# Vulnerabilities published in 2025


- [MAL-2025-187617](https://insights.sbomify.com/MAL-2025-187617/): Malicious code in joviology-heka-accretion-speleology (npm) (malicious package)
- [MAL-2025-187616](https://insights.sbomify.com/MAL-2025-187616/): Malicious code in joviology-exobiology-antares-webpack (npm) (malicious package)
- [MAL-2025-187615](https://insights.sbomify.com/MAL-2025-187615/): Malicious code in joviology-betelgeuse-saturnology-webdriverio (npm) (malicious package)
- [MAL-2025-187614](https://insights.sbomify.com/MAL-2025-187614/): Malicious code in jovian-sass-loader-native-cassini (npm) (malicious package)
- [MAL-2025-187613](https://insights.sbomify.com/MAL-2025-187613/): Malicious code in jovian-postgres-webdriver-mocha-await (npm) (malicious package)
- [MAL-2025-187612](https://insights.sbomify.com/MAL-2025-187612/): Malicious code in jovian-nodemon-winston-andromeda (npm) (malicious package)
- [MAL-2025-187611](https://insights.sbomify.com/MAL-2025-187611/): Malicious code in jovian-less-loader-draco-wasat (npm) (malicious package)
- [MAL-2025-187610](https://insights.sbomify.com/MAL-2025-187610/): Malicious code in jovian-development-meissa-configstore (npm) (malicious package)
- [MAL-2025-18761](https://insights.sbomify.com/MAL-2025-18761/): Malicious code in dragonfruit-kapok-vgnu (npm) (malicious package)
- [MAL-2025-187609](https://insights.sbomify.com/MAL-2025-187609/): Malicious code in jovian-asteroid-tectonophysics-bootstrap (npm) (malicious package)
- [MAL-2025-187608](https://insights.sbomify.com/MAL-2025-187608/): Malicious code in jest-titan-postcss-loader-galaxy (npm) (malicious package)
- [MAL-2025-187607](https://insights.sbomify.com/MAL-2025-187607/): Malicious code in jest-astro-despina-aurora (npm) (malicious package)
- [MAL-2025-187606](https://insights.sbomify.com/MAL-2025-187606/): Malicious code in jekyll-reveal-md-redgiant-prettier-plugin-markdown (npm) (malicious package)
- [MAL-2025-187605](https://insights.sbomify.com/MAL-2025-187605/): Malicious code in jekyll-resolvers-quark-xenobiology (npm) (malicious package)
- [MAL-2025-187604](https://insights.sbomify.com/MAL-2025-187604/): Malicious code in jekyll-resolvers-quark-epimetheus (npm) (malicious package)
- [MAL-2025-187603](https://insights.sbomify.com/MAL-2025-187603/): Malicious code in jekyll-nightmare-juno-eclipse (npm) (malicious package)
- [MAL-2025-187602](https://insights.sbomify.com/MAL-2025-187602/): Malicious code in jekyll-less-npm-local (npm) (malicious package)
- [MAL-2025-187601](https://insights.sbomify.com/MAL-2025-187601/): Malicious code in jekyll-deneb-uglify-js-paleobotany (npm) (malicious package)
- [MAL-2025-187600](https://insights.sbomify.com/MAL-2025-187600/): Malicious code in javascript-start-halley-eclipse (npm) (malicious package)
- [MAL-2025-18760](https://insights.sbomify.com/MAL-2025-18760/): Malicious code in dragonfruit-kangaroo-luuf (npm) (malicious package)
- [MAL-2025-1876](https://insights.sbomify.com/MAL-2025-1876/): Malicious code in linkedin-parser (npm) (malicious package)
- [MAL-2025-187599](https://insights.sbomify.com/MAL-2025-187599/): Malicious code in javascript-magnetar-epimetheus-figures (npm) (malicious package)
- [MAL-2025-187598](https://insights.sbomify.com/MAL-2025-187598/): Malicious code in javascript-hyperion-quantumfoam-rate-limiter (npm) (malicious package)
- [MAL-2025-187597](https://insights.sbomify.com/MAL-2025-187597/): Malicious code in javascript-css-minimizer-webpack-plugin-geochronology-foundation (npm) (malicious package)
- [MAL-2025-187596](https://insights.sbomify.com/MAL-2025-187596/): Malicious code in javascript-async-enceladus-eslint-plugin (npm) (malicious package)
- [MAL-2025-187595](https://insights.sbomify.com/MAL-2025-187595/): Malicious code in java-theta-theta-zero-static (npm) (malicious package)
- [MAL-2025-187594](https://insights.sbomify.com/MAL-2025-187594/): Malicious code in java-socket-cluster-decode-catch (npm) (malicious package)
- [MAL-2025-187593](https://insights.sbomify.com/MAL-2025-187593/): Malicious code in java-simple-void-fork-sudo (npm) (malicious package)
- [MAL-2025-187592](https://insights.sbomify.com/MAL-2025-187592/): Malicious code in java-short-string-java-yaml (npm) (malicious package)
- [MAL-2025-187591](https://insights.sbomify.com/MAL-2025-187591/): Malicious code in java-orchestrate-awk-process-virtualize (npm) (malicious package)
- [MAL-2025-187590](https://insights.sbomify.com/MAL-2025-187590/): Malicious code in jasmine-metalsmith-schema-sirius (npm) (malicious package)
- [MAL-2025-18759](https://insights.sbomify.com/MAL-2025-18759/): Malicious code in dragonfruit-india-rs59 (npm) (malicious package)
- [MAL-2025-187589](https://insights.sbomify.com/MAL-2025-187589/): Malicious code in jasmine-karma-innercore-csrf (npm) (malicious package)
- [MAL-2025-187588](https://insights.sbomify.com/MAL-2025-187588/): Malicious code in jasmine-iota-apollo-postcss (npm) (malicious package)
- [MAL-2025-187587](https://insights.sbomify.com/MAL-2025-187587/): Malicious code in jasmine-ichnology-astro-proteomics (npm) (malicious package)
- [MAL-2025-187586](https://insights.sbomify.com/MAL-2025-187586/): Malicious code in jasmine-cypress-gravity-install (npm) (malicious package)
- [MAL-2025-187585](https://insights.sbomify.com/MAL-2025-187585/): Malicious code in janus-sedimentology-higgs-biohacking (npm) (malicious package)
- [MAL-2025-187584](https://insights.sbomify.com/MAL-2025-187584/): Malicious code in janus-rocket-crust-xerxes (npm) (malicious package)
- [MAL-2025-187583](https://insights.sbomify.com/MAL-2025-187583/): Malicious code in janus-robotics-optimize-css-assets-webpack-plugin-jovian (npm) (malicious package)
- [MAL-2025-187582](https://insights.sbomify.com/MAL-2025-187582/): Malicious code in janus-repository-acamar-jekyll (npm) (malicious package)
- [MAL-2025-187581](https://insights.sbomify.com/MAL-2025-187581/): Malicious code in janus-remark-thuban-sails (npm) (malicious package)
- [MAL-2025-187580](https://insights.sbomify.com/MAL-2025-187580/): Malicious code in janus-regulus-eclipse-castor (npm) (malicious package)
- [MAL-2025-18758](https://insights.sbomify.com/MAL-2025-18758/): Malicious code in dragonfruit-bark-ysow (npm) (malicious package)
- [MAL-2025-187579](https://insights.sbomify.com/MAL-2025-187579/): Malicious code in janus-radiant-avior-quito (npm) (malicious package)
- [MAL-2025-187578](https://insights.sbomify.com/MAL-2025-187578/): Malicious code in janus-proxima-commitizen-auriga (npm) (malicious package)
- [MAL-2025-187577](https://insights.sbomify.com/MAL-2025-187577/): Malicious code in janus-petrology-sedimentology-polaris (npm) (malicious package)
- [MAL-2025-187576](https://insights.sbomify.com/MAL-2025-187576/): Malicious code in janus-neptune-spectron-publish (npm) (malicious package)
- [MAL-2025-187575](https://insights.sbomify.com/MAL-2025-187575/): Malicious code in janus-mysql-delphinus-convict (npm) (malicious package)
- [MAL-2025-187574](https://insights.sbomify.com/MAL-2025-187574/): Malicious code in janus-hapi-ganymede-solis (npm) (malicious package)
- [MAL-2025-187573](https://insights.sbomify.com/MAL-2025-187573/): Malicious code in janus-greatfilter-cosmiconfig-ursa (npm) (malicious package)
- [MAL-2025-187572](https://insights.sbomify.com/MAL-2025-187572/): Malicious code in janus-fomalhaut-rate-limiter-fusion (npm) (malicious package)
- [MAL-2025-187571](https://insights.sbomify.com/MAL-2025-187571/): Malicious code in janus-enif-tardigrade-test (npm) (malicious package)
- [MAL-2025-187570](https://insights.sbomify.com/MAL-2025-187570/): Malicious code in janus-enceladus-supernova-panspermia (npm) (malicious package)
- [MAL-2025-18757](https://insights.sbomify.com/MAL-2025-18757/): Malicious code in dragonbar (npm) (malicious package)
- [MAL-2025-187569](https://insights.sbomify.com/MAL-2025-187569/): Malicious code in janus-dagda-query-ceres (npm) (malicious package)
- [MAL-2025-187568](https://insights.sbomify.com/MAL-2025-187568/): Malicious code in janus-chai-umbriel-install (npm) (malicious package)
- [MAL-2025-187567](https://insights.sbomify.com/MAL-2025-187567/): Malicious code in janus-centaurus-mutation-koa (npm) (malicious package)
- [MAL-2025-187566](https://insights.sbomify.com/MAL-2025-187566/): Malicious code in janus-avior-superagent-ichnology (npm) (malicious package)
- [MAL-2025-187565](https://insights.sbomify.com/MAL-2025-187565/): Malicious code in janus-aldebaran-middleware-paleontology (npm) (malicious package)
- [MAL-2025-187564](https://insights.sbomify.com/MAL-2025-187564/): Malicious code in jabbah-umbriel-io-soap (npm) (malicious package)
- [MAL-2025-187563](https://insights.sbomify.com/MAL-2025-187563/): Malicious code in jabbah-titan-eslint-config-equinox (npm) (malicious package)
- [MAL-2025-187562](https://insights.sbomify.com/MAL-2025-187562/): Malicious code in jabbah-pegasus-umbriel-perseus (npm) (malicious package)
- [MAL-2025-187561](https://insights.sbomify.com/MAL-2025-187561/): Malicious code in jabbah-colors-parsec-chromedriver (npm) (malicious package)
- [MAL-2025-187560](https://insights.sbomify.com/MAL-2025-187560/): Malicious code in jabbah-blitz-kardashevscale-markdown (npm) (malicious package)
- [MAL-2025-18756](https://insights.sbomify.com/MAL-2025-18756/): Malicious code in dragon-zenith-fpi840-project (npm) (malicious package)
- [MAL-2025-187559](https://insights.sbomify.com/MAL-2025-187559/): Malicious code in jabbah-areology-archaeometry-vega (npm) (malicious package)
- [MAL-2025-187558](https://insights.sbomify.com/MAL-2025-187558/): Malicious code in izar-string-command-neutronstar (npm) (malicious package)
- [MAL-2025-187557](https://insights.sbomify.com/MAL-2025-187557/): Malicious code in izar-ora-exec-genomics (npm) (malicious package)
- [MAL-2025-187556](https://insights.sbomify.com/MAL-2025-187556/): Malicious code in izar-mini-css-extract-plugin-hercules-nightmare (npm) (malicious package)
- [MAL-2025-187555](https://insights.sbomify.com/MAL-2025-187555/): Malicious code in isostasy-slides-augmentedreality-jabbah (npm) (malicious package)
- [MAL-2025-187554](https://insights.sbomify.com/MAL-2025-187554/): Malicious code in isostasy-rate-limiter-miranda-chalk (npm) (malicious package)
- [MAL-2025-187553](https://insights.sbomify.com/MAL-2025-187553/): Malicious code in isostasy-paleoclimatology-thuban-augmentedreality (npm) (malicious package)
- [MAL-2025-187552](https://insights.sbomify.com/MAL-2025-187552/): Malicious code in isostasy-meteor-passport-npm (npm) (malicious package)
- [MAL-2025-187551](https://insights.sbomify.com/MAL-2025-187551/): Malicious code in isostasy-loopback-docusaurus-inflation (npm) (malicious package)
- [MAL-2025-187550](https://insights.sbomify.com/MAL-2025-187550/): Malicious code in isostasy-ganymede-archaeogenetics-markdown (npm) (malicious package)
- [MAL-2025-18755](https://insights.sbomify.com/MAL-2025-18755/): Malicious code in dragon-yawn-ngv292-project (npm) (malicious package)
- [MAL-2025-187549](https://insights.sbomify.com/MAL-2025-187549/): Malicious code in iota-zephyr-nova-octans (npm) (malicious package)
- [MAL-2025-187548](https://insights.sbomify.com/MAL-2025-187548/): Malicious code in iota-virtualize-alert-mu-cache (npm) (malicious package)
- [MAL-2025-187547](https://insights.sbomify.com/MAL-2025-187547/): Malicious code in iota-stub-wind-quick-promise (npm) (malicious package)
- [MAL-2025-187546](https://insights.sbomify.com/MAL-2025-187546/): Malicious code in iota-simulate-optimize-tree-bundle (npm) (malicious package)
- [MAL-2025-187545](https://insights.sbomify.com/MAL-2025-187545/): Malicious code in iota-sedna-public-webdriver-mocha (npm) (malicious package)
- [MAL-2025-187544](https://insights.sbomify.com/MAL-2025-187544/): Malicious code in iota-scripts-phoebe-geckodriver (npm) (malicious package)
- [MAL-2025-187543](https://insights.sbomify.com/MAL-2025-187543/): Malicious code in iota-report-phi-good-public (npm) (malicious package)
- [MAL-2025-187542](https://insights.sbomify.com/MAL-2025-187542/): Malicious code in iota-release-it-stream-xenos (npm) (malicious package)
- [MAL-2025-187541](https://insights.sbomify.com/MAL-2025-187541/): Malicious code in iota-levels-foundation-solis (npm) (malicious package)
- [MAL-2025-187540](https://insights.sbomify.com/MAL-2025-187540/): Malicious code in iota-less-loader-commitlint-config-angular-private (npm) (malicious package)
- [MAL-2025-18754](https://insights.sbomify.com/MAL-2025-18754/): Malicious code in dragon-yawn-cfm890-project (npm) (malicious package)
- [MAL-2025-187539](https://insights.sbomify.com/MAL-2025-187539/): Malicious code in iota-hydra-eridanus-protractor (npm) (malicious package)
- [MAL-2025-187538](https://insights.sbomify.com/MAL-2025-187538/): Malicious code in iota-hugo-mongoose-hapi (npm) (malicious package)
- [MAL-2025-187537](https://insights.sbomify.com/MAL-2025-187537/): Malicious code in iota-geomorphology-rate-limiter-jasmine (npm) (malicious package)
- [MAL-2025-187536](https://insights.sbomify.com/MAL-2025-187536/): Malicious code in iota-framework-umbra-uranology (npm) (malicious package)
- [MAL-2025-187535](https://insights.sbomify.com/MAL-2025-187535/): Malicious code in iota-centaurus-blackhole-cosmicray (npm) (malicious package)
- [MAL-2025-187534](https://insights.sbomify.com/MAL-2025-187534/): Malicious code in iota-betelgeuse-rest-sass-loader (npm) (malicious package)
- [MAL-2025-187533](https://insights.sbomify.com/MAL-2025-187533/): Malicious code in iota-bash-bundle-delta-encrypt (npm) (malicious package)
- [MAL-2025-187532](https://insights.sbomify.com/MAL-2025-187532/): Malicious code in iota-analyze-transpile-iota-abstract (npm) (malicious package)
- [MAL-2025-187531](https://insights.sbomify.com/MAL-2025-187531/): Malicious code in iota-aether-hawkingradiation-augmentedreality (npm) (malicious package)
- [MAL-2025-187530](https://insights.sbomify.com/MAL-2025-187530/): Malicious code in ionosphere-webdriverio-module-primatology (npm) (malicious package)
- [MAL-2025-18753](https://insights.sbomify.com/MAL-2025-18753/): Malicious code in dragon-xylophone-bvv149-project (npm) (malicious package)
- [MAL-2025-187529](https://insights.sbomify.com/MAL-2025-187529/): Malicious code in ionosphere-triton-selenium-janus (npm) (malicious package)
- [MAL-2025-187528](https://insights.sbomify.com/MAL-2025-187528/): Malicious code in ionosphere-terraforming-string-exosphere (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/959/