# Vulnerabilities published in 2025


- [MAL-2025-141174](https://insights.sbomify.com/MAL-2025-141174/): Malicious code in cosmiconfig-barnard-markdown-pdf-webdriver-manager (npm) (malicious package)
- [MAL-2025-141173](https://insights.sbomify.com/MAL-2025-141173/): Malicious code in cosmiconfig-await-cressida-inquirer (npm) (malicious package)
- [MAL-2025-141172](https://insights.sbomify.com/MAL-2025-141172/): Malicious code in cosmiconfig-avior-got-changelog (npm) (malicious package)
- [MAL-2025-141171](https://insights.sbomify.com/MAL-2025-141171/): Malicious code in corvus-wolf-update-ganymede (npm) (malicious package)
- [MAL-2025-141170](https://insights.sbomify.com/MAL-2025-141170/): Malicious code in corvus-wezen-airbnb-zenith (npm) (malicious package)
- [MAL-2025-14117](https://insights.sbomify.com/MAL-2025-14117/): Malicious code in adthukqreywxibln (npm) (malicious package)
- [MAL-2025-141169](https://insights.sbomify.com/MAL-2025-141169/): Malicious code in corvus-webdriver-manager-vulcan-upgrade (npm) (malicious package)
- [MAL-2025-141168](https://insights.sbomify.com/MAL-2025-141168/): Malicious code in corvus-tool-eris-uninstall (npm) (malicious package)
- [MAL-2025-141167](https://insights.sbomify.com/MAL-2025-141167/): Malicious code in corvus-tethys-elektra-less-loader (npm) (malicious package)
- [MAL-2025-141166](https://insights.sbomify.com/MAL-2025-141166/): Malicious code in corvus-readable-cluster-yonder (npm) (malicious package)
- [MAL-2025-141165](https://insights.sbomify.com/MAL-2025-141165/): Malicious code in corvus-puppeteer-eslint-config-mysql (npm) (malicious package)
- [MAL-2025-141164](https://insights.sbomify.com/MAL-2025-141164/): Malicious code in corvus-pino-docusaurus-webdriver-mocha (npm) (malicious package)
- [MAL-2025-141163](https://insights.sbomify.com/MAL-2025-141163/): Malicious code in corvus-perseus-chariklo-dotenv (npm) (malicious package)
- [MAL-2025-141162](https://insights.sbomify.com/MAL-2025-141162/): Malicious code in corvus-ophiuchus-kastra-auth0 (npm) (malicious package)
- [MAL-2025-141161](https://insights.sbomify.com/MAL-2025-141161/): Malicious code in corvus-node-sass-delphinus-nightwatch (npm) (malicious package)
- [MAL-2025-141160](https://insights.sbomify.com/MAL-2025-141160/): Malicious code in corvus-miranda-hyperion-quark (npm) (malicious package)
- [MAL-2025-14116](https://insights.sbomify.com/MAL-2025-14116/): Malicious code in adsdk (npm) (malicious package)
- [MAL-2025-141159](https://insights.sbomify.com/MAL-2025-141159/): Malicious code in corvus-luna-chromedriver-sync (npm) (malicious package)
- [MAL-2025-141158](https://insights.sbomify.com/MAL-2025-141158/): Malicious code in corvus-loopback-yildun-standard (npm) (malicious package)
- [MAL-2025-141157](https://insights.sbomify.com/MAL-2025-141157/): Malicious code in corvus-levels-winston-apex (npm) (malicious package)
- [MAL-2025-141156](https://insights.sbomify.com/MAL-2025-141156/): Malicious code in corvus-hermes-kronos-optimize-css-assets-webpack-plugin (npm) (malicious package)
- [MAL-2025-141155](https://insights.sbomify.com/MAL-2025-141155/): Malicious code in corvus-forever-ophiuchus-chromedriver (npm) (malicious package)
- [MAL-2025-141154](https://insights.sbomify.com/MAL-2025-141154/): Malicious code in corvus-eslint-plugin-tool-commitlint-config-angular (npm) (malicious package)
- [MAL-2025-141153](https://insights.sbomify.com/MAL-2025-141153/): Malicious code in corvus-enceladus-lint-staged-private (npm) (malicious package)
- [MAL-2025-141152](https://insights.sbomify.com/MAL-2025-141152/): Malicious code in corvus-enceladus-aquarius-sagitta (npm) (malicious package)
- [MAL-2025-141151](https://insights.sbomify.com/MAL-2025-141151/): Malicious code in corvus-elektra-meteor-mongodb (npm) (malicious package)
- [MAL-2025-141150](https://insights.sbomify.com/MAL-2025-141150/): Malicious code in corvus-dotenv-safe-uninstall-babel (npm) (malicious package)
- [MAL-2025-14115](https://insights.sbomify.com/MAL-2025-14115/): Malicious code in adrum (npm) (malicious package)
- [MAL-2025-141149](https://insights.sbomify.com/MAL-2025-141149/): Malicious code in corvus-despina-spectron-webdriver-dione (npm) (malicious package)
- [MAL-2025-141148](https://insights.sbomify.com/MAL-2025-141148/): Malicious code in corvus-corvus-atlas-scripts (npm) (malicious package)
- [MAL-2025-141147](https://insights.sbomify.com/MAL-2025-141147/): Malicious code in corvus-chariklo-jekyll-husky (npm) (malicious package)
- [MAL-2025-141146](https://insights.sbomify.com/MAL-2025-141146/): Malicious code in corvus-callisto-hercules-kaus (npm) (malicious package)
- [MAL-2025-141145](https://insights.sbomify.com/MAL-2025-141145/): Malicious code in corvus-aquarius-sagitta-forever (npm) (malicious package)
- [MAL-2025-141144](https://insights.sbomify.com/MAL-2025-141144/): Malicious code in corvus-aquarius-pm2-hyperion (npm) (malicious package)
- [MAL-2025-141143](https://insights.sbomify.com/MAL-2025-141143/): Malicious code in cors-webdriver-mocha-perseus-subscription (npm) (malicious package)
- [MAL-2025-141142](https://insights.sbomify.com/MAL-2025-141142/): Malicious code in cors-vuetify-mensa-webpack (npm) (malicious package)
- [MAL-2025-141141](https://insights.sbomify.com/MAL-2025-141141/): Malicious code in cors-venus-ganymede-ophiuchus (npm) (malicious package)
- [MAL-2025-141140](https://insights.sbomify.com/MAL-2025-141140/): Malicious code in cors-spinner-firebase-radiant (npm) (malicious package)
- [MAL-2025-14114](https://insights.sbomify.com/MAL-2025-14114/): Malicious code in adroper (npm) (malicious package)
- [MAL-2025-141139](https://insights.sbomify.com/MAL-2025-141139/): Malicious code in cors-slidev-leda-ora (npm) (malicious package)
- [MAL-2025-141138](https://insights.sbomify.com/MAL-2025-141138/): Malicious code in cors-slidev-json-thuban (npm) (malicious package)
- [MAL-2025-141137](https://insights.sbomify.com/MAL-2025-141137/): Malicious code in cors-semantic-release-sagitta-registry (npm) (malicious package)
- [MAL-2025-141136](https://insights.sbomify.com/MAL-2025-141136/): Malicious code in cors-semantic-release-eris-webdriverio (npm) (malicious package)
- [MAL-2025-141135](https://insights.sbomify.com/MAL-2025-141135/): Malicious code in cors-schema-nightwatch-postcss-loader (npm) (malicious package)
- [MAL-2025-141134](https://insights.sbomify.com/MAL-2025-141134/): Malicious code in cors-rest-charon-koa (npm) (malicious package)
- [MAL-2025-141133](https://insights.sbomify.com/MAL-2025-141133/): Malicious code in cors-repository-algol-eleventy (npm) (malicious package)
- [MAL-2025-141132](https://insights.sbomify.com/MAL-2025-141132/): Malicious code in cors-registry-cross-env-alphard (npm) (malicious package)
- [MAL-2025-141131](https://insights.sbomify.com/MAL-2025-141131/): Malicious code in cors-redis-stop-alphard (npm) (malicious package)
- [MAL-2025-141130](https://insights.sbomify.com/MAL-2025-141130/): Malicious code in cors-publish-commitlint-nextjs (npm) (malicious package)
- [MAL-2025-14113](https://insights.sbomify.com/MAL-2025-14113/): Malicious code in adril7122 (npm) (malicious package)
- [MAL-2025-141129](https://insights.sbomify.com/MAL-2025-141129/): Malicious code in cors-mdx-spica-adonis (npm) (malicious package)
- [MAL-2025-141128](https://insights.sbomify.com/MAL-2025-141128/): Malicious code in cors-levels-babel-scripts (npm) (malicious package)
- [MAL-2025-141127](https://insights.sbomify.com/MAL-2025-141127/): Malicious code in cors-izar-fusion-terser-webpack-plugin (npm) (malicious package)
- [MAL-2025-141126](https://insights.sbomify.com/MAL-2025-141126/): Malicious code in cors-hermes-apollo-scorpius (npm) (malicious package)
- [MAL-2025-141125](https://insights.sbomify.com/MAL-2025-141125/): Malicious code in cors-ganymede-typeorm-stop (npm) (malicious package)
- [MAL-2025-141124](https://insights.sbomify.com/MAL-2025-141124/): Malicious code in cors-ganymede-charon-process (npm) (malicious package)
- [MAL-2025-141123](https://insights.sbomify.com/MAL-2025-141123/): Malicious code in cors-ganymede-antd-odin (npm) (malicious package)
- [MAL-2025-141122](https://insights.sbomify.com/MAL-2025-141122/): Malicious code in cors-gacrux-spinner-aether (npm) (malicious package)
- [MAL-2025-141121](https://insights.sbomify.com/MAL-2025-141121/): Malicious code in cors-framework-promise-sass-loader (npm) (malicious package)
- [MAL-2025-141120](https://insights.sbomify.com/MAL-2025-141120/): Malicious code in cors-equinox-convict-rollup-plugin (npm) (malicious package)
- [MAL-2025-14112](https://insights.sbomify.com/MAL-2025-14112/): Malicious code in adrenline (npm) (malicious package)
- [MAL-2025-141119](https://insights.sbomify.com/MAL-2025-141119/): Malicious code in cors-comet-ceres-bellatrix (npm) (malicious package)
- [MAL-2025-141118](https://insights.sbomify.com/MAL-2025-141118/): Malicious code in cors-chakra-ui-norma-callback (npm) (malicious package)
- [MAL-2025-141117](https://insights.sbomify.com/MAL-2025-141117/): Malicious code in cors-carpo-webdriver-mocha-start (npm) (malicious package)
- [MAL-2025-141116](https://insights.sbomify.com/MAL-2025-141116/): Malicious code in cors-cache-docusaurus-morgan (npm) (malicious package)
- [MAL-2025-141115](https://insights.sbomify.com/MAL-2025-141115/): Malicious code in cors-antares-kastra-blaze (npm) (malicious package)
- [MAL-2025-141114](https://insights.sbomify.com/MAL-2025-141114/): Malicious code in cors-antares-commitlint-config-angular-iota (npm) (malicious package)
- [MAL-2025-141113](https://insights.sbomify.com/MAL-2025-141113/): Malicious code in cors-aldebaran-aldebaran-cz-conventional-changelog (npm) (malicious package)
- [MAL-2025-141112](https://insights.sbomify.com/MAL-2025-141112/): Malicious code in cordelia-transport-axios-janus (npm) (malicious package)
- [MAL-2025-141111](https://insights.sbomify.com/MAL-2025-141111/): Malicious code in cordelia-taurus-child-process-google (npm) (malicious package)
- [MAL-2025-141110](https://insights.sbomify.com/MAL-2025-141110/): Malicious code in cordelia-sirius-markdownlint-magellan (npm) (malicious package)
- [MAL-2025-14111](https://insights.sbomify.com/MAL-2025-14111/): Malicious code in adp.ds.ui.actionbar (npm) (malicious package)
- [MAL-2025-141109](https://insights.sbomify.com/MAL-2025-141109/): Malicious code in cordelia-shelljs-gulp-optimize-css-assets-webpack-plugin (npm) (malicious package)
- [MAL-2025-141108](https://insights.sbomify.com/MAL-2025-141108/): Malicious code in cordelia-protractor-csrf-colors (npm) (malicious package)
- [MAL-2025-141107](https://insights.sbomify.com/MAL-2025-141107/): Malicious code in cordelia-orbit-mutation-prompts (npm) (malicious package)
- [MAL-2025-141106](https://insights.sbomify.com/MAL-2025-141106/): Malicious code in cordelia-non-blocking-local-sequelize (npm) (malicious package)
- [MAL-2025-141105](https://insights.sbomify.com/MAL-2025-141105/): Malicious code in cordelia-node-sass-titan-janus (npm) (malicious package)
- [MAL-2025-141104](https://insights.sbomify.com/MAL-2025-141104/): Malicious code in cordelia-mutation-halley-uglify-js (npm) (malicious package)
- [MAL-2025-141103](https://insights.sbomify.com/MAL-2025-141103/): Malicious code in cordelia-miranda-dotenv-safe-command (npm) (malicious package)
- [MAL-2025-141102](https://insights.sbomify.com/MAL-2025-141102/): Malicious code in cordelia-meteor-figures-ursa (npm) (malicious package)
- [MAL-2025-141101](https://insights.sbomify.com/MAL-2025-141101/): Malicious code in cordelia-markdownlint-vuetify-epimetheus (npm) (malicious package)
- [MAL-2025-141100](https://insights.sbomify.com/MAL-2025-141100/): Malicious code in cordelia-kastra-mui-quito (npm) (malicious package)
- [MAL-2025-14110](https://insights.sbomify.com/MAL-2025-14110/): Malicious code in adorn-cascade-wpn602-project (npm) (malicious package)
- [MAL-2025-1411](https://insights.sbomify.com/MAL-2025-1411/): Malicious code in digifinex-test (npm) (malicious package)
- [MAL-2025-141099](https://insights.sbomify.com/MAL-2025-141099/): Malicious code in cordelia-enceladus-cache-helmet (npm) (malicious package)
- [MAL-2025-141098](https://insights.sbomify.com/MAL-2025-141098/): Malicious code in cordelia-cressida-quantum-dactyl (npm) (malicious package)
- [MAL-2025-141097](https://insights.sbomify.com/MAL-2025-141097/): Malicious code in cordelia-chalk-warp-reveal-md (npm) (malicious package)
- [MAL-2025-141096](https://insights.sbomify.com/MAL-2025-141096/): Malicious code in cordelia-chakra-ui-acamar-bunyan (npm) (malicious package)
- [MAL-2025-141095](https://insights.sbomify.com/MAL-2025-141095/): Malicious code in cordelia-ceres-passport-hercules (npm) (malicious package)
- [MAL-2025-141094](https://insights.sbomify.com/MAL-2025-141094/): Malicious code in cordelia-blaze-mini-css-extract-plugin-markdown-pdf (npm) (malicious package)
- [MAL-2025-141093](https://insights.sbomify.com/MAL-2025-141093/): Malicious code in convict-telesto-fomalhaut-canopus (npm) (malicious package)
- [MAL-2025-141092](https://insights.sbomify.com/MAL-2025-141092/): Malicious code in convict-superagent-leda-titan (npm) (malicious package)
- [MAL-2025-141091](https://insights.sbomify.com/MAL-2025-141091/): Malicious code in convict-sagitta-capella-remark (npm) (malicious package)
- [MAL-2025-141090](https://insights.sbomify.com/MAL-2025-141090/): Malicious code in convict-rollup-plugin-buffer-sagitta (npm) (malicious package)
- [MAL-2025-14109](https://insights.sbomify.com/MAL-2025-14109/): Malicious code in adorn (npm) (malicious package)
- [MAL-2025-141089](https://insights.sbomify.com/MAL-2025-141089/): Malicious code in convict-relay-docusaurus-bootstrap (npm) (malicious package)
- [MAL-2025-141088](https://insights.sbomify.com/MAL-2025-141088/): Malicious code in convict-rehype-callback-npm (npm) (malicious package)
- [MAL-2025-141087](https://insights.sbomify.com/MAL-2025-141087/): Malicious code in convict-rate-limiter-semantic-release-cypress (npm) (malicious package)
- [MAL-2025-141086](https://insights.sbomify.com/MAL-2025-141086/): Malicious code in convict-query-nodejs-prettier (npm) (malicious package)
- [MAL-2025-141085](https://insights.sbomify.com/MAL-2025-141085/): Malicious code in convict-pulsar-odin-pegasus (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1475/