/): Malicious code in sanitize-new-link-code-void (npm) (malicious package)
- [MAL-2025-189348](https://insights.sbomify.com/MAL-2025-189348/): Malicious code in sanitize-module-pi-code-static (npm) (malicious package)
- [MAL-2025-189347](https://insights.sbomify.com/MAL-2025-189347/): Malicious code in sanitize-hot-quick-log-byte (npm) (malicious package)
- [MAL-2025-189346](https://insights.sbomify.com/MAL-2025-189346/): Malicious code in sanitize-eta-promise-error-awk (npm) (malicious package)
- [MAL-2025-189345](https://insights.sbomify.com/MAL-2025-189345/): Malicious code in sanitize-analyze-benchmark-deploy-encode (npm) (malicious package)
- [MAL-2025-189344](https://insights.sbomify.com/MAL-2025-189344/): Malicious code in sandbox-table-async-void-export (npm) (malicious package)
- [MAL-2025-189343](https://insights.sbomify.com/MAL-2025-189343/): Malicious code in sandbox-scale-promise-unix-resolve (npm) (malicious package)
- [MAL-2025-189342](https://insights.sbomify.com/MAL-2025-189342/): Malicious code in sandbox-quick-hash-psi-throw (npm) (malicious package)
- [MAL-2025-189341](https://insights.sbomify.com/MAL-2025-189341/): Malicious code in sandbox-long-compress-book-log (npm) (malicious package)
- [MAL-2025-189340](https://insights.sbomify.com/MAL-2025-189340/): Malicious code in sandbox-kernel-web-good-static (npm) (malicious package)
- [MAL-2025-18934](https://insights.sbomify.com/MAL-2025-18934/): Malicious code in dsfserewkbc (npm) (malicious package)
- [MAL-2025-189339](https://insights.sbomify.com/MAL-2025-189339/): Malicious code in sandbox-interface-async-awk-proxy (npm) (malicious package)
- [MAL-2025-189338](https://insights.sbomify.com/MAL-2025-189338/): Malicious code in sandbox-hot-cron-query-boolean (npm) (malicious package)
- [MAL-2025-189337](https://insights.sbomify.com/MAL-2025-189337/): Malicious code in sandbox-final-enum-export-emulate (npm) (malicious package)
- [MAL-2025-189336](https://insights.sbomify.com/MAL-2025-189336/): Malicious code in sandbox-export-integer-alpha-java (npm) (malicious package)
- [MAL-2025-189335](https://insights.sbomify.com/MAL-2025-189335/): Malicious code in sandbox-bash-authorize-hot-simulate (npm) (malicious package)
- [MAL-2025-189334](https://insights.sbomify.com/MAL-2025-189334/): Malicious code in sails-winston-radioastronomy-charon (npm) (malicious package)
- [MAL-2025-189333](https://insights.sbomify.com/MAL-2025-189333/): Malicious code in sails-soap-link-webdriver-mocha (npm) (malicious package)
- [MAL-2025-189332](https://insights.sbomify.com/MAL-2025-189332/): Malicious code in sails-rollup-unuk-xo (npm) (malicious package)
- [MAL-2025-189331](https://insights.sbomify.com/MAL-2025-189331/): Malicious code in sails-remark-terser-hyperion (npm) (malicious package)
- [MAL-2025-189330](https://insights.sbomify.com/MAL-2025-189330/): Malicious code in sails-link-update-glaciology (npm) (malicious package)
- [MAL-2025-18933](https://insights.sbomify.com/MAL-2025-18933/): Malicious code in dsfserewkbb (npm) (malicious package)
- [MAL-2025-189329](https://insights.sbomify.com/MAL-2025-189329/): Malicious code in sails-europa-nextjs-version (npm) (malicious package)
- [MAL-2025-189328](https://insights.sbomify.com/MAL-2025-189328/): Malicious code in sails-dotenv-adonis-antd (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/939/