# Vulnerabilities published in 2025


- [MAL-2025-185547](https://insights.sbomify.com/MAL-2025-185547/): Malicious code in arcturus-nuxtjs-cordelia-run-script (npm) (malicious package)
- [MAL-2025-185546](https://insights.sbomify.com/MAL-2025-185546/): Malicious code in arcturus-nucleosynthesis-commitizen-ini (npm) (malicious package)
- [MAL-2025-185545](https://insights.sbomify.com/MAL-2025-185545/): Malicious code in arcturus-magellan-bellatrix-quasarjet (npm) (malicious package)
- [MAL-2025-185544](https://insights.sbomify.com/MAL-2025-185544/): Malicious code in arcturus-iota-auth-blaze (npm) (malicious package)
- [MAL-2025-185543](https://insights.sbomify.com/MAL-2025-185543/): Malicious code in arcturus-fornax-thuban-fetch (npm) (malicious package)
- [MAL-2025-185542](https://insights.sbomify.com/MAL-2025-185542/): Malicious code in arcturus-flare-superagent-sedna (npm) (malicious package)
- [MAL-2025-185541](https://insights.sbomify.com/MAL-2025-185541/): Malicious code in arcturus-centauri-iota-puppeteer (npm) (malicious package)
- [MAL-2025-185540](https://insights.sbomify.com/MAL-2025-185540/): Malicious code in arcturus-bellatrix-standard-miranda (npm) (malicious package)
- [MAL-2025-18554](https://insights.sbomify.com/MAL-2025-18554/): Malicious code in do-wnload-available-heres-to-taking-it-easy-aq630-dofqws (npm) (malicious package)
- [MAL-2025-185539](https://insights.sbomify.com/MAL-2025-185539/): Malicious code in archaeometry-yaml-phoebe-ophiuchus (npm) (malicious package)
- [MAL-2025-185538](https://insights.sbomify.com/MAL-2025-185538/): Malicious code in archaeometry-rollup-plugin-astro-install (npm) (malicious package)
- [MAL-2025-185537](https://insights.sbomify.com/MAL-2025-185537/): Malicious code in archaeometry-impulse-galaxy-dysonswarm (npm) (malicious package)
- [MAL-2025-185536](https://insights.sbomify.com/MAL-2025-185536/): Malicious code in archaeometry-eventhoriz-taphonomy-node-sass (npm) (malicious package)
- [MAL-2025-185535](https://insights.sbomify.com/MAL-2025-185535/): Malicious code in archaeometry-europa-asthenosphere-run-script (npm) (malicious package)
- [MAL-2025-185534](https://insights.sbomify.com/MAL-2025-185534/): Malicious code in archaeometry-cordelia-capella-dotenv (npm) (malicious package)
- [MAL-2025-185533](https://insights.sbomify.com/MAL-2025-185533/): Malicious code in archaeometry-command-iota-octans (npm) (malicious package)
- [MAL-2025-185532](https://insights.sbomify.com/MAL-2025-185532/): Malicious code in archaeometry-airbnb-mira-ophiuchus (npm) (malicious package)
- [MAL-2025-185531](https://insights.sbomify.com/MAL-2025-185531/): Malicious code in archaeometry-accretion-avior-panspermia (npm) (malicious package)
- [MAL-2025-185530](https://insights.sbomify.com/MAL-2025-185530/): Malicious code in archaeogenetics-xenos-telesto-tectonophysics (npm) (malicious package)
- [MAL-2025-18553](https://insights.sbomify.com/MAL-2025-18553/): Malicious code in do-wnload-available-all-6s-and-7s-gwvcm-sezkzx (npm) (malicious package)
- [MAL-2025-185529](https://insights.sbomify.com/MAL-2025-185529/): Malicious code in archaeogenetics-typeorm-superagent-event (npm) (malicious package)
- [MAL-2025-185528](https://insights.sbomify.com/MAL-2025-185528/): Malicious code in archaeogenetics-tardigrade-filament-boson (npm) (malicious package)
- [MAL-2025-185527](https://insights.sbomify.com/MAL-2025-185527/): Malicious code in archaeogenetics-taphonomy-blazar-singularitarianism (npm) (malicious package)
- [MAL-2025-185526](https://insights.sbomify.com/MAL-2025-185526/): Malicious code in archaeogenetics-semantic-ui-weywot-gravity (npm) (malicious package)
- [MAL-2025-185525](https://insights.sbomify.com/MAL-2025-185525/): Malicious code in archaeogenetics-ganymede-paleoceanography-ignite (npm) (malicious package)
- [MAL-2025-185524](https://insights.sbomify.com/MAL-2025-185524/): Malicious code in archaeogenetics-csrf-aquarius-perturbation (npm) (malicious package)
- [MAL-2025-185523](https://insights.sbomify.com/MAL-2025-185523/): Malicious code in archaeogenetics-astrochemistry-quark-chakra-ui (npm) (malicious package)
- [MAL-2025-185522](https://insights.sbomify.com/MAL-2025-185522/): Malicious code in archaeoastronomy-prettier-plugin-markdown-backend-archaeoastronomy (npm) (malicious package)
- [MAL-2025-185521](https://insights.sbomify.com/MAL-2025-185521/): Malicious code in archaeoastronomy-lint-staged-polaris-dynamo (npm) (malicious package)
- [MAL-2025-185520](https://insights.sbomify.com/MAL-2025-185520/): Malicious code in archaeoastronomy-epigenetics-proteomics-request (npm) (malicious package)
- [MAL-2025-18552](https://insights.sbomify.com/MAL-2025-18552/): Malicious code in do-wnload-available-61376-domestic-blues-d3hzx-yovkzp (npm) (malicious package)
- [MAL-2025-185519](https://insights.sbomify.com/MAL-2025-185519/): Malicious code in archaeoastronomy-blaze-panspermia-quark (npm) (malicious package)
- [MAL-2025-185518](https://insights.sbomify.com/MAL-2025-185518/): Malicious code in archaeoastronomy-biosignature-phoebe-metabolomics (npm) (malicious package)
- [MAL-2025-185517](https://insights.sbomify.com/MAL-2025-185517/): Malicious code in aquarius-slidev-equinox-procyon (npm) (malicious package)
- [MAL-2025-185516](https://insights.sbomify.com/MAL-2025-185516/): Malicious code in aquarius-relay-pulsar-eslint-config (npm) (malicious package)
- [MAL-2025-185515](https://insights.sbomify.com/MAL-2025-185515/): Malicious code in aquarius-quark-materialize-juno (npm) (malicious package)
- [MAL-2025-185514](https://insights.sbomify.com/MAL-2025-185514/): Malicious code in aquarius-jsonp-technocracy-bulma (npm) (malicious package)
- [MAL-2025-185513](https://insights.sbomify.com/MAL-2025-185513/): Malicious code in aquarius-configstore-eclipse-celeste (npm) (malicious package)
- [MAL-2025-185512](https://insights.sbomify.com/MAL-2025-185512/): Malicious code in aquarius-babel-nconf-build (npm) (malicious package)
- [MAL-2025-185511](https://insights.sbomify.com/MAL-2025-185511/): Malicious code in apollo-xo-bulma-radiant (npm) (malicious package)
- [MAL-2025-185510](https://insights.sbomify.com/MAL-2025-185510/): Malicious code in apollo-webdriver-manager-jasmine-wasat (npm) (malicious package)
- [MAL-2025-18551](https://insights.sbomify.com/MAL-2025-18551/): Malicious code in do-wnload-available-5896-swordfishtrombones-f0r65-ohpily (npm) (malicious package)
- [MAL-2025-185509](https://insights.sbomify.com/MAL-2025-185509/): Malicious code in apollo-spinner-solis-rigel (npm) (malicious package)
- [MAL-2025-185508](https://insights.sbomify.com/MAL-2025-185508/): Malicious code in apollo-slides-duplex-fornax (npm) (malicious package)
- [MAL-2025-185507](https://insights.sbomify.com/MAL-2025-185507/): Malicious code in apollo-sirius-upgrade-iota (npm) (malicious package)
- [MAL-2025-185506](https://insights.sbomify.com/MAL-2025-185506/): Malicious code in apollo-redgiant-kardashevscale-pino (npm) (malicious package)
- [MAL-2025-185505](https://insights.sbomify.com/MAL-2025-185505/): Malicious code in apollo-nodejs-helmet-loglevel (npm) (malicious package)
- [MAL-2025-185504](https://insights.sbomify.com/MAL-2025-185504/): Malicious code in apollo-ini-grunt-radiant (npm) (malicious package)
- [MAL-2025-185503](https://insights.sbomify.com/MAL-2025-185503/): Malicious code in apollo-geochronology-stream-readable (npm) (malicious package)
- [MAL-2025-185502](https://insights.sbomify.com/MAL-2025-185502/): Malicious code in apollo-ganymede-algol-impulse (npm) (malicious package)
- [MAL-2025-185501](https://insights.sbomify.com/MAL-2025-185501/): Malicious code in apollo-eigenstate-redis-dendrochronology (npm) (malicious package)
- [MAL-2025-185500](https://insights.sbomify.com/MAL-2025-185500/): Malicious code in apollo-dotenv-parse-variables-stratigraphy-private (npm) (malicious package)
- [MAL-2025-18550](https://insights.sbomify.com/MAL-2025-18550/): Malicious code in do-wnload-available-525005-hysteria-xkreg-qguide (npm) (malicious package)
- [MAL-2025-1855](https://insights.sbomify.com/MAL-2025-1855/): Malicious code in instacart-auth (npm) (malicious package)
- [MAL-2025-185499](https://insights.sbomify.com/MAL-2025-185499/): Malicious code in apollo-development-cressida-umbriel (npm) (malicious package)
- [MAL-2025-185498](https://insights.sbomify.com/MAL-2025-185498/): Malicious code in apollo-ceres-package-cors (npm) (malicious package)
- [MAL-2025-185497](https://insights.sbomify.com/MAL-2025-185497/): Malicious code in apollo-areology-tardigrade-tailwindcss (npm) (malicious package)
- [MAL-2025-185496](https://insights.sbomify.com/MAL-2025-185496/): Malicious code in apollo-aldebaran-miranda-install (npm) (malicious package)
- [MAL-2025-185495](https://insights.sbomify.com/MAL-2025-185495/): Malicious code in apex-tool-colors-cz-conventional-changelog (npm) (malicious package)
- [MAL-2025-185494](https://insights.sbomify.com/MAL-2025-185494/): Malicious code in apex-titan-babel-flare (npm) (malicious package)
- [MAL-2025-185493](https://insights.sbomify.com/MAL-2025-185493/): Malicious code in apex-soap-restart-nightwatch (npm) (malicious package)
- [MAL-2025-185492](https://insights.sbomify.com/MAL-2025-185492/): Malicious code in apex-postgres-procyon-zenobia (npm) (malicious package)
- [MAL-2025-185491](https://insights.sbomify.com/MAL-2025-185491/): Malicious code in apex-gulp-npm-dione (npm) (malicious package)
- [MAL-2025-185490](https://insights.sbomify.com/MAL-2025-185490/): Malicious code in apex-fork-jupiter-winston (npm) (malicious package)
- [MAL-2025-18549](https://insights.sbomify.com/MAL-2025-18549/): Malicious code in do-wnload-available-38552-ron-sexsmith-38zcb-opsbmw (npm) (malicious package)
- [MAL-2025-185489](https://insights.sbomify.com/MAL-2025-185489/): Malicious code in apex-electron-protractor-mini-css-extract-plugin (npm) (malicious package)
- [MAL-2025-185488](https://insights.sbomify.com/MAL-2025-185488/): Malicious code in apex-charon-lyra-quito (npm) (malicious package)
- [MAL-2025-185487](https://insights.sbomify.com/MAL-2025-185487/): Malicious code in apex-aurora-xml-fomalhaut (npm) (malicious package)
- [MAL-2025-185486](https://insights.sbomify.com/MAL-2025-185486/): Malicious code in apex-archaeometry-darkenergy-deneb (npm) (malicious package)
- [MAL-2025-185485](https://insights.sbomify.com/MAL-2025-185485/): Malicious code in apex-antares-polaris-cosmology (npm) (malicious package)
- [MAL-2025-185484](https://insights.sbomify.com/MAL-2025-185484/): Malicious code in antimatter-slidev-install-void (npm) (malicious package)
- [MAL-2025-185483](https://insights.sbomify.com/MAL-2025-185483/): Malicious code in antimatter-pino-celeste-dynamo (npm) (malicious package)
- [MAL-2025-185482](https://insights.sbomify.com/MAL-2025-185482/): Malicious code in antimatter-exoplanetology-convict-update (npm) (malicious package)
- [MAL-2025-185481](https://insights.sbomify.com/MAL-2025-185481/): Malicious code in antimatter-celeste-meissa-cryptography (npm) (malicious package)
- [MAL-2025-185480](https://insights.sbomify.com/MAL-2025-185480/): Malicious code in antd-style-loader-miranda-uninstall (npm) (malicious package)
- [MAL-2025-18548](https://insights.sbomify.com/MAL-2025-18548/): Malicious code in do-wnload-available-36615-big-shiny-cars-skip6-dggtzj (npm) (malicious package)
- [MAL-2025-185479](https://insights.sbomify.com/MAL-2025-185479/): Malicious code in antd-playwright-ichnology-technocracy (npm) (malicious package)
- [MAL-2025-185478](https://insights.sbomify.com/MAL-2025-185478/): Malicious code in antd-node-sass-zenobia-eris (npm) (malicious package)
- [MAL-2025-185477](https://insights.sbomify.com/MAL-2025-185477/): Malicious code in antares-thermochronology-parallax-blackhole (npm) (malicious package)
- [MAL-2025-185476](https://insights.sbomify.com/MAL-2025-185476/): Malicious code in antares-terser-regulus-gravity (npm) (malicious package)
- [MAL-2025-185475](https://insights.sbomify.com/MAL-2025-185475/): Malicious code in antares-superflare-transform-blackhole (npm) (malicious package)
- [MAL-2025-185474](https://insights.sbomify.com/MAL-2025-185474/): Malicious code in antares-quasarjet-winston-superflare (npm) (malicious package)
- [MAL-2025-185473](https://insights.sbomify.com/MAL-2025-185473/): Malicious code in antares-procyon-xenon-solis (npm) (malicious package)
- [MAL-2025-185472](https://insights.sbomify.com/MAL-2025-185472/): Malicious code in antares-planckscale-helmet-module (npm) (malicious package)
- [MAL-2025-185471](https://insights.sbomify.com/MAL-2025-185471/): Malicious code in antares-parallax-publish-innercore (npm) (malicious package)
- [MAL-2025-185470](https://insights.sbomify.com/MAL-2025-185470/): Malicious code in antares-mui-tailwindcss-cross-env (npm) (malicious package)
- [MAL-2025-18547](https://insights.sbomify.com/MAL-2025-18547/): Malicious code in do-wnload-available-31661-you-cant-stop-rock-n-roll-effcx-fwrjur (npm) (malicious package)
- [MAL-2025-185469](https://insights.sbomify.com/MAL-2025-185469/): Malicious code in antares-luminescence-phoebe-higgs (npm) (malicious package)
- [MAL-2025-185468](https://insights.sbomify.com/MAL-2025-185468/): Malicious code in antares-jsonp-charon-europa (npm) (malicious package)
- [MAL-2025-185467](https://insights.sbomify.com/MAL-2025-185467/): Malicious code in antares-jasmine-rocket-start (npm) (malicious package)
- [MAL-2025-185466](https://insights.sbomify.com/MAL-2025-185466/): Malicious code in antares-iota-mysql-start (npm) (malicious package)
- [MAL-2025-185465](https://insights.sbomify.com/MAL-2025-185465/): Malicious code in antares-genomics-grus-planetology (npm) (malicious package)
- [MAL-2025-185464](https://insights.sbomify.com/MAL-2025-185464/): Malicious code in antares-cluster-ursa-javascript (npm) (malicious package)
- [MAL-2025-185463](https://insights.sbomify.com/MAL-2025-185463/): Malicious code in antares-bunyan-apollo-deimos (npm) (malicious package)
- [MAL-2025-185462](https://insights.sbomify.com/MAL-2025-185462/): Malicious code in antares-aurora-mocha-corvus (npm) (malicious package)
- [MAL-2025-185461](https://insights.sbomify.com/MAL-2025-185461/): Malicious code in antares-asteroid-quantum-helmet (npm) (malicious package)
- [MAL-2025-185460](https://insights.sbomify.com/MAL-2025-185460/): Malicious code in antares-apex-robotics-quito (npm) (malicious package)
- [MAL-2025-18546](https://insights.sbomify.com/MAL-2025-18546/): Malicious code in do-wnload-available-156615-emerald-classics-1bifx-rttcji (npm) (malicious package)
- [MAL-2025-185459](https://insights.sbomify.com/MAL-2025-185459/): Malicious code in antares-airbnb-cryonics-ionosphere (npm) (malicious package)
- [MAL-2025-185458](https://insights.sbomify.com/MAL-2025-185458/): Malicious code in antares-aether-run-script-pino-pretty (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/982/