# Vulnerabilities published in 2025


- [MAL-2025-185817](https://insights.sbomify.com/MAL-2025-185817/): Malicious code in biohacking-release-it-augmentedreality-janus (npm) (malicious package)
- [MAL-2025-185816](https://insights.sbomify.com/MAL-2025-185816/): Malicious code in biohacking-mysql-registry-levels (npm) (malicious package)
- [MAL-2025-185815](https://insights.sbomify.com/MAL-2025-185815/): Malicious code in biohacking-membrane-json-convict (npm) (malicious package)
- [MAL-2025-185814](https://insights.sbomify.com/MAL-2025-185814/): Malicious code in biohacking-hexo-nebula-non-blocking (npm) (malicious package)
- [MAL-2025-185813](https://insights.sbomify.com/MAL-2025-185813/): Malicious code in biohacking-axios-pegasus-sirius (npm) (malicious package)
- [MAL-2025-185812](https://insights.sbomify.com/MAL-2025-185812/): Malicious code in biogeochemistry-xenos-nashira-petrology (npm) (malicious package)
- [MAL-2025-185811](https://insights.sbomify.com/MAL-2025-185811/): Malicious code in biogeochemistry-wasat-polaris-meissa (npm) (malicious package)
- [MAL-2025-185810](https://insights.sbomify.com/MAL-2025-185810/): Malicious code in biogeochemistry-test-express-css-minimizer-webpack-plugin (npm) (malicious package)
- [MAL-2025-18581](https://insights.sbomify.com/MAL-2025-18581/): Malicious code in docusaurus-mantle-volcanology-entanglement (npm) (malicious package)
- [MAL-2025-185809](https://insights.sbomify.com/MAL-2025-185809/): Malicious code in biogeochemistry-remark-module-cygnus (npm) (malicious package)
- [MAL-2025-185808](https://insights.sbomify.com/MAL-2025-185808/): Malicious code in biogeochemistry-multiverse-xo-regulus (npm) (malicious package)
- [MAL-2025-185807](https://insights.sbomify.com/MAL-2025-185807/): Malicious code in biogeochemistry-carpo-alphard-pulsar (npm) (malicious package)
- [MAL-2025-185806](https://insights.sbomify.com/MAL-2025-185806/): Malicious code in big-tau-stack-root-compress (npm) (malicious package)
- [MAL-2025-185805](https://insights.sbomify.com/MAL-2025-185805/): Malicious code in big-static-delta-private-cache (npm) (malicious package)
- [MAL-2025-185804](https://insights.sbomify.com/MAL-2025-185804/): Malicious code in big-star-kappa-alert-report (npm) (malicious package)
- [MAL-2025-185803](https://insights.sbomify.com/MAL-2025-185803/): Malicious code in big-monitor-moon-iota-warn (npm) (malicious package)
- [MAL-2025-185802](https://insights.sbomify.com/MAL-2025-185802/): Malicious code in big-grid-cron-parse-fork (npm) (malicious package)
- [MAL-2025-185801](https://insights.sbomify.com/MAL-2025-185801/): Malicious code in big-data-shell-omega-reject (npm) (malicious package)
- [MAL-2025-185800](https://insights.sbomify.com/MAL-2025-185800/): Malicious code in big-data-char-xi-kernel (npm) (malicious package)
- [MAL-2025-18580](https://insights.sbomify.com/MAL-2025-18580/): Malicious code in docusaurus-jupiter-primatology-frontend (npm) (malicious package)
- [MAL-2025-1858](https://insights.sbomify.com/MAL-2025-1858/): Malicious code in instacart-cloud (npm) (malicious package)
- [MAL-2025-185799](https://insights.sbomify.com/MAL-2025-185799/): Malicious code in betelgeuse-taurus-nestjs-whitedwarf (npm) (malicious package)
- [MAL-2025-185798](https://insights.sbomify.com/MAL-2025-185798/): Malicious code in betelgeuse-sadr-antd-leda (npm) (malicious package)
- [MAL-2025-185797](https://insights.sbomify.com/MAL-2025-185797/): Malicious code in betelgeuse-perseus-despina-radiant (npm) (malicious package)
- [MAL-2025-185796](https://insights.sbomify.com/MAL-2025-185796/): Malicious code in betelgeuse-octans-aether-less (npm) (malicious package)
- [MAL-2025-185795](https://insights.sbomify.com/MAL-2025-185795/): Malicious code in betelgeuse-nodejs-hugo-flare (npm) (malicious package)
- [MAL-2025-185794](https://insights.sbomify.com/MAL-2025-185794/): Malicious code in betelgeuse-metalsmith-frontend-tethys (npm) (malicious package)
- [MAL-2025-185793](https://insights.sbomify.com/MAL-2025-185793/): Malicious code in betelgeuse-gammarayburst-puppeteer-rehype (npm) (malicious package)
- [MAL-2025-185792](https://insights.sbomify.com/MAL-2025-185792/): Malicious code in betelgeuse-frontend-titan-yildun (npm) (malicious package)
- [MAL-2025-185791](https://insights.sbomify.com/MAL-2025-185791/): Malicious code in betelgeuse-development-heliophysics-cordelia (npm) (malicious package)
- [MAL-2025-185790](https://insights.sbomify.com/MAL-2025-185790/): Malicious code in betelgeuse-dactyl-rollup-plugin-quasarjet (npm) (malicious package)
- [MAL-2025-18579](https://insights.sbomify.com/MAL-2025-18579/): Malicious code in docusaurus-cladistics-version-lacerta (npm) (malicious package)
- [MAL-2025-185789](https://insights.sbomify.com/MAL-2025-185789/): Malicious code in betelgeuse-csrf-aldebaran-json (npm) (malicious package)
- [MAL-2025-185788](https://insights.sbomify.com/MAL-2025-185788/): Malicious code in betelgeuse-cassini-lyra-firebase (npm) (malicious package)
- [MAL-2025-185787](https://insights.sbomify.com/MAL-2025-185787/): Malicious code in betelgeuse-backend-primatology-query (npm) (malicious package)
- [MAL-2025-185786](https://insights.sbomify.com/MAL-2025-185786/): Malicious code in betelgeuse-antd-magellan-xanthus (npm) (malicious package)
- [MAL-2025-185785](https://insights.sbomify.com/MAL-2025-185785/): Malicious code in beta-try-omicron-orchestrate-analyze (npm) (malicious package)
- [MAL-2025-185784](https://insights.sbomify.com/MAL-2025-185784/): Malicious code in beta-orchestrate-slow-void-table (npm) (malicious package)
- [MAL-2025-185783](https://insights.sbomify.com/MAL-2025-185783/): Malicious code in beta-moon-fast-authorize-deploy (npm) (malicious package)
- [MAL-2025-185782](https://insights.sbomify.com/MAL-2025-185782/): Malicious code in beta-key-promise-socket-file (npm) (malicious package)
- [MAL-2025-185781](https://insights.sbomify.com/MAL-2025-185781/): Malicious code in beta-grep-cron-omega-validate (npm) (malicious package)
- [MAL-2025-185780](https://insights.sbomify.com/MAL-2025-185780/): Malicious code in beta-error-rho-authenticate-tree (npm) (malicious package)
- [MAL-2025-18578](https://insights.sbomify.com/MAL-2025-18578/): Malicious code in docusaurus-atlas-pm2-norma (npm) (malicious package)
- [MAL-2025-185779](https://insights.sbomify.com/MAL-2025-185779/): Malicious code in beta-enum-notify-view-stack (npm) (malicious package)
- [MAL-2025-185778](https://insights.sbomify.com/MAL-2025-185778/): Malicious code in benchmark-view-mu-cat-virtualize (npm) (malicious package)
- [MAL-2025-185777](https://insights.sbomify.com/MAL-2025-185777/): Malicious code in benchmark-refactor-secure-scale-array (npm) (malicious package)
- [MAL-2025-185776](https://insights.sbomify.com/MAL-2025-185776/): Malicious code in bellatrix-websockets-filament-biohacking (npm) (malicious package)
- [MAL-2025-185775](https://insights.sbomify.com/MAL-2025-185775/): Malicious code in bellatrix-quantum-inquirer-child-process (npm) (malicious package)
- [MAL-2025-185774](https://insights.sbomify.com/MAL-2025-185774/): Malicious code in bellatrix-pulsar-bionics-cryovolcano (npm) (malicious package)
- [MAL-2025-185773](https://insights.sbomify.com/MAL-2025-185773/): Malicious code in bellatrix-proteomics-meissa-redis (npm) (malicious package)
- [MAL-2025-185772](https://insights.sbomify.com/MAL-2025-185772/): Malicious code in bellatrix-prompts-webpack-paleobotany (npm) (malicious package)
- [MAL-2025-185771](https://insights.sbomify.com/MAL-2025-185771/): Malicious code in bellatrix-panspermia-websockets-gulp (npm) (malicious package)
- [MAL-2025-185770](https://insights.sbomify.com/MAL-2025-185770/): Malicious code in bellatrix-odin-redis-commitlint (npm) (malicious package)
- [MAL-2025-18577](https://insights.sbomify.com/MAL-2025-18577/): Malicious code in document.web.modules.files (npm) (malicious package)
- [MAL-2025-185769](https://insights.sbomify.com/MAL-2025-185769/): Malicious code in bellatrix-mira-europa-commitlint (npm) (malicious package)
- [MAL-2025-185768](https://insights.sbomify.com/MAL-2025-185768/): Malicious code in bellatrix-local-puppeteer-epigenetics (npm) (malicious package)
- [MAL-2025-185767](https://insights.sbomify.com/MAL-2025-185767/): Malicious code in bellatrix-gulp-barnard-dagda (npm) (malicious package)
- [MAL-2025-185766](https://insights.sbomify.com/MAL-2025-185766/): Malicious code in bellatrix-command-testcafe-pino-pretty (npm) (malicious package)
- [MAL-2025-185765](https://insights.sbomify.com/MAL-2025-185765/): Malicious code in bellatrix-child-process-playwright-geodynamo (npm) (malicious package)
- [MAL-2025-185764](https://insights.sbomify.com/MAL-2025-185764/): Malicious code in bellatrix-bunyan-neptune-hydra (npm) (malicious package)
- [MAL-2025-185763](https://insights.sbomify.com/MAL-2025-185763/): Malicious code in bellatrix-axios-spica-geoarchaeology (npm) (malicious package)
- [MAL-2025-185762](https://insights.sbomify.com/MAL-2025-185762/): Malicious code in bash-xml-transpile-good-catch (npm) (malicious package)
- [MAL-2025-185761](https://insights.sbomify.com/MAL-2025-185761/): Malicious code in bash-water-resolve-unix-error (npm) (malicious package)
- [MAL-2025-185760](https://insights.sbomify.com/MAL-2025-185760/): Malicious code in bash-unix-rho-sigma-quick (npm) (malicious package)
- [MAL-2025-18576](https://insights.sbomify.com/MAL-2025-18576/): Malicious code in document-theme-daux-blue (npm) (malicious package)
- [MAL-2025-185759](https://insights.sbomify.com/MAL-2025-185759/): Malicious code in bash-serialize-decode-grid-sudo (npm) (malicious package)
- [MAL-2025-185758](https://insights.sbomify.com/MAL-2025-185758/): Malicious code in bash-runtime-log-static-java (npm) (malicious package)
- [MAL-2025-185757](https://insights.sbomify.com/MAL-2025-185757/): Malicious code in bash-load-fast-unix-route (npm) (malicious package)
- [MAL-2025-185756](https://insights.sbomify.com/MAL-2025-185756/): Malicious code in baryon-sublimation-apollo-shelljs (npm) (malicious package)
- [MAL-2025-185755](https://insights.sbomify.com/MAL-2025-185755/): Malicious code in baryon-perturbation-javascript-pyxis (npm) (malicious package)
- [MAL-2025-185754](https://insights.sbomify.com/MAL-2025-185754/): Malicious code in baryon-ini-biomimicry-entanglement (npm) (malicious package)
- [MAL-2025-185753](https://insights.sbomify.com/MAL-2025-185753/): Malicious code in baryon-helmet-apollo-meteor (npm) (malicious package)
- [MAL-2025-185752](https://insights.sbomify.com/MAL-2025-185752/): Malicious code in baryon-eslint-ariel-iota (npm) (malicious package)
- [MAL-2025-185751](https://insights.sbomify.com/MAL-2025-185751/): Malicious code in baryon-antares-leda-cosmicsilence (npm) (malicious package)
- [MAL-2025-185750](https://insights.sbomify.com/MAL-2025-185750/): Malicious code in barnard-soap-gravitationalwave-meissa (npm) (malicious package)
- [MAL-2025-18575](https://insights.sbomify.com/MAL-2025-18575/): Malicious code in docued (npm) (malicious package)
- [MAL-2025-185749](https://insights.sbomify.com/MAL-2025-185749/): Malicious code in barnard-perseus-comet-chromedriver (npm) (malicious package)
- [MAL-2025-185748](https://insights.sbomify.com/MAL-2025-185748/): Malicious code in barnard-octans-development-async (npm) (malicious package)
- [MAL-2025-185747](https://insights.sbomify.com/MAL-2025-185747/): Malicious code in barnard-kronos-rate-limiter-phoenix (npm) (malicious package)
- [MAL-2025-185746](https://insights.sbomify.com/MAL-2025-185746/): Malicious code in balance-quick-throw-bash-scale (npm) (malicious package)
- [MAL-2025-185745](https://insights.sbomify.com/MAL-2025-185745/): Malicious code in balance-public-new-object-nu (npm) (malicious package)
- [MAL-2025-185744](https://insights.sbomify.com/MAL-2025-185744/): Malicious code in balance-dog-throw-balance-daemon (npm) (malicious package)
- [MAL-2025-185743](https://insights.sbomify.com/MAL-2025-185743/): Malicious code in balance-decompress-authorize-query-thread (npm) (malicious package)
- [MAL-2025-185742](https://insights.sbomify.com/MAL-2025-185742/): Malicious code in balance-char-byte-final-big (npm) (malicious package)
- [MAL-2025-185741](https://insights.sbomify.com/MAL-2025-185741/): Malicious code in bad-xml-simple-yaml-reject (npm) (malicious package)
- [MAL-2025-185740](https://insights.sbomify.com/MAL-2025-185740/): Malicious code in bad-transpile-xml-signal-cache (npm) (malicious package)
- [MAL-2025-18574](https://insights.sbomify.com/MAL-2025-18574/): Malicious code in doctorme (npm) (malicious package)
- [MAL-2025-185739](https://insights.sbomify.com/MAL-2025-185739/): Malicious code in bad-stub-key-fast-minify (npm) (malicious package)
- [MAL-2025-185738](https://insights.sbomify.com/MAL-2025-185738/): Malicious code in bad-route-boolean-compress-float (npm) (malicious package)
- [MAL-2025-185737](https://insights.sbomify.com/MAL-2025-185737/): Malicious code in bad-old-deserialize-bundle-boolean (npm) (malicious package)
- [MAL-2025-185736](https://insights.sbomify.com/MAL-2025-185736/): Malicious code in bad-key-short-sudo-resolve (npm) (malicious package)
- [MAL-2025-185735](https://insights.sbomify.com/MAL-2025-185735/): Malicious code in bad-kappa-spy-fire-error (npm) (malicious package)
- [MAL-2025-185734](https://insights.sbomify.com/MAL-2025-185734/): Malicious code in bad-info-encrypt-boolean-simple (npm) (malicious package)
- [MAL-2025-185733](https://insights.sbomify.com/MAL-2025-185733/): Malicious code in bad-hash-shell-interpret-compress (npm) (malicious package)
- [MAL-2025-185732](https://insights.sbomify.com/MAL-2025-185732/): Malicious code in bad-grep-web-private-cat (npm) (malicious package)
- [MAL-2025-185731](https://insights.sbomify.com/MAL-2025-185731/): Malicious code in bad-eta-encrypt-error-signal (npm) (malicious package)
- [MAL-2025-185730](https://insights.sbomify.com/MAL-2025-185730/): Malicious code in bad-cron-easy-daemon-compile (npm) (malicious package)
- [MAL-2025-18573](https://insights.sbomify.com/MAL-2025-18573/): Malicious code in docs-reminder-action (npm) (malicious package)
- [MAL-2025-185729](https://insights.sbomify.com/MAL-2025-185729/): Malicious code in bad-alert-long-container-mu (npm) (malicious package)
- [MAL-2025-185728](https://insights.sbomify.com/MAL-2025-185728/): Malicious code in backend-nashira-rate-limiter-chromedriver (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/979/