# Vulnerabilities published in 2025


- [MAL-2025-185637](https://insights.sbomify.com/MAL-2025-185637/): Malicious code in atlas-miranda-jabbah-oberon (npm) (malicious package)
- [MAL-2025-185636](https://insights.sbomify.com/MAL-2025-185636/): Malicious code in atlas-enif-enif-winston (npm) (malicious package)
- [MAL-2025-185635](https://insights.sbomify.com/MAL-2025-185635/): Malicious code in atlas-browserify-rigel-mira (npm) (malicious package)
- [MAL-2025-185634](https://insights.sbomify.com/MAL-2025-185634/): Malicious code in async-yonder-void-gravity (npm) (malicious package)
- [MAL-2025-185633](https://insights.sbomify.com/MAL-2025-185633/): Malicious code in async-yonder-hadron-meteor (npm) (malicious package)
- [MAL-2025-185632](https://insights.sbomify.com/MAL-2025-185632/): Malicious code in async-xerxes-filament-outercore (npm) (malicious package)
- [MAL-2025-185631](https://insights.sbomify.com/MAL-2025-185631/): Malicious code in async-virtualize-private-link-view (npm) (malicious package)
- [MAL-2025-185630](https://insights.sbomify.com/MAL-2025-185630/): Malicious code in async-registry-build-xml (npm) (malicious package)
- [MAL-2025-18563](https://insights.sbomify.com/MAL-2025-18563/): Malicious code in docin-cli (npm) (malicious package)
- [MAL-2025-185629](https://insights.sbomify.com/MAL-2025-185629/): Malicious code in async-readable-solis-leda (npm) (malicious package)
- [MAL-2025-185628](https://insights.sbomify.com/MAL-2025-185628/): Malicious code in async-public-eslint-plugin-loop (npm) (malicious package)
- [MAL-2025-185627](https://insights.sbomify.com/MAL-2025-185627/): Malicious code in async-psi-alpha-query-theta (npm) (malicious package)
- [MAL-2025-185626](https://insights.sbomify.com/MAL-2025-185626/): Malicious code in async-proxy-dog-refactor-nu (npm) (malicious package)
- [MAL-2025-185625](https://insights.sbomify.com/MAL-2025-185625/): Malicious code in async-parse-compile-sanitize-quick (npm) (malicious package)
- [MAL-2025-185624](https://insights.sbomify.com/MAL-2025-185624/): Malicious code in async-lynx-lithosphere-telesto (npm) (malicious package)
- [MAL-2025-185623](https://insights.sbomify.com/MAL-2025-185623/): Malicious code in async-kastra-archaeoastronomy-exobiology (npm) (malicious package)
- [MAL-2025-185622](https://insights.sbomify.com/MAL-2025-185622/): Malicious code in async-iota-pavo-quasar (npm) (malicious package)
- [MAL-2025-185621](https://insights.sbomify.com/MAL-2025-185621/): Malicious code in async-integer-xml-void-tau (npm) (malicious package)
- [MAL-2025-185620](https://insights.sbomify.com/MAL-2025-185620/): Malicious code in async-gridsome-xanadu-webdriver-mocha (npm) (malicious package)
- [MAL-2025-18562](https://insights.sbomify.com/MAL-2025-18562/): Malicious code in docbench (npm) (malicious package)
- [MAL-2025-185619](https://insights.sbomify.com/MAL-2025-185619/): Malicious code in async-graviton-webdriverio-quantum (npm) (malicious package)
- [MAL-2025-185618](https://insights.sbomify.com/MAL-2025-185618/): Malicious code in async-eta-try-balance-java (npm) (malicious package)
- [MAL-2025-185617](https://insights.sbomify.com/MAL-2025-185617/): Malicious code in async-encrypt-void-user-upsilon (npm) (malicious package)
- [MAL-2025-185616](https://insights.sbomify.com/MAL-2025-185616/): Malicious code in async-dotenv-pino-pretty-odin (npm) (malicious package)
- [MAL-2025-185615](https://insights.sbomify.com/MAL-2025-185615/): Malicious code in async-css-minimizer-webpack-plugin-heka-redgiant (npm) (malicious package)
- [MAL-2025-185614](https://insights.sbomify.com/MAL-2025-185614/): Malicious code in async-cressida-umbra-vuepress (npm) (malicious package)
- [MAL-2025-185613](https://insights.sbomify.com/MAL-2025-185613/): Malicious code in async-command-farout-hexo (npm) (malicious package)
- [MAL-2025-185612](https://insights.sbomify.com/MAL-2025-185612/): Malicious code in async-cluster-await-io (npm) (malicious package)
- [MAL-2025-185611](https://insights.sbomify.com/MAL-2025-185611/): Malicious code in async-buffer-cosmiconfig-aquarius (npm) (malicious package)
- [MAL-2025-185610](https://insights.sbomify.com/MAL-2025-185610/): Malicious code in astrophysics-triton-nightwatch-express (npm) (malicious package)
- [MAL-2025-18561](https://insights.sbomify.com/MAL-2025-18561/): Malicious code in docbankedit (npm) (malicious package)
- [MAL-2025-185609](https://insights.sbomify.com/MAL-2025-185609/): Malicious code in astrophysics-prosthetics-callback-deneb (npm) (malicious package)
- [MAL-2025-185608](https://insights.sbomify.com/MAL-2025-185608/): Malicious code in astrophysics-mesosphere-neptunology-xml (npm) (malicious package)
- [MAL-2025-185607](https://insights.sbomify.com/MAL-2025-185607/): Malicious code in astrophysics-extremophile-library-bulma (npm) (malicious package)
- [MAL-2025-185606](https://insights.sbomify.com/MAL-2025-185606/): Malicious code in astrometry-request-semantic-ui-hermes (npm) (malicious package)
- [MAL-2025-185605](https://insights.sbomify.com/MAL-2025-185605/): Malicious code in astrometry-postcss-loader-mineralogy-uninstall (npm) (malicious package)
- [MAL-2025-185604](https://insights.sbomify.com/MAL-2025-185604/): Malicious code in astrometry-passport-less-filament (npm) (malicious package)
- [MAL-2025-185603](https://insights.sbomify.com/MAL-2025-185603/): Malicious code in astrometry-kaus-on-cli (npm) (malicious package)
- [MAL-2025-185602](https://insights.sbomify.com/MAL-2025-185602/): Malicious code in astrometry-halley-auriga-cressida (npm) (malicious package)
- [MAL-2025-185601](https://insights.sbomify.com/MAL-2025-185601/): Malicious code in astroinformatics-ethology-venus-slidev (npm) (malicious package)
- [MAL-2025-185600](https://insights.sbomify.com/MAL-2025-185600/): Malicious code in astroinformatics-brane-firebase-socketio (npm) (malicious package)
- [MAL-2025-18560](https://insights.sbomify.com/MAL-2025-18560/): Malicious code in doca-cf-theme (npm) (malicious package)
- [MAL-2025-1856](https://insights.sbomify.com/MAL-2025-1856/): Malicious code in instacart-cache (npm) (malicious package)
- [MAL-2025-185599](https://insights.sbomify.com/MAL-2025-185599/): Malicious code in astroinformatics-accretion-dysonswarm-mocha (npm) (malicious package)
- [MAL-2025-185598](https://insights.sbomify.com/MAL-2025-185598/): Malicious code in astrochemistry-selenium-solis-frontend (npm) (malicious package)
- [MAL-2025-185597](https://insights.sbomify.com/MAL-2025-185597/): Malicious code in astrochemistry-rigel-csrf-cosmicweb (npm) (malicious package)
- [MAL-2025-185596](https://insights.sbomify.com/MAL-2025-185596/): Malicious code in astrochemistry-planckscale-levels-singularitarianism (npm) (malicious package)
- [MAL-2025-185595](https://insights.sbomify.com/MAL-2025-185595/): Malicious code in astrochemistry-ionosphere-gravitationalwave-joviology (npm) (malicious package)
- [MAL-2025-185594](https://insights.sbomify.com/MAL-2025-185594/): Malicious code in astrochemistry-aldebaran-update-antd (npm) (malicious package)
- [MAL-2025-185593](https://insights.sbomify.com/MAL-2025-185593/): Malicious code in astrobiology-sedna-archaeogenetics-css-minimizer-webpack-plugin (npm) (malicious package)
- [MAL-2025-185592](https://insights.sbomify.com/MAL-2025-185592/): Malicious code in astrobiology-postgres-comet-vega (npm) (malicious package)
- [MAL-2025-185591](https://insights.sbomify.com/MAL-2025-185591/): Malicious code in astrobiology-loopback-hermes-duplex (npm) (malicious package)
- [MAL-2025-185590](https://insights.sbomify.com/MAL-2025-185590/): Malicious code in astrobiology-flare-repository-cluster (npm) (malicious package)
- [MAL-2025-18559](https://insights.sbomify.com/MAL-2025-18559/): Malicious code in doc-smith (npm) (malicious package)
- [MAL-2025-185589](https://insights.sbomify.com/MAL-2025-185589/): Malicious code in astrobiology-brane-cosmicsilence-superflare (npm) (malicious package)
- [MAL-2025-185588](https://insights.sbomify.com/MAL-2025-185588/): Malicious code in astrobiology-andromeda-lightyear-astrometry (npm) (malicious package)
- [MAL-2025-185587](https://insights.sbomify.com/MAL-2025-185587/): Malicious code in astro-photon-publish-blazar (npm) (malicious package)
- [MAL-2025-185586](https://insights.sbomify.com/MAL-2025-185586/): Malicious code in astro-ignite-scripts-pulsar (npm) (malicious package)
- [MAL-2025-185585](https://insights.sbomify.com/MAL-2025-185585/): Malicious code in astro-helios-nightwatch-sagitta (npm) (malicious package)
- [MAL-2025-185584](https://insights.sbomify.com/MAL-2025-185584/): Malicious code in astro-cors-pulsar-neutrino (npm) (malicious package)
- [MAL-2025-185583](https://insights.sbomify.com/MAL-2025-185583/): Malicious code in asthenosphere-package-eridanus-restart (npm) (malicious package)
- [MAL-2025-185582](https://insights.sbomify.com/MAL-2025-185582/): Malicious code in asthenosphere-dotenv-darkmatter-chromedriver (npm) (malicious package)
- [MAL-2025-185581](https://insights.sbomify.com/MAL-2025-185581/): Malicious code in asthenosphere-auth-andromeda-gacrux (npm) (malicious package)
- [MAL-2025-185580](https://insights.sbomify.com/MAL-2025-185580/): Malicious code in asteroid-winston-eclipse-hugo (npm) (malicious package)
- [MAL-2025-18558](https://insights.sbomify.com/MAL-2025-18558/): Malicious code in do-wnload-available-silver-age-3ul9y-rzorsr (npm) (malicious package)
- [MAL-2025-185579](https://insights.sbomify.com/MAL-2025-185579/): Malicious code in asteroid-cors-bulma-paleoclimatology (npm) (malicious package)
- [MAL-2025-185578](https://insights.sbomify.com/MAL-2025-185578/): Malicious code in assert-zeta-visualize-data-char (npm) (malicious package)
- [MAL-2025-185577](https://insights.sbomify.com/MAL-2025-185577/): Malicious code in assert-float-private-process-star (npm) (malicious package)
- [MAL-2025-185576](https://insights.sbomify.com/MAL-2025-185576/): Malicious code in assert-analyze-authorize-awk-eta (npm) (malicious package)
- [MAL-2025-185575](https://insights.sbomify.com/MAL-2025-185575/): Malicious code in assert-alpha-boolean-awk-mock (npm) (malicious package)
- [MAL-2025-185574](https://insights.sbomify.com/MAL-2025-185574/): Malicious code in asjustmeteai (npm) (malicious package)
- [MAL-2025-185573](https://insights.sbomify.com/MAL-2025-185573/): Malicious code in ashjustmeteai (npm) (malicious package)
- [MAL-2025-185572](https://insights.sbomify.com/MAL-2025-185572/): Malicious code in array-upsilon-decrypt-container-object (npm) (malicious package)
- [MAL-2025-185571](https://insights.sbomify.com/MAL-2025-185571/): Malicious code in array-stack-awk-emulate-promise (npm) (malicious package)
- [MAL-2025-185570](https://insights.sbomify.com/MAL-2025-185570/): Malicious code in array-simple-water-tau-book (npm) (malicious package)
- [MAL-2025-18557](https://insights.sbomify.com/MAL-2025-18557/): Malicious code in do-wnload-available-replica-ftpb8-iuhfqd (npm) (malicious package)
- [MAL-2025-185569](https://insights.sbomify.com/MAL-2025-185569/): Malicious code in array-public-code-async-decompress (npm) (malicious package)
- [MAL-2025-185568](https://insights.sbomify.com/MAL-2025-185568/): Malicious code in array-load-sandbox-code-cache (npm) (malicious package)
- [MAL-2025-185567](https://insights.sbomify.com/MAL-2025-185567/): Malicious code in array-eta-sudo-new-cron (npm) (malicious package)
- [MAL-2025-185566](https://insights.sbomify.com/MAL-2025-185566/): Malicious code in array-benchmark-socket-dog-fork (npm) (malicious package)
- [MAL-2025-185565](https://insights.sbomify.com/MAL-2025-185565/): Malicious code in array-async-export-lambda-transpile (npm) (malicious package)
- [MAL-2025-185564](https://insights.sbomify.com/MAL-2025-185564/): Malicious code in ariel-xenos-dione-orbit (npm) (malicious package)
- [MAL-2025-185563](https://insights.sbomify.com/MAL-2025-185563/): Malicious code in ariel-virgo-husky-pino (npm) (malicious package)
- [MAL-2025-185562](https://insights.sbomify.com/MAL-2025-185562/): Malicious code in ariel-semantic-release-optimize-css-assets-webpack-plugin-prettier-plugin-markdown (npm) (malicious package)
- [MAL-2025-185561](https://insights.sbomify.com/MAL-2025-185561/): Malicious code in ariel-markdown-arcturus-terser-webpack-plugin (npm) (malicious package)
- [MAL-2025-185560](https://insights.sbomify.com/MAL-2025-185560/): Malicious code in ariel-geckodriver-stratosphere-fetch (npm) (malicious package)
- [MAL-2025-18556](https://insights.sbomify.com/MAL-2025-18556/): Malicious code in do-wnload-available-out-of-the-game-l7no5-nzaaod (npm) (malicious package)
- [MAL-2025-185559](https://insights.sbomify.com/MAL-2025-185559/): Malicious code in ariel-callisto-commitlint-config-angular-install (npm) (malicious package)
- [MAL-2025-185558](https://insights.sbomify.com/MAL-2025-185558/): Malicious code in ariel-blitz-rocket-concurrently (npm) (malicious package)
- [MAL-2025-185557](https://insights.sbomify.com/MAL-2025-185557/): Malicious code in ariel-backend-css-loader-aldebaran (npm) (malicious package)
- [MAL-2025-185556](https://insights.sbomify.com/MAL-2025-185556/): Malicious code in areology-polaris-gatsby-phoebe (npm) (malicious package)
- [MAL-2025-185555](https://insights.sbomify.com/MAL-2025-185555/): Malicious code in areology-express-kuiperbelt-gacrux (npm) (malicious package)
- [MAL-2025-185554](https://insights.sbomify.com/MAL-2025-185554/): Malicious code in areology-eleventy-cassini-filament (npm) (malicious package)
- [MAL-2025-185553](https://insights.sbomify.com/MAL-2025-185553/): Malicious code in areology-darkmatter-ablation-thermochronology (npm) (malicious package)
- [MAL-2025-185552](https://insights.sbomify.com/MAL-2025-185552/): Malicious code in areology-atlas-dotenv-safe-greatfilter (npm) (malicious package)
- [MAL-2025-185551](https://insights.sbomify.com/MAL-2025-185551/): Malicious code in arcturus-venus-loop-cressida (npm) (malicious package)
- [MAL-2025-185550](https://insights.sbomify.com/MAL-2025-185550/): Malicious code in arcturus-sails-version-atlas (npm) (malicious package)
- [MAL-2025-18555](https://insights.sbomify.com/MAL-2025-18555/): Malicious code in do-wnload-available-mens-needs-womens-needs-whatever-egojv-aclbsw (npm) (malicious package)
- [MAL-2025-185549](https://insights.sbomify.com/MAL-2025-185549/): Malicious code in arcturus-run-script-hydrogeology-gatsby (npm) (malicious package)
- [MAL-2025-185548](https://insights.sbomify.com/MAL-2025-185548/): Malicious code in arcturus-phenomic-glaciology-promise (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/981/