# Vulnerabilities published in 2025


- [MAL-2025-186988](https://insights.sbomify.com/MAL-2025-186988/): Malicious code in firebase-command-ursa-websockets (npm) (malicious package)
- [MAL-2025-186987](https://insights.sbomify.com/MAL-2025-186987/): Malicious code in firebase-antd-lyra-version (npm) (malicious package)
- [MAL-2025-186986](https://insights.sbomify.com/MAL-2025-186986/): Malicious code in finally-validate-spy-transpile-scale (npm) (malicious package)
- [MAL-2025-186985](https://insights.sbomify.com/MAL-2025-186985/): Malicious code in finally-stack-error-cold-assert (npm) (malicious package)
- [MAL-2025-186984](https://insights.sbomify.com/MAL-2025-186984/): Malicious code in finally-notify-table-orchestrate-sigma (npm) (malicious package)
- [MAL-2025-186983](https://insights.sbomify.com/MAL-2025-186983/): Malicious code in finally-function-boolean-refactor-runtime (npm) (malicious package)
- [MAL-2025-186982](https://insights.sbomify.com/MAL-2025-186982/): Malicious code in final-uglify-decrypt-enum-data (npm) (malicious package)
- [MAL-2025-186981](https://insights.sbomify.com/MAL-2025-186981/): Malicious code in final-secure-epsilon-catch-book (npm) (malicious package)
- [MAL-2025-186980](https://insights.sbomify.com/MAL-2025-186980/): Malicious code in final-scale-static-yaml-debug (npm) (malicious package)
- [MAL-2025-18698](https://insights.sbomify.com/MAL-2025-18698/): Malicious code in down-lo-ad-now-zip-mp3-37967-duality-g5efy-wezkck (npm) (malicious package)
- [MAL-2025-186979](https://insights.sbomify.com/MAL-2025-186979/): Malicious code in final-dog-throw-resolve-short (npm) (malicious package)
- [MAL-2025-186978](https://insights.sbomify.com/MAL-2025-186978/): Malicious code in final-daemon-route-boolean-permission (npm) (malicious package)
- [MAL-2025-186977](https://insights.sbomify.com/MAL-2025-186977/): Malicious code in final-bundle-zero-string-deserialize (npm) (malicious package)
- [MAL-2025-186976](https://insights.sbomify.com/MAL-2025-186976/): Malicious code in file-sed-hash-xi-sed (npm) (malicious package)
- [MAL-2025-186975](https://insights.sbomify.com/MAL-2025-186975/): Malicious code in file-decompress-gamma-wind-object (npm) (malicious package)
- [MAL-2025-186974](https://insights.sbomify.com/MAL-2025-186974/): Malicious code in filament-xanthus-bellatrix-phoenix (npm) (malicious package)
- [MAL-2025-186973](https://insights.sbomify.com/MAL-2025-186973/): Malicious code in filament-thuban-global-volcanology (npm) (malicious package)
- [MAL-2025-186972](https://insights.sbomify.com/MAL-2025-186972/): Malicious code in filament-tethys-brane-upgrade (npm) (malicious package)
- [MAL-2025-186971](https://insights.sbomify.com/MAL-2025-186971/): Malicious code in filament-axios-node-config-jasmine (npm) (malicious package)
- [MAL-2025-186970](https://insights.sbomify.com/MAL-2025-186970/): Malicious code in figures-proxima-sedna-envconfig (npm) (malicious package)
- [MAL-2025-18697](https://insights.sbomify.com/MAL-2025-18697/): Malicious code in down-lo-ad-now-zip-mp3-306862-as-days-get-dark-gvxck-huukyv (npm) (malicious package)
- [MAL-2025-186969](https://insights.sbomify.com/MAL-2025-186969/): Malicious code in figures-miranda-helmet-exec (npm) (malicious package)
- [MAL-2025-186968](https://insights.sbomify.com/MAL-2025-186968/): Malicious code in figures-middleware-proxima-jabbah (npm) (malicious package)
- [MAL-2025-186967](https://insights.sbomify.com/MAL-2025-186967/): Malicious code in figures-materialize-markdown-pdf-miranda (npm) (malicious package)
- [MAL-2025-186966](https://insights.sbomify.com/MAL-2025-186966/): Malicious code in figures-mantle-docusaurus-promise (npm) (malicious package)
- [MAL-2025-186965](https://insights.sbomify.com/MAL-2025-186965/): Malicious code in figures-elara-lithosphere-cosmicsilence (npm) (malicious package)
- [MAL-2025-186964](https://insights.sbomify.com/MAL-2025-186964/): Malicious code in figures-duplex-magnetar-await (npm) (malicious package)
- [MAL-2025-186963](https://insights.sbomify.com/MAL-2025-186963/): Malicious code in figures-duplex-halley-vuetify (npm) (malicious package)
- [MAL-2025-186962](https://insights.sbomify.com/MAL-2025-186962/): Malicious code in figures-betelgeuse-ethology-magellan (npm) (malicious package)
- [MAL-2025-186961](https://insights.sbomify.com/MAL-2025-186961/): Malicious code in figures-archaeoastronomy-hadron-enif (npm) (malicious package)
- [MAL-2025-186960](https://insights.sbomify.com/MAL-2025-186960/): Malicious code in fetch-ursa-vega-grus (npm) (malicious package)
- [MAL-2025-18696](https://insights.sbomify.com/MAL-2025-18696/): Malicious code in down-lo-ad-now-zip-mp3-29419-fresh-fw9li-qdnrma (npm) (malicious package)
- [MAL-2025-186959](https://insights.sbomify.com/MAL-2025-186959/): Malicious code in fetch-readable-spectron-convict (npm) (malicious package)
- [MAL-2025-186958](https://insights.sbomify.com/MAL-2025-186958/): Malicious code in fetch-charon-callisto-meissa (npm) (malicious package)
- [MAL-2025-186957](https://insights.sbomify.com/MAL-2025-186957/): Malicious code in fetch-blackhole-framework-apollo (npm) (malicious package)
- [MAL-2025-186956](https://insights.sbomify.com/MAL-2025-186956/): Malicious code in fermiparadox-redshift-rollup-plugin-phoebe (npm) (malicious package)
- [MAL-2025-186955](https://insights.sbomify.com/MAL-2025-186955/): Malicious code in fermiparadox-mini-css-extract-plugin-andromeda-mongodb (npm) (malicious package)
- [MAL-2025-186954](https://insights.sbomify.com/MAL-2025-186954/): Malicious code in fermiparadox-helios-pyxis-astrometry (npm) (malicious package)
- [MAL-2025-186953](https://insights.sbomify.com/MAL-2025-186953/): Malicious code in fermiparadox-graviton-brane-membrane (npm) (malicious package)
- [MAL-2025-186952](https://insights.sbomify.com/MAL-2025-186952/): Malicious code in fermion-thermosphere-hawkingradiation-astrophysics (npm) (malicious package)
- [MAL-2025-186951](https://insights.sbomify.com/MAL-2025-186951/): Malicious code in fermion-solis-wezen-browserify (npm) (malicious package)
- [MAL-2025-186950](https://insights.sbomify.com/MAL-2025-186950/): Malicious code in fermion-graphql-dorado-lynx (npm) (malicious package)
- [MAL-2025-18695](https://insights.sbomify.com/MAL-2025-18695/): Malicious code in down-lo-ad-now-zip-mp3-27225-up-tight-2klut-dclvvb (npm) (malicious package)
- [MAL-2025-186949](https://insights.sbomify.com/MAL-2025-186949/): Malicious code in fermion-geochronology-quito-janus (npm) (malicious package)
- [MAL-2025-186948](https://insights.sbomify.com/MAL-2025-186948/): Malicious code in fast-table-import-async-double (npm) (malicious package)
- [MAL-2025-186947](https://insights.sbomify.com/MAL-2025-186947/): Malicious code in fast-sudo-fire-chi-authenticate (npm) (malicious package)
- [MAL-2025-186946](https://insights.sbomify.com/MAL-2025-186946/): Malicious code in fast-stack-tau-execute-hash (npm) (malicious package)
- [MAL-2025-186945](https://insights.sbomify.com/MAL-2025-186945/): Malicious code in fast-java-stub-void-bash (npm) (malicious package)
- [MAL-2025-186944](https://insights.sbomify.com/MAL-2025-186944/): Malicious code in fast-catch-notify-epsilon-new (npm) (malicious package)
- [MAL-2025-186943](https://insights.sbomify.com/MAL-2025-186943/): Malicious code in farout-resolvers-photon-blazar (npm) (malicious package)
- [MAL-2025-186942](https://insights.sbomify.com/MAL-2025-186942/): Malicious code in farout-quark-joviology-nodejs (npm) (malicious package)
- [MAL-2025-186941](https://insights.sbomify.com/MAL-2025-186941/): Malicious code in farout-mongoose-process-kronos (npm) (malicious package)
- [MAL-2025-186940](https://insights.sbomify.com/MAL-2025-186940/): Malicious code in farout-hydrogeology-juno-browserify (npm) (malicious package)
- [MAL-2025-18694](https://insights.sbomify.com/MAL-2025-18694/): Malicious code in down-lo-ad-now-zip-mp3-261895-fake-it-flowers-fr14h-gmqthe (npm) (malicious package)
- [MAL-2025-186939](https://insights.sbomify.com/MAL-2025-186939/): Malicious code in farout-gatsby-install-ganymede (npm) (malicious package)
- [MAL-2025-186938](https://insights.sbomify.com/MAL-2025-186938/): Malicious code in farout-enceladus-magellan-nova (npm) (malicious package)
- [MAL-2025-186937](https://insights.sbomify.com/MAL-2025-186937/): Malicious code in farout-convict-meteor-accretion (npm) (malicious package)
- [MAL-2025-186936](https://insights.sbomify.com/MAL-2025-186936/): Malicious code in farout-colors-hologram-mini-css-extract-plugin (npm) (malicious package)
- [MAL-2025-186935](https://insights.sbomify.com/MAL-2025-186935/): Malicious code in extremophile-slidev-radioastronomy-coronalmassejection (npm) (malicious package)
- [MAL-2025-186934](https://insights.sbomify.com/MAL-2025-186934/): Malicious code in extremophile-ophiuchus-rollup-plugin-subscription (npm) (malicious package)
- [MAL-2025-186933](https://insights.sbomify.com/MAL-2025-186933/): Malicious code in extremophile-geochemistry-dendrochronology-ursa (npm) (malicious package)
- [MAL-2025-186932](https://insights.sbomify.com/MAL-2025-186932/): Malicious code in extremophile-fornax-quasar-carpo (npm) (malicious package)
- [MAL-2025-186931](https://insights.sbomify.com/MAL-2025-186931/): Malicious code in express-terraforming-nucleosynthesis-nova (npm) (malicious package)
- [MAL-2025-186930](https://insights.sbomify.com/MAL-2025-186930/): Malicious code in express-superflare-antares-loopback (npm) (malicious package)
- [MAL-2025-18693](https://insights.sbomify.com/MAL-2025-18693/): Malicious code in down-lo-ad-now-zip-mp3-122443-vibrations-1-nvkcw-inalaf (npm) (malicious package)
- [MAL-2025-186929](https://insights.sbomify.com/MAL-2025-186929/): Malicious code in express-standard-development-astrometry (npm) (malicious package)
- [MAL-2025-186928](https://insights.sbomify.com/MAL-2025-186928/): Malicious code in express-proxima-websockets-leda (npm) (malicious package)
- [MAL-2025-186927](https://insights.sbomify.com/MAL-2025-186927/): Malicious code in express-cors-dysonswarm-async (npm) (malicious package)
- [MAL-2025-186926](https://insights.sbomify.com/MAL-2025-186926/): Malicious code in express-buffer-quasar-reveal-md (npm) (malicious package)
- [MAL-2025-186925](https://insights.sbomify.com/MAL-2025-186925/): Malicious code in export-zero-orchestrate-zero-compile (npm) (malicious package)
- [MAL-2025-186924](https://insights.sbomify.com/MAL-2025-186924/): Malicious code in export-resolve-theta-slow-refactor (npm) (malicious package)
- [MAL-2025-186923](https://insights.sbomify.com/MAL-2025-186923/): Malicious code in export-psi-zeta-upsilon-balance (npm) (malicious package)
- [MAL-2025-186922](https://insights.sbomify.com/MAL-2025-186922/): Malicious code in export-hot-cold-orchestrate-awk (npm) (malicious package)
- [MAL-2025-186921](https://insights.sbomify.com/MAL-2025-186921/): Malicious code in export-decompress-integer-encrypt-void (npm) (malicious package)
- [MAL-2025-186920](https://insights.sbomify.com/MAL-2025-186920/): Malicious code in export-bad-compress-fork-compress (npm) (malicious package)
- [MAL-2025-18692](https://insights.sbomify.com/MAL-2025-18692/): Malicious code in down-lo-ad-now-zip-mp3-114887-here-from-where-we-are-16l6t-tyjpcw (npm) (malicious package)
- [MAL-2025-186919](https://insights.sbomify.com/MAL-2025-186919/): Malicious code in exosphere-troposphere-grus-cluster (npm) (malicious package)
- [MAL-2025-186918](https://insights.sbomify.com/MAL-2025-186918/): Malicious code in exosphere-scripts-halley-upgrade (npm) (malicious package)
- [MAL-2025-186917](https://insights.sbomify.com/MAL-2025-186917/): Malicious code in exosphere-rate-limiter-transhumanism-chariklo (npm) (malicious package)
- [MAL-2025-186916](https://insights.sbomify.com/MAL-2025-186916/): Malicious code in exosphere-innercore-radiant-cladistics (npm) (malicious package)
- [MAL-2025-186915](https://insights.sbomify.com/MAL-2025-186915/): Malicious code in exosphere-galaxy-planckscale-umbra (npm) (malicious package)
- [MAL-2025-186914](https://insights.sbomify.com/MAL-2025-186914/): Malicious code in exoplanetology-superflare-webdriver-manager-ablation (npm) (malicious package)
- [MAL-2025-186913](https://insights.sbomify.com/MAL-2025-186913/): Malicious code in exoplanetology-link-commitlint-prosthetics (npm) (malicious package)
- [MAL-2025-186912](https://insights.sbomify.com/MAL-2025-186912/): Malicious code in exoplanetology-grus-mdx-comet (npm) (malicious package)
- [MAL-2025-186911](https://insights.sbomify.com/MAL-2025-186911/): Malicious code in exoplanetology-eslint-config-eslint-plugin-elara (npm) (malicious package)
- [MAL-2025-186910](https://insights.sbomify.com/MAL-2025-186910/): Malicious code in exoplanetology-command-heka-mensa (npm) (malicious package)
- [MAL-2025-18691](https://insights.sbomify.com/MAL-2025-18691/): Malicious code in dove-yawn-krp762-project (npm) (malicious package)
- [MAL-2025-186909](https://insights.sbomify.com/MAL-2025-186909/): Malicious code in exoplanetology-comet-mira-query (npm) (malicious package)
- [MAL-2025-186908](https://insights.sbomify.com/MAL-2025-186908/): Malicious code in exoplanet-xerxes-interstellarmedium-octans (npm) (malicious package)
- [MAL-2025-186907](https://insights.sbomify.com/MAL-2025-186907/): Malicious code in exoplanet-titan-repository-release-it (npm) (malicious package)
- [MAL-2025-186906](https://insights.sbomify.com/MAL-2025-186906/): Malicious code in exoplanet-string-bulma-tardigrade (npm) (malicious package)
- [MAL-2025-186905](https://insights.sbomify.com/MAL-2025-186905/): Malicious code in exoplanet-scripts-webpack-neptune (npm) (malicious package)
- [MAL-2025-186904](https://insights.sbomify.com/MAL-2025-186904/): Malicious code in exoplanet-izar-superposition-style-loader (npm) (malicious package)
- [MAL-2025-186903](https://insights.sbomify.com/MAL-2025-186903/): Malicious code in exoplanet-genomics-thermosphere-phoebe (npm) (malicious package)
- [MAL-2025-186902](https://insights.sbomify.com/MAL-2025-186902/): Malicious code in exoplanet-boson-readable-grunt (npm) (malicious package)
- [MAL-2025-186901](https://insights.sbomify.com/MAL-2025-186901/): Malicious code in exobiology-mesosphere-warp-spectron (npm) (malicious package)
- [MAL-2025-186900](https://insights.sbomify.com/MAL-2025-186900/): Malicious code in exobiology-chalk-xml-atlas (npm) (malicious package)
- [MAL-2025-18690](https://insights.sbomify.com/MAL-2025-18690/): Malicious code in dove-whirlpool-vlb086-project (npm) (malicious package)
- [MAL-2025-1869](https://insights.sbomify.com/MAL-2025-1869/): Malicious code in leafygreen-ui (npm) (malicious package)
- [MAL-2025-186899](https://insights.sbomify.com/MAL-2025-186899/): Malicious code in exobiology-callback-commitlint-config-angular-slides (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/966/