# Vulnerabilities published in 2025


- [MAL-2025-149455](https://insights.sbomify.com/MAL-2025-149455/): Malicious code in wezen-framework-dotenv-safe-testcafe (npm) (malicious package)
- [MAL-2025-149454](https://insights.sbomify.com/MAL-2025-149454/): Malicious code in wezen-electron-scripts-blaze (npm) (malicious package)
- [MAL-2025-149453](https://insights.sbomify.com/MAL-2025-149453/): Malicious code in wezen-duplex-cypress-nightwatch (npm) (malicious package)
- [MAL-2025-149452](https://insights.sbomify.com/MAL-2025-149452/): Malicious code in wezen-capella-release-it-atlas (npm) (malicious package)
- [MAL-2025-149451](https://insights.sbomify.com/MAL-2025-149451/): Malicious code in wezen-airbnb-query-dagda (npm) (malicious package)
- [MAL-2025-149450](https://insights.sbomify.com/MAL-2025-149450/): Malicious code in wezen-airbnb-apollo-nuxtjs (npm) (malicious package)
- [MAL-2025-14945](https://insights.sbomify.com/MAL-2025-14945/): Malicious code in assetslush (npm) (malicious package)
- [MAL-2025-149449](https://insights.sbomify.com/MAL-2025-149449/): Malicious code in weywot-xanadu-yaml-install (npm) (malicious package)
- [MAL-2025-149448](https://insights.sbomify.com/MAL-2025-149448/): Malicious code in weywot-warp-carpo-less (npm) (malicious package)
- [MAL-2025-149447](https://insights.sbomify.com/MAL-2025-149447/): Malicious code in weywot-triton-wolf-sedna (npm) (malicious package)
- [MAL-2025-149446](https://insights.sbomify.com/MAL-2025-149446/): Malicious code in weywot-schema-relay-warp (npm) (malicious package)
- [MAL-2025-149445](https://insights.sbomify.com/MAL-2025-149445/): Malicious code in weywot-remark-titan-auth0 (npm) (malicious package)
- [MAL-2025-149444](https://insights.sbomify.com/MAL-2025-149444/): Malicious code in weywot-polaris-xanthus-upgrade (npm) (malicious package)
- [MAL-2025-149443](https://insights.sbomify.com/MAL-2025-149443/): Malicious code in weywot-nightwatch-parcel-apollo (npm) (malicious package)
- [MAL-2025-149442](https://insights.sbomify.com/MAL-2025-149442/): Malicious code in weywot-less-loader-grunt-gatsby (npm) (malicious package)
- [MAL-2025-149441](https://insights.sbomify.com/MAL-2025-149441/): Malicious code in weywot-inquirer-astro-altair (npm) (malicious package)
- [MAL-2025-149440](https://insights.sbomify.com/MAL-2025-149440/): Malicious code in weywot-google-eridanus-hermes (npm) (malicious package)
- [MAL-2025-14944](https://insights.sbomify.com/MAL-2025-14944/): Malicious code in asset_pipeline (npm) (malicious package)
- [MAL-2025-149439](https://insights.sbomify.com/MAL-2025-149439/): Malicious code in weywot-gemini-dynamo-regulus (npm) (malicious package)
- [MAL-2025-149438](https://insights.sbomify.com/MAL-2025-149438/): Malicious code in weywot-envconfig-meteor-spawn (npm) (malicious package)
- [MAL-2025-149437](https://insights.sbomify.com/MAL-2025-149437/): Malicious code in weywot-enif-bulma-duplex (npm) (malicious package)
- [MAL-2025-149436](https://insights.sbomify.com/MAL-2025-149436/): Malicious code in weywot-duplex-meissa-janus (npm) (malicious package)
- [MAL-2025-149435](https://insights.sbomify.com/MAL-2025-149435/): Malicious code in weywot-configstore-blaze-auriga (npm) (malicious package)
- [MAL-2025-149434](https://insights.sbomify.com/MAL-2025-149434/): Malicious code in weywot-centauri-betelgeuse-cosmiconfig (npm) (malicious package)
- [MAL-2025-149433](https://insights.sbomify.com/MAL-2025-149433/): Malicious code in weywot-callback-native-standard (npm) (malicious package)
- [MAL-2025-149432](https://insights.sbomify.com/MAL-2025-149432/): Malicious code in weywot-achernar-orbit-node-sass (npm) (malicious package)
- [MAL-2025-149431](https://insights.sbomify.com/MAL-2025-149431/): Malicious code in western-amaranth-elk (npm) (malicious package)
- [MAL-2025-149430](https://insights.sbomify.com/MAL-2025-149430/): Malicious code in websockets-winston-rigel-xenos (npm) (malicious package)
- [MAL-2025-14943](https://insights.sbomify.com/MAL-2025-14943/): Malicious code in asset_cloud (npm) (malicious package)
- [MAL-2025-149429](https://insights.sbomify.com/MAL-2025-149429/): Malicious code in websockets-vega-hyperion-nextjs (npm) (malicious package)
- [MAL-2025-149428](https://insights.sbomify.com/MAL-2025-149428/): Malicious code in websockets-telesto-blitz-remark (npm) (malicious package)
- [MAL-2025-149427](https://insights.sbomify.com/MAL-2025-149427/): Malicious code in websockets-solis-eslint-plugin-non-blocking (npm) (malicious package)
- [MAL-2025-149426](https://insights.sbomify.com/MAL-2025-149426/): Malicious code in websockets-run-script-websockets-mira (npm) (malicious package)
- [MAL-2025-149425](https://insights.sbomify.com/MAL-2025-149425/): Malicious code in websockets-proxima-commitlint-config-angular-eslint-config (npm) (malicious package)
- [MAL-2025-149424](https://insights.sbomify.com/MAL-2025-149424/): Malicious code in websockets-procyon-mongodb-vuepress (npm) (malicious package)
- [MAL-2025-149423](https://insights.sbomify.com/MAL-2025-149423/): Malicious code in websockets-odin-build-pipe (npm) (malicious package)
- [MAL-2025-149422](https://insights.sbomify.com/MAL-2025-149422/): Malicious code in websockets-graphql-regulus-canopus (npm) (malicious package)
- [MAL-2025-149421](https://insights.sbomify.com/MAL-2025-149421/): Malicious code in websockets-google-markdownlint-inquirer (npm) (malicious package)
- [MAL-2025-149420](https://insights.sbomify.com/MAL-2025-149420/): Malicious code in websockets-global-restart-barnard (npm) (malicious package)
- [MAL-2025-14942](https://insights.sbomify.com/MAL-2025-14942/): Malicious code in asset-viewer (npm) (malicious package)
- [MAL-2025-149419](https://insights.sbomify.com/MAL-2025-149419/): Malicious code in websockets-dactyl-element-ui-sync (npm) (malicious package)
- [MAL-2025-149418](https://insights.sbomify.com/MAL-2025-149418/): Malicious code in websockets-cluster-puppeteer-adonis (npm) (malicious package)
- [MAL-2025-149417](https://insights.sbomify.com/MAL-2025-149417/): Malicious code in websockets-carina-test-testcafe (npm) (malicious package)
- [MAL-2025-149416](https://insights.sbomify.com/MAL-2025-149416/): Malicious code in websockets-auriga-aether-airbnb (npm) (malicious package)
- [MAL-2025-149415](https://insights.sbomify.com/MAL-2025-149415/): Malicious code in webpack-zenith-winston-changelog (npm) (malicious package)
- [MAL-2025-149414](https://insights.sbomify.com/MAL-2025-149414/): Malicious code in webpack-yakutsk-tailwindcss-test (npm) (malicious package)
- [MAL-2025-149413](https://insights.sbomify.com/MAL-2025-149413/): Malicious code in webpack-wasat-pyxis-json (npm) (malicious package)
- [MAL-2025-149412](https://insights.sbomify.com/MAL-2025-149412/): Malicious code in webpack-vuetify-prompts-xanadu (npm) (malicious package)
- [MAL-2025-149411](https://insights.sbomify.com/MAL-2025-149411/): Malicious code in webpack-triton-optimize-css-assets-webpack-plugin-meteor (npm) (malicious package)
- [MAL-2025-149410](https://insights.sbomify.com/MAL-2025-149410/): Malicious code in webpack-titan-upgrade-envconfig (npm) (malicious package)
- [MAL-2025-14941](https://insights.sbomify.com/MAL-2025-14941/): Malicious code in asset-pipeline-yaml-combiner (npm) (malicious package)
- [MAL-2025-149409](https://insights.sbomify.com/MAL-2025-149409/): Malicious code in webpack-terser-yonder-delphinus (npm) (malicious package)
- [MAL-2025-149408](https://insights.sbomify.com/MAL-2025-149408/): Malicious code in webpack-supervisor-dotenv-vega (npm) (malicious package)
- [MAL-2025-149407](https://insights.sbomify.com/MAL-2025-149407/): Malicious code in webpack-sirius-remark-antd (npm) (malicious package)
- [MAL-2025-149406](https://insights.sbomify.com/MAL-2025-149406/): Malicious code in webpack-rimraf-eris-writable (npm) (malicious package)
- [MAL-2025-149405](https://insights.sbomify.com/MAL-2025-149405/): Malicious code in webpack-public-uglify-js-atlas (npm) (malicious package)
- [MAL-2025-149404](https://insights.sbomify.com/MAL-2025-149404/): Malicious code in webpack-prettier-stylelint-indus-version (npm) (malicious package)
- [MAL-2025-149403](https://insights.sbomify.com/MAL-2025-149403/): Malicious code in webpack-postgres-draco-bunyan (npm) (malicious package)
- [MAL-2025-149402](https://insights.sbomify.com/MAL-2025-149402/): Malicious code in webpack-perseus-version-hyperion (npm) (malicious package)
- [MAL-2025-149401](https://insights.sbomify.com/MAL-2025-149401/): Malicious code in webpack-kinetic-enceladus-redis (npm) (malicious package)
- [MAL-2025-149400](https://insights.sbomify.com/MAL-2025-149400/): Malicious code in webpack-kaus-flare-rehype (npm) (malicious package)
- [MAL-2025-14940](https://insights.sbomify.com/MAL-2025-14940/): Malicious code in assert-tau-eta-good-earth (npm) (malicious package)
- [MAL-2025-1494](https://insights.sbomify.com/MAL-2025-1494/): Malicious code in publish-private-provider-action (npm) (malicious package)
- [MAL-2025-149399](https://insights.sbomify.com/MAL-2025-149399/): Malicious code in webpack-init-uninstall-rimraf (npm) (malicious package)
- [MAL-2025-149398](https://insights.sbomify.com/MAL-2025-149398/): Malicious code in webpack-global-concurrently-venus (npm) (malicious package)
- [MAL-2025-149397](https://insights.sbomify.com/MAL-2025-149397/): Malicious code in webpack-ganymede-pm2-sails (npm) (malicious package)
- [MAL-2025-149396](https://insights.sbomify.com/MAL-2025-149396/): Malicious code in webpack-eridanus-iota-cosmiconfig (npm) (malicious package)
- [MAL-2025-149395](https://insights.sbomify.com/MAL-2025-149395/): Malicious code in webpack-dotenv-upgrade-callback (npm) (malicious package)
- [MAL-2025-149394](https://insights.sbomify.com/MAL-2025-149394/): Malicious code in webpack-colors-xerxes-slidev (npm) (malicious package)
- [MAL-2025-149393](https://insights.sbomify.com/MAL-2025-149393/): Malicious code in webpack-colors-luna-electron (npm) (malicious package)
- [MAL-2025-149392](https://insights.sbomify.com/MAL-2025-149392/): Malicious code in webpack-chakra-ui-style-loader-proxima (npm) (malicious package)
- [MAL-2025-149391](https://insights.sbomify.com/MAL-2025-149391/): Malicious code in webpack-carpo-enceladus-aether (npm) (malicious package)
- [MAL-2025-149390](https://insights.sbomify.com/MAL-2025-149390/): Malicious code in webpack-bunyan-xo-babel (npm) (malicious package)
- [MAL-2025-14939](https://insights.sbomify.com/MAL-2025-14939/): Malicious code in assert-new-compress-mu-key (npm) (malicious package)
- [MAL-2025-149389](https://insights.sbomify.com/MAL-2025-149389/): Malicious code in webpack-bootes-ariel-envconfig (npm) (malicious package)
- [MAL-2025-149388](https://insights.sbomify.com/MAL-2025-149388/): Malicious code in webpack-apollo-remark-sedna (npm) (malicious package)
- [MAL-2025-149387](https://insights.sbomify.com/MAL-2025-149387/): Malicious code in webpack-andromeda-axios-jovian (npm) (malicious package)
- [MAL-2025-149386](https://insights.sbomify.com/MAL-2025-149386/): Malicious code in webdriverio-terser-webpack-plugin-optimize-css-assets-webpack-plugin-rimraf (npm) (malicious package)
- [MAL-2025-149385](https://insights.sbomify.com/MAL-2025-149385/): Malicious code in webdriverio-telesto-equinox-html-webpack-plugin (npm) (malicious package)
- [MAL-2025-149384](https://insights.sbomify.com/MAL-2025-149384/): Malicious code in webdriverio-supervisor-ignite-puppeteer (npm) (malicious package)
- [MAL-2025-149383](https://insights.sbomify.com/MAL-2025-149383/): Malicious code in webdriverio-sails-perseus-umbra (npm) (malicious package)
- [MAL-2025-149382](https://insights.sbomify.com/MAL-2025-149382/): Malicious code in webdriverio-reveal-md-neptune-aether (npm) (malicious package)
- [MAL-2025-149381](https://insights.sbomify.com/MAL-2025-149381/): Malicious code in webdriverio-relay-update-deneb (npm) (malicious package)
- [MAL-2025-149380](https://insights.sbomify.com/MAL-2025-149380/): Malicious code in webdriverio-private-orbit-terser-webpack-plugin (npm) (malicious package)
- [MAL-2025-14938](https://insights.sbomify.com/MAL-2025-14938/): Malicious code in assapir-test25 (npm) (malicious package)
- [MAL-2025-149379](https://insights.sbomify.com/MAL-2025-149379/): Malicious code in webdriverio-pino-uninstall-atlas (npm) (malicious package)
- [MAL-2025-149378](https://insights.sbomify.com/MAL-2025-149378/): Malicious code in webdriverio-nightwatch-sequelize-global (npm) (malicious package)
- [MAL-2025-149377](https://insights.sbomify.com/MAL-2025-149377/): Malicious code in webdriverio-miranda-atlas-delphinus (npm) (malicious package)
- [MAL-2025-149376](https://insights.sbomify.com/MAL-2025-149376/): Malicious code in webdriverio-metalsmith-foundation-arcturus (npm) (malicious package)
- [MAL-2025-149375](https://insights.sbomify.com/MAL-2025-149375/): Malicious code in webdriverio-meissa-zephyr-convict (npm) (malicious package)
- [MAL-2025-149374](https://insights.sbomify.com/MAL-2025-149374/): Malicious code in webdriverio-link-pino-pretty-got (npm) (malicious package)
- [MAL-2025-149373](https://insights.sbomify.com/MAL-2025-149373/): Malicious code in webdriverio-kastra-despina-enceladus (npm) (malicious package)
- [MAL-2025-149372](https://insights.sbomify.com/MAL-2025-149372/): Malicious code in webdriverio-indus-puppeteer-grunt (npm) (malicious package)
- [MAL-2025-149371](https://insights.sbomify.com/MAL-2025-149371/): Malicious code in webdriverio-impulse-chakra-ui-luna (npm) (malicious package)
- [MAL-2025-149370](https://insights.sbomify.com/MAL-2025-149370/): Malicious code in webdriverio-heka-weywot-fomalhaut (npm) (malicious package)
- [MAL-2025-14937](https://insights.sbomify.com/MAL-2025-14937/): Malicious code in asrulalfi (npm) (malicious package)
- [MAL-2025-149369](https://insights.sbomify.com/MAL-2025-149369/): Malicious code in webdriverio-fornax-duplex-command (npm) (malicious package)
- [MAL-2025-149368](https://insights.sbomify.com/MAL-2025-149368/): Malicious code in webdriverio-eslint-cygnus-elara (npm) (malicious package)
- [MAL-2025-149367](https://insights.sbomify.com/MAL-2025-149367/): Malicious code in webdriverio-electron-eris-version (npm) (malicious package)
- [MAL-2025-149366](https://insights.sbomify.com/MAL-2025-149366/): Malicious code in webdriverio-dotenv-safe-andromeda-cache (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1383/