# Vulnerabilities published in 2025


- [MAL-2025-185727](https://insights.sbomify.com/MAL-2025-185727/): Malicious code in backend-exec-husky-public (npm) (malicious package)
- [MAL-2025-185726](https://insights.sbomify.com/MAL-2025-185726/): Malicious code in backend-enif-gulp-titan (npm) (malicious package)
- [MAL-2025-185725](https://insights.sbomify.com/MAL-2025-185725/): Malicious code in backend-crust-cordelia-markdown-pdf (npm) (malicious package)
- [MAL-2025-185724](https://insights.sbomify.com/MAL-2025-185724/): Malicious code in babel-singularity-got-hadron (npm) (malicious package)
- [MAL-2025-185723](https://insights.sbomify.com/MAL-2025-185723/): Malicious code in babel-ophiuchus-mira-bellatrix (npm) (malicious package)
- [MAL-2025-185722](https://insights.sbomify.com/MAL-2025-185722/): Malicious code in babel-isostasy-fork-buffer (npm) (malicious package)
- [MAL-2025-185721](https://insights.sbomify.com/MAL-2025-185721/): Malicious code in babel-init-changelog-algol (npm) (malicious package)
- [MAL-2025-185720](https://insights.sbomify.com/MAL-2025-185720/): Malicious code in babel-electron-builder-hexo-nightmare (npm) (malicious package)
- [MAL-2025-18572](https://insights.sbomify.com/MAL-2025-18572/): Malicious code in docpeek (npm) (malicious package)
- [MAL-2025-185719](https://insights.sbomify.com/MAL-2025-185719/): Malicious code in babel-dynamo-loop-terraforming (npm) (malicious package)
- [MAL-2025-185718](https://insights.sbomify.com/MAL-2025-185718/): Malicious code in babel-baryon-magellan-prettier-plugin-markdown (npm) (malicious package)
- [MAL-2025-185717](https://insights.sbomify.com/MAL-2025-185717/): Malicious code in babel-babel-config-quark (npm) (malicious package)
- [MAL-2025-185716](https://insights.sbomify.com/MAL-2025-185716/): Malicious code in axios-string-kinetic-xenon (npm) (malicious package)
- [MAL-2025-185715](https://insights.sbomify.com/MAL-2025-185715/): Malicious code in axios-neutrino-fomalhaut-perturbation (npm) (malicious package)
- [MAL-2025-185714](https://insights.sbomify.com/MAL-2025-185714/): Malicious code in axios-mineralogy-pyxis-janus (npm) (malicious package)
- [MAL-2025-185713](https://insights.sbomify.com/MAL-2025-185713/): Malicious code in axios-envconfig-antimatter-xenos (npm) (malicious package)
- [MAL-2025-185712](https://insights.sbomify.com/MAL-2025-185712/): Malicious code in axios-astro-html-webpack-plugin-algol (npm) (malicious package)
- [MAL-2025-185711](https://insights.sbomify.com/MAL-2025-185711/): Malicious code in axios-algol-wolf-upgrade (npm) (malicious package)
- [MAL-2025-185710](https://insights.sbomify.com/MAL-2025-185710/): Malicious code in awk-validate-function-refactor-delta (npm) (malicious package)
- [MAL-2025-18571](https://insights.sbomify.com/MAL-2025-18571/): Malicious code in doclanes (npm) (malicious package)
- [MAL-2025-185709](https://insights.sbomify.com/MAL-2025-185709/): Malicious code in awk-sun-deploy-key-omega (npm) (malicious package)
- [MAL-2025-185708](https://insights.sbomify.com/MAL-2025-185708/): Malicious code in awk-node-public-interpret-cron (npm) (malicious package)
- [MAL-2025-185707](https://insights.sbomify.com/MAL-2025-185707/): Malicious code in awk-node-abstract-interpret-alert (npm) (malicious package)
- [MAL-2025-185706](https://insights.sbomify.com/MAL-2025-185706/): Malicious code in awk-mock-rain-enum-pi (npm) (malicious package)
- [MAL-2025-185705](https://insights.sbomify.com/MAL-2025-185705/): Malicious code in awk-minify-minify-proxy-omicron (npm) (malicious package)
- [MAL-2025-185704](https://insights.sbomify.com/MAL-2025-185704/): Malicious code in awk-eta-virtualize-route-route (npm) (malicious package)
- [MAL-2025-185703](https://insights.sbomify.com/MAL-2025-185703/): Malicious code in awk-encode-good-byte-uglify (npm) (malicious package)
- [MAL-2025-185702](https://insights.sbomify.com/MAL-2025-185702/): Malicious code in await-tree-cat-omega-authenticate (npm) (malicious package)
- [MAL-2025-185701](https://insights.sbomify.com/MAL-2025-185701/): Malicious code in await-throw-psi-simple-debug (npm) (malicious package)
- [MAL-2025-185700](https://insights.sbomify.com/MAL-2025-185700/): Malicious code in await-supercluster-prosthetics-postcss-loader (npm) (malicious package)
- [MAL-2025-18570](https://insights.sbomify.com/MAL-2025-18570/): Malicious code in docksy (npm) (malicious package)
- [MAL-2025-1857](https://insights.sbomify.com/MAL-2025-1857/): Malicious code in instacart-checkout (npm) (malicious package)
- [MAL-2025-185699](https://insights.sbomify.com/MAL-2025-185699/): Malicious code in await-rate-limiter-ophiuchus-chai (npm) (malicious package)
- [MAL-2025-185698](https://insights.sbomify.com/MAL-2025-185698/): Malicious code in await-pm2-quito-meteor (npm) (malicious package)
- [MAL-2025-185697](https://insights.sbomify.com/MAL-2025-185697/): Malicious code in await-mesosphere-meissa-halley (npm) (malicious package)
- [MAL-2025-185696](https://insights.sbomify.com/MAL-2025-185696/): Malicious code in await-lacerta-ganymede-commitizen (npm) (malicious package)
- [MAL-2025-185695](https://insights.sbomify.com/MAL-2025-185695/): Malicious code in await-jwt-vuetify-event (npm) (malicious package)
- [MAL-2025-185694](https://insights.sbomify.com/MAL-2025-185694/): Malicious code in await-husky-electron-builder-superagent (npm) (malicious package)
- [MAL-2025-185693](https://insights.sbomify.com/MAL-2025-185693/): Malicious code in await-float-optimize-route-omicron (npm) (malicious package)
- [MAL-2025-185692](https://insights.sbomify.com/MAL-2025-185692/): Malicious code in await-file-public-transpile-static (npm) (malicious package)
- [MAL-2025-185691](https://insights.sbomify.com/MAL-2025-185691/): Malicious code in await-figures-nodemon-genomics (npm) (malicious package)
- [MAL-2025-185690](https://insights.sbomify.com/MAL-2025-185690/): Malicious code in await-async-cluster-terser-webpack-plugin (npm) (malicious package)
- [MAL-2025-18569](https://insights.sbomify.com/MAL-2025-18569/): Malicious code in dock-yew-2lx8 (npm) (malicious package)
- [MAL-2025-185689](https://insights.sbomify.com/MAL-2025-185689/): Malicious code in avior-sails-tethys-kronos (npm) (malicious package)
- [MAL-2025-185688](https://insights.sbomify.com/MAL-2025-185688/): Malicious code in avior-quasar-comet-bootstrap (npm) (malicious package)
- [MAL-2025-185687](https://insights.sbomify.com/MAL-2025-185687/): Malicious code in avior-nconf-docusaurus-lint-staged (npm) (malicious package)
- [MAL-2025-185686](https://insights.sbomify.com/MAL-2025-185686/): Malicious code in avior-gulp-sagitta-ganymede (npm) (malicious package)
- [MAL-2025-185685](https://insights.sbomify.com/MAL-2025-185685/): Malicious code in avior-ganymede-backend-hexo (npm) (malicious package)
- [MAL-2025-185684](https://insights.sbomify.com/MAL-2025-185684/): Malicious code in avior-biotechnology-supernova-bootes (npm) (malicious package)
- [MAL-2025-185683](https://insights.sbomify.com/MAL-2025-185683/): Malicious code in avior-backend-technocracy-indus (npm) (malicious package)
- [MAL-2025-185682](https://insights.sbomify.com/MAL-2025-185682/): Malicious code in avior-atlas-draco-websockets (npm) (malicious package)
- [MAL-2025-185681](https://insights.sbomify.com/MAL-2025-185681/): Malicious code in authorize-signal-report-omicron-decode (npm) (malicious package)
- [MAL-2025-185680](https://insights.sbomify.com/MAL-2025-185680/): Malicious code in authorize-sigma-stub-sun-mock (npm) (malicious package)
- [MAL-2025-18568](https://insights.sbomify.com/MAL-2025-18568/): Malicious code in dock-temple-q5bc (npm) (malicious package)
- [MAL-2025-185679](https://insights.sbomify.com/MAL-2025-185679/): Malicious code in authorize-route-signal-grid-cache (npm) (malicious package)
- [MAL-2025-185678](https://insights.sbomify.com/MAL-2025-185678/): Malicious code in authorize-omega-earth-abstract-assert (npm) (malicious package)
- [MAL-2025-185677](https://insights.sbomify.com/MAL-2025-185677/): Malicious code in authorize-node-slow-stub-daemon (npm) (malicious package)
- [MAL-2025-185676](https://insights.sbomify.com/MAL-2025-185676/): Malicious code in authorize-interface-psi-orchestrate-visualize (npm) (malicious package)
- [MAL-2025-185675](https://insights.sbomify.com/MAL-2025-185675/): Malicious code in authorize-interface-good-xi-sanitize (npm) (malicious package)
- [MAL-2025-185674](https://insights.sbomify.com/MAL-2025-185674/): Malicious code in authorize-grid-table-cat-fast (npm) (malicious package)
- [MAL-2025-185673](https://insights.sbomify.com/MAL-2025-185673/): Malicious code in authorize-float-signal-string-table (npm) (malicious package)
- [MAL-2025-185672](https://insights.sbomify.com/MAL-2025-185672/): Malicious code in authorize-code-bash-encrypt-abstract (npm) (malicious package)
- [MAL-2025-185671](https://insights.sbomify.com/MAL-2025-185671/): Malicious code in authenticate-scale-analyze-book-scale (npm) (malicious package)
- [MAL-2025-185670](https://insights.sbomify.com/MAL-2025-185670/): Malicious code in authenticate-function-scale-cloud-socket (npm) (malicious package)
- [MAL-2025-18567](https://insights.sbomify.com/MAL-2025-18567/): Malicious code in dock-teak-dxz6 (npm) (malicious package)
- [MAL-2025-185669](https://insights.sbomify.com/MAL-2025-185669/): Malicious code in authenticate-array-cluster-mock-import (npm) (malicious package)
- [MAL-2025-185668](https://insights.sbomify.com/MAL-2025-185668/): Malicious code in auth0-stratigraphy-ursa-cordelia (npm) (malicious package)
- [MAL-2025-185667](https://insights.sbomify.com/MAL-2025-185667/): Malicious code in auth0-sociobiology-apollo-umbra (npm) (malicious package)
- [MAL-2025-185666](https://insights.sbomify.com/MAL-2025-185666/): Malicious code in auth0-scripts-slides-build (npm) (malicious package)
- [MAL-2025-185665](https://insights.sbomify.com/MAL-2025-185665/): Malicious code in auth0-iota-gridsome-meteor (npm) (malicious package)
- [MAL-2025-185664](https://insights.sbomify.com/MAL-2025-185664/): Malicious code in auth0-corvus-webdriver-mocha-chromedriver (npm) (malicious package)
- [MAL-2025-185663](https://insights.sbomify.com/MAL-2025-185663/): Malicious code in auth0-astrometry-build-decoherence (npm) (malicious package)
- [MAL-2025-185662](https://insights.sbomify.com/MAL-2025-185662/): Malicious code in auth0-andromeda-heka-cross-env (npm) (malicious package)
- [MAL-2025-185661](https://insights.sbomify.com/MAL-2025-185661/): Malicious code in auth-pm2-xo-google (npm) (malicious package)
- [MAL-2025-185660](https://insights.sbomify.com/MAL-2025-185660/): Malicious code in australis-wolf-archaeogenetics-virgo (npm) (malicious package)
- [MAL-2025-18566](https://insights.sbomify.com/MAL-2025-18566/): Malicious code in dock-orbit-na1g (npm) (malicious package)
- [MAL-2025-185659](https://insights.sbomify.com/MAL-2025-185659/): Malicious code in australis-prosthetics-cygnus-xerxes (npm) (malicious package)
- [MAL-2025-185658](https://insights.sbomify.com/MAL-2025-185658/): Malicious code in australis-geomorphology-adonis-babel (npm) (malicious package)
- [MAL-2025-185657](https://insights.sbomify.com/MAL-2025-185657/): Malicious code in aurora-transform-protoplanetarydisk-iota (npm) (malicious package)
- [MAL-2025-185656](https://insights.sbomify.com/MAL-2025-185656/): Malicious code in aurora-sync-buffer-canopus (npm) (malicious package)
- [MAL-2025-185655](https://insights.sbomify.com/MAL-2025-185655/): Malicious code in aurora-nodemon-whitedwarf-indus (npm) (malicious package)
- [MAL-2025-185654](https://insights.sbomify.com/MAL-2025-185654/): Malicious code in aurora-fusion-perseus-pm2 (npm) (malicious package)
- [MAL-2025-185653](https://insights.sbomify.com/MAL-2025-185653/): Malicious code in aurora-exec-nebula-titan (npm) (malicious package)
- [MAL-2025-185652](https://insights.sbomify.com/MAL-2025-185652/): Malicious code in auriga-uglify-js-repository-thuban (npm) (malicious package)
- [MAL-2025-185651](https://insights.sbomify.com/MAL-2025-185651/): Malicious code in auriga-postgres-fermion-filament (npm) (malicious package)
- [MAL-2025-185650](https://insights.sbomify.com/MAL-2025-185650/): Malicious code in auriga-parcel-soap-nashira (npm) (malicious package)
- [MAL-2025-18565](https://insights.sbomify.com/MAL-2025-18565/): Malicious code in dock-jetty-gjfr (npm) (malicious package)
- [MAL-2025-185649](https://insights.sbomify.com/MAL-2025-185649/): Malicious code in auriga-inquirer-tailwindcss-winston (npm) (malicious package)
- [MAL-2025-185648](https://insights.sbomify.com/MAL-2025-185648/): Malicious code in auriga-eslint-halley-fetch (npm) (malicious package)
- [MAL-2025-185647](https://insights.sbomify.com/MAL-2025-185647/): Malicious code in augmentedreality-version-wavefunction-spawn (npm) (malicious package)
- [MAL-2025-185646](https://insights.sbomify.com/MAL-2025-185646/): Malicious code in augmentedreality-vega-chai-cosmogenic (npm) (malicious package)
- [MAL-2025-185645](https://insights.sbomify.com/MAL-2025-185645/): Malicious code in augmentedreality-update-tethys-dynamo (npm) (malicious package)
- [MAL-2025-185644](https://insights.sbomify.com/MAL-2025-185644/): Malicious code in augmentedreality-mesosphere-style-loader-registry (npm) (malicious package)
- [MAL-2025-185643](https://insights.sbomify.com/MAL-2025-185643/): Malicious code in augmentedreality-frontend-cz-conventional-changelog-neptunology (npm) (malicious package)
- [MAL-2025-185642](https://insights.sbomify.com/MAL-2025-185642/): Malicious code in augmentedreality-fetch-gravity-hawkingradiation (npm) (malicious package)
- [MAL-2025-185641](https://insights.sbomify.com/MAL-2025-185641/): Malicious code in atlas-standard-ursa-auth0 (npm) (malicious package)
- [MAL-2025-185640](https://insights.sbomify.com/MAL-2025-185640/): Malicious code in atlas-repository-nova-eclipse (npm) (malicious package)
- [MAL-2025-18564](https://insights.sbomify.com/MAL-2025-18564/): Malicious code in docintel (npm) (malicious package)
- [MAL-2025-185639](https://insights.sbomify.com/MAL-2025-185639/): Malicious code in atlas-ophiuchus-palynology-bunyan (npm) (malicious package)
- [MAL-2025-185638](https://insights.sbomify.com/MAL-2025-185638/): Malicious code in atlas-nanotechnology-polaris-meissa (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/980/