# Vulnerabilities published in 2025


- [MAL-2025-187888](https://insights.sbomify.com/MAL-2025-187888/): Malicious code in lyra-archaeoastronomy-graviton-altair (npm) (malicious package)
- [MAL-2025-187887](https://insights.sbomify.com/MAL-2025-187887/): Malicious code in lynx-supervisor-relay-loop (npm) (malicious package)
- [MAL-2025-187886](https://insights.sbomify.com/MAL-2025-187886/): Malicious code in lynx-phoebe-alphard-betelgeuse (npm) (malicious package)
- [MAL-2025-187885](https://insights.sbomify.com/MAL-2025-187885/): Malicious code in lynx-nashira-heliophysics-solis (npm) (malicious package)
- [MAL-2025-187884](https://insights.sbomify.com/MAL-2025-187884/): Malicious code in lynx-foundation-astroinformatics-geckodriver (npm) (malicious package)
- [MAL-2025-187883](https://insights.sbomify.com/MAL-2025-187883/): Malicious code in lynx-astrobiology-exobiology-plutology (npm) (malicious package)
- [MAL-2025-187882](https://insights.sbomify.com/MAL-2025-187882/): Malicious code in luna-zephyr-hugo-fusion (npm) (malicious package)
- [MAL-2025-187881](https://insights.sbomify.com/MAL-2025-187881/): Malicious code in luna-xanadu-aquarius-barnard (npm) (malicious package)
- [MAL-2025-187880](https://insights.sbomify.com/MAL-2025-187880/): Malicious code in luna-sequelize-markdown-pdf-meissa (npm) (malicious package)
- [MAL-2025-18788](https://insights.sbomify.com/MAL-2025-18788/): Malicious code in drift-bse2r-92omp-zephyr-project (npm) (malicious package)
- [MAL-2025-187879](https://insights.sbomify.com/MAL-2025-187879/): Malicious code in luna-mira-eslint-wezen (npm) (malicious package)
- [MAL-2025-187878](https://insights.sbomify.com/MAL-2025-187878/): Malicious code in luna-local-optimize-css-assets-webpack-plugin-postgres (npm) (malicious package)
- [MAL-2025-187877](https://insights.sbomify.com/MAL-2025-187877/): Malicious code in luna-cordelia-blackhole-lithosphere (npm) (malicious package)
- [MAL-2025-187876](https://insights.sbomify.com/MAL-2025-187876/): Malicious code in luminescence-pino-superagent-axios (npm) (malicious package)
- [MAL-2025-187875](https://insights.sbomify.com/MAL-2025-187875/): Malicious code in luminescence-meteor-elara-oortcloud (npm) (malicious package)
- [MAL-2025-187874](https://insights.sbomify.com/MAL-2025-187874/): Malicious code in luminescence-colors-resonance-publish (npm) (malicious package)
- [MAL-2025-187873](https://insights.sbomify.com/MAL-2025-187873/): Malicious code in luminescence-chai-cryonics-eclipse (npm) (malicious package)
- [MAL-2025-187872](https://insights.sbomify.com/MAL-2025-187872/): Malicious code in luminescence-achernar-promise-nuxtjs (npm) (malicious package)
- [MAL-2025-187871](https://insights.sbomify.com/MAL-2025-187871/): Malicious code in loopback-tethys-airbnb-typeorm (npm) (malicious package)
- [MAL-2025-187870](https://insights.sbomify.com/MAL-2025-187870/): Malicious code in loopback-remark-cordelia-commitlint (npm) (malicious package)
- [MAL-2025-18787](https://insights.sbomify.com/MAL-2025-18787/): Malicious code in drift-4sof4-88og5-harp-project (npm) (malicious package)
- [MAL-2025-187869](https://insights.sbomify.com/MAL-2025-187869/): Malicious code in loopback-magellan-foundation-csrf (npm) (malicious package)
- [MAL-2025-187868](https://insights.sbomify.com/MAL-2025-187868/): Malicious code in loop-webdriverio-vulcan-proxima (npm) (malicious package)
- [MAL-2025-187867](https://insights.sbomify.com/MAL-2025-187867/): Malicious code in loop-wasat-chai-equinox (npm) (malicious package)
- [MAL-2025-187866](https://insights.sbomify.com/MAL-2025-187866/): Malicious code in loop-quito-hyperion-centauri (npm) (malicious package)
- [MAL-2025-187865](https://insights.sbomify.com/MAL-2025-187865/): Malicious code in loop-mysql-jwt-jekyll (npm) (malicious package)
- [MAL-2025-187864](https://insights.sbomify.com/MAL-2025-187864/): Malicious code in loop-cosmos-perturbation-andromeda (npm) (malicious package)
- [MAL-2025-187863](https://insights.sbomify.com/MAL-2025-187863/): Malicious code in loop-cosmicray-repository-entanglement (npm) (malicious package)
- [MAL-2025-187862](https://insights.sbomify.com/MAL-2025-187862/): Malicious code in long-zero-rain-daemon-refactor (npm) (malicious package)
- [MAL-2025-187861](https://insights.sbomify.com/MAL-2025-187861/): Malicious code in long-sigma-authenticate-alpha-analyze (npm) (malicious package)
- [MAL-2025-187860](https://insights.sbomify.com/MAL-2025-187860/): Malicious code in long-nu-new-nu-cache (npm) (malicious package)
- [MAL-2025-18786](https://insights.sbomify.com/MAL-2025-18786/): Malicious code in dridrigelatoapp (npm) (malicious package)
- [MAL-2025-187859](https://insights.sbomify.com/MAL-2025-187859/): Malicious code in long-new-report-analyze-permission (npm) (malicious package)
- [MAL-2025-187858](https://insights.sbomify.com/MAL-2025-187858/): Malicious code in long-module-report-abstract-alpha (npm) (malicious package)
- [MAL-2025-187857](https://insights.sbomify.com/MAL-2025-187857/): Malicious code in long-final-minify-load-tree (npm) (malicious package)
- [MAL-2025-187856](https://insights.sbomify.com/MAL-2025-187856/): Malicious code in long-class-report-grep-catch (npm) (malicious package)
- [MAL-2025-187855](https://insights.sbomify.com/MAL-2025-187855/): Malicious code in long-boolean-table-compress-tree (npm) (malicious package)
- [MAL-2025-187854](https://insights.sbomify.com/MAL-2025-187854/): Malicious code in long-alpha-code-sun-table (npm) (malicious package)
- [MAL-2025-187853](https://insights.sbomify.com/MAL-2025-187853/): Malicious code in loglevel-testcafe-spectron-leda (npm) (malicious package)
- [MAL-2025-187852](https://insights.sbomify.com/MAL-2025-187852/): Malicious code in loglevel-selenium-process-mongoose (npm) (malicious package)
- [MAL-2025-187851](https://insights.sbomify.com/MAL-2025-187851/): Malicious code in loglevel-meteor-mui-version (npm) (malicious package)
- [MAL-2025-187850](https://insights.sbomify.com/MAL-2025-187850/): Malicious code in loglevel-hyperion-bootstrap-mysql (npm) (malicious package)
- [MAL-2025-18785](https://insights.sbomify.com/MAL-2025-18785/): Malicious code in drforms (npm) (malicious package)
- [MAL-2025-187849](https://insights.sbomify.com/MAL-2025-187849/): Malicious code in loglevel-exobiology-eslint-config-rate-limiter (npm) (malicious package)
- [MAL-2025-187848](https://insights.sbomify.com/MAL-2025-187848/): Malicious code in loglevel-event-resonance-umbriel (npm) (malicious package)
- [MAL-2025-187847](https://insights.sbomify.com/MAL-2025-187847/): Malicious code in log-slow-debug-zero-report (npm) (malicious package)
- [MAL-2025-187846](https://insights.sbomify.com/MAL-2025-187846/): Malicious code in log-info-good-promise-user (npm) (malicious package)
- [MAL-2025-187845](https://insights.sbomify.com/MAL-2025-187845/): Malicious code in log-delta-daemon-finally-minify (npm) (malicious package)
- [MAL-2025-187844](https://insights.sbomify.com/MAL-2025-187844/): Malicious code in log-cron-execute-small-signal (npm) (malicious package)
- [MAL-2025-187843](https://insights.sbomify.com/MAL-2025-187843/): Malicious code in log-byte-cluster-uglify-error (npm) (malicious package)
- [MAL-2025-187842](https://insights.sbomify.com/MAL-2025-187842/): Malicious code in local-ursa-karma-mysql (npm) (malicious package)
- [MAL-2025-187841](https://insights.sbomify.com/MAL-2025-187841/): Malicious code in local-terser-postcss-loader-eventhoriz (npm) (malicious package)
- [MAL-2025-187840](https://insights.sbomify.com/MAL-2025-187840/): Malicious code in local-lyra-cli-rimraf (npm) (malicious package)
- [MAL-2025-18784](https://insights.sbomify.com/MAL-2025-18784/): Malicious code in dreampy (npm) (malicious package)
- [MAL-2025-187839](https://insights.sbomify.com/MAL-2025-187839/): Malicious code in local-kaus-wolf-local (npm) (malicious package)
- [MAL-2025-187838](https://insights.sbomify.com/MAL-2025-187838/): Malicious code in local-jasmine-gammarayburst-delphinus (npm) (malicious package)
- [MAL-2025-187837](https://insights.sbomify.com/MAL-2025-187837/): Malicious code in local-farout-transform-chai (npm) (malicious package)
- [MAL-2025-187836](https://insights.sbomify.com/MAL-2025-187836/): Malicious code in local-cz-conventional-changelog-cosmos-quark (npm) (malicious package)
- [MAL-2025-187835](https://insights.sbomify.com/MAL-2025-187835/): Malicious code in local-astrobiology-magellan-airbnb (npm) (malicious package)
- [MAL-2025-187834](https://insights.sbomify.com/MAL-2025-187834/): Malicious code in local-astro-inquirer-neptune (npm) (malicious package)
- [MAL-2025-187833](https://insights.sbomify.com/MAL-2025-187833/): Malicious code in local-ariel-elara-schema (npm) (malicious package)
- [MAL-2025-187832](https://insights.sbomify.com/MAL-2025-187832/): Malicious code in load-wind-root-balance-file (npm) (malicious package)
- [MAL-2025-187831](https://insights.sbomify.com/MAL-2025-187831/): Malicious code in load-protected-file-index-analyze (npm) (malicious package)
- [MAL-2025-187830](https://insights.sbomify.com/MAL-2025-187830/): Malicious code in load-integer-wind-byte-key (npm) (malicious package)
- [MAL-2025-18783](https://insights.sbomify.com/MAL-2025-18783/): Malicious code in dreamerq (npm) (malicious package)
- [MAL-2025-187829](https://insights.sbomify.com/MAL-2025-187829/): Malicious code in load-float-omega-char-mock (npm) (malicious package)
- [MAL-2025-187828](https://insights.sbomify.com/MAL-2025-187828/): Malicious code in load-fire-balance-try-old (npm) (malicious package)
- [MAL-2025-187827](https://insights.sbomify.com/MAL-2025-187827/): Malicious code in load-abstract-final-static-pipe (npm) (malicious package)
- [MAL-2025-187826](https://insights.sbomify.com/MAL-2025-187826/): Malicious code in lithosphere-quark-mesosphere-cache (npm) (malicious package)
- [MAL-2025-187825](https://insights.sbomify.com/MAL-2025-187825/): Malicious code in lithosphere-pegasus-jest-paleoecology (npm) (malicious package)
- [MAL-2025-187824](https://insights.sbomify.com/MAL-2025-187824/): Malicious code in lithosphere-markdown-pdf-winston-neptune (npm) (malicious package)
- [MAL-2025-187823](https://insights.sbomify.com/MAL-2025-187823/): Malicious code in lithosphere-inflation-antimatter-europa (npm) (malicious package)
- [MAL-2025-187822](https://insights.sbomify.com/MAL-2025-187822/): Malicious code in lithosphere-geodynamo-mui-robotics (npm) (malicious package)
- [MAL-2025-187821](https://insights.sbomify.com/MAL-2025-187821/): Malicious code in lithosphere-changelog-grunt-uglify-js (npm) (malicious package)
- [MAL-2025-187820](https://insights.sbomify.com/MAL-2025-187820/): Malicious code in lithosphere-buffer-jwt-prettier (npm) (malicious package)
- [MAL-2025-18782](https://insights.sbomify.com/MAL-2025-18782/): Malicious code in dreamedit (npm) (malicious package)
- [MAL-2025-187819](https://insights.sbomify.com/MAL-2025-187819/): Malicious code in lithosphere-browserify-express-spectron (npm) (malicious package)
- [MAL-2025-187818](https://insights.sbomify.com/MAL-2025-187818/): Malicious code in lint-staged-tailwindcss-altair-dotenv-safe (npm) (malicious package)
- [MAL-2025-187817](https://insights.sbomify.com/MAL-2025-187817/): Malicious code in lint-staged-superagent-eridanus-bionics (npm) (malicious package)
- [MAL-2025-187816](https://insights.sbomify.com/MAL-2025-187816/): Malicious code in lint-staged-reveal-md-electron-convict (npm) (malicious package)
- [MAL-2025-187815](https://insights.sbomify.com/MAL-2025-187815/): Malicious code in lint-staged-lint-staged-auth-terser-webpack-plugin (npm) (malicious package)
- [MAL-2025-187814](https://insights.sbomify.com/MAL-2025-187814/): Malicious code in lint-staged-javascript-jwt-zooarchaeology (npm) (malicious package)
- [MAL-2025-187813](https://insights.sbomify.com/MAL-2025-187813/): Malicious code in lint-staged-inquirer-transport-hawkingradiation (npm) (malicious package)
- [MAL-2025-187812](https://insights.sbomify.com/MAL-2025-187812/): Malicious code in lint-staged-gemini-aquarius-superagent (npm) (malicious package)
- [MAL-2025-187811](https://insights.sbomify.com/MAL-2025-187811/): Malicious code in lint-remark-meteor-neptune (npm) (malicious package)
- [MAL-2025-187810](https://insights.sbomify.com/MAL-2025-187810/): Malicious code in lint-nuxtjs-babel-socketio (npm) (malicious package)
- [MAL-2025-18781](https://insights.sbomify.com/MAL-2025-18781/): Malicious code in dream_xzdal_p03yl_yonder (npm) (malicious package)
- [MAL-2025-187809](https://insights.sbomify.com/MAL-2025-187809/): Malicious code in lint-markdownlint-sedimentology-winston (npm) (malicious package)
- [MAL-2025-187808](https://insights.sbomify.com/MAL-2025-187808/): Malicious code in lint-loop-playwright-publish (npm) (malicious package)
- [MAL-2025-187807](https://insights.sbomify.com/MAL-2025-187807/): Malicious code in lint-less-loader-jekyll-virgo (npm) (malicious package)
- [MAL-2025-187806](https://insights.sbomify.com/MAL-2025-187806/): Malicious code in lint-janus-juno-blueshift (npm) (malicious package)
- [MAL-2025-187805](https://insights.sbomify.com/MAL-2025-187805/): Malicious code in lint-isostasy-altair-less-loader (npm) (malicious package)
- [MAL-2025-187804](https://insights.sbomify.com/MAL-2025-187804/): Malicious code in lint-cassini-metalsmith-jupiter (npm) (malicious package)
- [MAL-2025-187803](https://insights.sbomify.com/MAL-2025-187803/): Malicious code in lint-auth0-joviology-jovian (npm) (malicious package)
- [MAL-2025-187802](https://insights.sbomify.com/MAL-2025-187802/): Malicious code in lint-antares-luna-nashira (npm) (malicious package)
- [MAL-2025-187801](https://insights.sbomify.com/MAL-2025-187801/): Malicious code in link-user-awk-bundle-throw (npm) (malicious package)
- [MAL-2025-187800](https://insights.sbomify.com/MAL-2025-187800/): Malicious code in link-upsilon-link-kappa-compress (npm) (malicious package)
- [MAL-2025-18780](https://insights.sbomify.com/MAL-2025-18780/): Malicious code in dream_t8rsq_6zttd_kryptonite (npm) (malicious package)
- [MAL-2025-1878](https://insights.sbomify.com/MAL-2025-1878/): Malicious code in linkedin-sdk (npm) (malicious package)
- [MAL-2025-187799](https://insights.sbomify.com/MAL-2025-187799/): Malicious code in link-uglify-js-fermiparadox-auth (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/956/