# Vulnerabilities published in 2025


- [MAL-2025-187798](https://insights.sbomify.com/MAL-2025-187798/): Malicious code in link-typeorm-nebula-eigenstate (npm) (malicious package)
- [MAL-2025-187797](https://insights.sbomify.com/MAL-2025-187797/): Malicious code in link-theta-float-class-balance (npm) (malicious package)
- [MAL-2025-187796](https://insights.sbomify.com/MAL-2025-187796/): Malicious code in link-slidev-dione-markdown-pdf (npm) (malicious package)
- [MAL-2025-187795](https://insights.sbomify.com/MAL-2025-187795/): Malicious code in link-sedna-paleomagnetism-npm (npm) (malicious package)
- [MAL-2025-187794](https://insights.sbomify.com/MAL-2025-187794/): Malicious code in link-sadr-helios-pulsar (npm) (malicious package)
- [MAL-2025-187793](https://insights.sbomify.com/MAL-2025-187793/): Malicious code in link-loopback-hydrogeology-gacrux (npm) (malicious package)
- [MAL-2025-187792](https://insights.sbomify.com/MAL-2025-187792/): Malicious code in link-leda-odin-fetch (npm) (malicious package)
- [MAL-2025-187791](https://insights.sbomify.com/MAL-2025-187791/): Malicious code in link-emulate-double-table-book (npm) (malicious package)
- [MAL-2025-187790](https://insights.sbomify.com/MAL-2025-187790/): Malicious code in link-cron-simulate-assert-log (npm) (malicious package)
- [MAL-2025-18779](https://insights.sbomify.com/MAL-2025-18779/): Malicious code in dream_pu36t_xpc65_crystal (npm) (malicious package)
- [MAL-2025-187789](https://insights.sbomify.com/MAL-2025-187789/): Malicious code in link-cold-file-mock-info (npm) (malicious package)
- [MAL-2025-187788](https://insights.sbomify.com/MAL-2025-187788/): Malicious code in link-cat-fork-char-easy (npm) (malicious package)
- [MAL-2025-187787](https://insights.sbomify.com/MAL-2025-187787/): Malicious code in link-astrometry-gulp-transhumanism (npm) (malicious package)
- [MAL-2025-187786](https://insights.sbomify.com/MAL-2025-187786/): Malicious code in lightyear-ichnology-transform-phoebe (npm) (malicious package)
- [MAL-2025-187785](https://insights.sbomify.com/MAL-2025-187785/): Malicious code in lightyear-cors-quasar-procyon (npm) (malicious package)
- [MAL-2025-187784](https://insights.sbomify.com/MAL-2025-187784/): Malicious code in library-volcanology-magnetosphere-foundation (npm) (malicious package)
- [MAL-2025-187783](https://insights.sbomify.com/MAL-2025-187783/): Malicious code in library-update-commitizen-jabbah (npm) (malicious package)
- [MAL-2025-187782](https://insights.sbomify.com/MAL-2025-187782/): Malicious code in library-supernova-eigenstate-juno (npm) (malicious package)
- [MAL-2025-187781](https://insights.sbomify.com/MAL-2025-187781/): Malicious code in library-nebula-rest-local (npm) (malicious package)
- [MAL-2025-187780](https://insights.sbomify.com/MAL-2025-187780/): Malicious code in library-kronos-start-ceres (npm) (malicious package)
- [MAL-2025-18778](https://insights.sbomify.com/MAL-2025-18778/): Malicious code in dream_lv7pd_x736k_jungle (npm) (malicious package)
- [MAL-2025-187779](https://insights.sbomify.com/MAL-2025-187779/): Malicious code in library-frontend-update-eclipse (npm) (malicious package)
- [MAL-2025-187778](https://insights.sbomify.com/MAL-2025-187778/): Malicious code in library-fetch-hyperion-vortex (npm) (malicious package)
- [MAL-2025-187777](https://insights.sbomify.com/MAL-2025-187777/): Malicious code in library-dotenv-safe-gridsome-singularity (npm) (malicious package)
- [MAL-2025-187776](https://insights.sbomify.com/MAL-2025-187776/): Malicious code in library-capella-tectonic-child-process (npm) (malicious package)
- [MAL-2025-187775](https://insights.sbomify.com/MAL-2025-187775/): Malicious code in library-biosignature-bionics-mocha (npm) (malicious package)
- [MAL-2025-187774](https://insights.sbomify.com/MAL-2025-187774/): Malicious code in library-bellatrix-cli-cors (npm) (malicious package)
- [MAL-2025-187773](https://insights.sbomify.com/MAL-2025-187773/): Malicious code in library-babel-meteor-kronos (npm) (malicious package)
- [MAL-2025-187772](https://insights.sbomify.com/MAL-2025-187772/): Malicious code in library-archaeoastronomy-winston-spica (npm) (malicious package)
- [MAL-2025-187771](https://insights.sbomify.com/MAL-2025-187771/): Malicious code in library-alphard-nova-planetology (npm) (malicious package)
- [MAL-2025-187770](https://insights.sbomify.com/MAL-2025-187770/): Malicious code in levels-paleoecology-blackhole-abiogenesis (npm) (malicious package)
- [MAL-2025-18777](https://insights.sbomify.com/MAL-2025-18777/): Malicious code in dream_lnxur_chfj1_xenon (npm) (malicious package)
- [MAL-2025-187769](https://insights.sbomify.com/MAL-2025-187769/): Malicious code in levels-lacerta-entanglement-entanglement (npm) (malicious package)
- [MAL-2025-187768](https://insights.sbomify.com/MAL-2025-187768/): Malicious code in levels-jsonp-iota-abiogenesis (npm) (malicious package)
- [MAL-2025-187767](https://insights.sbomify.com/MAL-2025-187767/): Malicious code in levels-event-bionics-nodejs (npm) (malicious package)
- [MAL-2025-187766](https://insights.sbomify.com/MAL-2025-187766/): Malicious code in levels-eris-ora-hydra (npm) (malicious package)
- [MAL-2025-187765](https://insights.sbomify.com/MAL-2025-187765/): Malicious code in levels-convict-json-dynamo (npm) (malicious package)
- [MAL-2025-187764](https://insights.sbomify.com/MAL-2025-187764/): Malicious code in levels-await-postcss-comet (npm) (malicious package)
- [MAL-2025-187763](https://insights.sbomify.com/MAL-2025-187763/): Malicious code in less-radiometric-hydra-xml (npm) (malicious package)
- [MAL-2025-187762](https://insights.sbomify.com/MAL-2025-187762/): Malicious code in less-prettier-stylelint-warp-telesto (npm) (malicious package)
- [MAL-2025-187761](https://insights.sbomify.com/MAL-2025-187761/): Malicious code in less-pavo-restart-start (npm) (malicious package)
- [MAL-2025-187760](https://insights.sbomify.com/MAL-2025-187760/): Malicious code in less-mineralogy-airbnb-tardigrade (npm) (malicious package)
- [MAL-2025-18776](https://insights.sbomify.com/MAL-2025-18776/): Malicious code in dream_cd1eo_7m6cb_honey (npm) (malicious package)
- [MAL-2025-187759](https://insights.sbomify.com/MAL-2025-187759/): Malicious code in less-loader-sedna-blaze-commitizen (npm) (malicious package)
- [MAL-2025-187758](https://insights.sbomify.com/MAL-2025-187758/): Malicious code in less-loader-rocket-adonis-kronos (npm) (malicious package)
- [MAL-2025-187757](https://insights.sbomify.com/MAL-2025-187757/): Malicious code in less-loader-react-bootstrap-cosmicray-spectroscopy (npm) (malicious package)
- [MAL-2025-187756](https://insights.sbomify.com/MAL-2025-187756/): Malicious code in less-loader-orbit-outercore-graphql (npm) (malicious package)
- [MAL-2025-187755](https://insights.sbomify.com/MAL-2025-187755/): Malicious code in less-loader-gulp-yaml-crust (npm) (malicious package)
- [MAL-2025-187754](https://insights.sbomify.com/MAL-2025-187754/): Malicious code in less-loader-grus-void-biosignature (npm) (malicious package)
- [MAL-2025-187753](https://insights.sbomify.com/MAL-2025-187753/): Malicious code in less-less-phenomic-paleoclimatology (npm) (malicious package)
- [MAL-2025-187752](https://insights.sbomify.com/MAL-2025-187752/): Malicious code in less-geckodriver-mongodb-nodejs (npm) (malicious package)
- [MAL-2025-187751](https://insights.sbomify.com/MAL-2025-187751/): Malicious code in less-eigenstate-eris-mineralogy (npm) (malicious package)
- [MAL-2025-187750](https://insights.sbomify.com/MAL-2025-187750/): Malicious code in less-cluster-soap-firebase (npm) (malicious package)
- [MAL-2025-18775](https://insights.sbomify.com/MAL-2025-18775/): Malicious code in dream_bivfx_1zy7z_maple (npm) (malicious package)
- [MAL-2025-187749](https://insights.sbomify.com/MAL-2025-187749/): Malicious code in less-bioinformatics-ganymede-virtualreality (npm) (malicious package)
- [MAL-2025-187748](https://insights.sbomify.com/MAL-2025-187748/): Malicious code in less-astrochemistry-ceres-halley (npm) (malicious package)
- [MAL-2025-187747](https://insights.sbomify.com/MAL-2025-187747/): Malicious code in less-antimatter-slides-phoebe (npm) (malicious package)
- [MAL-2025-187746](https://insights.sbomify.com/MAL-2025-187746/): Malicious code in lepton-xanthus-paleoanthropology-abiogenesis (npm) (malicious package)
- [MAL-2025-187745](https://insights.sbomify.com/MAL-2025-187745/): Malicious code in lepton-weywot-mira-pino-pretty (npm) (malicious package)
- [MAL-2025-187744](https://insights.sbomify.com/MAL-2025-187744/): Malicious code in lepton-sociobiology-duplex-nestjs (npm) (malicious package)
- [MAL-2025-187743](https://insights.sbomify.com/MAL-2025-187743/): Malicious code in lepton-pyxis-aldebaran-dotenv-parse-variables (npm) (malicious package)
- [MAL-2025-187742](https://insights.sbomify.com/MAL-2025-187742/): Malicious code in lepton-husky-phenomic-hermes (npm) (malicious package)
- [MAL-2025-187741](https://insights.sbomify.com/MAL-2025-187741/): Malicious code in lepton-cache-soap-hexo (npm) (malicious package)
- [MAL-2025-187740](https://insights.sbomify.com/MAL-2025-187740/): Malicious code in lepton-async-archaeogenetics-exoplanet (npm) (malicious package)
- [MAL-2025-18774](https://insights.sbomify.com/MAL-2025-18774/): Malicious code in drbeat (npm) (malicious package)
- [MAL-2025-187739](https://insights.sbomify.com/MAL-2025-187739/): Malicious code in leda-pm2-lacerta-speleology (npm) (malicious package)
- [MAL-2025-187738](https://insights.sbomify.com/MAL-2025-187738/): Malicious code in leda-pegasus-magnetosphere-sagitta (npm) (malicious package)
- [MAL-2025-187737](https://insights.sbomify.com/MAL-2025-187737/): Malicious code in leda-morgan-xanthus-ophiuchus (npm) (malicious package)
- [MAL-2025-187736](https://insights.sbomify.com/MAL-2025-187736/): Malicious code in leda-loopback-markdown-pdf-quasar (npm) (malicious package)
- [MAL-2025-187735](https://insights.sbomify.com/MAL-2025-187735/): Malicious code in leda-kaus-bellatrix-leda (npm) (malicious package)
- [MAL-2025-187734](https://insights.sbomify.com/MAL-2025-187734/): Malicious code in leda-jsonp-dependencies-eslint-config (npm) (malicious package)
- [MAL-2025-187733](https://insights.sbomify.com/MAL-2025-187733/): Malicious code in leda-hercules-restart-upgrade (npm) (malicious package)
- [MAL-2025-187732](https://insights.sbomify.com/MAL-2025-187732/): Malicious code in leda-gemini-saturnology-jovian (npm) (malicious package)
- [MAL-2025-187731](https://insights.sbomify.com/MAL-2025-187731/): Malicious code in leda-epigenetics-redshift-geochronology (npm) (malicious package)
- [MAL-2025-187730](https://insights.sbomify.com/MAL-2025-187730/): Malicious code in leda-electron-builder-chromedriver-nodemon (npm) (malicious package)
- [MAL-2025-18773](https://insights.sbomify.com/MAL-2025-18773/): Malicious code in drawon (npm) (malicious package)
- [MAL-2025-187729](https://insights.sbomify.com/MAL-2025-187729/): Malicious code in leda-command-aquarius-leda (npm) (malicious package)
- [MAL-2025-187728](https://insights.sbomify.com/MAL-2025-187728/): Malicious code in leda-cassini-dactyl-mongodb (npm) (malicious package)
- [MAL-2025-187727](https://insights.sbomify.com/MAL-2025-187727/): Malicious code in lambda-transpile-gamma-omicron-resolve (npm) (malicious package)
- [MAL-2025-187726](https://insights.sbomify.com/MAL-2025-187726/): Malicious code in lambda-quick-monitor-optimize-book (npm) (malicious package)
- [MAL-2025-187725](https://insights.sbomify.com/MAL-2025-187725/): Malicious code in lambda-daemon-cron-delta-link (npm) (malicious package)
- [MAL-2025-187724](https://insights.sbomify.com/MAL-2025-187724/): Malicious code in lambda-cloud-class-public-meta (npm) (malicious package)
- [MAL-2025-187723](https://insights.sbomify.com/MAL-2025-187723/): Malicious code in lambda-byte-sigma-static-reject (npm) (malicious package)
- [MAL-2025-187722](https://insights.sbomify.com/MAL-2025-187722/): Malicious code in lacerta-style-loader-mini-css-extract-plugin-less (npm) (malicious package)
- [MAL-2025-187721](https://insights.sbomify.com/MAL-2025-187721/): Malicious code in lacerta-polaris-tool-resolvers (npm) (malicious package)
- [MAL-2025-187720](https://insights.sbomify.com/MAL-2025-187720/): Malicious code in lacerta-paleobotany-convict-babel (npm) (malicious package)
- [MAL-2025-18772](https://insights.sbomify.com/MAL-2025-18772/): Malicious code in drawoid (npm) (malicious package)
- [MAL-2025-187719](https://insights.sbomify.com/MAL-2025-187719/): Malicious code in lacerta-chalk-ini-neptune (npm) (malicious package)
- [MAL-2025-187718](https://insights.sbomify.com/MAL-2025-187718/): Malicious code in lacerta-ceres-jwt-stream (npm) (malicious package)
- [MAL-2025-187717](https://insights.sbomify.com/MAL-2025-187717/): Malicious code in lacerta-blackhole-juno-capella (npm) (malicious package)
- [MAL-2025-187716](https://insights.sbomify.com/MAL-2025-187716/): Malicious code in lacerta-betelgeuse-xanthus-upgrade (npm) (malicious package)
- [MAL-2025-187715](https://insights.sbomify.com/MAL-2025-187715/): Malicious code in lacerta-auth0-callisto-dorado (npm) (malicious package)
- [MAL-2025-187714](https://insights.sbomify.com/MAL-2025-187714/): Malicious code in kuiperbelt-yakutsk-bioinformatics-express (npm) (malicious package)
- [MAL-2025-187713](https://insights.sbomify.com/MAL-2025-187713/): Malicious code in kuiperbelt-taurus-csv-ceres (npm) (malicious package)
- [MAL-2025-187712](https://insights.sbomify.com/MAL-2025-187712/): Malicious code in kuiperbelt-protractor-epigenetics-kardashevscale (npm) (malicious package)
- [MAL-2025-187711](https://insights.sbomify.com/MAL-2025-187711/): Malicious code in kuiperbelt-phoebe-native-abiogenesis (npm) (malicious package)
- [MAL-2025-187710](https://insights.sbomify.com/MAL-2025-187710/): Malicious code in kuiperbelt-nova-parsec-helios (npm) (malicious package)
- [MAL-2025-18771](https://insights.sbomify.com/MAL-2025-18771/): Malicious code in drawingps (npm) (malicious package)
- [MAL-2025-187709](https://insights.sbomify.com/MAL-2025-187709/): Malicious code in kronos-pipe-delphinus-centauri (npm) (malicious package)
- [MAL-2025-187708](https://insights.sbomify.com/MAL-2025-187708/): Malicious code in kronos-phoebe-kronos-elektra (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/957/