# Vulnerabilities published in 2025


- [MAL-2025-186177](https://insights.sbomify.com/MAL-2025-186177/): Malicious code in cluster-child-process-remark-hadron (npm) (malicious package)
- [MAL-2025-186176](https://insights.sbomify.com/MAL-2025-186176/): Malicious code in cloud-water-old-moon-wind (npm) (malicious package)
- [MAL-2025-186175](https://insights.sbomify.com/MAL-2025-186175/): Malicious code in cloud-user-static-promise-stub (npm) (malicious package)
- [MAL-2025-186174](https://insights.sbomify.com/MAL-2025-186174/): Malicious code in cloud-star-parse-fork-sandbox (npm) (malicious package)
- [MAL-2025-186173](https://insights.sbomify.com/MAL-2025-186173/): Malicious code in cloud-fire-grid-kernel-cron (npm) (malicious package)
- [MAL-2025-186172](https://insights.sbomify.com/MAL-2025-186172/): Malicious code in cloud-class-stack-xml-runtime (npm) (malicious package)
- [MAL-2025-186171](https://insights.sbomify.com/MAL-2025-186171/): Malicious code in cloud-analyze-spy-thread-object (npm) (malicious package)
- [MAL-2025-186170](https://insights.sbomify.com/MAL-2025-186170/): Malicious code in cli-webdriver-manager-lint-staged-auth (npm) (malicious package)
- [MAL-2025-18617](https://insights.sbomify.com/MAL-2025-18617/): Malicious code in dolphin-volcano-wuj367-project (npm) (malicious package)
- [MAL-2025-186169](https://insights.sbomify.com/MAL-2025-186169/): Malicious code in cli-protractor-sqlite-library (npm) (malicious package)
- [MAL-2025-186168](https://insights.sbomify.com/MAL-2025-186168/): Malicious code in cli-module-publish-firebase (npm) (malicious package)
- [MAL-2025-186167](https://insights.sbomify.com/MAL-2025-186167/): Malicious code in cli-mdx-galaxy-xenobiology (npm) (malicious package)
- [MAL-2025-186166](https://insights.sbomify.com/MAL-2025-186166/): Malicious code in cli-holography-bunyan-telesto (npm) (malicious package)
- [MAL-2025-186165](https://insights.sbomify.com/MAL-2025-186165/): Malicious code in cli-hermes-mesosphere-corvus (npm) (malicious package)
- [MAL-2025-186164](https://insights.sbomify.com/MAL-2025-186164/): Malicious code in cli-eris-cors-jest (npm) (malicious package)
- [MAL-2025-186163](https://insights.sbomify.com/MAL-2025-186163/): Malicious code in cli-cordelia-chalk-redgiant (npm) (malicious package)
- [MAL-2025-186162](https://insights.sbomify.com/MAL-2025-186162/): Malicious code in cli-aldebaran-geodynamo-jabbah (npm) (malicious package)
- [MAL-2025-186161](https://insights.sbomify.com/MAL-2025-186161/): Malicious code in class-secure-function-transpile-authorize (npm) (malicious package)
- [MAL-2025-186160](https://insights.sbomify.com/MAL-2025-186160/): Malicious code in class-kernel-lambda-void-try (npm) (malicious package)
- [MAL-2025-18616](https://insights.sbomify.com/MAL-2025-18616/): Malicious code in dolphin-savanna-bje485-project (npm) (malicious package)
- [MAL-2025-186159](https://insights.sbomify.com/MAL-2025-186159/): Malicious code in class-eta-lambda-hash-root (npm) (malicious package)
- [MAL-2025-186158](https://insights.sbomify.com/MAL-2025-186158/): Malicious code in class-debug-private-decrypt-slow (npm) (malicious package)
- [MAL-2025-186157](https://insights.sbomify.com/MAL-2025-186157/): Malicious code in cladistics-virgo-transform-query (npm) (malicious package)
- [MAL-2025-186156](https://insights.sbomify.com/MAL-2025-186156/): Malicious code in cladistics-markdown-pdf-helmet-betelgeuse (npm) (malicious package)
- [MAL-2025-186155](https://insights.sbomify.com/MAL-2025-186155/): Malicious code in cladistics-geochemistry-vortex-panspermia (npm) (malicious package)
- [MAL-2025-186154](https://insights.sbomify.com/MAL-2025-186154/): Malicious code in cladistics-crust-blitz-delphinus (npm) (malicious package)
- [MAL-2025-186153](https://insights.sbomify.com/MAL-2025-186153/): Malicious code in cladistics-charon-sagitta-protractor (npm) (malicious package)
- [MAL-2025-186152](https://insights.sbomify.com/MAL-2025-186152/): Malicious code in chromedriver-spica-repository-epigenetics (npm) (malicious package)
- [MAL-2025-186151](https://insights.sbomify.com/MAL-2025-186151/): Malicious code in chromedriver-non-blocking-chariklo-registry (npm) (malicious package)
- [MAL-2025-186150](https://insights.sbomify.com/MAL-2025-186150/): Malicious code in chromedriver-jwt-paleoclimatology-archaeoastronomy (npm) (malicious package)
- [MAL-2025-18615](https://insights.sbomify.com/MAL-2025-18615/): Malicious code in dolphin-quilt-ywr799-project (npm) (malicious package)
- [MAL-2025-186149](https://insights.sbomify.com/MAL-2025-186149/): Malicious code in chromedriver-json-polaris-hyperion (npm) (malicious package)
- [MAL-2025-186148](https://insights.sbomify.com/MAL-2025-186148/): Malicious code in chromedriver-hyperion-isostasy-cz-conventional-changelog (npm) (malicious package)
- [MAL-2025-186147](https://insights.sbomify.com/MAL-2025-186147/): Malicious code in child-process-xenon-avior-perseus (npm) (malicious package)
- [MAL-2025-186146](https://insights.sbomify.com/MAL-2025-186146/): Malicious code in child-process-stratigraphy-subduction-node-sass (npm) (malicious package)
- [MAL-2025-186145](https://insights.sbomify.com/MAL-2025-186145/): Malicious code in child-process-loglevel-elektra-eleventy (npm) (malicious package)
- [MAL-2025-186144](https://insights.sbomify.com/MAL-2025-186144/): Malicious code in child-process-eridanus-cypress-zephyr (npm) (malicious package)
- [MAL-2025-186143](https://insights.sbomify.com/MAL-2025-186143/): Malicious code in child-process-concurrently-chakra-ui-node-sass (npm) (malicious package)
- [MAL-2025-186142](https://insights.sbomify.com/MAL-2025-186142/): Malicious code in child-process-charon-mui-on (npm) (malicious package)
- [MAL-2025-186141](https://insights.sbomify.com/MAL-2025-186141/): Malicious code in child-process-blitz-spawn-wasat (npm) (malicious package)
- [MAL-2025-186140](https://insights.sbomify.com/MAL-2025-186140/): Malicious code in chi-short-export-assert-execute (npm) (malicious package)
- [MAL-2025-18614](https://insights.sbomify.com/MAL-2025-18614/): Malicious code in dolphin-quagmire-xgc560-project (npm) (malicious package)
- [MAL-2025-186139](https://insights.sbomify.com/MAL-2025-186139/): Malicious code in chi-route-good-integer-grep (npm) (malicious package)
- [MAL-2025-186138](https://insights.sbomify.com/MAL-2025-186138/): Malicious code in chi-omega-permission-analyze-warn (npm) (malicious package)
- [MAL-2025-186137](https://insights.sbomify.com/MAL-2025-186137/): Malicious code in chi-mu-socket-cold-small (npm) (malicious package)
- [MAL-2025-186136](https://insights.sbomify.com/MAL-2025-186136/): Malicious code in chi-iota-decompress-sed-emulate (npm) (malicious package)
- [MAL-2025-186135](https://insights.sbomify.com/MAL-2025-186135/): Malicious code in chi-error-kappa-shell-error (npm) (malicious package)
- [MAL-2025-186134](https://insights.sbomify.com/MAL-2025-186134/): Malicious code in chi-cron-sudo-finally-visualize (npm) (malicious package)
- [MAL-2025-186133](https://insights.sbomify.com/MAL-2025-186133/): Malicious code in chi-bad-deserialize-throw-static (npm) (malicious package)
- [MAL-2025-186132](https://insights.sbomify.com/MAL-2025-186132/): Malicious code in charon-transhumanism-zephyr-electron-builder (npm) (malicious package)
- [MAL-2025-186131](https://insights.sbomify.com/MAL-2025-186131/): Malicious code in charon-stream-fornax-dotenv (npm) (malicious package)
- [MAL-2025-186130](https://insights.sbomify.com/MAL-2025-186130/): Malicious code in chariklo-sirius-relay-leda (npm) (malicious package)
- [MAL-2025-18613](https://insights.sbomify.com/MAL-2025-18613/): Malicious code in dolphin-jasmine-xvn862-project (npm) (malicious package)
- [MAL-2025-186129](https://insights.sbomify.com/MAL-2025-186129/): Malicious code in chariklo-perseus-chalk-antares (npm) (malicious package)
- [MAL-2025-186128](https://insights.sbomify.com/MAL-2025-186128/): Malicious code in chariklo-library-public-local (npm) (malicious package)
- [MAL-2025-186127](https://insights.sbomify.com/MAL-2025-186127/): Malicious code in chariklo-dysonswarm-yildun-adonis (npm) (malicious package)
- [MAL-2025-186126](https://insights.sbomify.com/MAL-2025-186126/): Malicious code in chariklo-babel-postgres-thuban (npm) (malicious package)
- [MAL-2025-186125](https://insights.sbomify.com/MAL-2025-186125/): Malicious code in chariklo-areology-changelog-arcturus (npm) (malicious package)
- [MAL-2025-186124](https://insights.sbomify.com/MAL-2025-186124/): Malicious code in char-xml-xml-validate-validate (npm) (malicious package)
- [MAL-2025-186123](https://insights.sbomify.com/MAL-2025-186123/): Malicious code in char-hot-import-public-process (npm) (malicious package)
- [MAL-2025-186122](https://insights.sbomify.com/MAL-2025-186122/): Malicious code in char-double-load-notify-gamma (npm) (malicious package)
- [MAL-2025-186121](https://insights.sbomify.com/MAL-2025-186121/): Malicious code in char-cat-execute-eta-authenticate (npm) (malicious package)
- [MAL-2025-186120](https://insights.sbomify.com/MAL-2025-186120/): Malicious code in char-bundle-route-refactor-async (npm) (malicious package)
- [MAL-2025-18612](https://insights.sbomify.com/MAL-2025-18612/): Malicious code in dolphin-icicle-wnp515-project (npm) (malicious package)
- [MAL-2025-186119](https://insights.sbomify.com/MAL-2025-186119/): Malicious code in char-alert-abstract-decrypt-test (npm) (malicious package)
- [MAL-2025-186118](https://insights.sbomify.com/MAL-2025-186118/): Malicious code in changelog-unuk-antares-restart (npm) (malicious package)
- [MAL-2025-186117](https://insights.sbomify.com/MAL-2025-186117/): Malicious code in changelog-tachyon-writable-pipe (npm) (malicious package)
- [MAL-2025-186116](https://insights.sbomify.com/MAL-2025-186116/): Malicious code in changelog-supernova-mantle-hermes (npm) (malicious package)
- [MAL-2025-186115](https://insights.sbomify.com/MAL-2025-186115/): Malicious code in changelog-prompts-europa-blazar (npm) (malicious package)
- [MAL-2025-186114](https://insights.sbomify.com/MAL-2025-186114/): Malicious code in changelog-polaris-dotenv-safe-phoebe (npm) (malicious package)
- [MAL-2025-186113](https://insights.sbomify.com/MAL-2025-186113/): Malicious code in changelog-multiverse-heliophysics-regulus (npm) (malicious package)
- [MAL-2025-186112](https://insights.sbomify.com/MAL-2025-186112/): Malicious code in changelog-middleware-koa-betelgeuse (npm) (malicious package)
- [MAL-2025-186111](https://insights.sbomify.com/MAL-2025-186111/): Malicious code in changelog-hugo-fusion-tectonic (npm) (malicious package)
- [MAL-2025-186110](https://insights.sbomify.com/MAL-2025-186110/): Malicious code in changelog-gridsome-perseus-css-minimizer-webpack-plugin (npm) (malicious package)
- [MAL-2025-18611](https://insights.sbomify.com/MAL-2025-18611/): Malicious code in dolphin-hedgehog-fsk020-project (npm) (malicious package)
- [MAL-2025-186109](https://insights.sbomify.com/MAL-2025-186109/): Malicious code in changelog-graviton-hadron-panspermia (npm) (malicious package)
- [MAL-2025-186108](https://insights.sbomify.com/MAL-2025-186108/): Malicious code in changelog-borealis-resolvers-resonance (npm) (malicious package)
- [MAL-2025-186107](https://insights.sbomify.com/MAL-2025-186107/): Malicious code in changelog-archaeogenetics-mini-css-extract-plugin-dotenv (npm) (malicious package)
- [MAL-2025-186106](https://insights.sbomify.com/MAL-2025-186106/): Malicious code in chalk-supercluster-repository-morgan (npm) (malicious package)
- [MAL-2025-186105](https://insights.sbomify.com/MAL-2025-186105/): Malicious code in chalk-stop-indus-module (npm) (malicious package)
- [MAL-2025-186104](https://insights.sbomify.com/MAL-2025-186104/): Malicious code in chalk-steganography-europa-spawn (npm) (malicious package)
- [MAL-2025-186103](https://insights.sbomify.com/MAL-2025-186103/): Malicious code in chalk-soap-eris-mini-css-extract-plugin (npm) (malicious package)
- [MAL-2025-186102](https://insights.sbomify.com/MAL-2025-186102/): Malicious code in chalk-resonance-triton-mineralogy (npm) (malicious package)
- [MAL-2025-186101](https://insights.sbomify.com/MAL-2025-186101/): Malicious code in chalk-pulsar-native-xerxes (npm) (malicious package)
- [MAL-2025-186100](https://insights.sbomify.com/MAL-2025-186100/): Malicious code in chalk-paleontology-quasar-taurus (npm) (malicious package)
- [MAL-2025-18610](https://insights.sbomify.com/MAL-2025-18610/): Malicious code in dolphin-giraffe-pgx045-project (npm) (malicious package)
- [MAL-2025-1861](https://insights.sbomify.com/MAL-2025-1861/): Malicious code in instacart-db (npm) (malicious package)
- [MAL-2025-186099](https://insights.sbomify.com/MAL-2025-186099/): Malicious code in chalk-paleoclimatology-dependencies-parsec (npm) (malicious package)
- [MAL-2025-186098](https://insights.sbomify.com/MAL-2025-186098/): Malicious code in chalk-mui-neptune-cosmos (npm) (malicious package)
- [MAL-2025-186097](https://insights.sbomify.com/MAL-2025-186097/): Malicious code in chalk-mira-procyon-schema (npm) (malicious package)
- [MAL-2025-186096](https://insights.sbomify.com/MAL-2025-186096/): Malicious code in chalk-interferometry-telesto-ophiuchus (npm) (malicious package)
- [MAL-2025-186095](https://insights.sbomify.com/MAL-2025-186095/): Malicious code in chalk-cluster-nucleosynthesis-pipe (npm) (malicious package)
- [MAL-2025-186094](https://insights.sbomify.com/MAL-2025-186094/): Malicious code in chalk-asteroid-await-prettier-stylelint (npm) (malicious package)
- [MAL-2025-186093](https://insights.sbomify.com/MAL-2025-186093/): Malicious code in chakra-ui-test-quark-astrophysics (npm) (malicious package)
- [MAL-2025-186092](https://insights.sbomify.com/MAL-2025-186092/): Malicious code in chakra-ui-standard-nuxtjs-sass-loader (npm) (malicious package)
- [MAL-2025-186091](https://insights.sbomify.com/MAL-2025-186091/): Malicious code in chakra-ui-sadr-yaml-less-loader (npm) (malicious package)
- [MAL-2025-186090](https://insights.sbomify.com/MAL-2025-186090/): Malicious code in chakra-ui-ophiuchus-sublimation-readable (npm) (malicious package)
- [MAL-2025-18609](https://insights.sbomify.com/MAL-2025-18609/): Malicious code in dolphin-galaxy-agl545-project (npm) (malicious package)
- [MAL-2025-186089](https://insights.sbomify.com/MAL-2025-186089/): Malicious code in chakra-ui-levels-mdx-mongoose (npm) (malicious package)
- [MAL-2025-186088](https://insights.sbomify.com/MAL-2025-186088/): Malicious code in chakra-ui-fornax-umbriel-wezen (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/975/