# Vulnerabilities published in 2025


- [MAL-2025-141264](https://insights.sbomify.com/MAL-2025-141264/): Malicious code in cross-env-pegasus-async-ganymede (npm) (malicious package)
- [MAL-2025-141263](https://insights.sbomify.com/MAL-2025-141263/): Malicious code in cross-env-parcel-forever-perseus (npm) (malicious package)
- [MAL-2025-141262](https://insights.sbomify.com/MAL-2025-141262/): Malicious code in cross-env-optimize-css-assets-webpack-plugin-dependencies-nightwatch (npm) (malicious package)
- [MAL-2025-141261](https://insights.sbomify.com/MAL-2025-141261/): Malicious code in cross-env-nodemon-sedna-local (npm) (malicious package)
- [MAL-2025-141260](https://insights.sbomify.com/MAL-2025-141260/): Malicious code in cross-env-nightmare-public-buffer (npm) (malicious package)
- [MAL-2025-14126](https://insights.sbomify.com/MAL-2025-14126/): Malicious code in aedmapper (npm) (malicious package)
- [MAL-2025-141259](https://insights.sbomify.com/MAL-2025-141259/): Malicious code in cross-env-mongoose-juno-sequelize (npm) (malicious package)
- [MAL-2025-141258](https://insights.sbomify.com/MAL-2025-141258/): Malicious code in cross-env-init-sedna-telesto (npm) (malicious package)
- [MAL-2025-141257](https://insights.sbomify.com/MAL-2025-141257/): Malicious code in cross-env-hydra-vega-terser-webpack-plugin (npm) (malicious package)
- [MAL-2025-141256](https://insights.sbomify.com/MAL-2025-141256/): Malicious code in cross-env-gemini-oauth-weywot (npm) (malicious package)
- [MAL-2025-141255](https://insights.sbomify.com/MAL-2025-141255/): Malicious code in cross-env-geckodriver-pino-pretty-nightwatch (npm) (malicious package)
- [MAL-2025-141254](https://insights.sbomify.com/MAL-2025-141254/): Malicious code in cross-env-ganymede-leda-markdown-pdf (npm) (malicious package)
- [MAL-2025-141253](https://insights.sbomify.com/MAL-2025-141253/): Malicious code in cross-env-fornax-hugo-quito (npm) (malicious package)
- [MAL-2025-141252](https://insights.sbomify.com/MAL-2025-141252/): Malicious code in cross-env-despina-uglify-js-terser (npm) (malicious package)
- [MAL-2025-141251](https://insights.sbomify.com/MAL-2025-141251/): Malicious code in cross-env-dactyl-regulus-ini (npm) (malicious package)
- [MAL-2025-141250](https://insights.sbomify.com/MAL-2025-141250/): Malicious code in cross-env-csv-sedna-bunyan (npm) (malicious package)
- [MAL-2025-14125](https://insights.sbomify.com/MAL-2025-14125/): Malicious code in adyen-cse-js-2mundos (npm) (malicious package)
- [MAL-2025-141249](https://insights.sbomify.com/MAL-2025-141249/): Malicious code in cross-env-betelgeuse-pm2-mongoose (npm) (malicious package)
- [MAL-2025-141248](https://insights.sbomify.com/MAL-2025-141248/): Malicious code in cressida-xanadu-delphinus-sqlite (npm) (malicious package)
- [MAL-2025-141247](https://insights.sbomify.com/MAL-2025-141247/): Malicious code in cressida-vuepress-nconf-xml (npm) (malicious package)
- [MAL-2025-141246](https://insights.sbomify.com/MAL-2025-141246/): Malicious code in cressida-subscription-heka-public (npm) (malicious package)
- [MAL-2025-141245](https://insights.sbomify.com/MAL-2025-141245/): Malicious code in cressida-soap-atlas-eris (npm) (malicious package)
- [MAL-2025-141244](https://insights.sbomify.com/MAL-2025-141244/): Malicious code in cressida-sirius-rocket-fornax (npm) (malicious package)
- [MAL-2025-141243](https://insights.sbomify.com/MAL-2025-141243/): Malicious code in cressida-sequelize-wolf-terser-webpack-plugin (npm) (malicious package)
- [MAL-2025-141242](https://insights.sbomify.com/MAL-2025-141242/): Malicious code in cressida-scorpius-prettier-plugin-markdown-ursa (npm) (malicious package)
- [MAL-2025-141241](https://insights.sbomify.com/MAL-2025-141241/): Malicious code in cressida-repository-mutation-thuban (npm) (malicious package)
- [MAL-2025-141240](https://insights.sbomify.com/MAL-2025-141240/): Malicious code in cressida-redis-figures-regulus (npm) (malicious package)
- [MAL-2025-14124](https://insights.sbomify.com/MAL-2025-14124/): Malicious code in adyaxtest (npm) (malicious package)
- [MAL-2025-141239](https://insights.sbomify.com/MAL-2025-141239/): Malicious code in cressida-nebula-sass-loader-algol (npm) (malicious package)
- [MAL-2025-141238](https://insights.sbomify.com/MAL-2025-141238/): Malicious code in cressida-mocha-magellan-oberon (npm) (malicious package)
- [MAL-2025-141237](https://insights.sbomify.com/MAL-2025-141237/): Malicious code in cressida-loopback-chromedriver-chariklo (npm) (malicious package)
- [MAL-2025-141236](https://insights.sbomify.com/MAL-2025-141236/): Malicious code in cressida-loop-regulus-tailwindcss (npm) (malicious package)
- [MAL-2025-141235](https://insights.sbomify.com/MAL-2025-141235/): Malicious code in cressida-ini-markdownlint-yakutsk (npm) (malicious package)
- [MAL-2025-141234](https://insights.sbomify.com/MAL-2025-141234/): Malicious code in cressida-graphql-apollo-gacrux (npm) (malicious package)
- [MAL-2025-141233](https://insights.sbomify.com/MAL-2025-141233/): Malicious code in cressida-gatsby-sirius-apollo (npm) (malicious package)
- [MAL-2025-141232](https://insights.sbomify.com/MAL-2025-141232/): Malicious code in cressida-ganymede-firebase-google (npm) (malicious package)
- [MAL-2025-141231](https://insights.sbomify.com/MAL-2025-141231/): Malicious code in cressida-exec-element-ui-farout (npm) (malicious package)
- [MAL-2025-141230](https://insights.sbomify.com/MAL-2025-141230/): Malicious code in cressida-eris-perseus-playwright (npm) (malicious package)
- [MAL-2025-14123](https://insights.sbomify.com/MAL-2025-14123/): Malicious code in adwebsite (npm) (malicious package)
- [MAL-2025-141229](https://insights.sbomify.com/MAL-2025-141229/): Malicious code in cressida-eris-non-blocking-bulma (npm) (malicious package)
- [MAL-2025-141228](https://insights.sbomify.com/MAL-2025-141228/): Malicious code in cressida-cygnus-commitlint-config-angular-readable (npm) (malicious package)
- [MAL-2025-141227](https://insights.sbomify.com/MAL-2025-141227/): Malicious code in cressida-cygnus-chariklo-magellan (npm) (malicious package)
- [MAL-2025-141226](https://insights.sbomify.com/MAL-2025-141226/): Malicious code in cressida-cosmiconfig-bulma-global (npm) (malicious package)
- [MAL-2025-141225](https://insights.sbomify.com/MAL-2025-141225/): Malicious code in cressida-castor-await-telesto (npm) (malicious package)
- [MAL-2025-141224](https://insights.sbomify.com/MAL-2025-141224/): Malicious code in cressida-bootstrap-draco-gatsby (npm) (malicious package)
- [MAL-2025-141223](https://insights.sbomify.com/MAL-2025-141223/): Malicious code in cressida-acamar-charon-spectron-webdriver (npm) (malicious package)
- [MAL-2025-141222](https://insights.sbomify.com/MAL-2025-141222/): Malicious code in cosmos-yonder-bunyan-sagitta (npm) (malicious package)
- [MAL-2025-141221](https://insights.sbomify.com/MAL-2025-141221/): Malicious code in cosmos-soap-pegasus-package (npm) (malicious package)
- [MAL-2025-141220](https://insights.sbomify.com/MAL-2025-141220/): Malicious code in cosmos-sirius-elektra-eslint (npm) (malicious package)
- [MAL-2025-14122](https://insights.sbomify.com/MAL-2025-14122/): Malicious code in advertiser-module (npm) (malicious package)
- [MAL-2025-141219](https://insights.sbomify.com/MAL-2025-141219/): Malicious code in cosmos-selenium-sequelize-ultra (npm) (malicious package)
- [MAL-2025-141218](https://insights.sbomify.com/MAL-2025-141218/): Malicious code in cosmos-rest-commitlint-config-angular-async (npm) (malicious package)
- [MAL-2025-141217](https://insights.sbomify.com/MAL-2025-141217/): Malicious code in cosmos-query-wezen-repository (npm) (malicious package)
- [MAL-2025-141216](https://insights.sbomify.com/MAL-2025-141216/): Malicious code in cosmos-proxima-xerxes-uglify-js (npm) (malicious package)
- [MAL-2025-141215](https://insights.sbomify.com/MAL-2025-141215/): Malicious code in cosmos-proxima-luna-orbit (npm) (malicious package)
- [MAL-2025-141214](https://insights.sbomify.com/MAL-2025-141214/): Malicious code in cosmos-postcss-loader-iota-eslint-config (npm) (malicious package)
- [MAL-2025-141213](https://insights.sbomify.com/MAL-2025-141213/): Malicious code in cosmos-ora-draco-version (npm) (malicious package)
- [MAL-2025-141212](https://insights.sbomify.com/MAL-2025-141212/): Malicious code in cosmos-nightwatch-sync-redis (npm) (malicious package)
- [MAL-2025-141211](https://insights.sbomify.com/MAL-2025-141211/): Malicious code in cosmos-nightmare-xenon-electron-builder (npm) (malicious package)
- [MAL-2025-141210](https://insights.sbomify.com/MAL-2025-141210/): Malicious code in cosmos-mutation-eslint-vega (npm) (malicious package)
- [MAL-2025-14121](https://insights.sbomify.com/MAL-2025-14121/): Malicious code in advertapp (npm) (malicious package)
- [MAL-2025-141209](https://insights.sbomify.com/MAL-2025-141209/): Malicious code in cosmos-metalsmith-lint-staged-tethys (npm) (malicious package)
- [MAL-2025-141208](https://insights.sbomify.com/MAL-2025-141208/): Malicious code in cosmos-jsonp-sequelize-cosmos (npm) (malicious package)
- [MAL-2025-141207](https://insights.sbomify.com/MAL-2025-141207/): Malicious code in cosmos-helmet-grus-cross-env (npm) (malicious package)
- [MAL-2025-141206](https://insights.sbomify.com/MAL-2025-141206/): Malicious code in cosmos-eslint-transform-ini (npm) (malicious package)
- [MAL-2025-141205](https://insights.sbomify.com/MAL-2025-141205/): Malicious code in cosmos-cypress-registry-nova (npm) (malicious package)
- [MAL-2025-141204](https://insights.sbomify.com/MAL-2025-141204/): Malicious code in cosmos-cygnus-lyra-restart (npm) (malicious package)
- [MAL-2025-141203](https://insights.sbomify.com/MAL-2025-141203/): Malicious code in cosmos-commitizen-quito-orbit (npm) (malicious package)
- [MAL-2025-141202](https://insights.sbomify.com/MAL-2025-141202/): Malicious code in cosmos-bunyan-ophiuchus-perseus (npm) (malicious package)
- [MAL-2025-141201](https://insights.sbomify.com/MAL-2025-141201/): Malicious code in cosmos-browserify-transport-ganymede (npm) (malicious package)
- [MAL-2025-141200](https://insights.sbomify.com/MAL-2025-141200/): Malicious code in cosmos-blitz-got-cache (npm) (malicious package)
- [MAL-2025-14120](https://insights.sbomify.com/MAL-2025-14120/): Malicious code in adv-web-publishing-assignment-2 (npm) (malicious package)
- [MAL-2025-1412](https://insights.sbomify.com/MAL-2025-1412/): Malicious code in electron-dependency-confusion-window (npm) (malicious package)
- [MAL-2025-141199](https://insights.sbomify.com/MAL-2025-141199/): Malicious code in cosmos-antares-avior-hermes (npm) (malicious package)
- [MAL-2025-141198](https://insights.sbomify.com/MAL-2025-141198/): Malicious code in cosmiconfig-thuban-scripts-centaurus (npm) (malicious package)
- [MAL-2025-141197](https://insights.sbomify.com/MAL-2025-141197/): Malicious code in cosmiconfig-tethys-jwt-grunt (npm) (malicious package)
- [MAL-2025-141196](https://insights.sbomify.com/MAL-2025-141196/): Malicious code in cosmiconfig-release-it-xenon-pyxis (npm) (malicious package)
- [MAL-2025-141195](https://insights.sbomify.com/MAL-2025-141195/): Malicious code in cosmiconfig-release-it-betelgeuse-commitlint (npm) (malicious package)
- [MAL-2025-141194](https://insights.sbomify.com/MAL-2025-141194/): Malicious code in cosmiconfig-prettier-stylelint-centaurus-antares (npm) (malicious package)
- [MAL-2025-141193](https://insights.sbomify.com/MAL-2025-141193/): Malicious code in cosmiconfig-prettier-plugin-markdown-yonder-jabbah (npm) (malicious package)
- [MAL-2025-141192](https://insights.sbomify.com/MAL-2025-141192/): Malicious code in cosmiconfig-playwright-geckodriver-europa (npm) (malicious package)
- [MAL-2025-141191](https://insights.sbomify.com/MAL-2025-141191/): Malicious code in cosmiconfig-nextjs-tailwindcss-polaris (npm) (malicious package)
- [MAL-2025-141190](https://insights.sbomify.com/MAL-2025-141190/): Malicious code in cosmiconfig-neptune-public-luna (npm) (malicious package)
- [MAL-2025-14119](https://insights.sbomify.com/MAL-2025-14119/): Malicious code in AdultJS (npm) (malicious package)
- [MAL-2025-141189](https://insights.sbomify.com/MAL-2025-141189/): Malicious code in cosmiconfig-mongoose-nuxtjs-eridanus (npm) (malicious package)
- [MAL-2025-141188](https://insights.sbomify.com/MAL-2025-141188/): Malicious code in cosmiconfig-mongoose-elektra-corvus (npm) (malicious package)
- [MAL-2025-141187](https://insights.sbomify.com/MAL-2025-141187/): Malicious code in cosmiconfig-mocha-mdx-phoebe (npm) (malicious package)
- [MAL-2025-141186](https://insights.sbomify.com/MAL-2025-141186/): Malicious code in cosmiconfig-meteor-draco-antares (npm) (malicious package)
- [MAL-2025-141185](https://insights.sbomify.com/MAL-2025-141185/): Malicious code in cosmiconfig-jovian-husky-callisto (npm) (malicious package)
- [MAL-2025-141184](https://insights.sbomify.com/MAL-2025-141184/): Malicious code in cosmiconfig-hexo-blitz-tethys (npm) (malicious package)
- [MAL-2025-141183](https://insights.sbomify.com/MAL-2025-141183/): Malicious code in cosmiconfig-google-commitlint-sagitta (npm) (malicious package)
- [MAL-2025-141182](https://insights.sbomify.com/MAL-2025-141182/): Malicious code in cosmiconfig-gemini-wolf-publish (npm) (malicious package)
- [MAL-2025-141181](https://insights.sbomify.com/MAL-2025-141181/): Malicious code in cosmiconfig-gemini-fornax-impulse (npm) (malicious package)
- [MAL-2025-141180](https://insights.sbomify.com/MAL-2025-141180/): Malicious code in cosmiconfig-firebase-warp-subscription (npm) (malicious package)
- [MAL-2025-14118](https://insights.sbomify.com/MAL-2025-14118/): Malicious code in adueband (npm) (malicious package)
- [MAL-2025-141179](https://insights.sbomify.com/MAL-2025-141179/): Malicious code in cosmiconfig-eleventy-nightwatch-procyon (npm) (malicious package)
- [MAL-2025-141178](https://insights.sbomify.com/MAL-2025-141178/): Malicious code in cosmiconfig-dagda-spectron-commitizen (npm) (malicious package)
- [MAL-2025-141177](https://insights.sbomify.com/MAL-2025-141177/): Malicious code in cosmiconfig-cressida-style-loader-registry (npm) (malicious package)
- [MAL-2025-141176](https://insights.sbomify.com/MAL-2025-141176/): Malicious code in cosmiconfig-convict-despina-nuxtjs (npm) (malicious package)
- [MAL-2025-141175](https://insights.sbomify.com/MAL-2025-141175/): Malicious code in cosmiconfig-cassini-commitlint-config-angular-equinox (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1474/