# Vulnerabilities published in 2025


- [MAL-2025-185907](https://insights.sbomify.com/MAL-2025-185907/): Malicious code in brane-kardashevscale-coronalmassejection-izar (npm) (malicious package)
- [MAL-2025-185906](https://insights.sbomify.com/MAL-2025-185906/): Malicious code in brane-halley-solarnebula-stratosphere (npm) (malicious package)
- [MAL-2025-185905](https://insights.sbomify.com/MAL-2025-185905/): Malicious code in boson-style-loader-less-loader-superflare (npm) (malicious package)
- [MAL-2025-185904](https://insights.sbomify.com/MAL-2025-185904/): Malicious code in boson-module-subscription-scripts (npm) (malicious package)
- [MAL-2025-185903](https://insights.sbomify.com/MAL-2025-185903/): Malicious code in boson-hugo-cosmology-mineralogy (npm) (malicious package)
- [MAL-2025-185902](https://insights.sbomify.com/MAL-2025-185902/): Malicious code in boson-fornax-redshift-andromeda (npm) (malicious package)
- [MAL-2025-185901](https://insights.sbomify.com/MAL-2025-185901/): Malicious code in boson-forever-leda-pegasus (npm) (malicious package)
- [MAL-2025-185900](https://insights.sbomify.com/MAL-2025-185900/): Malicious code in boson-build-tachyon-solis (npm) (malicious package)
- [MAL-2025-18590](https://insights.sbomify.com/MAL-2025-18590/): Malicious code in dogclub (npm) (malicious package)
- [MAL-2025-1859](https://insights.sbomify.com/MAL-2025-1859/): Malicious code in instacart-connect (npm) (malicious package)
- [MAL-2025-185899](https://insights.sbomify.com/MAL-2025-185899/): Malicious code in boson-apex-parcel-cybernetics (npm) (malicious package)
- [MAL-2025-185898](https://insights.sbomify.com/MAL-2025-185898/): Malicious code in borealis-rigel-string-exoplanetology (npm) (malicious package)
- [MAL-2025-185897](https://insights.sbomify.com/MAL-2025-185897/): Malicious code in borealis-promise-spinner-ora (npm) (malicious package)
- [MAL-2025-185896](https://insights.sbomify.com/MAL-2025-185896/): Malicious code in borealis-hermes-bellatrix-geochronology (npm) (malicious package)
- [MAL-2025-185895](https://insights.sbomify.com/MAL-2025-185895/): Malicious code in borealis-hercules-ora-lyra (npm) (malicious package)
- [MAL-2025-185894](https://insights.sbomify.com/MAL-2025-185894/): Malicious code in borealis-dagda-impulse-pm2 (npm) (malicious package)
- [MAL-2025-185893](https://insights.sbomify.com/MAL-2025-185893/): Malicious code in bootstrap-solis-bulma-zooarchaeology (npm) (malicious package)
- [MAL-2025-185892](https://insights.sbomify.com/MAL-2025-185892/): Malicious code in bootstrap-semantic-release-pulsar-koa (npm) (malicious package)
- [MAL-2025-185891](https://insights.sbomify.com/MAL-2025-185891/): Malicious code in bootstrap-kastra-event-scripts (npm) (malicious package)
- [MAL-2025-185890](https://insights.sbomify.com/MAL-2025-185890/): Malicious code in bootstrap-futurology-bootstrap-html-webpack-plugin (npm) (malicious package)
- [MAL-2025-18589](https://insights.sbomify.com/MAL-2025-18589/): Malicious code in dogage (npm) (malicious package)
- [MAL-2025-185889](https://insights.sbomify.com/MAL-2025-185889/): Malicious code in bootstrap-fusion-loop-restart (npm) (malicious package)
- [MAL-2025-185888](https://insights.sbomify.com/MAL-2025-185888/): Malicious code in bootstrap-forever-uranology-colors (npm) (malicious package)
- [MAL-2025-185887](https://insights.sbomify.com/MAL-2025-185887/): Malicious code in bootstrap-cluster-fornax-link (npm) (malicious package)
- [MAL-2025-185886](https://insights.sbomify.com/MAL-2025-185886/): Malicious code in bootes-transform-nuxtjs-proxima (npm) (malicious package)
- [MAL-2025-185885](https://insights.sbomify.com/MAL-2025-185885/): Malicious code in bootes-terser-local-sqlite (npm) (malicious package)
- [MAL-2025-185884](https://insights.sbomify.com/MAL-2025-185884/): Malicious code in bootes-reveal-md-cache-antares (npm) (malicious package)
- [MAL-2025-185883](https://insights.sbomify.com/MAL-2025-185883/): Malicious code in bootes-global-luna-galaxy (npm) (malicious package)
- [MAL-2025-185882](https://insights.sbomify.com/MAL-2025-185882/): Malicious code in bootes-config-docusaurus-ultra (npm) (malicious package)
- [MAL-2025-185881](https://insights.sbomify.com/MAL-2025-185881/): Malicious code in boolean-zeta-fire-omega-lambda (npm) (malicious package)
- [MAL-2025-185880](https://insights.sbomify.com/MAL-2025-185880/): Malicious code in boolean-xml-encrypt-hash-enum (npm) (malicious package)
- [MAL-2025-18588](https://insights.sbomify.com/MAL-2025-18588/): Malicious code in dog-iota-analyze-throw-kernel (npm) (malicious package)
- [MAL-2025-185879](https://insights.sbomify.com/MAL-2025-185879/): Malicious code in boolean-reject-balance-sun-slow (npm) (malicious package)
- [MAL-2025-185878](https://insights.sbomify.com/MAL-2025-185878/): Malicious code in boolean-fork-uglify-dog-sanitize (npm) (malicious package)
- [MAL-2025-185877](https://insights.sbomify.com/MAL-2025-185877/): Malicious code in boolean-double-benchmark-star-node (npm) (malicious package)
- [MAL-2025-185876](https://insights.sbomify.com/MAL-2025-185876/): Malicious code in boolean-balance-delta-visualize-resolve (npm) (malicious package)
- [MAL-2025-185875](https://insights.sbomify.com/MAL-2025-185875/): Malicious code in book-web-deploy-object-byte (npm) (malicious package)
- [MAL-2025-185874](https://insights.sbomify.com/MAL-2025-185874/): Malicious code in book-sanitize-cat-cold-class (npm) (malicious package)
- [MAL-2025-185873](https://insights.sbomify.com/MAL-2025-185873/): Malicious code in book-good-old-sun-test (npm) (malicious package)
- [MAL-2025-185872](https://insights.sbomify.com/MAL-2025-185872/): Malicious code in book-earth-runtime-delta-chi (npm) (malicious package)
- [MAL-2025-185871](https://insights.sbomify.com/MAL-2025-185871/): Malicious code in book-data-short-index-object (npm) (malicious package)
- [MAL-2025-185870](https://insights.sbomify.com/MAL-2025-185870/): Malicious code in book-compile-try-fork-kernel (npm) (malicious package)
- [MAL-2025-18587](https://insights.sbomify.com/MAL-2025-18587/): Malicious code in doedroid (npm) (malicious package)
- [MAL-2025-185869](https://insights.sbomify.com/MAL-2025-185869/): Malicious code in book-boolean-runtime-grep-root (npm) (malicious package)
- [MAL-2025-185868](https://insights.sbomify.com/MAL-2025-185868/): Malicious code in blueshift-toml-bellatrix-blueshift (npm) (malicious package)
- [MAL-2025-185867](https://insights.sbomify.com/MAL-2025-185867/): Malicious code in blueshift-standard-altair-higgs (npm) (malicious package)
- [MAL-2025-185866](https://insights.sbomify.com/MAL-2025-185866/): Malicious code in blueshift-publish-carina-nconf (npm) (malicious package)
- [MAL-2025-185865](https://insights.sbomify.com/MAL-2025-185865/): Malicious code in blueshift-perturbation-centauri-paleoceanography (npm) (malicious package)
- [MAL-2025-185864](https://insights.sbomify.com/MAL-2025-185864/): Malicious code in blueshift-lynx-dotenv-safe-morgan (npm) (malicious package)
- [MAL-2025-185863](https://insights.sbomify.com/MAL-2025-185863/): Malicious code in blueshift-kuiperbelt-asteroid-dendrochronology (npm) (malicious package)
- [MAL-2025-185862](https://insights.sbomify.com/MAL-2025-185862/): Malicious code in blueshift-exoplanet-buffer-primatology (npm) (malicious package)
- [MAL-2025-185861](https://insights.sbomify.com/MAL-2025-185861/): Malicious code in blueshift-canopus-leda-higgs (npm) (malicious package)
- [MAL-2025-185860](https://insights.sbomify.com/MAL-2025-185860/): Malicious code in blitz-nuxtjs-cosmicray-paleoceanography (npm) (malicious package)
- [MAL-2025-18586](https://insights.sbomify.com/MAL-2025-18586/): Malicious code in docxead (npm) (malicious package)
- [MAL-2025-185859](https://insights.sbomify.com/MAL-2025-185859/): Malicious code in blitz-materialize-link-lint-staged (npm) (malicious package)
- [MAL-2025-185858](https://insights.sbomify.com/MAL-2025-185858/): Malicious code in blitz-hawkingradiation-helmet-postgres (npm) (malicious package)
- [MAL-2025-185857](https://insights.sbomify.com/MAL-2025-185857/): Malicious code in blitz-ganymede-aether-gridsome (npm) (malicious package)
- [MAL-2025-185856](https://insights.sbomify.com/MAL-2025-185856/): Malicious code in blitz-eslint-plugin-csrf-indus (npm) (malicious package)
- [MAL-2025-185855](https://insights.sbomify.com/MAL-2025-185855/): Malicious code in blaze-transport-genomics-telesto (npm) (malicious package)
- [MAL-2025-185854](https://insights.sbomify.com/MAL-2025-185854/): Malicious code in blaze-transport-eridanus-singularitarianism (npm) (malicious package)
- [MAL-2025-185853](https://insights.sbomify.com/MAL-2025-185853/): Malicious code in blaze-figures-auth0-proxima (npm) (malicious package)
- [MAL-2025-185852](https://insights.sbomify.com/MAL-2025-185852/): Malicious code in blaze-farout-module-transport (npm) (malicious package)
- [MAL-2025-185851](https://insights.sbomify.com/MAL-2025-185851/): Malicious code in blaze-antares-taurus-prompts (npm) (malicious package)
- [MAL-2025-185850](https://insights.sbomify.com/MAL-2025-185850/): Malicious code in blazar-quark-publish-quito (npm) (malicious package)
- [MAL-2025-18585](https://insights.sbomify.com/MAL-2025-18585/): Malicious code in docuwrite (npm) (malicious package)
- [MAL-2025-185849](https://insights.sbomify.com/MAL-2025-185849/): Malicious code in blazar-pegasus-quark-grunt (npm) (malicious package)
- [MAL-2025-185848](https://insights.sbomify.com/MAL-2025-185848/): Malicious code in blazar-markdown-umbriel-filament (npm) (malicious package)
- [MAL-2025-185847](https://insights.sbomify.com/MAL-2025-185847/): Malicious code in blazar-ganymede-nebula-bunyan (npm) (malicious package)
- [MAL-2025-185846](https://insights.sbomify.com/MAL-2025-185846/): Malicious code in blazar-draco-mesosphere-mineralogy (npm) (malicious package)
- [MAL-2025-185845](https://insights.sbomify.com/MAL-2025-185845/): Malicious code in blazar-apollo-async-barnard (npm) (malicious package)
- [MAL-2025-185844](https://insights.sbomify.com/MAL-2025-185844/): Malicious code in blackhole-prettier-plugin-markdown-achernar-redis (npm) (malicious package)
- [MAL-2025-185843](https://insights.sbomify.com/MAL-2025-185843/): Malicious code in blackhole-jupiter-spectron-webdriver-meteor (npm) (malicious package)
- [MAL-2025-185842](https://insights.sbomify.com/MAL-2025-185842/): Malicious code in biotechnology-testcafe-cygnus-auriga (npm) (malicious package)
- [MAL-2025-185841](https://insights.sbomify.com/MAL-2025-185841/): Malicious code in biotechnology-planckscale-nightwatch-bellatrix (npm) (malicious package)
- [MAL-2025-185840](https://insights.sbomify.com/MAL-2025-185840/): Malicious code in biotechnology-halley-redgiant-sirius (npm) (malicious package)
- [MAL-2025-18584](https://insights.sbomify.com/MAL-2025-18584/): Malicious code in docusaurus-typeorm-jwt-gacrux (npm) (malicious package)
- [MAL-2025-185839](https://insights.sbomify.com/MAL-2025-185839/): Malicious code in biotechnology-enceladus-jovian-changelog (npm) (malicious package)
- [MAL-2025-185838](https://insights.sbomify.com/MAL-2025-185838/): Malicious code in biotechnology-draco-webpack-bellatrix (npm) (malicious package)
- [MAL-2025-185837](https://insights.sbomify.com/MAL-2025-185837/): Malicious code in biotechnology-corvus-phoebe-inquirer (npm) (malicious package)
- [MAL-2025-185836](https://insights.sbomify.com/MAL-2025-185836/): Malicious code in biotechnology-apollo-rollup-plugin-nodemon (npm) (malicious package)
- [MAL-2025-185835](https://insights.sbomify.com/MAL-2025-185835/): Malicious code in biosignature-winston-xanthus-octans (npm) (malicious package)
- [MAL-2025-185834](https://insights.sbomify.com/MAL-2025-185834/): Malicious code in biosignature-spawn-slidev-envconfig (npm) (malicious package)
- [MAL-2025-185833](https://insights.sbomify.com/MAL-2025-185833/): Malicious code in biosignature-rollup-polaris-boson (npm) (malicious package)
- [MAL-2025-185832](https://insights.sbomify.com/MAL-2025-185832/): Malicious code in biosignature-quasar-galaxy-charon (npm) (malicious package)
- [MAL-2025-185831](https://insights.sbomify.com/MAL-2025-185831/): Malicious code in biosignature-nestjs-publish-morgan (npm) (malicious package)
- [MAL-2025-185830](https://insights.sbomify.com/MAL-2025-185830/): Malicious code in biosignature-jasmine-solis-promise (npm) (malicious package)
- [MAL-2025-18583](https://insights.sbomify.com/MAL-2025-18583/): Malicious code in docusaurus-transform-achernar-cosmos (npm) (malicious package)
- [MAL-2025-185829](https://insights.sbomify.com/MAL-2025-185829/): Malicious code in biosignature-install-mocha-vortex (npm) (malicious package)
- [MAL-2025-185828](https://insights.sbomify.com/MAL-2025-185828/): Malicious code in biosignature-enif-element-ui-biohacking (npm) (malicious package)
- [MAL-2025-185827](https://insights.sbomify.com/MAL-2025-185827/): Malicious code in bionics-geochemistry-request-supercluster (npm) (malicious package)
- [MAL-2025-185826](https://insights.sbomify.com/MAL-2025-185826/): Malicious code in biomimicry-kuiperbelt-castor-hugo (npm) (malicious package)
- [MAL-2025-185825](https://insights.sbomify.com/MAL-2025-185825/): Malicious code in biomimicry-epimetheus-thermochronology-native (npm) (malicious package)
- [MAL-2025-185824](https://insights.sbomify.com/MAL-2025-185824/): Malicious code in biomimicry-epigenetics-rimraf-html-webpack-plugin (npm) (malicious package)
- [MAL-2025-185823](https://insights.sbomify.com/MAL-2025-185823/): Malicious code in biomimicry-decoherence-paleomagnetism-despina (npm) (malicious package)
- [MAL-2025-185822](https://insights.sbomify.com/MAL-2025-185822/): Malicious code in bioinformatics-proxima-uglify-js-rimraf (npm) (malicious package)
- [MAL-2025-185821](https://insights.sbomify.com/MAL-2025-185821/): Malicious code in bioinformatics-pino-pretty-mutation-vuepress (npm) (malicious package)
- [MAL-2025-185820](https://insights.sbomify.com/MAL-2025-185820/): Malicious code in bioinformatics-draco-alphard-tailwindcss (npm) (malicious package)
- [MAL-2025-18582](https://insights.sbomify.com/MAL-2025-18582/): Malicious code in docusaurus-oberon-test-concurrently (npm) (malicious package)
- [MAL-2025-185819](https://insights.sbomify.com/MAL-2025-185819/): Malicious code in bioinformatics-async-wezen-quasar (npm) (malicious package)
- [MAL-2025-185818](https://insights.sbomify.com/MAL-2025-185818/): Malicious code in bioinformatics-achernar-spawn-ganymede (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/978/