# Vulnerabilities published in 2025


- [MAL-2025-188067](https://insights.sbomify.com/MAL-2025-188067/): Malicious code in miranda-despina-sqlite-ultra (npm) (malicious package)
- [MAL-2025-188066](https://insights.sbomify.com/MAL-2025-188066/): Malicious code in miranda-cosmos-resonance-loopback (npm) (malicious package)
- [MAL-2025-188065](https://insights.sbomify.com/MAL-2025-188065/): Malicious code in miranda-borealis-nova-dotenv-safe (npm) (malicious package)
- [MAL-2025-188064](https://insights.sbomify.com/MAL-2025-188064/): Malicious code in miranda-biotechnology-xanadu-halley (npm) (malicious package)
- [MAL-2025-188063](https://insights.sbomify.com/MAL-2025-188063/): Malicious code in mira-wolf-prompts-got (npm) (malicious package)
- [MAL-2025-188062](https://insights.sbomify.com/MAL-2025-188062/): Malicious code in mira-pipe-stratigraphy-semantic-release (npm) (malicious package)
- [MAL-2025-188061](https://insights.sbomify.com/MAL-2025-188061/): Malicious code in mira-pino-impulse-adonis (npm) (malicious package)
- [MAL-2025-188060](https://insights.sbomify.com/MAL-2025-188060/): Malicious code in mira-pegasus-helios-command (npm) (malicious package)
- [MAL-2025-18806](https://insights.sbomify.com/MAL-2025-18806/): Malicious code in driftwood_o7ecr_d8fup_bramble (npm) (malicious package)
- [MAL-2025-188059](https://insights.sbomify.com/MAL-2025-188059/): Malicious code in mira-halley-halley-publish (npm) (malicious package)
- [MAL-2025-188058](https://insights.sbomify.com/MAL-2025-188058/): Malicious code in mira-fusion-yildun-css-loader (npm) (malicious package)
- [MAL-2025-188057](https://insights.sbomify.com/MAL-2025-188057/): Malicious code in mira-flare-xanadu-pavo (npm) (malicious package)
- [MAL-2025-188056](https://insights.sbomify.com/MAL-2025-188056/): Malicious code in mira-apex-lint-bellatrix (npm) (malicious package)
- [MAL-2025-188055](https://insights.sbomify.com/MAL-2025-188055/): Malicious code in minify-report-compress-compress-process (npm) (malicious package)
- [MAL-2025-188054](https://insights.sbomify.com/MAL-2025-188054/): Malicious code in minify-permission-xi-route-export (npm) (malicious package)
- [MAL-2025-188053](https://insights.sbomify.com/MAL-2025-188053/): Malicious code in minify-mu-catch-authenticate-user (npm) (malicious package)
- [MAL-2025-188052](https://insights.sbomify.com/MAL-2025-188052/): Malicious code in minify-kappa-proxy-kappa-tau (npm) (malicious package)
- [MAL-2025-188051](https://insights.sbomify.com/MAL-2025-188051/): Malicious code in mini-css-extract-plugin-sass-loader-rigel-koa (npm) (malicious package)
- [MAL-2025-188050](https://insights.sbomify.com/MAL-2025-188050/): Malicious code in mini-css-extract-plugin-radiant-axios-sirius (npm) (malicious package)
- [MAL-2025-18805](https://insights.sbomify.com/MAL-2025-18805/): Malicious code in driftwood_kp6pv_qcy50_banyan (npm) (malicious package)
- [MAL-2025-188049](https://insights.sbomify.com/MAL-2025-188049/): Malicious code in mini-css-extract-plugin-paleoecology-redis-release-it (npm) (malicious package)
- [MAL-2025-188048](https://insights.sbomify.com/MAL-2025-188048/): Malicious code in mini-css-extract-plugin-nova-titan-duplex (npm) (malicious package)
- [MAL-2025-188047](https://insights.sbomify.com/MAL-2025-188047/): Malicious code in mini-css-extract-plugin-meissa-chai-ganymede (npm) (malicious package)
- [MAL-2025-188046](https://insights.sbomify.com/MAL-2025-188046/): Malicious code in mineralogy-oauth-eslint-node-sass (npm) (malicious package)
- [MAL-2025-188045](https://insights.sbomify.com/MAL-2025-188045/): Malicious code in mineralogy-less-loader-dagda-global (npm) (malicious package)
- [MAL-2025-188044](https://insights.sbomify.com/MAL-2025-188044/): Malicious code in middleware-webpack-resolvers-capella (npm) (malicious package)
- [MAL-2025-188043](https://insights.sbomify.com/MAL-2025-188043/): Malicious code in middleware-nightwatch-virgo-subscription (npm) (malicious package)
- [MAL-2025-188042](https://insights.sbomify.com/MAL-2025-188042/): Malicious code in middleware-mini-css-extract-plugin-ignite-json (npm) (malicious package)
- [MAL-2025-188041](https://insights.sbomify.com/MAL-2025-188041/): Malicious code in middleware-lyra-transport-innercore (npm) (malicious package)
- [MAL-2025-188040](https://insights.sbomify.com/MAL-2025-188040/): Malicious code in middleware-fusion-gemini-rehype (npm) (malicious package)
- [MAL-2025-18804](https://insights.sbomify.com/MAL-2025-18804/): Malicious code in driftwood_jj433_koria_whirlwind (npm) (malicious package)
- [MAL-2025-188039](https://insights.sbomify.com/MAL-2025-188039/): Malicious code in middleware-exec-callisto-postcss-loader (npm) (malicious package)
- [MAL-2025-188038](https://insights.sbomify.com/MAL-2025-188038/): Malicious code in middleware-css-loader-eigenstate-pavo (npm) (malicious package)
- [MAL-2025-188037](https://insights.sbomify.com/MAL-2025-188037/): Malicious code in middleware-backend-async-oortcloud (npm) (malicious package)
- [MAL-2025-188036](https://insights.sbomify.com/MAL-2025-188036/): Malicious code in middleware-antd-hapi-nightwatch (npm) (malicious package)
- [MAL-2025-188035](https://insights.sbomify.com/MAL-2025-188035/): Malicious code in middleware-antares-bootstrap-fork (npm) (malicious package)
- [MAL-2025-188034](https://insights.sbomify.com/MAL-2025-188034/): Malicious code in meteor-zephyr-singularitarianism-local (npm) (malicious package)
- [MAL-2025-188033](https://insights.sbomify.com/MAL-2025-188033/): Malicious code in meteor-spectron-webdriver-ignite-spawn (npm) (malicious package)
- [MAL-2025-188032](https://insights.sbomify.com/MAL-2025-188032/): Malicious code in meteor-singularitarianism-procyon-nova (npm) (malicious package)
- [MAL-2025-188031](https://insights.sbomify.com/MAL-2025-188031/): Malicious code in meteor-paleoecology-mysql-middleware (npm) (malicious package)
- [MAL-2025-188030](https://insights.sbomify.com/MAL-2025-188030/): Malicious code in meteor-paleoclimatology-firebase-chromedriver (npm) (malicious package)
- [MAL-2025-18803](https://insights.sbomify.com/MAL-2025-18803/): Malicious code in driftwood_iyer9_6xsr4_vortex (npm) (malicious package)
- [MAL-2025-188029](https://insights.sbomify.com/MAL-2025-188029/): Malicious code in meteor-octans-grunt-kuiperbelt (npm) (malicious package)
- [MAL-2025-188028](https://insights.sbomify.com/MAL-2025-188028/): Malicious code in meteor-meissa-airbnb-outercore (npm) (malicious package)
- [MAL-2025-188027](https://insights.sbomify.com/MAL-2025-188027/): Malicious code in meteor-lacerta-fornax-cryonics (npm) (malicious package)
- [MAL-2025-188026](https://insights.sbomify.com/MAL-2025-188026/): Malicious code in meteor-jupiter-jupiter-xanthus (npm) (malicious package)
- [MAL-2025-188025](https://insights.sbomify.com/MAL-2025-188025/): Malicious code in meteor-hadron-hermes-lint (npm) (malicious package)
- [MAL-2025-188024](https://insights.sbomify.com/MAL-2025-188024/): Malicious code in meteor-geochronology-element-ui-polaris (npm) (malicious package)
- [MAL-2025-188023](https://insights.sbomify.com/MAL-2025-188023/): Malicious code in meteor-fermiparadox-pino-mysql (npm) (malicious package)
- [MAL-2025-188022](https://insights.sbomify.com/MAL-2025-188022/): Malicious code in meteor-envconfig-quito-singularitarianism (npm) (malicious package)
- [MAL-2025-188021](https://insights.sbomify.com/MAL-2025-188021/): Malicious code in meteor-dysonswarm-geckodriver-grus (npm) (malicious package)
- [MAL-2025-188020](https://insights.sbomify.com/MAL-2025-188020/): Malicious code in meteor-deneb-phoebe-paleoanthropology (npm) (malicious package)
- [MAL-2025-18802](https://insights.sbomify.com/MAL-2025-18802/): Malicious code in driftwood_ghjkd_xkyk5_xylophone (npm) (malicious package)
- [MAL-2025-188019](https://insights.sbomify.com/MAL-2025-188019/): Malicious code in meteor-cosmochemistry-parsec-wezen (npm) (malicious package)
- [MAL-2025-188018](https://insights.sbomify.com/MAL-2025-188018/): Malicious code in meteor-command-warp-colors (npm) (malicious package)
- [MAL-2025-188017](https://insights.sbomify.com/MAL-2025-188017/): Malicious code in meteor-cli-nightwatch-test (npm) (malicious package)
- [MAL-2025-188016](https://insights.sbomify.com/MAL-2025-188016/): Malicious code in meteor-chalk-blueshift-gulp (npm) (malicious package)
- [MAL-2025-188015](https://insights.sbomify.com/MAL-2025-188015/): Malicious code in meteor-cache-fomalhaut-winston (npm) (malicious package)
- [MAL-2025-188014](https://insights.sbomify.com/MAL-2025-188014/): Malicious code in meteor-bulma-augmentedreality-hexo (npm) (malicious package)
- [MAL-2025-188013](https://insights.sbomify.com/MAL-2025-188013/): Malicious code in meteor-bionics-schema-flare (npm) (malicious package)
- [MAL-2025-188012](https://insights.sbomify.com/MAL-2025-188012/): Malicious code in meteor-betelgeuse-eigenstate-cladistics (npm) (malicious package)
- [MAL-2025-188011](https://insights.sbomify.com/MAL-2025-188011/): Malicious code in meteor-australis-filament-andromeda (npm) (malicious package)
- [MAL-2025-188010](https://insights.sbomify.com/MAL-2025-188010/): Malicious code in metalsmith-xanthus-react-bootstrap-sequelize (npm) (malicious package)
- [MAL-2025-18801](https://insights.sbomify.com/MAL-2025-18801/): Malicious code in driftwood_bh7yu_49jod_horizon (npm) (malicious package)
- [MAL-2025-188009](https://insights.sbomify.com/MAL-2025-188009/): Malicious code in metalsmith-postcss-loader-magellan-test (npm) (malicious package)
- [MAL-2025-188008](https://insights.sbomify.com/MAL-2025-188008/): Malicious code in metalsmith-json-husky-dotenv-safe (npm) (malicious package)
- [MAL-2025-188007](https://insights.sbomify.com/MAL-2025-188007/): Malicious code in metalsmith-ganymede-gravitationalwave-biogeochemistry (npm) (malicious package)
- [MAL-2025-188006](https://insights.sbomify.com/MAL-2025-188006/): Malicious code in metalsmith-eslint-plugin-proxima-update (npm) (malicious package)
- [MAL-2025-188005](https://insights.sbomify.com/MAL-2025-188005/): Malicious code in metalsmith-antares-barnard-yildun (npm) (malicious package)
- [MAL-2025-188004](https://insights.sbomify.com/MAL-2025-188004/): Malicious code in metabolomics-steganography-palynology-deneb (npm) (malicious package)
- [MAL-2025-188003](https://insights.sbomify.com/MAL-2025-188003/): Malicious code in metabolomics-octans-soap-membrane (npm) (malicious package)
- [MAL-2025-188002](https://insights.sbomify.com/MAL-2025-188002/): Malicious code in metabolomics-cross-env-antares-run-script (npm) (malicious package)
- [MAL-2025-188001](https://insights.sbomify.com/MAL-2025-188001/): Malicious code in meta-monitor-info-import-final (npm) (malicious package)
- [MAL-2025-188000](https://insights.sbomify.com/MAL-2025-188000/): Malicious code in meta-load-thread-grep-decompress (npm) (malicious package)
- [MAL-2025-18800](https://insights.sbomify.com/MAL-2025-18800/): Malicious code in driftwood_8xt6v_wniae_alchemy (npm) (malicious package)
- [MAL-2025-1880](https://insights.sbomify.com/MAL-2025-1880/): Malicious code in linkedin-sync (npm) (malicious package)
- [MAL-2025-188](https://insights.sbomify.com/MAL-2025-188/): Malicious code in flow-for-vscode (npm) (malicious package)
- [MAL-2025-187999](https://insights.sbomify.com/MAL-2025-187999/): Malicious code in meta-grep-stack-serialize-authenticate (npm) (malicious package)
- [MAL-2025-187998](https://insights.sbomify.com/MAL-2025-187998/): Malicious code in meta-fire-validate-refactor-cache (npm) (malicious package)
- [MAL-2025-187997](https://insights.sbomify.com/MAL-2025-187997/): Malicious code in meta-code-debug-key-old (npm) (malicious package)
- [MAL-2025-187996](https://insights.sbomify.com/MAL-2025-187996/): Malicious code in meta-boolean-analyze-decode-cloud (npm) (malicious package)
- [MAL-2025-187995](https://insights.sbomify.com/MAL-2025-187995/): Malicious code in mesosphere-query-dynamo-uranology (npm) (malicious package)
- [MAL-2025-187994](https://insights.sbomify.com/MAL-2025-187994/): Malicious code in mesosphere-private-farout-boson (npm) (malicious package)
- [MAL-2025-187993](https://insights.sbomify.com/MAL-2025-187993/): Malicious code in mesosphere-planckscale-quark-promise (npm) (malicious package)
- [MAL-2025-187992](https://insights.sbomify.com/MAL-2025-187992/): Malicious code in mesosphere-nanotechnology-got-scorpius (npm) (malicious package)
- [MAL-2025-187991](https://insights.sbomify.com/MAL-2025-187991/): Malicious code in mesosphere-kinetic-ignite-tectonic (npm) (malicious package)
- [MAL-2025-187990](https://insights.sbomify.com/MAL-2025-187990/): Malicious code in mesosphere-jupiter-sirius-spinner (npm) (malicious package)
- [MAL-2025-18799](https://insights.sbomify.com/MAL-2025-18799/): Malicious code in driftwood_3zqhz_hpitv_heather (npm) (malicious package)
- [MAL-2025-187989](https://insights.sbomify.com/MAL-2025-187989/): Malicious code in mesosphere-innercore-transport-proteomics (npm) (malicious package)
- [MAL-2025-187988](https://insights.sbomify.com/MAL-2025-187988/): Malicious code in mesosphere-genomics-oscillation-mechatronics (npm) (malicious package)
- [MAL-2025-187987](https://insights.sbomify.com/MAL-2025-187987/): Malicious code in mesosphere-exobiology-sedna-baryon (npm) (malicious package)
- [MAL-2025-187986](https://insights.sbomify.com/MAL-2025-187986/): Malicious code in mesosphere-chai-hermes-eris (npm) (malicious package)
- [MAL-2025-187985](https://insights.sbomify.com/MAL-2025-187985/): Malicious code in mesosphere-bootes-primatology-levels (npm) (malicious package)
- [MAL-2025-187984](https://insights.sbomify.com/MAL-2025-187984/): Malicious code in mesosphere-achernar-paleontology-deneb (npm) (malicious package)
- [MAL-2025-187983](https://insights.sbomify.com/MAL-2025-187983/): Malicious code in mensa-subscription-antares-csv (npm) (malicious package)
- [MAL-2025-187982](https://insights.sbomify.com/MAL-2025-187982/): Malicious code in mensa-spectron-webdriver-prettier-stylelint-zenobia (npm) (malicious package)
- [MAL-2025-187981](https://insights.sbomify.com/MAL-2025-187981/): Malicious code in mensa-nightwatch-magnetosphere-oberon (npm) (malicious package)
- [MAL-2025-187980](https://insights.sbomify.com/MAL-2025-187980/): Malicious code in mensa-koa-castor-typeorm (npm) (malicious package)
- [MAL-2025-18798](https://insights.sbomify.com/MAL-2025-18798/): Malicious code in driftwood_1bage_pnfbt_xenon (npm) (malicious package)
- [MAL-2025-187979](https://insights.sbomify.com/MAL-2025-187979/): Malicious code in mensa-fornax-chariklo-geochemistry (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/954/