# Vulnerabilities published in 2025


- [MAL-2025-149365](https://insights.sbomify.com/MAL-2025-149365/): Malicious code in webdriverio-dactyl-node-sass-electron (npm) (malicious package)
- [MAL-2025-149364](https://insights.sbomify.com/MAL-2025-149364/): Malicious code in webdriverio-bellatrix-capella-slides (npm) (malicious package)
- [MAL-2025-149363](https://insights.sbomify.com/MAL-2025-149363/): Malicious code in webdriver-mocha-xml-spica-wezen (npm) (malicious package)
- [MAL-2025-149362](https://insights.sbomify.com/MAL-2025-149362/): Malicious code in webdriver-mocha-sadr-halley-build (npm) (malicious package)
- [MAL-2025-149361](https://insights.sbomify.com/MAL-2025-149361/): Malicious code in webdriver-mocha-run-script-kastra-dactyl (npm) (malicious package)
- [MAL-2025-149360](https://insights.sbomify.com/MAL-2025-149360/): Malicious code in webdriver-mocha-npm-nova-helios (npm) (malicious package)
- [MAL-2025-14936](https://insights.sbomify.com/MAL-2025-14936/): Malicious code in asprom (npm) (malicious package)
- [MAL-2025-149359](https://insights.sbomify.com/MAL-2025-149359/): Malicious code in webdriver-mocha-nightwatch-materialize-toml (npm) (malicious package)
- [MAL-2025-149358](https://insights.sbomify.com/MAL-2025-149358/): Malicious code in webdriver-mocha-nashira-aurora-dotenv-parse-variables (npm) (malicious package)
- [MAL-2025-149357](https://insights.sbomify.com/MAL-2025-149357/): Malicious code in webdriver-mocha-miranda-virgo-hydra (npm) (malicious package)
- [MAL-2025-149356](https://insights.sbomify.com/MAL-2025-149356/): Malicious code in webdriver-mocha-mini-css-extract-plugin-acamar-magellan (npm) (malicious package)
- [MAL-2025-149355](https://insights.sbomify.com/MAL-2025-149355/): Malicious code in webdriver-mocha-metalsmith-ignite-fornax (npm) (malicious package)
- [MAL-2025-149354](https://insights.sbomify.com/MAL-2025-149354/): Malicious code in webdriver-mocha-lint-redis-graphql (npm) (malicious package)
- [MAL-2025-149353](https://insights.sbomify.com/MAL-2025-149353/): Malicious code in webdriver-mocha-leda-vortex-zenobia (npm) (malicious package)
- [MAL-2025-149352](https://insights.sbomify.com/MAL-2025-149352/): Malicious code in webdriver-mocha-leda-prettier-oberon (npm) (malicious package)
- [MAL-2025-149351](https://insights.sbomify.com/MAL-2025-149351/): Malicious code in webdriver-mocha-karma-update-vuepress (npm) (malicious package)
- [MAL-2025-149350](https://insights.sbomify.com/MAL-2025-149350/): Malicious code in webdriver-mocha-jabbah-csv-radiant (npm) (malicious package)
- [MAL-2025-14935](https://insights.sbomify.com/MAL-2025-14935/): Malicious code in asproject (npm) (malicious package)
- [MAL-2025-149349](https://insights.sbomify.com/MAL-2025-149349/): Malicious code in webdriver-mocha-grus-zenobia-sass-loader (npm) (malicious package)
- [MAL-2025-149348](https://insights.sbomify.com/MAL-2025-149348/): Malicious code in webdriver-mocha-geckodriver-alphard-spica (npm) (malicious package)
- [MAL-2025-149347](https://insights.sbomify.com/MAL-2025-149347/): Malicious code in webdriver-mocha-exec-juno-lint-staged (npm) (malicious package)
- [MAL-2025-149346](https://insights.sbomify.com/MAL-2025-149346/): Malicious code in webdriver-mocha-deneb-transform-karma (npm) (malicious package)
- [MAL-2025-149345](https://insights.sbomify.com/MAL-2025-149345/): Malicious code in webdriver-mocha-css-minimizer-webpack-plugin-ursa-cosmiconfig (npm) (malicious package)
- [MAL-2025-149344](https://insights.sbomify.com/MAL-2025-149344/): Malicious code in webdriver-mocha-chakra-ui-neptune-publish (npm) (malicious package)
- [MAL-2025-149343](https://insights.sbomify.com/MAL-2025-149343/): Malicious code in webdriver-mocha-ceres-luna-markdown-pdf (npm) (malicious package)
- [MAL-2025-149342](https://insights.sbomify.com/MAL-2025-149342/): Malicious code in webdriver-mocha-blitz-radiant-perseus (npm) (malicious package)
- [MAL-2025-149341](https://insights.sbomify.com/MAL-2025-149341/): Malicious code in webdriver-mocha-avior-phoebe-hapi (npm) (malicious package)
- [MAL-2025-149340](https://insights.sbomify.com/MAL-2025-149340/): Malicious code in webdriver-mocha-airbnb-dagda-oauth (npm) (malicious package)
- [MAL-2025-14934](https://insights.sbomify.com/MAL-2025-14934/): Malicious code in asphalt-9-legends-tokens-generator (npm) (malicious package)
- [MAL-2025-149339](https://insights.sbomify.com/MAL-2025-149339/): Malicious code in webdriver-manager-yakutsk-meteor-sync (npm) (malicious package)
- [MAL-2025-149338](https://insights.sbomify.com/MAL-2025-149338/): Malicious code in webdriver-manager-xerxes-event-bulma (npm) (malicious package)
- [MAL-2025-149337](https://insights.sbomify.com/MAL-2025-149337/): Malicious code in webdriver-manager-webdriverio-build-tethys (npm) (malicious package)
- [MAL-2025-149336](https://insights.sbomify.com/MAL-2025-149336/): Malicious code in webdriver-manager-titan-mini-css-extract-plugin-izar (npm) (malicious package)
- [MAL-2025-149335](https://insights.sbomify.com/MAL-2025-149335/): Malicious code in webdriver-manager-standard-rest-ini (npm) (malicious package)
- [MAL-2025-149334](https://insights.sbomify.com/MAL-2025-149334/): Malicious code in webdriver-manager-semantic-ui-jekyll-arcturus (npm) (malicious package)
- [MAL-2025-149333](https://insights.sbomify.com/MAL-2025-149333/): Malicious code in webdriver-manager-scorpius-ganymede-restart (npm) (malicious package)
- [MAL-2025-149332](https://insights.sbomify.com/MAL-2025-149332/): Malicious code in webdriver-manager-private-helios-private (npm) (malicious package)
- [MAL-2025-149331](https://insights.sbomify.com/MAL-2025-149331/): Malicious code in webdriver-manager-ophiuchus-magellan-jupiter (npm) (malicious package)
- [MAL-2025-149330](https://insights.sbomify.com/MAL-2025-149330/): Malicious code in webdriver-manager-nodemon-acamar-jupiter (npm) (malicious package)
- [MAL-2025-14933](https://insights.sbomify.com/MAL-2025-14933/): Malicious code in aspen_m90z2_ktm1h_cascade (npm) (malicious package)
- [MAL-2025-149329](https://insights.sbomify.com/MAL-2025-149329/): Malicious code in webdriver-manager-node-config-kronos-prettier (npm) (malicious package)
- [MAL-2025-149328](https://insights.sbomify.com/MAL-2025-149328/): Malicious code in webdriver-manager-nashira-loop-izar (npm) (malicious package)
- [MAL-2025-149327](https://insights.sbomify.com/MAL-2025-149327/): Malicious code in webdriver-manager-materialize-fusion-alphard (npm) (malicious package)
- [MAL-2025-149326](https://insights.sbomify.com/MAL-2025-149326/): Malicious code in webdriver-manager-markdown-postcss-loader-terser-webpack-plugin (npm) (malicious package)
- [MAL-2025-149325](https://insights.sbomify.com/MAL-2025-149325/): Malicious code in webdriver-manager-magellan-install-eslint (npm) (malicious package)
- [MAL-2025-149324](https://insights.sbomify.com/MAL-2025-149324/): Malicious code in webdriver-manager-lyra-nextjs-yakutsk (npm) (malicious package)
- [MAL-2025-149323](https://insights.sbomify.com/MAL-2025-149323/): Malicious code in webdriver-manager-lacerta-selenium-package (npm) (malicious package)
- [MAL-2025-149322](https://insights.sbomify.com/MAL-2025-149322/): Malicious code in webdriver-manager-iota-levels-galaxy (npm) (malicious package)
- [MAL-2025-149321](https://insights.sbomify.com/MAL-2025-149321/): Malicious code in webdriver-manager-io-betelgeuse-cordelia (npm) (malicious package)
- [MAL-2025-149320](https://insights.sbomify.com/MAL-2025-149320/): Malicious code in webdriver-manager-fusion-winston-lacerta (npm) (malicious package)
- [MAL-2025-14932](https://insights.sbomify.com/MAL-2025-14932/): Malicious code in aspen_l9ycs_blrki_zinnia (npm) (malicious package)
- [MAL-2025-149319](https://insights.sbomify.com/MAL-2025-149319/): Malicious code in webdriver-manager-fusion-mongodb-json (npm) (malicious package)
- [MAL-2025-149318](https://insights.sbomify.com/MAL-2025-149318/): Malicious code in webdriver-manager-fetch-epimetheus-dactyl (npm) (malicious package)
- [MAL-2025-149317](https://insights.sbomify.com/MAL-2025-149317/): Malicious code in webdriver-manager-eslint-plugin-stream-private (npm) (malicious package)
- [MAL-2025-149316](https://insights.sbomify.com/MAL-2025-149316/): Malicious code in webdriver-manager-dynamo-gridsome-ariel (npm) (malicious package)
- [MAL-2025-149315](https://insights.sbomify.com/MAL-2025-149315/): Malicious code in webdriver-manager-duplex-aurora-wezen (npm) (malicious package)
- [MAL-2025-149314](https://insights.sbomify.com/MAL-2025-149314/): Malicious code in webdriver-manager-dione-graphql-public (npm) (malicious package)
- [MAL-2025-149313](https://insights.sbomify.com/MAL-2025-149313/): Malicious code in webdriver-manager-chromedriver-fusion-achernar (npm) (malicious package)
- [MAL-2025-149312](https://insights.sbomify.com/MAL-2025-149312/): Malicious code in webdriver-manager-chariklo-aether-phoenix (npm) (malicious package)
- [MAL-2025-149311](https://insights.sbomify.com/MAL-2025-149311/): Malicious code in webdriver-manager-cassini-husky-apex (npm) (malicious package)
- [MAL-2025-149310](https://insights.sbomify.com/MAL-2025-149310/): Malicious code in webdriver-manager-bootstrap-rollup-plugin-callisto (npm) (malicious package)
- [MAL-2025-14931](https://insights.sbomify.com/MAL-2025-14931/): Malicious code in aspen_8afsh_ugcnk_cascade (npm) (malicious package)
- [MAL-2025-149309](https://insights.sbomify.com/MAL-2025-149309/): Malicious code in webdriver-manager-blitz-browserify-webpack (npm) (malicious package)
- [MAL-2025-149308](https://insights.sbomify.com/MAL-2025-149308/): Malicious code in webdriver-manager-altair-chromedriver-express (npm) (malicious package)
- [MAL-2025-149307](https://insights.sbomify.com/MAL-2025-149307/): Malicious code in webdriver-manager-acamar-relay-publish (npm) (malicious package)
- [MAL-2025-149306](https://insights.sbomify.com/MAL-2025-149306/): Malicious code in webdriver-manager-acamar-publish-express (npm) (malicious package)
- [MAL-2025-149305](https://insights.sbomify.com/MAL-2025-149305/): Malicious code in wasat-warp-apollo-leda (npm) (malicious package)
- [MAL-2025-149304](https://insights.sbomify.com/MAL-2025-149304/): Malicious code in wasat-vuepress-quantum-csrf (npm) (malicious package)
- [MAL-2025-149303](https://insights.sbomify.com/MAL-2025-149303/): Malicious code in wasat-terser-sirius-aldebaran (npm) (malicious package)
- [MAL-2025-149302](https://insights.sbomify.com/MAL-2025-149302/): Malicious code in wasat-scripts-ariel-jabbah (npm) (malicious package)
- [MAL-2025-149301](https://insights.sbomify.com/MAL-2025-149301/): Malicious code in wasat-sadr-iota-cross-env (npm) (malicious package)
- [MAL-2025-149300](https://insights.sbomify.com/MAL-2025-149300/): Malicious code in wasat-rollup-plugin-barnard-node-config (npm) (malicious package)
- [MAL-2025-14930](https://insights.sbomify.com/MAL-2025-14930/): Malicious code in aspen_6uohn_zqr7i_kismet (npm) (malicious package)
- [MAL-2025-1493](https://insights.sbomify.com/MAL-2025-1493/): Malicious code in pinot-controller-ui (npm) (malicious package)
- [MAL-2025-149299](https://insights.sbomify.com/MAL-2025-149299/): Malicious code in wasat-restart-loglevel-carpo (npm) (malicious package)
- [MAL-2025-149298](https://insights.sbomify.com/MAL-2025-149298/): Malicious code in wasat-public-commitlint-node-sass (npm) (malicious package)
- [MAL-2025-149297](https://insights.sbomify.com/MAL-2025-149297/): Malicious code in wasat-procyon-semantic-ui-wezen (npm) (malicious package)
- [MAL-2025-149296](https://insights.sbomify.com/MAL-2025-149296/): Malicious code in wasat-npm-frontend-stop (npm) (malicious package)
- [MAL-2025-149295](https://insights.sbomify.com/MAL-2025-149295/): Malicious code in wasat-mui-sadr-nodejs (npm) (malicious package)
- [MAL-2025-149294](https://insights.sbomify.com/MAL-2025-149294/): Malicious code in wasat-mdx-rate-limiter-commitizen (npm) (malicious package)
- [MAL-2025-149293](https://insights.sbomify.com/MAL-2025-149293/): Malicious code in wasat-kinetic-mui-terser (npm) (malicious package)
- [MAL-2025-149292](https://insights.sbomify.com/MAL-2025-149292/): Malicious code in wasat-jabbah-nodemon-spawn (npm) (malicious package)
- [MAL-2025-149291](https://insights.sbomify.com/MAL-2025-149291/): Malicious code in wasat-iota-juno-node-config (npm) (malicious package)
- [MAL-2025-149290](https://insights.sbomify.com/MAL-2025-149290/): Malicious code in wasat-forever-frontend-reveal-md (npm) (malicious package)
- [MAL-2025-14929](https://insights.sbomify.com/MAL-2025-14929/): Malicious code in aspen-yak-uhn020-project (npm) (malicious package)
- [MAL-2025-149289](https://insights.sbomify.com/MAL-2025-149289/): Malicious code in wasat-fetch-event-airbnb (npm) (malicious package)
- [MAL-2025-149288](https://insights.sbomify.com/MAL-2025-149288/): Malicious code in wasat-eslint-plugin-figures-tethys (npm) (malicious package)
- [MAL-2025-149287](https://insights.sbomify.com/MAL-2025-149287/): Malicious code in wasat-eris-juno-dagda (npm) (malicious package)
- [MAL-2025-149286](https://insights.sbomify.com/MAL-2025-149286/): Malicious code in wasat-enceladus-rate-limiter-nuxtjs (npm) (malicious package)
- [MAL-2025-149285](https://insights.sbomify.com/MAL-2025-149285/): Malicious code in wasat-draco-izar-vuepress (npm) (malicious package)
- [MAL-2025-149284](https://insights.sbomify.com/MAL-2025-149284/): Malicious code in wasat-css-minimizer-webpack-plugin-grus-cli (npm) (malicious package)
- [MAL-2025-149283](https://insights.sbomify.com/MAL-2025-149283/): Malicious code in wasat-cli-barnard-style-loader (npm) (malicious package)
- [MAL-2025-149282](https://insights.sbomify.com/MAL-2025-149282/): Malicious code in wasat-celeste-jasmine-test (npm) (malicious package)
- [MAL-2025-149281](https://insights.sbomify.com/MAL-2025-149281/): Malicious code in wasat-buffer-karma-library (npm) (malicious package)
- [MAL-2025-149280](https://insights.sbomify.com/MAL-2025-149280/): Malicious code in wasat-bellatrix-carina-janus (npm) (malicious package)
- [MAL-2025-14928](https://insights.sbomify.com/MAL-2025-14928/): Malicious code in aspen-xerus-erj514-project (npm) (malicious package)
- [MAL-2025-149279](https://insights.sbomify.com/MAL-2025-149279/): Malicious code in wasat-andromeda-phoebe-child-process (npm) (malicious package)
- [MAL-2025-149278](https://insights.sbomify.com/MAL-2025-149278/): Malicious code in wasat-acamar-fork-repository (npm) (malicious package)
- [MAL-2025-149277](https://insights.sbomify.com/MAL-2025-149277/): Malicious code in warp-xanadu-nconf-vuetify (npm) (malicious package)
- [MAL-2025-149276](https://insights.sbomify.com/MAL-2025-149276/): Malicious code in warp-ursa-kastra-centauri (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1384/