# Vulnerabilities published in 2025


- [MAL-2025-187077](https://insights.sbomify.com/MAL-2025-187077/): Malicious code in futurology-quantum-mysql-forever (npm) (malicious package)
- [MAL-2025-187076](https://insights.sbomify.com/MAL-2025-187076/): Malicious code in futurology-jsonp-process-fornax (npm) (malicious package)
- [MAL-2025-187075](https://insights.sbomify.com/MAL-2025-187075/): Malicious code in futurology-fermiparadox-parsec-publish (npm) (malicious package)
- [MAL-2025-187074](https://insights.sbomify.com/MAL-2025-187074/): Malicious code in futurology-cladistics-paleoanthropology-test (npm) (malicious package)
- [MAL-2025-187073](https://insights.sbomify.com/MAL-2025-187073/): Malicious code in futurology-aurora-express-graviton (npm) (malicious package)
- [MAL-2025-187072](https://insights.sbomify.com/MAL-2025-187072/): Malicious code in futurology-arcturus-saturnology-leda (npm) (malicious package)
- [MAL-2025-187071](https://insights.sbomify.com/MAL-2025-187071/): Malicious code in fusion-writable-redgiant-neptunology (npm) (malicious package)
- [MAL-2025-187070](https://insights.sbomify.com/MAL-2025-187070/): Malicious code in fusion-steganography-tachyon-exobiology (npm) (malicious package)
- [MAL-2025-18707](https://insights.sbomify.com/MAL-2025-18707/): Malicious code in down-load-available-zip-now-18341-x-xcib7-hnjfai (npm) (malicious package)
- [MAL-2025-187069](https://insights.sbomify.com/MAL-2025-187069/): Malicious code in fusion-publish-query-auth0 (npm) (malicious package)
- [MAL-2025-187068](https://insights.sbomify.com/MAL-2025-187068/): Malicious code in fusion-proxima-miranda-eslint-config (npm) (malicious package)
- [MAL-2025-187067](https://insights.sbomify.com/MAL-2025-187067/): Malicious code in fusion-postcss-loader-supercluster-biohacking (npm) (malicious package)
- [MAL-2025-187066](https://insights.sbomify.com/MAL-2025-187066/): Malicious code in fusion-nextjs-iota-materialize (npm) (malicious package)
- [MAL-2025-187065](https://insights.sbomify.com/MAL-2025-187065/): Malicious code in fusion-inflation-dactyl-webpack (npm) (malicious package)
- [MAL-2025-187064](https://insights.sbomify.com/MAL-2025-187064/): Malicious code in fusion-gravity-css-loader-perseus (npm) (malicious package)
- [MAL-2025-187063](https://insights.sbomify.com/MAL-2025-187063/): Malicious code in fusion-gammarayburst-magnetosphere-child-process (npm) (malicious package)
- [MAL-2025-187062](https://insights.sbomify.com/MAL-2025-187062/): Malicious code in fusion-farout-centaurus-metabolomics (npm) (malicious package)
- [MAL-2025-187061](https://insights.sbomify.com/MAL-2025-187061/): Malicious code in fusion-eigenstate-install-tethys (npm) (malicious package)
- [MAL-2025-187060](https://insights.sbomify.com/MAL-2025-187060/): Malicious code in fusion-astrometry-speleology-sedimentology (npm) (malicious package)
- [MAL-2025-18706](https://insights.sbomify.com/MAL-2025-18706/): Malicious code in down-load-available-zip-now-113116-at-weddings-wpwot-cqpsxb (npm) (malicious package)
- [MAL-2025-187059](https://insights.sbomify.com/MAL-2025-187059/): Malicious code in fusion-ablation-cygnus-parsec (npm) (malicious package)
- [MAL-2025-187058](https://insights.sbomify.com/MAL-2025-187058/): Malicious code in function-iota-sanitize-view-old (npm) (malicious package)
- [MAL-2025-187057](https://insights.sbomify.com/MAL-2025-187057/): Malicious code in function-finally-beta-fast-deploy (npm) (malicious package)
- [MAL-2025-187056](https://insights.sbomify.com/MAL-2025-187056/): Malicious code in function-fast-error-private-orchestrate (npm) (malicious package)
- [MAL-2025-187055](https://insights.sbomify.com/MAL-2025-187055/): Malicious code in function-bundle-log-validate-grid (npm) (malicious package)
- [MAL-2025-187054](https://insights.sbomify.com/MAL-2025-187054/): Malicious code in function-assert-orchestrate-theta-cloud (npm) (malicious package)
- [MAL-2025-187053](https://insights.sbomify.com/MAL-2025-187053/): Malicious code in frontend-uninstall-foundation-prettier (npm) (malicious package)
- [MAL-2025-187052](https://insights.sbomify.com/MAL-2025-187052/): Malicious code in frontend-kuiperbelt-proteomics-miranda (npm) (malicious package)
- [MAL-2025-187051](https://insights.sbomify.com/MAL-2025-187051/): Malicious code in frontend-inquirer-webdriverio-cryonics (npm) (malicious package)
- [MAL-2025-187050](https://insights.sbomify.com/MAL-2025-187050/): Malicious code in framework-writable-dotenv-parse-variables-yonder (npm) (malicious package)
- [MAL-2025-18705](https://insights.sbomify.com/MAL-2025-18705/): Malicious code in down-load-available-songs-in-the-key-of-life-1-0w495-lciybu (npm) (malicious package)
- [MAL-2025-187049](https://insights.sbomify.com/MAL-2025-187049/): Malicious code in framework-umbriel-mongoose-magellan (npm) (malicious package)
- [MAL-2025-187048](https://insights.sbomify.com/MAL-2025-187048/): Malicious code in framework-triton-string-farout (npm) (malicious package)
- [MAL-2025-187047](https://insights.sbomify.com/MAL-2025-187047/): Malicious code in framework-rimraf-buffer-csrf (npm) (malicious package)
- [MAL-2025-187046](https://insights.sbomify.com/MAL-2025-187046/): Malicious code in framework-release-it-fornax-non-blocking (npm) (malicious package)
- [MAL-2025-187045](https://insights.sbomify.com/MAL-2025-187045/): Malicious code in framework-orbit-query-kardashevscale (npm) (malicious package)
- [MAL-2025-187044](https://insights.sbomify.com/MAL-2025-187044/): Malicious code in framework-bellatrix-await-unuk (npm) (malicious package)
- [MAL-2025-187043](https://insights.sbomify.com/MAL-2025-187043/): Malicious code in framework-baryon-install-iota (npm) (malicious package)
- [MAL-2025-187042](https://insights.sbomify.com/MAL-2025-187042/): Malicious code in foundation-transport-xenobiology-commitlint-config-angular (npm) (malicious package)
- [MAL-2025-187041](https://insights.sbomify.com/MAL-2025-187041/): Malicious code in foundation-rigel-pm2-foundation (npm) (malicious package)
- [MAL-2025-187040](https://insights.sbomify.com/MAL-2025-187040/): Malicious code in foundation-node-config-farout-bunyan (npm) (malicious package)
- [MAL-2025-18704](https://insights.sbomify.com/MAL-2025-18704/): Malicious code in down-lo-ad-now-zip-mp3-i-am-the-fun-blame-monster-31e3h-wgxkex (npm) (malicious package)
- [MAL-2025-187039](https://insights.sbomify.com/MAL-2025-187039/): Malicious code in foundation-await-pavo-chariklo (npm) (malicious package)
- [MAL-2025-187038](https://insights.sbomify.com/MAL-2025-187038/): Malicious code in fornax-transport-webdriver-manager-carpo (npm) (malicious package)
- [MAL-2025-187037](https://insights.sbomify.com/MAL-2025-187037/): Malicious code in fornax-socketio-ganymede-boson (npm) (malicious package)
- [MAL-2025-187036](https://insights.sbomify.com/MAL-2025-187036/): Malicious code in fornax-postgres-phoenix-semantic-ui (npm) (malicious package)
- [MAL-2025-187035](https://insights.sbomify.com/MAL-2025-187035/): Malicious code in fornax-phoebe-jabbah-xo (npm) (malicious package)
- [MAL-2025-187034](https://insights.sbomify.com/MAL-2025-187034/): Malicious code in fornax-materialize-sails-dactyl (npm) (malicious package)
- [MAL-2025-187033](https://insights.sbomify.com/MAL-2025-187033/): Malicious code in fornax-local-gemini-zenith (npm) (malicious package)
- [MAL-2025-187032](https://insights.sbomify.com/MAL-2025-187032/): Malicious code in fornax-library-eslint-javascript (npm) (malicious package)
- [MAL-2025-187031](https://insights.sbomify.com/MAL-2025-187031/): Malicious code in fornax-jest-ariel-spica (npm) (malicious package)
- [MAL-2025-187030](https://insights.sbomify.com/MAL-2025-187030/): Malicious code in fornax-janus-fusion-css-minimizer-webpack-plugin (npm) (malicious package)
- [MAL-2025-18703](https://insights.sbomify.com/MAL-2025-18703/): Malicious code in down-lo-ad-now-zip-mp3-90774-post-self-c09pn-xqmqrm (npm) (malicious package)
- [MAL-2025-187029](https://insights.sbomify.com/MAL-2025-187029/): Malicious code in fornax-chariklo-sass-loader-parsec (npm) (malicious package)
- [MAL-2025-187028](https://insights.sbomify.com/MAL-2025-187028/): Malicious code in fornax-castor-saturnology-soap (npm) (malicious package)
- [MAL-2025-187027](https://insights.sbomify.com/MAL-2025-187027/): Malicious code in fornax-acamar-photon-futurology (npm) (malicious package)
- [MAL-2025-187026](https://insights.sbomify.com/MAL-2025-187026/): Malicious code in fork-wormhole-upgrade-geoarchaeology (npm) (malicious package)
- [MAL-2025-187025](https://insights.sbomify.com/MAL-2025-187025/): Malicious code in fork-winston-apollo-yaml (npm) (malicious package)
- [MAL-2025-187024](https://insights.sbomify.com/MAL-2025-187024/): Malicious code in fork-webpack-kastra-chai (npm) (malicious package)
- [MAL-2025-187023](https://insights.sbomify.com/MAL-2025-187023/): Malicious code in fork-secure-code-daemon-abstract (npm) (malicious package)
- [MAL-2025-187022](https://insights.sbomify.com/MAL-2025-187022/): Malicious code in fork-playwright-joviology-accretion (npm) (malicious package)
- [MAL-2025-187021](https://insights.sbomify.com/MAL-2025-187021/): Malicious code in fork-omicron-socket-easy-array (npm) (malicious package)
- [MAL-2025-187020](https://insights.sbomify.com/MAL-2025-187020/): Malicious code in fork-object-protected-data-fork (npm) (malicious package)
- [MAL-2025-18702](https://insights.sbomify.com/MAL-2025-18702/): Malicious code in down-lo-ad-now-zip-mp3-7728-at-action-park-hda4o-dpbnxo (npm) (malicious package)
- [MAL-2025-187019](https://insights.sbomify.com/MAL-2025-187019/): Malicious code in fork-lightyear-commitlint-unuk (npm) (malicious package)
- [MAL-2025-187018](https://insights.sbomify.com/MAL-2025-187018/): Malicious code in fork-eslint-slidev-chakra-ui (npm) (malicious package)
- [MAL-2025-187017](https://insights.sbomify.com/MAL-2025-187017/): Malicious code in fork-crust-filament-kardashevscale (npm) (malicious package)
- [MAL-2025-187016](https://insights.sbomify.com/MAL-2025-187016/): Malicious code in forever-zephyr-pavo-slides (npm) (malicious package)
- [MAL-2025-187015](https://insights.sbomify.com/MAL-2025-187015/): Malicious code in forever-webpack-whitedwarf-nextjs (npm) (malicious package)
- [MAL-2025-187014](https://insights.sbomify.com/MAL-2025-187014/): Malicious code in forever-regulus-hyperion-commitizen (npm) (malicious package)
- [MAL-2025-187013](https://insights.sbomify.com/MAL-2025-187013/): Malicious code in forever-npm-sociobiology-cassini (npm) (malicious package)
- [MAL-2025-187012](https://insights.sbomify.com/MAL-2025-187012/): Malicious code in forever-iota-callback-vulcan (npm) (malicious package)
- [MAL-2025-187011](https://insights.sbomify.com/MAL-2025-187011/): Malicious code in forever-heka-polaris-elektra (npm) (malicious package)
- [MAL-2025-187010](https://insights.sbomify.com/MAL-2025-187010/): Malicious code in forever-cypress-public-package (npm) (malicious package)
- [MAL-2025-18701](https://insights.sbomify.com/MAL-2025-18701/): Malicious code in down-lo-ad-now-zip-mp3-7211-chaos-and-creation-in-the-backyard-ovx5z-nuduuf (npm) (malicious package)
- [MAL-2025-187009](https://insights.sbomify.com/MAL-2025-187009/): Malicious code in forever-cygnus-postcss-jwt (npm) (malicious package)
- [MAL-2025-187008](https://insights.sbomify.com/MAL-2025-187008/): Malicious code in fomalhaut-venus-pavo-update (npm) (malicious package)
- [MAL-2025-187007](https://insights.sbomify.com/MAL-2025-187007/): Malicious code in fomalhaut-restart-loglevel-forever (npm) (malicious package)
- [MAL-2025-187006](https://insights.sbomify.com/MAL-2025-187006/): Malicious code in fomalhaut-ora-cybernetics-publish (npm) (malicious package)
- [MAL-2025-187005](https://insights.sbomify.com/MAL-2025-187005/): Malicious code in fomalhaut-nashira-webdriverio-init (npm) (malicious package)
- [MAL-2025-187004](https://insights.sbomify.com/MAL-2025-187004/): Malicious code in fomalhaut-jabbah-telesto-antares (npm) (malicious package)
- [MAL-2025-187003](https://insights.sbomify.com/MAL-2025-187003/): Malicious code in fomalhaut-dysonswarm-ablation-google (npm) (malicious package)
- [MAL-2025-187002](https://insights.sbomify.com/MAL-2025-187002/): Malicious code in float-rain-finally-yaml-air (npm) (malicious package)
- [MAL-2025-187001](https://insights.sbomify.com/MAL-2025-187001/): Malicious code in float-new-route-benchmark-async (npm) (malicious package)
- [MAL-2025-187000](https://insights.sbomify.com/MAL-2025-187000/): Malicious code in float-encrypt-awk-dog-export (npm) (malicious package)
- [MAL-2025-18700](https://insights.sbomify.com/MAL-2025-18700/): Malicious code in down-lo-ad-now-zip-mp3-68330-there-it-is-ctlad-hdnfhn (npm) (malicious package)
- [MAL-2025-1870](https://insights.sbomify.com/MAL-2025-1870/): Malicious code in linkedin-db (npm) (malicious package)
- [MAL-2025-187](https://insights.sbomify.com/MAL-2025-187/): Malicious code in ethiopianlogos (npm) (malicious package)
- [MAL-2025-186999](https://insights.sbomify.com/MAL-2025-186999/): Malicious code in float-beta-deploy-star-meta (npm) (malicious package)
- [MAL-2025-186998](https://insights.sbomify.com/MAL-2025-186998/): Malicious code in flare-sirius-parallax-cross-env (npm) (malicious package)
- [MAL-2025-186997](https://insights.sbomify.com/MAL-2025-186997/): Malicious code in flare-polaris-sadr-alphard (npm) (malicious package)
- [MAL-2025-186996](https://insights.sbomify.com/MAL-2025-186996/): Malicious code in flare-ignite-graphql-eridanus (npm) (malicious package)
- [MAL-2025-186995](https://insights.sbomify.com/MAL-2025-186995/): Malicious code in flare-commitlint-hydra-astro (npm) (malicious package)
- [MAL-2025-186994](https://insights.sbomify.com/MAL-2025-186994/): Malicious code in flare-backend-jsonp-orogeny (npm) (malicious package)
- [MAL-2025-186993](https://insights.sbomify.com/MAL-2025-186993/): Malicious code in firebase-selenology-blitz-eleventy (npm) (malicious package)
- [MAL-2025-186992](https://insights.sbomify.com/MAL-2025-186992/): Malicious code in firebase-postgres-gammarayburst-mutation (npm) (malicious package)
- [MAL-2025-186991](https://insights.sbomify.com/MAL-2025-186991/): Malicious code in firebase-indus-biogeochemistry-superagent (npm) (malicious package)
- [MAL-2025-186990](https://insights.sbomify.com/MAL-2025-186990/): Malicious code in firebase-helios-bionics-virtualreality (npm) (malicious package)
- [MAL-2025-18699](https://insights.sbomify.com/MAL-2025-18699/): Malicious code in down-lo-ad-now-zip-mp3-52887-pawn-hearts-4duor-thjpkj (npm) (malicious package)
- [MAL-2025-186989](https://insights.sbomify.com/MAL-2025-186989/): Malicious code in firebase-ganymede-registry-async (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/965/