# Vulnerabilities published in 2025


- [MAL-2025-188157](https://insights.sbomify.com/MAL-2025-188157/): Malicious code in mutation-telesto-cybernetics-library (npm) (malicious package)
- [MAL-2025-188156](https://insights.sbomify.com/MAL-2025-188156/): Malicious code in mutation-promise-xenon-fermion (npm) (malicious package)
- [MAL-2025-188155](https://insights.sbomify.com/MAL-2025-188155/): Malicious code in mutation-local-archaeoastronomy-auth (npm) (malicious package)
- [MAL-2025-188154](https://insights.sbomify.com/MAL-2025-188154/): Malicious code in mutation-exec-arcturus-gulp (npm) (malicious package)
- [MAL-2025-188153](https://insights.sbomify.com/MAL-2025-188153/): Malicious code in mutation-dotenv-leda-crust (npm) (malicious package)
- [MAL-2025-188152](https://insights.sbomify.com/MAL-2025-188152/): Malicious code in mutation-docusaurus-scorpius-centauri (npm) (malicious package)
- [MAL-2025-188151](https://insights.sbomify.com/MAL-2025-188151/): Malicious code in mutation-cladistics-graviton-upgrade (npm) (malicious package)
- [MAL-2025-188150](https://insights.sbomify.com/MAL-2025-188150/): Malicious code in mutation-augmentedreality-archaeoastronomy-neutronstar (npm) (malicious package)
- [MAL-2025-18815](https://insights.sbomify.com/MAL-2025-18815/): Malicious code in drizzle_qbdvc_7p704_zephyr (npm) (malicious package)
- [MAL-2025-188149](https://insights.sbomify.com/MAL-2025-188149/): Malicious code in multiverse-terser-webpack-plugin-vulcan-redgiant (npm) (malicious package)
- [MAL-2025-188148](https://insights.sbomify.com/MAL-2025-188148/): Malicious code in multiverse-perseus-ignite-ceres (npm) (malicious package)
- [MAL-2025-188147](https://insights.sbomify.com/MAL-2025-188147/): Malicious code in multiverse-pavo-dependencies-enif (npm) (malicious package)
- [MAL-2025-188146](https://insights.sbomify.com/MAL-2025-188146/): Malicious code in multiverse-jsonp-mdx-commitlint-config-angular (npm) (malicious package)
- [MAL-2025-188145](https://insights.sbomify.com/MAL-2025-188145/): Malicious code in multiverse-carina-boson-fusion (npm) (malicious package)
- [MAL-2025-188144](https://insights.sbomify.com/MAL-2025-188144/): Malicious code in mui-xerxes-proxima-cassini (npm) (malicious package)
- [MAL-2025-188143](https://insights.sbomify.com/MAL-2025-188143/): Malicious code in mui-reveal-md-registry-yaml (npm) (malicious package)
- [MAL-2025-188142](https://insights.sbomify.com/MAL-2025-188142/): Malicious code in mui-norma-callisto-terser-webpack-plugin (npm) (malicious package)
- [MAL-2025-188141](https://insights.sbomify.com/MAL-2025-188141/): Malicious code in mui-neutrino-nestjs-stratigraphy (npm) (malicious package)
- [MAL-2025-188140](https://insights.sbomify.com/MAL-2025-188140/): Malicious code in mui-meissa-technosignature-wasat (npm) (malicious package)
- [MAL-2025-18814](https://insights.sbomify.com/MAL-2025-18814/): Malicious code in drizzle_pgve1_k3zwx_tempest (npm) (malicious package)
- [MAL-2025-188139](https://insights.sbomify.com/MAL-2025-188139/): Malicious code in mui-meissa-subscription-event (npm) (malicious package)
- [MAL-2025-188138](https://insights.sbomify.com/MAL-2025-188138/): Malicious code in mui-delphinus-castor-magnetosphere (npm) (malicious package)
- [MAL-2025-188137](https://insights.sbomify.com/MAL-2025-188137/): Malicious code in mui-cluster-antares-nucleosynthesis (npm) (malicious package)
- [MAL-2025-188136](https://insights.sbomify.com/MAL-2025-188136/): Malicious code in mui-auth-betelgeuse-xo (npm) (malicious package)
- [MAL-2025-188135](https://insights.sbomify.com/MAL-2025-188135/): Malicious code in mui-asthenosphere-callback-webdriver-manager (npm) (malicious package)
- [MAL-2025-188134](https://insights.sbomify.com/MAL-2025-188134/): Malicious code in mu-slow-star-promise-eta (npm) (malicious package)
- [MAL-2025-188133](https://insights.sbomify.com/MAL-2025-188133/): Malicious code in mu-mu-psi-zero-java (npm) (malicious package)
- [MAL-2025-188132](https://insights.sbomify.com/MAL-2025-188132/): Malicious code in mu-kernel-phi-transpile-node (npm) (malicious package)
- [MAL-2025-188131](https://insights.sbomify.com/MAL-2025-188131/): Malicious code in mu-dog-proxy-decode-unix (npm) (malicious package)
- [MAL-2025-188130](https://insights.sbomify.com/MAL-2025-188130/): Malicious code in morgan-spectron-webdriver-primatology-aldebaran (npm) (malicious package)
- [MAL-2025-18813](https://insights.sbomify.com/MAL-2025-18813/): Malicious code in drizzle_kn5qz_3z98a_kestrel (npm) (malicious package)
- [MAL-2025-188129](https://insights.sbomify.com/MAL-2025-188129/): Malicious code in morgan-sass-loader-release-it-quark (npm) (malicious package)
- [MAL-2025-188128](https://insights.sbomify.com/MAL-2025-188128/): Malicious code in morgan-readable-auriga-promise (npm) (malicious package)
- [MAL-2025-188127](https://insights.sbomify.com/MAL-2025-188127/): Malicious code in morgan-react-bootstrap-cz-conventional-changelog-helios (npm) (malicious package)
- [MAL-2025-188126](https://insights.sbomify.com/MAL-2025-188126/): Malicious code in morgan-planckscale-rollup-plugin-void (npm) (malicious package)
- [MAL-2025-188125](https://insights.sbomify.com/MAL-2025-188125/): Malicious code in morgan-meteor-loop-delphinus (npm) (malicious package)
- [MAL-2025-188124](https://insights.sbomify.com/MAL-2025-188124/): Malicious code in morgan-magellan-public-envconfig (npm) (malicious package)
- [MAL-2025-188123](https://insights.sbomify.com/MAL-2025-188123/): Malicious code in moon-unix-meta-process-kernel (npm) (malicious package)
- [MAL-2025-188122](https://insights.sbomify.com/MAL-2025-188122/): Malicious code in moon-small-nu-rain-static (npm) (malicious package)
- [MAL-2025-188121](https://insights.sbomify.com/MAL-2025-188121/): Malicious code in moon-omicron-stub-long-book (npm) (malicious package)
- [MAL-2025-188120](https://insights.sbomify.com/MAL-2025-188120/): Malicious code in moon-old-gamma-deploy-cloud (npm) (malicious package)
- [MAL-2025-18812](https://insights.sbomify.com/MAL-2025-18812/): Malicious code in drizzle_5f87n_ganf3_verdant (npm) (malicious package)
- [MAL-2025-188119](https://insights.sbomify.com/MAL-2025-188119/): Malicious code in moon-new-cloud-mu-cat (npm) (malicious package)
- [MAL-2025-188118](https://insights.sbomify.com/MAL-2025-188118/): Malicious code in monitor-data-uglify-compress-book (npm) (malicious package)
- [MAL-2025-188117](https://insights.sbomify.com/MAL-2025-188117/): Malicious code in mongoose-wolf-deimos-forever (npm) (malicious package)
- [MAL-2025-188116](https://insights.sbomify.com/MAL-2025-188116/): Malicious code in mongoose-supernova-transhumanism-gulp (npm) (malicious package)
- [MAL-2025-188115](https://insights.sbomify.com/MAL-2025-188115/): Malicious code in mongoose-odin-rimraf-petrology (npm) (malicious package)
- [MAL-2025-188114](https://insights.sbomify.com/MAL-2025-188114/): Malicious code in mongoose-electron-bunyan-event (npm) (malicious package)
- [MAL-2025-188113](https://insights.sbomify.com/MAL-2025-188113/): Malicious code in mongoose-docusaurus-fomalhaut-oauth (npm) (malicious package)
- [MAL-2025-188112](https://insights.sbomify.com/MAL-2025-188112/): Malicious code in mongoose-css-minimizer-webpack-plugin-spectroscopy-aquarius (npm) (malicious package)
- [MAL-2025-188111](https://insights.sbomify.com/MAL-2025-188111/): Malicious code in mongoose-cordelia-hawkingradiation-antares (npm) (malicious package)
- [MAL-2025-188110](https://insights.sbomify.com/MAL-2025-188110/): Malicious code in mongoose-convict-kaus-thermochronology (npm) (malicious package)
- [MAL-2025-18811](https://insights.sbomify.com/MAL-2025-18811/): Malicious code in drivenaz (npm) (malicious package)
- [MAL-2025-188109](https://insights.sbomify.com/MAL-2025-188109/): Malicious code in mongodb-nodemon-callback-areology (npm) (malicious package)
- [MAL-2025-188108](https://insights.sbomify.com/MAL-2025-188108/): Malicious code in mongodb-kastra-gridsome-fusion (npm) (malicious package)
- [MAL-2025-188107](https://insights.sbomify.com/MAL-2025-188107/): Malicious code in mongodb-cz-conventional-changelog-rollup-plugin-biosignature (npm) (malicious package)
- [MAL-2025-188106](https://insights.sbomify.com/MAL-2025-188106/): Malicious code in mongodb-augmentedreality-mineralogy-postcss (npm) (malicious package)
- [MAL-2025-188105](https://insights.sbomify.com/MAL-2025-188105/): Malicious code in module-void-fast-thread-double (npm) (malicious package)
- [MAL-2025-188104](https://insights.sbomify.com/MAL-2025-188104/): Malicious code in module-user-signal-pi-monitor (npm) (malicious package)
- [MAL-2025-188103](https://insights.sbomify.com/MAL-2025-188103/): Malicious code in module-serialize-fire-bash-mu (npm) (malicious package)
- [MAL-2025-188102](https://insights.sbomify.com/MAL-2025-188102/): Malicious code in module-phoebe-elara-meissa (npm) (malicious package)
- [MAL-2025-188101](https://insights.sbomify.com/MAL-2025-188101/): Malicious code in module-palynology-kronos-fornax (npm) (malicious package)
- [MAL-2025-188100](https://insights.sbomify.com/MAL-2025-188100/): Malicious code in module-fornax-elara-mongodb (npm) (malicious package)
- [MAL-2025-18810](https://insights.sbomify.com/MAL-2025-18810/): Malicious code in drimjas (npm) (malicious package)
- [MAL-2025-1881](https://insights.sbomify.com/MAL-2025-1881/): Malicious code in linkedin-test (npm) (malicious package)
- [MAL-2025-188099](https://insights.sbomify.com/MAL-2025-188099/): Malicious code in module-data-secure-psi-double (npm) (malicious package)
- [MAL-2025-188098](https://insights.sbomify.com/MAL-2025-188098/): Malicious code in module-biomimicry-rollup-comet (npm) (malicious package)
- [MAL-2025-188097](https://insights.sbomify.com/MAL-2025-188097/): Malicious code in module-barnard-ganymede-sociobiology (npm) (malicious package)
- [MAL-2025-188096](https://insights.sbomify.com/MAL-2025-188096/): Malicious code in module-aquarius-enceladus-publish (npm) (malicious package)
- [MAL-2025-188095](https://insights.sbomify.com/MAL-2025-188095/): Malicious code in mock-xml-omicron-protected-class (npm) (malicious package)
- [MAL-2025-188094](https://insights.sbomify.com/MAL-2025-188094/): Malicious code in mock-string-simple-final-data (npm) (malicious package)
- [MAL-2025-188093](https://insights.sbomify.com/MAL-2025-188093/): Malicious code in mock-sandbox-private-stub-view (npm) (malicious package)
- [MAL-2025-188092](https://insights.sbomify.com/MAL-2025-188092/): Malicious code in mock-parse-earth-export-hot (npm) (malicious package)
- [MAL-2025-188091](https://insights.sbomify.com/MAL-2025-188091/): Malicious code in mock-easy-tree-long-cloud (npm) (malicious package)
- [MAL-2025-188090](https://insights.sbomify.com/MAL-2025-188090/): Malicious code in mocha-solis-zenobia-norma (npm) (malicious package)
- [MAL-2025-18809](https://insights.sbomify.com/MAL-2025-18809/): Malicious code in driftwood_yit1x_2aq20_vantage (npm) (malicious package)
- [MAL-2025-188089](https://insights.sbomify.com/MAL-2025-188089/): Malicious code in mocha-neptunology-flare-galaxy (npm) (malicious package)
- [MAL-2025-188088](https://insights.sbomify.com/MAL-2025-188088/): Malicious code in mocha-eventhoriz-wavefunction-redshift (npm) (malicious package)
- [MAL-2025-188087](https://insights.sbomify.com/MAL-2025-188087/): Malicious code in mocha-epimetheus-zenith-commitlint-config-angular (npm) (malicious package)
- [MAL-2025-188086](https://insights.sbomify.com/MAL-2025-188086/): Malicious code in miranda-yildun-zooarchaeology-bionics (npm) (malicious package)
- [MAL-2025-188085](https://insights.sbomify.com/MAL-2025-188085/): Malicious code in miranda-stream-resolvers-convict (npm) (malicious package)
- [MAL-2025-188084](https://insights.sbomify.com/MAL-2025-188084/): Malicious code in miranda-spica-sails-superposition (npm) (malicious package)
- [MAL-2025-188083](https://insights.sbomify.com/MAL-2025-188083/): Malicious code in miranda-postcss-blitz-module (npm) (malicious package)
- [MAL-2025-188082](https://insights.sbomify.com/MAL-2025-188082/): Malicious code in miranda-perseus-pm2-ophiuchus (npm) (malicious package)
- [MAL-2025-188081](https://insights.sbomify.com/MAL-2025-188081/): Malicious code in miranda-nestjs-void-juno (npm) (malicious package)
- [MAL-2025-188080](https://insights.sbomify.com/MAL-2025-188080/): Malicious code in miranda-native-cross-env-oauth (npm) (malicious package)
- [MAL-2025-18808](https://insights.sbomify.com/MAL-2025-18808/): Malicious code in driftwood_us5ge_32me6_nectar (npm) (malicious package)
- [MAL-2025-188079](https://insights.sbomify.com/MAL-2025-188079/): Malicious code in miranda-native-alphard-browserify (npm) (malicious package)
- [MAL-2025-188078](https://insights.sbomify.com/MAL-2025-188078/): Malicious code in miranda-markdown-pdf-rate-limiter-graphql (npm) (malicious package)
- [MAL-2025-188077](https://insights.sbomify.com/MAL-2025-188077/): Malicious code in miranda-lithosphere-xo-alphard (npm) (malicious package)
- [MAL-2025-188076](https://insights.sbomify.com/MAL-2025-188076/): Malicious code in miranda-leda-polaris-umbriel (npm) (malicious package)
- [MAL-2025-188075](https://insights.sbomify.com/MAL-2025-188075/): Malicious code in miranda-koa-fetch-duplex (npm) (malicious package)
- [MAL-2025-188074](https://insights.sbomify.com/MAL-2025-188074/): Malicious code in miranda-janus-fornax-eris (npm) (malicious package)
- [MAL-2025-188073](https://insights.sbomify.com/MAL-2025-188073/): Malicious code in miranda-genomics-uninstall-virgo (npm) (malicious package)
- [MAL-2025-188072](https://insights.sbomify.com/MAL-2025-188072/): Malicious code in miranda-gacrux-stratigraphy-node-sass (npm) (malicious package)
- [MAL-2025-188071](https://insights.sbomify.com/MAL-2025-188071/): Malicious code in miranda-fomalhaut-apollo-cz-conventional-changelog (npm) (malicious package)
- [MAL-2025-188070](https://insights.sbomify.com/MAL-2025-188070/): Malicious code in miranda-exec-meissa-terser (npm) (malicious package)
- [MAL-2025-18807](https://insights.sbomify.com/MAL-2025-18807/): Malicious code in driftwood_p4eig_po8i8_drizzle (npm) (malicious package)
- [MAL-2025-188069](https://insights.sbomify.com/MAL-2025-188069/): Malicious code in miranda-elektra-quark-ophiuchus (npm) (malicious package)
- [MAL-2025-188068](https://insights.sbomify.com/MAL-2025-188068/): Malicious code in miranda-eigenstate-markdownlint-cosmogenic (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/953/