# Vulnerabilities published in 2025


- [MAL-2025-188517](https://insights.sbomify.com/MAL-2025-188517/): Malicious code in paleoclimatology-sagitta-hydra-geochronology (npm) (malicious package)
- [MAL-2025-188516](https://insights.sbomify.com/MAL-2025-188516/): Malicious code in paleoclimatology-paleoanthropology-supercluster-proxima (npm) (malicious package)
- [MAL-2025-188515](https://insights.sbomify.com/MAL-2025-188515/): Malicious code in paleoclimatology-outercore-neptune-nightmare (npm) (malicious package)
- [MAL-2025-188514](https://insights.sbomify.com/MAL-2025-188514/): Malicious code in paleoclimatology-nova-rollup-vortex (npm) (malicious package)
- [MAL-2025-188513](https://insights.sbomify.com/MAL-2025-188513/): Malicious code in paleoclimatology-node-sass-asteroid-pulsar (npm) (malicious package)
- [MAL-2025-188512](https://insights.sbomify.com/MAL-2025-188512/): Malicious code in paleoclimatology-jsonp-troposphere-nodejs (npm) (malicious package)
- [MAL-2025-188511](https://insights.sbomify.com/MAL-2025-188511/): Malicious code in paleoclimatology-izar-coronalmassejection-webdriver-mocha (npm) (malicious package)
- [MAL-2025-188510](https://insights.sbomify.com/MAL-2025-188510/): Malicious code in paleoclimatology-hydra-schema-genomics (npm) (malicious package)
- [MAL-2025-18851](https://insights.sbomify.com/MAL-2025-18851/): Malicious code in dsfdsfa (npm) (malicious package)
- [MAL-2025-188509](https://insights.sbomify.com/MAL-2025-188509/): Malicious code in paleoclimatology-framework-mensa-spectron (npm) (malicious package)
- [MAL-2025-188508](https://insights.sbomify.com/MAL-2025-188508/): Malicious code in paleoclimatology-eventhoriz-areology-higgs (npm) (malicious package)
- [MAL-2025-188507](https://insights.sbomify.com/MAL-2025-188507/): Malicious code in paleoclimatology-draco-backend-triton (npm) (malicious package)
- [MAL-2025-188506](https://insights.sbomify.com/MAL-2025-188506/): Malicious code in paleoclimatology-cosmogenic-crust-kardashevscale (npm) (malicious package)
- [MAL-2025-188505](https://insights.sbomify.com/MAL-2025-188505/): Malicious code in paleoceanography-shelljs-umbriel-galaxy (npm) (malicious package)
- [MAL-2025-188504](https://insights.sbomify.com/MAL-2025-188504/): Malicious code in paleoceanography-sedna-axios-apollo (npm) (malicious package)
- [MAL-2025-188503](https://insights.sbomify.com/MAL-2025-188503/): Malicious code in paleobotany-warp-less-uranology (npm) (malicious package)
- [MAL-2025-188502](https://insights.sbomify.com/MAL-2025-188502/): Malicious code in paleobotany-perseus-draco-mensa (npm) (malicious package)
- [MAL-2025-188501](https://insights.sbomify.com/MAL-2025-188501/): Malicious code in paleobotany-nightwatch-epimetheus-spectroscopy (npm) (malicious package)
- [MAL-2025-188500](https://insights.sbomify.com/MAL-2025-188500/): Malicious code in paleobotany-janus-writable-cosmicweb (npm) (malicious package)
- [MAL-2025-18850](https://insights.sbomify.com/MAL-2025-18850/): Malicious code in dsdsadsafadadfsfad (npm) (malicious package)
- [MAL-2025-1885](https://insights.sbomify.com/MAL-2025-1885/): Malicious code in mapbox-demo-components (npm) (malicious package)
- [MAL-2025-188499](https://insights.sbomify.com/MAL-2025-188499/): Malicious code in paleobotany-commitlint-config-angular-ultra-nebula (npm) (malicious package)
- [MAL-2025-188498](https://insights.sbomify.com/MAL-2025-188498/): Malicious code in paleobotany-callback-magnetosphere-bellatrix (npm) (malicious package)
- [MAL-2025-188497](https://insights.sbomify.com/MAL-2025-188497/): Malicious code in paleoanthropology-helios-auth-panspermia (npm) (malicious package)
- [MAL-2025-188496](https://insights.sbomify.com/MAL-2025-188496/): Malicious code in package-zenobia-elektra-geodynamo (npm) (malicious package)
- [MAL-2025-188495](https://insights.sbomify.com/MAL-2025-188495/): Malicious code in package-uninstall-scorpius-react-bootstrap (npm) (malicious package)
- [MAL-2025-188494](https://insights.sbomify.com/MAL-2025-188494/): Malicious code in package-pyxis-cressida-kastra (npm) (malicious package)
- [MAL-2025-188493](https://insights.sbomify.com/MAL-2025-188493/): Malicious code in package-process-helios-markdown-pdf (npm) (malicious package)
- [MAL-2025-188492](https://insights.sbomify.com/MAL-2025-188492/): Malicious code in package-nconf-antares-quasar (npm) (malicious package)
- [MAL-2025-188491](https://insights.sbomify.com/MAL-2025-188491/): Malicious code in package-eventhoriz-gammarayburst-parsec (npm) (malicious package)
- [MAL-2025-188490](https://insights.sbomify.com/MAL-2025-188490/): Malicious code in package-changelog-css-loader-slidev (npm) (malicious package)
- [MAL-2025-18849](https://insights.sbomify.com/MAL-2025-18849/): Malicious code in dscieoxtkrguqjpf (npm) (malicious package)
- [MAL-2025-188489](https://insights.sbomify.com/MAL-2025-188489/): Malicious code in outercore-sync-fornax-lightyear (npm) (malicious package)
- [MAL-2025-188488](https://insights.sbomify.com/MAL-2025-188488/): Malicious code in outercore-quasarjet-ora-saturnology (npm) (malicious package)
- [MAL-2025-188487](https://insights.sbomify.com/MAL-2025-188487/): Malicious code in outercore-cli-concurrently-troposphere (npm) (malicious package)
- [MAL-2025-188486](https://insights.sbomify.com/MAL-2025-188486/): Malicious code in oscillation-readable-supernova-karma (npm) (malicious package)
- [MAL-2025-188485](https://insights.sbomify.com/MAL-2025-188485/): Malicious code in oscillation-oscillation-accretion-comet (npm) (malicious package)
- [MAL-2025-188484](https://insights.sbomify.com/MAL-2025-188484/): Malicious code in oscillation-leda-warp-framework (npm) (malicious package)
- [MAL-2025-188483](https://insights.sbomify.com/MAL-2025-188483/): Malicious code in oscillation-grunt-magellan-dorado (npm) (malicious package)
- [MAL-2025-188482](https://insights.sbomify.com/MAL-2025-188482/): Malicious code in oscillation-aquarius-ursa-parallax (npm) (malicious package)
- [MAL-2025-188481](https://insights.sbomify.com/MAL-2025-188481/): Malicious code in orogeny-rollup-heka-miranda (npm) (malicious package)
- [MAL-2025-188480](https://insights.sbomify.com/MAL-2025-188480/): Malicious code in orogeny-quark-archaeoastronomy-auth (npm) (malicious package)
- [MAL-2025-18848](https://insights.sbomify.com/MAL-2025-18848/): Malicious code in ds334 (npm) (malicious package)
- [MAL-2025-188479](https://insights.sbomify.com/MAL-2025-188479/): Malicious code in orogeny-karma-babel-sequelize (npm) (malicious package)
- [MAL-2025-188478](https://insights.sbomify.com/MAL-2025-188478/): Malicious code in orogeny-fork-query-troposphere (npm) (malicious package)
- [MAL-2025-188477](https://insights.sbomify.com/MAL-2025-188477/): Malicious code in orogeny-fermion-mui-jovian (npm) (malicious package)
- [MAL-2025-188476](https://insights.sbomify.com/MAL-2025-188476/): Malicious code in orogeny-algol-kastra-xo (npm) (malicious package)
- [MAL-2025-188475](https://insights.sbomify.com/MAL-2025-188475/): Malicious code in orchestrate-web-simulate-float-abstract (npm) (malicious package)
- [MAL-2025-188474](https://insights.sbomify.com/MAL-2025-188474/): Malicious code in orchestrate-process-cache-data-async (npm) (malicious package)
- [MAL-2025-188473](https://insights.sbomify.com/MAL-2025-188473/): Malicious code in orchestrate-grid-dog-air-route (npm) (malicious package)
- [MAL-2025-188472](https://insights.sbomify.com/MAL-2025-188472/): Malicious code in orchestrate-benchmark-spy-air-cat (npm) (malicious package)
- [MAL-2025-188471](https://insights.sbomify.com/MAL-2025-188471/): Malicious code in orchestrate-awk-encrypt-moon-fork (npm) (malicious package)
- [MAL-2025-188470](https://insights.sbomify.com/MAL-2025-188470/): Malicious code in orbit-zenith-magellan-antares (npm) (malicious package)
- [MAL-2025-18847](https://insights.sbomify.com/MAL-2025-18847/): Malicious code in ds22b3 (npm) (malicious package)
- [MAL-2025-188469](https://insights.sbomify.com/MAL-2025-188469/): Malicious code in orbit-typeorm-nucleosynthesis-tectonic (npm) (malicious package)
- [MAL-2025-188468](https://insights.sbomify.com/MAL-2025-188468/): Malicious code in orbit-publish-dynamo-helmet (npm) (malicious package)
- [MAL-2025-188467](https://insights.sbomify.com/MAL-2025-188467/): Malicious code in orbit-luna-indus-xanthus (npm) (malicious package)
- [MAL-2025-188466](https://insights.sbomify.com/MAL-2025-188466/): Malicious code in orbit-library-blueshift-vortex (npm) (malicious package)
- [MAL-2025-188465](https://insights.sbomify.com/MAL-2025-188465/): Malicious code in orbit-html-webpack-plugin-xml-docusaurus (npm) (malicious package)
- [MAL-2025-188464](https://insights.sbomify.com/MAL-2025-188464/): Malicious code in orbit-css-minimizer-webpack-plugin-paleontology-centaurus (npm) (malicious package)
- [MAL-2025-188463](https://insights.sbomify.com/MAL-2025-188463/): Malicious code in orbit-cosmicweb-meteor-wolf (npm) (malicious package)
- [MAL-2025-188462](https://insights.sbomify.com/MAL-2025-188462/): Malicious code in ora-release-it-ichnology-subscription (npm) (malicious package)
- [MAL-2025-188461](https://insights.sbomify.com/MAL-2025-188461/): Malicious code in ora-process-config-public (npm) (malicious package)
- [MAL-2025-188460](https://insights.sbomify.com/MAL-2025-188460/): Malicious code in ora-polaris-uranology-planckscale (npm) (malicious package)
- [MAL-2025-18846](https://insights.sbomify.com/MAL-2025-18846/): Malicious code in drystal (npm) (malicious package)
- [MAL-2025-188459](https://insights.sbomify.com/MAL-2025-188459/): Malicious code in optimize-uglify-cluster-string-refactor (npm) (malicious package)
- [MAL-2025-188458](https://insights.sbomify.com/MAL-2025-188458/): Malicious code in optimize-theta-process-cluster-dog (npm) (malicious package)
- [MAL-2025-188457](https://insights.sbomify.com/MAL-2025-188457/): Malicious code in optimize-report-pi-module-hash (npm) (malicious package)
- [MAL-2025-188456](https://insights.sbomify.com/MAL-2025-188456/): Malicious code in optimize-proxy-alpha-cache-decompress (npm) (malicious package)
- [MAL-2025-188455](https://insights.sbomify.com/MAL-2025-188455/): Malicious code in optimize-pipe-signal-dog-index (npm) (malicious package)
- [MAL-2025-188454](https://insights.sbomify.com/MAL-2025-188454/): Malicious code in optimize-double-nu-cluster-function (npm) (malicious package)
- [MAL-2025-188453](https://insights.sbomify.com/MAL-2025-188453/): Malicious code in optimize-daemon-scale-char-test (npm) (malicious package)
- [MAL-2025-188452](https://insights.sbomify.com/MAL-2025-188452/): Malicious code in optimize-css-assets-webpack-plugin-terser-rollup-plugin-registry (npm) (malicious package)
- [MAL-2025-188451](https://insights.sbomify.com/MAL-2025-188451/): Malicious code in optimize-css-assets-webpack-plugin-style-loader-bellatrix-prettier-stylelint (npm) (malicious package)
- [MAL-2025-188450](https://insights.sbomify.com/MAL-2025-188450/): Malicious code in optimize-css-assets-webpack-plugin-polaris-docusaurus-andromeda (npm) (malicious package)
- [MAL-2025-18845](https://insights.sbomify.com/MAL-2025-18845/): Malicious code in dryetchui (npm) (malicious package)
- [MAL-2025-188449](https://insights.sbomify.com/MAL-2025-188449/): Malicious code in optimize-css-assets-webpack-plugin-pm2-lyra-miranda (npm) (malicious package)
- [MAL-2025-188448](https://insights.sbomify.com/MAL-2025-188448/): Malicious code in optimize-cache-static-orchestrate-import (npm) (malicious package)
- [MAL-2025-188447](https://insights.sbomify.com/MAL-2025-188447/): Malicious code in ophiuchus-yonder-magellan-remark (npm) (malicious package)
- [MAL-2025-188446](https://insights.sbomify.com/MAL-2025-188446/): Malicious code in ophiuchus-whitedwarf-sirius-altair (npm) (malicious package)
- [MAL-2025-188445](https://insights.sbomify.com/MAL-2025-188445/): Malicious code in ophiuchus-vuetify-schema-ursa (npm) (malicious package)
- [MAL-2025-188444](https://insights.sbomify.com/MAL-2025-188444/): Malicious code in ophiuchus-spectron-webdriver-sedna-halley (npm) (malicious package)
- [MAL-2025-188443](https://insights.sbomify.com/MAL-2025-188443/): Malicious code in ophiuchus-sirius-biomimicry-loop (npm) (malicious package)
- [MAL-2025-188442](https://insights.sbomify.com/MAL-2025-188442/): Malicious code in ophiuchus-polaris-mineralogy-proteomics (npm) (malicious package)
- [MAL-2025-188441](https://insights.sbomify.com/MAL-2025-188441/): Malicious code in ophiuchus-europa-charon-blitz (npm) (malicious package)
- [MAL-2025-188440](https://insights.sbomify.com/MAL-2025-188440/): Malicious code in ophiuchus-eleventy-fornax-proxima (npm) (malicious package)
- [MAL-2025-18844](https://insights.sbomify.com/MAL-2025-18844/): Malicious code in drutnet (npm) (malicious package)
- [MAL-2025-188439](https://insights.sbomify.com/MAL-2025-188439/): Malicious code in ophiuchus-dactyl-elara-proxima (npm) (malicious package)
- [MAL-2025-188438](https://insights.sbomify.com/MAL-2025-188438/): Malicious code in ophiuchus-corvus-stream-deimos (npm) (malicious package)
- [MAL-2025-188437](https://insights.sbomify.com/MAL-2025-188437/): Malicious code in ophiuchus-callisto-semantic-ui-lynx (npm) (malicious package)
- [MAL-2025-188436](https://insights.sbomify.com/MAL-2025-188436/): Malicious code in ophiuchus-bunyan-exobiology-biotechnology (npm) (malicious package)
- [MAL-2025-188435](https://insights.sbomify.com/MAL-2025-188435/): Malicious code in ophiuchus-bootstrap-perseus-airbnb (npm) (malicious package)
- [MAL-2025-188434](https://insights.sbomify.com/MAL-2025-188434/): Malicious code in ophiuchus-blueshift-virtualreality-acamar (npm) (malicious package)
- [MAL-2025-188433](https://insights.sbomify.com/MAL-2025-188433/): Malicious code in oortcloud-zephyr-kinetic-acamar (npm) (malicious package)
- [MAL-2025-188432](https://insights.sbomify.com/MAL-2025-188432/): Malicious code in oortcloud-lint-weywot-luna (npm) (malicious package)
- [MAL-2025-188431](https://insights.sbomify.com/MAL-2025-188431/): Malicious code in oortcloud-css-minimizer-webpack-plugin-config-cryovolcano (npm) (malicious package)
- [MAL-2025-188430](https://insights.sbomify.com/MAL-2025-188430/): Malicious code in oortcloud-chariklo-geoarchaeology-cli (npm) (malicious package)
- [MAL-2025-18843](https://insights.sbomify.com/MAL-2025-18843/): Malicious code in drupsnipe (npm) (malicious package)
- [MAL-2025-188429](https://insights.sbomify.com/MAL-2025-188429/): Malicious code in on-xanthus-panspermia-kastra (npm) (malicious package)
- [MAL-2025-188428](https://insights.sbomify.com/MAL-2025-188428/): Malicious code in on-quantumfoam-nebula-cosmicweb (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/949/