# Vulnerabilities published in 2025


- [MAL-2025-141714](https://insights.sbomify.com/MAL-2025-141714/): Malicious code in dotenv-parse-variables-cosmiconfig-ignite-eris (npm) (malicious package)
- [MAL-2025-141713](https://insights.sbomify.com/MAL-2025-141713/): Malicious code in dotenv-parse-variables-convict-fusion-vuepress (npm) (malicious package)
- [MAL-2025-141712](https://insights.sbomify.com/MAL-2025-141712/): Malicious code in dotenv-parse-variables-castor-impulse-webdriver-manager (npm) (malicious package)
- [MAL-2025-141711](https://insights.sbomify.com/MAL-2025-141711/): Malicious code in dotenv-parse-variables-callisto-oauth-framework (npm) (malicious package)
- [MAL-2025-141710](https://insights.sbomify.com/MAL-2025-141710/): Malicious code in dotenv-parse-variables-cache-halley-commitlint-config-angular (npm) (malicious package)
- [MAL-2025-14171](https://insights.sbomify.com/MAL-2025-14171/): Malicious code in agyl-mail (npm) (malicious package)
- [MAL-2025-141709](https://insights.sbomify.com/MAL-2025-141709/): Malicious code in dotenv-parse-variables-axios-rimraf-socketio (npm) (malicious package)
- [MAL-2025-141708](https://insights.sbomify.com/MAL-2025-141708/): Malicious code in dotenv-meissa-zephyr-kronos (npm) (malicious package)
- [MAL-2025-141707](https://insights.sbomify.com/MAL-2025-141707/): Malicious code in dotenv-enif-carina-fetch (npm) (malicious package)
- [MAL-2025-141706](https://insights.sbomify.com/MAL-2025-141706/): Malicious code in dotenv-docusaurus-telesto-command (npm) (malicious package)
- [MAL-2025-141705](https://insights.sbomify.com/MAL-2025-141705/): Malicious code in dotenv-csv-jekyll-soap (npm) (malicious package)
- [MAL-2025-141704](https://insights.sbomify.com/MAL-2025-141704/): Malicious code in dotenv-cosmos-promise-css-minimizer-webpack-plugin (npm) (malicious package)
- [MAL-2025-141703](https://insights.sbomify.com/MAL-2025-141703/): Malicious code in dotenv-cassini-andromeda-slides (npm) (malicious package)
- [MAL-2025-141702](https://insights.sbomify.com/MAL-2025-141702/): Malicious code in dotenv-blitz-gatsby-publish (npm) (malicious package)
- [MAL-2025-141701](https://insights.sbomify.com/MAL-2025-141701/): Malicious code in dotenv-avior-native-blitz (npm) (malicious package)
- [MAL-2025-141700](https://insights.sbomify.com/MAL-2025-141700/): Malicious code in dotenv-antares-eslint-plugin-sedna (npm) (malicious package)
- [MAL-2025-14170](https://insights.sbomify.com/MAL-2025-14170/): Malicious code in agus-ubi28-breki (npm) (malicious package)
- [MAL-2025-1417](https://insights.sbomify.com/MAL-2025-1417/): Malicious code in fameex-test (npm) (malicious package)
- [MAL-2025-141699](https://insights.sbomify.com/MAL-2025-141699/): Malicious code in dorado-xanthus-hyperion-repository (npm) (malicious package)
- [MAL-2025-141698](https://insights.sbomify.com/MAL-2025-141698/): Malicious code in dorado-uglify-js-gemini-chalk (npm) (malicious package)
- [MAL-2025-141697](https://insights.sbomify.com/MAL-2025-141697/): Malicious code in dorado-supervisor-child-process-cygnus (npm) (malicious package)
- [MAL-2025-141696](https://insights.sbomify.com/MAL-2025-141696/): Malicious code in dorado-protractor-ariel-farout (npm) (malicious package)
- [MAL-2025-141695](https://insights.sbomify.com/MAL-2025-141695/): Malicious code in dorado-perseus-sequelize-markdownlint (npm) (malicious package)
- [MAL-2025-141694](https://insights.sbomify.com/MAL-2025-141694/): Malicious code in dorado-nuxtjs-procyon-iota (npm) (malicious package)
- [MAL-2025-141693](https://insights.sbomify.com/MAL-2025-141693/): Malicious code in dorado-module-centauri-procyon (npm) (malicious package)
- [MAL-2025-141692](https://insights.sbomify.com/MAL-2025-141692/): Malicious code in dorado-local-dotenv-safe-spawn (npm) (malicious package)
- [MAL-2025-141691](https://insights.sbomify.com/MAL-2025-141691/): Malicious code in dorado-leda-module-repository (npm) (malicious package)
- [MAL-2025-141690](https://insights.sbomify.com/MAL-2025-141690/): Malicious code in dorado-jsonp-alphard-vuetify (npm) (malicious package)
- [MAL-2025-14169](https://insights.sbomify.com/MAL-2025-14169/): Malicious code in agus-tempe97-kuki (npm) (malicious package)
- [MAL-2025-141689](https://insights.sbomify.com/MAL-2025-141689/): Malicious code in dorado-janus-kronos-rigel (npm) (malicious package)
- [MAL-2025-141688](https://insights.sbomify.com/MAL-2025-141688/): Malicious code in dorado-ignite-kronos-prettier-plugin-markdown (npm) (malicious package)
- [MAL-2025-141687](https://insights.sbomify.com/MAL-2025-141687/): Malicious code in dorado-halley-comet-dynamo (npm) (malicious package)
- [MAL-2025-141686](https://insights.sbomify.com/MAL-2025-141686/): Malicious code in dorado-concurrently-process-helios (npm) (malicious package)
- [MAL-2025-141685](https://insights.sbomify.com/MAL-2025-141685/): Malicious code in dorado-comet-cypress-ursa (npm) (malicious package)
- [MAL-2025-141684](https://insights.sbomify.com/MAL-2025-141684/): Malicious code in dorado-chalk-canopus-exec (npm) (malicious package)
- [MAL-2025-141683](https://insights.sbomify.com/MAL-2025-141683/): Malicious code in docusaurus-yakutsk-library-umbriel (npm) (malicious package)
- [MAL-2025-141682](https://insights.sbomify.com/MAL-2025-141682/): Malicious code in docusaurus-winston-ultra-neptune (npm) (malicious package)
- [MAL-2025-141681](https://insights.sbomify.com/MAL-2025-141681/): Malicious code in docusaurus-websockets-sass-loader-upgrade (npm) (malicious package)
- [MAL-2025-141680](https://insights.sbomify.com/MAL-2025-141680/): Malicious code in docusaurus-taurus-ursa-loglevel (npm) (malicious package)
- [MAL-2025-14168](https://insights.sbomify.com/MAL-2025-14168/): Malicious code in agus-rujak77-breki (npm) (malicious package)
- [MAL-2025-141679](https://insights.sbomify.com/MAL-2025-141679/): Malicious code in docusaurus-sync-aurora-aquarius (npm) (malicious package)
- [MAL-2025-141678](https://insights.sbomify.com/MAL-2025-141678/): Malicious code in docusaurus-standard-octans-zephyr (npm) (malicious package)
- [MAL-2025-141677](https://insights.sbomify.com/MAL-2025-141677/): Malicious code in docusaurus-scorpius-sequelize-regulus (npm) (malicious package)
- [MAL-2025-141676](https://insights.sbomify.com/MAL-2025-141676/): Malicious code in docusaurus-rigel-child-process-iota (npm) (malicious package)
- [MAL-2025-141675](https://insights.sbomify.com/MAL-2025-141675/): Malicious code in docusaurus-repository-impulse-yakutsk (npm) (malicious package)
- [MAL-2025-141674](https://insights.sbomify.com/MAL-2025-141674/): Malicious code in docusaurus-pulsar-update-aldebaran (npm) (malicious package)
- [MAL-2025-141673](https://insights.sbomify.com/MAL-2025-141673/): Malicious code in docusaurus-process-jovian-algol (npm) (malicious package)
- [MAL-2025-141672](https://insights.sbomify.com/MAL-2025-141672/): Malicious code in docusaurus-package-odin-helmet (npm) (malicious package)
- [MAL-2025-141671](https://insights.sbomify.com/MAL-2025-141671/): Malicious code in docusaurus-optimize-css-assets-webpack-plugin-vortex-json (npm) (malicious package)
- [MAL-2025-141670](https://insights.sbomify.com/MAL-2025-141670/): Malicious code in docusaurus-lyra-ganymede-electron-builder (npm) (malicious package)
- [MAL-2025-14167](https://insights.sbomify.com/MAL-2025-14167/): Malicious code in agus-getuk15-kuki (npm) (malicious package)
- [MAL-2025-141669](https://insights.sbomify.com/MAL-2025-141669/): Malicious code in docusaurus-kinetic-leda-karma (npm) (malicious package)
- [MAL-2025-141668](https://insights.sbomify.com/MAL-2025-141668/): Malicious code in docusaurus-ignite-chalk-global (npm) (malicious package)
- [MAL-2025-141667](https://insights.sbomify.com/MAL-2025-141667/): Malicious code in docusaurus-hyperion-postcss-jwt (npm) (malicious package)
- [MAL-2025-141666](https://insights.sbomify.com/MAL-2025-141666/): Malicious code in docusaurus-html-webpack-plugin-jovian-geckodriver (npm) (malicious package)
- [MAL-2025-141665](https://insights.sbomify.com/MAL-2025-141665/): Malicious code in docusaurus-geckodriver-quasar-sedna (npm) (malicious package)
- [MAL-2025-141664](https://insights.sbomify.com/MAL-2025-141664/): Malicious code in docusaurus-eslint-config-telesto-callback (npm) (malicious package)
- [MAL-2025-141663](https://insights.sbomify.com/MAL-2025-141663/): Malicious code in docusaurus-envconfig-link-ora (npm) (malicious package)
- [MAL-2025-141662](https://insights.sbomify.com/MAL-2025-141662/): Malicious code in docusaurus-envconfig-equinox-eridanus (npm) (malicious package)
- [MAL-2025-141661](https://insights.sbomify.com/MAL-2025-141661/): Malicious code in docusaurus-enceladus-antd-remark (npm) (malicious package)
- [MAL-2025-141660](https://insights.sbomify.com/MAL-2025-141660/): Malicious code in docusaurus-draco-jekyll-bootstrap (npm) (malicious package)
- [MAL-2025-14166](https://insights.sbomify.com/MAL-2025-14166/): Malicious code in agus-donat95-sukiwir (npm) (malicious package)
- [MAL-2025-141659](https://insights.sbomify.com/MAL-2025-141659/): Malicious code in docusaurus-css-minimizer-webpack-plugin-command-node-sass (npm) (malicious package)
- [MAL-2025-141658](https://insights.sbomify.com/MAL-2025-141658/): Malicious code in docusaurus-cressida-vuetify-cz-conventional-changelog (npm) (malicious package)
- [MAL-2025-141657](https://insights.sbomify.com/MAL-2025-141657/): Malicious code in docusaurus-cosmiconfig-fomalhaut-firebase (npm) (malicious package)
- [MAL-2025-141656](https://insights.sbomify.com/MAL-2025-141656/): Malicious code in docusaurus-cluster-alphard-phenomic (npm) (malicious package)
- [MAL-2025-141655](https://insights.sbomify.com/MAL-2025-141655/): Malicious code in docusaurus-apollo-procyon-yaml (npm) (malicious package)
- [MAL-2025-141654](https://insights.sbomify.com/MAL-2025-141654/): Malicious code in docusaurus-antares-cypress-barnard (npm) (malicious package)
- [MAL-2025-141653](https://insights.sbomify.com/MAL-2025-141653/): Malicious code in dione-warp-fetch-wasat (npm) (malicious package)
- [MAL-2025-141652](https://insights.sbomify.com/MAL-2025-141652/): Malicious code in dione-tool-exec-achernar (npm) (malicious package)
- [MAL-2025-141651](https://insights.sbomify.com/MAL-2025-141651/): Malicious code in dione-subscription-winston-helios (npm) (malicious package)
- [MAL-2025-141650](https://insights.sbomify.com/MAL-2025-141650/): Malicious code in dione-spica-node-sass-puppeteer (npm) (malicious package)
- [MAL-2025-14165](https://insights.sbomify.com/MAL-2025-14165/): Malicious code in agus-brongkos84-breki (npm) (malicious package)
- [MAL-2025-141649](https://insights.sbomify.com/MAL-2025-141649/): Malicious code in dione-sails-quantum-miranda (npm) (malicious package)
- [MAL-2025-141648](https://insights.sbomify.com/MAL-2025-141648/): Malicious code in dione-pavo-regulus-init (npm) (malicious package)
- [MAL-2025-141647](https://insights.sbomify.com/MAL-2025-141647/): Malicious code in dione-ora-sequelize-rocket (npm) (malicious package)
- [MAL-2025-141646](https://insights.sbomify.com/MAL-2025-141646/): Malicious code in dione-nashira-socketio-sagitta (npm) (malicious package)
- [MAL-2025-141645](https://insights.sbomify.com/MAL-2025-141645/): Malicious code in dione-leda-meissa-non-blocking (npm) (malicious package)
- [MAL-2025-141644](https://insights.sbomify.com/MAL-2025-141644/): Malicious code in dione-grus-phoenix-enif (npm) (malicious package)
- [MAL-2025-141643](https://insights.sbomify.com/MAL-2025-141643/): Malicious code in dione-cluster-hexo-helios (npm) (malicious package)
- [MAL-2025-141642](https://insights.sbomify.com/MAL-2025-141642/): Malicious code in dione-aurora-less-loader-pegasus (npm) (malicious package)
- [MAL-2025-141641](https://insights.sbomify.com/MAL-2025-141641/): Malicious code in dione-ariel-zenobia-hydra (npm) (malicious package)
- [MAL-2025-141640](https://insights.sbomify.com/MAL-2025-141640/): Malicious code in development-xo-pegasus-schema (npm) (malicious package)
- [MAL-2025-14164](https://insights.sbomify.com/MAL-2025-14164/): Malicious code in agplayer (npm) (malicious package)
- [MAL-2025-141639](https://insights.sbomify.com/MAL-2025-141639/): Malicious code in development-warp-halley-sagitta (npm) (malicious package)
- [MAL-2025-141638](https://insights.sbomify.com/MAL-2025-141638/): Malicious code in development-version-schema-semantic-release (npm) (malicious package)
- [MAL-2025-141637](https://insights.sbomify.com/MAL-2025-141637/): Malicious code in development-ursa-upgrade-kaus (npm) (malicious package)
- [MAL-2025-141636](https://insights.sbomify.com/MAL-2025-141636/): Malicious code in development-telesto-element-ui-levels (npm) (malicious package)
- [MAL-2025-141635](https://insights.sbomify.com/MAL-2025-141635/): Malicious code in development-taurus-slidev-deneb (npm) (malicious package)
- [MAL-2025-141634](https://insights.sbomify.com/MAL-2025-141634/): Malicious code in development-solis-cross-env-apollo (npm) (malicious package)
- [MAL-2025-141633](https://insights.sbomify.com/MAL-2025-141633/): Malicious code in development-slidev-dotenv-parse-variables-sedna (npm) (malicious package)
- [MAL-2025-141632](https://insights.sbomify.com/MAL-2025-141632/): Malicious code in development-server-electron-builder-hermes (npm) (malicious package)
- [MAL-2025-141631](https://insights.sbomify.com/MAL-2025-141631/): Malicious code in development-sedna-webdriver-mocha-loglevel (npm) (malicious package)
- [MAL-2025-141630](https://insights.sbomify.com/MAL-2025-141630/): Malicious code in development-rimraf-celeste-norma (npm) (malicious package)
- [MAL-2025-14163](https://insights.sbomify.com/MAL-2025-14163/): Malicious code in agostle (npm) (malicious package)
- [MAL-2025-141629](https://insights.sbomify.com/MAL-2025-141629/): Malicious code in development-remark-impulse-hermes (npm) (malicious package)
- [MAL-2025-141628](https://insights.sbomify.com/MAL-2025-141628/): Malicious code in development-query-pm2-uglify-js (npm) (malicious package)
- [MAL-2025-141627](https://insights.sbomify.com/MAL-2025-141627/): Malicious code in development-polaris-lint-staged-procyon (npm) (malicious package)
- [MAL-2025-141626](https://insights.sbomify.com/MAL-2025-141626/): Malicious code in development-nova-carpo-quark (npm) (malicious package)
- [MAL-2025-141625](https://insights.sbomify.com/MAL-2025-141625/): Malicious code in development-mui-avior-halley (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1469/