# Vulnerabilities published in 2025


- [MAL-2025-187167](https://insights.sbomify.com/MAL-2025-187167/): Malicious code in geomorphology-astrochemistry-alphard-zenith (npm) (malicious package)
- [MAL-2025-187166](https://insights.sbomify.com/MAL-2025-187166/): Malicious code in geodynamo-ursa-coronalmassejection-elara (npm) (malicious package)
- [MAL-2025-187165](https://insights.sbomify.com/MAL-2025-187165/): Malicious code in geodynamo-stop-hexo-markdown-pdf (npm) (malicious package)
- [MAL-2025-187164](https://insights.sbomify.com/MAL-2025-187164/): Malicious code in geodynamo-radiant-slides-bioinformatics (npm) (malicious package)
- [MAL-2025-187163](https://insights.sbomify.com/MAL-2025-187163/): Malicious code in geodynamo-hydrogeology-ultra-norma (npm) (malicious package)
- [MAL-2025-187162](https://insights.sbomify.com/MAL-2025-187162/): Malicious code in geodynamo-draco-cache-thermochronology (npm) (malicious package)
- [MAL-2025-187161](https://insights.sbomify.com/MAL-2025-187161/): Malicious code in geodynamo-callback-less-eclipse (npm) (malicious package)
- [MAL-2025-187160](https://insights.sbomify.com/MAL-2025-187160/): Malicious code in geodynamo-biosignature-crust-mongodb (npm) (malicious package)
- [MAL-2025-18716](https://insights.sbomify.com/MAL-2025-18716/): Malicious code in down-load-available-zip-now-working-on-a-dream-i6op6-jjzcyy (npm) (malicious package)
- [MAL-2025-187159](https://insights.sbomify.com/MAL-2025-187159/): Malicious code in geochemistry-jsonp-virtualreality-primatology (npm) (malicious package)
- [MAL-2025-187158](https://insights.sbomify.com/MAL-2025-187158/): Malicious code in geochemistry-izar-farout-uninstall (npm) (malicious package)
- [MAL-2025-187157](https://insights.sbomify.com/MAL-2025-187157/): Malicious code in geoarchaeology-superagent-entanglement-semantic-ui (npm) (malicious package)
- [MAL-2025-187156](https://insights.sbomify.com/MAL-2025-187156/): Malicious code in geoarchaeology-sagitta-chalk-husky (npm) (malicious package)
- [MAL-2025-187155](https://insights.sbomify.com/MAL-2025-187155/): Malicious code in geoarchaeology-ora-titan-restart (npm) (malicious package)
- [MAL-2025-187154](https://insights.sbomify.com/MAL-2025-187154/): Malicious code in geoarchaeology-oberon-proteomics-xenon (npm) (malicious package)
- [MAL-2025-187153](https://insights.sbomify.com/MAL-2025-187153/): Malicious code in geoarchaeology-hologram-xerxes-void (npm) (malicious package)
- [MAL-2025-187152](https://insights.sbomify.com/MAL-2025-187152/): Malicious code in geoarchaeology-ethology-command-envconfig (npm) (malicious package)
- [MAL-2025-187151](https://insights.sbomify.com/MAL-2025-187151/): Malicious code in geoarchaeology-archaeogenetics-spectron-webdriver-chromedriver (npm) (malicious package)
- [MAL-2025-187150](https://insights.sbomify.com/MAL-2025-187150/): Malicious code in genomics-upgrade-webpack-bellatrix (npm) (malicious package)
- [MAL-2025-18715](https://insights.sbomify.com/MAL-2025-18715/): Malicious code in down-load-available-zip-now-the-world-has-made-me-the-man-of-my-dreams-gqtk0-kllgfr (npm) (malicious package)
- [MAL-2025-187149](https://insights.sbomify.com/MAL-2025-187149/): Malicious code in genomics-run-script-auth-neptune (npm) (malicious package)
- [MAL-2025-187148](https://insights.sbomify.com/MAL-2025-187148/): Malicious code in genomics-paleoclimatology-aldebaran-gacrux (npm) (malicious package)
- [MAL-2025-187147](https://insights.sbomify.com/MAL-2025-187147/): Malicious code in genomics-outercore-mongoose-csv (npm) (malicious package)
- [MAL-2025-187146](https://insights.sbomify.com/MAL-2025-187146/): Malicious code in genomics-lightyear-mesosphere-wolf (npm) (malicious package)
- [MAL-2025-187145](https://insights.sbomify.com/MAL-2025-187145/): Malicious code in genomics-biohacking-xanadu-cross-env (npm) (malicious package)
- [MAL-2025-187144](https://insights.sbomify.com/MAL-2025-187144/): Malicious code in gemini-sagitta-cordelia-aether (npm) (malicious package)
- [MAL-2025-187143](https://insights.sbomify.com/MAL-2025-187143/): Malicious code in gemini-query-adonis-request (npm) (malicious package)
- [MAL-2025-187142](https://insights.sbomify.com/MAL-2025-187142/): Malicious code in gemini-postgres-rehype-sagitta (npm) (malicious package)
- [MAL-2025-187141](https://insights.sbomify.com/MAL-2025-187141/): Malicious code in gemini-joviology-sedimentology-buffer (npm) (malicious package)
- [MAL-2025-187140](https://insights.sbomify.com/MAL-2025-187140/): Malicious code in gemini-ionosphere-superposition-package (npm) (malicious package)
- [MAL-2025-18714](https://insights.sbomify.com/MAL-2025-18714/): Malicious code in down-load-available-zip-now-researching-the-blues-n3biv-klnohu (npm) (malicious package)
- [MAL-2025-187139](https://insights.sbomify.com/MAL-2025-187139/): Malicious code in gemini-hydrogeology-panspermia-standard (npm) (malicious package)
- [MAL-2025-187138](https://insights.sbomify.com/MAL-2025-187138/): Malicious code in gemini-hercules-orbit-convict (npm) (malicious package)
- [MAL-2025-187137](https://insights.sbomify.com/MAL-2025-187137/): Malicious code in gemini-gravity-xanadu-css-minimizer-webpack-plugin (npm) (malicious package)
- [MAL-2025-187136](https://insights.sbomify.com/MAL-2025-187136/): Malicious code in gemini-fornax-commitlint-rest (npm) (malicious package)
- [MAL-2025-187135](https://insights.sbomify.com/MAL-2025-187135/): Malicious code in gemini-dactyl-archaeogenetics-morgan (npm) (malicious package)
- [MAL-2025-187134](https://insights.sbomify.com/MAL-2025-187134/): Malicious code in gemini-csv-gacrux-andromeda (npm) (malicious package)
- [MAL-2025-187133](https://insights.sbomify.com/MAL-2025-187133/): Malicious code in gemini-csv-cryonics-castor (npm) (malicious package)
- [MAL-2025-187132](https://insights.sbomify.com/MAL-2025-187132/): Malicious code in geckodriver-slidev-protractor-hermes (npm) (malicious package)
- [MAL-2025-187131](https://insights.sbomify.com/MAL-2025-187131/): Malicious code in geckodriver-singularity-radiometric-xo (npm) (malicious package)
- [MAL-2025-187130](https://insights.sbomify.com/MAL-2025-187130/): Malicious code in geckodriver-sedna-private-colors (npm) (malicious package)
- [MAL-2025-18713](https://insights.sbomify.com/MAL-2025-18713/): Malicious code in down-load-available-zip-now-in-evening-air-h64zx-skufkw (npm) (malicious package)
- [MAL-2025-187129](https://insights.sbomify.com/MAL-2025-187129/): Malicious code in geckodriver-public-paleobotany-telesto (npm) (malicious package)
- [MAL-2025-187128](https://insights.sbomify.com/MAL-2025-187128/): Malicious code in geckodriver-nebula-spawn-apollo (npm) (malicious package)
- [MAL-2025-187127](https://insights.sbomify.com/MAL-2025-187127/): Malicious code in geckodriver-configstore-wasat-sirius (npm) (malicious package)
- [MAL-2025-187126](https://insights.sbomify.com/MAL-2025-187126/): Malicious code in geckodriver-betelgeuse-uninstall-csrf (npm) (malicious package)
- [MAL-2025-187125](https://insights.sbomify.com/MAL-2025-187125/): Malicious code in gatsby-upgrade-aldebaran-antares (npm) (malicious package)
- [MAL-2025-187124](https://insights.sbomify.com/MAL-2025-187124/): Malicious code in gatsby-tardigrade-hyperion-got (npm) (malicious package)
- [MAL-2025-187123](https://insights.sbomify.com/MAL-2025-187123/): Malicious code in gatsby-interstellarmedium-vuetify-procyon (npm) (malicious package)
- [MAL-2025-187122](https://insights.sbomify.com/MAL-2025-187122/): Malicious code in gatsby-fornax-nuxtjs-vuetify (npm) (malicious package)
- [MAL-2025-187121](https://insights.sbomify.com/MAL-2025-187121/): Malicious code in gatsby-enif-tachyon-prosthetics (npm) (malicious package)
- [MAL-2025-187120](https://insights.sbomify.com/MAL-2025-187120/): Malicious code in gatsby-config-postgres-concurrently (npm) (malicious package)
- [MAL-2025-18712](https://insights.sbomify.com/MAL-2025-18712/): Malicious code in down-load-available-zip-now-9963-decemberunderground-v5ico-vdkxyl (npm) (malicious package)
- [MAL-2025-187119](https://insights.sbomify.com/MAL-2025-187119/): Malicious code in gatsby-await-palynology-version (npm) (malicious package)
- [MAL-2025-187118](https://insights.sbomify.com/MAL-2025-187118/): Malicious code in gatsby-apollo-sync-lyra (npm) (malicious package)
- [MAL-2025-187117](https://insights.sbomify.com/MAL-2025-187117/): Malicious code in ganymede-webdriver-manager-convict-equinox (npm) (malicious package)
- [MAL-2025-187116](https://insights.sbomify.com/MAL-2025-187116/): Malicious code in ganymede-warp-astrochemistry-jabbah (npm) (malicious package)
- [MAL-2025-187115](https://insights.sbomify.com/MAL-2025-187115/): Malicious code in ganymede-volcanology-meteor-andromeda (npm) (malicious package)
- [MAL-2025-187114](https://insights.sbomify.com/MAL-2025-187114/): Malicious code in ganymede-tethys-jwt-halley (npm) (malicious package)
- [MAL-2025-187113](https://insights.sbomify.com/MAL-2025-187113/): Malicious code in ganymede-style-loader-xanthus-javascript (npm) (malicious package)
- [MAL-2025-187112](https://insights.sbomify.com/MAL-2025-187112/): Malicious code in ganymede-server-test-warp (npm) (malicious package)
- [MAL-2025-187111](https://insights.sbomify.com/MAL-2025-187111/): Malicious code in ganymede-sass-loader-dagda-husky (npm) (malicious package)
- [MAL-2025-187110](https://insights.sbomify.com/MAL-2025-187110/): Malicious code in ganymede-publish-development-janus (npm) (malicious package)
- [MAL-2025-18711](https://insights.sbomify.com/MAL-2025-18711/): Malicious code in down-load-available-zip-now-8393-wait-for-me-jdvqg-evxzsz (npm) (malicious package)
- [MAL-2025-187109](https://insights.sbomify.com/MAL-2025-187109/): Malicious code in ganymede-public-canopus-hydra (npm) (malicious package)
- [MAL-2025-187108](https://insights.sbomify.com/MAL-2025-187108/): Malicious code in ganymede-pegasus-xenobiology-pino (npm) (malicious package)
- [MAL-2025-187107](https://insights.sbomify.com/MAL-2025-187107/): Malicious code in ganymede-palynology-proxima-robotics (npm) (malicious package)
- [MAL-2025-187106](https://insights.sbomify.com/MAL-2025-187106/): Malicious code in ganymede-nestjs-izar-release-it (npm) (malicious package)
- [MAL-2025-187105](https://insights.sbomify.com/MAL-2025-187105/): Malicious code in ganymede-meteor-equinox-iota (npm) (malicious package)
- [MAL-2025-187104](https://insights.sbomify.com/MAL-2025-187104/): Malicious code in ganymede-metabolomics-cryptography-metalsmith (npm) (malicious package)
- [MAL-2025-187103](https://insights.sbomify.com/MAL-2025-187103/): Malicious code in ganymede-mesosphere-nconf-local (npm) (malicious package)
- [MAL-2025-187102](https://insights.sbomify.com/MAL-2025-187102/): Malicious code in ganymede-levels-changelog-norma (npm) (malicious package)
- [MAL-2025-187101](https://insights.sbomify.com/MAL-2025-187101/): Malicious code in ganymede-flare-aurora-membrane (npm) (malicious package)
- [MAL-2025-187100](https://insights.sbomify.com/MAL-2025-187100/): Malicious code in gammarayburst-venus-tectonophysics-colors (npm) (malicious package)
- [MAL-2025-18710](https://insights.sbomify.com/MAL-2025-18710/): Malicious code in down-load-available-zip-now-47073-anita-qnknl-xgxkin (npm) (malicious package)
- [MAL-2025-1871](https://insights.sbomify.com/MAL-2025-1871/): Malicious code in linkedin-gateway (npm) (malicious package)
- [MAL-2025-187099](https://insights.sbomify.com/MAL-2025-187099/): Malicious code in gammarayburst-technocracy-janus-eslint-plugin (npm) (malicious package)
- [MAL-2025-187098](https://insights.sbomify.com/MAL-2025-187098/): Malicious code in gammarayburst-semantic-ui-antares-juno (npm) (malicious package)
- [MAL-2025-187097](https://insights.sbomify.com/MAL-2025-187097/): Malicious code in gammarayburst-remark-boson-halley (npm) (malicious package)
- [MAL-2025-187096](https://insights.sbomify.com/MAL-2025-187096/): Malicious code in gammarayburst-quasarjet-radiometric-lyra (npm) (malicious package)
- [MAL-2025-187095](https://insights.sbomify.com/MAL-2025-187095/): Malicious code in gammarayburst-neptunology-helios-kaus (npm) (malicious package)
- [MAL-2025-187094](https://insights.sbomify.com/MAL-2025-187094/): Malicious code in gamma-stack-fire-async-abstract (npm) (malicious package)
- [MAL-2025-187093](https://insights.sbomify.com/MAL-2025-187093/): Malicious code in gamma-old-visualize-web-view (npm) (malicious package)
- [MAL-2025-187092](https://insights.sbomify.com/MAL-2025-187092/): Malicious code in gamma-integer-hash-double-tau (npm) (malicious package)
- [MAL-2025-187091](https://insights.sbomify.com/MAL-2025-187091/): Malicious code in gamma-good-socket-enum-route (npm) (malicious package)
- [MAL-2025-187090](https://insights.sbomify.com/MAL-2025-187090/): Malicious code in gamma-char-visualize-moon-daemon (npm) (malicious package)
- [MAL-2025-18709](https://insights.sbomify.com/MAL-2025-18709/): Malicious code in down-load-available-zip-now-246213-articulation-ezaoj-nnjghf (npm) (malicious package)
- [MAL-2025-187089](https://insights.sbomify.com/MAL-2025-187089/): Malicious code in galaxy-xanthus-perseus-subscription (npm) (malicious package)
- [MAL-2025-187088](https://insights.sbomify.com/MAL-2025-187088/): Malicious code in galaxy-cosmology-remark-cosmiconfig (npm) (malicious package)
- [MAL-2025-187087](https://insights.sbomify.com/MAL-2025-187087/): Malicious code in galaxy-blueshift-astrometry-quantumfoam (npm) (malicious package)
- [MAL-2025-187086](https://insights.sbomify.com/MAL-2025-187086/): Malicious code in galaxy-bellatrix-quito-kastra (npm) (malicious package)
- [MAL-2025-187085](https://insights.sbomify.com/MAL-2025-187085/): Malicious code in gacrux-supercluster-superposition-fomalhaut (npm) (malicious package)
- [MAL-2025-187084](https://insights.sbomify.com/MAL-2025-187084/): Malicious code in gacrux-magellan-cluster-version (npm) (malicious package)
- [MAL-2025-187083](https://insights.sbomify.com/MAL-2025-187083/): Malicious code in gacrux-figures-postcss-fornax (npm) (malicious package)
- [MAL-2025-187082](https://insights.sbomify.com/MAL-2025-187082/): Malicious code in gacrux-farout-publish-barnard (npm) (malicious package)
- [MAL-2025-187081](https://insights.sbomify.com/MAL-2025-187081/): Malicious code in gacrux-dorado-impulse-test (npm) (malicious package)
- [MAL-2025-187080](https://insights.sbomify.com/MAL-2025-187080/): Malicious code in gacrux-betelgeuse-package-webdriver-manager (npm) (malicious package)
- [MAL-2025-18708](https://insights.sbomify.com/MAL-2025-18708/): Malicious code in down-load-available-zip-now-242367-fad-bpemi-awgouw (npm) (malicious package)
- [MAL-2025-187079](https://insights.sbomify.com/MAL-2025-187079/): Malicious code in futurology-unuk-config-stop (npm) (malicious package)
- [MAL-2025-187078](https://insights.sbomify.com/MAL-2025-187078/): Malicious code in futurology-taurus-celeste-css-loader (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/964/