# Vulnerabilities published in 2025


- [MAL-2025-186898](https://insights.sbomify.com/MAL-2025-186898/): Malicious code in exobiology-adonis-paleoceanography-biotechnology (npm) (malicious package)
- [MAL-2025-186897](https://insights.sbomify.com/MAL-2025-186897/): Malicious code in execute-long-pipe-file-encode (npm) (malicious package)
- [MAL-2025-186896](https://insights.sbomify.com/MAL-2025-186896/): Malicious code in execute-java-short-cluster-bundle (npm) (malicious package)
- [MAL-2025-186895](https://insights.sbomify.com/MAL-2025-186895/): Malicious code in execute-char-char-stub-serialize (npm) (malicious package)
- [MAL-2025-186894](https://insights.sbomify.com/MAL-2025-186894/): Malicious code in exec-zephyr-xo-izar (npm) (malicious package)
- [MAL-2025-186893](https://insights.sbomify.com/MAL-2025-186893/): Malicious code in exec-virtualreality-wolf-paleoecology (npm) (malicious package)
- [MAL-2025-186892](https://insights.sbomify.com/MAL-2025-186892/): Malicious code in exec-supernova-soap-mongoose (npm) (malicious package)
- [MAL-2025-186891](https://insights.sbomify.com/MAL-2025-186891/): Malicious code in exec-radiometric-aether-juno (npm) (malicious package)
- [MAL-2025-186890](https://insights.sbomify.com/MAL-2025-186890/): Malicious code in exec-proxima-ophiuchus-exec (npm) (malicious package)
- [MAL-2025-18689](https://insights.sbomify.com/MAL-2025-18689/): Malicious code in dove-savanna-unm849-project (npm) (malicious package)
- [MAL-2025-186889](https://insights.sbomify.com/MAL-2025-186889/): Malicious code in exec-mira-puppeteer-warp (npm) (malicious package)
- [MAL-2025-186888](https://insights.sbomify.com/MAL-2025-186888/): Malicious code in exec-markdown-avior-sirius (npm) (malicious package)
- [MAL-2025-186887](https://insights.sbomify.com/MAL-2025-186887/): Malicious code in exec-local-mongoose-dione (npm) (malicious package)
- [MAL-2025-186886](https://insights.sbomify.com/MAL-2025-186886/): Malicious code in exec-dactyl-halley-phoebe (npm) (malicious package)
- [MAL-2025-186885](https://insights.sbomify.com/MAL-2025-186885/): Malicious code in exec-antimatter-jovian-postgres (npm) (malicious package)
- [MAL-2025-186884](https://insights.sbomify.com/MAL-2025-186884/): Malicious code in eventhoriz-yonder-heliophysics-spawn (npm) (malicious package)
- [MAL-2025-186883](https://insights.sbomify.com/MAL-2025-186883/): Malicious code in eventhoriz-stratosphere-polaris-library (npm) (malicious package)
- [MAL-2025-186882](https://insights.sbomify.com/MAL-2025-186882/): Malicious code in eventhoriz-perseus-semantic-ui-antares (npm) (malicious package)
- [MAL-2025-186881](https://insights.sbomify.com/MAL-2025-186881/): Malicious code in eventhoriz-native-planckscale-cosmochemistry (npm) (malicious package)
- [MAL-2025-186880](https://insights.sbomify.com/MAL-2025-186880/): Malicious code in eventhoriz-futurology-event-chariklo (npm) (malicious package)
- [MAL-2025-18688](https://insights.sbomify.com/MAL-2025-18688/): Malicious code in dove-quail-ltm153-project (npm) (malicious package)
- [MAL-2025-186879](https://insights.sbomify.com/MAL-2025-186879/): Malicious code in eventhoriz-event-planckscale-sirius (npm) (malicious package)
- [MAL-2025-186878](https://insights.sbomify.com/MAL-2025-186878/): Malicious code in eventhoriz-ariel-atlas-lacerta (npm) (malicious package)
- [MAL-2025-186877](https://insights.sbomify.com/MAL-2025-186877/): Malicious code in event-miranda-rest-semantic-release (npm) (malicious package)
- [MAL-2025-186876](https://insights.sbomify.com/MAL-2025-186876/): Malicious code in event-husky-tachyon-auth0 (npm) (malicious package)
- [MAL-2025-186875](https://insights.sbomify.com/MAL-2025-186875/): Malicious code in event-bootes-dotenv-parse-variables-ursa (npm) (malicious package)
- [MAL-2025-186874](https://insights.sbomify.com/MAL-2025-186874/): Malicious code in event-biogeochemistry-blitz-eris (npm) (malicious package)
- [MAL-2025-186873](https://insights.sbomify.com/MAL-2025-186873/): Malicious code in europa-ursa-tectonophysics-steganography (npm) (malicious package)
- [MAL-2025-186872](https://insights.sbomify.com/MAL-2025-186872/): Malicious code in europa-umbriel-solis-apollo (npm) (malicious package)
- [MAL-2025-186871](https://insights.sbomify.com/MAL-2025-186871/): Malicious code in europa-polaris-terraforming-cz-conventional-changelog (npm) (malicious package)
- [MAL-2025-186870](https://insights.sbomify.com/MAL-2025-186870/): Malicious code in europa-lynx-janus-repository (npm) (malicious package)
- [MAL-2025-18687](https://insights.sbomify.com/MAL-2025-18687/): Malicious code in dove-lagoon-may685-project (npm) (malicious package)
- [MAL-2025-186869](https://insights.sbomify.com/MAL-2025-186869/): Malicious code in europa-loglevel-levels-async (npm) (malicious package)
- [MAL-2025-186868](https://insights.sbomify.com/MAL-2025-186868/): Malicious code in europa-fork-andromeda-kinetic (npm) (malicious package)
- [MAL-2025-186867](https://insights.sbomify.com/MAL-2025-186867/): Malicious code in europa-betelgeuse-scorpius-envconfig (npm) (malicious package)
- [MAL-2025-186866](https://insights.sbomify.com/MAL-2025-186866/): Malicious code in europa-augmentedreality-redgiant-halley (npm) (malicious package)
- [MAL-2025-186865](https://insights.sbomify.com/MAL-2025-186865/): Malicious code in europa-alphard-electron-gravity (npm) (malicious package)
- [MAL-2025-186864](https://insights.sbomify.com/MAL-2025-186864/): Malicious code in europa-alphard-docusaurus-io (npm) (malicious package)
- [MAL-2025-186863](https://insights.sbomify.com/MAL-2025-186863/): Malicious code in ethology-zephyr-dorado-browserify (npm) (malicious package)
- [MAL-2025-186862](https://insights.sbomify.com/MAL-2025-186862/): Malicious code in ethology-subduction-foundation-elektra (npm) (malicious package)
- [MAL-2025-186861](https://insights.sbomify.com/MAL-2025-186861/): Malicious code in ethology-phoenix-unuk-tailwindcss (npm) (malicious package)
- [MAL-2025-186860](https://insights.sbomify.com/MAL-2025-186860/): Malicious code in ethology-paleontology-nova-archaeoastronomy (npm) (malicious package)
- [MAL-2025-18686](https://insights.sbomify.com/MAL-2025-18686/): Malicious code in dove-iguana-tgy033-project (npm) (malicious package)
- [MAL-2025-186859](https://insights.sbomify.com/MAL-2025-186859/): Malicious code in ethology-ophiuchus-slidev-markdown-pdf (npm) (malicious package)
- [MAL-2025-186858](https://insights.sbomify.com/MAL-2025-186858/): Malicious code in ethology-iota-neuromorphic-neptune (npm) (malicious package)
- [MAL-2025-186857](https://insights.sbomify.com/MAL-2025-186857/): Malicious code in eta-sed-assert-spy-hash (npm) (malicious package)
- [MAL-2025-186856](https://insights.sbomify.com/MAL-2025-186856/): Malicious code in eta-refactor-execute-float-load (npm) (malicious package)
- [MAL-2025-186855](https://insights.sbomify.com/MAL-2025-186855/): Malicious code in eta-psi-await-sun-upsilon (npm) (malicious package)
- [MAL-2025-186854](https://insights.sbomify.com/MAL-2025-186854/): Malicious code in eta-proxy-omicron-theta-sanitize (npm) (malicious package)
- [MAL-2025-186853](https://insights.sbomify.com/MAL-2025-186853/): Malicious code in eslint-webdriverio-mutation-sedna (npm) (malicious package)
- [MAL-2025-186852](https://insights.sbomify.com/MAL-2025-186852/): Malicious code in eslint-tardigrade-gammarayburst-cryonics (npm) (malicious package)
- [MAL-2025-186851](https://insights.sbomify.com/MAL-2025-186851/): Malicious code in eslint-postcss-loader-pm2-cressida (npm) (malicious package)
- [MAL-2025-186850](https://insights.sbomify.com/MAL-2025-186850/): Malicious code in eslint-plugin-weywot-bootes-cypress (npm) (malicious package)
- [MAL-2025-18685](https://insights.sbomify.com/MAL-2025-18685/): Malicious code in dove-horizon-vaz208-project (npm) (malicious package)
- [MAL-2025-186849](https://insights.sbomify.com/MAL-2025-186849/): Malicious code in eslint-plugin-semantic-release-chalk-fusion (npm) (malicious package)
- [MAL-2025-186848](https://insights.sbomify.com/MAL-2025-186848/): Malicious code in eslint-plugin-pyxis-library-style-loader (npm) (malicious package)
- [MAL-2025-186847](https://insights.sbomify.com/MAL-2025-186847/): Malicious code in eslint-plugin-ophiuchus-pino-chromedriver (npm) (malicious package)
- [MAL-2025-186846](https://insights.sbomify.com/MAL-2025-186846/): Malicious code in eslint-plugin-mutation-geomorphology-cladistics (npm) (malicious package)
- [MAL-2025-186845](https://insights.sbomify.com/MAL-2025-186845/): Malicious code in eslint-plugin-husky-pavo-virgo (npm) (malicious package)
- [MAL-2025-186844](https://insights.sbomify.com/MAL-2025-186844/): Malicious code in eslint-plugin-gacrux-wolf-ariel (npm) (malicious package)
- [MAL-2025-186843](https://insights.sbomify.com/MAL-2025-186843/): Malicious code in eslint-plugin-fornax-auth-dactyl (npm) (malicious package)
- [MAL-2025-186842](https://insights.sbomify.com/MAL-2025-186842/): Malicious code in eslint-plugin-eslint-sails-membrane (npm) (malicious package)
- [MAL-2025-186841](https://insights.sbomify.com/MAL-2025-186841/): Malicious code in eslint-plugin-commitlint-config-angular-terser-commitlint-config-angular (npm) (malicious package)
- [MAL-2025-186840](https://insights.sbomify.com/MAL-2025-186840/): Malicious code in eslint-loop-meteor-jasmine (npm) (malicious package)
- [MAL-2025-18684](https://insights.sbomify.com/MAL-2025-18684/): Malicious code in dove-hammock-sio879-project (npm) (malicious package)
- [MAL-2025-186839](https://insights.sbomify.com/MAL-2025-186839/): Malicious code in eslint-config-uninstall-mongoose-superflare (npm) (malicious package)
- [MAL-2025-186838](https://insights.sbomify.com/MAL-2025-186838/): Malicious code in eslint-config-sirius-run-script-sublimation (npm) (malicious package)
- [MAL-2025-186837](https://insights.sbomify.com/MAL-2025-186837/): Malicious code in eslint-config-nestjs-deneb-geckodriver (npm) (malicious package)
- [MAL-2025-186836](https://insights.sbomify.com/MAL-2025-186836/): Malicious code in eslint-config-nebula-magnetosphere-vuetify (npm) (malicious package)
- [MAL-2025-186835](https://insights.sbomify.com/MAL-2025-186835/): Malicious code in eslint-config-jovian-middleware-init (npm) (malicious package)
- [MAL-2025-186834](https://insights.sbomify.com/MAL-2025-186834/): Malicious code in eslint-config-geckodriver-algol-middleware (npm) (malicious package)
- [MAL-2025-186833](https://insights.sbomify.com/MAL-2025-186833/): Malicious code in eslint-config-apex-hermes-zooarchaeology (npm) (malicious package)
- [MAL-2025-186832](https://insights.sbomify.com/MAL-2025-186832/): Malicious code in eslint-config-antares-deneb-scorpius (npm) (malicious package)
- [MAL-2025-186831](https://insights.sbomify.com/MAL-2025-186831/): Malicious code in eslint-commitizen-firebase-upgrade (npm) (malicious package)
- [MAL-2025-186830](https://insights.sbomify.com/MAL-2025-186830/): Malicious code in error-validate-refactor-byte-lambda (npm) (malicious package)
- [MAL-2025-18683](https://insights.sbomify.com/MAL-2025-18683/): Malicious code in dove-frost-wrh593-project (npm) (malicious package)
- [MAL-2025-186829](https://insights.sbomify.com/MAL-2025-186829/): Malicious code in error-simple-view-public-float (npm) (malicious package)
- [MAL-2025-186828](https://insights.sbomify.com/MAL-2025-186828/): Malicious code in error-signal-minify-zero-index (npm) (malicious package)
- [MAL-2025-186827](https://insights.sbomify.com/MAL-2025-186827/): Malicious code in error-root-long-sigma-interpret (npm) (malicious package)
- [MAL-2025-186826](https://insights.sbomify.com/MAL-2025-186826/): Malicious code in error-fast-class-visualize-new (npm) (malicious package)
- [MAL-2025-186825](https://insights.sbomify.com/MAL-2025-186825/): Malicious code in error-error-authorize-phi-mock (npm) (malicious package)
- [MAL-2025-186824](https://insights.sbomify.com/MAL-2025-186824/): Malicious code in error-bash-monitor-stack-decode (npm) (malicious package)
- [MAL-2025-186823](https://insights.sbomify.com/MAL-2025-186823/): Malicious code in error-alpha-sanitize-sanitize-daemon (npm) (malicious package)
- [MAL-2025-186822](https://insights.sbomify.com/MAL-2025-186822/): Malicious code in eris-writable-docusaurus-on (npm) (malicious package)
- [MAL-2025-186821](https://insights.sbomify.com/MAL-2025-186821/): Malicious code in eris-umbra-dotenv-scorpius (npm) (malicious package)
- [MAL-2025-186820](https://insights.sbomify.com/MAL-2025-186820/): Malicious code in eris-sync-loglevel-dorado (npm) (malicious package)
- [MAL-2025-18682](https://insights.sbomify.com/MAL-2025-18682/): Malicious code in dove-eagle-ilq381-project (npm) (malicious package)
- [MAL-2025-186819](https://insights.sbomify.com/MAL-2025-186819/): Malicious code in eris-slidev-iota-css-minimizer-webpack-plugin (npm) (malicious package)
- [MAL-2025-186818](https://insights.sbomify.com/MAL-2025-186818/): Malicious code in eris-postgres-taurus-metabolomics (npm) (malicious package)
- [MAL-2025-186817](https://insights.sbomify.com/MAL-2025-186817/): Malicious code in eris-perseus-subscription-iota (npm) (malicious package)
- [MAL-2025-186816](https://insights.sbomify.com/MAL-2025-186816/): Malicious code in eris-jekyll-cryovolcano-charon (npm) (malicious package)
- [MAL-2025-186815](https://insights.sbomify.com/MAL-2025-186815/): Malicious code in eris-framework-lacerta-biomimicry (npm) (malicious package)
- [MAL-2025-186814](https://insights.sbomify.com/MAL-2025-186814/): Malicious code in eris-callback-boson-cosmicsilence (npm) (malicious package)
- [MAL-2025-186813](https://insights.sbomify.com/MAL-2025-186813/): Malicious code in eridanus-rigel-cosmiconfig-pino-pretty (npm) (malicious package)
- [MAL-2025-186812](https://insights.sbomify.com/MAL-2025-186812/): Malicious code in eridanus-react-bootstrap-telesto-yaml (npm) (malicious package)
- [MAL-2025-186811](https://insights.sbomify.com/MAL-2025-186811/): Malicious code in eridanus-paleoceanography-blitz-elektra (npm) (malicious package)
- [MAL-2025-186810](https://insights.sbomify.com/MAL-2025-186810/): Malicious code in eridanus-middleware-meissa-io (npm) (malicious package)
- [MAL-2025-18681](https://insights.sbomify.com/MAL-2025-18681/): Malicious code in dove-crystal-kwd785-project (npm) (malicious package)
- [MAL-2025-186809](https://insights.sbomify.com/MAL-2025-186809/): Malicious code in eridanus-jabbah-xerxes-enceladus (npm) (malicious package)
- [MAL-2025-186808](https://insights.sbomify.com/MAL-2025-186808/): Malicious code in eridanus-hermes-mui-package (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/967/