# Vulnerabilities published in 2025


- [MAL-2025-185998](https://insights.sbomify.com/MAL-2025-185998/): Malicious code in capella-indus-config-relay (npm) (malicious package)
- [MAL-2025-185997](https://insights.sbomify.com/MAL-2025-185997/): Malicious code in capella-cypress-stream-supernova (npm) (malicious package)
- [MAL-2025-185996](https://insights.sbomify.com/MAL-2025-185996/): Malicious code in capella-biotechnology-meteor-start (npm) (malicious package)
- [MAL-2025-185995](https://insights.sbomify.com/MAL-2025-185995/): Malicious code in canopus-odin-scorpius-css-minimizer-webpack-plugin (npm) (malicious package)
- [MAL-2025-185994](https://insights.sbomify.com/MAL-2025-185994/): Malicious code in callisto-sirius-farout-multiverse (npm) (malicious package)
- [MAL-2025-185993](https://insights.sbomify.com/MAL-2025-185993/): Malicious code in callisto-proxima-command-loglevel (npm) (malicious package)
- [MAL-2025-185992](https://insights.sbomify.com/MAL-2025-185992/): Malicious code in callisto-module-module-antares (npm) (malicious package)
- [MAL-2025-185991](https://insights.sbomify.com/MAL-2025-185991/): Malicious code in callisto-meissa-centaurus-sync (npm) (malicious package)
- [MAL-2025-185990](https://insights.sbomify.com/MAL-2025-185990/): Malicious code in callisto-hyperion-norma-firebase (npm) (malicious package)
- [MAL-2025-18599](https://insights.sbomify.com/MAL-2025-18599/): Malicious code in dohamark (npm) (malicious package)
- [MAL-2025-185989](https://insights.sbomify.com/MAL-2025-185989/): Malicious code in callisto-hyperion-dactyl-equinox (npm) (malicious package)
- [MAL-2025-185988](https://insights.sbomify.com/MAL-2025-185988/): Malicious code in callisto-europa-relay-bootes (npm) (malicious package)
- [MAL-2025-185987](https://insights.sbomify.com/MAL-2025-185987/): Malicious code in callisto-europa-buffer-nodemon (npm) (malicious package)
- [MAL-2025-185986](https://insights.sbomify.com/MAL-2025-185986/): Malicious code in callisto-enif-cryonics-dotenv-parse-variables (npm) (malicious package)
- [MAL-2025-185985](https://insights.sbomify.com/MAL-2025-185985/): Malicious code in callisto-cors-ini-puppeteer (npm) (malicious package)
- [MAL-2025-185984](https://insights.sbomify.com/MAL-2025-185984/): Malicious code in callback-zephyr-semantic-ui-carpo (npm) (malicious package)
- [MAL-2025-185983](https://insights.sbomify.com/MAL-2025-185983/): Malicious code in callback-xanthus-astrochemistry-quantum-computing (npm) (malicious package)
- [MAL-2025-185982](https://insights.sbomify.com/MAL-2025-185982/): Malicious code in callback-uranology-fork-rigel (npm) (malicious package)
- [MAL-2025-185981](https://insights.sbomify.com/MAL-2025-185981/): Malicious code in callback-upgrade-ophiuchus-achernar (npm) (malicious package)
- [MAL-2025-185980](https://insights.sbomify.com/MAL-2025-185980/): Malicious code in callback-typeorm-venus-umbriel (npm) (malicious package)
- [MAL-2025-18598](https://insights.sbomify.com/MAL-2025-18598/): Malicious code in dogzhub (npm) (malicious package)
- [MAL-2025-185979](https://insights.sbomify.com/MAL-2025-185979/): Malicious code in callback-saturnology-taphonomy-radiant (npm) (malicious package)
- [MAL-2025-185978](https://insights.sbomify.com/MAL-2025-185978/): Malicious code in callback-parallax-slides-metabolomics (npm) (malicious package)
- [MAL-2025-185977](https://insights.sbomify.com/MAL-2025-185977/): Malicious code in callback-kastra-wolf-abiogenesis (npm) (malicious package)
- [MAL-2025-185976](https://insights.sbomify.com/MAL-2025-185976/): Malicious code in callback-jekyll-public-nebula (npm) (malicious package)
- [MAL-2025-185975](https://insights.sbomify.com/MAL-2025-185975/): Malicious code in callback-fomalhaut-slidev-library (npm) (malicious package)
- [MAL-2025-185974](https://insights.sbomify.com/MAL-2025-185974/): Malicious code in callback-elara-hadron-jekyll (npm) (malicious package)
- [MAL-2025-185973](https://insights.sbomify.com/MAL-2025-185973/): Malicious code in callback-dynamo-lacerta-chakra-ui (npm) (malicious package)
- [MAL-2025-185972](https://insights.sbomify.com/MAL-2025-185972/): Malicious code in cache-xml-stub-fire-nu (npm) (malicious package)
- [MAL-2025-185971](https://insights.sbomify.com/MAL-2025-185971/): Malicious code in cache-xenos-regulus-rocket (npm) (malicious package)
- [MAL-2025-185970](https://insights.sbomify.com/MAL-2025-185970/): Malicious code in cache-umbra-geoarchaeology-server (npm) (malicious package)
- [MAL-2025-18597](https://insights.sbomify.com/MAL-2025-18597/): Malicious code in dogwoome (npm) (malicious package)
- [MAL-2025-185969](https://insights.sbomify.com/MAL-2025-185969/): Malicious code in cache-simple-awk-sudo-class (npm) (malicious package)
- [MAL-2025-185968](https://insights.sbomify.com/MAL-2025-185968/): Malicious code in cache-publish-decoherence-astroinformatics (npm) (malicious package)
- [MAL-2025-185967](https://insights.sbomify.com/MAL-2025-185967/): Malicious code in cache-phi-public-info-sed (npm) (malicious package)
- [MAL-2025-185966](https://insights.sbomify.com/MAL-2025-185966/): Malicious code in cache-norma-protractor-superflare (npm) (malicious package)
- [MAL-2025-185965](https://insights.sbomify.com/MAL-2025-185965/): Malicious code in cache-meta-root-try-key (npm) (malicious package)
- [MAL-2025-185964](https://insights.sbomify.com/MAL-2025-185964/): Malicious code in cache-mensa-leda-build (npm) (malicious package)
- [MAL-2025-185963](https://insights.sbomify.com/MAL-2025-185963/): Malicious code in cache-less-venus-supercluster (npm) (malicious package)
- [MAL-2025-185962](https://insights.sbomify.com/MAL-2025-185962/): Malicious code in cache-hercules-xerxes-commitizen (npm) (malicious package)
- [MAL-2025-185961](https://insights.sbomify.com/MAL-2025-185961/): Malicious code in cache-cat-index-async-small (npm) (malicious package)
- [MAL-2025-185960](https://insights.sbomify.com/MAL-2025-185960/): Malicious code in byte-runtime-easy-promise-transpile (npm) (malicious package)
- [MAL-2025-18596](https://insights.sbomify.com/MAL-2025-18596/): Malicious code in dogslots (npm) (malicious package)
- [MAL-2025-185959](https://insights.sbomify.com/MAL-2025-185959/): Malicious code in byte-root-test-kappa-sudo (npm) (malicious package)
- [MAL-2025-185958](https://insights.sbomify.com/MAL-2025-185958/): Malicious code in byte-orchestrate-wind-water-private (npm) (malicious package)
- [MAL-2025-185957](https://insights.sbomify.com/MAL-2025-185957/): Malicious code in byte-nu-monitor-module-static (npm) (malicious package)
- [MAL-2025-185956](https://insights.sbomify.com/MAL-2025-185956/): Malicious code in byte-log-float-cold-analyze (npm) (malicious package)
- [MAL-2025-185955](https://insights.sbomify.com/MAL-2025-185955/): Malicious code in byte-decompress-cold-deploy-wind (npm) (malicious package)
- [MAL-2025-185954](https://insights.sbomify.com/MAL-2025-185954/): Malicious code in byte-assert-finally-hot-sanitize (npm) (malicious package)
- [MAL-2025-185953](https://insights.sbomify.com/MAL-2025-185953/): Malicious code in bunyan-titan-sadr-loop (npm) (malicious package)
- [MAL-2025-185952](https://insights.sbomify.com/MAL-2025-185952/): Malicious code in bunyan-spectron-webdriver-less-magellan (npm) (malicious package)
- [MAL-2025-185951](https://insights.sbomify.com/MAL-2025-185951/): Malicious code in bunyan-resonance-mensa-concurrently (npm) (malicious package)
- [MAL-2025-185950](https://insights.sbomify.com/MAL-2025-185950/): Malicious code in bunyan-release-it-carpo-request (npm) (malicious package)
- [MAL-2025-18595](https://insights.sbomify.com/MAL-2025-18595/): Malicious code in doglog (npm) (malicious package)
- [MAL-2025-185949](https://insights.sbomify.com/MAL-2025-185949/): Malicious code in bunyan-redis-capella-html-webpack-plugin (npm) (malicious package)
- [MAL-2025-185948](https://insights.sbomify.com/MAL-2025-185948/): Malicious code in bunyan-radioastronomy-interstellarmedium-outercore (npm) (malicious package)
- [MAL-2025-185947](https://insights.sbomify.com/MAL-2025-185947/): Malicious code in bunyan-pegasus-primatology-quantum-computing (npm) (malicious package)
- [MAL-2025-185946](https://insights.sbomify.com/MAL-2025-185946/): Malicious code in bunyan-jasmine-winston-geoarchaeology (npm) (malicious package)
- [MAL-2025-185945](https://insights.sbomify.com/MAL-2025-185945/): Malicious code in bunyan-cosmicray-membrane-terser (npm) (malicious package)
- [MAL-2025-185944](https://insights.sbomify.com/MAL-2025-185944/): Malicious code in bunyan-carina-adonis-mysql (npm) (malicious package)
- [MAL-2025-185943](https://insights.sbomify.com/MAL-2025-185943/): Malicious code in bunyan-callback-pipe-mysql (npm) (malicious package)
- [MAL-2025-185942](https://insights.sbomify.com/MAL-2025-185942/): Malicious code in bunyan-areology-glaciology-charon (npm) (malicious package)
- [MAL-2025-185941](https://insights.sbomify.com/MAL-2025-185941/): Malicious code in bundle-theta-virtualize-sanitize-sigma (npm) (malicious package)
- [MAL-2025-185940](https://insights.sbomify.com/MAL-2025-185940/): Malicious code in bundle-static-pipe-mu-float (npm) (malicious package)
- [MAL-2025-18594](https://insights.sbomify.com/MAL-2025-18594/): Malicious code in doggytrip (npm) (malicious package)
- [MAL-2025-185939](https://insights.sbomify.com/MAL-2025-185939/): Malicious code in bundle-alert-runtime-private-bundle (npm) (malicious package)
- [MAL-2025-185938](https://insights.sbomify.com/MAL-2025-185938/): Malicious code in bulma-yonder-acamar-ichnology (npm) (malicious package)
- [MAL-2025-185937](https://insights.sbomify.com/MAL-2025-185937/): Malicious code in bulma-titan-axios-ariel (npm) (malicious package)
- [MAL-2025-185936](https://insights.sbomify.com/MAL-2025-185936/): Malicious code in bulma-regulus-mesosphere-resolvers (npm) (malicious package)
- [MAL-2025-185935](https://insights.sbomify.com/MAL-2025-185935/): Malicious code in bulma-rate-limiter-nodemon-aurora (npm) (malicious package)
- [MAL-2025-185934](https://insights.sbomify.com/MAL-2025-185934/): Malicious code in bulma-promise-redgiant-xenobiology (npm) (malicious package)
- [MAL-2025-185933](https://insights.sbomify.com/MAL-2025-185933/): Malicious code in bulma-interferometry-mesosphere-jabbah (npm) (malicious package)
- [MAL-2025-185932](https://insights.sbomify.com/MAL-2025-185932/): Malicious code in bulma-equinox-build-nova (npm) (malicious package)
- [MAL-2025-185931](https://insights.sbomify.com/MAL-2025-185931/): Malicious code in build-perseus-repository-asteroid (npm) (malicious package)
- [MAL-2025-185930](https://insights.sbomify.com/MAL-2025-185930/): Malicious code in build-neptunology-neptunology-adonis (npm) (malicious package)
- [MAL-2025-18593](https://insights.sbomify.com/MAL-2025-18593/): Malicious code in doggy-space-nft-collection946 (npm) (malicious package)
- [MAL-2025-185929](https://insights.sbomify.com/MAL-2025-185929/): Malicious code in build-hapi-registry-quark (npm) (malicious package)
- [MAL-2025-185928](https://insights.sbomify.com/MAL-2025-185928/): Malicious code in build-geoarchaeology-mutation-library (npm) (malicious package)
- [MAL-2025-185927](https://insights.sbomify.com/MAL-2025-185927/): Malicious code in build-farout-cz-conventional-changelog-rocket (npm) (malicious package)
- [MAL-2025-185926](https://insights.sbomify.com/MAL-2025-185926/): Malicious code in build-enceladus-supernova-joviology (npm) (malicious package)
- [MAL-2025-185925](https://insights.sbomify.com/MAL-2025-185925/): Malicious code in build-eleventy-deneb-gemini (npm) (malicious package)
- [MAL-2025-185924](https://insights.sbomify.com/MAL-2025-185924/): Malicious code in build-commitlint-config-angular-lithosphere-string (npm) (malicious package)
- [MAL-2025-185923](https://insights.sbomify.com/MAL-2025-185923/): Malicious code in buffer-package-bionics-graphql (npm) (malicious package)
- [MAL-2025-185922](https://insights.sbomify.com/MAL-2025-185922/): Malicious code in buffer-mocha-astrophysics-technosignature (npm) (malicious package)
- [MAL-2025-185921](https://insights.sbomify.com/MAL-2025-185921/): Malicious code in buffer-css-loader-draco-sirius (npm) (malicious package)
- [MAL-2025-185920](https://insights.sbomify.com/MAL-2025-185920/): Malicious code in buffer-apex-paleontology-cli (npm) (malicious package)
- [MAL-2025-18592](https://insights.sbomify.com/MAL-2025-18592/): Malicious code in doggy-space-nft-collection334 (npm) (malicious package)
- [MAL-2025-185919](https://insights.sbomify.com/MAL-2025-185919/): Malicious code in buffer-aldebaran-norma-test (npm) (malicious package)
- [MAL-2025-185918](https://insights.sbomify.com/MAL-2025-185918/): Malicious code in browserify-seismology-vega-quito (npm) (malicious package)
- [MAL-2025-185917](https://insights.sbomify.com/MAL-2025-185917/): Malicious code in browserify-sedna-apollo-airbnb (npm) (malicious package)
- [MAL-2025-185916](https://insights.sbomify.com/MAL-2025-185916/): Malicious code in browserify-nodemon-proxima-markdown (npm) (malicious package)
- [MAL-2025-185915](https://insights.sbomify.com/MAL-2025-185915/): Malicious code in browserify-izar-archaeogenetics-darkmatter (npm) (malicious package)
- [MAL-2025-185914](https://insights.sbomify.com/MAL-2025-185914/): Malicious code in browserify-eslint-plugin-heka-mui (npm) (malicious package)
- [MAL-2025-185913](https://insights.sbomify.com/MAL-2025-185913/): Malicious code in browserify-cosmiconfig-testcafe-await (npm) (malicious package)
- [MAL-2025-185912](https://insights.sbomify.com/MAL-2025-185912/): Malicious code in browserify-astrometry-stratigraphy-foundation (npm) (malicious package)
- [MAL-2025-185911](https://insights.sbomify.com/MAL-2025-185911/): Malicious code in brane-venus-betelgeuse-altair (npm) (malicious package)
- [MAL-2025-185910](https://insights.sbomify.com/MAL-2025-185910/): Malicious code in brane-pm2-isostasy-jekyll (npm) (malicious package)
- [MAL-2025-18591](https://insights.sbomify.com/MAL-2025-18591/): Malicious code in doggus (npm) (malicious package)
- [MAL-2025-185909](https://insights.sbomify.com/MAL-2025-185909/): Malicious code in brane-nashira-cluster-spawn (npm) (malicious package)
- [MAL-2025-185908](https://insights.sbomify.com/MAL-2025-185908/): Malicious code in brane-mocha-elektra-farout (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/977/