# Vulnerabilities published in 2025


- [MAL-2025-188788](https://insights.sbomify.com/MAL-2025-188788/): Malicious code in postgres-buffer-prettier-stylelint-lithosphere (npm) (malicious package)
- [MAL-2025-188787](https://insights.sbomify.com/MAL-2025-188787/): Malicious code in postgres-asteroid-readable-dione (npm) (malicious package)
- [MAL-2025-188786](https://insights.sbomify.com/MAL-2025-188786/): Malicious code in postcss-proxima-eris-restart (npm) (malicious package)
- [MAL-2025-188785](https://insights.sbomify.com/MAL-2025-188785/): Malicious code in postcss-mongodb-astrometry-eslint-config (npm) (malicious package)
- [MAL-2025-188784](https://insights.sbomify.com/MAL-2025-188784/): Malicious code in postcss-loader-regulus-whitedwarf-paleoanthropology (npm) (malicious package)
- [MAL-2025-188783](https://insights.sbomify.com/MAL-2025-188783/): Malicious code in postcss-loader-prosthetics-loopback-javascript (npm) (malicious package)
- [MAL-2025-188782](https://insights.sbomify.com/MAL-2025-188782/): Malicious code in postcss-loader-oscillation-supervisor-stratigraphy (npm) (malicious package)
- [MAL-2025-188781](https://insights.sbomify.com/MAL-2025-188781/): Malicious code in postcss-loader-install-thuban-pipe (npm) (malicious package)
- [MAL-2025-188780](https://insights.sbomify.com/MAL-2025-188780/): Malicious code in postcss-loader-hapi-publish-event (npm) (malicious package)
- [MAL-2025-18878](https://insights.sbomify.com/MAL-2025-18878/): Malicious code in dsfserewkbaaar (npm) (malicious package)
- [MAL-2025-188779](https://insights.sbomify.com/MAL-2025-188779/): Malicious code in postcss-loader-ganymede-metalsmith-farout (npm) (malicious package)
- [MAL-2025-188778](https://insights.sbomify.com/MAL-2025-188778/): Malicious code in postcss-loader-bootes-dotenv-parse-variables-csv (npm) (malicious package)
- [MAL-2025-188777](https://insights.sbomify.com/MAL-2025-188777/): Malicious code in postcss-html-webpack-plugin-enif-ultra (npm) (malicious package)
- [MAL-2025-188776](https://insights.sbomify.com/MAL-2025-188776/): Malicious code in postcss-gammarayburst-whitedwarf-archaeoastronomy (npm) (malicious package)
- [MAL-2025-188775](https://insights.sbomify.com/MAL-2025-188775/): Malicious code in postcss-development-cosmogenic-mongodb (npm) (malicious package)
- [MAL-2025-188774](https://insights.sbomify.com/MAL-2025-188774/): Malicious code in postcss-babel-centauri-orbit (npm) (malicious package)
- [MAL-2025-188773](https://insights.sbomify.com/MAL-2025-188773/): Malicious code in postcss-ablation-hercules-darkmatter (npm) (malicious package)
- [MAL-2025-188772](https://insights.sbomify.com/MAL-2025-188772/): Malicious code in polaris-winston-cryonics-palynology (npm) (malicious package)
- [MAL-2025-188771](https://insights.sbomify.com/MAL-2025-188771/): Malicious code in polaris-wasat-grunt-puppeteer (npm) (malicious package)
- [MAL-2025-188770](https://insights.sbomify.com/MAL-2025-188770/): Malicious code in polaris-typeorm-carina-solarnebula (npm) (malicious package)
- [MAL-2025-18877](https://insights.sbomify.com/MAL-2025-18877/): Malicious code in dsfserewkbaaaq (npm) (malicious package)
- [MAL-2025-188769](https://insights.sbomify.com/MAL-2025-188769/): Malicious code in polaris-stop-sails-antares (npm) (malicious package)
- [MAL-2025-188768](https://insights.sbomify.com/MAL-2025-188768/): Malicious code in polaris-solarnebula-equinox-heka (npm) (malicious package)
- [MAL-2025-188767](https://insights.sbomify.com/MAL-2025-188767/): Malicious code in polaris-publish-vortex-jekyll (npm) (malicious package)
- [MAL-2025-188766](https://insights.sbomify.com/MAL-2025-188766/): Malicious code in polaris-playwright-optimize-css-assets-webpack-plugin-hexo (npm) (malicious package)
- [MAL-2025-188765](https://insights.sbomify.com/MAL-2025-188765/): Malicious code in polaris-parcel-ora-quasar (npm) (malicious package)
- [MAL-2025-188764](https://insights.sbomify.com/MAL-2025-188764/): Malicious code in polaris-octans-bootstrap-bootstrap (npm) (malicious package)
- [MAL-2025-188763](https://insights.sbomify.com/MAL-2025-188763/): Malicious code in polaris-juno-taphonomy-membrane (npm) (malicious package)
- [MAL-2025-188762](https://insights.sbomify.com/MAL-2025-188762/): Malicious code in polaris-interferometry-sails-convict (npm) (malicious package)
- [MAL-2025-188761](https://insights.sbomify.com/MAL-2025-188761/): Malicious code in polaris-build-event-dotenv-parse-variables (npm) (malicious package)
- [MAL-2025-188760](https://insights.sbomify.com/MAL-2025-188760/): Malicious code in polaris-backend-rollup-asthenosphere (npm) (malicious package)
- [MAL-2025-18876](https://insights.sbomify.com/MAL-2025-18876/): Malicious code in dsfserewkbaaap (npm) (malicious package)
- [MAL-2025-188759](https://insights.sbomify.com/MAL-2025-188759/): Malicious code in polaris-asteroid-oscillation-australis (npm) (malicious package)
- [MAL-2025-188758](https://insights.sbomify.com/MAL-2025-188758/): Malicious code in pm2-gridsome-playwright-init (npm) (malicious package)
- [MAL-2025-188757](https://insights.sbomify.com/MAL-2025-188757/): Malicious code in pm2-dorado-lithosphere-gravitationalwave (npm) (malicious package)
- [MAL-2025-188756](https://insights.sbomify.com/MAL-2025-188756/): Malicious code in pm2-development-postcss-callback (npm) (malicious package)
- [MAL-2025-188755](https://insights.sbomify.com/MAL-2025-188755/): Malicious code in plutology-sass-loader-mongoose-extremophile (npm) (malicious package)
- [MAL-2025-188754](https://insights.sbomify.com/MAL-2025-188754/): Malicious code in plutology-release-it-despina-arcturus (npm) (malicious package)
- [MAL-2025-188753](https://insights.sbomify.com/MAL-2025-188753/): Malicious code in plutology-meteor-xerxes-readable (npm) (malicious package)
- [MAL-2025-188752](https://insights.sbomify.com/MAL-2025-188752/): Malicious code in plutology-fusion-interstellarmedium-miranda (npm) (malicious package)
- [MAL-2025-188751](https://insights.sbomify.com/MAL-2025-188751/): Malicious code in plutology-cosmicray-fornax-babel (npm) (malicious package)
- [MAL-2025-188750](https://insights.sbomify.com/MAL-2025-188750/): Malicious code in plutology-async-firebase-run-script (npm) (malicious package)
- [MAL-2025-18875](https://insights.sbomify.com/MAL-2025-18875/): Malicious code in dsfserewkbaaao (npm) (malicious package)
- [MAL-2025-188749](https://insights.sbomify.com/MAL-2025-188749/): Malicious code in plutology-ariel-subscription-meissa (npm) (malicious package)
- [MAL-2025-188748](https://insights.sbomify.com/MAL-2025-188748/): Malicious code in plutology-alphard-achernar-antd (npm) (malicious package)
- [MAL-2025-188747](https://insights.sbomify.com/MAL-2025-188747/): Malicious code in playwright-wormhole-phylogenetics-inflation (npm) (malicious package)
- [MAL-2025-188746](https://insights.sbomify.com/MAL-2025-188746/): Malicious code in playwright-sqlite-neptunology-quasar (npm) (malicious package)
- [MAL-2025-188745](https://insights.sbomify.com/MAL-2025-188745/): Malicious code in playwright-rimraf-version-coronalmassejection (npm) (malicious package)
- [MAL-2025-188744](https://insights.sbomify.com/MAL-2025-188744/): Malicious code in playwright-quasar-tachyon-thuban (npm) (malicious package)
- [MAL-2025-188743](https://insights.sbomify.com/MAL-2025-188743/): Malicious code in playwright-phylogenetics-eigenstate-hexo (npm) (malicious package)
- [MAL-2025-188742](https://insights.sbomify.com/MAL-2025-188742/): Malicious code in playwright-dotenv-parse-variables-parcel-less (npm) (malicious package)
- [MAL-2025-188741](https://insights.sbomify.com/MAL-2025-188741/): Malicious code in playwright-asthenosphere-norma-cassini (npm) (malicious package)
- [MAL-2025-188740](https://insights.sbomify.com/MAL-2025-188740/): Malicious code in planetology-virgo-archaeometry-envconfig (npm) (malicious package)
- [MAL-2025-18874](https://insights.sbomify.com/MAL-2025-18874/): Malicious code in dsfserewkbaaan (npm) (malicious package)
- [MAL-2025-188739](https://insights.sbomify.com/MAL-2025-188739/): Malicious code in planetology-stratosphere-library-csrf (npm) (malicious package)
- [MAL-2025-188738](https://insights.sbomify.com/MAL-2025-188738/): Malicious code in planetology-sociobiology-spawn-deimos (npm) (malicious package)
- [MAL-2025-188737](https://insights.sbomify.com/MAL-2025-188737/): Malicious code in planetology-phenomic-accretion-galaxy (npm) (malicious package)
- [MAL-2025-188736](https://insights.sbomify.com/MAL-2025-188736/): Malicious code in planetology-neptune-bellatrix-on (npm) (malicious package)
- [MAL-2025-188735](https://insights.sbomify.com/MAL-2025-188735/): Malicious code in planetology-deneb-betelgeuse-ini (npm) (malicious package)
- [MAL-2025-188734](https://insights.sbomify.com/MAL-2025-188734/): Malicious code in planetology-borealis-nashira-celeste (npm) (malicious package)
- [MAL-2025-188733](https://insights.sbomify.com/MAL-2025-188733/): Malicious code in planetology-biogeochemistry-areology-equinox (npm) (malicious package)
- [MAL-2025-188732](https://insights.sbomify.com/MAL-2025-188732/): Malicious code in planckscale-webpack-json-neptunology (npm) (malicious package)
- [MAL-2025-188731](https://insights.sbomify.com/MAL-2025-188731/): Malicious code in planckscale-ora-envconfig-antares (npm) (malicious package)
- [MAL-2025-188730](https://insights.sbomify.com/MAL-2025-188730/): Malicious code in planckscale-lynx-global-transform (npm) (malicious package)
- [MAL-2025-18873](https://insights.sbomify.com/MAL-2025-18873/): Malicious code in dsfserewkbaaam (npm) (malicious package)
- [MAL-2025-188729](https://insights.sbomify.com/MAL-2025-188729/): Malicious code in planckscale-augmentedreality-relay-planckscale (npm) (malicious package)
- [MAL-2025-188728](https://insights.sbomify.com/MAL-2025-188728/): Malicious code in pipe-wavefunction-test-redis (npm) (malicious package)
- [MAL-2025-188727](https://insights.sbomify.com/MAL-2025-188727/): Malicious code in pipe-virgo-perseus-auth (npm) (malicious package)
- [MAL-2025-188726](https://insights.sbomify.com/MAL-2025-188726/): Malicious code in pipe-simple-virtualize-void-stack (npm) (malicious package)
- [MAL-2025-188725](https://insights.sbomify.com/MAL-2025-188725/): Malicious code in pipe-resolve-signal-uglify-eta (npm) (malicious package)
- [MAL-2025-188724](https://insights.sbomify.com/MAL-2025-188724/): Malicious code in pipe-pino-pretty-toml-meteor (npm) (malicious package)
- [MAL-2025-188723](https://insights.sbomify.com/MAL-2025-188723/): Malicious code in pipe-parallax-build-kinetic (npm) (malicious package)
- [MAL-2025-188722](https://insights.sbomify.com/MAL-2025-188722/): Malicious code in pipe-orogeny-await-kaus (npm) (malicious package)
- [MAL-2025-188721](https://insights.sbomify.com/MAL-2025-188721/): Malicious code in pipe-oortcloud-void-volcanology (npm) (malicious package)
- [MAL-2025-188720](https://insights.sbomify.com/MAL-2025-188720/): Malicious code in pipe-grid-byte-old-array (npm) (malicious package)
- [MAL-2025-18872](https://insights.sbomify.com/MAL-2025-18872/): Malicious code in dsfserewkbaaal (npm) (malicious package)
- [MAL-2025-188719](https://insights.sbomify.com/MAL-2025-188719/): Malicious code in pipe-got-filament-xenon (npm) (malicious package)
- [MAL-2025-188718](https://insights.sbomify.com/MAL-2025-188718/): Malicious code in pipe-final-tree-emulate-byte (npm) (malicious package)
- [MAL-2025-188717](https://insights.sbomify.com/MAL-2025-188717/): Malicious code in pipe-cz-conventional-changelog-meissa-canopus (npm) (malicious package)
- [MAL-2025-188716](https://insights.sbomify.com/MAL-2025-188716/): Malicious code in pipe-cloud-try-assert-grid (npm) (malicious package)
- [MAL-2025-188715](https://insights.sbomify.com/MAL-2025-188715/): Malicious code in pipe-byte-spy-fork-notify (npm) (malicious package)
- [MAL-2025-188714](https://insights.sbomify.com/MAL-2025-188714/): Malicious code in pipe-auth0-barnard-tool (npm) (malicious package)
- [MAL-2025-188713](https://insights.sbomify.com/MAL-2025-188713/): Malicious code in pipe-astrophysics-astroinformatics-callisto (npm) (malicious package)
- [MAL-2025-188712](https://insights.sbomify.com/MAL-2025-188712/): Malicious code in pino-virtualreality-cluster-tool (npm) (malicious package)
- [MAL-2025-188711](https://insights.sbomify.com/MAL-2025-188711/): Malicious code in pino-remark-string-nestjs (npm) (malicious package)
- [MAL-2025-188710](https://insights.sbomify.com/MAL-2025-188710/): Malicious code in pino-pretty-yildun-express-graphql (npm) (malicious package)
- [MAL-2025-18871](https://insights.sbomify.com/MAL-2025-18871/): Malicious code in dsfserewkbaaak (npm) (malicious package)
- [MAL-2025-188709](https://insights.sbomify.com/MAL-2025-188709/): Malicious code in pino-pretty-technosignature-biomimicry-wezen (npm) (malicious package)
- [MAL-2025-188708](https://insights.sbomify.com/MAL-2025-188708/): Malicious code in pino-pretty-radiant-less-loader-galaxy (npm) (malicious package)
- [MAL-2025-188707](https://insights.sbomify.com/MAL-2025-188707/): Malicious code in pino-pretty-prettier-sequelize-figures (npm) (malicious package)
- [MAL-2025-188706](https://insights.sbomify.com/MAL-2025-188706/): Malicious code in pino-pretty-phenomic-quasar-meteor (npm) (malicious package)
- [MAL-2025-188705](https://insights.sbomify.com/MAL-2025-188705/): Malicious code in pino-pretty-kuiperbelt-vulcan-hugo (npm) (malicious package)
- [MAL-2025-188704](https://insights.sbomify.com/MAL-2025-188704/): Malicious code in pino-pretty-exosphere-cosmology-rate-limiter (npm) (malicious package)
- [MAL-2025-188703](https://insights.sbomify.com/MAL-2025-188703/): Malicious code in pino-pretty-electron-palynology-bootes (npm) (malicious package)
- [MAL-2025-188702](https://insights.sbomify.com/MAL-2025-188702/): Malicious code in pino-pretty-ariel-ursa-query (npm) (malicious package)
- [MAL-2025-188701](https://insights.sbomify.com/MAL-2025-188701/): Malicious code in pino-loopback-private-phenomic (npm) (malicious package)
- [MAL-2025-188700](https://insights.sbomify.com/MAL-2025-188700/): Malicious code in pino-cygnus-eris-odin (npm) (malicious package)
- [MAL-2025-18870](https://insights.sbomify.com/MAL-2025-18870/): Malicious code in dsfserewkbaaaj (npm) (malicious package)
- [MAL-2025-1887](https://insights.sbomify.com/MAL-2025-1887/): Malicious code in meli-oauth (npm) (malicious package)
- [MAL-2025-188699](https://insights.sbomify.com/MAL-2025-188699/): Malicious code in pino-avior-nightwatch-betelgeuse (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/946/