# Vulnerabilities published in 2025


- [MAL-2025-188247](https://insights.sbomify.com/MAL-2025-188247/): Malicious code in neutrino-thuban-geoarchaeology-sadr (npm) (malicious package)
- [MAL-2025-188246](https://insights.sbomify.com/MAL-2025-188246/): Malicious code in neutrino-radioastronomy-comet-planetology (npm) (malicious package)
- [MAL-2025-188245](https://insights.sbomify.com/MAL-2025-188245/): Malicious code in neuromorphic-venus-aquarius-heka (npm) (malicious package)
- [MAL-2025-188244](https://insights.sbomify.com/MAL-2025-188244/): Malicious code in neuromorphic-nextjs-phenomic-telesto (npm) (malicious package)
- [MAL-2025-188243](https://insights.sbomify.com/MAL-2025-188243/): Malicious code in neuromorphic-cybernetics-cosmogenic-neutronstar (npm) (malicious package)
- [MAL-2025-188242](https://insights.sbomify.com/MAL-2025-188242/): Malicious code in neuromorphic-corvus-rate-limiter-concurrently (npm) (malicious package)
- [MAL-2025-188241](https://insights.sbomify.com/MAL-2025-188241/): Malicious code in nestjs-postcss-loader-slides-spinner (npm) (malicious package)
- [MAL-2025-188240](https://insights.sbomify.com/MAL-2025-188240/): Malicious code in nestjs-luna-meteor-despina (npm) (malicious package)
- [MAL-2025-18824](https://insights.sbomify.com/MAL-2025-18824/): Malicious code in drone-kapok-6y1z (npm) (malicious package)
- [MAL-2025-188239](https://insights.sbomify.com/MAL-2025-188239/): Malicious code in nestjs-equinox-fomalhaut-mutation (npm) (malicious package)
- [MAL-2025-188238](https://insights.sbomify.com/MAL-2025-188238/): Malicious code in nestjs-css-loader-command-mensa (npm) (malicious package)
- [MAL-2025-188237](https://insights.sbomify.com/MAL-2025-188237/): Malicious code in nestjs-astrometry-geoarchaeology-child-process (npm) (malicious package)
- [MAL-2025-188236](https://insights.sbomify.com/MAL-2025-188236/): Malicious code in neptunology-husky-dotenv-parse-variables-got (npm) (malicious package)
- [MAL-2025-188235](https://insights.sbomify.com/MAL-2025-188235/): Malicious code in neptunology-gravity-start-interferometry (npm) (malicious package)
- [MAL-2025-188234](https://insights.sbomify.com/MAL-2025-188234/): Malicious code in neptune-webdriver-manager-vuetify-boson (npm) (malicious package)
- [MAL-2025-188233](https://insights.sbomify.com/MAL-2025-188233/): Malicious code in neptune-venus-foundation-hyperion (npm) (malicious package)
- [MAL-2025-188232](https://insights.sbomify.com/MAL-2025-188232/): Malicious code in neptune-vega-slides-browserify (npm) (malicious package)
- [MAL-2025-188231](https://insights.sbomify.com/MAL-2025-188231/): Malicious code in neptune-terraforming-commitizen-phenomic (npm) (malicious package)
- [MAL-2025-188230](https://insights.sbomify.com/MAL-2025-188230/): Malicious code in neptune-tardigrade-protoplanetarydisk-palynology (npm) (malicious package)
- [MAL-2025-18823](https://insights.sbomify.com/MAL-2025-18823/): Malicious code in drone-kapok-5x63 (npm) (malicious package)
- [MAL-2025-188229](https://insights.sbomify.com/MAL-2025-188229/): Malicious code in neptune-sync-holography-xenobiology (npm) (malicious package)
- [MAL-2025-188228](https://insights.sbomify.com/MAL-2025-188228/): Malicious code in neptune-sqlite-cordelia-cypress (npm) (malicious package)
- [MAL-2025-188227](https://insights.sbomify.com/MAL-2025-188227/): Malicious code in neptune-slidev-pulsar-node-sass (npm) (malicious package)
- [MAL-2025-188226](https://insights.sbomify.com/MAL-2025-188226/): Malicious code in neptune-redshift-semantic-release-xml (npm) (malicious package)
- [MAL-2025-188225](https://insights.sbomify.com/MAL-2025-188225/): Malicious code in neptune-node-sass-altair-membrane (npm) (malicious package)
- [MAL-2025-188224](https://insights.sbomify.com/MAL-2025-188224/): Malicious code in neptune-morgan-pyxis-australis (npm) (malicious package)
- [MAL-2025-188223](https://insights.sbomify.com/MAL-2025-188223/): Malicious code in neptune-middleware-mongoose-neptunology (npm) (malicious package)
- [MAL-2025-188222](https://insights.sbomify.com/MAL-2025-188222/): Malicious code in neptune-lacerta-accretion-meteor (npm) (malicious package)
- [MAL-2025-188221](https://insights.sbomify.com/MAL-2025-188221/): Malicious code in neptune-ini-apex-ophiuchus (npm) (malicious package)
- [MAL-2025-188220](https://insights.sbomify.com/MAL-2025-188220/): Malicious code in neptune-indus-tachyon-phoenix (npm) (malicious package)
- [MAL-2025-18822](https://insights.sbomify.com/MAL-2025-18822/): Malicious code in drone-airplane-v0r7 (npm) (malicious package)
- [MAL-2025-188219](https://insights.sbomify.com/MAL-2025-188219/): Malicious code in neptune-grus-fusion-sass-loader (npm) (malicious package)
- [MAL-2025-188218](https://insights.sbomify.com/MAL-2025-188218/): Malicious code in neptune-ganymede-thermochronology-got (npm) (malicious package)
- [MAL-2025-188217](https://insights.sbomify.com/MAL-2025-188217/): Malicious code in neptune-framework-cors-ora (npm) (malicious package)
- [MAL-2025-188216](https://insights.sbomify.com/MAL-2025-188216/): Malicious code in neptune-europa-version-thermochronology (npm) (malicious package)
- [MAL-2025-188215](https://insights.sbomify.com/MAL-2025-188215/): Malicious code in neptune-dactyl-pulsar-paleoanthropology (npm) (malicious package)
- [MAL-2025-188214](https://insights.sbomify.com/MAL-2025-188214/): Malicious code in neptune-cryovolcano-dysonswarm-scripts (npm) (malicious package)
- [MAL-2025-188213](https://insights.sbomify.com/MAL-2025-188213/): Malicious code in neptune-betelgeuse-halley-chromedriver (npm) (malicious package)
- [MAL-2025-188212](https://insights.sbomify.com/MAL-2025-188212/): Malicious code in neptune-barnard-mdx-less-loader (npm) (malicious package)
- [MAL-2025-188211](https://insights.sbomify.com/MAL-2025-188211/): Malicious code in neptune-async-karma-repository (npm) (malicious package)
- [MAL-2025-188210](https://insights.sbomify.com/MAL-2025-188210/): Malicious code in neptune-acamar-exobiology-achernar (npm) (malicious package)
- [MAL-2025-18821](https://insights.sbomify.com/MAL-2025-18821/): Malicious code in dromote (npm) (malicious package)
- [MAL-2025-188209](https://insights.sbomify.com/MAL-2025-188209/): Malicious code in nebula-polaris-prettier-wormhole (npm) (malicious package)
- [MAL-2025-188208](https://insights.sbomify.com/MAL-2025-188208/): Malicious code in nebula-outercore-promise-lightyear (npm) (malicious package)
- [MAL-2025-188207](https://insights.sbomify.com/MAL-2025-188207/): Malicious code in nebula-lyra-astrophysics-backend (npm) (malicious package)
- [MAL-2025-188206](https://insights.sbomify.com/MAL-2025-188206/): Malicious code in nebula-init-resolvers-frontend (npm) (malicious package)
- [MAL-2025-188205](https://insights.sbomify.com/MAL-2025-188205/): Malicious code in nebula-gulp-bootes-kastra (npm) (malicious package)
- [MAL-2025-188204](https://insights.sbomify.com/MAL-2025-188204/): Malicious code in nebula-foundation-interstellarmedium-neutrino (npm) (malicious package)
- [MAL-2025-188203](https://insights.sbomify.com/MAL-2025-188203/): Malicious code in nebula-fomalhaut-auriga-superagent (npm) (malicious package)
- [MAL-2025-188202](https://insights.sbomify.com/MAL-2025-188202/): Malicious code in nebula-development-less-loader-achernar (npm) (malicious package)
- [MAL-2025-188201](https://insights.sbomify.com/MAL-2025-188201/): Malicious code in nebula-deneb-winston-apex (npm) (malicious package)
- [MAL-2025-188200](https://insights.sbomify.com/MAL-2025-188200/): Malicious code in nebula-delphinus-planckscale-juno (npm) (malicious package)
- [MAL-2025-18820](https://insights.sbomify.com/MAL-2025-18820/): Malicious code in dromar-styleguide (npm) (malicious package)
- [MAL-2025-1882](https://insights.sbomify.com/MAL-2025-1882/): Malicious code in lowerlatency (npm) (malicious package)
- [MAL-2025-188199](https://insights.sbomify.com/MAL-2025-188199/): Malicious code in nebula-dactyl-avior-thermosphere (npm) (malicious package)
- [MAL-2025-188198](https://insights.sbomify.com/MAL-2025-188198/): Malicious code in nebula-cosmochemistry-electron-cosmicsilence (npm) (malicious package)
- [MAL-2025-188197](https://insights.sbomify.com/MAL-2025-188197/): Malicious code in nebula-build-auth0-mui (npm) (malicious package)
- [MAL-2025-188196](https://insights.sbomify.com/MAL-2025-188196/): Malicious code in nebula-await-paleoecology-grus (npm) (malicious package)
- [MAL-2025-188195](https://insights.sbomify.com/MAL-2025-188195/): Malicious code in nconf-zenobia-antimatter-changelog (npm) (malicious package)
- [MAL-2025-188194](https://insights.sbomify.com/MAL-2025-188194/): Malicious code in nconf-wavefunction-titan-europa (npm) (malicious package)
- [MAL-2025-188193](https://insights.sbomify.com/MAL-2025-188193/): Malicious code in nconf-superagent-public-writable (npm) (malicious package)
- [MAL-2025-188192](https://insights.sbomify.com/MAL-2025-188192/): Malicious code in nconf-middleware-extremophile-cosmicweb (npm) (malicious package)
- [MAL-2025-188191](https://insights.sbomify.com/MAL-2025-188191/): Malicious code in nconf-markdownlint-archaeometry-superagent (npm) (malicious package)
- [MAL-2025-188190](https://insights.sbomify.com/MAL-2025-188190/): Malicious code in nconf-gemini-webdriver-mocha-forever (npm) (malicious package)
- [MAL-2025-18819](https://insights.sbomify.com/MAL-2025-18819/): Malicious code in droidfit (npm) (malicious package)
- [MAL-2025-188189](https://insights.sbomify.com/MAL-2025-188189/): Malicious code in nconf-cryptography-paleoanthropology-janus (npm) (malicious package)
- [MAL-2025-188188](https://insights.sbomify.com/MAL-2025-188188/): Malicious code in nconf-aurora-ionosphere-callisto (npm) (malicious package)
- [MAL-2025-188187](https://insights.sbomify.com/MAL-2025-188187/): Malicious code in native-transform-nightmare-polaris (npm) (malicious package)
- [MAL-2025-188186](https://insights.sbomify.com/MAL-2025-188186/): Malicious code in native-thermosphere-hermes-server (npm) (malicious package)
- [MAL-2025-188185](https://insights.sbomify.com/MAL-2025-188185/): Malicious code in native-rollup-plugin-sagitta-tectonophysics (npm) (malicious package)
- [MAL-2025-188184](https://insights.sbomify.com/MAL-2025-188184/): Malicious code in native-rate-limiter-uninstall-regulus (npm) (malicious package)
- [MAL-2025-188183](https://insights.sbomify.com/MAL-2025-188183/): Malicious code in native-quasar-middleware-cz-conventional-changelog (npm) (malicious package)
- [MAL-2025-188182](https://insights.sbomify.com/MAL-2025-188182/): Malicious code in native-nashira-seismology-heliophysics (npm) (malicious package)
- [MAL-2025-188181](https://insights.sbomify.com/MAL-2025-188181/): Malicious code in native-izar-hugo-start (npm) (malicious package)
- [MAL-2025-188180](https://insights.sbomify.com/MAL-2025-188180/): Malicious code in native-galaxy-antares-global (npm) (malicious package)
- [MAL-2025-18818](https://insights.sbomify.com/MAL-2025-18818/): Malicious code in drnetwork (npm) (malicious package)
- [MAL-2025-188179](https://insights.sbomify.com/MAL-2025-188179/): Malicious code in native-gacrux-antares-phoenix (npm) (malicious package)
- [MAL-2025-188178](https://insights.sbomify.com/MAL-2025-188178/): Malicious code in native-electron-builder-nashira-tachyon (npm) (malicious package)
- [MAL-2025-188177](https://insights.sbomify.com/MAL-2025-188177/): Malicious code in native-docusaurus-xerxes-unuk (npm) (malicious package)
- [MAL-2025-188176](https://insights.sbomify.com/MAL-2025-188176/): Malicious code in native-coronalmassejection-writable-bionics (npm) (malicious package)
- [MAL-2025-188175](https://insights.sbomify.com/MAL-2025-188175/): Malicious code in native-callback-prettier-magellan (npm) (malicious package)
- [MAL-2025-188174](https://insights.sbomify.com/MAL-2025-188174/): Malicious code in native-blackhole-parcel-node-sass (npm) (malicious package)
- [MAL-2025-188173](https://insights.sbomify.com/MAL-2025-188173/): Malicious code in nashira-winston-aurora-gatsby (npm) (malicious package)
- [MAL-2025-188172](https://insights.sbomify.com/MAL-2025-188172/): Malicious code in nashira-materialize-publish-galaxy (npm) (malicious package)
- [MAL-2025-188171](https://insights.sbomify.com/MAL-2025-188171/): Malicious code in nashira-dotenv-parse-variables-gulp-lynx (npm) (malicious package)
- [MAL-2025-188170](https://insights.sbomify.com/MAL-2025-188170/): Malicious code in nashira-betelgeuse-astrometry-callback (npm) (malicious package)
- [MAL-2025-18817](https://insights.sbomify.com/MAL-2025-18817/): Malicious code in drkaukxcvpbzfwtl (npm) (malicious package)
- [MAL-2025-188169](https://insights.sbomify.com/MAL-2025-188169/): Malicious code in nanotechnology-seismology-dotenv-parse-variables-darkenergy (npm) (malicious package)
- [MAL-2025-188168](https://insights.sbomify.com/MAL-2025-188168/): Malicious code in nanotechnology-nightwatch-elara-mira (npm) (malicious package)
- [MAL-2025-188167](https://insights.sbomify.com/MAL-2025-188167/): Malicious code in nanotechnology-eventhoriz-iota-commitizen (npm) (malicious package)
- [MAL-2025-188166](https://insights.sbomify.com/MAL-2025-188166/): Malicious code in nanotechnology-ariel-atlas-loopback (npm) (malicious package)
- [MAL-2025-188165](https://insights.sbomify.com/MAL-2025-188165/): Malicious code in mysql-spectron-webdriver-primatology-eslint-plugin (npm) (malicious package)
- [MAL-2025-188164](https://insights.sbomify.com/MAL-2025-188164/): Malicious code in mysql-quasar-nodejs-node-sass (npm) (malicious package)
- [MAL-2025-188163](https://insights.sbomify.com/MAL-2025-188163/): Malicious code in mysql-local-bootes-triton (npm) (malicious package)
- [MAL-2025-188162](https://insights.sbomify.com/MAL-2025-188162/): Malicious code in mysql-joviology-eslint-config-exoplanetology (npm) (malicious package)
- [MAL-2025-188161](https://insights.sbomify.com/MAL-2025-188161/): Malicious code in mysql-heka-version-saturnology (npm) (malicious package)
- [MAL-2025-188160](https://insights.sbomify.com/MAL-2025-188160/): Malicious code in mysql-fork-pavo-firebase (npm) (malicious package)
- [MAL-2025-18816](https://insights.sbomify.com/MAL-2025-18816/): Malicious code in drizzle_rr2ap_cgamr_fable (npm) (malicious package)
- [MAL-2025-188159](https://insights.sbomify.com/MAL-2025-188159/): Malicious code in mysql-enceladus-cressida-whitedwarf (npm) (malicious package)
- [MAL-2025-188158](https://insights.sbomify.com/MAL-2025-188158/): Malicious code in mysql-cassini-unuk-middleware (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/952/