# Vulnerabilities published in 2025 - [MAL-2025-188427](https://insights.sbomify.com/MAL-2025-188427/): Malicious code in on-planckscale-sequelize-comet (npm) (malicious package) - [MAL-2025-188426](https://insights.sbomify.com/MAL-2025-188426/): Malicious code in on-graviton-async-antares (npm) (malicious package) - [MAL-2025-188425](https://insights.sbomify.com/MAL-2025-188425/): Malicious code in on-eigenstate-eslint-plugin-axios (npm) (malicious package) - [MAL-2025-188424](https://insights.sbomify.com/MAL-2025-188424/): Malicious code in on-cladistics-exosphere-stream (npm) (malicious package) - [MAL-2025-188423](https://insights.sbomify.com/MAL-2025-188423/): Malicious code in omicron-thread-report-query-book (npm) (malicious package) - [MAL-2025-188422](https://insights.sbomify.com/MAL-2025-188422/): Malicious code in omicron-short-water-easy-beta (npm) (malicious package) - [MAL-2025-188421](https://insights.sbomify.com/MAL-2025-188421/): Malicious code in omicron-route-beta-virtualize-void (npm) (malicious package) - [MAL-2025-188420](https://insights.sbomify.com/MAL-2025-188420/): Malicious code in omicron-query-air-cold-kappa (npm) (malicious package) - [MAL-2025-18842](https://insights.sbomify.com/MAL-2025-18842/): Malicious code in druproid (npm) (malicious package) - [MAL-2025-188419](https://insights.sbomify.com/MAL-2025-188419/): Malicious code in omicron-module-export-java-bundle (npm) (malicious package) - [MAL-2025-188418](https://insights.sbomify.com/MAL-2025-188418/): Malicious code in omicron-final-fire-export-star (npm) (malicious package) - [MAL-2025-188417](https://insights.sbomify.com/MAL-2025-188417/): Malicious code in omicron-enum-link-permission-double (npm) (malicious package) - [MAL-2025-188416](https://insights.sbomify.com/MAL-2025-188416/): Malicious code in omicron-bundle-file-final-warn (npm) (malicious package) - [MAL-2025-188415](https://insights.sbomify.com/MAL-2025-188415/): Malicious code in omega-xml-proxy-runtime-analyze (npm) (malicious package) - [MAL-2025-188414](https://insights.sbomify.com/MAL-2025-188414/): Malicious code in omega-test-benchmark-validate-resolve (npm) (malicious package) - [MAL-2025-188413](https://insights.sbomify.com/MAL-2025-188413/): Malicious code in omega-string-view-double-warn (npm) (malicious package) - [MAL-2025-188412](https://insights.sbomify.com/MAL-2025-188412/): Malicious code in omega-fast-xi-node-analyze (npm) (malicious package) - [MAL-2025-188411](https://insights.sbomify.com/MAL-2025-188411/): Malicious code in omega-big-zero-export-java (npm) (malicious package) - [MAL-2025-188410](https://insights.sbomify.com/MAL-2025-188410/): Malicious code in old-stub-xml-deploy-wind (npm) (malicious package) - [MAL-2025-18841](https://insights.sbomify.com/MAL-2025-18841/): Malicious code in drupalsib (npm) (malicious package) - [MAL-2025-188409](https://insights.sbomify.com/MAL-2025-188409/): Malicious code in old-string-protected-omega-decode (npm) (malicious package) - [MAL-2025-188408](https://insights.sbomify.com/MAL-2025-188408/): Malicious code in old-reject-mu-char-decrypt (npm) (malicious package) - [MAL-2025-188407](https://insights.sbomify.com/MAL-2025-188407/): Malicious code in old-import-decode-table-process (npm) (malicious package) - [MAL-2025-188406](https://insights.sbomify.com/MAL-2025-188406/): Malicious code in old-grid-permission-gamma-web (npm) (malicious package) - [MAL-2025-188405](https://insights.sbomify.com/MAL-2025-188405/): Malicious code in old-export-class-cron-deploy (npm) (malicious package) - [MAL-2025-188404](https://insights.sbomify.com/MAL-2025-188404/): Malicious code in old-decompress-scale-throw-user (npm) (malicious package) - [MAL-2025-188403](https://insights.sbomify.com/MAL-2025-188403/): Malicious code in odin-toml-element-ui-flare (npm) (malicious package) - [MAL-2025-188402](https://insights.sbomify.com/MAL-2025-188402/): Malicious code in odin-start-sagitta-got (npm) (malicious package) - [MAL-2025-188401](https://insights.sbomify.com/MAL-2025-188401/): Malicious code in odin-nightwatch-singularity-gravity (npm) (malicious package) - [MAL-2025-188400](https://insights.sbomify.com/MAL-2025-188400/): Malicious code in odin-mensa-magnetar-react-bootstrap (npm) (malicious package) - [MAL-2025-18840](https://insights.sbomify.com/MAL-2025-18840/): Malicious code in drupal-bower-install (npm) (malicious package) - [MAL-2025-1884](https://insights.sbomify.com/MAL-2025-1884/): Malicious code in malware-testbed (npm) (malicious package) - [MAL-2025-188399](https://insights.sbomify.com/MAL-2025-188399/): Malicious code in odin-lepton-superagent-uninstall (npm) (malicious package) - [MAL-2025-188398](https://insights.sbomify.com/MAL-2025-188398/): Malicious code in odin-holography-wavefunction-webpack (npm) (malicious package) - [MAL-2025-188397](https://insights.sbomify.com/MAL-2025-188397/): Malicious code in odin-fetch-arcturus-cressida (npm) (malicious package) - [MAL-2025-188396](https://insights.sbomify.com/MAL-2025-188396/): Malicious code in odin-baryon-primatology-equinox (npm) (malicious package) - [MAL-2025-188395](https://insights.sbomify.com/MAL-2025-188395/): Malicious code in odin-babel-ignite-abiogenesis (npm) (malicious package) - [MAL-2025-188394](https://insights.sbomify.com/MAL-2025-188394/): Malicious code in octans-yakutsk-dotenv-leda (npm) (malicious package) - [MAL-2025-188393](https://insights.sbomify.com/MAL-2025-188393/): Malicious code in octans-sedna-entanglement-xerxes (npm) (malicious package) - [MAL-2025-188392](https://insights.sbomify.com/MAL-2025-188392/): Malicious code in octans-prompts-hyperion-google (npm) (malicious package) - [MAL-2025-188391](https://insights.sbomify.com/MAL-2025-188391/): Malicious code in octans-parallax-webdriverio-innercore (npm) (malicious package) - [MAL-2025-188390](https://insights.sbomify.com/MAL-2025-188390/): Malicious code in octans-non-blocking-repository-cosmiconfig (npm) (malicious package) - [MAL-2025-18839](https://insights.sbomify.com/MAL-2025-18839/): Malicious code in drumbox (npm) (malicious package) - [MAL-2025-188389](https://insights.sbomify.com/MAL-2025-188389/): Malicious code in octans-eigenstate-antares-vuetify (npm) (malicious package) - [MAL-2025-188388](https://insights.sbomify.com/MAL-2025-188388/): Malicious code in octans-cybernetics-carpo-norma (npm) (malicious package) - [MAL-2025-188387](https://insights.sbomify.com/MAL-2025-188387/): Malicious code in octans-command-io-command (npm) (malicious package) - [MAL-2025-188386](https://insights.sbomify.com/MAL-2025-188386/): Malicious code in octans-buffer-commitlint-config-angular-puppeteer (npm) (malicious package) - [MAL-2025-188385](https://insights.sbomify.com/MAL-2025-188385/): Malicious code in object-rain-fast-process-unix (npm) (malicious package) - [MAL-2025-188384](https://insights.sbomify.com/MAL-2025-188384/): Malicious code in object-chi-yaml-authorize-zero (npm) (malicious package) - [MAL-2025-188383](https://insights.sbomify.com/MAL-2025-188383/): Malicious code in object-authorize-array-cluster-encrypt (npm) (malicious package) - [MAL-2025-188382](https://insights.sbomify.com/MAL-2025-188382/): Malicious code in oberon-semantic-ui-cors-dione (npm) (malicious package) - [MAL-2025-188381](https://insights.sbomify.com/MAL-2025-188381/): Malicious code in oberon-mdx-hydrogeology-bunyan (npm) (malicious package) - [MAL-2025-188380](https://insights.sbomify.com/MAL-2025-188380/): Malicious code in oberon-geochronology-yakutsk-neuromorphic (npm) (malicious package) - [MAL-2025-18838](https://insights.sbomify.com/MAL-2025-18838/): Malicious code in drugmatch (npm) (malicious package) - [MAL-2025-188379](https://insights.sbomify.com/MAL-2025-188379/): Malicious code in oauth-zenobia-mechatronics-sirius (npm) (malicious package) - [MAL-2025-188378](https://insights.sbomify.com/MAL-2025-188378/): Malicious code in oauth-neptunology-lint-server (npm) (malicious package) - [MAL-2025-188377](https://insights.sbomify.com/MAL-2025-188377/): Malicious code in nuxtjs-test-fornax-postgres (npm) (malicious package) - [MAL-2025-188376](https://insights.sbomify.com/MAL-2025-188376/): Malicious code in nuxtjs-steganography-dynamo-rocket (npm) (malicious package) - [MAL-2025-188375](https://insights.sbomify.com/MAL-2025-188375/): Malicious code in nuxtjs-quasarjet-cross-env-taurus (npm) (malicious package) - [MAL-2025-188374](https://insights.sbomify.com/MAL-2025-188374/): Malicious code in nuxtjs-ionosphere-parsec-cosmology (npm) (malicious package) - [MAL-2025-188373](https://insights.sbomify.com/MAL-2025-188373/): Malicious code in nuxtjs-hugo-karma-antares (npm) (malicious package) - [MAL-2025-188372](https://insights.sbomify.com/MAL-2025-188372/): Malicious code in nuxtjs-heka-google-quasar (npm) (malicious package) - [MAL-2025-188371](https://insights.sbomify.com/MAL-2025-188371/): Malicious code in nuxtjs-fomalhaut-postcss-avior (npm) (malicious package) - [MAL-2025-188370](https://insights.sbomify.com/MAL-2025-188370/): Malicious code in nuxtjs-enceladus-miranda-jasmine (npm) (malicious package) - [MAL-2025-18837](https://insights.sbomify.com/MAL-2025-18837/): Malicious code in drscomm (npm) (malicious package) - [MAL-2025-188369](https://insights.sbomify.com/MAL-2025-188369/): Malicious code in nucleosynthesis-standard-pulsar-non-blocking (npm) (malicious package) - [MAL-2025-188368](https://insights.sbomify.com/MAL-2025-188368/): Malicious code in nucleosynthesis-neptunology-spica-stratosphere (npm) (malicious package) - [MAL-2025-188367](https://insights.sbomify.com/MAL-2025-188367/): Malicious code in nucleosynthesis-backend-local-foundation (npm) (malicious package) - [MAL-2025-188366](https://insights.sbomify.com/MAL-2025-188366/): Malicious code in nu-interpret-container-grep-bad (npm) (malicious package) - [MAL-2025-188365](https://insights.sbomify.com/MAL-2025-188365/): Malicious code in nu-grid-import-chi-assert (npm) (malicious package) - [MAL-2025-188364](https://insights.sbomify.com/MAL-2025-188364/): Malicious code in nu-double-import-theta-old (npm) (malicious package) - [MAL-2025-188363](https://insights.sbomify.com/MAL-2025-188363/): Malicious code in npm-publish-cross-env-jest (npm) (malicious package) - [MAL-2025-188362](https://insights.sbomify.com/MAL-2025-188362/): Malicious code in npm-global-sublimation-augmentedreality (npm) (malicious package) - [MAL-2025-188361](https://insights.sbomify.com/MAL-2025-188361/): Malicious code in npm-equinox-bootstrap-baryon (npm) (malicious package) - [MAL-2025-188360](https://insights.sbomify.com/MAL-2025-188360/): Malicious code in nova-virgo-jasmine-redshift (npm) (malicious package) - [MAL-2025-18836](https://insights.sbomify.com/MAL-2025-18836/): Malicious code in dropitapp (npm) (malicious package) - [MAL-2025-188359](https://insights.sbomify.com/MAL-2025-188359/): Malicious code in nova-singularitarianism-warp-redshift (npm) (malicious package) - [MAL-2025-188358](https://insights.sbomify.com/MAL-2025-188358/): Malicious code in nova-sagitta-pegasus-hermes (npm) (malicious package) - [MAL-2025-188357](https://insights.sbomify.com/MAL-2025-188357/): Malicious code in nova-relay-cosmogenic-taurus (npm) (malicious package) - [MAL-2025-188356](https://insights.sbomify.com/MAL-2025-188356/): Malicious code in nova-quantum-protractor-commitlint (npm) (malicious package) - [MAL-2025-188355](https://insights.sbomify.com/MAL-2025-188355/): Malicious code in nova-primatology-paleoclimatology-membrane (npm) (malicious package) - [MAL-2025-188354](https://insights.sbomify.com/MAL-2025-188354/): Malicious code in nova-phoebe-kaus-gatsby (npm) (malicious package) - [MAL-2025-188353](https://insights.sbomify.com/MAL-2025-188353/): Malicious code in nova-ini-greatfilter-hawkingradiation (npm) (malicious package) - [MAL-2025-188352](https://insights.sbomify.com/MAL-2025-188352/): Malicious code in nova-chakra-ui-css-loader-eris (npm) (malicious package) - [MAL-2025-188351](https://insights.sbomify.com/MAL-2025-188351/): Malicious code in nova-astro-playwright-mira (npm) (malicious package) - [MAL-2025-188350](https://insights.sbomify.com/MAL-2025-188350/): Malicious code in notify-zero-abstract-old-dog (npm) (malicious package) - [MAL-2025-18835](https://insights.sbomify.com/MAL-2025-18835/): Malicious code in dropgal (npm) (malicious package) - [MAL-2025-188349](https://insights.sbomify.com/MAL-2025-188349/): Malicious code in notify-string-deploy-file-private (npm) (malicious package) - [MAL-2025-188348](https://insights.sbomify.com/MAL-2025-188348/): Malicious code in notify-simple-theta-monitor-web (npm) (malicious package) - [MAL-2025-188347](https://insights.sbomify.com/MAL-2025-188347/): Malicious code in notify-omega-process-kernel-protected (npm) (malicious package) - [MAL-2025-188346](https://insights.sbomify.com/MAL-2025-188346/): Malicious code in notify-link-proxy-double-proxy (npm) (malicious package) - [MAL-2025-188345](https://insights.sbomify.com/MAL-2025-188345/): Malicious code in notify-beta-tree-mock-minify (npm) (malicious package) - [MAL-2025-188344](https://insights.sbomify.com/MAL-2025-188344/): Malicious code in norma-tool-stratigraphy-stop (npm) (malicious package) - [MAL-2025-188343](https://insights.sbomify.com/MAL-2025-188343/): Malicious code in norma-sagitta-bellatrix-postgres (npm) (malicious package) - [MAL-2025-188342](https://insights.sbomify.com/MAL-2025-188342/): Malicious code in norma-quantumfoam-loglevel-commitizen (npm) (malicious package) - [MAL-2025-188341](https://insights.sbomify.com/MAL-2025-188341/): Malicious code in norma-public-grus-supercluster (npm) (malicious package) - [MAL-2025-188340](https://insights.sbomify.com/MAL-2025-188340/): Malicious code in non-blocking-miranda-gridsome-cosmicray (npm) (malicious package) - [MAL-2025-18834](https://insights.sbomify.com/MAL-2025-18834/): Malicious code in dropcrypt (npm) (malicious package) - [MAL-2025-188339](https://insights.sbomify.com/MAL-2025-188339/): Malicious code in non-blocking-luna-axios-pegasus (npm) (malicious package) - [MAL-2025-188338](https://insights.sbomify.com/MAL-2025-188338/): Malicious code in nodemon-vega-umbriel-polaris (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/950/