# Vulnerabilities published in 2025


- [MAL-2025-187437](https://insights.sbomify.com/MAL-2025-187437/): Malicious code in import-omega-long-cloud-gamma (npm) (malicious package)
- [MAL-2025-187436](https://insights.sbomify.com/MAL-2025-187436/): Malicious code in import-log-monitor-rho-function (npm) (malicious package)
- [MAL-2025-187435](https://insights.sbomify.com/MAL-2025-187435/): Malicious code in import-float-omega-user-eta (npm) (malicious package)
- [MAL-2025-187434](https://insights.sbomify.com/MAL-2025-187434/): Malicious code in import-debug-compress-byte-long (npm) (malicious package)
- [MAL-2025-187433](https://insights.sbomify.com/MAL-2025-187433/): Malicious code in import-compile-compile-bad-report (npm) (malicious package)
- [MAL-2025-187432](https://insights.sbomify.com/MAL-2025-187432/): Malicious code in import-benchmark-warn-node-catch (npm) (malicious package)
- [MAL-2025-187431](https://insights.sbomify.com/MAL-2025-187431/): Malicious code in import-abstract-nu-private-decrypt (npm) (malicious package)
- [MAL-2025-187430](https://insights.sbomify.com/MAL-2025-187430/): Malicious code in ignite-rehype-xo-cypress (npm) (malicious package)
- [MAL-2025-18743](https://insights.sbomify.com/MAL-2025-18743/): Malicious code in dragon-grove-qxk798-project (npm) (malicious package)
- [MAL-2025-187429](https://insights.sbomify.com/MAL-2025-187429/): Malicious code in ignite-puppeteer-procyon-vortex (npm) (malicious package)
- [MAL-2025-187428](https://insights.sbomify.com/MAL-2025-187428/): Malicious code in ignite-jekyll-europa-galaxy (npm) (malicious package)
- [MAL-2025-187427](https://insights.sbomify.com/MAL-2025-187427/): Malicious code in ignite-hermes-ophiuchus-semantic-ui (npm) (malicious package)
- [MAL-2025-187426](https://insights.sbomify.com/MAL-2025-187426/): Malicious code in ignite-cosmicray-accretion-altair (npm) (malicious package)
- [MAL-2025-187425](https://insights.sbomify.com/MAL-2025-187425/): Malicious code in ignite-configstore-morgan-kastra (npm) (malicious package)
- [MAL-2025-187424](https://insights.sbomify.com/MAL-2025-187424/): Malicious code in ignite-chai-mira-neptune (npm) (malicious package)
- [MAL-2025-187423](https://insights.sbomify.com/MAL-2025-187423/): Malicious code in ignite-callback-cosmochemistry-paleobotany (npm) (malicious package)
- [MAL-2025-187422](https://insights.sbomify.com/MAL-2025-187422/): Malicious code in ichnology-ursa-petrology-cluster (npm) (malicious package)
- [MAL-2025-187421](https://insights.sbomify.com/MAL-2025-187421/): Malicious code in ichnology-materialize-neptune-karma (npm) (malicious package)
- [MAL-2025-187420](https://insights.sbomify.com/MAL-2025-187420/): Malicious code in ichnology-eventhoriz-grus-non-blocking (npm) (malicious package)
- [MAL-2025-18742](https://insights.sbomify.com/MAL-2025-18742/): Malicious code in dragon-forest-qha399-project (npm) (malicious package)
- [MAL-2025-187419](https://insights.sbomify.com/MAL-2025-187419/): Malicious code in ichnology-archaeogenetics-repository-dione (npm) (malicious package)
- [MAL-2025-187418](https://insights.sbomify.com/MAL-2025-187418/): Malicious code in hyperion-terraforming-cli-callback (npm) (malicious package)
- [MAL-2025-187417](https://insights.sbomify.com/MAL-2025-187417/): Malicious code in hyperion-sails-accretion-multiverse (npm) (malicious package)
- [MAL-2025-187416](https://insights.sbomify.com/MAL-2025-187416/): Malicious code in hyperion-prettier-stylelint-sqlite-rehype (npm) (malicious package)
- [MAL-2025-187415](https://insights.sbomify.com/MAL-2025-187415/): Malicious code in hyperion-postgres-eslint-config-warp (npm) (malicious package)
- [MAL-2025-187414](https://insights.sbomify.com/MAL-2025-187414/): Malicious code in hyperion-oberon-mongodb-quantum-computing (npm) (malicious package)
- [MAL-2025-187413](https://insights.sbomify.com/MAL-2025-187413/): Malicious code in hyperion-kastra-paleontology-magnetosphere (npm) (malicious package)
- [MAL-2025-187412](https://insights.sbomify.com/MAL-2025-187412/): Malicious code in hyperion-inquirer-galaxy-quantumfoam (npm) (malicious package)
- [MAL-2025-187411](https://insights.sbomify.com/MAL-2025-187411/): Malicious code in hyperion-hermes-version-orbit (npm) (malicious package)
- [MAL-2025-187410](https://insights.sbomify.com/MAL-2025-187410/): Malicious code in hyperion-heka-promise-taurus (npm) (malicious package)
- [MAL-2025-18741](https://insights.sbomify.com/MAL-2025-18741/): Malicious code in dragon-dandelion-jqd178-project (npm) (malicious package)
- [MAL-2025-187409](https://insights.sbomify.com/MAL-2025-187409/): Malicious code in hyperion-capella-auth0-planetology (npm) (malicious package)
- [MAL-2025-187408](https://insights.sbomify.com/MAL-2025-187408/): Malicious code in hyperion-build-style-loader-lynx (npm) (malicious package)
- [MAL-2025-187407](https://insights.sbomify.com/MAL-2025-187407/): Malicious code in hydrogeology-mesosphere-event-troposphere (npm) (malicious package)
- [MAL-2025-187406](https://insights.sbomify.com/MAL-2025-187406/): Malicious code in hydrogeology-hydra-phoenix-fornax (npm) (malicious package)
- [MAL-2025-187405](https://insights.sbomify.com/MAL-2025-187405/): Malicious code in hydrogeology-chariklo-pulsar-mini-css-extract-plugin (npm) (malicious package)
- [MAL-2025-187404](https://insights.sbomify.com/MAL-2025-187404/): Malicious code in hydra-regulus-wavefunction-spectron (npm) (malicious package)
- [MAL-2025-187403](https://insights.sbomify.com/MAL-2025-187403/): Malicious code in hydra-publish-filament-prettier-plugin-markdown (npm) (malicious package)
- [MAL-2025-187402](https://insights.sbomify.com/MAL-2025-187402/): Malicious code in hydra-markdown-pdf-resolvers-postcss (npm) (malicious package)
- [MAL-2025-187401](https://insights.sbomify.com/MAL-2025-187401/): Malicious code in hydra-lepton-interstellarmedium-entanglement (npm) (malicious package)
- [MAL-2025-187400](https://insights.sbomify.com/MAL-2025-187400/): Malicious code in hydra-hermes-ichnology-ariel (npm) (malicious package)
- [MAL-2025-18740](https://insights.sbomify.com/MAL-2025-18740/): Malicious code in dragon-blossom-pvr257-project (npm) (malicious package)
- [MAL-2025-1874](https://insights.sbomify.com/MAL-2025-1874/): Malicious code in linkedin-logger (npm) (malicious package)
- [MAL-2025-187399](https://insights.sbomify.com/MAL-2025-187399/): Malicious code in hydra-helmet-terser-webpack-plugin-ignite (npm) (malicious package)
- [MAL-2025-187398](https://insights.sbomify.com/MAL-2025-187398/): Malicious code in hydra-hawkingradiation-markdownlint-mini-css-extract-plugin (npm) (malicious package)
- [MAL-2025-187397](https://insights.sbomify.com/MAL-2025-187397/): Malicious code in hydra-duplex-npm-ophiuchus (npm) (malicious package)
- [MAL-2025-187396](https://insights.sbomify.com/MAL-2025-187396/): Malicious code in hydra-cryovolcano-darkmatter-quasarjet (npm) (malicious package)
- [MAL-2025-187395](https://insights.sbomify.com/MAL-2025-187395/): Malicious code in husky-helios-wezen-nextjs (npm) (malicious package)
- [MAL-2025-187394](https://insights.sbomify.com/MAL-2025-187394/): Malicious code in husky-glaciology-weywot-rest (npm) (malicious package)
- [MAL-2025-187393](https://insights.sbomify.com/MAL-2025-187393/): Malicious code in husky-eridanus-quasar-geckodriver (npm) (malicious package)
- [MAL-2025-187392](https://insights.sbomify.com/MAL-2025-187392/): Malicious code in husky-despina-readable-oscillation (npm) (malicious package)
- [MAL-2025-187391](https://insights.sbomify.com/MAL-2025-187391/): Malicious code in husky-bulma-nebula-concurrently (npm) (malicious package)
- [MAL-2025-187390](https://insights.sbomify.com/MAL-2025-187390/): Malicious code in husky-build-toml-troposphere (npm) (malicious package)
- [MAL-2025-18739](https://insights.sbomify.com/MAL-2025-18739/): Malicious code in dragon-amber-tpi790-project (npm) (malicious package)
- [MAL-2025-187389](https://insights.sbomify.com/MAL-2025-187389/): Malicious code in hugo-wavefunction-dotenv-parse-variables-parallax (npm) (malicious package)
- [MAL-2025-187388](https://insights.sbomify.com/MAL-2025-187388/): Malicious code in hugo-unuk-leda-altair (npm) (malicious package)
- [MAL-2025-187387](https://insights.sbomify.com/MAL-2025-187387/): Malicious code in hugo-plutology-comet-cluster (npm) (malicious package)
- [MAL-2025-187386](https://insights.sbomify.com/MAL-2025-187386/): Malicious code in hugo-nashira-boson-passport (npm) (malicious package)
- [MAL-2025-187385](https://insights.sbomify.com/MAL-2025-187385/): Malicious code in hugo-miranda-prettier-stylelint-xenon (npm) (malicious package)
- [MAL-2025-187384](https://insights.sbomify.com/MAL-2025-187384/): Malicious code in hugo-mini-css-extract-plugin-ophiuchus-convict (npm) (malicious package)
- [MAL-2025-187383](https://insights.sbomify.com/MAL-2025-187383/): Malicious code in hugo-capella-janus-nucleosynthesis (npm) (malicious package)
- [MAL-2025-187382](https://insights.sbomify.com/MAL-2025-187382/): Malicious code in hugo-build-configstore-rollup-plugin (npm) (malicious package)
- [MAL-2025-187381](https://insights.sbomify.com/MAL-2025-187381/): Malicious code in html-webpack-plugin-zenobia-nebula-antares (npm) (malicious package)
- [MAL-2025-187380](https://insights.sbomify.com/MAL-2025-187380/): Malicious code in html-webpack-plugin-wavefunction-local-ora (npm) (malicious package)
- [MAL-2025-18738](https://insights.sbomify.com/MAL-2025-18738/): Malicious code in dragduino (npm) (malicious package)
- [MAL-2025-187379](https://insights.sbomify.com/MAL-2025-187379/): Malicious code in html-webpack-plugin-version-vulcan-rollup (npm) (malicious package)
- [MAL-2025-187378](https://insights.sbomify.com/MAL-2025-187378/): Malicious code in html-webpack-plugin-vega-atlas-fetch (npm) (malicious package)
- [MAL-2025-187377](https://insights.sbomify.com/MAL-2025-187377/): Malicious code in html-webpack-plugin-taphonomy-test-coronalmassejection (npm) (malicious package)
- [MAL-2025-187376](https://insights.sbomify.com/MAL-2025-187376/): Malicious code in html-webpack-plugin-promise-meteor-dactyl (npm) (malicious package)
- [MAL-2025-187375](https://insights.sbomify.com/MAL-2025-187375/): Malicious code in html-webpack-plugin-multiverse-proteomics-blackhole (npm) (malicious package)
- [MAL-2025-187374](https://insights.sbomify.com/MAL-2025-187374/): Malicious code in html-webpack-plugin-hologram-stream-install (npm) (malicious package)
- [MAL-2025-187373](https://insights.sbomify.com/MAL-2025-187373/): Malicious code in html-webpack-plugin-deimos-toml-command (npm) (malicious package)
- [MAL-2025-187372](https://insights.sbomify.com/MAL-2025-187372/): Malicious code in html-webpack-plugin-atlas-global-lacerta (npm) (malicious package)
- [MAL-2025-187371](https://insights.sbomify.com/MAL-2025-187371/): Malicious code in hot-thread-cold-fast-epsilon (npm) (malicious package)
- [MAL-2025-187370](https://insights.sbomify.com/MAL-2025-187370/): Malicious code in hot-float-moon-unix-fork (npm) (malicious package)
- [MAL-2025-18737](https://insights.sbomify.com/MAL-2025-18737/): Malicious code in dragand-subtitle-plugin (npm) (malicious package)
- [MAL-2025-187369](https://insights.sbomify.com/MAL-2025-187369/): Malicious code in hot-awk-authorize-float-interface (npm) (malicious package)
- [MAL-2025-187368](https://insights.sbomify.com/MAL-2025-187368/): Malicious code in holography-hercules-janus-postcss (npm) (malicious package)
- [MAL-2025-187367](https://insights.sbomify.com/MAL-2025-187367/): Malicious code in holography-development-nightmare-uranology (npm) (malicious package)
- [MAL-2025-187366](https://insights.sbomify.com/MAL-2025-187366/): Malicious code in holography-commitlint-xml-unuk (npm) (malicious package)
- [MAL-2025-187365](https://insights.sbomify.com/MAL-2025-187365/): Malicious code in holography-commitizen-kardashevscale-morgan (npm) (malicious package)
- [MAL-2025-187364](https://insights.sbomify.com/MAL-2025-187364/): Malicious code in holography-antares-enif-callback (npm) (malicious package)
- [MAL-2025-187363](https://insights.sbomify.com/MAL-2025-187363/): Malicious code in hologram-oscillation-config-nestjs (npm) (malicious package)
- [MAL-2025-187362](https://insights.sbomify.com/MAL-2025-187362/): Malicious code in hologram-jekyll-radiometric-bellatrix (npm) (malicious package)
- [MAL-2025-187361](https://insights.sbomify.com/MAL-2025-187361/): Malicious code in higgs-markdown-pdf-kaus-helmet (npm) (malicious package)
- [MAL-2025-187360](https://insights.sbomify.com/MAL-2025-187360/): Malicious code in higgs-ichnology-paleoceanography-pm2 (npm) (malicious package)
- [MAL-2025-18736](https://insights.sbomify.com/MAL-2025-18736/): Malicious code in dragand-player-plugin (npm) (malicious package)
- [MAL-2025-187359](https://insights.sbomify.com/MAL-2025-187359/): Malicious code in higgs-commitizen-aether-archaeogenetics (npm) (malicious package)
- [MAL-2025-187358](https://insights.sbomify.com/MAL-2025-187358/): Malicious code in higgs-biosignature-inflation-upgrade (npm) (malicious package)
- [MAL-2025-187357](https://insights.sbomify.com/MAL-2025-187357/): Malicious code in hexo-steganography-cli-standard (npm) (malicious package)
- [MAL-2025-187356](https://insights.sbomify.com/MAL-2025-187356/): Malicious code in hexo-restart-farout-sync (npm) (malicious package)
- [MAL-2025-187355](https://insights.sbomify.com/MAL-2025-187355/): Malicious code in hexo-publish-hexo-xo (npm) (malicious package)
- [MAL-2025-187354](https://insights.sbomify.com/MAL-2025-187354/): Malicious code in hexo-phenomic-odin-element-ui (npm) (malicious package)
- [MAL-2025-187353](https://insights.sbomify.com/MAL-2025-187353/): Malicious code in hexo-interstellarmedium-spinner-less (npm) (malicious package)
- [MAL-2025-187352](https://insights.sbomify.com/MAL-2025-187352/): Malicious code in hexo-duplex-xenos-bootstrap (npm) (malicious package)
- [MAL-2025-187351](https://insights.sbomify.com/MAL-2025-187351/): Malicious code in hexo-commitlint-config-angular-nuxtjs-neptune (npm) (malicious package)
- [MAL-2025-187350](https://insights.sbomify.com/MAL-2025-187350/): Malicious code in hexo-boson-charon-framework (npm) (malicious package)
- [MAL-2025-18735](https://insights.sbomify.com/MAL-2025-18735/): Malicious code in dragand-fileinfo-plugin (npm) (malicious package)
- [MAL-2025-187349](https://insights.sbomify.com/MAL-2025-187349/): Malicious code in hermes-websockets-arcturus-meteor (npm) (malicious package)
- [MAL-2025-187348](https://insights.sbomify.com/MAL-2025-187348/): Malicious code in hermes-version-mdx-yaml (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/961/