# Vulnerabilities published in 2025


- [MAL-2025-141444](https://insights.sbomify.com/MAL-2025-141444/): Malicious code in dactyl-inquirer-version-webpack (npm) (malicious package)
- [MAL-2025-141443](https://insights.sbomify.com/MAL-2025-141443/): Malicious code in dactyl-galaxy-quasar-uglify-js (npm) (malicious package)
- [MAL-2025-141442](https://insights.sbomify.com/MAL-2025-141442/): Malicious code in dactyl-foundation-deneb-markdownlint (npm) (malicious package)
- [MAL-2025-141441](https://insights.sbomify.com/MAL-2025-141441/): Malicious code in dactyl-fornax-procyon-halley (npm) (malicious package)
- [MAL-2025-141440](https://insights.sbomify.com/MAL-2025-141440/): Malicious code in dactyl-flare-galaxy-galaxy (npm) (malicious package)
- [MAL-2025-14144](https://insights.sbomify.com/MAL-2025-14144/): Malicious code in afondevi-generator-api-cli (npm) (malicious package)
- [MAL-2025-141439](https://insights.sbomify.com/MAL-2025-141439/): Malicious code in dactyl-epimetheus-child-process-pino-pretty (npm) (malicious package)
- [MAL-2025-141438](https://insights.sbomify.com/MAL-2025-141438/): Malicious code in dactyl-cygnus-carpo-magellan (npm) (malicious package)
- [MAL-2025-141437](https://insights.sbomify.com/MAL-2025-141437/): Malicious code in cz-conventional-changelog-zenobia-javascript-grus (npm) (malicious package)
- [MAL-2025-141436](https://insights.sbomify.com/MAL-2025-141436/): Malicious code in cz-conventional-changelog-transform-kinetic-slidev (npm) (malicious package)
- [MAL-2025-141435](https://insights.sbomify.com/MAL-2025-141435/): Malicious code in cz-conventional-changelog-supervisor-loglevel-phoebe (npm) (malicious package)
- [MAL-2025-141434](https://insights.sbomify.com/MAL-2025-141434/): Malicious code in cz-conventional-changelog-subscription-loopback-titan (npm) (malicious package)
- [MAL-2025-141433](https://insights.sbomify.com/MAL-2025-141433/): Malicious code in cz-conventional-changelog-scorpius-cygnus-transport (npm) (malicious package)
- [MAL-2025-141432](https://insights.sbomify.com/MAL-2025-141432/): Malicious code in cz-conventional-changelog-request-axios-resolvers (npm) (malicious package)
- [MAL-2025-141431](https://insights.sbomify.com/MAL-2025-141431/): Malicious code in cz-conventional-changelog-readable-version-cz-conventional-changelog (npm) (malicious package)
- [MAL-2025-141430](https://insights.sbomify.com/MAL-2025-141430/): Malicious code in cz-conventional-changelog-quito-config-typeorm (npm) (malicious package)
- [MAL-2025-14143](https://insights.sbomify.com/MAL-2025-14143/): Malicious code in afisha-logger (npm) (malicious package)
- [MAL-2025-141429](https://insights.sbomify.com/MAL-2025-141429/): Malicious code in cz-conventional-changelog-publish-celeste-antares (npm) (malicious package)
- [MAL-2025-141428](https://insights.sbomify.com/MAL-2025-141428/): Malicious code in cz-conventional-changelog-procyon-remark-cluster (npm) (malicious package)
- [MAL-2025-141427](https://insights.sbomify.com/MAL-2025-141427/): Malicious code in cz-conventional-changelog-private-superagent-module (npm) (malicious package)
- [MAL-2025-141426](https://insights.sbomify.com/MAL-2025-141426/): Malicious code in cz-conventional-changelog-phenomic-uninstall-phoebe (npm) (malicious package)
- [MAL-2025-141425](https://insights.sbomify.com/MAL-2025-141425/): Malicious code in cz-conventional-changelog-nashira-blitz-terser (npm) (malicious package)
- [MAL-2025-141424](https://insights.sbomify.com/MAL-2025-141424/): Malicious code in cz-conventional-changelog-markdown-metalsmith-commitizen (npm) (malicious package)
- [MAL-2025-141423](https://insights.sbomify.com/MAL-2025-141423/): Malicious code in cz-conventional-changelog-kastra-rollup-nightwatch (npm) (malicious package)
- [MAL-2025-141422](https://insights.sbomify.com/MAL-2025-141422/): Malicious code in cz-conventional-changelog-kastra-procyon-ganymede (npm) (malicious package)
- [MAL-2025-141421](https://insights.sbomify.com/MAL-2025-141421/): Malicious code in cz-conventional-changelog-json-postcss-babel (npm) (malicious package)
- [MAL-2025-141420](https://insights.sbomify.com/MAL-2025-141420/): Malicious code in cz-conventional-changelog-ini-equinox-enif (npm) (malicious package)
- [MAL-2025-14142](https://insights.sbomify.com/MAL-2025-14142/): Malicious code in afisha-config (npm) (malicious package)
- [MAL-2025-141419](https://insights.sbomify.com/MAL-2025-141419/): Malicious code in cz-conventional-changelog-express-concurrently-juno (npm) (malicious package)
- [MAL-2025-141418](https://insights.sbomify.com/MAL-2025-141418/): Malicious code in cz-conventional-changelog-eslint-config-server-zenobia (npm) (malicious package)
- [MAL-2025-141417](https://insights.sbomify.com/MAL-2025-141417/): Malicious code in cz-conventional-changelog-dotenv-parse-variables-optimize-css-assets-webpack-plugin-elektra (npm) (malicious package)
- [MAL-2025-141416](https://insights.sbomify.com/MAL-2025-141416/): Malicious code in cz-conventional-changelog-dorado-commitlint-config-angular-relay (npm) (malicious package)
- [MAL-2025-141415](https://insights.sbomify.com/MAL-2025-141415/): Malicious code in cz-conventional-changelog-comet-prompts-link (npm) (malicious package)
- [MAL-2025-141414](https://insights.sbomify.com/MAL-2025-141414/): Malicious code in cz-conventional-changelog-cassini-websockets-tethys (npm) (malicious package)
- [MAL-2025-141413](https://insights.sbomify.com/MAL-2025-141413/): Malicious code in cz-conventional-changelog-apollo-europa-child-process (npm) (malicious package)
- [MAL-2025-141412](https://insights.sbomify.com/MAL-2025-141412/): Malicious code in cypress-zephyr-hermes-pegasus (npm) (malicious package)
- [MAL-2025-141411](https://insights.sbomify.com/MAL-2025-141411/): Malicious code in cypress-upgrade-yildun-atlas (npm) (malicious package)
- [MAL-2025-141410](https://insights.sbomify.com/MAL-2025-141410/): Malicious code in cypress-unuk-helios-bellatrix (npm) (malicious package)
- [MAL-2025-14141](https://insights.sbomify.com/MAL-2025-14141/): Malicious code in afisha-ab-configurator (npm) (malicious package)
- [MAL-2025-141409](https://insights.sbomify.com/MAL-2025-141409/): Malicious code in cypress-triton-figures-sails (npm) (malicious package)
- [MAL-2025-141408](https://insights.sbomify.com/MAL-2025-141408/): Malicious code in cypress-spectron-webdriver-postcss-loader-canopus (npm) (malicious package)
- [MAL-2025-141407](https://insights.sbomify.com/MAL-2025-141407/): Malicious code in cypress-sails-quasar-json (npm) (malicious package)
- [MAL-2025-141406](https://insights.sbomify.com/MAL-2025-141406/): Malicious code in cypress-repository-rimraf-nebula (npm) (malicious package)
- [MAL-2025-141405](https://insights.sbomify.com/MAL-2025-141405/): Malicious code in cypress-redis-postgres-bulma (npm) (malicious package)
- [MAL-2025-141404](https://insights.sbomify.com/MAL-2025-141404/): Malicious code in cypress-quark-celeste-sails (npm) (malicious package)
- [MAL-2025-141403](https://insights.sbomify.com/MAL-2025-141403/): Malicious code in cypress-optimize-css-assets-webpack-plugin-pino-umbriel (npm) (malicious package)
- [MAL-2025-141402](https://insights.sbomify.com/MAL-2025-141402/): Malicious code in cypress-nashira-configstore-prettier-plugin-markdown (npm) (malicious package)
- [MAL-2025-141401](https://insights.sbomify.com/MAL-2025-141401/): Malicious code in cypress-library-markdownlint-kinetic (npm) (malicious package)
- [MAL-2025-141400](https://insights.sbomify.com/MAL-2025-141400/): Malicious code in cypress-library-centaurus-meteor (npm) (malicious package)
- [MAL-2025-14140](https://insights.sbomify.com/MAL-2025-14140/): Malicious code in afifcapcut112tea (npm) (malicious package)
- [MAL-2025-1414](https://insights.sbomify.com/MAL-2025-1414/): Malicious code in fameex-dev (npm) (malicious package)
- [MAL-2025-141399](https://insights.sbomify.com/MAL-2025-141399/): Malicious code in cypress-hexo-publish-fomalhaut (npm) (malicious package)
- [MAL-2025-141398](https://insights.sbomify.com/MAL-2025-141398/): Malicious code in cypress-got-cosmos-jwt (npm) (malicious package)
- [MAL-2025-141397](https://insights.sbomify.com/MAL-2025-141397/): Malicious code in cypress-css-minimizer-webpack-plugin-webpack-configstore (npm) (malicious package)
- [MAL-2025-141396](https://insights.sbomify.com/MAL-2025-141396/): Malicious code in cypress-cressida-altair-odin (npm) (malicious package)
- [MAL-2025-141395](https://insights.sbomify.com/MAL-2025-141395/): Malicious code in cypress-config-slides-warp (npm) (malicious package)
- [MAL-2025-141394](https://insights.sbomify.com/MAL-2025-141394/): Malicious code in cypress-chakra-ui-umbriel-gemini (npm) (malicious package)
- [MAL-2025-141393](https://insights.sbomify.com/MAL-2025-141393/): Malicious code in cypress-blitz-typeorm-xenon (npm) (malicious package)
- [MAL-2025-141392](https://insights.sbomify.com/MAL-2025-141392/): Malicious code in cypress-apollo-geckodriver-mongoose (npm) (malicious package)
- [MAL-2025-141391](https://insights.sbomify.com/MAL-2025-141391/): Malicious code in cypress-antd-fornax-barnard (npm) (malicious package)
- [MAL-2025-141390](https://insights.sbomify.com/MAL-2025-141390/): Malicious code in cypress-alphard-proxima-pegasus (npm) (malicious package)
- [MAL-2025-14139](https://insights.sbomify.com/MAL-2025-14139/): Malicious code in afifaljafari112tea (npm) (malicious package)
- [MAL-2025-141389](https://insights.sbomify.com/MAL-2025-141389/): Malicious code in cygnus-zenobia-castor-release-it (npm) (malicious package)
- [MAL-2025-141388](https://insights.sbomify.com/MAL-2025-141388/): Malicious code in cygnus-upgrade-frontend-nightmare (npm) (malicious package)
- [MAL-2025-141387](https://insights.sbomify.com/MAL-2025-141387/): Malicious code in cygnus-umbriel-inquirer-rollup (npm) (malicious package)
- [MAL-2025-141386](https://insights.sbomify.com/MAL-2025-141386/): Malicious code in cygnus-testcafe-triton-proxima (npm) (malicious package)
- [MAL-2025-141385](https://insights.sbomify.com/MAL-2025-141385/): Malicious code in cygnus-tailwindcss-cz-conventional-changelog-reveal-md (npm) (malicious package)
- [MAL-2025-141384](https://insights.sbomify.com/MAL-2025-141384/): Malicious code in cygnus-subscription-sqlite-radiant (npm) (malicious package)
- [MAL-2025-141383](https://insights.sbomify.com/MAL-2025-141383/): Malicious code in cygnus-subscription-loglevel-castor (npm) (malicious package)
- [MAL-2025-141382](https://insights.sbomify.com/MAL-2025-141382/): Malicious code in cygnus-style-loader-sqlite-solis (npm) (malicious package)
- [MAL-2025-141381](https://insights.sbomify.com/MAL-2025-141381/): Malicious code in cygnus-stream-lyra-apex (npm) (malicious package)
- [MAL-2025-141380](https://insights.sbomify.com/MAL-2025-141380/): Malicious code in cygnus-standard-apollo-mira (npm) (malicious package)
- [MAL-2025-14138](https://insights.sbomify.com/MAL-2025-14138/): Malicious code in afglobal (npm) (malicious package)
- [MAL-2025-141379](https://insights.sbomify.com/MAL-2025-141379/): Malicious code in cygnus-schema-pino-playwright (npm) (malicious package)
- [MAL-2025-141378](https://insights.sbomify.com/MAL-2025-141378/): Malicious code in cygnus-rollup-package-native (npm) (malicious package)
- [MAL-2025-141377](https://insights.sbomify.com/MAL-2025-141377/): Malicious code in cygnus-publish-apollo-husky (npm) (malicious package)
- [MAL-2025-141376](https://insights.sbomify.com/MAL-2025-141376/): Malicious code in cygnus-pm2-husky-loglevel (npm) (malicious package)
- [MAL-2025-141375](https://insights.sbomify.com/MAL-2025-141375/): Malicious code in cygnus-pino-pretty-pm2-version (npm) (malicious package)
- [MAL-2025-141374](https://insights.sbomify.com/MAL-2025-141374/): Malicious code in cygnus-module-browserify-winston (npm) (malicious package)
- [MAL-2025-141373](https://insights.sbomify.com/MAL-2025-141373/): Malicious code in cygnus-levels-subscription-hermes (npm) (malicious package)
- [MAL-2025-141372](https://insights.sbomify.com/MAL-2025-141372/): Malicious code in cygnus-karma-prettier-plugin-markdown-winston (npm) (malicious package)
- [MAL-2025-141371](https://insights.sbomify.com/MAL-2025-141371/): Malicious code in cygnus-jupiter-markdown-pdf-electron-builder (npm) (malicious package)
- [MAL-2025-141370](https://insights.sbomify.com/MAL-2025-141370/): Malicious code in cygnus-ini-duplex-eris (npm) (malicious package)
- [MAL-2025-14137](https://insights.sbomify.com/MAL-2025-14137/): Malicious code in affirm-assets (npm) (malicious package)
- [MAL-2025-141369](https://insights.sbomify.com/MAL-2025-141369/): Malicious code in cygnus-html-webpack-plugin-convict-sagitta (npm) (malicious package)
- [MAL-2025-141368](https://insights.sbomify.com/MAL-2025-141368/): Malicious code in cygnus-hercules-altair-ultra (npm) (malicious package)
- [MAL-2025-141367](https://insights.sbomify.com/MAL-2025-141367/): Malicious code in cygnus-heka-mensa-hermes (npm) (malicious package)
- [MAL-2025-141366](https://insights.sbomify.com/MAL-2025-141366/): Malicious code in cygnus-eslint-changelog-sedna (npm) (malicious package)
- [MAL-2025-141365](https://insights.sbomify.com/MAL-2025-141365/): Malicious code in cygnus-draco-local-rollup-plugin (npm) (malicious package)
- [MAL-2025-141364](https://insights.sbomify.com/MAL-2025-141364/): Malicious code in cygnus-cache-magellan-run-script (npm) (malicious package)
- [MAL-2025-141363](https://insights.sbomify.com/MAL-2025-141363/): Malicious code in cygnus-avior-perseus-auth0 (npm) (malicious package)
- [MAL-2025-141362](https://insights.sbomify.com/MAL-2025-141362/): Malicious code in cygnus-atlas-juno-phenomic (npm) (malicious package)
- [MAL-2025-141361](https://insights.sbomify.com/MAL-2025-141361/): Malicious code in csv-ultra-wezen-astro (npm) (malicious package)
- [MAL-2025-141360](https://insights.sbomify.com/MAL-2025-141360/): Malicious code in csv-test-subscription-nebula (npm) (malicious package)
- [MAL-2025-14136](https://insights.sbomify.com/MAL-2025-14136/): Malicious code in affinegap (npm) (malicious package)
- [MAL-2025-141359](https://insights.sbomify.com/MAL-2025-141359/): Malicious code in csv-subscription-apollo-meissa (npm) (malicious package)
- [MAL-2025-141358](https://insights.sbomify.com/MAL-2025-141358/): Malicious code in csv-sedna-epimetheus-yaml (npm) (malicious package)
- [MAL-2025-141357](https://insights.sbomify.com/MAL-2025-141357/): Malicious code in csv-schema-alphard-taurus (npm) (malicious package)
- [MAL-2025-141356](https://insights.sbomify.com/MAL-2025-141356/): Malicious code in csv-rollup-dotenv-yonder (npm) (malicious package)
- [MAL-2025-141355](https://insights.sbomify.com/MAL-2025-141355/): Malicious code in csv-quantum-gemini-meteor (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1472/