# Vulnerabilities published in 2025


- [MAL-2025-187347](https://insights.sbomify.com/MAL-2025-187347/): Malicious code in hermes-venus-cosmos-rest (npm) (malicious package)
- [MAL-2025-187346](https://insights.sbomify.com/MAL-2025-187346/): Malicious code in hermes-polaris-regulus-apollo (npm) (malicious package)
- [MAL-2025-187345](https://insights.sbomify.com/MAL-2025-187345/): Malicious code in hermes-jekyll-io-nightwatch (npm) (malicious package)
- [MAL-2025-187344](https://insights.sbomify.com/MAL-2025-187344/): Malicious code in hermes-dactyl-canopus-flare (npm) (malicious package)
- [MAL-2025-187343](https://insights.sbomify.com/MAL-2025-187343/): Malicious code in hermes-config-unuk-aurora (npm) (malicious package)
- [MAL-2025-187342](https://insights.sbomify.com/MAL-2025-187342/): Malicious code in hermes-child-process-apex-centauri (npm) (malicious package)
- [MAL-2025-187341](https://insights.sbomify.com/MAL-2025-187341/): Malicious code in hermes-browserify-alphard-greatfilter (npm) (malicious package)
- [MAL-2025-187340](https://insights.sbomify.com/MAL-2025-187340/): Malicious code in hercules-winston-janus-miranda (npm) (malicious package)
- [MAL-2025-18734](https://insights.sbomify.com/MAL-2025-18734/): Malicious code in drafteo (npm) (malicious package)
- [MAL-2025-187339](https://insights.sbomify.com/MAL-2025-187339/): Malicious code in hercules-radiant-jekyll-delphinus (npm) (malicious package)
- [MAL-2025-187338](https://insights.sbomify.com/MAL-2025-187338/): Malicious code in hercules-pyxis-rehype-hermes (npm) (malicious package)
- [MAL-2025-187337](https://insights.sbomify.com/MAL-2025-187337/): Malicious code in hercules-local-ceres-backend (npm) (malicious package)
- [MAL-2025-187336](https://insights.sbomify.com/MAL-2025-187336/): Malicious code in hercules-fermion-hyperion-version (npm) (malicious package)
- [MAL-2025-187335](https://insights.sbomify.com/MAL-2025-187335/): Malicious code in hercules-deimos-superagent-webdriverio (npm) (malicious package)
- [MAL-2025-187334](https://insights.sbomify.com/MAL-2025-187334/): Malicious code in hercules-css-minimizer-webpack-plugin-cz-conventional-changelog-dorado (npm) (malicious package)
- [MAL-2025-187333](https://insights.sbomify.com/MAL-2025-187333/): Malicious code in hercules-css-loader-restart-eslint-plugin (npm) (malicious package)
- [MAL-2025-187332](https://insights.sbomify.com/MAL-2025-187332/): Malicious code in hercules-config-juno-void (npm) (malicious package)
- [MAL-2025-187331](https://insights.sbomify.com/MAL-2025-187331/): Malicious code in helmet-terser-isostasy-nova (npm) (malicious package)
- [MAL-2025-187330](https://insights.sbomify.com/MAL-2025-187330/): Malicious code in helmet-supercluster-release-it-technosignature (npm) (malicious package)
- [MAL-2025-18733](https://insights.sbomify.com/MAL-2025-18733/): Malicious code in draft-js-sticker-plugin-vixlet (npm) (malicious package)
- [MAL-2025-187329](https://insights.sbomify.com/MAL-2025-187329/): Malicious code in helmet-sirius-ini-mocha (npm) (malicious package)
- [MAL-2025-187328](https://insights.sbomify.com/MAL-2025-187328/): Malicious code in helmet-sagitta-saturnology-element-ui (npm) (malicious package)
- [MAL-2025-187327](https://insights.sbomify.com/MAL-2025-187327/): Malicious code in helmet-release-it-enceladus-figures (npm) (malicious package)
- [MAL-2025-187326](https://insights.sbomify.com/MAL-2025-187326/): Malicious code in helmet-radiant-babel-dorado (npm) (malicious package)
- [MAL-2025-187325](https://insights.sbomify.com/MAL-2025-187325/): Malicious code in helmet-pegasus-non-blocking-phoebe (npm) (malicious package)
- [MAL-2025-187324](https://insights.sbomify.com/MAL-2025-187324/): Malicious code in helmet-neutronstar-xo-xerxes (npm) (malicious package)
- [MAL-2025-187323](https://insights.sbomify.com/MAL-2025-187323/): Malicious code in helmet-geochronology-rigel-sails (npm) (malicious package)
- [MAL-2025-187322](https://insights.sbomify.com/MAL-2025-187322/): Malicious code in helmet-blitz-izar-update (npm) (malicious package)
- [MAL-2025-187321](https://insights.sbomify.com/MAL-2025-187321/): Malicious code in helios-zenobia-geckodriver-rigel (npm) (malicious package)
- [MAL-2025-187320](https://insights.sbomify.com/MAL-2025-187320/): Malicious code in helios-webdriver-mocha-superposition-phylogenetics (npm) (malicious package)
- [MAL-2025-18732](https://insights.sbomify.com/MAL-2025-18732/): Malicious code in draft-js-mention-plugin-vixlet (npm) (malicious package)
- [MAL-2025-187319](https://insights.sbomify.com/MAL-2025-187319/): Malicious code in helios-nightwatch-tethys-eridanus (npm) (malicious package)
- [MAL-2025-187318](https://insights.sbomify.com/MAL-2025-187318/): Malicious code in helios-jekyll-polaris-soap (npm) (malicious package)
- [MAL-2025-187317](https://insights.sbomify.com/MAL-2025-187317/): Malicious code in helios-fusion-rollup-command (npm) (malicious package)
- [MAL-2025-187316](https://insights.sbomify.com/MAL-2025-187316/): Malicious code in helios-epigenetics-asteroid-eclipse (npm) (malicious package)
- [MAL-2025-187315](https://insights.sbomify.com/MAL-2025-187315/): Malicious code in helios-cressida-biogeochemistry-halley (npm) (malicious package)
- [MAL-2025-187314](https://insights.sbomify.com/MAL-2025-187314/): Malicious code in helios-centaurus-juno-lint-staged (npm) (malicious package)
- [MAL-2025-187313](https://insights.sbomify.com/MAL-2025-187313/): Malicious code in heliophysics-pino-umbriel-request (npm) (malicious package)
- [MAL-2025-187312](https://insights.sbomify.com/MAL-2025-187312/): Malicious code in heliophysics-blackhole-ganymede-cluster (npm) (malicious package)
- [MAL-2025-187311](https://insights.sbomify.com/MAL-2025-187311/): Malicious code in heliophysics-aurora-lint-staged-global (npm) (malicious package)
- [MAL-2025-187310](https://insights.sbomify.com/MAL-2025-187310/): Malicious code in heka-zenobia-pyxis-mui (npm) (malicious package)
- [MAL-2025-18731](https://insights.sbomify.com/MAL-2025-18731/): Malicious code in draco-private-loop-vega (npm) (malicious package)
- [MAL-2025-187309](https://insights.sbomify.com/MAL-2025-187309/): Malicious code in heka-relay-grunt-gammarayburst (npm) (malicious package)
- [MAL-2025-187308](https://insights.sbomify.com/MAL-2025-187308/): Malicious code in heka-puppeteer-phoebe-meteor (npm) (malicious package)
- [MAL-2025-187307](https://insights.sbomify.com/MAL-2025-187307/): Malicious code in heka-neptune-nightwatch-andromeda (npm) (malicious package)
- [MAL-2025-187306](https://insights.sbomify.com/MAL-2025-187306/): Malicious code in heka-mdx-kaus-indus (npm) (malicious package)
- [MAL-2025-187305](https://insights.sbomify.com/MAL-2025-187305/): Malicious code in heka-markdownlint-rollup-node-config (npm) (malicious package)
- [MAL-2025-187304](https://insights.sbomify.com/MAL-2025-187304/): Malicious code in heka-centaurus-nodemon-hydrogeology (npm) (malicious package)
- [MAL-2025-187303](https://insights.sbomify.com/MAL-2025-187303/): Malicious code in heka-buffer-install-transform (npm) (malicious package)
- [MAL-2025-187302](https://insights.sbomify.com/MAL-2025-187302/): Malicious code in heka-buffer-holography-subduction (npm) (malicious package)
- [MAL-2025-187301](https://insights.sbomify.com/MAL-2025-187301/): Malicious code in heka-bootstrap-javascript-loopback (npm) (malicious package)
- [MAL-2025-187300](https://insights.sbomify.com/MAL-2025-187300/): Malicious code in heka-antares-vulcan-commitizen (npm) (malicious package)
- [MAL-2025-18730](https://insights.sbomify.com/MAL-2025-18730/): Malicious code in draco-parallax-mineralogy-quantum (npm) (malicious package)
- [MAL-2025-1873](https://insights.sbomify.com/MAL-2025-1873/): Malicious code in linkedin-jira (npm) (malicious package)
- [MAL-2025-187299](https://insights.sbomify.com/MAL-2025-187299/): Malicious code in hawkingradiation-xenobiology-prettier-stylelint-buffer (npm) (malicious package)
- [MAL-2025-187298](https://insights.sbomify.com/MAL-2025-187298/): Malicious code in hawkingradiation-volcanology-npm-delphinus (npm) (malicious package)
- [MAL-2025-187297](https://insights.sbomify.com/MAL-2025-187297/): Malicious code in hawkingradiation-sadr-buffer-heliophysics (npm) (malicious package)
- [MAL-2025-187296](https://insights.sbomify.com/MAL-2025-187296/): Malicious code in hawkingradiation-ora-celeste-toml (npm) (malicious package)
- [MAL-2025-187295](https://insights.sbomify.com/MAL-2025-187295/): Malicious code in hawkingradiation-mensa-dotenv-parse-variables-inquirer (npm) (malicious package)
- [MAL-2025-187294](https://insights.sbomify.com/MAL-2025-187294/): Malicious code in hawkingradiation-jupiter-toml-comet (npm) (malicious package)
- [MAL-2025-187293](https://insights.sbomify.com/MAL-2025-187293/): Malicious code in hawkingradiation-jupiter-morgan-equinox (npm) (malicious package)
- [MAL-2025-187292](https://insights.sbomify.com/MAL-2025-187292/): Malicious code in hawkingradiation-flare-hydrogeology-quito (npm) (malicious package)
- [MAL-2025-187291](https://insights.sbomify.com/MAL-2025-187291/): Malicious code in hawkingradiation-eslint-mantle-lyra (npm) (malicious package)
- [MAL-2025-187290](https://insights.sbomify.com/MAL-2025-187290/): Malicious code in hawkingradiation-carina-oortcloud-gammarayburst (npm) (malicious package)
- [MAL-2025-18729](https://insights.sbomify.com/MAL-2025-18729/): Malicious code in draco-optimize-css-assets-webpack-plugin-proxima-nconf (npm) (malicious package)
- [MAL-2025-187289](https://insights.sbomify.com/MAL-2025-187289/): Malicious code in hawkingradiation-backend-farout-despina (npm) (malicious package)
- [MAL-2025-187288](https://insights.sbomify.com/MAL-2025-187288/): Malicious code in hawkingradiation-aether-mesosphere-loopback (npm) (malicious package)
- [MAL-2025-187287](https://insights.sbomify.com/MAL-2025-187287/): Malicious code in hash-warn-async-private-shell (npm) (malicious package)
- [MAL-2025-187286](https://insights.sbomify.com/MAL-2025-187286/): Malicious code in hash-uglify-cluster-info-orchestrate (npm) (malicious package)
- [MAL-2025-187285](https://insights.sbomify.com/MAL-2025-187285/): Malicious code in hash-test-interface-emulate-file (npm) (malicious package)
- [MAL-2025-187284](https://insights.sbomify.com/MAL-2025-187284/): Malicious code in hash-table-enum-debug-unix (npm) (malicious package)
- [MAL-2025-187283](https://insights.sbomify.com/MAL-2025-187283/): Malicious code in hash-socket-slow-debug-interpret (npm) (malicious package)
- [MAL-2025-187282](https://insights.sbomify.com/MAL-2025-187282/): Malicious code in hash-char-new-alert-sandbox (npm) (malicious package)
- [MAL-2025-187281](https://insights.sbomify.com/MAL-2025-187281/): Malicious code in hash-authorize-sanitize-signal-cloud (npm) (malicious package)
- [MAL-2025-187280](https://insights.sbomify.com/MAL-2025-187280/): Malicious code in hapi-zenobia-superagent-geodynamo (npm) (malicious package)
- [MAL-2025-18728](https://insights.sbomify.com/MAL-2025-18728/): Malicious code in draco-nconf-callisto-cygnus (npm) (malicious package)
- [MAL-2025-187279](https://insights.sbomify.com/MAL-2025-187279/): Malicious code in hapi-zenobia-ophiuchus-quantum (npm) (malicious package)
- [MAL-2025-187278](https://insights.sbomify.com/MAL-2025-187278/): Malicious code in hapi-protoplanetarydisk-halley-aether (npm) (malicious package)
- [MAL-2025-187277](https://insights.sbomify.com/MAL-2025-187277/): Malicious code in hapi-prosthetics-thermochronology-galaxy (npm) (malicious package)
- [MAL-2025-187276](https://insights.sbomify.com/MAL-2025-187276/): Malicious code in hapi-orogeny-tardigrade-rate-limiter (npm) (malicious package)
- [MAL-2025-187275](https://insights.sbomify.com/MAL-2025-187275/): Malicious code in hapi-dynamo-archaeoastronomy-leda (npm) (malicious package)
- [MAL-2025-187274](https://insights.sbomify.com/MAL-2025-187274/): Malicious code in hapi-cross-env-subduction-mongodb (npm) (malicious package)
- [MAL-2025-187273](https://insights.sbomify.com/MAL-2025-187273/): Malicious code in halley-xanthus-aquarius-fornax (npm) (malicious package)
- [MAL-2025-187272](https://insights.sbomify.com/MAL-2025-187272/): Malicious code in halley-unuk-hyperion-sedna (npm) (malicious package)
- [MAL-2025-187271](https://insights.sbomify.com/MAL-2025-187271/): Malicious code in halley-subduction-zephyr-paleoclimatology (npm) (malicious package)
- [MAL-2025-187270](https://insights.sbomify.com/MAL-2025-187270/): Malicious code in halley-resolvers-quantum-neptunology (npm) (malicious package)
- [MAL-2025-18727](https://insights.sbomify.com/MAL-2025-18727/): Malicious code in draco-lacerta-process-semantic-ui (npm) (malicious package)
- [MAL-2025-187269](https://insights.sbomify.com/MAL-2025-187269/): Malicious code in halley-pm2-semantic-ui-commitlint-config-angular (npm) (malicious package)
- [MAL-2025-187268](https://insights.sbomify.com/MAL-2025-187268/): Malicious code in halley-paleoceanography-mui-callisto (npm) (malicious package)
- [MAL-2025-187267](https://insights.sbomify.com/MAL-2025-187267/): Malicious code in halley-fusion-parcel-node-sass (npm) (malicious package)
- [MAL-2025-187266](https://insights.sbomify.com/MAL-2025-187266/): Malicious code in halley-eigenstate-baryon-gatsby (npm) (malicious package)
- [MAL-2025-187265](https://insights.sbomify.com/MAL-2025-187265/): Malicious code in halley-blueshift-sagitta-restart (npm) (malicious package)
- [MAL-2025-187264](https://insights.sbomify.com/MAL-2025-187264/): Malicious code in halley-bioinformatics-mui-venus (npm) (malicious package)
- [MAL-2025-187263](https://insights.sbomify.com/MAL-2025-187263/): Malicious code in halley-antares-lint-staged-protractor (npm) (malicious package)
- [MAL-2025-187262](https://insights.sbomify.com/MAL-2025-187262/): Malicious code in halley-andromeda-elektra-supernova (npm) (malicious package)
- [MAL-2025-187261](https://insights.sbomify.com/MAL-2025-187261/): Malicious code in hadron-vuetify-astrophysics-prompts (npm) (malicious package)
- [MAL-2025-187260](https://insights.sbomify.com/MAL-2025-187260/): Malicious code in hadron-postgres-phylogenetics-loop (npm) (malicious package)
- [MAL-2025-18726](https://insights.sbomify.com/MAL-2025-18726/): Malicious code in draco-altair-sirius-jest (npm) (malicious package)
- [MAL-2025-187259](https://insights.sbomify.com/MAL-2025-187259/): Malicious code in hadron-pino-pretty-hermes-jabbah (npm) (malicious package)
- [MAL-2025-187258](https://insights.sbomify.com/MAL-2025-187258/): Malicious code in hadron-hyperion-tailwindcss-tectonophysics (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/962/