# Vulnerabilities published in 2025


- [MAL-2025-188878](https://insights.sbomify.com/MAL-2025-188878/): Malicious code in prosthetics-janus-cosmicray-spectron (npm) (malicious package)
- [MAL-2025-188877](https://insights.sbomify.com/MAL-2025-188877/): Malicious code in prosthetics-commitlint-astrobiology-io (npm) (malicious package)
- [MAL-2025-188876](https://insights.sbomify.com/MAL-2025-188876/): Malicious code in prompts-xanthus-blitz-eslint (npm) (malicious package)
- [MAL-2025-188875](https://insights.sbomify.com/MAL-2025-188875/): Malicious code in prompts-terser-webpack-plugin-enceladus-graviton (npm) (malicious package)
- [MAL-2025-188874](https://insights.sbomify.com/MAL-2025-188874/): Malicious code in prompts-spectron-firebase-frontend (npm) (malicious package)
- [MAL-2025-188873](https://insights.sbomify.com/MAL-2025-188873/): Malicious code in prompts-radiometric-passport-geoarchaeology (npm) (malicious package)
- [MAL-2025-188872](https://insights.sbomify.com/MAL-2025-188872/): Malicious code in prompts-meissa-lacerta-deneb (npm) (malicious package)
- [MAL-2025-188871](https://insights.sbomify.com/MAL-2025-188871/): Malicious code in prompts-jasmine-wolf-duplex (npm) (malicious package)
- [MAL-2025-188870](https://insights.sbomify.com/MAL-2025-188870/): Malicious code in prompts-flare-celeste-sedna (npm) (malicious package)
- [MAL-2025-18887](https://insights.sbomify.com/MAL-2025-18887/): Malicious code in dsfserewkbaad (npm) (malicious package)
- [MAL-2025-188869](https://insights.sbomify.com/MAL-2025-188869/): Malicious code in prompts-commitlint-canopus-karma (npm) (malicious package)
- [MAL-2025-188868](https://insights.sbomify.com/MAL-2025-188868/): Malicious code in prompts-capella-node-config-biomimicry (npm) (malicious package)
- [MAL-2025-188867](https://insights.sbomify.com/MAL-2025-188867/): Malicious code in promise-yonder-lint-pyxis (npm) (malicious package)
- [MAL-2025-188866](https://insights.sbomify.com/MAL-2025-188866/): Malicious code in promise-vortex-technocracy-transform (npm) (malicious package)
- [MAL-2025-188865](https://insights.sbomify.com/MAL-2025-188865/): Malicious code in promise-user-static-small-stack (npm) (malicious package)
- [MAL-2025-188864](https://insights.sbomify.com/MAL-2025-188864/): Malicious code in promise-umbra-css-loader-postcss-loader (npm) (malicious package)
- [MAL-2025-188863](https://insights.sbomify.com/MAL-2025-188863/): Malicious code in promise-selenium-bellatrix-mysql (npm) (malicious package)
- [MAL-2025-188862](https://insights.sbomify.com/MAL-2025-188862/): Malicious code in promise-meta-node-orchestrate-proxy (npm) (malicious package)
- [MAL-2025-188861](https://insights.sbomify.com/MAL-2025-188861/): Malicious code in promise-jovian-cli-nightwatch (npm) (malicious package)
- [MAL-2025-188860](https://insights.sbomify.com/MAL-2025-188860/): Malicious code in promise-interpret-cache-final-process (npm) (malicious package)
- [MAL-2025-18886](https://insights.sbomify.com/MAL-2025-18886/): Malicious code in dsfserewkbaac (npm) (malicious package)
- [MAL-2025-188859](https://insights.sbomify.com/MAL-2025-188859/): Malicious code in promise-impulse-levels-exec (npm) (malicious package)
- [MAL-2025-188858](https://insights.sbomify.com/MAL-2025-188858/): Malicious code in promise-hawkingradiation-paleoclimatology-prompts (npm) (malicious package)
- [MAL-2025-188857](https://insights.sbomify.com/MAL-2025-188857/): Malicious code in promise-dynamo-umbriel-jwt (npm) (malicious package)
- [MAL-2025-188856](https://insights.sbomify.com/MAL-2025-188856/): Malicious code in promise-dog-link-authorize-boolean (npm) (malicious package)
- [MAL-2025-188855](https://insights.sbomify.com/MAL-2025-188855/): Malicious code in promise-compile-interface-benchmark-fire (npm) (malicious package)
- [MAL-2025-188854](https://insights.sbomify.com/MAL-2025-188854/): Malicious code in promise-carina-astroinformatics-regulus (npm) (malicious package)
- [MAL-2025-188853](https://insights.sbomify.com/MAL-2025-188853/): Malicious code in promise-aurora-kastra-backend (npm) (malicious package)
- [MAL-2025-188852](https://insights.sbomify.com/MAL-2025-188852/): Malicious code in promise-algol-cosmicsilence-adonis (npm) (malicious package)
- [MAL-2025-188851](https://insights.sbomify.com/MAL-2025-188851/): Malicious code in procyon-yaml-figures-toml (npm) (malicious package)
- [MAL-2025-188850](https://insights.sbomify.com/MAL-2025-188850/): Malicious code in procyon-spectron-webdriver-nestjs-gridsome (npm) (malicious package)
- [MAL-2025-18885](https://insights.sbomify.com/MAL-2025-18885/): Malicious code in dsfserewkbaab (npm) (malicious package)
- [MAL-2025-188849](https://insights.sbomify.com/MAL-2025-188849/): Malicious code in procyon-slidev-process-webpack (npm) (malicious package)
- [MAL-2025-188848](https://insights.sbomify.com/MAL-2025-188848/): Malicious code in procyon-procyon-xml-planetology (npm) (malicious package)
- [MAL-2025-188847](https://insights.sbomify.com/MAL-2025-188847/): Malicious code in procyon-planckscale-steganography-procyon (npm) (malicious package)
- [MAL-2025-188846](https://insights.sbomify.com/MAL-2025-188846/): Malicious code in procyon-mesosphere-gemini-arcturus (npm) (malicious package)
- [MAL-2025-188845](https://insights.sbomify.com/MAL-2025-188845/): Malicious code in procyon-lacerta-wezen-geochemistry (npm) (malicious package)
- [MAL-2025-188844](https://insights.sbomify.com/MAL-2025-188844/): Malicious code in procyon-json-dynamo-neutrino (npm) (malicious package)
- [MAL-2025-188843](https://insights.sbomify.com/MAL-2025-188843/): Malicious code in procyon-futurology-concurrently-sqlite (npm) (malicious package)
- [MAL-2025-188842](https://insights.sbomify.com/MAL-2025-188842/): Malicious code in procyon-cosmos-mutation-pyxis (npm) (malicious package)
- [MAL-2025-188841](https://insights.sbomify.com/MAL-2025-188841/): Malicious code in procyon-cluster-janus-fomalhaut (npm) (malicious package)
- [MAL-2025-188840](https://insights.sbomify.com/MAL-2025-188840/): Malicious code in procyon-aurora-zenith-indus (npm) (malicious package)
- [MAL-2025-18884](https://insights.sbomify.com/MAL-2025-18884/): Malicious code in dsfserewkbaaaz (npm) (malicious package)
- [MAL-2025-188839](https://insights.sbomify.com/MAL-2025-188839/): Malicious code in procyon-andromeda-configstore-javascript (npm) (malicious package)
- [MAL-2025-188838](https://insights.sbomify.com/MAL-2025-188838/): Malicious code in process-simulate-parse-integer-wind (npm) (malicious package)
- [MAL-2025-188837](https://insights.sbomify.com/MAL-2025-188837/): Malicious code in process-passport-eslint-config-speleology (npm) (malicious package)
- [MAL-2025-188836](https://insights.sbomify.com/MAL-2025-188836/): Malicious code in process-outercore-nestjs-leda (npm) (malicious package)
- [MAL-2025-188835](https://insights.sbomify.com/MAL-2025-188835/): Malicious code in process-loopback-cosmos-leda (npm) (malicious package)
- [MAL-2025-188834](https://insights.sbomify.com/MAL-2025-188834/): Malicious code in process-loop-zenobia-optimize-css-assets-webpack-plugin (npm) (malicious package)
- [MAL-2025-188833](https://insights.sbomify.com/MAL-2025-188833/): Malicious code in process-float-sanitize-module-import (npm) (malicious package)
- [MAL-2025-188832](https://insights.sbomify.com/MAL-2025-188832/): Malicious code in process-daemon-pipe-try-bundle (npm) (malicious package)
- [MAL-2025-188831](https://insights.sbomify.com/MAL-2025-188831/): Malicious code in process-callisto-superagent-quark (npm) (malicious package)
- [MAL-2025-188830](https://insights.sbomify.com/MAL-2025-188830/): Malicious code in private-toml-nightwatch-rigel (npm) (malicious package)
- [MAL-2025-18883](https://insights.sbomify.com/MAL-2025-18883/): Malicious code in dsfserewkbaaay (npm) (malicious package)
- [MAL-2025-188829](https://insights.sbomify.com/MAL-2025-188829/): Malicious code in private-sadr-proxima-private (npm) (malicious package)
- [MAL-2025-188828](https://insights.sbomify.com/MAL-2025-188828/): Malicious code in private-husky-mensa-package (npm) (malicious package)
- [MAL-2025-188827](https://insights.sbomify.com/MAL-2025-188827/): Malicious code in private-enum-compress-upsilon-omega (npm) (malicious package)
- [MAL-2025-188826](https://insights.sbomify.com/MAL-2025-188826/): Malicious code in private-easy-string-decrypt-meta (npm) (malicious package)
- [MAL-2025-188825](https://insights.sbomify.com/MAL-2025-188825/): Malicious code in private-dorado-grunt-jupiter (npm) (malicious package)
- [MAL-2025-188824](https://insights.sbomify.com/MAL-2025-188824/): Malicious code in private-cluster-draco-mysql (npm) (malicious package)
- [MAL-2025-188823](https://insights.sbomify.com/MAL-2025-188823/): Malicious code in private-centauri-miranda-areology (npm) (malicious package)
- [MAL-2025-188822](https://insights.sbomify.com/MAL-2025-188822/): Malicious code in private-abstract-optimize-view-rain (npm) (malicious package)
- [MAL-2025-188821](https://insights.sbomify.com/MAL-2025-188821/): Malicious code in primatology-technosignature-magnetosphere-parcel (npm) (malicious package)
- [MAL-2025-188820](https://insights.sbomify.com/MAL-2025-188820/): Malicious code in primatology-paleoecology-archaeoastronomy-chariklo (npm) (malicious package)
- [MAL-2025-18882](https://insights.sbomify.com/MAL-2025-18882/): Malicious code in dsfserewkbaaax (npm) (malicious package)
- [MAL-2025-188819](https://insights.sbomify.com/MAL-2025-188819/): Malicious code in primatology-paleoceanography-mineralogy-wolf (npm) (malicious package)
- [MAL-2025-188818](https://insights.sbomify.com/MAL-2025-188818/): Malicious code in primatology-middleware-planckscale-install (npm) (malicious package)
- [MAL-2025-188817](https://insights.sbomify.com/MAL-2025-188817/): Malicious code in primatology-impulse-decoherence-standard (npm) (malicious package)
- [MAL-2025-188816](https://insights.sbomify.com/MAL-2025-188816/): Malicious code in primatology-chromedriver-vortex-nebula (npm) (malicious package)
- [MAL-2025-188815](https://insights.sbomify.com/MAL-2025-188815/): Malicious code in primatology-callback-dactyl-telesto (npm) (malicious package)
- [MAL-2025-188814](https://insights.sbomify.com/MAL-2025-188814/): Malicious code in primatology-algol-postgres-unuk (npm) (malicious package)
- [MAL-2025-188813](https://insights.sbomify.com/MAL-2025-188813/): Malicious code in prettier-stylelint-zenobia-loop-paleomagnetism (npm) (malicious package)
- [MAL-2025-188812](https://insights.sbomify.com/MAL-2025-188812/): Malicious code in prettier-stylelint-soap-acamar-build (npm) (malicious package)
- [MAL-2025-188811](https://insights.sbomify.com/MAL-2025-188811/): Malicious code in prettier-stylelint-got-cosmos-ariel (npm) (malicious package)
- [MAL-2025-188810](https://insights.sbomify.com/MAL-2025-188810/): Malicious code in prettier-stylelint-astrobiology-loopback-sirius (npm) (malicious package)
- [MAL-2025-18881](https://insights.sbomify.com/MAL-2025-18881/): Malicious code in dsfserewkbaaaw (npm) (malicious package)
- [MAL-2025-188809](https://insights.sbomify.com/MAL-2025-188809/): Malicious code in prettier-registry-forever-prettier-plugin-markdown (npm) (malicious package)
- [MAL-2025-188808](https://insights.sbomify.com/MAL-2025-188808/): Malicious code in prettier-plugin-markdown-tool-sociobiology-css-minimizer-webpack-plugin (npm) (malicious package)
- [MAL-2025-188807](https://insights.sbomify.com/MAL-2025-188807/): Malicious code in prettier-plugin-markdown-toml-reveal-md-event (npm) (malicious package)
- [MAL-2025-188806](https://insights.sbomify.com/MAL-2025-188806/): Malicious code in prettier-plugin-markdown-mantle-hermes-geodynamo (npm) (malicious package)
- [MAL-2025-188805](https://insights.sbomify.com/MAL-2025-188805/): Malicious code in prettier-plugin-markdown-lint-jest-scripts (npm) (malicious package)
- [MAL-2025-188804](https://insights.sbomify.com/MAL-2025-188804/): Malicious code in prettier-plugin-markdown-json-joviology-filament (npm) (malicious package)
- [MAL-2025-188803](https://insights.sbomify.com/MAL-2025-188803/): Malicious code in prettier-plugin-markdown-joviology-style-loader-zooarchaeology (npm) (malicious package)
- [MAL-2025-188802](https://insights.sbomify.com/MAL-2025-188802/): Malicious code in prettier-plugin-markdown-exoplanet-saturnology-frontend (npm) (malicious package)
- [MAL-2025-188801](https://insights.sbomify.com/MAL-2025-188801/): Malicious code in prettier-plugin-markdown-aquarius-colors-antares (npm) (malicious package)
- [MAL-2025-188800](https://insights.sbomify.com/MAL-2025-188800/): Malicious code in prettier-pegasus-version-sirius (npm) (malicious package)
- [MAL-2025-18880](https://insights.sbomify.com/MAL-2025-18880/): Malicious code in dsfserewkbaaat (npm) (malicious package)
- [MAL-2025-1888](https://insights.sbomify.com/MAL-2025-1888/): Malicious code in meli-parser (npm) (malicious package)
- [MAL-2025-188799](https://insights.sbomify.com/MAL-2025-188799/): Malicious code in prettier-oberon-unuk-semantic-ui (npm) (malicious package)
- [MAL-2025-188798](https://insights.sbomify.com/MAL-2025-188798/): Malicious code in prettier-meteor-mineralogy-vuepress (npm) (malicious package)
- [MAL-2025-188797](https://insights.sbomify.com/MAL-2025-188797/): Malicious code in prettier-luna-mysql-stratosphere (npm) (malicious package)
- [MAL-2025-188796](https://insights.sbomify.com/MAL-2025-188796/): Malicious code in prettier-json-publish-quito (npm) (malicious package)
- [MAL-2025-188795](https://insights.sbomify.com/MAL-2025-188795/): Malicious code in prettier-despina-gacrux-shelljs (npm) (malicious package)
- [MAL-2025-188794](https://insights.sbomify.com/MAL-2025-188794/): Malicious code in prettier-cordelia-npm-toml (npm) (malicious package)
- [MAL-2025-188793](https://insights.sbomify.com/MAL-2025-188793/): Malicious code in postgres-soap-apex-vortex (npm) (malicious package)
- [MAL-2025-188792](https://insights.sbomify.com/MAL-2025-188792/): Malicious code in postgres-proteomics-markdown-abiogenesis (npm) (malicious package)
- [MAL-2025-188791](https://insights.sbomify.com/MAL-2025-188791/): Malicious code in postgres-promise-transform-farout (npm) (malicious package)
- [MAL-2025-188790](https://insights.sbomify.com/MAL-2025-188790/): Malicious code in postgres-procyon-nextjs-nuxtjs (npm) (malicious package)
- [MAL-2025-18879](https://insights.sbomify.com/MAL-2025-18879/): Malicious code in dsfserewkbaaas (npm) (malicious package)
- [MAL-2025-188789](https://insights.sbomify.com/MAL-2025-188789/): Malicious code in postgres-on-sqlite-archaeogenetics (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/945/