# Vulnerabilities published in 2025


- [MAL-2025-187707](https://insights.sbomify.com/MAL-2025-187707/): Malicious code in kronos-lynx-brane-venus (npm) (malicious package)
- [MAL-2025-187706](https://insights.sbomify.com/MAL-2025-187706/): Malicious code in kronos-inquirer-promise-dactyl (npm) (malicious package)
- [MAL-2025-187705](https://insights.sbomify.com/MAL-2025-187705/): Malicious code in kronos-ichnology-dotenv-safe-seismology (npm) (malicious package)
- [MAL-2025-187704](https://insights.sbomify.com/MAL-2025-187704/): Malicious code in kronos-buffer-titan-zephyr (npm) (malicious package)
- [MAL-2025-187703](https://insights.sbomify.com/MAL-2025-187703/): Malicious code in koa-version-scorpius-ceres (npm) (malicious package)
- [MAL-2025-187702](https://insights.sbomify.com/MAL-2025-187702/): Malicious code in koa-vega-zenith-canopus (npm) (malicious package)
- [MAL-2025-187701](https://insights.sbomify.com/MAL-2025-187701/): Malicious code in koa-prettier-stylelint-link-google (npm) (malicious package)
- [MAL-2025-187700](https://insights.sbomify.com/MAL-2025-187700/): Malicious code in koa-higgs-jasmine-wezen (npm) (malicious package)
- [MAL-2025-18770](https://insights.sbomify.com/MAL-2025-18770/): Malicious code in draugur (npm) (malicious package)
- [MAL-2025-1877](https://insights.sbomify.com/MAL-2025-1877/): Malicious code in linkedin-payment (npm) (malicious package)
- [MAL-2025-187699](https://insights.sbomify.com/MAL-2025-187699/): Malicious code in koa-eslint-plugin-corvus-dotenv-parse-variables (npm) (malicious package)
- [MAL-2025-187698](https://insights.sbomify.com/MAL-2025-187698/): Malicious code in koa-callback-postcss-loader-webdriver-manager (npm) (malicious package)
- [MAL-2025-187697](https://insights.sbomify.com/MAL-2025-187697/): Malicious code in koa-betelgeuse-luna-cassini (npm) (malicious package)
- [MAL-2025-187696](https://insights.sbomify.com/MAL-2025-187696/): Malicious code in kinetic-upgrade-pino-sagitta (npm) (malicious package)
- [MAL-2025-187695](https://insights.sbomify.com/MAL-2025-187695/): Malicious code in kinetic-redshift-pino-pretty-prettier-plugin-markdown (npm) (malicious package)
- [MAL-2025-187694](https://insights.sbomify.com/MAL-2025-187694/): Malicious code in kinetic-paleoclimatology-holography-tailwindcss (npm) (malicious package)
- [MAL-2025-187693](https://insights.sbomify.com/MAL-2025-187693/): Malicious code in kinetic-ora-bootstrap-redshift (npm) (malicious package)
- [MAL-2025-187692](https://insights.sbomify.com/MAL-2025-187692/): Malicious code in kinetic-module-apollo-pm2 (npm) (malicious package)
- [MAL-2025-187691](https://insights.sbomify.com/MAL-2025-187691/): Malicious code in kinetic-jovian-auth-cache (npm) (malicious package)
- [MAL-2025-187690](https://insights.sbomify.com/MAL-2025-187690/): Malicious code in kinetic-iota-lint-palynology (npm) (malicious package)
- [MAL-2025-18769](https://insights.sbomify.com/MAL-2025-18769/): Malicious code in drangula (npm) (malicious package)
- [MAL-2025-187689](https://insights.sbomify.com/MAL-2025-187689/): Malicious code in kinetic-configstore-nuxtjs-colors (npm) (malicious package)
- [MAL-2025-187688](https://insights.sbomify.com/MAL-2025-187688/): Malicious code in kinetic-backend-technocracy-archaeometry (npm) (malicious package)
- [MAL-2025-187687](https://insights.sbomify.com/MAL-2025-187687/): Malicious code in key-tree-cron-serialize-process (npm) (malicious package)
- [MAL-2025-187686](https://insights.sbomify.com/MAL-2025-187686/): Malicious code in key-static-authorize-authenticate-quick (npm) (malicious package)
- [MAL-2025-187685](https://insights.sbomify.com/MAL-2025-187685/): Malicious code in key-refactor-finally-optimize-pipe (npm) (malicious package)
- [MAL-2025-187684](https://insights.sbomify.com/MAL-2025-187684/): Malicious code in key-orchestrate-promise-mu-bad (npm) (malicious package)
- [MAL-2025-187683](https://insights.sbomify.com/MAL-2025-187683/): Malicious code in key-notify-stack-water-module (npm) (malicious package)
- [MAL-2025-187682](https://insights.sbomify.com/MAL-2025-187682/): Malicious code in key-kernel-transpile-test-yaml (npm) (malicious package)
- [MAL-2025-187681](https://insights.sbomify.com/MAL-2025-187681/): Malicious code in key-encrypt-bad-class-kernel (npm) (malicious package)
- [MAL-2025-187680](https://insights.sbomify.com/MAL-2025-187680/): Malicious code in key-class-optimize-notify-fire (npm) (malicious package)
- [MAL-2025-18768](https://insights.sbomify.com/MAL-2025-18768/): Malicious code in dragula.js (npm) (malicious package)
- [MAL-2025-187679](https://insights.sbomify.com/MAL-2025-187679/): Malicious code in kernel-visualize-meta-import-transpile (npm) (malicious package)
- [MAL-2025-187678](https://insights.sbomify.com/MAL-2025-187678/): Malicious code in kernel-stack-grep-zero-table (npm) (malicious package)
- [MAL-2025-187677](https://insights.sbomify.com/MAL-2025-187677/): Malicious code in kernel-promise-proxy-xml-pipe (npm) (malicious package)
- [MAL-2025-187676](https://insights.sbomify.com/MAL-2025-187676/): Malicious code in kernel-encode-benchmark-interface-virtualize (npm) (malicious package)
- [MAL-2025-187675](https://insights.sbomify.com/MAL-2025-187675/): Malicious code in kaus-triton-sadr-aurora (npm) (malicious package)
- [MAL-2025-187674](https://insights.sbomify.com/MAL-2025-187674/): Malicious code in kaus-atlas-aurora-promise (npm) (malicious package)
- [MAL-2025-187673](https://insights.sbomify.com/MAL-2025-187673/): Malicious code in kaus-antares-update-neptune (npm) (malicious package)
- [MAL-2025-187672](https://insights.sbomify.com/MAL-2025-187672/): Malicious code in kastra-perseus-comet-deimos (npm) (malicious package)
- [MAL-2025-187671](https://insights.sbomify.com/MAL-2025-187671/): Malicious code in kastra-oberon-spectroscopy-mocha (npm) (malicious package)
- [MAL-2025-187670](https://insights.sbomify.com/MAL-2025-187670/): Malicious code in karma-update-slidev-websockets (npm) (malicious package)
- [MAL-2025-18767](https://insights.sbomify.com/MAL-2025-18767/): Malicious code in dragstrip (npm) (malicious package)
- [MAL-2025-187669](https://insights.sbomify.com/MAL-2025-187669/): Malicious code in karma-spectron-parcel-aether (npm) (malicious package)
- [MAL-2025-187668](https://insights.sbomify.com/MAL-2025-187668/): Malicious code in karma-remark-meissa-quasarjet (npm) (malicious package)
- [MAL-2025-187667](https://insights.sbomify.com/MAL-2025-187667/): Malicious code in karma-install-spectron-bootes (npm) (malicious package)
- [MAL-2025-187666](https://insights.sbomify.com/MAL-2025-187666/): Malicious code in karma-cross-env-mocha-grus (npm) (malicious package)
- [MAL-2025-187665](https://insights.sbomify.com/MAL-2025-187665/): Malicious code in kardashevscale-transport-tailwindcss-dynamo (npm) (malicious package)
- [MAL-2025-187664](https://insights.sbomify.com/MAL-2025-187664/): Malicious code in kardashevscale-dotenv-safe-callisto-quasarjet (npm) (malicious package)
- [MAL-2025-187663](https://insights.sbomify.com/MAL-2025-187663/): Malicious code in kardashevscale-despina-outercore-leda (npm) (malicious package)
- [MAL-2025-187662](https://insights.sbomify.com/MAL-2025-187662/): Malicious code in kardashevscale-apex-neptunology-astrometry (npm) (malicious package)
- [MAL-2025-187661](https://insights.sbomify.com/MAL-2025-187661/): Malicious code in kappa-pi-nu-beta-lambda (npm) (malicious package)
- [MAL-2025-187660](https://insights.sbomify.com/MAL-2025-187660/): Malicious code in kappa-nu-daemon-async-bad (npm) (malicious package)
- [MAL-2025-18766](https://insights.sbomify.com/MAL-2025-18766/): Malicious code in dragro (npm) (malicious package)
- [MAL-2025-187659](https://insights.sbomify.com/MAL-2025-187659/): Malicious code in kappa-notify-web-encrypt-iota (npm) (malicious package)
- [MAL-2025-187658](https://insights.sbomify.com/MAL-2025-187658/): Malicious code in kappa-lambda-bundle-omega-bad (npm) (malicious package)
- [MAL-2025-187657](https://insights.sbomify.com/MAL-2025-187657/): Malicious code in kappa-eta-theta-sandbox-user (npm) (malicious package)
- [MAL-2025-187656](https://insights.sbomify.com/MAL-2025-187656/): Malicious code in kappa-encrypt-public-rho-boolean (npm) (malicious package)
- [MAL-2025-187655](https://insights.sbomify.com/MAL-2025-187655/): Malicious code in kappa-debug-lambda-daemon-upsilon (npm) (malicious package)
- [MAL-2025-187654](https://insights.sbomify.com/MAL-2025-187654/): Malicious code in kappa-cache-process-byte-sudo (npm) (malicious package)
- [MAL-2025-187653](https://insights.sbomify.com/MAL-2025-187653/): Malicious code in kappa-awk-deploy-simulate-encrypt (npm) (malicious package)
- [MAL-2025-187652](https://insights.sbomify.com/MAL-2025-187652/): Malicious code in jwt-ursa-apollo-fornax (npm) (malicious package)
- [MAL-2025-187651](https://insights.sbomify.com/MAL-2025-187651/): Malicious code in jwt-sync-ora-selenium (npm) (malicious package)
- [MAL-2025-187650](https://insights.sbomify.com/MAL-2025-187650/): Malicious code in jwt-superagent-astrobiology-solarnebula (npm) (malicious package)
- [MAL-2025-18765](https://insights.sbomify.com/MAL-2025-18765/): Malicious code in dragonfruit-uniform-2lp9 (npm) (malicious package)
- [MAL-2025-187649](https://insights.sbomify.com/MAL-2025-187649/): Malicious code in jwt-rest-jest-pm2 (npm) (malicious package)
- [MAL-2025-187648](https://insights.sbomify.com/MAL-2025-187648/): Malicious code in jwt-polaris-accretion-transform (npm) (malicious package)
- [MAL-2025-187647](https://insights.sbomify.com/MAL-2025-187647/): Malicious code in jwt-mutation-dagda-octans (npm) (malicious package)
- [MAL-2025-187646](https://insights.sbomify.com/MAL-2025-187646/): Malicious code in jwt-jwt-nodejs-publish (npm) (malicious package)
- [MAL-2025-187645](https://insights.sbomify.com/MAL-2025-187645/): Malicious code in jwt-firebase-izar-gulp (npm) (malicious package)
- [MAL-2025-187644](https://insights.sbomify.com/MAL-2025-187644/): Malicious code in jwt-antares-chakra-ui-andromeda (npm) (malicious package)
- [MAL-2025-187643](https://insights.sbomify.com/MAL-2025-187643/): Malicious code in justmeteai (npm) (malicious package)
- [MAL-2025-187642](https://insights.sbomify.com/MAL-2025-187642/): Malicious code in jupiter-scripts-html-webpack-plugin-blitz (npm) (malicious package)
- [MAL-2025-187641](https://insights.sbomify.com/MAL-2025-187641/): Malicious code in jupiter-fork-axios-magellan (npm) (malicious package)
- [MAL-2025-187640](https://insights.sbomify.com/MAL-2025-187640/): Malicious code in jupiter-aether-markdown-pdf-websockets (npm) (malicious package)
- [MAL-2025-18764](https://insights.sbomify.com/MAL-2025-18764/): Malicious code in dragonfruit-temple-xmjg (npm) (malicious package)
- [MAL-2025-187639](https://insights.sbomify.com/MAL-2025-187639/): Malicious code in juno-uglify-js-tethys-thermochronology (npm) (malicious package)
- [MAL-2025-187638](https://insights.sbomify.com/MAL-2025-187638/): Malicious code in juno-saturnology-sass-loader-joviology (npm) (malicious package)
- [MAL-2025-187637](https://insights.sbomify.com/MAL-2025-187637/): Malicious code in juno-pyxis-barnard-perturbation (npm) (malicious package)
- [MAL-2025-187636](https://insights.sbomify.com/MAL-2025-187636/): Malicious code in juno-proxima-wolf-tailwindcss (npm) (malicious package)
- [MAL-2025-187635](https://insights.sbomify.com/MAL-2025-187635/): Malicious code in juno-ichnology-dotenv-safe-javascript (npm) (malicious package)
- [MAL-2025-187634](https://insights.sbomify.com/MAL-2025-187634/): Malicious code in juno-ganymede-inquirer-ultra (npm) (malicious package)
- [MAL-2025-187633](https://insights.sbomify.com/MAL-2025-187633/): Malicious code in juno-eleventy-prettier-stylelint-rimraf (npm) (malicious package)
- [MAL-2025-187632](https://insights.sbomify.com/MAL-2025-187632/): Malicious code in juno-areology-dorado-webdriver-mocha (npm) (malicious package)
- [MAL-2025-187631](https://insights.sbomify.com/MAL-2025-187631/): Malicious code in jsonp-lacerta-eris-octans (npm) (malicious package)
- [MAL-2025-187630](https://insights.sbomify.com/MAL-2025-187630/): Malicious code in jsonp-hydra-neuromorphic-void (npm) (malicious package)
- [MAL-2025-18763](https://insights.sbomify.com/MAL-2025-18763/): Malicious code in dragonfruit-nutmeg-ux48 (npm) (malicious package)
- [MAL-2025-187629](https://insights.sbomify.com/MAL-2025-187629/): Malicious code in json-superagent-helios-ablation (npm) (malicious package)
- [MAL-2025-187628](https://insights.sbomify.com/MAL-2025-187628/): Malicious code in json-stream-aquarius-cygnus (npm) (malicious package)
- [MAL-2025-187627](https://insights.sbomify.com/MAL-2025-187627/): Malicious code in json-protractor-nestjs-auth0 (npm) (malicious package)
- [MAL-2025-187626](https://insights.sbomify.com/MAL-2025-187626/): Malicious code in json-miranda-karma-auth0 (npm) (malicious package)
- [MAL-2025-187625](https://insights.sbomify.com/MAL-2025-187625/): Malicious code in json-geochemistry-exec-publish (npm) (malicious package)
- [MAL-2025-187624](https://insights.sbomify.com/MAL-2025-187624/): Malicious code in json-docusaurus-terser-aurora (npm) (malicious package)
- [MAL-2025-187623](https://insights.sbomify.com/MAL-2025-187623/): Malicious code in json-babel-regulus-void (npm) (malicious package)
- [MAL-2025-187622](https://insights.sbomify.com/MAL-2025-187622/): Malicious code in json-apollo-rate-limiter-cross-env (npm) (malicious package)
- [MAL-2025-187621](https://insights.sbomify.com/MAL-2025-187621/): Malicious code in json-apex-bellatrix-docusaurus (npm) (malicious package)
- [MAL-2025-187620](https://insights.sbomify.com/MAL-2025-187620/): Malicious code in joviology-standard-iota-outercore (npm) (malicious package)
- [MAL-2025-18762](https://insights.sbomify.com/MAL-2025-18762/): Malicious code in dragonfruit-nightingale-lu3u (npm) (malicious package)
- [MAL-2025-187619](https://insights.sbomify.com/MAL-2025-187619/): Malicious code in joviology-nuxtjs-ursa-lacerta (npm) (malicious package)
- [MAL-2025-187618](https://insights.sbomify.com/MAL-2025-187618/): Malicious code in joviology-mocha-cluster-redshift (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/958/