# Vulnerabilities published in 2025


- [MAL-2025-186717](https://insights.sbomify.com/MAL-2025-186717/): Malicious code in element-ui-oscillation-higgs-solarnebula (npm) (malicious package)
- [MAL-2025-186716](https://insights.sbomify.com/MAL-2025-186716/): Malicious code in element-ui-nodejs-bellatrix-hapi (npm) (malicious package)
- [MAL-2025-186715](https://insights.sbomify.com/MAL-2025-186715/): Malicious code in element-ui-nconf-oauth-webpack (npm) (malicious package)
- [MAL-2025-186714](https://insights.sbomify.com/MAL-2025-186714/): Malicious code in element-ui-jabbah-chalk-enceladus (npm) (malicious package)
- [MAL-2025-186713](https://insights.sbomify.com/MAL-2025-186713/): Malicious code in element-ui-fermiparadox-carpo-orogeny (npm) (malicious package)
- [MAL-2025-186712](https://insights.sbomify.com/MAL-2025-186712/): Malicious code in element-ui-commitlint-convict-chai (npm) (malicious package)
- [MAL-2025-186711](https://insights.sbomify.com/MAL-2025-186711/): Malicious code in elektra-yakutsk-cosmicray-phoenix (npm) (malicious package)
- [MAL-2025-186710](https://insights.sbomify.com/MAL-2025-186710/): Malicious code in elektra-xml-grus-hugo (npm) (malicious package)
- [MAL-2025-18671](https://insights.sbomify.com/MAL-2025-18671/): Malicious code in dotenv-safe-query-transhumanism-cosmos (npm) (malicious package)
- [MAL-2025-186709](https://insights.sbomify.com/MAL-2025-186709/): Malicious code in elektra-supercluster-genomics-heliophysics (npm) (malicious package)
- [MAL-2025-186708](https://insights.sbomify.com/MAL-2025-186708/): Malicious code in elektra-jekyll-ini-async (npm) (malicious package)
- [MAL-2025-186707](https://insights.sbomify.com/MAL-2025-186707/): Malicious code in elektra-bellatrix-neutronstar-spinner (npm) (malicious package)
- [MAL-2025-186706](https://insights.sbomify.com/MAL-2025-186706/): Malicious code in electron-tool-nashira-gemini (npm) (malicious package)
- [MAL-2025-186705](https://insights.sbomify.com/MAL-2025-186705/): Malicious code in electron-superflare-quantumfoam-inquirer (npm) (malicious package)
- [MAL-2025-186704](https://insights.sbomify.com/MAL-2025-186704/): Malicious code in electron-postcss-loader-yaml-pyxis (npm) (malicious package)
- [MAL-2025-186703](https://insights.sbomify.com/MAL-2025-186703/): Malicious code in electron-pm2-toml-test (npm) (malicious package)
- [MAL-2025-186702](https://insights.sbomify.com/MAL-2025-186702/): Malicious code in electron-nconf-callisto-flare (npm) (malicious package)
- [MAL-2025-186701](https://insights.sbomify.com/MAL-2025-186701/): Malicious code in electron-builder-pipe-markdownlint-nextjs (npm) (malicious package)
- [MAL-2025-186700](https://insights.sbomify.com/MAL-2025-186700/): Malicious code in electron-builder-lint-typeorm-bulma (npm) (malicious package)
- [MAL-2025-18670](https://insights.sbomify.com/MAL-2025-18670/): Malicious code in dotenv-safe-neutrino-commitizen-supervisor (npm) (malicious package)
- [MAL-2025-1867](https://insights.sbomify.com/MAL-2025-1867/): Malicious code in internallib_v137 (npm) (malicious package)
- [MAL-2025-186699](https://insights.sbomify.com/MAL-2025-186699/): Malicious code in electron-builder-kaus-non-blocking-europa (npm) (malicious package)
- [MAL-2025-186698](https://insights.sbomify.com/MAL-2025-186698/): Malicious code in electron-builder-csv-npm-asteroid (npm) (malicious package)
- [MAL-2025-186697](https://insights.sbomify.com/MAL-2025-186697/): Malicious code in elara-triton-quasar-async (npm) (malicious package)
- [MAL-2025-186696](https://insights.sbomify.com/MAL-2025-186696/): Malicious code in elara-magnetar-asteroid-cosmicray (npm) (malicious package)
- [MAL-2025-186695](https://insights.sbomify.com/MAL-2025-186695/): Malicious code in elara-jovian-dorado-biogeochemistry (npm) (malicious package)
- [MAL-2025-186694](https://insights.sbomify.com/MAL-2025-186694/): Malicious code in elara-hexo-postgres-astrochemistry (npm) (malicious package)
- [MAL-2025-186693](https://insights.sbomify.com/MAL-2025-186693/): Malicious code in elara-express-babel-meteor (npm) (malicious package)
- [MAL-2025-186692](https://insights.sbomify.com/MAL-2025-186692/): Malicious code in elara-dysonswarm-sirius-pyxis (npm) (malicious package)
- [MAL-2025-186691](https://insights.sbomify.com/MAL-2025-186691/): Malicious code in elara-auth-enif-prettier (npm) (malicious package)
- [MAL-2025-186690](https://insights.sbomify.com/MAL-2025-186690/): Malicious code in eigenstate-spectron-loopback-wormhole (npm) (malicious package)
- [MAL-2025-18669](https://insights.sbomify.com/MAL-2025-18669/): Malicious code in dotenv-safe-mira-polaris-passport (npm) (malicious package)
- [MAL-2025-186689](https://insights.sbomify.com/MAL-2025-186689/): Malicious code in eigenstate-outercore-procyon-colors (npm) (malicious package)
- [MAL-2025-186688](https://insights.sbomify.com/MAL-2025-186688/): Malicious code in eigenstate-ophiuchus-sociobiology-koa (npm) (malicious package)
- [MAL-2025-186687](https://insights.sbomify.com/MAL-2025-186687/): Malicious code in eigenstate-gravitationalwave-config-ora (npm) (malicious package)
- [MAL-2025-186686](https://insights.sbomify.com/MAL-2025-186686/): Malicious code in eigenstate-electron-lithosphere-dagda (npm) (malicious package)
- [MAL-2025-186685](https://insights.sbomify.com/MAL-2025-186685/): Malicious code in eigenstate-electron-builder-despina-bionics (npm) (malicious package)
- [MAL-2025-186684](https://insights.sbomify.com/MAL-2025-186684/): Malicious code in eigenstate-auriga-module-chromedriver (npm) (malicious package)
- [MAL-2025-186683](https://insights.sbomify.com/MAL-2025-186683/): Malicious code in eigenstate-areology-deneb-parallax (npm) (malicious package)
- [MAL-2025-186682](https://insights.sbomify.com/MAL-2025-186682/): Malicious code in eclipse-ursa-element-ui-middleware (npm) (malicious package)
- [MAL-2025-186681](https://insights.sbomify.com/MAL-2025-186681/): Malicious code in eclipse-triton-avior-yonder (npm) (malicious package)
- [MAL-2025-186680](https://insights.sbomify.com/MAL-2025-186680/): Malicious code in eclipse-parsec-native-commitlint-config-angular (npm) (malicious package)
- [MAL-2025-18668](https://insights.sbomify.com/MAL-2025-18668/): Malicious code in dotenv-safe-kastra-atlas-perturbation (npm) (malicious package)
- [MAL-2025-186679](https://insights.sbomify.com/MAL-2025-186679/): Malicious code in eclipse-levels-lynx-nanotechnology (npm) (malicious package)
- [MAL-2025-186678](https://insights.sbomify.com/MAL-2025-186678/): Malicious code in eclipse-hercules-europa-prettier-plugin-markdown (npm) (malicious package)
- [MAL-2025-186677](https://insights.sbomify.com/MAL-2025-186677/): Malicious code in eclipse-eridanus-upgrade-registry (npm) (malicious package)
- [MAL-2025-186676](https://insights.sbomify.com/MAL-2025-186676/): Malicious code in easy-throw-cron-rho-sanitize (npm) (malicious package)
- [MAL-2025-186675](https://insights.sbomify.com/MAL-2025-186675/): Malicious code in easy-serialize-omicron-mu-assert (npm) (malicious package)
- [MAL-2025-186674](https://insights.sbomify.com/MAL-2025-186674/): Malicious code in easy-pipe-signal-proxy-uglify (npm) (malicious package)
- [MAL-2025-186673](https://insights.sbomify.com/MAL-2025-186673/): Malicious code in easy-parse-async-xi-analyze (npm) (malicious package)
- [MAL-2025-186672](https://insights.sbomify.com/MAL-2025-186672/): Malicious code in easy-link-authorize-simple-view (npm) (malicious package)
- [MAL-2025-186671](https://insights.sbomify.com/MAL-2025-186671/): Malicious code in easy-kernel-deserialize-public-await (npm) (malicious package)
- [MAL-2025-186670](https://insights.sbomify.com/MAL-2025-186670/): Malicious code in easy-interpret-big-proxy-scale (npm) (malicious package)
- [MAL-2025-18667](https://insights.sbomify.com/MAL-2025-18667/): Malicious code in dotenv-safe-firebase-uninstall-innercore (npm) (malicious package)
- [MAL-2025-186669](https://insights.sbomify.com/MAL-2025-186669/): Malicious code in easy-emulate-try-psi-balance (npm) (malicious package)
- [MAL-2025-186668](https://insights.sbomify.com/MAL-2025-186668/): Malicious code in easy-cron-secure-thread-sanitize (npm) (malicious package)
- [MAL-2025-186667](https://insights.sbomify.com/MAL-2025-186667/): Malicious code in earth-visualize-abstract-beta-pipe (npm) (malicious package)
- [MAL-2025-186666](https://insights.sbomify.com/MAL-2025-186666/): Malicious code in earth-small-scale-simulate-static (npm) (malicious package)
- [MAL-2025-186665](https://insights.sbomify.com/MAL-2025-186665/): Malicious code in earth-protected-gamma-test-star (npm) (malicious package)
- [MAL-2025-186664](https://insights.sbomify.com/MAL-2025-186664/): Malicious code in earth-omega-epsilon-error-compress (npm) (malicious package)
- [MAL-2025-186663](https://insights.sbomify.com/MAL-2025-186663/): Malicious code in dysonswarm-public-mutation-sagitta (npm) (malicious package)
- [MAL-2025-186662](https://insights.sbomify.com/MAL-2025-186662/): Malicious code in dysonswarm-loop-command-uranology (npm) (malicious package)
- [MAL-2025-186661](https://insights.sbomify.com/MAL-2025-186661/): Malicious code in dysonswarm-lacerta-unuk-dynamo (npm) (malicious package)
- [MAL-2025-186660](https://insights.sbomify.com/MAL-2025-186660/): Malicious code in dysonswarm-joviology-node-sass-troposphere (npm) (malicious package)
- [MAL-2025-18666](https://insights.sbomify.com/MAL-2025-18666/): Malicious code in dotenv-safe-auriga-cz-conventional-changelog-castor (npm) (malicious package)
- [MAL-2025-186659](https://insights.sbomify.com/MAL-2025-186659/): Malicious code in dysonswarm-gulp-dendrochronology-iota (npm) (malicious package)
- [MAL-2025-186658](https://insights.sbomify.com/MAL-2025-186658/): Malicious code in dysonswarm-apex-graphql-module (npm) (malicious package)
- [MAL-2025-186657](https://insights.sbomify.com/MAL-2025-186657/): Malicious code in dynamo-sirius-changelog-string (npm) (malicious package)
- [MAL-2025-186656](https://insights.sbomify.com/MAL-2025-186656/): Malicious code in dynamo-schema-higgs-geoarchaeology (npm) (malicious package)
- [MAL-2025-186655](https://insights.sbomify.com/MAL-2025-186655/): Malicious code in dynamo-run-script-jasmine-kuiperbelt (npm) (malicious package)
- [MAL-2025-186654](https://insights.sbomify.com/MAL-2025-186654/): Malicious code in dynamo-mini-css-extract-plugin-cosmicsilence-frontend (npm) (malicious package)
- [MAL-2025-186653](https://insights.sbomify.com/MAL-2025-186653/): Malicious code in dynamo-leda-registry-unuk (npm) (malicious package)
- [MAL-2025-186652](https://insights.sbomify.com/MAL-2025-186652/): Malicious code in dynamo-ganymede-init-sequelize (npm) (malicious package)
- [MAL-2025-186651](https://insights.sbomify.com/MAL-2025-186651/): Malicious code in duplex-version-polaris-cosmos (npm) (malicious package)
- [MAL-2025-186650](https://insights.sbomify.com/MAL-2025-186650/): Malicious code in duplex-tailwindcss-nestjs-polaris (npm) (malicious package)
- [MAL-2025-18665](https://insights.sbomify.com/MAL-2025-18665/): Malicious code in dotenv-parse-variables-xanthus-nestjs-playwright (npm) (malicious package)
- [MAL-2025-186649](https://insights.sbomify.com/MAL-2025-186649/): Malicious code in duplex-request-astrometry-titan (npm) (malicious package)
- [MAL-2025-186648](https://insights.sbomify.com/MAL-2025-186648/): Malicious code in duplex-parcel-nodejs-membrane (npm) (malicious package)
- [MAL-2025-186647](https://insights.sbomify.com/MAL-2025-186647/): Malicious code in duplex-lacerta-link-pipe (npm) (malicious package)
- [MAL-2025-186646](https://insights.sbomify.com/MAL-2025-186646/): Malicious code in duplex-init-parcel-test (npm) (malicious package)
- [MAL-2025-186645](https://insights.sbomify.com/MAL-2025-186645/): Malicious code in duplex-eslint-plugin-apex-taphonomy (npm) (malicious package)
- [MAL-2025-186644](https://insights.sbomify.com/MAL-2025-186644/): Malicious code in duplex-airbnb-canopus-gammarayburst (npm) (malicious package)
- [MAL-2025-186643](https://insights.sbomify.com/MAL-2025-186643/): Malicious code in draco-terser-webpack-plugin-hermes-corvus (npm) (malicious package)
- [MAL-2025-186642](https://insights.sbomify.com/MAL-2025-186642/): Malicious code in draco-quasarjet-envconfig-technocracy (npm) (malicious package)
- [MAL-2025-186641](https://insights.sbomify.com/MAL-2025-186641/): Malicious code in draco-less-polaris-miranda (npm) (malicious package)
- [MAL-2025-186640](https://insights.sbomify.com/MAL-2025-186640/): Malicious code in draco-hermes-betelgeuse-auth0 (npm) (malicious package)
- [MAL-2025-18664](https://insights.sbomify.com/MAL-2025-18664/): Malicious code in dotenv-parse-variables-scorpius-borealis-style-loader (npm) (malicious package)
- [MAL-2025-186639](https://insights.sbomify.com/MAL-2025-186639/): Malicious code in draco-gacrux-carpo-await (npm) (malicious package)
- [MAL-2025-186638](https://insights.sbomify.com/MAL-2025-186638/): Malicious code in draco-cygnus-repository-aurora (npm) (malicious package)
- [MAL-2025-186637](https://insights.sbomify.com/MAL-2025-186637/): Malicious code in draco-convict-carina-superagent (npm) (malicious package)
- [MAL-2025-186636](https://insights.sbomify.com/MAL-2025-186636/): Malicious code in double-uglify-long-static-cron (npm) (malicious package)
- [MAL-2025-186635](https://insights.sbomify.com/MAL-2025-186635/): Malicious code in double-rain-protected-import-monitor (npm) (malicious package)
- [MAL-2025-186634](https://insights.sbomify.com/MAL-2025-186634/): Malicious code in double-grid-resolve-data-log (npm) (malicious package)
- [MAL-2025-186633](https://insights.sbomify.com/MAL-2025-186633/): Malicious code in double-final-proxy-gamma-alpha (npm) (malicious package)
- [MAL-2025-186632](https://insights.sbomify.com/MAL-2025-186632/): Malicious code in double-file-encode-moon-virtualize (npm) (malicious package)
- [MAL-2025-186631](https://insights.sbomify.com/MAL-2025-186631/): Malicious code in double-decode-encrypt-cache-bundle (npm) (malicious package)
- [MAL-2025-186630](https://insights.sbomify.com/MAL-2025-186630/): Malicious code in double-benchmark-pipe-hash-virtualize (npm) (malicious package)
- [MAL-2025-18663](https://insights.sbomify.com/MAL-2025-18663/): Malicious code in dotenv-parse-variables-norma-adonis-duplex (npm) (malicious package)
- [MAL-2025-186629](https://insights.sbomify.com/MAL-2025-186629/): Malicious code in dotenv-semantic-ui-fusion-hexo (npm) (malicious package)
- [MAL-2025-186628](https://insights.sbomify.com/MAL-2025-186628/): Malicious code in dotenv-sedna-inflation-figures (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/969/