# Vulnerabilities published in 2025


- [MAL-2025-188337](https://insights.sbomify.com/MAL-2025-188337/): Malicious code in nodemon-terser-webpack-plugin-private-mantle (npm) (malicious package)
- [MAL-2025-188336](https://insights.sbomify.com/MAL-2025-188336/): Malicious code in nodemon-slides-frontend-tethys (npm) (malicious package)
- [MAL-2025-188335](https://insights.sbomify.com/MAL-2025-188335/): Malicious code in nodemon-meissa-outercore-hyperion (npm) (malicious package)
- [MAL-2025-188334](https://insights.sbomify.com/MAL-2025-188334/): Malicious code in nodemon-kinetic-native-cassini (npm) (malicious package)
- [MAL-2025-188333](https://insights.sbomify.com/MAL-2025-188333/): Malicious code in nodemon-heka-wezen-meissa (npm) (malicious package)
- [MAL-2025-188332](https://insights.sbomify.com/MAL-2025-188332/): Malicious code in nodemon-europa-antares-frontend (npm) (malicious package)
- [MAL-2025-188331](https://insights.sbomify.com/MAL-2025-188331/): Malicious code in nodemon-css-loader-husky-parcel (npm) (malicious package)
- [MAL-2025-188330](https://insights.sbomify.com/MAL-2025-188330/): Malicious code in nodejs-sublimation-blueshift-ganymede (npm) (malicious package)
- [MAL-2025-18833](https://insights.sbomify.com/MAL-2025-18833/): Malicious code in dropchat (npm) (malicious package)
- [MAL-2025-188329](https://insights.sbomify.com/MAL-2025-188329/): Malicious code in nodejs-sass-loader-carina-duplex (npm) (malicious package)
- [MAL-2025-188328](https://insights.sbomify.com/MAL-2025-188328/): Malicious code in nodejs-radioastronomy-tailwindcss-chalk (npm) (malicious package)
- [MAL-2025-188327](https://insights.sbomify.com/MAL-2025-188327/): Malicious code in nodejs-oberon-ignite-node-sass (npm) (malicious package)
- [MAL-2025-188326](https://insights.sbomify.com/MAL-2025-188326/): Malicious code in nodejs-hyperion-quito-start (npm) (malicious package)
- [MAL-2025-188325](https://insights.sbomify.com/MAL-2025-188325/): Malicious code in nodejs-csrf-sagitta-materialize (npm) (malicious package)
- [MAL-2025-188324](https://insights.sbomify.com/MAL-2025-188324/): Malicious code in nodejs-cosmicweb-chakra-ui-vortex (npm) (malicious package)
- [MAL-2025-188323](https://insights.sbomify.com/MAL-2025-188323/): Malicious code in node-sass-slides-koa-hexo (npm) (malicious package)
- [MAL-2025-188322](https://insights.sbomify.com/MAL-2025-188322/): Malicious code in node-sass-nuxtjs-octans-eris (npm) (malicious package)
- [MAL-2025-188321](https://insights.sbomify.com/MAL-2025-188321/): Malicious code in node-sass-nashira-xerxes-css-minimizer-webpack-plugin (npm) (malicious package)
- [MAL-2025-188320](https://insights.sbomify.com/MAL-2025-188320/): Malicious code in node-sass-mutation-cladistics-helios (npm) (malicious package)
- [MAL-2025-18832](https://insights.sbomify.com/MAL-2025-18832/): Malicious code in dropbox-api-v2-explorer (npm) (malicious package)
- [MAL-2025-188319](https://insights.sbomify.com/MAL-2025-188319/): Malicious code in node-sass-luna-ora-terser-webpack-plugin (npm) (malicious package)
- [MAL-2025-188318](https://insights.sbomify.com/MAL-2025-188318/): Malicious code in node-sass-kastra-bellatrix-express (npm) (malicious package)
- [MAL-2025-188317](https://insights.sbomify.com/MAL-2025-188317/): Malicious code in node-sass-ignite-dotenv-safe-neptunology (npm) (malicious package)
- [MAL-2025-188316](https://insights.sbomify.com/MAL-2025-188316/): Malicious code in node-sass-eslint-kaus-relay (npm) (malicious package)
- [MAL-2025-188315](https://insights.sbomify.com/MAL-2025-188315/): Malicious code in node-sass-commitlint-lynx-public (npm) (malicious package)
- [MAL-2025-188314](https://insights.sbomify.com/MAL-2025-188314/): Malicious code in node-sass-blitz-paleobotany-decoherence (npm) (malicious package)
- [MAL-2025-188313](https://insights.sbomify.com/MAL-2025-188313/): Malicious code in node-optimize-table-alpha-final (npm) (malicious package)
- [MAL-2025-188312](https://insights.sbomify.com/MAL-2025-188312/): Malicious code in node-mu-private-new-runtime (npm) (malicious package)
- [MAL-2025-188311](https://insights.sbomify.com/MAL-2025-188311/): Malicious code in node-config-pulsar-buffer-luna (npm) (malicious package)
- [MAL-2025-188310](https://insights.sbomify.com/MAL-2025-188310/): Malicious code in node-config-private-zenobia-perseus (npm) (malicious package)
- [MAL-2025-18831](https://insights.sbomify.com/MAL-2025-18831/): Malicious code in droonga (npm) (malicious package)
- [MAL-2025-188309](https://insights.sbomify.com/MAL-2025-188309/): Malicious code in node-config-phoenix-regulus-html-webpack-plugin (npm) (malicious package)
- [MAL-2025-188308](https://insights.sbomify.com/MAL-2025-188308/): Malicious code in node-config-mini-css-extract-plugin-bellatrix-update (npm) (malicious package)
- [MAL-2025-188307](https://insights.sbomify.com/MAL-2025-188307/): Malicious code in node-config-lynx-cressida-hermes (npm) (malicious package)
- [MAL-2025-188306](https://insights.sbomify.com/MAL-2025-188306/): Malicious code in node-config-hexo-version-indus (npm) (malicious package)
- [MAL-2025-188305](https://insights.sbomify.com/MAL-2025-188305/): Malicious code in node-config-cross-env-event-fomalhaut (npm) (malicious package)
- [MAL-2025-188304](https://insights.sbomify.com/MAL-2025-188304/): Malicious code in node-config-commitlint-panspermia-superposition (npm) (malicious package)
- [MAL-2025-188303](https://insights.sbomify.com/MAL-2025-188303/): Malicious code in node-config-callisto-comet-eslint-plugin (npm) (malicious package)
- [MAL-2025-188302](https://insights.sbomify.com/MAL-2025-188302/): Malicious code in node-bundle-omega-deploy-sandbox (npm) (malicious package)
- [MAL-2025-188301](https://insights.sbomify.com/MAL-2025-188301/): Malicious code in node-awk-resolve-dog-public (npm) (malicious package)
- [MAL-2025-188300](https://insights.sbomify.com/MAL-2025-188300/): Malicious code in nightwatch-wolf-kastra-seismology (npm) (malicious package)
- [MAL-2025-18830](https://insights.sbomify.com/MAL-2025-18830/): Malicious code in drone-yambean-ag2y (npm) (malicious package)
- [MAL-2025-1883](https://insights.sbomify.com/MAL-2025-1883/): Malicious code in lyft-service (npm) (malicious package)
- [MAL-2025-188299](https://insights.sbomify.com/MAL-2025-188299/): Malicious code in nightwatch-ursa-rollup-plugin-slidev (npm) (malicious package)
- [MAL-2025-188298](https://insights.sbomify.com/MAL-2025-188298/): Malicious code in nightwatch-supervisor-hyperion-meissa (npm) (malicious package)
- [MAL-2025-188297](https://insights.sbomify.com/MAL-2025-188297/): Malicious code in nightwatch-supercluster-zooarchaeology-redgiant (npm) (malicious package)
- [MAL-2025-188296](https://insights.sbomify.com/MAL-2025-188296/): Malicious code in nightwatch-spawn-leda-tool (npm) (malicious package)
- [MAL-2025-188295](https://insights.sbomify.com/MAL-2025-188295/): Malicious code in nightwatch-server-pino-pretty-cz-conventional-changelog (npm) (malicious package)
- [MAL-2025-188294](https://insights.sbomify.com/MAL-2025-188294/): Malicious code in nightwatch-sedna-cosmiconfig-duplex (npm) (malicious package)
- [MAL-2025-188293](https://insights.sbomify.com/MAL-2025-188293/): Malicious code in nightwatch-restart-corvus-arcturus (npm) (malicious package)
- [MAL-2025-188292](https://insights.sbomify.com/MAL-2025-188292/): Malicious code in nightwatch-procyon-stream-docusaurus (npm) (malicious package)
- [MAL-2025-188291](https://insights.sbomify.com/MAL-2025-188291/): Malicious code in nightwatch-ophiuchus-request-quito (npm) (malicious package)
- [MAL-2025-188290](https://insights.sbomify.com/MAL-2025-188290/): Malicious code in nightwatch-nashira-wavefunction-perturbation (npm) (malicious package)
- [MAL-2025-18829](https://insights.sbomify.com/MAL-2025-18829/): Malicious code in drone-shack-171j (npm) (malicious package)
- [MAL-2025-188289](https://insights.sbomify.com/MAL-2025-188289/): Malicious code in nightwatch-loopback-delphinus-ursa (npm) (malicious package)
- [MAL-2025-188288](https://insights.sbomify.com/MAL-2025-188288/): Malicious code in nightwatch-levels-lepton-phoebe (npm) (malicious package)
- [MAL-2025-188287](https://insights.sbomify.com/MAL-2025-188287/): Malicious code in nightwatch-javascript-kastra-antares (npm) (malicious package)
- [MAL-2025-188286](https://insights.sbomify.com/MAL-2025-188286/): Malicious code in nightwatch-interferometry-meteor-decoherence (npm) (malicious package)
- [MAL-2025-188285](https://insights.sbomify.com/MAL-2025-188285/): Malicious code in nightwatch-global-subduction-eslint-plugin (npm) (malicious package)
- [MAL-2025-188284](https://insights.sbomify.com/MAL-2025-188284/): Malicious code in nightwatch-firebase-janus-package (npm) (malicious package)
- [MAL-2025-188283](https://insights.sbomify.com/MAL-2025-188283/): Malicious code in nightwatch-event-gammarayburst-eridanus (npm) (malicious package)
- [MAL-2025-188282](https://insights.sbomify.com/MAL-2025-188282/): Malicious code in nightwatch-despina-markdownlint-vuepress (npm) (malicious package)
- [MAL-2025-188281](https://insights.sbomify.com/MAL-2025-188281/): Malicious code in nightwatch-aldebaran-stratosphere-bionics (npm) (malicious package)
- [MAL-2025-188280](https://insights.sbomify.com/MAL-2025-188280/): Malicious code in nightwatch-abiogenesis-semantic-release-supercluster (npm) (malicious package)
- [MAL-2025-18828](https://insights.sbomify.com/MAL-2025-18828/): Malicious code in drone-rainbow-u5y0 (npm) (malicious package)
- [MAL-2025-188279](https://insights.sbomify.com/MAL-2025-188279/): Malicious code in nightmare-version-levels-mui (npm) (malicious package)
- [MAL-2025-188278](https://insights.sbomify.com/MAL-2025-188278/): Malicious code in nightmare-start-meteor-node-sass (npm) (malicious package)
- [MAL-2025-188277](https://insights.sbomify.com/MAL-2025-188277/): Malicious code in nightmare-semantic-ui-init-config (npm) (malicious package)
- [MAL-2025-188276](https://insights.sbomify.com/MAL-2025-188276/): Malicious code in nightmare-package-quark-cli (npm) (malicious package)
- [MAL-2025-188275](https://insights.sbomify.com/MAL-2025-188275/): Malicious code in nightmare-mesosphere-iota-dotenv (npm) (malicious package)
- [MAL-2025-188274](https://insights.sbomify.com/MAL-2025-188274/): Malicious code in nightmare-jasmine-janus-prompts (npm) (malicious package)
- [MAL-2025-188273](https://insights.sbomify.com/MAL-2025-188273/): Malicious code in nightmare-europa-restart-antares (npm) (malicious package)
- [MAL-2025-188272](https://insights.sbomify.com/MAL-2025-188272/): Malicious code in nextjs-weywot-bioinformatics-selenium (npm) (malicious package)
- [MAL-2025-188271](https://insights.sbomify.com/MAL-2025-188271/): Malicious code in nextjs-tachyon-apollo-cosmos (npm) (malicious package)
- [MAL-2025-188270](https://insights.sbomify.com/MAL-2025-188270/): Malicious code in nextjs-stratigraphy-stratigraphy-oauth (npm) (malicious package)
- [MAL-2025-18827](https://insights.sbomify.com/MAL-2025-18827/): Malicious code in drone-quebec-zzli (npm) (malicious package)
- [MAL-2025-188269](https://insights.sbomify.com/MAL-2025-188269/): Malicious code in nextjs-shelljs-centaurus-singularity (npm) (malicious package)
- [MAL-2025-188268](https://insights.sbomify.com/MAL-2025-188268/): Malicious code in nextjs-sagitta-backend-nightwatch (npm) (malicious package)
- [MAL-2025-188267](https://insights.sbomify.com/MAL-2025-188267/): Malicious code in nextjs-radiant-proteomics-neptune (npm) (malicious package)
- [MAL-2025-188266](https://insights.sbomify.com/MAL-2025-188266/): Malicious code in nextjs-quark-supercluster-nebula (npm) (malicious package)
- [MAL-2025-188265](https://insights.sbomify.com/MAL-2025-188265/): Malicious code in nextjs-octans-interferometry-fusion (npm) (malicious package)
- [MAL-2025-188264](https://insights.sbomify.com/MAL-2025-188264/): Malicious code in nextjs-html-webpack-plugin-express-gemini (npm) (malicious package)
- [MAL-2025-188263](https://insights.sbomify.com/MAL-2025-188263/): Malicious code in nextjs-google-transport-markdownlint (npm) (malicious package)
- [MAL-2025-188262](https://insights.sbomify.com/MAL-2025-188262/): Malicious code in nextjs-event-chromedriver-pm2 (npm) (malicious package)
- [MAL-2025-188261](https://insights.sbomify.com/MAL-2025-188261/): Malicious code in new-user-static-awk-zeta (npm) (malicious package)
- [MAL-2025-188260](https://insights.sbomify.com/MAL-2025-188260/): Malicious code in new-transpile-alpha-log-proxy (npm) (malicious package)
- [MAL-2025-18826](https://insights.sbomify.com/MAL-2025-18826/): Malicious code in drone-mountain-dvij (npm) (malicious package)
- [MAL-2025-188259](https://insights.sbomify.com/MAL-2025-188259/): Malicious code in new-promise-compress-compress-private (npm) (malicious package)
- [MAL-2025-188258](https://insights.sbomify.com/MAL-2025-188258/): Malicious code in new-optimize-async-spy-process (npm) (malicious package)
- [MAL-2025-188257](https://insights.sbomify.com/MAL-2025-188257/): Malicious code in new-mu-sigma-float-visualize (npm) (malicious package)
- [MAL-2025-188256](https://insights.sbomify.com/MAL-2025-188256/): Malicious code in new-decode-process-orchestrate-balance (npm) (malicious package)
- [MAL-2025-188255](https://insights.sbomify.com/MAL-2025-188255/): Malicious code in new-alpha-transpile-air-resolve (npm) (malicious package)
- [MAL-2025-188254](https://insights.sbomify.com/MAL-2025-188254/): Malicious code in neutronstar-regulus-sqlite-stratosphere (npm) (malicious package)
- [MAL-2025-188253](https://insights.sbomify.com/MAL-2025-188253/): Malicious code in neutronstar-quark-dotenv-safe-koa (npm) (malicious package)
- [MAL-2025-188252](https://insights.sbomify.com/MAL-2025-188252/): Malicious code in neutronstar-native-dynamo-hydra (npm) (malicious package)
- [MAL-2025-188251](https://insights.sbomify.com/MAL-2025-188251/): Malicious code in neutronstar-holography-greatfilter-miranda (npm) (malicious package)
- [MAL-2025-188250](https://insights.sbomify.com/MAL-2025-188250/): Malicious code in neutronstar-hologram-volcanology-asteroid (npm) (malicious package)
- [MAL-2025-18825](https://insights.sbomify.com/MAL-2025-18825/): Malicious code in drone-lima-ghpf (npm) (malicious package)
- [MAL-2025-188249](https://insights.sbomify.com/MAL-2025-188249/): Malicious code in neutronstar-gravity-aether-bulma (npm) (malicious package)
- [MAL-2025-188248](https://insights.sbomify.com/MAL-2025-188248/): Malicious code in neutronstar-bootstrap-nodejs-paleomagnetism (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/951/