# Vulnerabilities published in 2025


- [MAL-2025-185457](https://insights.sbomify.com/MAL-2025-185457/): Malicious code in andromeda-webpack-nodejs-sadr (npm) (malicious package)
- [MAL-2025-185456](https://insights.sbomify.com/MAL-2025-185456/): Malicious code in andromeda-impulse-quasarjet-elara (npm) (malicious package)
- [MAL-2025-185455](https://insights.sbomify.com/MAL-2025-185455/): Malicious code in andromeda-grus-leda-leda (npm) (malicious package)
- [MAL-2025-185454](https://insights.sbomify.com/MAL-2025-185454/): Malicious code in analyze-signal-bundle-query-mock (npm) (malicious package)
- [MAL-2025-185453](https://insights.sbomify.com/MAL-2025-185453/): Malicious code in analyze-meta-error-chi-serialize (npm) (malicious package)
- [MAL-2025-185452](https://insights.sbomify.com/MAL-2025-185452/): Malicious code in analyze-key-simple-long-gamma (npm) (malicious package)
- [MAL-2025-185451](https://insights.sbomify.com/MAL-2025-185451/): Malicious code in analyze-char-fork-theta-kernel (npm) (malicious package)
- [MAL-2025-185450](https://insights.sbomify.com/MAL-2025-185450/): Malicious code in analyze-catch-load-nu-omicron (npm) (malicious package)
- [MAL-2025-18545](https://insights.sbomify.com/MAL-2025-18545/): Malicious code in do-wnload-available-135622-de-facto-s0jrf-jhgphg (npm) (malicious package)
- [MAL-2025-185449](https://insights.sbomify.com/MAL-2025-185449/): Malicious code in analyze-boolean-pipe-import-epsilon (npm) (malicious package)
- [MAL-2025-185448](https://insights.sbomify.com/MAL-2025-185448/): Malicious code in analyze-abstract-hash-code-iota (npm) (malicious package)
- [MAL-2025-185447](https://insights.sbomify.com/MAL-2025-185447/): Malicious code in altair-genomics-firebase-janus (npm) (malicious package)
- [MAL-2025-185446](https://insights.sbomify.com/MAL-2025-185446/): Malicious code in altair-async-jabbah-radioastronomy (npm) (malicious package)
- [MAL-2025-185445](https://insights.sbomify.com/MAL-2025-185445/): Malicious code in alphard-webdriverio-titan-elektra (npm) (malicious package)
- [MAL-2025-185444](https://insights.sbomify.com/MAL-2025-185444/): Malicious code in alphard-supercluster-exobiology-postgres (npm) (malicious package)
- [MAL-2025-185443](https://insights.sbomify.com/MAL-2025-185443/): Malicious code in alphard-prettier-fusion-astrochemistry (npm) (malicious package)
- [MAL-2025-185442](https://insights.sbomify.com/MAL-2025-185442/): Malicious code in alphard-mui-gatsby-envconfig (npm) (malicious package)
- [MAL-2025-185441](https://insights.sbomify.com/MAL-2025-185441/): Malicious code in alphard-halley-ophiuchus-library (npm) (malicious package)
- [MAL-2025-185440](https://insights.sbomify.com/MAL-2025-185440/): Malicious code in alphard-gatsby-commitizen-node-config (npm) (malicious package)
- [MAL-2025-18544](https://insights.sbomify.com/MAL-2025-18544/): Malicious code in dns-detect (npm) (malicious package)
- [MAL-2025-185439](https://insights.sbomify.com/MAL-2025-185439/): Malicious code in alphard-fetch-electron-builder-levels (npm) (malicious package)
- [MAL-2025-185438](https://insights.sbomify.com/MAL-2025-185438/): Malicious code in alphard-dynamo-antares-meteor (npm) (malicious package)
- [MAL-2025-185437](https://insights.sbomify.com/MAL-2025-185437/): Malicious code in alphard-comet-transport-rest (npm) (malicious package)
- [MAL-2025-185436](https://insights.sbomify.com/MAL-2025-185436/): Malicious code in alphard-biohacking-areology-kardashevscale (npm) (malicious package)
- [MAL-2025-185435](https://insights.sbomify.com/MAL-2025-185435/): Malicious code in alpha-view-grep-abstract-pipe (npm) (malicious package)
- [MAL-2025-185434](https://insights.sbomify.com/MAL-2025-185434/): Malicious code in alpha-sun-validate-transpile-bad (npm) (malicious package)
- [MAL-2025-185433](https://insights.sbomify.com/MAL-2025-185433/): Malicious code in alpha-integer-pi-assert-export (npm) (malicious package)
- [MAL-2025-185432](https://insights.sbomify.com/MAL-2025-185432/): Malicious code in alpha-deserialize-book-upsilon-pi (npm) (malicious package)
- [MAL-2025-185431](https://insights.sbomify.com/MAL-2025-185431/): Malicious code in alpha-authenticate-serialize-long-try (npm) (malicious package)
- [MAL-2025-185430](https://insights.sbomify.com/MAL-2025-185430/): Malicious code in algol-troposphere-bellatrix-oortcloud (npm) (malicious package)
- [MAL-2025-18543](https://insights.sbomify.com/MAL-2025-18543/): Malicious code in dnkawmyucjhlsrxo (npm) (malicious package)
- [MAL-2025-185429](https://insights.sbomify.com/MAL-2025-185429/): Malicious code in algol-elektra-rollup-style-loader (npm) (malicious package)
- [MAL-2025-185428](https://insights.sbomify.com/MAL-2025-185428/): Malicious code in algol-apollo-indus-extremophile (npm) (malicious package)
- [MAL-2025-185427](https://insights.sbomify.com/MAL-2025-185427/): Malicious code in algol-apollo-dotenv-parse-variables-browserify (npm) (malicious package)
- [MAL-2025-185426](https://insights.sbomify.com/MAL-2025-185426/): Malicious code in algol-aldebaran-cressida-nodejs (npm) (malicious package)
- [MAL-2025-185425](https://insights.sbomify.com/MAL-2025-185425/): Malicious code in algol-airbnb-eslint-config-elara (npm) (malicious package)
- [MAL-2025-185424](https://insights.sbomify.com/MAL-2025-185424/): Malicious code in aldebaran-thuban-gacrux-apex (npm) (malicious package)
- [MAL-2025-185423](https://insights.sbomify.com/MAL-2025-185423/): Malicious code in aldebaran-stratigraphy-canopus-module (npm) (malicious package)
- [MAL-2025-185422](https://insights.sbomify.com/MAL-2025-185422/): Malicious code in aldebaran-resolvers-rehype-carina (npm) (malicious package)
- [MAL-2025-185421](https://insights.sbomify.com/MAL-2025-185421/): Malicious code in aldebaran-regulus-bellatrix-prompts (npm) (malicious package)
- [MAL-2025-185420](https://insights.sbomify.com/MAL-2025-185420/): Malicious code in aldebaran-quantum-babel-steganography (npm) (malicious package)
- [MAL-2025-18542](https://insights.sbomify.com/MAL-2025-18542/): Malicious code in dnbwyy (npm) (malicious package)
- [MAL-2025-185419](https://insights.sbomify.com/MAL-2025-185419/): Malicious code in aldebaran-polaris-materialize-xenobiology (npm) (malicious package)
- [MAL-2025-185418](https://insights.sbomify.com/MAL-2025-185418/): Malicious code in aldebaran-phoebe-sagitta-brane (npm) (malicious package)
- [MAL-2025-185417](https://insights.sbomify.com/MAL-2025-185417/): Malicious code in aldebaran-markdownlint-phoebe-cordelia (npm) (malicious package)
- [MAL-2025-185416](https://insights.sbomify.com/MAL-2025-185416/): Malicious code in aldebaran-lyra-magellan-bulma (npm) (malicious package)
- [MAL-2025-185415](https://insights.sbomify.com/MAL-2025-185415/): Malicious code in aldebaran-halley-eris-rollup-plugin (npm) (malicious package)
- [MAL-2025-185414](https://insights.sbomify.com/MAL-2025-185414/): Malicious code in aldebaran-biosignature-darkenergy-pavo (npm) (malicious package)
- [MAL-2025-185413](https://insights.sbomify.com/MAL-2025-185413/): Malicious code in airbnb-titan-pavo-adonis (npm) (malicious package)
- [MAL-2025-185412](https://insights.sbomify.com/MAL-2025-185412/): Malicious code in airbnb-tethys-enif-nova (npm) (malicious package)
- [MAL-2025-185411](https://insights.sbomify.com/MAL-2025-185411/): Malicious code in airbnb-test-betelgeuse-gridsome (npm) (malicious package)
- [MAL-2025-185410](https://insights.sbomify.com/MAL-2025-185410/): Malicious code in airbnb-oscillation-commitlint-config-angular-palynology (npm) (malicious package)
- [MAL-2025-18541](https://insights.sbomify.com/MAL-2025-18541/): Malicious code in dmstools (npm) (malicious package)
- [MAL-2025-185409](https://insights.sbomify.com/MAL-2025-185409/): Malicious code in airbnb-nconf-redis-jwt (npm) (malicious package)
- [MAL-2025-185408](https://insights.sbomify.com/MAL-2025-185408/): Malicious code in airbnb-mini-css-extract-plugin-centauri-soap (npm) (malicious package)
- [MAL-2025-185407](https://insights.sbomify.com/MAL-2025-185407/): Malicious code in airbnb-mensa-geochemistry-husky (npm) (malicious package)
- [MAL-2025-185406](https://insights.sbomify.com/MAL-2025-185406/): Malicious code in airbnb-australis-inflation-changelog (npm) (malicious package)
- [MAL-2025-185405](https://insights.sbomify.com/MAL-2025-185405/): Malicious code in airbnb-ariel-spectroscopy-ursa (npm) (malicious package)
- [MAL-2025-185404](https://insights.sbomify.com/MAL-2025-185404/): Malicious code in airbnb-arcturus-enif-kastra (npm) (malicious package)
- [MAL-2025-185403](https://insights.sbomify.com/MAL-2025-185403/): Malicious code in air-query-sun-void-debug (npm) (malicious package)
- [MAL-2025-185402](https://insights.sbomify.com/MAL-2025-185402/): Malicious code in air-minify-load-secure-encode (npm) (malicious package)
- [MAL-2025-185401](https://insights.sbomify.com/MAL-2025-185401/): Malicious code in air-epsilon-zeta-key-bundle (npm) (malicious package)
- [MAL-2025-185400](https://insights.sbomify.com/MAL-2025-185400/): Malicious code in air-easy-dog-float-interface (npm) (malicious package)
- [MAL-2025-18540](https://insights.sbomify.com/MAL-2025-18540/): Malicious code in dmp-web (npm) (malicious package)
- [MAL-2025-1854](https://insights.sbomify.com/MAL-2025-1854/): Malicious code in instacart-api-client (npm) (malicious package)
- [MAL-2025-185399](https://insights.sbomify.com/MAL-2025-185399/): Malicious code in aether-vuepress-gatsby-schema (npm) (malicious package)
- [MAL-2025-185398](https://insights.sbomify.com/MAL-2025-185398/): Malicious code in aether-tachyon-geochronology-janus (npm) (malicious package)
- [MAL-2025-185397](https://insights.sbomify.com/MAL-2025-185397/): Malicious code in aether-start-lepton-mdx (npm) (malicious package)
- [MAL-2025-185396](https://insights.sbomify.com/MAL-2025-185396/): Malicious code in aether-radiometric-sedna-phoebe (npm) (malicious package)
- [MAL-2025-185395](https://insights.sbomify.com/MAL-2025-185395/): Malicious code in aether-quantum-computing-koa-xanadu (npm) (malicious package)
- [MAL-2025-185394](https://insights.sbomify.com/MAL-2025-185394/): Malicious code in aether-pulsar-polaris-aldebaran (npm) (malicious package)
- [MAL-2025-185393](https://insights.sbomify.com/MAL-2025-185393/): Malicious code in aether-procyon-charon-spectron-webdriver (npm) (malicious package)
- [MAL-2025-185392](https://insights.sbomify.com/MAL-2025-185392/): Malicious code in aether-mui-postgres-mira (npm) (malicious package)
- [MAL-2025-185391](https://insights.sbomify.com/MAL-2025-185391/): Malicious code in aether-hologram-genomics-xanthus (npm) (malicious package)
- [MAL-2025-185390](https://insights.sbomify.com/MAL-2025-185390/): Malicious code in aether-foundation-request-tectonophysics (npm) (malicious package)
- [MAL-2025-18539](https://insights.sbomify.com/MAL-2025-18539/): Malicious code in dmodcode (npm) (malicious package)
- [MAL-2025-185389](https://insights.sbomify.com/MAL-2025-185389/): Malicious code in aether-dione-test-markdown-pdf (npm) (malicious package)
- [MAL-2025-185388](https://insights.sbomify.com/MAL-2025-185388/): Malicious code in adonis-tectonophysics-tectonic-helmet (npm) (malicious package)
- [MAL-2025-185387](https://insights.sbomify.com/MAL-2025-185387/): Malicious code in adonis-prettier-stylelint-ignite-magellan (npm) (malicious package)
- [MAL-2025-185386](https://insights.sbomify.com/MAL-2025-185386/): Malicious code in adonis-cosmos-eslint-plugin-izar (npm) (malicious package)
- [MAL-2025-185385](https://insights.sbomify.com/MAL-2025-185385/): Malicious code in adonis-comet-sedna-geomorphology (npm) (malicious package)
- [MAL-2025-185384](https://insights.sbomify.com/MAL-2025-185384/): Malicious code in adonis-child-process-pegasus-repository (npm) (malicious package)
- [MAL-2025-185383](https://insights.sbomify.com/MAL-2025-185383/): Malicious code in achernar-zenith-ultra-joviology (npm) (malicious package)
- [MAL-2025-185382](https://insights.sbomify.com/MAL-2025-185382/): Malicious code in achernar-ursa-server-testcafe (npm) (malicious package)
- [MAL-2025-185381](https://insights.sbomify.com/MAL-2025-185381/): Malicious code in achernar-oberon-lint-staged-config (npm) (malicious package)
- [MAL-2025-185380](https://insights.sbomify.com/MAL-2025-185380/): Malicious code in achernar-hermes-centauri-module (npm) (malicious package)
- [MAL-2025-18538](https://insights.sbomify.com/MAL-2025-18538/): Malicious code in dminiwm (npm) (malicious package)
- [MAL-2025-185379](https://insights.sbomify.com/MAL-2025-185379/): Malicious code in achernar-elara-flare-lyra (npm) (malicious package)
- [MAL-2025-185378](https://insights.sbomify.com/MAL-2025-185378/): Malicious code in accretion-kastra-nightmare-module (npm) (malicious package)
- [MAL-2025-185377](https://insights.sbomify.com/MAL-2025-185377/): Malicious code in accretion-avior-radiometric-fetch (npm) (malicious package)
- [MAL-2025-185376](https://insights.sbomify.com/MAL-2025-185376/): Malicious code in acamar-xenon-eslint-magellan (npm) (malicious package)
- [MAL-2025-185375](https://insights.sbomify.com/MAL-2025-185375/): Malicious code in acamar-prettier-stylelint-run-script-hapi (npm) (malicious package)
- [MAL-2025-185374](https://insights.sbomify.com/MAL-2025-185374/): Malicious code in acamar-postgres-gammarayburst-astrophysics (npm) (malicious package)
- [MAL-2025-185373](https://insights.sbomify.com/MAL-2025-185373/): Malicious code in acamar-higgs-izar-deneb (npm) (malicious package)
- [MAL-2025-185372](https://insights.sbomify.com/MAL-2025-185372/): Malicious code in acamar-halley-eclipse-kronos (npm) (malicious package)
- [MAL-2025-185371](https://insights.sbomify.com/MAL-2025-185371/): Malicious code in acamar-comet-flare-robotics (npm) (malicious package)
- [MAL-2025-185370](https://insights.sbomify.com/MAL-2025-185370/): Malicious code in acamar-child-process-oauth-nodejs (npm) (malicious package)
- [MAL-2025-18537](https://insights.sbomify.com/MAL-2025-18537/): Malicious code in dmhjwnqsufoblkrk (npm) (malicious package)
- [MAL-2025-185369](https://insights.sbomify.com/MAL-2025-185369/): Malicious code in abstract-wind-sed-void-chi (npm) (malicious package)
- [MAL-2025-185368](https://insights.sbomify.com/MAL-2025-185368/): Malicious code in abstract-mu-kappa-authenticate-decode (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/983/