# Vulnerabilities published in 2025


- [MAL-2025-140995](https://insights.sbomify.com/MAL-2025-140995/): Malicious code in commitlint-triton-less-loader-umbra (npm) (malicious package)
- [MAL-2025-140994](https://insights.sbomify.com/MAL-2025-140994/): Malicious code in commitlint-readable-standard-levels (npm) (malicious package)
- [MAL-2025-140993](https://insights.sbomify.com/MAL-2025-140993/): Malicious code in commitlint-miranda-express-eslint-plugin (npm) (malicious package)
- [MAL-2025-140992](https://insights.sbomify.com/MAL-2025-140992/): Malicious code in commitlint-meteor-centauri-dione (npm) (malicious package)
- [MAL-2025-140991](https://insights.sbomify.com/MAL-2025-140991/): Malicious code in commitlint-link-rigel-elektra (npm) (malicious package)
- [MAL-2025-140990](https://insights.sbomify.com/MAL-2025-140990/): Malicious code in commitlint-jovian-exec-figures (npm) (malicious package)
- [MAL-2025-14099](https://insights.sbomify.com/MAL-2025-14099/): Malicious code in adminci (npm) (malicious package)
- [MAL-2025-140989](https://insights.sbomify.com/MAL-2025-140989/): Malicious code in commitlint-inquirer-run-script-dotenv-parse-variables (npm) (malicious package)
- [MAL-2025-140988](https://insights.sbomify.com/MAL-2025-140988/): Malicious code in commitlint-hyperion-morgan-gridsome (npm) (malicious package)
- [MAL-2025-140987](https://insights.sbomify.com/MAL-2025-140987/): Malicious code in commitlint-hercules-slidev-draco (npm) (malicious package)
- [MAL-2025-140986](https://insights.sbomify.com/MAL-2025-140986/): Malicious code in commitlint-got-graphql-blaze (npm) (malicious package)
- [MAL-2025-140985](https://insights.sbomify.com/MAL-2025-140985/): Malicious code in commitlint-figures-bellatrix-xo (npm) (malicious package)
- [MAL-2025-140984](https://insights.sbomify.com/MAL-2025-140984/): Malicious code in commitlint-fetch-quark-react-bootstrap (npm) (malicious package)
- [MAL-2025-140983](https://insights.sbomify.com/MAL-2025-140983/): Malicious code in commitlint-exec-webdriver-manager-ini (npm) (malicious package)
- [MAL-2025-140982](https://insights.sbomify.com/MAL-2025-140982/): Malicious code in commitlint-exec-express-perseus (npm) (malicious package)
- [MAL-2025-140981](https://insights.sbomify.com/MAL-2025-140981/): Malicious code in commitlint-event-hapi-duplex (npm) (malicious package)
- [MAL-2025-140980](https://insights.sbomify.com/MAL-2025-140980/): Malicious code in commitlint-equinox-antares-andromeda (npm) (malicious package)
- [MAL-2025-14098](https://insights.sbomify.com/MAL-2025-14098/): Malicious code in adminauthserv (npm) (malicious package)
- [MAL-2025-140979](https://insights.sbomify.com/MAL-2025-140979/): Malicious code in commitlint-enif-pegasus-gulp (npm) (malicious package)
- [MAL-2025-140978](https://insights.sbomify.com/MAL-2025-140978/): Malicious code in commitlint-dependencies-upgrade-phoebe (npm) (malicious package)
- [MAL-2025-140977](https://insights.sbomify.com/MAL-2025-140977/): Malicious code in commitlint-dependencies-loopback-proxima (npm) (malicious package)
- [MAL-2025-140976](https://insights.sbomify.com/MAL-2025-140976/): Malicious code in commitlint-csv-auth-oberon (npm) (malicious package)
- [MAL-2025-140975](https://insights.sbomify.com/MAL-2025-140975/): Malicious code in commitlint-config-angular-webpack-wasat-ariel (npm) (malicious package)
- [MAL-2025-140974](https://insights.sbomify.com/MAL-2025-140974/): Malicious code in commitlint-config-angular-vuepress-csv-hermes (npm) (malicious package)
- [MAL-2025-140973](https://insights.sbomify.com/MAL-2025-140973/): Malicious code in commitlint-config-angular-ultra-bellatrix-mdx (npm) (malicious package)
- [MAL-2025-140972](https://insights.sbomify.com/MAL-2025-140972/): Malicious code in commitlint-config-angular-ultra-ariel-nodemon (npm) (malicious package)
- [MAL-2025-140971](https://insights.sbomify.com/MAL-2025-140971/): Malicious code in commitlint-config-angular-tethys-gridsome-terser (npm) (malicious package)
- [MAL-2025-140970](https://insights.sbomify.com/MAL-2025-140970/): Malicious code in commitlint-config-angular-pegasus-xenos-npm (npm) (malicious package)
- [MAL-2025-14097](https://insights.sbomify.com/MAL-2025-14097/): Malicious code in admin-scripts (npm) (malicious package)
- [MAL-2025-140969](https://insights.sbomify.com/MAL-2025-140969/): Malicious code in commitlint-config-angular-norma-gravity-yakutsk (npm) (malicious package)
- [MAL-2025-140968](https://insights.sbomify.com/MAL-2025-140968/): Malicious code in commitlint-config-angular-meissa-eleventy-spica (npm) (malicious package)
- [MAL-2025-140967](https://insights.sbomify.com/MAL-2025-140967/): Malicious code in commitlint-config-angular-kronos-nebula-socketio (npm) (malicious package)
- [MAL-2025-140966](https://insights.sbomify.com/MAL-2025-140966/): Malicious code in commitlint-config-angular-kinetic-sync-babel (npm) (malicious package)
- [MAL-2025-140965](https://insights.sbomify.com/MAL-2025-140965/): Malicious code in commitlint-config-angular-jest-update-neptune (npm) (malicious package)
- [MAL-2025-140964](https://insights.sbomify.com/MAL-2025-140964/): Malicious code in commitlint-config-angular-global-dotenv-andromeda (npm) (malicious package)
- [MAL-2025-140963](https://insights.sbomify.com/MAL-2025-140963/): Malicious code in commitlint-config-angular-ganymede-nodejs-mysql (npm) (malicious package)
- [MAL-2025-140962](https://insights.sbomify.com/MAL-2025-140962/): Malicious code in commitlint-config-angular-firebase-node-config-wezen (npm) (malicious package)
- [MAL-2025-140961](https://insights.sbomify.com/MAL-2025-140961/): Malicious code in commitlint-config-angular-dactyl-tailwindcss-npm (npm) (malicious package)
- [MAL-2025-140960](https://insights.sbomify.com/MAL-2025-140960/): Malicious code in commitlint-config-angular-cressida-nodejs-winston (npm) (malicious package)
- [MAL-2025-14096](https://insights.sbomify.com/MAL-2025-14096/): Malicious code in admhjwy (npm) (malicious package)
- [MAL-2025-140959](https://insights.sbomify.com/MAL-2025-140959/): Malicious code in commitlint-config-angular-commitlint-config-angular-solis-cordelia (npm) (malicious package)
- [MAL-2025-140958](https://insights.sbomify.com/MAL-2025-140958/): Malicious code in commitlint-config-angular-bulma-nextjs-aether (npm) (malicious package)
- [MAL-2025-140957](https://insights.sbomify.com/MAL-2025-140957/): Malicious code in commitlint-config-angular-babel-tethys-sirius (npm) (malicious package)
- [MAL-2025-140956](https://insights.sbomify.com/MAL-2025-140956/): Malicious code in commitlint-config-angular-apollo-sequelize-karma (npm) (malicious package)
- [MAL-2025-140955](https://insights.sbomify.com/MAL-2025-140955/): Malicious code in commitlint-chai-wasat-socketio (npm) (malicious package)
- [MAL-2025-140954](https://insights.sbomify.com/MAL-2025-140954/): Malicious code in commitlint-blaze-rollup-cross-env (npm) (malicious package)
- [MAL-2025-140953](https://insights.sbomify.com/MAL-2025-140953/): Malicious code in commitlint-auriga-xenos-react-bootstrap (npm) (malicious package)
- [MAL-2025-140952](https://insights.sbomify.com/MAL-2025-140952/): Malicious code in commitlint-antares-chariklo-bunyan (npm) (malicious package)
- [MAL-2025-140951](https://insights.sbomify.com/MAL-2025-140951/): Malicious code in commitizen-zenobia-event-pegasus (npm) (malicious package)
- [MAL-2025-140950](https://insights.sbomify.com/MAL-2025-140950/): Malicious code in commitizen-webdriverio-chalk-figures (npm) (malicious package)
- [MAL-2025-14095](https://insights.sbomify.com/MAL-2025-14095/): Malicious code in adkxfcbvsnhpjkqm (npm) (malicious package)
- [MAL-2025-140949](https://insights.sbomify.com/MAL-2025-140949/): Malicious code in commitizen-vuepress-slides-public (npm) (malicious package)
- [MAL-2025-140948](https://insights.sbomify.com/MAL-2025-140948/): Malicious code in commitizen-ursa-figures-winston (npm) (malicious package)
- [MAL-2025-140947](https://insights.sbomify.com/MAL-2025-140947/): Malicious code in commitizen-ultra-event-dotenv-parse-variables (npm) (malicious package)
- [MAL-2025-140946](https://insights.sbomify.com/MAL-2025-140946/): Malicious code in commitizen-transform-algol-betelgeuse (npm) (malicious package)
- [MAL-2025-140945](https://insights.sbomify.com/MAL-2025-140945/): Malicious code in commitizen-terser-hugo-markdown-pdf (npm) (malicious package)
- [MAL-2025-140944](https://insights.sbomify.com/MAL-2025-140944/): Malicious code in commitizen-style-loader-ursa-hugo (npm) (malicious package)
- [MAL-2025-140943](https://insights.sbomify.com/MAL-2025-140943/): Malicious code in commitizen-start-radiant-janus (npm) (malicious package)
- [MAL-2025-140942](https://insights.sbomify.com/MAL-2025-140942/): Malicious code in commitizen-spectron-webdriver-resolvers-sirius (npm) (malicious package)
- [MAL-2025-140941](https://insights.sbomify.com/MAL-2025-140941/): Malicious code in commitizen-spawn-csv-auriga (npm) (malicious package)
- [MAL-2025-140940](https://insights.sbomify.com/MAL-2025-140940/): Malicious code in commitizen-sirius-levels-supervisor (npm) (malicious package)
- [MAL-2025-14094](https://insights.sbomify.com/MAL-2025-14094/): Malicious code in adjutant (npm) (malicious package)
- [MAL-2025-140939](https://insights.sbomify.com/MAL-2025-140939/): Malicious code in commitizen-rimraf-figures-phoebe (npm) (malicious package)
- [MAL-2025-140938](https://insights.sbomify.com/MAL-2025-140938/): Malicious code in commitizen-postcss-phoebe-jest (npm) (malicious package)
- [MAL-2025-140937](https://insights.sbomify.com/MAL-2025-140937/): Malicious code in commitizen-nestjs-got-ultra (npm) (malicious package)
- [MAL-2025-140936](https://insights.sbomify.com/MAL-2025-140936/): Malicious code in commitizen-neptune-proxima-resolvers (npm) (malicious package)
- [MAL-2025-140935](https://insights.sbomify.com/MAL-2025-140935/): Malicious code in commitizen-less-loader-mysql-html-webpack-plugin (npm) (malicious package)
- [MAL-2025-140934](https://insights.sbomify.com/MAL-2025-140934/): Malicious code in commitizen-karma-markdown-child-process (npm) (malicious package)
- [MAL-2025-140933](https://insights.sbomify.com/MAL-2025-140933/): Malicious code in commitizen-jekyll-antares-umbra (npm) (malicious package)
- [MAL-2025-140932](https://insights.sbomify.com/MAL-2025-140932/): Malicious code in commitizen-hyperion-passport-celeste (npm) (malicious package)
- [MAL-2025-140931](https://insights.sbomify.com/MAL-2025-140931/): Malicious code in commitizen-forever-kronos-apex (npm) (malicious package)
- [MAL-2025-140930](https://insights.sbomify.com/MAL-2025-140930/): Malicious code in commitizen-fetch-leda-webpack (npm) (malicious package)
- [MAL-2025-14093](https://insights.sbomify.com/MAL-2025-14093/): Malicious code in adipoli (npm) (malicious package)
- [MAL-2025-140929](https://insights.sbomify.com/MAL-2025-140929/): Malicious code in commitizen-dotenv-safe-tool-virgo (npm) (malicious package)
- [MAL-2025-140928](https://insights.sbomify.com/MAL-2025-140928/): Malicious code in commitizen-csv-impulse-wasat (npm) (malicious package)
- [MAL-2025-140927](https://insights.sbomify.com/MAL-2025-140927/): Malicious code in commitizen-concurrently-fomalhaut-orbit (npm) (malicious package)
- [MAL-2025-140926](https://insights.sbomify.com/MAL-2025-140926/): Malicious code in commitizen-chromedriver-flare-telesto (npm) (malicious package)
- [MAL-2025-140925](https://insights.sbomify.com/MAL-2025-140925/): Malicious code in commitizen-cache-spawn-vega (npm) (malicious package)
- [MAL-2025-140924](https://insights.sbomify.com/MAL-2025-140924/): Malicious code in commitizen-await-commitlint-config-angular-chalk (npm) (malicious package)
- [MAL-2025-140923](https://insights.sbomify.com/MAL-2025-140923/): Malicious code in command-xo-ariel-atlas (npm) (malicious package)
- [MAL-2025-140922](https://insights.sbomify.com/MAL-2025-140922/): Malicious code in command-sirius-request-dotenv-parse-variables (npm) (malicious package)
- [MAL-2025-140921](https://insights.sbomify.com/MAL-2025-140921/): Malicious code in command-scorpius-octans-europa (npm) (malicious package)
- [MAL-2025-140920](https://insights.sbomify.com/MAL-2025-140920/): Malicious code in command-pino-magellan-pegasus (npm) (malicious package)
- [MAL-2025-14092](https://insights.sbomify.com/MAL-2025-14092/): Malicious code in adform-ui-api (npm) (malicious package)
- [MAL-2025-140919](https://insights.sbomify.com/MAL-2025-140919/): Malicious code in command-phoebe-auth-cosmos (npm) (malicious package)
- [MAL-2025-140918](https://insights.sbomify.com/MAL-2025-140918/): Malicious code in command-parcel-stop-less-loader (npm) (malicious package)
- [MAL-2025-140917](https://insights.sbomify.com/MAL-2025-140917/): Malicious code in command-ophiuchus-envconfig-meteor (npm) (malicious package)
- [MAL-2025-140916](https://insights.sbomify.com/MAL-2025-140916/): Malicious code in command-nodemon-foundation-ganymede (npm) (malicious package)
- [MAL-2025-140915](https://insights.sbomify.com/MAL-2025-140915/): Malicious code in command-nebula-cygnus-restart (npm) (malicious package)
- [MAL-2025-140914](https://insights.sbomify.com/MAL-2025-140914/): Malicious code in command-morgan-yakutsk-query (npm) (malicious package)
- [MAL-2025-140913](https://insights.sbomify.com/MAL-2025-140913/): Malicious code in command-mongodb-regulus-chromedriver (npm) (malicious package)
- [MAL-2025-140912](https://insights.sbomify.com/MAL-2025-140912/): Malicious code in command-meissa-config-cluster (npm) (malicious package)
- [MAL-2025-140911](https://insights.sbomify.com/MAL-2025-140911/): Malicious code in command-markdown-pdf-rollup-plugin-webdriverio (npm) (malicious package)
- [MAL-2025-140910](https://insights.sbomify.com/MAL-2025-140910/): Malicious code in command-magellan-izar-flare (npm) (malicious package)
- [MAL-2025-14091](https://insights.sbomify.com/MAL-2025-14091/): Malicious code in adform-react-app-core (npm) (malicious package)
- [MAL-2025-140909](https://insights.sbomify.com/MAL-2025-140909/): Malicious code in command-janus-xenos-transform (npm) (malicious package)
- [MAL-2025-140908](https://insights.sbomify.com/MAL-2025-140908/): Malicious code in command-io-gravity-orbit (npm) (malicious package)
- [MAL-2025-140907](https://insights.sbomify.com/MAL-2025-140907/): Malicious code in command-ignite-ora-tailwindcss (npm) (malicious package)
- [MAL-2025-140906](https://insights.sbomify.com/MAL-2025-140906/): Malicious code in command-hermes-phoebe-wolf (npm) (malicious package)
- [MAL-2025-140905](https://insights.sbomify.com/MAL-2025-140905/): Malicious code in command-gulp-stream-stream (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1477/