# Vulnerabilities published in 2025 - [MAL-2025-186087](https://insights.sbomify.com/MAL-2025-186087/): Malicious code in chakra-ui-fomalhaut-on-cosmochemistry (npm) (malicious package) - [MAL-2025-186086](https://insights.sbomify.com/MAL-2025-186086/): Malicious code in chakra-ui-ethology-biomimicry-superflare (npm) (malicious package) - [MAL-2025-186085](https://insights.sbomify.com/MAL-2025-186085/): Malicious code in chai-tachyon-init-procyon (npm) (malicious package) - [MAL-2025-186084](https://insights.sbomify.com/MAL-2025-186084/): Malicious code in chai-schema-plutology-eclipse (npm) (malicious package) - [MAL-2025-186083](https://insights.sbomify.com/MAL-2025-186083/): Malicious code in chai-prompts-auth0-geckodriver (npm) (malicious package) - [MAL-2025-186082](https://insights.sbomify.com/MAL-2025-186082/): Malicious code in chai-node-sass-biosignature-tardigrade (npm) (malicious package) - [MAL-2025-186081](https://insights.sbomify.com/MAL-2025-186081/): Malicious code in chai-mesosphere-astro-postgres (npm) (malicious package) - [MAL-2025-186080](https://insights.sbomify.com/MAL-2025-186080/): Malicious code in chai-juno-eleventy-hydrogeology (npm) (malicious package) - [MAL-2025-18608](https://insights.sbomify.com/MAL-2025-18608/): Malicious code in dolphin-dewdrop-hwu270-project (npm) (malicious package) - [MAL-2025-186079](https://insights.sbomify.com/MAL-2025-186079/): Malicious code in chai-javascript-pulsar-pyxis (npm) (malicious package) - [MAL-2025-186078](https://insights.sbomify.com/MAL-2025-186078/): Malicious code in chai-greatfilter-phoenix-nconf (npm) (malicious package) - [MAL-2025-186077](https://insights.sbomify.com/MAL-2025-186077/): Malicious code in chai-got-pino-commitizen (npm) (malicious package) - [MAL-2025-186076](https://insights.sbomify.com/MAL-2025-186076/): Malicious code in chai-gatsby-coronalmassejection-nuxtjs (npm) (malicious package) - [MAL-2025-186075](https://insights.sbomify.com/MAL-2025-186075/): Malicious code in chai-blazar-quasar-link (npm) (malicious package) - [MAL-2025-186074](https://insights.sbomify.com/MAL-2025-186074/): Malicious code in ceres-redis-umbra-terser-webpack-plugin (npm) (malicious package) - [MAL-2025-186073](https://insights.sbomify.com/MAL-2025-186073/): Malicious code in ceres-petrology-callisto-shelljs (npm) (malicious package) - [MAL-2025-186072](https://insights.sbomify.com/MAL-2025-186072/): Malicious code in ceres-perseus-csv-nconf (npm) (malicious package) - [MAL-2025-186071](https://insights.sbomify.com/MAL-2025-186071/): Malicious code in ceres-morgan-stream-singularitarianism (npm) (malicious package) - [MAL-2025-186070](https://insights.sbomify.com/MAL-2025-186070/): Malicious code in ceres-augmentedreality-iota-transport (npm) (malicious package) - [MAL-2025-18607](https://insights.sbomify.com/MAL-2025-18607/): Malicious code in dolphin-cloud-kqk279-project (npm) (malicious package) - [MAL-2025-186069](https://insights.sbomify.com/MAL-2025-186069/): Malicious code in centaurus-triton-library-resolvers (npm) (malicious package) - [MAL-2025-186068](https://insights.sbomify.com/MAL-2025-186068/): Malicious code in centaurus-test-rollup-webdriver-mocha (npm) (malicious package) - [MAL-2025-186067](https://insights.sbomify.com/MAL-2025-186067/): Malicious code in centaurus-superagent-spinner-leda (npm) (malicious package) - [MAL-2025-186066](https://insights.sbomify.com/MAL-2025-186066/): Malicious code in centaurus-quasar-module-rimraf (npm) (malicious package) - [MAL-2025-186065](https://insights.sbomify.com/MAL-2025-186065/): Malicious code in centaurus-perseus-remark-sync (npm) (malicious package) - [MAL-2025-186064](https://insights.sbomify.com/MAL-2025-186064/): Malicious code in centaurus-neptune-css-loader-lynx (npm) (malicious package) - [MAL-2025-186063](https://insights.sbomify.com/MAL-2025-186063/): Malicious code in centaurus-miranda-meteor-frontend (npm) (malicious package) - [MAL-2025-186062](https://insights.sbomify.com/MAL-2025-186062/): Malicious code in centaurus-gammarayburst-rimraf-glaciology (npm) (malicious package) - [MAL-2025-186061](https://insights.sbomify.com/MAL-2025-186061/): Malicious code in centaurus-farout-html-webpack-plugin-callisto (npm) (malicious package) - [MAL-2025-186060](https://insights.sbomify.com/MAL-2025-186060/): Malicious code in centaurus-browserify-run-script-interferometry (npm) (malicious package) - [MAL-2025-18606](https://insights.sbomify.com/MAL-2025-18606/): Malicious code in dolphin-asteroid-lhf553-project (npm) (malicious package) - [MAL-2025-186059](https://insights.sbomify.com/MAL-2025-186059/): Malicious code in centaurus-biohacking-mongoose-nova (npm) (malicious package) - [MAL-2025-186058](https://insights.sbomify.com/MAL-2025-186058/): Malicious code in centaurus-backend-json-draco (npm) (malicious package) - [MAL-2025-186057](https://insights.sbomify.com/MAL-2025-186057/): Malicious code in centauri-xenos-phoebe-heliophysics (npm) (malicious package) - [MAL-2025-186056](https://insights.sbomify.com/MAL-2025-186056/): Malicious code in centauri-xenobiology-prompts-foundation (npm) (malicious package) - [MAL-2025-186055](https://insights.sbomify.com/MAL-2025-186055/): Malicious code in centauri-troposphere-umbriel-decoherence (npm) (malicious package) - [MAL-2025-186054](https://insights.sbomify.com/MAL-2025-186054/): Malicious code in centauri-protractor-biosignature-supernova (npm) (malicious package) - [MAL-2025-186053](https://insights.sbomify.com/MAL-2025-186053/): Malicious code in centauri-module-adonis-reveal-md (npm) (malicious package) - [MAL-2025-186052](https://insights.sbomify.com/MAL-2025-186052/): Malicious code in centauri-mesosphere-deneb-solarnebula (npm) (malicious package) - [MAL-2025-186051](https://insights.sbomify.com/MAL-2025-186051/): Malicious code in centauri-lyra-prompts-commitlint (npm) (malicious package) - [MAL-2025-186050](https://insights.sbomify.com/MAL-2025-186050/): Malicious code in centauri-luna-cli-tethys (npm) (malicious package) - [MAL-2025-18605](https://insights.sbomify.com/MAL-2025-18605/): Malicious code in dolphin-ant-evx204-project (npm) (malicious package) - [MAL-2025-186049](https://insights.sbomify.com/MAL-2025-186049/): Malicious code in centauri-lint-staged-helios-sequelize (npm) (malicious package) - [MAL-2025-186048](https://insights.sbomify.com/MAL-2025-186048/): Malicious code in centauri-leda-playwright-cygnus (npm) (malicious package) - [MAL-2025-186047](https://insights.sbomify.com/MAL-2025-186047/): Malicious code in centauri-lacerta-config-taurus (npm) (malicious package) - [MAL-2025-186046](https://insights.sbomify.com/MAL-2025-186046/): Malicious code in centauri-filament-private-on (npm) (malicious package) - [MAL-2025-186045](https://insights.sbomify.com/MAL-2025-186045/): Malicious code in centauri-cli-transport-selenium (npm) (malicious package) - [MAL-2025-186044](https://insights.sbomify.com/MAL-2025-186044/): Malicious code in celeste-selenology-socketio-carpo (npm) (malicious package) - [MAL-2025-186043](https://insights.sbomify.com/MAL-2025-186043/): Malicious code in celeste-pm2-xerxes-kuiperbelt (npm) (malicious package) - [MAL-2025-186042](https://insights.sbomify.com/MAL-2025-186042/): Malicious code in celeste-baryon-stop-nodejs (npm) (malicious package) - [MAL-2025-186041](https://insights.sbomify.com/MAL-2025-186041/): Malicious code in celeste-archaeoastronomy-despina-vuepress (npm) (malicious package) - [MAL-2025-186040](https://insights.sbomify.com/MAL-2025-186040/): Malicious code in catch-stack-load-public-grep (npm) (malicious package) - [MAL-2025-18604](https://insights.sbomify.com/MAL-2025-18604/): Malicious code in dolphin-albatross-heu788-project (npm) (malicious package) - [MAL-2025-186039](https://insights.sbomify.com/MAL-2025-186039/): Malicious code in catch-float-cluster-assert-load (npm) (malicious package) - [MAL-2025-186038](https://insights.sbomify.com/MAL-2025-186038/): Malicious code in catch-daemon-mock-emulate-validate (npm) (malicious package) - [MAL-2025-186037](https://insights.sbomify.com/MAL-2025-186037/): Malicious code in catch-byte-decompress-cluster-assert (npm) (malicious package) - [MAL-2025-186036](https://insights.sbomify.com/MAL-2025-186036/): Malicious code in catch-bash-string-long-catch (npm) (malicious package) - [MAL-2025-186035](https://insights.sbomify.com/MAL-2025-186035/): Malicious code in catch-bash-mu-daemon-slow (npm) (malicious package) - [MAL-2025-186034](https://insights.sbomify.com/MAL-2025-186034/): Malicious code in cat-void-bash-cache-bundle (npm) (malicious package) - [MAL-2025-186033](https://insights.sbomify.com/MAL-2025-186033/): Malicious code in cat-sudo-node-decrypt-analyze (npm) (malicious package) - [MAL-2025-186032](https://insights.sbomify.com/MAL-2025-186032/): Malicious code in cat-minify-cold-reject-monitor (npm) (malicious package) - [MAL-2025-186031](https://insights.sbomify.com/MAL-2025-186031/): Malicious code in cat-meta-stack-minify-try (npm) (malicious package) - [MAL-2025-186030](https://insights.sbomify.com/MAL-2025-186030/): Malicious code in cat-encrypt-export-kappa-validate (npm) (malicious package) - [MAL-2025-18603](https://insights.sbomify.com/MAL-2025-18603/): Malicious code in dolomite-liquidator-subgraph (npm) (malicious package) - [MAL-2025-186029](https://insights.sbomify.com/MAL-2025-186029/): Malicious code in cat-compile-analyze-deploy-cloud (npm) (malicious package) - [MAL-2025-186028](https://insights.sbomify.com/MAL-2025-186028/): Malicious code in cat-big-code-star-encrypt (npm) (malicious package) - [MAL-2025-186027](https://insights.sbomify.com/MAL-2025-186027/): Malicious code in cat-air-xi-slow-visualize (npm) (malicious package) - [MAL-2025-186026](https://insights.sbomify.com/MAL-2025-186026/): Malicious code in castor-warp-asthenosphere-apollo (npm) (malicious package) - [MAL-2025-186025](https://insights.sbomify.com/MAL-2025-186025/): Malicious code in castor-singularitarianism-parcel-perseus (npm) (malicious package) - [MAL-2025-186024](https://insights.sbomify.com/MAL-2025-186024/): Malicious code in castor-magellan-halley-equinox (npm) (malicious package) - [MAL-2025-186023](https://insights.sbomify.com/MAL-2025-186023/): Malicious code in castor-janus-interferometry-asteroid (npm) (malicious package) - [MAL-2025-186022](https://insights.sbomify.com/MAL-2025-186022/): Malicious code in castor-ganymede-registry-blaze (npm) (malicious package) - [MAL-2025-186021](https://insights.sbomify.com/MAL-2025-186021/): Malicious code in castor-cosmology-planetology-toml (npm) (malicious package) - [MAL-2025-186020](https://insights.sbomify.com/MAL-2025-186020/): Malicious code in castor-callisto-miranda-quasar (npm) (malicious package) - [MAL-2025-18602](https://insights.sbomify.com/MAL-2025-18602/): Malicious code in dollarq (npm) (malicious package) - [MAL-2025-186019](https://insights.sbomify.com/MAL-2025-186019/): Malicious code in castor-avior-nebula-heka (npm) (malicious package) - [MAL-2025-186018](https://insights.sbomify.com/MAL-2025-186018/): Malicious code in castor-andromeda-izar-config (npm) (malicious package) - [MAL-2025-186017](https://insights.sbomify.com/MAL-2025-186017/): Malicious code in cassini-terser-prettier-mysql (npm) (malicious package) - [MAL-2025-186016](https://insights.sbomify.com/MAL-2025-186016/): Malicious code in cassini-socketio-concurrently-forever (npm) (malicious package) - [MAL-2025-186015](https://insights.sbomify.com/MAL-2025-186015/): Malicious code in cassini-pyxis-proxima-isostasy (npm) (malicious package) - [MAL-2025-186014](https://insights.sbomify.com/MAL-2025-186014/): Malicious code in cassini-markdown-pdf-fork-polaris (npm) (malicious package) - [MAL-2025-186013](https://insights.sbomify.com/MAL-2025-186013/): Malicious code in cassini-html-webpack-plugin-loglevel-jest (npm) (malicious package) - [MAL-2025-186012](https://insights.sbomify.com/MAL-2025-186012/): Malicious code in cassini-hawkingradiation-rocket-sedna (npm) (malicious package) - [MAL-2025-186011](https://insights.sbomify.com/MAL-2025-186011/): Malicious code in cassini-halley-jekyll-less (npm) (malicious package) - [MAL-2025-186010](https://insights.sbomify.com/MAL-2025-186010/): Malicious code in cassini-frontend-umbriel-ophiuchus (npm) (malicious package) - [MAL-2025-18601](https://insights.sbomify.com/MAL-2025-18601/): Malicious code in dolfin (npm) (malicious package) - [MAL-2025-186009](https://insights.sbomify.com/MAL-2025-186009/): Malicious code in carpo-release-it-oberon-halley (npm) (malicious package) - [MAL-2025-186008](https://insights.sbomify.com/MAL-2025-186008/): Malicious code in carpo-mdx-comet-hyperion (npm) (malicious package) - [MAL-2025-186007](https://insights.sbomify.com/MAL-2025-186007/): Malicious code in carpo-lynx-sirius-sirius (npm) (malicious package) - [MAL-2025-186006](https://insights.sbomify.com/MAL-2025-186006/): Malicious code in carpo-hermes-firebase-nightmare (npm) (malicious package) - [MAL-2025-186005](https://insights.sbomify.com/MAL-2025-186005/): Malicious code in carpo-aurora-pegasus-sqlite (npm) (malicious package) - [MAL-2025-186004](https://insights.sbomify.com/MAL-2025-186004/): Malicious code in carina-telesto-taurus-cladistics (npm) (malicious package) - [MAL-2025-186003](https://insights.sbomify.com/MAL-2025-186003/): Malicious code in carina-solis-ultra-rimraf (npm) (malicious package) - [MAL-2025-186002](https://insights.sbomify.com/MAL-2025-186002/): Malicious code in capella-yaml-innercore-hermes (npm) (malicious package) - [MAL-2025-186001](https://insights.sbomify.com/MAL-2025-186001/): Malicious code in capella-tethys-lynx-antimatter (npm) (malicious package) - [MAL-2025-186000](https://insights.sbomify.com/MAL-2025-186000/): Malicious code in capella-proxima-geomorphology-sirius (npm) (malicious package) - [MAL-2025-18600](https://insights.sbomify.com/MAL-2025-18600/): Malicious code in dokray (npm) (malicious package) - [MAL-2025-1860](https://insights.sbomify.com/MAL-2025-1860/): Malicious code in instacart-database (npm) (malicious package) - [MAL-2025-186](https://insights.sbomify.com/MAL-2025-186/): Malicious code in eslint-plugin-paste-internal (npm) (malicious package) - [MAL-2025-185999](https://insights.sbomify.com/MAL-2025-185999/): Malicious code in capella-non-blocking-avior-jabbah (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/976/