# Vulnerabilities published in 2025


- [MAL-2025-186537](https://insights.sbomify.com/MAL-2025-186537/): Malicious code in dendrochronology-colors-cosmos-run-script (npm) (malicious package)
- [MAL-2025-186536](https://insights.sbomify.com/MAL-2025-186536/): Malicious code in dendrochronology-biomimicry-supernova-library (npm) (malicious package)
- [MAL-2025-186535](https://insights.sbomify.com/MAL-2025-186535/): Malicious code in delta-sun-psi-new-byte (npm) (malicious package)
- [MAL-2025-186534](https://insights.sbomify.com/MAL-2025-186534/): Malicious code in delta-string-enum-thread-uglify (npm) (malicious package)
- [MAL-2025-186533](https://insights.sbomify.com/MAL-2025-186533/): Malicious code in delta-encrypt-decrypt-process-hot (npm) (malicious package)
- [MAL-2025-186532](https://insights.sbomify.com/MAL-2025-186532/): Malicious code in delphinus-xml-acamar-json (npm) (malicious package)
- [MAL-2025-186531](https://insights.sbomify.com/MAL-2025-186531/): Malicious code in delphinus-vuepress-antares-europa (npm) (malicious package)
- [MAL-2025-186530](https://insights.sbomify.com/MAL-2025-186530/): Malicious code in delphinus-tool-sync-geckodriver (npm) (malicious package)
- [MAL-2025-18653](https://insights.sbomify.com/MAL-2025-18653/): Malicious code in dormance (npm) (malicious package)
- [MAL-2025-186529](https://insights.sbomify.com/MAL-2025-186529/): Malicious code in delphinus-run-script-deneb-query (npm) (malicious package)
- [MAL-2025-186528](https://insights.sbomify.com/MAL-2025-186528/): Malicious code in delphinus-passport-blazar-css-minimizer-webpack-plugin (npm) (malicious package)
- [MAL-2025-186527](https://insights.sbomify.com/MAL-2025-186527/): Malicious code in delphinus-paleoclimatology-stream-wezen (npm) (malicious package)
- [MAL-2025-186526](https://insights.sbomify.com/MAL-2025-186526/): Malicious code in delphinus-miranda-postcss-loader-chariklo (npm) (malicious package)
- [MAL-2025-186525](https://insights.sbomify.com/MAL-2025-186525/): Malicious code in delphinus-ganymede-sadr-ophiuchus (npm) (malicious package)
- [MAL-2025-186524](https://insights.sbomify.com/MAL-2025-186524/): Malicious code in delphinus-framework-miranda-chalk (npm) (malicious package)
- [MAL-2025-186523](https://insights.sbomify.com/MAL-2025-186523/): Malicious code in delphinus-chromedriver-quasar-cordelia (npm) (malicious package)
- [MAL-2025-186522](https://insights.sbomify.com/MAL-2025-186522/): Malicious code in deimos-wezen-parsec-transport (npm) (malicious package)
- [MAL-2025-186521](https://insights.sbomify.com/MAL-2025-186521/): Malicious code in deimos-selenium-local-futurology (npm) (malicious package)
- [MAL-2025-186520](https://insights.sbomify.com/MAL-2025-186520/): Malicious code in deimos-redshift-plutology-google (npm) (malicious package)
- [MAL-2025-18652](https://insights.sbomify.com/MAL-2025-18652/): Malicious code in dorkroom (npm) (malicious package)
- [MAL-2025-186519](https://insights.sbomify.com/MAL-2025-186519/): Malicious code in deimos-polaris-gridsome-magellan (npm) (malicious package)
- [MAL-2025-186518](https://insights.sbomify.com/MAL-2025-186518/): Malicious code in deimos-phoenix-impulse-standard (npm) (malicious package)
- [MAL-2025-186517](https://insights.sbomify.com/MAL-2025-186517/): Malicious code in deimos-koa-build-figures (npm) (malicious package)
- [MAL-2025-186516](https://insights.sbomify.com/MAL-2025-186516/): Malicious code in deimos-iota-luminescence-geochemistry (npm) (malicious package)
- [MAL-2025-186515](https://insights.sbomify.com/MAL-2025-186515/): Malicious code in deimos-hermes-quantum-venus (npm) (malicious package)
- [MAL-2025-186514](https://insights.sbomify.com/MAL-2025-186514/): Malicious code in deimos-concurrently-outercore-browserify (npm) (malicious package)
- [MAL-2025-186513](https://insights.sbomify.com/MAL-2025-186513/): Malicious code in deimos-ceres-astro-isostasy (npm) (malicious package)
- [MAL-2025-186512](https://insights.sbomify.com/MAL-2025-186512/): Malicious code in deimos-await-castor-dotenv (npm) (malicious package)
- [MAL-2025-186511](https://insights.sbomify.com/MAL-2025-186511/): Malicious code in decrypt-xml-compress-moon-file (npm) (malicious package)
- [MAL-2025-186510](https://insights.sbomify.com/MAL-2025-186510/): Malicious code in decrypt-sun-mock-rain-debug (npm) (malicious package)
- [MAL-2025-18651](https://insights.sbomify.com/MAL-2025-18651/): Malicious code in dordrecht (npm) (malicious package)
- [MAL-2025-186509](https://insights.sbomify.com/MAL-2025-186509/): Malicious code in decrypt-info-meta-table-big (npm) (malicious package)
- [MAL-2025-186508](https://insights.sbomify.com/MAL-2025-186508/): Malicious code in decrypt-import-info-optimize-authorize (npm) (malicious package)
- [MAL-2025-186507](https://insights.sbomify.com/MAL-2025-186507/): Malicious code in decompress-tree-protected-upsilon-mu (npm) (malicious package)
- [MAL-2025-186506](https://insights.sbomify.com/MAL-2025-186506/): Malicious code in decompress-simple-lambda-container-meta (npm) (malicious package)
- [MAL-2025-186505](https://insights.sbomify.com/MAL-2025-186505/): Malicious code in decompress-sed-sudo-index-nu (npm) (malicious package)
- [MAL-2025-186504](https://insights.sbomify.com/MAL-2025-186504/): Malicious code in decompress-deserialize-nu-new-emulate (npm) (malicious package)
- [MAL-2025-186503](https://insights.sbomify.com/MAL-2025-186503/): Malicious code in decoherence-neptune-saturnology-transport (npm) (malicious package)
- [MAL-2025-186502](https://insights.sbomify.com/MAL-2025-186502/): Malicious code in decoherence-fetch-wezen-enif (npm) (malicious package)
- [MAL-2025-186501](https://insights.sbomify.com/MAL-2025-186501/): Malicious code in decode-info-new-finally-new (npm) (malicious package)
- [MAL-2025-186500](https://insights.sbomify.com/MAL-2025-186500/): Malicious code in decode-export-data-cold-error (npm) (malicious package)
- [MAL-2025-18650](https://insights.sbomify.com/MAL-2025-18650/): Malicious code in dorado-quantum-miranda-grus (npm) (malicious package)
- [MAL-2025-1865](https://insights.sbomify.com/MAL-2025-1865/): Malicious code in instacart-tests (npm) (malicious package)
- [MAL-2025-186499](https://insights.sbomify.com/MAL-2025-186499/): Malicious code in decode-authenticate-final-delta-enum (npm) (malicious package)
- [MAL-2025-186498](https://insights.sbomify.com/MAL-2025-186498/): Malicious code in debug-user-pipe-sun-simple (npm) (malicious package)
- [MAL-2025-186497](https://insights.sbomify.com/MAL-2025-186497/): Malicious code in debug-tau-wind-gamma-sun (npm) (malicious package)
- [MAL-2025-186496](https://insights.sbomify.com/MAL-2025-186496/): Malicious code in debug-container-zeta-load-log (npm) (malicious package)
- [MAL-2025-186495](https://insights.sbomify.com/MAL-2025-186495/): Malicious code in debug-char-code-double-encode (npm) (malicious package)
- [MAL-2025-186494](https://insights.sbomify.com/MAL-2025-186494/): Malicious code in debug-cache-report-cache-index (npm) (malicious package)
- [MAL-2025-186493](https://insights.sbomify.com/MAL-2025-186493/): Malicious code in data-virtualize-cluster-view-phi (npm) (malicious package)
- [MAL-2025-186492](https://insights.sbomify.com/MAL-2025-186492/): Malicious code in data-omicron-static-quick-serialize (npm) (malicious package)
- [MAL-2025-186491](https://insights.sbomify.com/MAL-2025-186491/): Malicious code in data-node-sanitize-balance-optimize (npm) (malicious package)
- [MAL-2025-186490](https://insights.sbomify.com/MAL-2025-186490/): Malicious code in data-grep-string-transpile-link (npm) (malicious package)
- [MAL-2025-18649](https://insights.sbomify.com/MAL-2025-18649/): Malicious code in dorado-metalsmith-heka-commitlint-config-angular (npm) (malicious package)
- [MAL-2025-186489](https://insights.sbomify.com/MAL-2025-186489/): Malicious code in darkmatter-pegasus-optimize-css-assets-webpack-plugin-andromeda (npm) (malicious package)
- [MAL-2025-186488](https://insights.sbomify.com/MAL-2025-186488/): Malicious code in darkmatter-halley-farout-archaeometry (npm) (malicious package)
- [MAL-2025-186487](https://insights.sbomify.com/MAL-2025-186487/): Malicious code in darkmatter-gravitationalwave-less-websockets (npm) (malicious package)
- [MAL-2025-186486](https://insights.sbomify.com/MAL-2025-186486/): Malicious code in darkmatter-exosphere-exoplanetology-yakutsk (npm) (malicious package)
- [MAL-2025-186485](https://insights.sbomify.com/MAL-2025-186485/): Malicious code in darkmatter-build-kuiperbelt-xanthus (npm) (malicious package)
- [MAL-2025-186484](https://insights.sbomify.com/MAL-2025-186484/): Malicious code in darkenergy-style-loader-style-loader-node-config (npm) (malicious package)
- [MAL-2025-186483](https://insights.sbomify.com/MAL-2025-186483/): Malicious code in darkenergy-regulus-hadron-elektra (npm) (malicious package)
- [MAL-2025-186482](https://insights.sbomify.com/MAL-2025-186482/): Malicious code in darkenergy-palynology-publish-terraforming (npm) (malicious package)
- [MAL-2025-186481](https://insights.sbomify.com/MAL-2025-186481/): Malicious code in darkenergy-janus-firebase-chalk (npm) (malicious package)
- [MAL-2025-186480](https://insights.sbomify.com/MAL-2025-186480/): Malicious code in darkenergy-helmet-epigenetics-leda (npm) (malicious package)
- [MAL-2025-18648](https://insights.sbomify.com/MAL-2025-18648/): Malicious code in dorado-html-webpack-plugin-less-procyon (npm) (malicious package)
- [MAL-2025-186479](https://insights.sbomify.com/MAL-2025-186479/): Malicious code in darkenergy-google-paleoanthropology-thuban (npm) (malicious package)
- [MAL-2025-186478](https://insights.sbomify.com/MAL-2025-186478/): Malicious code in darkenergy-config-pulsar-development (npm) (malicious package)
- [MAL-2025-186477](https://insights.sbomify.com/MAL-2025-186477/): Malicious code in dagda-tectonophysics-materialize-astrometry (npm) (malicious package)
- [MAL-2025-186476](https://insights.sbomify.com/MAL-2025-186476/): Malicious code in dagda-technocracy-commitlint-gacrux (npm) (malicious package)
- [MAL-2025-186475](https://insights.sbomify.com/MAL-2025-186475/): Malicious code in dagda-spawn-selenium-vega (npm) (malicious package)
- [MAL-2025-186474](https://insights.sbomify.com/MAL-2025-186474/): Malicious code in dagda-pulsar-redshift-remark (npm) (malicious package)
- [MAL-2025-186473](https://insights.sbomify.com/MAL-2025-186473/): Malicious code in dagda-polaris-entanglement-meteor (npm) (malicious package)
- [MAL-2025-186472](https://insights.sbomify.com/MAL-2025-186472/): Malicious code in dagda-ophiuchus-koa-solarnebula (npm) (malicious package)
- [MAL-2025-186471](https://insights.sbomify.com/MAL-2025-186471/): Malicious code in dagda-non-blocking-html-webpack-plugin-astrophysics (npm) (malicious package)
- [MAL-2025-186470](https://insights.sbomify.com/MAL-2025-186470/): Malicious code in dagda-geckodriver-perturbation-geodynamo (npm) (malicious package)
- [MAL-2025-18647](https://insights.sbomify.com/MAL-2025-18647/): Malicious code in dorado-gravitationalwave-neutronstar-galaxy (npm) (malicious package)
- [MAL-2025-186469](https://insights.sbomify.com/MAL-2025-186469/): Malicious code in dagda-ganymede-fornax-ursa (npm) (malicious package)
- [MAL-2025-186468](https://insights.sbomify.com/MAL-2025-186468/): Malicious code in dagda-event-despina-event (npm) (malicious package)
- [MAL-2025-186467](https://insights.sbomify.com/MAL-2025-186467/): Malicious code in dagda-ablation-ganymede-meteor (npm) (malicious package)
- [MAL-2025-186466](https://insights.sbomify.com/MAL-2025-186466/): Malicious code in daemon-old-mu-interpret-deserialize (npm) (malicious package)
- [MAL-2025-186465](https://insights.sbomify.com/MAL-2025-186465/): Malicious code in daemon-function-throw-file-dog (npm) (malicious package)
- [MAL-2025-186464](https://insights.sbomify.com/MAL-2025-186464/): Malicious code in daemon-epsilon-hash-link-slow (npm) (malicious package)
- [MAL-2025-186463](https://insights.sbomify.com/MAL-2025-186463/): Malicious code in daemon-container-rain-route-reject (npm) (malicious package)
- [MAL-2025-186462](https://insights.sbomify.com/MAL-2025-186462/): Malicious code in dactyl-transform-nightwatch-petrology (npm) (malicious package)
- [MAL-2025-186461](https://insights.sbomify.com/MAL-2025-186461/): Malicious code in dactyl-phoenix-rest-gulp (npm) (malicious package)
- [MAL-2025-186460](https://insights.sbomify.com/MAL-2025-186460/): Malicious code in dactyl-loopback-axios-lacerta (npm) (malicious package)
- [MAL-2025-18646](https://insights.sbomify.com/MAL-2025-18646/): Malicious code in dorado-darkmatter-gravity-commitlint-config-angular (npm) (malicious package)
- [MAL-2025-186459](https://insights.sbomify.com/MAL-2025-186459/): Malicious code in cz-conventional-changelog-webdriver-mocha-lepton-abiogenesis (npm) (malicious package)
- [MAL-2025-186458](https://insights.sbomify.com/MAL-2025-186458/): Malicious code in cz-conventional-changelog-stop-readable-mutation (npm) (malicious package)
- [MAL-2025-186457](https://insights.sbomify.com/MAL-2025-186457/): Malicious code in cz-conventional-changelog-sirius-cluster-tectonophysics (npm) (malicious package)
- [MAL-2025-186456](https://insights.sbomify.com/MAL-2025-186456/): Malicious code in cz-conventional-changelog-selenium-xanadu-enif (npm) (malicious package)
- [MAL-2025-186455](https://insights.sbomify.com/MAL-2025-186455/): Malicious code in cz-conventional-changelog-ora-rehype-xanadu (npm) (malicious package)
- [MAL-2025-186454](https://insights.sbomify.com/MAL-2025-186454/): Malicious code in cz-conventional-changelog-heliophysics-carpo-mocha (npm) (malicious package)
- [MAL-2025-186453](https://insights.sbomify.com/MAL-2025-186453/): Malicious code in cz-conventional-changelog-blitz-steganography-lacerta (npm) (malicious package)
- [MAL-2025-186452](https://insights.sbomify.com/MAL-2025-186452/): Malicious code in cypress-vuetify-mutation-hermes (npm) (malicious package)
- [MAL-2025-186451](https://insights.sbomify.com/MAL-2025-186451/): Malicious code in cypress-technosignature-solarnebula-protractor (npm) (malicious package)
- [MAL-2025-186450](https://insights.sbomify.com/MAL-2025-186450/): Malicious code in cypress-procyon-neptune-epigenetics (npm) (malicious package)
- [MAL-2025-18645](https://insights.sbomify.com/MAL-2025-18645/): Malicious code in dorado-aldebaran-hermes-react-bootstrap (npm) (malicious package)
- [MAL-2025-186449](https://insights.sbomify.com/MAL-2025-186449/): Malicious code in cypress-phoenix-higgs-chromedriver (npm) (malicious package)
- [MAL-2025-186448](https://insights.sbomify.com/MAL-2025-186448/): Malicious code in cypress-geckodriver-vulcan-metalsmith (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/971/