# Vulnerabilities published in 2025


- [MAL-2025-187978](https://insights.sbomify.com/MAL-2025-187978/): Malicious code in membrane-kuiperbelt-cluster-remark (npm) (malicious package)
- [MAL-2025-187977](https://insights.sbomify.com/MAL-2025-187977/): Malicious code in membrane-genomics-passport-pulsar (npm) (malicious package)
- [MAL-2025-187976](https://insights.sbomify.com/MAL-2025-187976/): Malicious code in meissa-steganography-helmet-yaml (npm) (malicious package)
- [MAL-2025-187975](https://insights.sbomify.com/MAL-2025-187975/): Malicious code in meissa-polaris-pulsar-stop (npm) (malicious package)
- [MAL-2025-187974](https://insights.sbomify.com/MAL-2025-187974/): Malicious code in meissa-perseus-eslint-europa (npm) (malicious package)
- [MAL-2025-187973](https://insights.sbomify.com/MAL-2025-187973/): Malicious code in meissa-pavo-asthenosphere-aurora (npm) (malicious package)
- [MAL-2025-187972](https://insights.sbomify.com/MAL-2025-187972/): Malicious code in meissa-optimize-css-assets-webpack-plugin-express-lint-staged (npm) (malicious package)
- [MAL-2025-187971](https://insights.sbomify.com/MAL-2025-187971/): Malicious code in meissa-markdown-iota-vortex (npm) (malicious package)
- [MAL-2025-187970](https://insights.sbomify.com/MAL-2025-187970/): Malicious code in meissa-hermes-callisto-sails (npm) (malicious package)
- [MAL-2025-18797](https://insights.sbomify.com/MAL-2025-18797/): Malicious code in drift-y8wyg-l9zy5-xanadu-project (npm) (malicious package)
- [MAL-2025-187969](https://insights.sbomify.com/MAL-2025-187969/): Malicious code in meissa-gemini-jupiter-heliophysics (npm) (malicious package)
- [MAL-2025-187968](https://insights.sbomify.com/MAL-2025-187968/): Malicious code in meissa-foundation-plutology-async (npm) (malicious package)
- [MAL-2025-187967](https://insights.sbomify.com/MAL-2025-187967/): Malicious code in meissa-ethology-centauri-fork (npm) (malicious package)
- [MAL-2025-187966](https://insights.sbomify.com/MAL-2025-187966/): Malicious code in meissa-duplex-request-install (npm) (malicious package)
- [MAL-2025-187965](https://insights.sbomify.com/MAL-2025-187965/): Malicious code in meissa-avior-singularity-dione (npm) (malicious package)
- [MAL-2025-187964](https://insights.sbomify.com/MAL-2025-187964/): Malicious code in mechatronics-xenos-fomalhaut-antimatter (npm) (malicious package)
- [MAL-2025-187963](https://insights.sbomify.com/MAL-2025-187963/): Malicious code in mechatronics-quantum-jekyll-jabbah (npm) (malicious package)
- [MAL-2025-187962](https://insights.sbomify.com/MAL-2025-187962/): Malicious code in mechatronics-helmet-auth-xo (npm) (malicious package)
- [MAL-2025-187961](https://insights.sbomify.com/MAL-2025-187961/): Malicious code in mechatronics-deneb-bunyan-radiant (npm) (malicious package)
- [MAL-2025-187960](https://insights.sbomify.com/MAL-2025-187960/): Malicious code in mechatronics-boson-quasarjet-wolf (npm) (malicious package)
- [MAL-2025-18796](https://insights.sbomify.com/MAL-2025-18796/): Malicious code in drift-xzrj7-8xzcb-song-project (npm) (malicious package)
- [MAL-2025-187959](https://insights.sbomify.com/MAL-2025-187959/): Malicious code in mechatronics-borealis-tardigrade-init (npm) (malicious package)
- [MAL-2025-187958](https://insights.sbomify.com/MAL-2025-187958/): Malicious code in mechatronics-augmentedreality-hapi-jupiter (npm) (malicious package)
- [MAL-2025-187957](https://insights.sbomify.com/MAL-2025-187957/): Malicious code in mechatronics-arcturus-puppeteer-capella (npm) (malicious package)
- [MAL-2025-187956](https://insights.sbomify.com/MAL-2025-187956/): Malicious code in mdx-zenobia-altair-colors (npm) (malicious package)
- [MAL-2025-187955](https://insights.sbomify.com/MAL-2025-187955/): Malicious code in mdx-resonance-cryonics-geochemistry (npm) (malicious package)
- [MAL-2025-187954](https://insights.sbomify.com/MAL-2025-187954/): Malicious code in mdx-kaus-browserify-deimos (npm) (malicious package)
- [MAL-2025-187953](https://insights.sbomify.com/MAL-2025-187953/): Malicious code in mdx-hyperion-taurus-antimatter (npm) (malicious package)
- [MAL-2025-187952](https://insights.sbomify.com/MAL-2025-187952/): Malicious code in mdx-development-elara-stratosphere (npm) (malicious package)
- [MAL-2025-187951](https://insights.sbomify.com/MAL-2025-187951/): Malicious code in mdx-coronalmassejection-tardigrade-paleobotany (npm) (malicious package)
- [MAL-2025-187950](https://insights.sbomify.com/MAL-2025-187950/): Malicious code in mdx-cluster-oberon-terser (npm) (malicious package)
- [MAL-2025-18795](https://insights.sbomify.com/MAL-2025-18795/): Malicious code in drift-vyo0u-w3ibw-nymph-project (npm) (malicious package)
- [MAL-2025-187949](https://insights.sbomify.com/MAL-2025-187949/): Malicious code in mdx-callisto-multiverse-achernar (npm) (malicious package)
- [MAL-2025-187948](https://insights.sbomify.com/MAL-2025-187948/): Malicious code in materialize-stop-quasar-outercore (npm) (malicious package)
- [MAL-2025-187947](https://insights.sbomify.com/MAL-2025-187947/): Malicious code in materialize-repository-dione-aquarius (npm) (malicious package)
- [MAL-2025-187946](https://insights.sbomify.com/MAL-2025-187946/): Malicious code in materialize-prosthetics-petrology-resonance (npm) (malicious package)
- [MAL-2025-187945](https://insights.sbomify.com/MAL-2025-187945/): Malicious code in materialize-pegasus-typeorm-ursa (npm) (malicious package)
- [MAL-2025-187944](https://insights.sbomify.com/MAL-2025-187944/): Malicious code in materialize-magnetar-paleontology-cosmochemistry (npm) (malicious package)
- [MAL-2025-187943](https://insights.sbomify.com/MAL-2025-187943/): Malicious code in materialize-framework-electron-builder-enceladus (npm) (malicious package)
- [MAL-2025-187942](https://insights.sbomify.com/MAL-2025-187942/): Malicious code in materialize-dotenv-safe-sublimation-meteor (npm) (malicious package)
- [MAL-2025-187941](https://insights.sbomify.com/MAL-2025-187941/): Malicious code in materialize-docusaurus-oauth-centaurus (npm) (malicious package)
- [MAL-2025-187940](https://insights.sbomify.com/MAL-2025-187940/): Malicious code in materialize-cache-neptune-cosmogenic (npm) (malicious package)
- [MAL-2025-18794](https://insights.sbomify.com/MAL-2025-18794/): Malicious code in drift-utwan-znenv-jewel-project (npm) (malicious package)
- [MAL-2025-187939](https://insights.sbomify.com/MAL-2025-187939/): Malicious code in markdownlint-subscription-changelog-socketio (npm) (malicious package)
- [MAL-2025-187938](https://insights.sbomify.com/MAL-2025-187938/): Malicious code in markdownlint-rollup-loglevel-toml (npm) (malicious package)
- [MAL-2025-187937](https://insights.sbomify.com/MAL-2025-187937/): Malicious code in markdown-relay-optimize-css-assets-webpack-plugin-neutrino (npm) (malicious package)
- [MAL-2025-187936](https://insights.sbomify.com/MAL-2025-187936/): Malicious code in markdown-proxima-markdown-geckodriver (npm) (malicious package)
- [MAL-2025-187935](https://insights.sbomify.com/MAL-2025-187935/): Malicious code in markdown-prettier-frontend-avior (npm) (malicious package)
- [MAL-2025-187934](https://insights.sbomify.com/MAL-2025-187934/): Malicious code in markdown-pdf-mdx-build-config (npm) (malicious package)
- [MAL-2025-187933](https://insights.sbomify.com/MAL-2025-187933/): Malicious code in markdown-pdf-jsonp-brane-cross-env (npm) (malicious package)
- [MAL-2025-187932](https://insights.sbomify.com/MAL-2025-187932/): Malicious code in markdown-pdf-draco-kuiperbelt-tethys (npm) (malicious package)
- [MAL-2025-187931](https://insights.sbomify.com/MAL-2025-187931/): Malicious code in markdown-pdf-boson-magnetosphere-paleontology (npm) (malicious package)
- [MAL-2025-187930](https://insights.sbomify.com/MAL-2025-187930/): Malicious code in markdown-pdf-auth-neptune-optimize-css-assets-webpack-plugin (npm) (malicious package)
- [MAL-2025-18793](https://insights.sbomify.com/MAL-2025-18793/): Malicious code in drift-unity-aah846-project (npm) (malicious package)
- [MAL-2025-187929](https://insights.sbomify.com/MAL-2025-187929/): Malicious code in markdown-paleontology-antares-quantum (npm) (malicious package)
- [MAL-2025-187928](https://insights.sbomify.com/MAL-2025-187928/): Malicious code in markdown-nconf-string-xerxes (npm) (malicious package)
- [MAL-2025-187927](https://insights.sbomify.com/MAL-2025-187927/): Malicious code in markdown-multiverse-vuepress-geoarchaeology (npm) (malicious package)
- [MAL-2025-187926](https://insights.sbomify.com/MAL-2025-187926/): Malicious code in markdown-less-loader-joviology-fetch (npm) (malicious package)
- [MAL-2025-187925](https://insights.sbomify.com/MAL-2025-187925/): Malicious code in markdown-electron-europa-markdownlint (npm) (malicious package)
- [MAL-2025-187924](https://insights.sbomify.com/MAL-2025-187924/): Malicious code in markdown-dotenv-whitedwarf-decoherence (npm) (malicious package)
- [MAL-2025-187923](https://insights.sbomify.com/MAL-2025-187923/): Malicious code in markdown-cz-conventional-changelog-link-proxima (npm) (malicious package)
- [MAL-2025-187922](https://insights.sbomify.com/MAL-2025-187922/): Malicious code in markdown-cors-janus-dotenv-parse-variables (npm) (malicious package)
- [MAL-2025-187921](https://insights.sbomify.com/MAL-2025-187921/): Malicious code in mantle-private-mineralogy-morgan (npm) (malicious package)
- [MAL-2025-187920](https://insights.sbomify.com/MAL-2025-187920/): Malicious code in mantle-mini-css-extract-plugin-singularitarianism-areology (npm) (malicious package)
- [MAL-2025-18792](https://insights.sbomify.com/MAL-2025-18792/): Malicious code in drift-pc4dk-vjn11-flora-project (npm) (malicious package)
- [MAL-2025-187919](https://insights.sbomify.com/MAL-2025-187919/): Malicious code in mantle-galaxy-vuetify-pm2 (npm) (malicious package)
- [MAL-2025-187918](https://insights.sbomify.com/MAL-2025-187918/): Malicious code in mantle-asteroid-charon-quasar (npm) (malicious package)
- [MAL-2025-187917](https://insights.sbomify.com/MAL-2025-187917/): Malicious code in mantle-achernar-kinetic-whitedwarf (npm) (malicious package)
- [MAL-2025-187916](https://insights.sbomify.com/MAL-2025-187916/): Malicious code in magnetosphere-quito-isostasy-despina (npm) (malicious package)
- [MAL-2025-187915](https://insights.sbomify.com/MAL-2025-187915/): Malicious code in magnetosphere-procyon-neutronstar-cli (npm) (malicious package)
- [MAL-2025-187914](https://insights.sbomify.com/MAL-2025-187914/): Malicious code in magnetosphere-hydra-aurora-hyperion (npm) (malicious package)
- [MAL-2025-187913](https://insights.sbomify.com/MAL-2025-187913/): Malicious code in magnetosphere-exec-hyperion-spinner (npm) (malicious package)
- [MAL-2025-187912](https://insights.sbomify.com/MAL-2025-187912/): Malicious code in magnetar-thermosphere-nconf-quantum (npm) (malicious package)
- [MAL-2025-187911](https://insights.sbomify.com/MAL-2025-187911/): Malicious code in magnetar-palynology-uranology-blackhole (npm) (malicious package)
- [MAL-2025-187910](https://insights.sbomify.com/MAL-2025-187910/): Malicious code in magnetar-paleoecology-tectonic-yaml (npm) (malicious package)
- [MAL-2025-18791](https://insights.sbomify.com/MAL-2025-18791/): Malicious code in drift-p0kij-n1y8l-plume-project (npm) (malicious package)
- [MAL-2025-187909](https://insights.sbomify.com/MAL-2025-187909/): Malicious code in magnetar-geochemistry-remark-repository (npm) (malicious package)
- [MAL-2025-187908](https://insights.sbomify.com/MAL-2025-187908/): Malicious code in magnetar-eridanus-middleware-update (npm) (malicious package)
- [MAL-2025-187907](https://insights.sbomify.com/MAL-2025-187907/): Malicious code in magellan-vega-phoenix-hydrogeology (npm) (malicious package)
- [MAL-2025-187906](https://insights.sbomify.com/MAL-2025-187906/): Malicious code in magellan-transport-auth0-pulsar (npm) (malicious package)
- [MAL-2025-187905](https://insights.sbomify.com/MAL-2025-187905/): Malicious code in magellan-neptunology-extremophile-janus (npm) (malicious package)
- [MAL-2025-187904](https://insights.sbomify.com/MAL-2025-187904/): Malicious code in magellan-hyperion-gridsome-electron-builder (npm) (malicious package)
- [MAL-2025-187903](https://insights.sbomify.com/MAL-2025-187903/): Malicious code in magellan-gravity-solarnebula-dotenv-safe (npm) (malicious package)
- [MAL-2025-187902](https://insights.sbomify.com/MAL-2025-187902/): Malicious code in magellan-gammarayburst-passport-antares (npm) (malicious package)
- [MAL-2025-187901](https://insights.sbomify.com/MAL-2025-187901/): Malicious code in magellan-fornax-chai-test (npm) (malicious package)
- [MAL-2025-187900](https://insights.sbomify.com/MAL-2025-187900/): Malicious code in magellan-enif-oauth-sirius (npm) (malicious package)
- [MAL-2025-18790](https://insights.sbomify.com/MAL-2025-18790/): Malicious code in drift-nxt31-10nj7-hearth-project (npm) (malicious package)
- [MAL-2025-1879](https://insights.sbomify.com/MAL-2025-1879/): Malicious code in linkedin-service (npm) (malicious package)
- [MAL-2025-187899](https://insights.sbomify.com/MAL-2025-187899/): Malicious code in magellan-bootes-resonance-sedna (npm) (malicious package)
- [MAL-2025-187898](https://insights.sbomify.com/MAL-2025-187898/): Malicious code in magellan-blaze-archaeometry-slides (npm) (malicious package)
- [MAL-2025-187897](https://insights.sbomify.com/MAL-2025-187897/): Malicious code in magellan-augmentedreality-webdriver-mocha-blitz (npm) (malicious package)
- [MAL-2025-187896](https://insights.sbomify.com/MAL-2025-187896/): Malicious code in magellan-astro-webdriverio-enceladus (npm) (malicious package)
- [MAL-2025-187895](https://insights.sbomify.com/MAL-2025-187895/): Malicious code in lyra-xanthus-csrf-pm2 (npm) (malicious package)
- [MAL-2025-187894](https://insights.sbomify.com/MAL-2025-187894/): Malicious code in lyra-warp-dactyl-interferometry (npm) (malicious package)
- [MAL-2025-187893](https://insights.sbomify.com/MAL-2025-187893/): Malicious code in lyra-taphonomy-fusion-exosphere (npm) (malicious package)
- [MAL-2025-187892](https://insights.sbomify.com/MAL-2025-187892/): Malicious code in lyra-nebula-node-config-terser-webpack-plugin (npm) (malicious package)
- [MAL-2025-187891](https://insights.sbomify.com/MAL-2025-187891/): Malicious code in lyra-janus-spectron-rigel (npm) (malicious package)
- [MAL-2025-187890](https://insights.sbomify.com/MAL-2025-187890/): Malicious code in lyra-fomalhaut-arcturus-enceladus (npm) (malicious package)
- [MAL-2025-18789](https://insights.sbomify.com/MAL-2025-18789/): Malicious code in drift-l6wo9-q2f2a-oracle-project (npm) (malicious package)
- [MAL-2025-187889](https://insights.sbomify.com/MAL-2025-187889/): Malicious code in lyra-cryovolcano-mongoose-multiverse (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/955/