# Vulnerabilities published in 2025


- [MAL-2025-189327](https://insights.sbomify.com/MAL-2025-189327/): Malicious code in sails-blueshift-string-warp (npm) (malicious package)
- [MAL-2025-189326](https://insights.sbomify.com/MAL-2025-189326/): Malicious code in sagitta-wolf-barnard-geckodriver (npm) (malicious package)
- [MAL-2025-189325](https://insights.sbomify.com/MAL-2025-189325/): Malicious code in sagitta-whitedwarf-betelgeuse-plutology (npm) (malicious package)
- [MAL-2025-189324](https://insights.sbomify.com/MAL-2025-189324/): Malicious code in sagitta-tachyon-rocket-nodemon (npm) (malicious package)
- [MAL-2025-189323](https://insights.sbomify.com/MAL-2025-189323/): Malicious code in sagitta-sublimation-sagitta-halley (npm) (malicious package)
- [MAL-2025-189322](https://insights.sbomify.com/MAL-2025-189322/): Malicious code in sagitta-shelljs-halley-grunt (npm) (malicious package)
- [MAL-2025-189321](https://insights.sbomify.com/MAL-2025-189321/): Malicious code in sagitta-schema-release-it-husky (npm) (malicious package)
- [MAL-2025-189320](https://insights.sbomify.com/MAL-2025-189320/): Malicious code in sagitta-query-brane-parallax (npm) (malicious package)
- [MAL-2025-18932](https://insights.sbomify.com/MAL-2025-18932/): Malicious code in dsfserewkbaz (npm) (malicious package)
- [MAL-2025-189319](https://insights.sbomify.com/MAL-2025-189319/): Malicious code in sagitta-publish-wasat-fornax (npm) (malicious package)
- [MAL-2025-189318](https://insights.sbomify.com/MAL-2025-189318/): Malicious code in sagitta-protractor-taurus-csv (npm) (malicious package)
- [MAL-2025-189317](https://insights.sbomify.com/MAL-2025-189317/): Malicious code in sagitta-polaris-configstore-commitlint-config-angular (npm) (malicious package)
- [MAL-2025-189316](https://insights.sbomify.com/MAL-2025-189316/): Malicious code in sagitta-mira-ceres-darkenergy (npm) (malicious package)
- [MAL-2025-189315](https://insights.sbomify.com/MAL-2025-189315/): Malicious code in sagitta-jest-orbit-dotenv (npm) (malicious package)
- [MAL-2025-189314](https://insights.sbomify.com/MAL-2025-189314/): Malicious code in sagitta-javascript-process-telesto (npm) (malicious package)
- [MAL-2025-189313](https://insights.sbomify.com/MAL-2025-189313/): Malicious code in sagitta-izar-dagda-nightmare (npm) (malicious package)
- [MAL-2025-189312](https://insights.sbomify.com/MAL-2025-189312/): Malicious code in sagitta-frontend-eslint-config-cors (npm) (malicious package)
- [MAL-2025-189311](https://insights.sbomify.com/MAL-2025-189311/): Malicious code in sagitta-child-process-subscription-vuetify (npm) (malicious package)
- [MAL-2025-189310](https://insights.sbomify.com/MAL-2025-189310/): Malicious code in sagitta-antares-winston-dotenv (npm) (malicious package)
- [MAL-2025-18931](https://insights.sbomify.com/MAL-2025-18931/): Malicious code in dsfserewkbax (npm) (malicious package)
- [MAL-2025-189309](https://insights.sbomify.com/MAL-2025-189309/): Malicious code in sadr-technocracy-superagent-terser-webpack-plugin (npm) (malicious package)
- [MAL-2025-189308](https://insights.sbomify.com/MAL-2025-189308/): Malicious code in sadr-proxima-uninstall-native (npm) (malicious package)
- [MAL-2025-189307](https://insights.sbomify.com/MAL-2025-189307/): Malicious code in sadr-passport-mantle-meissa (npm) (malicious package)
- [MAL-2025-189306](https://insights.sbomify.com/MAL-2025-189306/): Malicious code in sadr-nodemon-cosmology-server (npm) (malicious package)
- [MAL-2025-189305](https://insights.sbomify.com/MAL-2025-189305/): Malicious code in sadr-membrane-slides-meteor (npm) (malicious package)
- [MAL-2025-189304](https://insights.sbomify.com/MAL-2025-189304/): Malicious code in sadr-janus-apex-acamar (npm) (malicious package)
- [MAL-2025-189303](https://insights.sbomify.com/MAL-2025-189303/): Malicious code in sadr-dactyl-xenon-cli (npm) (malicious package)
- [MAL-2025-189302](https://insights.sbomify.com/MAL-2025-189302/): Malicious code in sadr-cosmicsilence-paleoclimatology-despina (npm) (malicious package)
- [MAL-2025-189301](https://insights.sbomify.com/MAL-2025-189301/): Malicious code in sadr-corvus-janus-eclipse (npm) (malicious package)
- [MAL-2025-189300](https://insights.sbomify.com/MAL-2025-189300/): Malicious code in runtime-void-resolve-assert-public (npm) (malicious package)
- [MAL-2025-18930](https://insights.sbomify.com/MAL-2025-18930/): Malicious code in dsfserewkbaw (npm) (malicious package)
- [MAL-2025-1893](https://insights.sbomify.com/MAL-2025-1893/): Malicious code in meli-tools (npm) (malicious package)
- [MAL-2025-189299](https://insights.sbomify.com/MAL-2025-189299/): Malicious code in runtime-stack-awk-visualize-monitor (npm) (malicious package)
- [MAL-2025-189298](https://insights.sbomify.com/MAL-2025-189298/): Malicious code in runtime-short-fork-yaml-pipe (npm) (malicious package)
- [MAL-2025-189297](https://insights.sbomify.com/MAL-2025-189297/): Malicious code in runtime-promise-assert-async-serialize (npm) (malicious package)
- [MAL-2025-189296](https://insights.sbomify.com/MAL-2025-189296/): Malicious code in runtime-parse-user-authenticate-runtime (npm) (malicious package)
- [MAL-2025-189295](https://insights.sbomify.com/MAL-2025-189295/): Malicious code in run-script-zenith-mantle-blaze (npm) (malicious package)
- [MAL-2025-189294](https://insights.sbomify.com/MAL-2025-189294/): Malicious code in run-script-yaml-fomalhaut-eslint-config (npm) (malicious package)
- [MAL-2025-189293](https://insights.sbomify.com/MAL-2025-189293/): Malicious code in run-script-taphonomy-interstellarmedium-antimatter (npm) (malicious package)
- [MAL-2025-189292](https://insights.sbomify.com/MAL-2025-189292/): Malicious code in run-script-sagitta-pulsar-alphard (npm) (malicious package)
- [MAL-2025-189291](https://insights.sbomify.com/MAL-2025-189291/): Malicious code in run-script-koa-json-cli (npm) (malicious package)
- [MAL-2025-189290](https://insights.sbomify.com/MAL-2025-189290/): Malicious code in run-script-juno-supernova-commitlint (npm) (malicious package)
- [MAL-2025-18929](https://insights.sbomify.com/MAL-2025-18929/): Malicious code in dsfserewkbav (npm) (malicious package)
- [MAL-2025-189289](https://insights.sbomify.com/MAL-2025-189289/): Malicious code in run-script-australis-quito-repository (npm) (malicious package)
- [MAL-2025-189288](https://insights.sbomify.com/MAL-2025-189288/): Malicious code in route-proxy-alpha-export-monitor (npm) (malicious package)
- [MAL-2025-189287](https://insights.sbomify.com/MAL-2025-189287/): Malicious code in route-permission-grep-quick-debug (npm) (malicious package)
- [MAL-2025-189286](https://insights.sbomify.com/MAL-2025-189286/): Malicious code in route-easy-function-moon-warn (npm) (malicious package)
- [MAL-2025-189285](https://insights.sbomify.com/MAL-2025-189285/): Malicious code in route-compile-good-private-tree (npm) (malicious package)
- [MAL-2025-189284](https://insights.sbomify.com/MAL-2025-189284/): Malicious code in route-await-root-monitor-nu (npm) (malicious package)
- [MAL-2025-189283](https://insights.sbomify.com/MAL-2025-189283/): Malicious code in root-user-await-validate-iota (npm) (malicious package)
- [MAL-2025-189282](https://insights.sbomify.com/MAL-2025-189282/): Malicious code in root-root-iota-link-error (npm) (malicious package)
- [MAL-2025-189281](https://insights.sbomify.com/MAL-2025-189281/): Malicious code in root-resolve-wind-stub-interface (npm) (malicious package)
- [MAL-2025-189280](https://insights.sbomify.com/MAL-2025-189280/): Malicious code in root-rain-catch-sigma-float (npm) (malicious package)
- [MAL-2025-18928](https://insights.sbomify.com/MAL-2025-18928/): Malicious code in dsfserewkbau (npm) (malicious package)
- [MAL-2025-189279](https://insights.sbomify.com/MAL-2025-189279/): Malicious code in root-fire-user-hash-static (npm) (malicious package)
- [MAL-2025-189278](https://insights.sbomify.com/MAL-2025-189278/): Malicious code in root-cluster-bad-final-rho (npm) (malicious package)
- [MAL-2025-189277](https://insights.sbomify.com/MAL-2025-189277/): Malicious code in root-analyze-short-warn-byte (npm) (malicious package)
- [MAL-2025-189276](https://insights.sbomify.com/MAL-2025-189276/): Malicious code in rollup-plugin-start-galaxy-neutronstar (npm) (malicious package)
- [MAL-2025-189275](https://insights.sbomify.com/MAL-2025-189275/): Malicious code in rollup-plugin-optimize-css-assets-webpack-plugin-bootes-polaris (npm) (malicious package)
- [MAL-2025-189274](https://insights.sbomify.com/MAL-2025-189274/): Malicious code in rollup-plugin-octans-fomalhaut-dependencies (npm) (malicious package)
- [MAL-2025-189273](https://insights.sbomify.com/MAL-2025-189273/): Malicious code in rollup-plugin-loglevel-archaeoastronomy-on (npm) (malicious package)
- [MAL-2025-189272](https://insights.sbomify.com/MAL-2025-189272/): Malicious code in rollup-plugin-hugo-library-biotechnology (npm) (malicious package)
- [MAL-2025-189271](https://insights.sbomify.com/MAL-2025-189271/): Malicious code in rollup-plugin-html-webpack-plugin-cordelia-rollup (npm) (malicious package)
- [MAL-2025-189270](https://insights.sbomify.com/MAL-2025-189270/): Malicious code in rollup-plugin-firebase-geochronology-version (npm) (malicious package)
- [MAL-2025-18927](https://insights.sbomify.com/MAL-2025-18927/): Malicious code in dsfserewkbat (npm) (malicious package)
- [MAL-2025-189269](https://insights.sbomify.com/MAL-2025-189269/): Malicious code in rollup-plugin-chai-soap-terser-webpack-plugin (npm) (malicious package)
- [MAL-2025-189268](https://insights.sbomify.com/MAL-2025-189268/): Malicious code in rollup-plugin-async-astrobiology-spectron-webdriver (npm) (malicious package)
- [MAL-2025-189267](https://insights.sbomify.com/MAL-2025-189267/): Malicious code in rollup-nova-wavefunction-rimraf (npm) (malicious package)
- [MAL-2025-189266](https://insights.sbomify.com/MAL-2025-189266/): Malicious code in rollup-neptune-webdriver-manager-eslint-plugin (npm) (malicious package)
- [MAL-2025-189265](https://insights.sbomify.com/MAL-2025-189265/): Malicious code in rocket-vortex-nebula-barnard (npm) (malicious package)
- [MAL-2025-189264](https://insights.sbomify.com/MAL-2025-189264/): Malicious code in rocket-polaris-prettier-schema (npm) (malicious package)
- [MAL-2025-189263](https://insights.sbomify.com/MAL-2025-189263/): Malicious code in rocket-planetology-mira-convict (npm) (malicious package)
- [MAL-2025-189262](https://insights.sbomify.com/MAL-2025-189262/): Malicious code in rocket-package-sass-loader-avior (npm) (malicious package)
- [MAL-2025-189261](https://insights.sbomify.com/MAL-2025-189261/): Malicious code in rocket-jest-astrophysics-speleology (npm) (malicious package)
- [MAL-2025-189260](https://insights.sbomify.com/MAL-2025-189260/): Malicious code in rocket-graviton-aurora-blueshift (npm) (malicious package)
- [MAL-2025-18926](https://insights.sbomify.com/MAL-2025-18926/): Malicious code in dsfserewkbas (npm) (malicious package)
- [MAL-2025-189259](https://insights.sbomify.com/MAL-2025-189259/): Malicious code in rocket-got-heka-json (npm) (malicious package)
- [MAL-2025-189258](https://insights.sbomify.com/MAL-2025-189258/): Malicious code in rocket-fomalhaut-sirius-kronos (npm) (malicious package)
- [MAL-2025-189257](https://insights.sbomify.com/MAL-2025-189257/): Malicious code in rocket-eleventy-alphard-changelog (npm) (malicious package)
- [MAL-2025-189256](https://insights.sbomify.com/MAL-2025-189256/): Malicious code in rocket-dynamo-supervisor-winston (npm) (malicious package)
- [MAL-2025-189255](https://insights.sbomify.com/MAL-2025-189255/): Malicious code in robotics-proxima-thuban-comet (npm) (malicious package)
- [MAL-2025-189254](https://insights.sbomify.com/MAL-2025-189254/): Malicious code in robotics-polaris-antares-cluster (npm) (malicious package)
- [MAL-2025-189253](https://insights.sbomify.com/MAL-2025-189253/): Malicious code in robotics-cosmiconfig-repository-metabolomics (npm) (malicious package)
- [MAL-2025-189252](https://insights.sbomify.com/MAL-2025-189252/): Malicious code in robotics-callback-vulcan-html-webpack-plugin (npm) (malicious package)
- [MAL-2025-189251](https://insights.sbomify.com/MAL-2025-189251/): Malicious code in robotics-auriga-eclipse-parcel (npm) (malicious package)
- [MAL-2025-189250](https://insights.sbomify.com/MAL-2025-189250/): Malicious code in robotics-abiogenesis-command-react-bootstrap (npm) (malicious package)
- [MAL-2025-18925](https://insights.sbomify.com/MAL-2025-18925/): Malicious code in dsfserewkbar (npm) (malicious package)
- [MAL-2025-189249](https://insights.sbomify.com/MAL-2025-189249/): Malicious code in rimraf-webdriver-manager-impulse-dione (npm) (malicious package)
- [MAL-2025-189248](https://insights.sbomify.com/MAL-2025-189248/): Malicious code in rimraf-quantum-csv-javascript (npm) (malicious package)
- [MAL-2025-189247](https://insights.sbomify.com/MAL-2025-189247/): Malicious code in rimraf-playwright-morgan-norma (npm) (malicious package)
- [MAL-2025-189246](https://insights.sbomify.com/MAL-2025-189246/): Malicious code in rimraf-middleware-mysql-pavo (npm) (malicious package)
- [MAL-2025-189245](https://insights.sbomify.com/MAL-2025-189245/): Malicious code in rimraf-markdown-markdown-pdf-biomimicry (npm) (malicious package)
- [MAL-2025-189244](https://insights.sbomify.com/MAL-2025-189244/): Malicious code in rimraf-jupiter-carpo-phylogenetics (npm) (malicious package)
- [MAL-2025-189243](https://insights.sbomify.com/MAL-2025-189243/): Malicious code in rimraf-isostasy-algol-paleoanthropology (npm) (malicious package)
- [MAL-2025-189242](https://insights.sbomify.com/MAL-2025-189242/): Malicious code in rimraf-centauri-loop-nightwatch (npm) (malicious package)
- [MAL-2025-189241](https://insights.sbomify.com/MAL-2025-189241/): Malicious code in rimraf-betelgeuse-baryon-selenium (npm) (malicious package)
- [MAL-2025-189240](https://insights.sbomify.com/MAL-2025-189240/): Malicious code in rigel-toml-meteor-version (npm) (malicious package)
- [MAL-2025-18924](https://insights.sbomify.com/MAL-2025-18924/): Malicious code in dsfserewkbaq (npm) (malicious package)
- [MAL-2025-189239](https://insights.sbomify.com/MAL-2025-189239/): Malicious code in rigel-photon-interferometry-yaml (npm) (malicious package)
- [MAL-2025-189238](https://insights.sbomify.com/MAL-2025-189238/): Malicious code in rigel-miranda-cache-cz-conventional-changelog (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/940/