# Vulnerabilities published in 2025


- [MAL-2025-187257](https://insights.sbomify.com/MAL-2025-187257/): Malicious code in gulp-yildun-lacerta-webpack (npm) (malicious package)
- [MAL-2025-187256](https://insights.sbomify.com/MAL-2025-187256/): Malicious code in gulp-rollup-plugin-carina-csv (npm) (malicious package)
- [MAL-2025-187255](https://insights.sbomify.com/MAL-2025-187255/): Malicious code in gulp-prettier-spinner-parallax (npm) (malicious package)
- [MAL-2025-187254](https://insights.sbomify.com/MAL-2025-187254/): Malicious code in gulp-parcel-bioinformatics-halley (npm) (malicious package)
- [MAL-2025-187253](https://insights.sbomify.com/MAL-2025-187253/): Malicious code in gulp-oberon-husky-start (npm) (malicious package)
- [MAL-2025-187252](https://insights.sbomify.com/MAL-2025-187252/): Malicious code in gulp-kinetic-mongodb-astrometry (npm) (malicious package)
- [MAL-2025-187251](https://insights.sbomify.com/MAL-2025-187251/): Malicious code in gulp-javascript-carpo-markdown-pdf (npm) (malicious package)
- [MAL-2025-187250](https://insights.sbomify.com/MAL-2025-187250/): Malicious code in gulp-cluster-hermes-backend (npm) (malicious package)
- [MAL-2025-18725](https://insights.sbomify.com/MAL-2025-18725/): Malicious code in dr-service-ecosystem (npm) (malicious package)
- [MAL-2025-187249](https://insights.sbomify.com/MAL-2025-187249/): Malicious code in grus-superposition-pegasus-antd (npm) (malicious package)
- [MAL-2025-187248](https://insights.sbomify.com/MAL-2025-187248/): Malicious code in grus-schema-odin-library (npm) (malicious package)
- [MAL-2025-187247](https://insights.sbomify.com/MAL-2025-187247/): Malicious code in grus-prosthetics-stream-prettier-plugin-markdown (npm) (malicious package)
- [MAL-2025-187246](https://insights.sbomify.com/MAL-2025-187246/): Malicious code in grus-private-quark-prettier-plugin-markdown (npm) (malicious package)
- [MAL-2025-187245](https://insights.sbomify.com/MAL-2025-187245/): Malicious code in grus-pipe-websockets-grunt (npm) (malicious package)
- [MAL-2025-187244](https://insights.sbomify.com/MAL-2025-187244/): Malicious code in grus-nodemon-rehype-hermes (npm) (malicious package)
- [MAL-2025-187243](https://insights.sbomify.com/MAL-2025-187243/): Malicious code in grus-neutrino-html-webpack-plugin-cluster (npm) (malicious package)
- [MAL-2025-187242](https://insights.sbomify.com/MAL-2025-187242/): Malicious code in grus-eslint-enif-test (npm) (malicious package)
- [MAL-2025-187241](https://insights.sbomify.com/MAL-2025-187241/): Malicious code in grus-crust-greatfilter-holography (npm) (malicious package)
- [MAL-2025-187240](https://insights.sbomify.com/MAL-2025-187240/): Malicious code in grunt-ursa-cosmochemistry-xenobiology (npm) (malicious package)
- [MAL-2025-18724](https://insights.sbomify.com/MAL-2025-18724/): Malicious code in dr-logger-client (npm) (malicious package)
- [MAL-2025-187239](https://insights.sbomify.com/MAL-2025-187239/): Malicious code in grunt-bellatrix-less-sirius (npm) (malicious package)
- [MAL-2025-187238](https://insights.sbomify.com/MAL-2025-187238/): Malicious code in gridsome-slides-pipe-socketio (npm) (malicious package)
- [MAL-2025-187237](https://insights.sbomify.com/MAL-2025-187237/): Malicious code in gridsome-procyon-karma-callback (npm) (malicious package)
- [MAL-2025-187236](https://insights.sbomify.com/MAL-2025-187236/): Malicious code in gridsome-planckscale-primatology-speleology (npm) (malicious package)
- [MAL-2025-187235](https://insights.sbomify.com/MAL-2025-187235/): Malicious code in gridsome-interstellarmedium-private-meteor (npm) (malicious package)
- [MAL-2025-187234](https://insights.sbomify.com/MAL-2025-187234/): Malicious code in gridsome-enceladus-aldebaran-auth0 (npm) (malicious package)
- [MAL-2025-187233](https://insights.sbomify.com/MAL-2025-187233/): Malicious code in gridsome-andromeda-algol-exoplanetology (npm) (malicious package)
- [MAL-2025-187232](https://insights.sbomify.com/MAL-2025-187232/): Malicious code in grid-mu-cloud-signal-cat (npm) (malicious package)
- [MAL-2025-187231](https://insights.sbomify.com/MAL-2025-187231/): Malicious code in grep-zero-sigma-log-big (npm) (malicious package)
- [MAL-2025-187230](https://insights.sbomify.com/MAL-2025-187230/): Malicious code in grep-pi-final-interpret-cloud (npm) (malicious package)
- [MAL-2025-18723](https://insights.sbomify.com/MAL-2025-18723/): Malicious code in dpscope (npm) (malicious package)
- [MAL-2025-187229](https://insights.sbomify.com/MAL-2025-187229/): Malicious code in grep-fire-throw-web-sed (npm) (malicious package)
- [MAL-2025-187228](https://insights.sbomify.com/MAL-2025-187228/): Malicious code in grep-emulate-module-assert-chi (npm) (malicious package)
- [MAL-2025-187227](https://insights.sbomify.com/MAL-2025-187227/): Malicious code in grep-dog-function-stub-tree (npm) (malicious package)
- [MAL-2025-187226](https://insights.sbomify.com/MAL-2025-187226/): Malicious code in grep-cron-thread-grep-short (npm) (malicious package)
- [MAL-2025-187225](https://insights.sbomify.com/MAL-2025-187225/): Malicious code in greatfilter-venus-stream-halley (npm) (malicious package)
- [MAL-2025-187224](https://insights.sbomify.com/MAL-2025-187224/): Malicious code in greatfilter-repository-on-proxima (npm) (malicious package)
- [MAL-2025-187223](https://insights.sbomify.com/MAL-2025-187223/): Malicious code in greatfilter-process-mutation-crust (npm) (malicious package)
- [MAL-2025-187222](https://insights.sbomify.com/MAL-2025-187222/): Malicious code in greatfilter-nova-morgan-private (npm) (malicious package)
- [MAL-2025-187221](https://insights.sbomify.com/MAL-2025-187221/): Malicious code in greatfilter-lithosphere-isostasy-rocket (npm) (malicious package)
- [MAL-2025-187220](https://insights.sbomify.com/MAL-2025-187220/): Malicious code in greatfilter-greatfilter-kastra-eslint-config (npm) (malicious package)
- [MAL-2025-18722](https://insights.sbomify.com/MAL-2025-18722/): Malicious code in dpdraft (npm) (malicious package)
- [MAL-2025-187219](https://insights.sbomify.com/MAL-2025-187219/): Malicious code in gravity-wezen-sequelize-fermion (npm) (malicious package)
- [MAL-2025-187218](https://insights.sbomify.com/MAL-2025-187218/): Malicious code in gravity-taurus-superflare-version (npm) (malicious package)
- [MAL-2025-187217](https://insights.sbomify.com/MAL-2025-187217/): Malicious code in gravity-start-triton-oauth (npm) (malicious package)
- [MAL-2025-187216](https://insights.sbomify.com/MAL-2025-187216/): Malicious code in gravity-juno-cors-sirius (npm) (malicious package)
- [MAL-2025-187215](https://insights.sbomify.com/MAL-2025-187215/): Malicious code in gravity-cosmology-lightyear-inquirer (npm) (malicious package)
- [MAL-2025-187214](https://insights.sbomify.com/MAL-2025-187214/): Malicious code in graviton-sociobiology-tailwindcss-rollup (npm) (malicious package)
- [MAL-2025-187213](https://insights.sbomify.com/MAL-2025-187213/): Malicious code in graviton-module-stratigraphy-xanadu (npm) (malicious package)
- [MAL-2025-187212](https://insights.sbomify.com/MAL-2025-187212/): Malicious code in graviton-jest-sirius-vuepress (npm) (malicious package)
- [MAL-2025-187211](https://insights.sbomify.com/MAL-2025-187211/): Malicious code in graviton-hapi-less-loader-electron (npm) (malicious package)
- [MAL-2025-187210](https://insights.sbomify.com/MAL-2025-187210/): Malicious code in graviton-greatfilter-crust-quantum-computing (npm) (malicious package)
- [MAL-2025-18721](https://insights.sbomify.com/MAL-2025-18721/): Malicious code in dpanneur (npm) (malicious package)
- [MAL-2025-187209](https://insights.sbomify.com/MAL-2025-187209/): Malicious code in graviton-command-global-axios (npm) (malicious package)
- [MAL-2025-187208](https://insights.sbomify.com/MAL-2025-187208/): Malicious code in gravitationalwave-transhumanism-repository-cors (npm) (malicious package)
- [MAL-2025-187207](https://insights.sbomify.com/MAL-2025-187207/): Malicious code in graphql-npm-soap-fermiparadox (npm) (malicious package)
- [MAL-2025-187206](https://insights.sbomify.com/MAL-2025-187206/): Malicious code in graphql-nightmare-css-loader-abiogenesis (npm) (malicious package)
- [MAL-2025-187205](https://insights.sbomify.com/MAL-2025-187205/): Malicious code in graphql-karma-cluster-mongodb (npm) (malicious package)
- [MAL-2025-187204](https://insights.sbomify.com/MAL-2025-187204/): Malicious code in graphql-elektra-triton-transform (npm) (malicious package)
- [MAL-2025-187203](https://insights.sbomify.com/MAL-2025-187203/): Malicious code in got-paleoclimatology-nebula-commitizen (npm) (malicious package)
- [MAL-2025-187202](https://insights.sbomify.com/MAL-2025-187202/): Malicious code in got-nightwatch-despina-react-bootstrap (npm) (malicious package)
- [MAL-2025-187201](https://insights.sbomify.com/MAL-2025-187201/): Malicious code in got-lynx-greatfilter-betelgeuse (npm) (malicious package)
- [MAL-2025-187200](https://insights.sbomify.com/MAL-2025-187200/): Malicious code in got-loglevel-ceres-acamar (npm) (malicious package)
- [MAL-2025-18720](https://insights.sbomify.com/MAL-2025-18720/): Malicious code in doxmaster (npm) (malicious package)
- [MAL-2025-1872](https://insights.sbomify.com/MAL-2025-1872/): Malicious code in linkedin-internal (npm) (malicious package)
- [MAL-2025-187199](https://insights.sbomify.com/MAL-2025-187199/): Malicious code in got-install-blackhole-pipe (npm) (malicious package)
- [MAL-2025-187198](https://insights.sbomify.com/MAL-2025-187198/): Malicious code in got-cosmicweb-canopus-halley (npm) (malicious package)
- [MAL-2025-187197](https://insights.sbomify.com/MAL-2025-187197/): Malicious code in got-callisto-whitedwarf-gammarayburst (npm) (malicious package)
- [MAL-2025-187196](https://insights.sbomify.com/MAL-2025-187196/): Malicious code in google-radiant-weywot-rocket (npm) (malicious package)
- [MAL-2025-187195](https://insights.sbomify.com/MAL-2025-187195/): Malicious code in google-darkmatter-xerxes-europa (npm) (malicious package)
- [MAL-2025-187194](https://insights.sbomify.com/MAL-2025-187194/): Malicious code in google-bionics-flare-biogeochemistry (npm) (malicious package)
- [MAL-2025-187193](https://insights.sbomify.com/MAL-2025-187193/): Malicious code in good-serialize-protected-tau-fast (npm) (malicious package)
- [MAL-2025-187192](https://insights.sbomify.com/MAL-2025-187192/): Malicious code in good-minify-private-container-object (npm) (malicious package)
- [MAL-2025-187191](https://insights.sbomify.com/MAL-2025-187191/): Malicious code in good-cluster-gamma-fast-finally (npm) (malicious package)
- [MAL-2025-187190](https://insights.sbomify.com/MAL-2025-187190/): Malicious code in good-chi-nu-info-hash (npm) (malicious package)
- [MAL-2025-18719](https://insights.sbomify.com/MAL-2025-18719/): Malicious code in down-tanker (npm) (malicious package)
- [MAL-2025-187189](https://insights.sbomify.com/MAL-2025-187189/): Malicious code in good-bundle-scale-grid-load (npm) (malicious package)
- [MAL-2025-187188](https://insights.sbomify.com/MAL-2025-187188/): Malicious code in global-upgrade-wolf-betelgeuse (npm) (malicious package)
- [MAL-2025-187187](https://insights.sbomify.com/MAL-2025-187187/): Malicious code in global-schema-unuk-gemini (npm) (malicious package)
- [MAL-2025-187186](https://insights.sbomify.com/MAL-2025-187186/): Malicious code in global-sadr-polaris-scorpius (npm) (malicious package)
- [MAL-2025-187185](https://insights.sbomify.com/MAL-2025-187185/): Malicious code in global-rollup-plugin-lightyear-thermochronology (npm) (malicious package)
- [MAL-2025-187184](https://insights.sbomify.com/MAL-2025-187184/): Malicious code in global-polaris-spica-iota (npm) (malicious package)
- [MAL-2025-187183](https://insights.sbomify.com/MAL-2025-187183/): Malicious code in global-outercore-superagent-draco (npm) (malicious package)
- [MAL-2025-187182](https://insights.sbomify.com/MAL-2025-187182/): Malicious code in global-mesosphere-extremophile-ablation (npm) (malicious package)
- [MAL-2025-187181](https://insights.sbomify.com/MAL-2025-187181/): Malicious code in global-gridsome-oauth-supervisor (npm) (malicious package)
- [MAL-2025-187180](https://insights.sbomify.com/MAL-2025-187180/): Malicious code in global-eridanus-yakutsk-prompts (npm) (malicious package)
- [MAL-2025-18718](https://insights.sbomify.com/MAL-2025-18718/): Malicious code in down-load-now-9a82i-vc3fui (npm) (malicious package)
- [MAL-2025-187179](https://insights.sbomify.com/MAL-2025-187179/): Malicious code in global-docusaurus-postcss-ora (npm) (malicious package)
- [MAL-2025-187178](https://insights.sbomify.com/MAL-2025-187178/): Malicious code in global-centauri-jabbah-husky (npm) (malicious package)
- [MAL-2025-187177](https://insights.sbomify.com/MAL-2025-187177/): Malicious code in global-cassini-hexo-flare (npm) (malicious package)
- [MAL-2025-187176](https://insights.sbomify.com/MAL-2025-187176/): Malicious code in global-barnard-protoplanetarydisk-quantum-computing (npm) (malicious package)
- [MAL-2025-187175](https://insights.sbomify.com/MAL-2025-187175/): Malicious code in global-apollo-dysonswarm-nebula (npm) (malicious package)
- [MAL-2025-187174](https://insights.sbomify.com/MAL-2025-187174/): Malicious code in glaciology-wormhole-cz-conventional-changelog-oauth (npm) (malicious package)
- [MAL-2025-187173](https://insights.sbomify.com/MAL-2025-187173/): Malicious code in glaciology-venus-biohacking-dysonswarm (npm) (malicious package)
- [MAL-2025-187172](https://insights.sbomify.com/MAL-2025-187172/): Malicious code in glaciology-nconf-eslint-plugin-farout (npm) (malicious package)
- [MAL-2025-187171](https://insights.sbomify.com/MAL-2025-187171/): Malicious code in glaciology-kinetic-paleoclimatology-helmet (npm) (malicious package)
- [MAL-2025-187170](https://insights.sbomify.com/MAL-2025-187170/): Malicious code in geomorphology-materialize-perturbation-accretion (npm) (malicious package)
- [MAL-2025-18717](https://insights.sbomify.com/MAL-2025-18717/): Malicious code in down-load-available-zip-now-youre-living-all-over-me-pztzf-cdpxrz (npm) (malicious package)
- [MAL-2025-187169](https://insights.sbomify.com/MAL-2025-187169/): Malicious code in geomorphology-fermion-aquarius-oscillation (npm) (malicious package)
- [MAL-2025-187168](https://insights.sbomify.com/MAL-2025-187168/): Malicious code in geomorphology-cressida-sync-atlas (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/963/