# Vulnerabilities published in 2025 - [MAL-2025-141084](https://insights.sbomify.com/MAL-2025-141084/): Malicious code in convict-promise-transform-weywot (npm) (malicious package) - [MAL-2025-141083](https://insights.sbomify.com/MAL-2025-141083/): Malicious code in convict-polaris-init-chai (npm) (malicious package) - [MAL-2025-141082](https://insights.sbomify.com/MAL-2025-141082/): Malicious code in convict-playwright-eris-publish (npm) (malicious package) - [MAL-2025-141081](https://insights.sbomify.com/MAL-2025-141081/): Malicious code in convict-pavo-kaus-redis (npm) (malicious package) - [MAL-2025-141080](https://insights.sbomify.com/MAL-2025-141080/): Malicious code in convict-mocha-castor-proxima (npm) (malicious package) - [MAL-2025-14108](https://insights.sbomify.com/MAL-2025-14108/): Malicious code in adonis-wezen-public-gridsome (npm) (malicious package) - [MAL-2025-141079](https://insights.sbomify.com/MAL-2025-141079/): Malicious code in convict-middleware-gravity-jasmine (npm) (malicious package) - [MAL-2025-141078](https://insights.sbomify.com/MAL-2025-141078/): Malicious code in convict-loopback-ganymede-meissa (npm) (malicious package) - [MAL-2025-141077](https://insights.sbomify.com/MAL-2025-141077/): Malicious code in convict-jsonp-query-castor (npm) (malicious package) - [MAL-2025-141076](https://insights.sbomify.com/MAL-2025-141076/): Malicious code in convict-impulse-electron-builder-cordelia (npm) (malicious package) - [MAL-2025-141075](https://insights.sbomify.com/MAL-2025-141075/): Malicious code in convict-hercules-comet-umbra (npm) (malicious package) - [MAL-2025-141074](https://insights.sbomify.com/MAL-2025-141074/): Malicious code in convict-gemini-quark-command (npm) (malicious package) - [MAL-2025-141073](https://insights.sbomify.com/MAL-2025-141073/): Malicious code in convict-fork-pyxis-library (npm) (malicious package) - [MAL-2025-141072](https://insights.sbomify.com/MAL-2025-141072/): Malicious code in convict-enceladus-docusaurus-style-loader (npm) (malicious package) - [MAL-2025-141071](https://insights.sbomify.com/MAL-2025-141071/): Malicious code in convict-cypress-lacerta-postcss (npm) (malicious package) - [MAL-2025-141070](https://insights.sbomify.com/MAL-2025-141070/): Malicious code in convict-cross-env-fornax-buffer (npm) (malicious package) - [MAL-2025-14107](https://insights.sbomify.com/MAL-2025-14107/): Malicious code in adonis-inquirer-redis-capella (npm) (malicious package) - [MAL-2025-141069](https://insights.sbomify.com/MAL-2025-141069/): Malicious code in convict-atlas-ophiuchus-prettier (npm) (malicious package) - [MAL-2025-141068](https://insights.sbomify.com/MAL-2025-141068/): Malicious code in configstore-xenon-promise-jest (npm) (malicious package) - [MAL-2025-141067](https://insights.sbomify.com/MAL-2025-141067/): Malicious code in configstore-wasat-wezen-ora (npm) (malicious package) - [MAL-2025-141066](https://insights.sbomify.com/MAL-2025-141066/): Malicious code in configstore-titan-spica-cache (npm) (malicious package) - [MAL-2025-141065](https://insights.sbomify.com/MAL-2025-141065/): Malicious code in configstore-sync-magellan-jabbah (npm) (malicious package) - [MAL-2025-141064](https://insights.sbomify.com/MAL-2025-141064/): Malicious code in configstore-semantic-ui-iota-google (npm) (malicious package) - [MAL-2025-141063](https://insights.sbomify.com/MAL-2025-141063/): Malicious code in configstore-rollup-nconf-altair (npm) (malicious package) - [MAL-2025-141062](https://insights.sbomify.com/MAL-2025-141062/): Malicious code in configstore-repository-terser-canopus (npm) (malicious package) - [MAL-2025-141061](https://insights.sbomify.com/MAL-2025-141061/): Malicious code in configstore-publish-callback-atlas (npm) (malicious package) - [MAL-2025-141060](https://insights.sbomify.com/MAL-2025-141060/): Malicious code in configstore-prettier-css-loader-neptune (npm) (malicious package) - [MAL-2025-14106](https://insights.sbomify.com/MAL-2025-14106/): Malicious code in adonis-bootstrap-mantle-loop (npm) (malicious package) - [MAL-2025-141059](https://insights.sbomify.com/MAL-2025-141059/): Malicious code in configstore-playwright-charon-standard (npm) (malicious package) - [MAL-2025-141058](https://insights.sbomify.com/MAL-2025-141058/): Malicious code in configstore-markdown-convict-auth0 (npm) (malicious package) - [MAL-2025-141057](https://insights.sbomify.com/MAL-2025-141057/): Malicious code in configstore-magellan-express-hermes (npm) (malicious package) - [MAL-2025-141056](https://insights.sbomify.com/MAL-2025-141056/): Malicious code in configstore-koa-auriga-ariel (npm) (malicious package) - [MAL-2025-141055](https://insights.sbomify.com/MAL-2025-141055/): Malicious code in configstore-jasmine-ceres-epimetheus (npm) (malicious package) - [MAL-2025-141054](https://insights.sbomify.com/MAL-2025-141054/): Malicious code in configstore-graphql-pm2-virgo (npm) (malicious package) - [MAL-2025-141053](https://insights.sbomify.com/MAL-2025-141053/): Malicious code in configstore-gacrux-centauri-cassini (npm) (malicious package) - [MAL-2025-141052](https://insights.sbomify.com/MAL-2025-141052/): Malicious code in configstore-fusion-mensa-winston (npm) (malicious package) - [MAL-2025-141051](https://insights.sbomify.com/MAL-2025-141051/): Malicious code in configstore-firebase-dotenv-parse-variables-auth (npm) (malicious package) - [MAL-2025-141050](https://insights.sbomify.com/MAL-2025-141050/): Malicious code in configstore-enif-development-altair (npm) (malicious package) - [MAL-2025-14105](https://insights.sbomify.com/MAL-2025-14105/): Malicious code in adomino (npm) (malicious package) - [MAL-2025-141049](https://insights.sbomify.com/MAL-2025-141049/): Malicious code in configstore-enceladus-reveal-md-semantic-ui (npm) (malicious package) - [MAL-2025-141048](https://insights.sbomify.com/MAL-2025-141048/): Malicious code in configstore-dotenv-safe-chakra-ui-corvus (npm) (malicious package) - [MAL-2025-141047](https://insights.sbomify.com/MAL-2025-141047/): Malicious code in configstore-cygnus-envconfig-mongoose (npm) (malicious package) - [MAL-2025-141046](https://insights.sbomify.com/MAL-2025-141046/): Malicious code in configstore-callback-redis-gemini (npm) (malicious package) - [MAL-2025-141045](https://insights.sbomify.com/MAL-2025-141045/): Malicious code in configstore-apollo-mira-ariel (npm) (malicious package) - [MAL-2025-141044](https://insights.sbomify.com/MAL-2025-141044/): Malicious code in config-xenos-procyon-europa (npm) (malicious package) - [MAL-2025-141043](https://insights.sbomify.com/MAL-2025-141043/): Malicious code in config-wezen-nightmare-loop (npm) (malicious package) - [MAL-2025-141042](https://insights.sbomify.com/MAL-2025-141042/): Malicious code in config-umbriel-tailwindcss-webpack (npm) (malicious package) - [MAL-2025-141041](https://insights.sbomify.com/MAL-2025-141041/): Malicious code in config-terser-webpack-plugin-husky-eleventy (npm) (malicious package) - [MAL-2025-141040](https://insights.sbomify.com/MAL-2025-141040/): Malicious code in config-sync-stream-jasmine (npm) (malicious package) - [MAL-2025-14104](https://insights.sbomify.com/MAL-2025-14104/): Malicious code in admithub-react-diagrams (npm) (malicious package) - [MAL-2025-141039](https://insights.sbomify.com/MAL-2025-141039/): Malicious code in config-sails-repository-prompts (npm) (malicious package) - [MAL-2025-141038](https://insights.sbomify.com/MAL-2025-141038/): Malicious code in config-resolvers-dynamo-elektra (npm) (malicious package) - [MAL-2025-141037](https://insights.sbomify.com/MAL-2025-141037/): Malicious code in config-puppeteer-spica-jupiter (npm) (malicious package) - [MAL-2025-141036](https://insights.sbomify.com/MAL-2025-141036/): Malicious code in config-proxima-duplex-adonis (npm) (malicious package) - [MAL-2025-141035](https://insights.sbomify.com/MAL-2025-141035/): Malicious code in config-promise-weywot-cz-conventional-changelog (npm) (malicious package) - [MAL-2025-141034](https://insights.sbomify.com/MAL-2025-141034/): Malicious code in config-ophiuchus-karma-centaurus (npm) (malicious package) - [MAL-2025-141033](https://insights.sbomify.com/MAL-2025-141033/): Malicious code in config-meteor-start-pino (npm) (malicious package) - [MAL-2025-141032](https://insights.sbomify.com/MAL-2025-141032/): Malicious code in config-meissa-norma-webpack (npm) (malicious package) - [MAL-2025-141031](https://insights.sbomify.com/MAL-2025-141031/): Malicious code in config-lyra-solis-meissa (npm) (malicious package) - [MAL-2025-141030](https://insights.sbomify.com/MAL-2025-141030/): Malicious code in config-lynx-bulma-webdriver-mocha (npm) (malicious package) - [MAL-2025-14103](https://insights.sbomify.com/MAL-2025-14103/): Malicious code in adminsms (npm) (malicious package) - [MAL-2025-141029](https://insights.sbomify.com/MAL-2025-141029/): Malicious code in config-lint-staged-backend-mui (npm) (malicious package) - [MAL-2025-141028](https://insights.sbomify.com/MAL-2025-141028/): Malicious code in config-leda-cygnus-perseus (npm) (malicious package) - [MAL-2025-141027](https://insights.sbomify.com/MAL-2025-141027/): Malicious code in config-jabbah-zephyr-nightmare (npm) (malicious package) - [MAL-2025-141026](https://insights.sbomify.com/MAL-2025-141026/): Malicious code in config-izar-fetch-local (npm) (malicious package) - [MAL-2025-141025](https://insights.sbomify.com/MAL-2025-141025/): Malicious code in config-gridsome-rehype-io (npm) (malicious package) - [MAL-2025-141024](https://insights.sbomify.com/MAL-2025-141024/): Malicious code in config-ganymede-hugo-magellan (npm) (malicious package) - [MAL-2025-141023](https://insights.sbomify.com/MAL-2025-141023/): Malicious code in config-galaxy-rimraf-quito (npm) (malicious package) - [MAL-2025-141022](https://insights.sbomify.com/MAL-2025-141022/): Malicious code in config-gacrux-readable-loglevel (npm) (malicious package) - [MAL-2025-141021](https://insights.sbomify.com/MAL-2025-141021/): Malicious code in config-foundation-equinox-betelgeuse (npm) (malicious package) - [MAL-2025-141020](https://insights.sbomify.com/MAL-2025-141020/): Malicious code in config-commitlint-config-angular-jwt-halley (npm) (malicious package) - [MAL-2025-14102](https://insights.sbomify.com/MAL-2025-14102/): Malicious code in adminns (npm) (malicious package) - [MAL-2025-141019](https://insights.sbomify.com/MAL-2025-141019/): Malicious code in config-commitlint-config-angular-foundation-spica (npm) (malicious package) - [MAL-2025-141018](https://insights.sbomify.com/MAL-2025-141018/): Malicious code in concurrently-ursa-betelgeuse-betelgeuse (npm) (malicious package) - [MAL-2025-141017](https://insights.sbomify.com/MAL-2025-141017/): Malicious code in concurrently-umbriel-jabbah-meteor (npm) (malicious package) - [MAL-2025-141016](https://insights.sbomify.com/MAL-2025-141016/): Malicious code in concurrently-transform-prettier-stylelint-halley (npm) (malicious package) - [MAL-2025-141015](https://insights.sbomify.com/MAL-2025-141015/): Malicious code in concurrently-subscription-zenobia-commitlint (npm) (malicious package) - [MAL-2025-141014](https://insights.sbomify.com/MAL-2025-141014/): Malicious code in concurrently-standard-bellatrix-element-ui (npm) (malicious package) - [MAL-2025-141013](https://insights.sbomify.com/MAL-2025-141013/): Malicious code in concurrently-server-elektra-ignite (npm) (malicious package) - [MAL-2025-141012](https://insights.sbomify.com/MAL-2025-141012/): Malicious code in concurrently-rollup-plugin-pino-pretty-mui (npm) (malicious package) - [MAL-2025-141011](https://insights.sbomify.com/MAL-2025-141011/): Malicious code in concurrently-public-rest-capella (npm) (malicious package) - [MAL-2025-141010](https://insights.sbomify.com/MAL-2025-141010/): Malicious code in concurrently-ophiuchus-cordelia-algol (npm) (malicious package) - [MAL-2025-14101](https://insights.sbomify.com/MAL-2025-14101/): Malicious code in adminfun (npm) (malicious package) - [MAL-2025-141009](https://insights.sbomify.com/MAL-2025-141009/): Malicious code in concurrently-oberon-docusaurus-version (npm) (malicious package) - [MAL-2025-141008](https://insights.sbomify.com/MAL-2025-141008/): Malicious code in concurrently-koa-jupiter-morgan (npm) (malicious package) - [MAL-2025-141007](https://insights.sbomify.com/MAL-2025-141007/): Malicious code in concurrently-hexo-weywot-html-webpack-plugin (npm) (malicious package) - [MAL-2025-141006](https://insights.sbomify.com/MAL-2025-141006/): Malicious code in concurrently-fusion-init-izar (npm) (malicious package) - [MAL-2025-141005](https://insights.sbomify.com/MAL-2025-141005/): Malicious code in concurrently-firebase-remark-postcss-loader (npm) (malicious package) - [MAL-2025-141004](https://insights.sbomify.com/MAL-2025-141004/): Malicious code in concurrently-deimos-scorpius-kaus (npm) (malicious package) - [MAL-2025-141003](https://insights.sbomify.com/MAL-2025-141003/): Malicious code in concurrently-centauri-writable-betelgeuse (npm) (malicious package) - [MAL-2025-141002](https://insights.sbomify.com/MAL-2025-141002/): Malicious code in concurrently-async-graphql-triton (npm) (malicious package) - [MAL-2025-141001](https://insights.sbomify.com/MAL-2025-141001/): Malicious code in concurrently-apex-promise-dotenv-parse-variables (npm) (malicious package) - [MAL-2025-141000](https://insights.sbomify.com/MAL-2025-141000/): Malicious code in concurrently-algol-express-eridanus (npm) (malicious package) - [MAL-2025-14100](https://insights.sbomify.com/MAL-2025-14100/): Malicious code in admindmeo (npm) (malicious package) - [MAL-2025-1410](https://insights.sbomify.com/MAL-2025-1410/): Malicious code in digifinex-main (npm) (malicious package) - [MAL-2025-141](https://insights.sbomify.com/MAL-2025-141/): Malicious code in serve-static-corell (npm) (malicious package) - [MAL-2025-140999](https://insights.sbomify.com/MAL-2025-140999/): Malicious code in comprehensive-silver-penguin (npm) (malicious package) - [MAL-2025-140998](https://insights.sbomify.com/MAL-2025-140998/): Malicious code in commitlint-zenobia-run-script-superagent (npm) (malicious package) - [MAL-2025-140997](https://insights.sbomify.com/MAL-2025-140997/): Malicious code in commitlint-xerxes-deimos-adonis (npm) (malicious package) - [MAL-2025-140996](https://insights.sbomify.com/MAL-2025-140996/): Malicious code in commitlint-webdriver-mocha-titan-auth0 (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/1476/