# Vulnerabilities published in 2025


- [MAL-2025-186807](https://insights.sbomify.com/MAL-2025-186807/): Malicious code in eridanus-geochronology-element-ui-io (npm) (malicious package)
- [MAL-2025-186806](https://insights.sbomify.com/MAL-2025-186806/): Malicious code in eridanus-darkenergy-blackhole-selenium (npm) (malicious package)
- [MAL-2025-186805](https://insights.sbomify.com/MAL-2025-186805/): Malicious code in eridanus-cosmicsilence-heliophysics-achernar (npm) (malicious package)
- [MAL-2025-186804](https://insights.sbomify.com/MAL-2025-186804/): Malicious code in eridanus-buffer-colors-passport (npm) (malicious package)
- [MAL-2025-186803](https://insights.sbomify.com/MAL-2025-186803/): Malicious code in eridanus-antimatter-figures-dotenv-safe (npm) (malicious package)
- [MAL-2025-186802](https://insights.sbomify.com/MAL-2025-186802/): Malicious code in equinox-xerxes-hapi-gravity (npm) (malicious package)
- [MAL-2025-186801](https://insights.sbomify.com/MAL-2025-186801/): Malicious code in equinox-sedna-sequelize-convict (npm) (malicious package)
- [MAL-2025-186800](https://insights.sbomify.com/MAL-2025-186800/): Malicious code in equinox-sass-loader-global-nestjs (npm) (malicious package)
- [MAL-2025-18680](https://insights.sbomify.com/MAL-2025-18680/): Malicious code in dove-bonfire-vod852-project (npm) (malicious package)
- [MAL-2025-1868](https://insights.sbomify.com/MAL-2025-1868/): Malicious code in internallib_v590 (npm) (malicious package)
- [MAL-2025-186799](https://insights.sbomify.com/MAL-2025-186799/): Malicious code in equinox-passport-janus-websockets (npm) (malicious package)
- [MAL-2025-186798](https://insights.sbomify.com/MAL-2025-186798/): Malicious code in equinox-mira-jsonp-octans (npm) (malicious package)
- [MAL-2025-186797](https://insights.sbomify.com/MAL-2025-186797/): Malicious code in equinox-kastra-pulsar-avior (npm) (malicious package)
- [MAL-2025-186796](https://insights.sbomify.com/MAL-2025-186796/): Malicious code in equinox-eclipse-redis-publish (npm) (malicious package)
- [MAL-2025-186795](https://insights.sbomify.com/MAL-2025-186795/): Malicious code in equinox-cosmicsilence-subscription-redis (npm) (malicious package)
- [MAL-2025-186794](https://insights.sbomify.com/MAL-2025-186794/): Malicious code in equinox-blueshift-exosphere-tectonic (npm) (malicious package)
- [MAL-2025-186793](https://insights.sbomify.com/MAL-2025-186793/): Malicious code in epsilon-web-sun-test-easy (npm) (malicious package)
- [MAL-2025-186792](https://insights.sbomify.com/MAL-2025-186792/): Malicious code in epsilon-protected-reject-parse-benchmark (npm) (malicious package)
- [MAL-2025-186791](https://insights.sbomify.com/MAL-2025-186791/): Malicious code in epsilon-execute-pi-interpret-index (npm) (malicious package)
- [MAL-2025-186790](https://insights.sbomify.com/MAL-2025-186790/): Malicious code in epsilon-class-cluster-root-xml (npm) (malicious package)
- [MAL-2025-18679](https://insights.sbomify.com/MAL-2025-18679/): Malicious code in dove-blossom-swe867-project (npm) (malicious package)
- [MAL-2025-186789](https://insights.sbomify.com/MAL-2025-186789/): Malicious code in epsilon-catch-cold-beta-new (npm) (malicious package)
- [MAL-2025-186788](https://insights.sbomify.com/MAL-2025-186788/): Malicious code in epsilon-beta-key-double-assert (npm) (malicious package)
- [MAL-2025-186787](https://insights.sbomify.com/MAL-2025-186787/): Malicious code in epsilon-bash-sigma-tree-scale (npm) (malicious package)
- [MAL-2025-186786](https://insights.sbomify.com/MAL-2025-186786/): Malicious code in epimetheus-uninstall-cressida-sedna (npm) (malicious package)
- [MAL-2025-186785](https://insights.sbomify.com/MAL-2025-186785/): Malicious code in epimetheus-sagitta-cosmicweb-dactyl (npm) (malicious package)
- [MAL-2025-186784](https://insights.sbomify.com/MAL-2025-186784/): Malicious code in epimetheus-release-it-fetch-centaurus (npm) (malicious package)
- [MAL-2025-186783](https://insights.sbomify.com/MAL-2025-186783/): Malicious code in epimetheus-loglevel-membrane-solarnebula (npm) (malicious package)
- [MAL-2025-186782](https://insights.sbomify.com/MAL-2025-186782/): Malicious code in epimetheus-chalk-frontend-fomalhaut (npm) (malicious package)
- [MAL-2025-186781](https://insights.sbomify.com/MAL-2025-186781/): Malicious code in epigenetics-kinetic-prompts-taphonomy (npm) (malicious package)
- [MAL-2025-186780](https://insights.sbomify.com/MAL-2025-186780/): Malicious code in epigenetics-html-webpack-plugin-magellan-augmentedreality (npm) (malicious package)
- [MAL-2025-18678](https://insights.sbomify.com/MAL-2025-18678/): Malicious code in douquan (npm) (malicious package)
- [MAL-2025-186779](https://insights.sbomify.com/MAL-2025-186779/): Malicious code in epigenetics-graphql-tailwindcss-abiogenesis (npm) (malicious package)
- [MAL-2025-186778](https://insights.sbomify.com/MAL-2025-186778/): Malicious code in epigenetics-dynamo-jsonp-odin (npm) (malicious package)
- [MAL-2025-186777](https://insights.sbomify.com/MAL-2025-186777/): Malicious code in epigenetics-cosmology-radiometric-fornax (npm) (malicious package)
- [MAL-2025-186776](https://insights.sbomify.com/MAL-2025-186776/): Malicious code in envconfig-sociobiology-palynology-meissa (npm) (malicious package)
- [MAL-2025-186775](https://insights.sbomify.com/MAL-2025-186775/): Malicious code in envconfig-protoplanetarydisk-dotenv-safe-isostasy (npm) (malicious package)
- [MAL-2025-186774](https://insights.sbomify.com/MAL-2025-186774/): Malicious code in envconfig-passport-charon-hermes (npm) (malicious package)
- [MAL-2025-186773](https://insights.sbomify.com/MAL-2025-186773/): Malicious code in envconfig-fornax-void-duplex (npm) (malicious package)
- [MAL-2025-186772](https://insights.sbomify.com/MAL-2025-186772/): Malicious code in envconfig-dotenv-safe-middleware-javascript (npm) (malicious package)
- [MAL-2025-186771](https://insights.sbomify.com/MAL-2025-186771/): Malicious code in envconfig-apollo-dependencies-update (npm) (malicious package)
- [MAL-2025-186770](https://insights.sbomify.com/MAL-2025-186770/): Malicious code in enum-small-tau-sun-orchestrate (npm) (malicious package)
- [MAL-2025-18677](https://insights.sbomify.com/MAL-2025-18677/): Malicious code in doufuru (npm) (malicious package)
- [MAL-2025-186769](https://insights.sbomify.com/MAL-2025-186769/): Malicious code in enum-report-char-rho-alpha (npm) (malicious package)
- [MAL-2025-186768](https://insights.sbomify.com/MAL-2025-186768/): Malicious code in enum-proxy-sun-omicron-nu (npm) (malicious package)
- [MAL-2025-186767](https://insights.sbomify.com/MAL-2025-186767/): Malicious code in enum-parse-protected-kernel-refactor (npm) (malicious package)
- [MAL-2025-186766](https://insights.sbomify.com/MAL-2025-186766/): Malicious code in enum-new-encode-tree-cluster (npm) (malicious package)
- [MAL-2025-186765](https://insights.sbomify.com/MAL-2025-186765/): Malicious code in enum-interface-grep-reject-debug (npm) (malicious package)
- [MAL-2025-186764](https://insights.sbomify.com/MAL-2025-186764/): Malicious code in enum-compress-proxy-thread-user (npm) (malicious package)
- [MAL-2025-186763](https://insights.sbomify.com/MAL-2025-186763/): Malicious code in entanglement-xanthus-lithosphere-lightyear (npm) (malicious package)
- [MAL-2025-186762](https://insights.sbomify.com/MAL-2025-186762/): Malicious code in entanglement-tachyon-puppeteer-cressida (npm) (malicious package)
- [MAL-2025-186761](https://insights.sbomify.com/MAL-2025-186761/): Malicious code in entanglement-pino-lint-innercore (npm) (malicious package)
- [MAL-2025-186760](https://insights.sbomify.com/MAL-2025-186760/): Malicious code in entanglement-levels-leda-quasar (npm) (malicious package)
- [MAL-2025-18676](https://insights.sbomify.com/MAL-2025-18676/): Malicious code in double-string-log-test-assert (npm) (malicious package)
- [MAL-2025-186759](https://insights.sbomify.com/MAL-2025-186759/): Malicious code in entanglement-jasmine-seismology-nucleosynthesis (npm) (malicious package)
- [MAL-2025-186758](https://insights.sbomify.com/MAL-2025-186758/): Malicious code in entanglement-greatfilter-void-callback (npm) (malicious package)
- [MAL-2025-186757](https://insights.sbomify.com/MAL-2025-186757/): Malicious code in entanglement-cybernetics-process-capella (npm) (malicious package)
- [MAL-2025-186756](https://insights.sbomify.com/MAL-2025-186756/): Malicious code in entanglement-australis-event-leda (npm) (malicious package)
- [MAL-2025-186755](https://insights.sbomify.com/MAL-2025-186755/): Malicious code in enif-zooarchaeology-jovian-extremophile (npm) (malicious package)
- [MAL-2025-186754](https://insights.sbomify.com/MAL-2025-186754/): Malicious code in enif-wavefunction-phoebe-kastra (npm) (malicious package)
- [MAL-2025-186753](https://insights.sbomify.com/MAL-2025-186753/): Malicious code in enif-terser-webpack-plugin-sass-loader-spectron-webdriver (npm) (malicious package)
- [MAL-2025-186752](https://insights.sbomify.com/MAL-2025-186752/): Malicious code in enif-jsonp-abiogenesis-kardashevscale (npm) (malicious package)
- [MAL-2025-186751](https://insights.sbomify.com/MAL-2025-186751/): Malicious code in enif-frontend-carpo-galaxy (npm) (malicious package)
- [MAL-2025-186750](https://insights.sbomify.com/MAL-2025-186750/): Malicious code in enif-europa-lint-staged-equinox (npm) (malicious package)
- [MAL-2025-18675](https://insights.sbomify.com/MAL-2025-18675/): Malicious code in dotyar (npm) (malicious package)
- [MAL-2025-186749](https://insights.sbomify.com/MAL-2025-186749/): Malicious code in enif-ceres-request-npm (npm) (malicious package)
- [MAL-2025-186748](https://insights.sbomify.com/MAL-2025-186748/): Malicious code in enif-blitz-selenium-sedna (npm) (malicious package)
- [MAL-2025-186747](https://insights.sbomify.com/MAL-2025-186747/): Malicious code in enif-axios-schema-biotechnology (npm) (malicious package)
- [MAL-2025-186746](https://insights.sbomify.com/MAL-2025-186746/): Malicious code in encrypt-public-delta-chi-query (npm) (malicious package)
- [MAL-2025-186745](https://insights.sbomify.com/MAL-2025-186745/): Malicious code in encrypt-meta-authenticate-log-string (npm) (malicious package)
- [MAL-2025-186744](https://insights.sbomify.com/MAL-2025-186744/): Malicious code in encrypt-link-alert-grep-moon (npm) (malicious package)
- [MAL-2025-186743](https://insights.sbomify.com/MAL-2025-186743/): Malicious code in encrypt-cloud-boolean-double-mock (npm) (malicious package)
- [MAL-2025-186742](https://insights.sbomify.com/MAL-2025-186742/): Malicious code in encrypt-bundle-test-deploy-scale (npm) (malicious package)
- [MAL-2025-186741](https://insights.sbomify.com/MAL-2025-186741/): Malicious code in encode-route-deserialize-eta-export (npm) (malicious package)
- [MAL-2025-186740](https://insights.sbomify.com/MAL-2025-186740/): Malicious code in encode-rain-refactor-execute-pi (npm) (malicious package)
- [MAL-2025-18674](https://insights.sbomify.com/MAL-2025-18674/): Malicious code in dotenv-socketio-ichnology-higgs (npm) (malicious package)
- [MAL-2025-186739](https://insights.sbomify.com/MAL-2025-186739/): Malicious code in encode-promise-cold-awk-easy (npm) (malicious package)
- [MAL-2025-186738](https://insights.sbomify.com/MAL-2025-186738/): Malicious code in enceladus-sirius-radioastronomy-octans (npm) (malicious package)
- [MAL-2025-186737](https://insights.sbomify.com/MAL-2025-186737/): Malicious code in enceladus-shelljs-cryonics-betelgeuse (npm) (malicious package)
- [MAL-2025-186736](https://insights.sbomify.com/MAL-2025-186736/): Malicious code in enceladus-quantumfoam-markdownlint-lightyear (npm) (malicious package)
- [MAL-2025-186735](https://insights.sbomify.com/MAL-2025-186735/): Malicious code in enceladus-oortcloud-augmentedreality-cosmicsilence (npm) (malicious package)
- [MAL-2025-186734](https://insights.sbomify.com/MAL-2025-186734/): Malicious code in enceladus-module-firebase-quantum (npm) (malicious package)
- [MAL-2025-186733](https://insights.sbomify.com/MAL-2025-186733/): Malicious code in enceladus-mdx-zenobia-blazar (npm) (malicious package)
- [MAL-2025-186732](https://insights.sbomify.com/MAL-2025-186732/): Malicious code in enceladus-got-ultra-centauri (npm) (malicious package)
- [MAL-2025-186731](https://insights.sbomify.com/MAL-2025-186731/): Malicious code in enceladus-eslint-config-readable-cosmogenic (npm) (malicious package)
- [MAL-2025-186730](https://insights.sbomify.com/MAL-2025-186730/): Malicious code in enceladus-blitz-lynx-corvus (npm) (malicious package)
- [MAL-2025-18673](https://insights.sbomify.com/MAL-2025-18673/): Malicious code in dotenv-safe-winston-dotenv-safe-markdown-pdf (npm) (malicious package)
- [MAL-2025-186729](https://insights.sbomify.com/MAL-2025-186729/): Malicious code in enceladus-bionics-pulsar-izar (npm) (malicious package)
- [MAL-2025-186728](https://insights.sbomify.com/MAL-2025-186728/): Malicious code in emulate-wind-sudo-object-class (npm) (malicious package)
- [MAL-2025-186727](https://insights.sbomify.com/MAL-2025-186727/): Malicious code in emulate-throw-root-meta-file (npm) (malicious package)
- [MAL-2025-186726](https://insights.sbomify.com/MAL-2025-186726/): Malicious code in emulate-tau-grep-resolve-decompress (npm) (malicious package)
- [MAL-2025-186725](https://insights.sbomify.com/MAL-2025-186725/): Malicious code in emulate-sudo-query-balance-air (npm) (malicious package)
- [MAL-2025-186724](https://insights.sbomify.com/MAL-2025-186724/): Malicious code in emulate-signal-psi-void-root (npm) (malicious package)
- [MAL-2025-186723](https://insights.sbomify.com/MAL-2025-186723/): Malicious code in emulate-private-alpha-decompress-view (npm) (malicious package)
- [MAL-2025-186722](https://insights.sbomify.com/MAL-2025-186722/): Malicious code in emulate-link-shell-async-double (npm) (malicious package)
- [MAL-2025-186721](https://insights.sbomify.com/MAL-2025-186721/): Malicious code in emulate-earth-lambda-iota-mock (npm) (malicious package)
- [MAL-2025-186720](https://insights.sbomify.com/MAL-2025-186720/): Malicious code in emulate-catch-file-mu-parse (npm) (malicious package)
- [MAL-2025-18672](https://insights.sbomify.com/MAL-2025-18672/): Malicious code in dotenv-safe-titan-terser-markdown (npm) (malicious package)
- [MAL-2025-186719](https://insights.sbomify.com/MAL-2025-186719/): Malicious code in emulate-await-sudo-code-grid (npm) (malicious package)
- [MAL-2025-186718](https://insights.sbomify.com/MAL-2025-186718/): Malicious code in eleventy-delphinus-figures-async (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/968/