# Vulnerabilities published in 2025


- [MAL-2025-187527](https://insights.sbomify.com/MAL-2025-187527/): Malicious code in ionosphere-tachyon-arcturus-jasmine (npm) (malicious package)
- [MAL-2025-187526](https://insights.sbomify.com/MAL-2025-187526/): Malicious code in io-radiant-kinetic-betelgeuse (npm) (malicious package)
- [MAL-2025-187525](https://insights.sbomify.com/MAL-2025-187525/): Malicious code in io-quark-babel-centaurus (npm) (malicious package)
- [MAL-2025-187524](https://insights.sbomify.com/MAL-2025-187524/): Malicious code in io-publish-antd-outercore (npm) (malicious package)
- [MAL-2025-187523](https://insights.sbomify.com/MAL-2025-187523/): Malicious code in io-octans-taurus-sedna (npm) (malicious package)
- [MAL-2025-187522](https://insights.sbomify.com/MAL-2025-187522/): Malicious code in io-mutation-eslint-izar (npm) (malicious package)
- [MAL-2025-187521](https://insights.sbomify.com/MAL-2025-187521/): Malicious code in io-gulp-apollo-javascript (npm) (malicious package)
- [MAL-2025-187520](https://insights.sbomify.com/MAL-2025-187520/): Malicious code in io-cordelia-meteor-filament (npm) (malicious package)
- [MAL-2025-18752](https://insights.sbomify.com/MAL-2025-18752/): Malicious code in dragon-willow-wls785-project (npm) (malicious package)
- [MAL-2025-187519](https://insights.sbomify.com/MAL-2025-187519/): Malicious code in interstellarmedium-uninstall-update-paleoanthropology (npm) (malicious package)
- [MAL-2025-187518](https://insights.sbomify.com/MAL-2025-187518/): Malicious code in interstellarmedium-remark-procyon-dotenv-safe (npm) (malicious package)
- [MAL-2025-187517](https://insights.sbomify.com/MAL-2025-187517/): Malicious code in interstellarmedium-pino-bulma-darkenergy (npm) (malicious package)
- [MAL-2025-187516](https://insights.sbomify.com/MAL-2025-187516/): Malicious code in interstellarmedium-nightwatch-bionics-xanadu (npm) (malicious package)
- [MAL-2025-187515](https://insights.sbomify.com/MAL-2025-187515/): Malicious code in interstellarmedium-materialize-robotics-jovian (npm) (malicious package)
- [MAL-2025-187514](https://insights.sbomify.com/MAL-2025-187514/): Malicious code in interstellarmedium-coronalmassejection-hadron-quasar (npm) (malicious package)
- [MAL-2025-187513](https://insights.sbomify.com/MAL-2025-187513/): Malicious code in interpret-deploy-omega-async-fire (npm) (malicious package)
- [MAL-2025-187512](https://insights.sbomify.com/MAL-2025-187512/): Malicious code in interferometry-zephyr-procyon-wavefunction (npm) (malicious package)
- [MAL-2025-187511](https://insights.sbomify.com/MAL-2025-187511/): Malicious code in interferometry-paleoanthropology-innercore-seismology (npm) (malicious package)
- [MAL-2025-187510](https://insights.sbomify.com/MAL-2025-187510/): Malicious code in interface-stack-mock-execute-log (npm) (malicious package)
- [MAL-2025-18751](https://insights.sbomify.com/MAL-2025-18751/): Malicious code in dragon-whirlpool-sze629-project (npm) (malicious package)
- [MAL-2025-187509](https://insights.sbomify.com/MAL-2025-187509/): Malicious code in interface-iota-tau-optimize-bundle (npm) (malicious package)
- [MAL-2025-187508](https://insights.sbomify.com/MAL-2025-187508/): Malicious code in interface-awk-balance-epsilon-orchestrate (npm) (malicious package)
- [MAL-2025-187507](https://insights.sbomify.com/MAL-2025-187507/): Malicious code in integer-web-key-resolve-mu (npm) (malicious package)
- [MAL-2025-187506](https://insights.sbomify.com/MAL-2025-187506/): Malicious code in integer-tau-chi-alert-gamma (npm) (malicious package)
- [MAL-2025-187505](https://insights.sbomify.com/MAL-2025-187505/): Malicious code in integer-slow-java-object-string (npm) (malicious package)
- [MAL-2025-187504](https://insights.sbomify.com/MAL-2025-187504/): Malicious code in integer-simulate-mu-class-permission (npm) (malicious package)
- [MAL-2025-187503](https://insights.sbomify.com/MAL-2025-187503/): Malicious code in integer-pipe-beta-orchestrate-simulate (npm) (malicious package)
- [MAL-2025-187502](https://insights.sbomify.com/MAL-2025-187502/): Malicious code in integer-optimize-alpha-byte-authenticate (npm) (malicious package)
- [MAL-2025-187501](https://insights.sbomify.com/MAL-2025-187501/): Malicious code in integer-omega-virtualize-star-meta (npm) (malicious package)
- [MAL-2025-187500](https://insights.sbomify.com/MAL-2025-187500/): Malicious code in integer-lambda-notify-cache-try (npm) (malicious package)
- [MAL-2025-18750](https://insights.sbomify.com/MAL-2025-18750/): Malicious code in dragon-tulip-ulh458-project (npm) (malicious package)
- [MAL-2025-1875](https://insights.sbomify.com/MAL-2025-1875/): Malicious code in linkedin-model (npm) (malicious package)
- [MAL-2025-187499](https://insights.sbomify.com/MAL-2025-187499/): Malicious code in integer-kappa-sigma-double-view (npm) (malicious package)
- [MAL-2025-187498](https://insights.sbomify.com/MAL-2025-187498/): Malicious code in install-geckodriver-blueshift-native (npm) (malicious package)
- [MAL-2025-187497](https://insights.sbomify.com/MAL-2025-187497/): Malicious code in install-fork-mdx-websockets (npm) (malicious package)
- [MAL-2025-187496](https://insights.sbomify.com/MAL-2025-187496/): Malicious code in install-enif-blitz-supervisor (npm) (malicious package)
- [MAL-2025-187495](https://insights.sbomify.com/MAL-2025-187495/): Malicious code in install-enceladus-mesosphere-superflare (npm) (malicious package)
- [MAL-2025-187494](https://insights.sbomify.com/MAL-2025-187494/): Malicious code in install-bunyan-bellatrix-impulse (npm) (malicious package)
- [MAL-2025-187493](https://insights.sbomify.com/MAL-2025-187493/): Malicious code in inquirer-winston-commitlint-cosmiconfig (npm) (malicious package)
- [MAL-2025-187492](https://insights.sbomify.com/MAL-2025-187492/): Malicious code in inquirer-technosignature-slidev-sagitta (npm) (malicious package)
- [MAL-2025-187491](https://insights.sbomify.com/MAL-2025-187491/): Malicious code in inquirer-stream-metabolomics-uninstall (npm) (malicious package)
- [MAL-2025-187490](https://insights.sbomify.com/MAL-2025-187490/): Malicious code in inquirer-resonance-stratosphere-zenobia (npm) (malicious package)
- [MAL-2025-18749](https://insights.sbomify.com/MAL-2025-18749/): Malicious code in dragon-penguin-akk736-project (npm) (malicious package)
- [MAL-2025-187489](https://insights.sbomify.com/MAL-2025-187489/): Malicious code in inquirer-quasar-polaris-aquarius (npm) (malicious package)
- [MAL-2025-187488](https://insights.sbomify.com/MAL-2025-187488/): Malicious code in inquirer-loop-airbnb-proxima (npm) (malicious package)
- [MAL-2025-187487](https://insights.sbomify.com/MAL-2025-187487/): Malicious code in inquirer-flare-sass-loader-tectonic (npm) (malicious package)
- [MAL-2025-187486](https://insights.sbomify.com/MAL-2025-187486/): Malicious code in innercore-yildun-blaze-robotics (npm) (malicious package)
- [MAL-2025-187485](https://insights.sbomify.com/MAL-2025-187485/): Malicious code in innercore-superposition-lint-staged-adonis (npm) (malicious package)
- [MAL-2025-187484](https://insights.sbomify.com/MAL-2025-187484/): Malicious code in innercore-magnetar-xerxes-galaxy (npm) (malicious package)
- [MAL-2025-187483](https://insights.sbomify.com/MAL-2025-187483/): Malicious code in innercore-biohacking-aether-inflation (npm) (malicious package)
- [MAL-2025-187482](https://insights.sbomify.com/MAL-2025-187482/): Malicious code in innercore-alphard-eslint-config-xerxes (npm) (malicious package)
- [MAL-2025-187481](https://insights.sbomify.com/MAL-2025-187481/): Malicious code in init-venus-sync-figures (npm) (malicious package)
- [MAL-2025-187480](https://insights.sbomify.com/MAL-2025-187480/): Malicious code in init-rest-sedna-gacrux (npm) (malicious package)
- [MAL-2025-18748](https://insights.sbomify.com/MAL-2025-18748/): Malicious code in dragon-peacock-glm385-project (npm) (malicious package)
- [MAL-2025-187479](https://insights.sbomify.com/MAL-2025-187479/): Malicious code in init-publish-boson-apex (npm) (malicious package)
- [MAL-2025-187478](https://insights.sbomify.com/MAL-2025-187478/): Malicious code in init-parcel-run-script-hugo (npm) (malicious package)
- [MAL-2025-187477](https://insights.sbomify.com/MAL-2025-187477/): Malicious code in init-optimize-css-assets-webpack-plugin-nodejs-grus (npm) (malicious package)
- [MAL-2025-187476](https://insights.sbomify.com/MAL-2025-187476/): Malicious code in init-mui-exobiology-local (npm) (malicious package)
- [MAL-2025-187475](https://insights.sbomify.com/MAL-2025-187475/): Malicious code in init-enceladus-quark-terraforming (npm) (malicious package)
- [MAL-2025-187474](https://insights.sbomify.com/MAL-2025-187474/): Malicious code in init-charon-terser-upgrade (npm) (malicious package)
- [MAL-2025-187473](https://insights.sbomify.com/MAL-2025-187473/): Malicious code in ini-quito-stratosphere-slides (npm) (malicious package)
- [MAL-2025-187472](https://insights.sbomify.com/MAL-2025-187472/): Malicious code in ini-mongodb-got-socketio (npm) (malicious package)
- [MAL-2025-187471](https://insights.sbomify.com/MAL-2025-187471/): Malicious code in ini-koa-adonis-astrometry (npm) (malicious package)
- [MAL-2025-187470](https://insights.sbomify.com/MAL-2025-187470/): Malicious code in ini-barnard-juno-shelljs (npm) (malicious package)
- [MAL-2025-18747](https://insights.sbomify.com/MAL-2025-18747/): Malicious code in dragon-kale-rax096-project (npm) (malicious package)
- [MAL-2025-187469](https://insights.sbomify.com/MAL-2025-187469/): Malicious code in info-user-wind-book-sanitize (npm) (malicious package)
- [MAL-2025-187468](https://insights.sbomify.com/MAL-2025-187468/): Malicious code in info-byte-simulate-cat-sudo (npm) (malicious package)
- [MAL-2025-187467](https://insights.sbomify.com/MAL-2025-187467/): Malicious code in inflation-weywot-comet-xo (npm) (malicious package)
- [MAL-2025-187466](https://insights.sbomify.com/MAL-2025-187466/): Malicious code in inflation-technocracy-css-minimizer-webpack-plugin-await (npm) (malicious package)
- [MAL-2025-187465](https://insights.sbomify.com/MAL-2025-187465/): Malicious code in inflation-hercules-websockets-private (npm) (malicious package)
- [MAL-2025-187464](https://insights.sbomify.com/MAL-2025-187464/): Malicious code in inflation-apollo-rocket-higgs (npm) (malicious package)
- [MAL-2025-187463](https://insights.sbomify.com/MAL-2025-187463/): Malicious code in inflation-antd-dependencies-phoenix (npm) (malicious package)
- [MAL-2025-187462](https://insights.sbomify.com/MAL-2025-187462/): Malicious code in indus-virgo-publish-taurus (npm) (malicious package)
- [MAL-2025-187461](https://insights.sbomify.com/MAL-2025-187461/): Malicious code in indus-triton-polaris-nextjs (npm) (malicious package)
- [MAL-2025-187460](https://insights.sbomify.com/MAL-2025-187460/): Malicious code in indus-reveal-md-gulp-neptune (npm) (malicious package)
- [MAL-2025-18746](https://insights.sbomify.com/MAL-2025-18746/): Malicious code in dragon-infinity-fnk008-project (npm) (malicious package)
- [MAL-2025-187459](https://insights.sbomify.com/MAL-2025-187459/): Malicious code in indus-neptune-typeorm-io (npm) (malicious package)
- [MAL-2025-187458](https://insights.sbomify.com/MAL-2025-187458/): Malicious code in indus-farout-carpo-astrobiology (npm) (malicious package)
- [MAL-2025-187457](https://insights.sbomify.com/MAL-2025-187457/): Malicious code in indus-cybernetics-prettier-plugin-markdown-pavo (npm) (malicious package)
- [MAL-2025-187456](https://insights.sbomify.com/MAL-2025-187456/): Malicious code in indus-coronalmassejection-sass-loader-virgo (npm) (malicious package)
- [MAL-2025-187455](https://insights.sbomify.com/MAL-2025-187455/): Malicious code in index-wind-info-emulate-fork (npm) (malicious package)
- [MAL-2025-187454](https://insights.sbomify.com/MAL-2025-187454/): Malicious code in index-short-java-phi-virtualize (npm) (malicious package)
- [MAL-2025-187453](https://insights.sbomify.com/MAL-2025-187453/): Malicious code in index-load-rain-gamma-log (npm) (malicious package)
- [MAL-2025-187452](https://insights.sbomify.com/MAL-2025-187452/): Malicious code in index-grid-unix-long-kappa (npm) (malicious package)
- [MAL-2025-187451](https://insights.sbomify.com/MAL-2025-187451/): Malicious code in index-gamma-authorize-deploy-async (npm) (malicious package)
- [MAL-2025-187450](https://insights.sbomify.com/MAL-2025-187450/): Malicious code in index-error-cold-earth-encode (npm) (malicious package)
- [MAL-2025-18745](https://insights.sbomify.com/MAL-2025-18745/): Malicious code in dragon-hill-dkg047-project (npm) (malicious package)
- [MAL-2025-187449](https://insights.sbomify.com/MAL-2025-187449/): Malicious code in index-chi-grep-nu-wind (npm) (malicious package)
- [MAL-2025-187448](https://insights.sbomify.com/MAL-2025-187448/): Malicious code in impulse-toml-despina-bootes (npm) (malicious package)
- [MAL-2025-187447](https://insights.sbomify.com/MAL-2025-187447/): Malicious code in impulse-sedna-sedna-cryovolcano (npm) (malicious package)
- [MAL-2025-187446](https://insights.sbomify.com/MAL-2025-187446/): Malicious code in impulse-node-sass-private-vuetify (npm) (malicious package)
- [MAL-2025-187445](https://insights.sbomify.com/MAL-2025-187445/): Malicious code in impulse-holography-grunt-sequelize (npm) (malicious package)
- [MAL-2025-187444](https://insights.sbomify.com/MAL-2025-187444/): Malicious code in impulse-figures-inquirer-oortcloud (npm) (malicious package)
- [MAL-2025-187443](https://insights.sbomify.com/MAL-2025-187443/): Malicious code in impulse-eslint-config-zenobia-octans (npm) (malicious package)
- [MAL-2025-187442](https://insights.sbomify.com/MAL-2025-187442/): Malicious code in impulse-dependencies-spinner-figures (npm) (malicious package)
- [MAL-2025-187441](https://insights.sbomify.com/MAL-2025-187441/): Malicious code in impulse-blaze-yonder-eleventy (npm) (malicious package)
- [MAL-2025-187440](https://insights.sbomify.com/MAL-2025-187440/): Malicious code in import-uglify-shell-assert-key (npm) (malicious package)
- [MAL-2025-18744](https://insights.sbomify.com/MAL-2025-18744/): Malicious code in dragon-grove-xpg303-project (npm) (malicious package)
- [MAL-2025-187439](https://insights.sbomify.com/MAL-2025-187439/): Malicious code in import-scale-deserialize-sudo-visualize (npm) (malicious package)
- [MAL-2025-187438](https://insights.sbomify.com/MAL-2025-187438/): Malicious code in import-proxy-cron-balance-abstract (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/960/