# Vulnerabilities published in 2025


- [MAL-2025-140904](https://insights.sbomify.com/MAL-2025-140904/): Malicious code in command-geckodriver-nodemon-release-it (npm) (malicious package)
- [MAL-2025-140903](https://insights.sbomify.com/MAL-2025-140903/): Malicious code in command-fomalhaut-neptune-jekyll (npm) (malicious package)
- [MAL-2025-140902](https://insights.sbomify.com/MAL-2025-140902/): Malicious code in command-fetch-sagitta-pavo (npm) (malicious package)
- [MAL-2025-140901](https://insights.sbomify.com/MAL-2025-140901/): Malicious code in command-eris-telesto-meteor (npm) (malicious package)
- [MAL-2025-140900](https://insights.sbomify.com/MAL-2025-140900/): Malicious code in command-elektra-writable-xanadu (npm) (malicious package)
- [MAL-2025-14090](https://insights.sbomify.com/MAL-2025-14090/): Malicious code in adform-docs (npm) (malicious package)
- [MAL-2025-1409](https://insights.sbomify.com/MAL-2025-1409/): Malicious code in digifinex-internal (npm) (malicious package)
- [MAL-2025-140899](https://insights.sbomify.com/MAL-2025-140899/): Malicious code in command-docusaurus-phoenix-cypress (npm) (malicious package)
- [MAL-2025-140898](https://insights.sbomify.com/MAL-2025-140898/): Malicious code in command-child-process-perseus-xenos (npm) (malicious package)
- [MAL-2025-140897](https://insights.sbomify.com/MAL-2025-140897/): Malicious code in command-babel-sadr-perseus (npm) (malicious package)
- [MAL-2025-140896](https://insights.sbomify.com/MAL-2025-140896/): Malicious code in command-astro-carpo-webdriverio (npm) (malicious package)
- [MAL-2025-140895](https://insights.sbomify.com/MAL-2025-140895/): Malicious code in command-altair-europa-meissa (npm) (malicious package)
- [MAL-2025-140894](https://insights.sbomify.com/MAL-2025-140894/): Malicious code in comet-vulcan-mdx-pino (npm) (malicious package)
- [MAL-2025-140893](https://insights.sbomify.com/MAL-2025-140893/): Malicious code in comet-tethys-phoebe-canopus (npm) (malicious package)
- [MAL-2025-140892](https://insights.sbomify.com/MAL-2025-140892/): Malicious code in comet-tailwindcss-inquirer-ultra (npm) (malicious package)
- [MAL-2025-140891](https://insights.sbomify.com/MAL-2025-140891/): Malicious code in comet-stream-gatsby-wezen (npm) (malicious package)
- [MAL-2025-140890](https://insights.sbomify.com/MAL-2025-140890/): Malicious code in comet-spawn-oberon-xerxes (npm) (malicious package)
- [MAL-2025-14089](https://insights.sbomify.com/MAL-2025-14089/): Malicious code in adform-data-generator (npm) (malicious package)
- [MAL-2025-140889](https://insights.sbomify.com/MAL-2025-140889/): Malicious code in comet-proxima-csv-release-it (npm) (malicious package)
- [MAL-2025-140888](https://insights.sbomify.com/MAL-2025-140888/): Malicious code in comet-prompts-elektra-non-blocking (npm) (malicious package)
- [MAL-2025-140887](https://insights.sbomify.com/MAL-2025-140887/): Malicious code in comet-procyon-terser-terser-webpack-plugin (npm) (malicious package)
- [MAL-2025-140886](https://insights.sbomify.com/MAL-2025-140886/): Malicious code in comet-prettier-stylelint-sync-perseus (npm) (malicious package)
- [MAL-2025-140885](https://insights.sbomify.com/MAL-2025-140885/): Malicious code in comet-parcel-perseus-postcss-loader (npm) (malicious package)
- [MAL-2025-140884](https://insights.sbomify.com/MAL-2025-140884/): Malicious code in comet-parcel-gacrux-winston (npm) (malicious package)
- [MAL-2025-140883](https://insights.sbomify.com/MAL-2025-140883/): Malicious code in comet-nightwatch-toml-enif (npm) (malicious package)
- [MAL-2025-140882](https://insights.sbomify.com/MAL-2025-140882/): Malicious code in comet-mutation-hydra-spawn (npm) (malicious package)
- [MAL-2025-140881](https://insights.sbomify.com/MAL-2025-140881/): Malicious code in comet-mira-lyra-prettier-stylelint (npm) (malicious package)
- [MAL-2025-140880](https://insights.sbomify.com/MAL-2025-140880/): Malicious code in comet-materialize-hermes-eslint (npm) (malicious package)
- [MAL-2025-14088](https://insights.sbomify.com/MAL-2025-14088/): Malicious code in adform-core (npm) (malicious package)
- [MAL-2025-140879](https://insights.sbomify.com/MAL-2025-140879/): Malicious code in comet-lacerta-config-atlas (npm) (malicious package)
- [MAL-2025-140878](https://insights.sbomify.com/MAL-2025-140878/): Malicious code in comet-kaus-mui-rocket (npm) (malicious package)
- [MAL-2025-140877](https://insights.sbomify.com/MAL-2025-140877/): Malicious code in comet-jabbah-airbnb-auriga (npm) (malicious package)
- [MAL-2025-140876](https://insights.sbomify.com/MAL-2025-140876/): Malicious code in comet-gacrux-pm2-middleware (npm) (malicious package)
- [MAL-2025-140875](https://insights.sbomify.com/MAL-2025-140875/): Malicious code in comet-fomalhaut-dotenv-safe-polaris (npm) (malicious package)
- [MAL-2025-140874](https://insights.sbomify.com/MAL-2025-140874/): Malicious code in comet-event-husky-typeorm (npm) (malicious package)
- [MAL-2025-140873](https://insights.sbomify.com/MAL-2025-140873/): Malicious code in comet-cygnus-antd-koa (npm) (malicious package)
- [MAL-2025-140872](https://insights.sbomify.com/MAL-2025-140872/): Malicious code in comet-cors-procyon-rocket (npm) (malicious package)
- [MAL-2025-140871](https://insights.sbomify.com/MAL-2025-140871/): Malicious code in comet-config-pyxis-blitz (npm) (malicious package)
- [MAL-2025-140870](https://insights.sbomify.com/MAL-2025-140870/): Malicious code in comet-canopus-deneb-websockets (npm) (malicious package)
- [MAL-2025-14087](https://insights.sbomify.com/MAL-2025-14087/): Malicious code in adform-cli-test (npm) (malicious package)
- [MAL-2025-140869](https://insights.sbomify.com/MAL-2025-140869/): Malicious code in comet-callback-eridanus-ini (npm) (malicious package)
- [MAL-2025-140868](https://insights.sbomify.com/MAL-2025-140868/): Malicious code in colors-xenon-non-blocking-capella (npm) (malicious package)
- [MAL-2025-140867](https://insights.sbomify.com/MAL-2025-140867/): Malicious code in colors-vortex-phoebe-husky (npm) (malicious package)
- [MAL-2025-140866](https://insights.sbomify.com/MAL-2025-140866/): Malicious code in colors-version-yaml-eclipse (npm) (malicious package)
- [MAL-2025-140865](https://insights.sbomify.com/MAL-2025-140865/): Malicious code in colors-typeorm-docusaurus-lyra (npm) (malicious package)
- [MAL-2025-140864](https://insights.sbomify.com/MAL-2025-140864/): Malicious code in colors-thuban-rest-hexo (npm) (malicious package)
- [MAL-2025-140863](https://insights.sbomify.com/MAL-2025-140863/): Malicious code in colors-testcafe-uglify-js-karma (npm) (malicious package)
- [MAL-2025-140862](https://insights.sbomify.com/MAL-2025-140862/): Malicious code in colors-registry-bootes-redis (npm) (malicious package)
- [MAL-2025-140861](https://insights.sbomify.com/MAL-2025-140861/): Malicious code in colors-puppeteer-got-phoenix (npm) (malicious package)
- [MAL-2025-140860](https://insights.sbomify.com/MAL-2025-140860/): Malicious code in colors-procyon-materialize-nightwatch (npm) (malicious package)
- [MAL-2025-14086](https://insights.sbomify.com/MAL-2025-14086/): Malicious code in adform-cli-build (npm) (malicious package)
- [MAL-2025-140859](https://insights.sbomify.com/MAL-2025-140859/): Malicious code in colors-phoenix-eslint-config-fork (npm) (malicious package)
- [MAL-2025-140858](https://insights.sbomify.com/MAL-2025-140858/): Malicious code in colors-phoebe-test-concurrently (npm) (malicious package)
- [MAL-2025-140857](https://insights.sbomify.com/MAL-2025-140857/): Malicious code in colors-ophiuchus-apex-lynx (npm) (malicious package)
- [MAL-2025-140856](https://insights.sbomify.com/MAL-2025-140856/): Malicious code in colors-nodemon-changelog-helmet (npm) (malicious package)
- [MAL-2025-140855](https://insights.sbomify.com/MAL-2025-140855/): Malicious code in colors-neptune-dotenv-parse-variables-impulse (npm) (malicious package)
- [MAL-2025-140854](https://insights.sbomify.com/MAL-2025-140854/): Malicious code in colors-magellan-commitlint-corvus (npm) (malicious package)
- [MAL-2025-140853](https://insights.sbomify.com/MAL-2025-140853/): Malicious code in colors-izar-deimos-izar (npm) (malicious package)
- [MAL-2025-140852](https://insights.sbomify.com/MAL-2025-140852/): Malicious code in colors-init-slides-vortex (npm) (malicious package)
- [MAL-2025-140851](https://insights.sbomify.com/MAL-2025-140851/): Malicious code in colors-hugo-mutation-blaze (npm) (malicious package)
- [MAL-2025-140850](https://insights.sbomify.com/MAL-2025-140850/): Malicious code in colors-figures-hermes-babel (npm) (malicious package)
- [MAL-2025-14085](https://insights.sbomify.com/MAL-2025-14085/): Malicious code in adflowgic (npm) (malicious package)
- [MAL-2025-140849](https://insights.sbomify.com/MAL-2025-140849/): Malicious code in colors-element-ui-dagda-procyon (npm) (malicious package)
- [MAL-2025-140848](https://insights.sbomify.com/MAL-2025-140848/): Malicious code in colors-elektra-hermes-spawn (npm) (malicious package)
- [MAL-2025-140847](https://insights.sbomify.com/MAL-2025-140847/): Malicious code in colors-dotenv-safe-backend-optimize-css-assets-webpack-plugin (npm) (malicious package)
- [MAL-2025-140846](https://insights.sbomify.com/MAL-2025-140846/): Malicious code in colors-csrf-rollup-prettier-plugin-markdown (npm) (malicious package)
- [MAL-2025-140845](https://insights.sbomify.com/MAL-2025-140845/): Malicious code in colors-csrf-jsonp-dagda (npm) (malicious package)
- [MAL-2025-140844](https://insights.sbomify.com/MAL-2025-140844/): Malicious code in colors-corvus-postgres-cli (npm) (malicious package)
- [MAL-2025-140843](https://insights.sbomify.com/MAL-2025-140843/): Malicious code in colors-cors-slidev-loglevel (npm) (malicious package)
- [MAL-2025-140842](https://insights.sbomify.com/MAL-2025-140842/): Malicious code in colors-castor-relay-slidev (npm) (malicious package)
- [MAL-2025-140841](https://insights.sbomify.com/MAL-2025-140841/): Malicious code in colors-antd-nextjs-wolf (npm) (malicious package)
- [MAL-2025-140840](https://insights.sbomify.com/MAL-2025-140840/): Malicious code in cluster-vuepress-local-polaris (npm) (malicious package)
- [MAL-2025-14084](https://insights.sbomify.com/MAL-2025-14084/): Malicious code in ade-tongseng62-breki (npm) (malicious package)
- [MAL-2025-140839](https://insights.sbomify.com/MAL-2025-140839/): Malicious code in cluster-virgo-octans-lyra (npm) (malicious package)
- [MAL-2025-140838](https://insights.sbomify.com/MAL-2025-140838/): Malicious code in cluster-upgrade-graphql-quantum (npm) (malicious package)
- [MAL-2025-140837](https://insights.sbomify.com/MAL-2025-140837/): Malicious code in cluster-testcafe-chalk-mongoose (npm) (malicious package)
- [MAL-2025-140836](https://insights.sbomify.com/MAL-2025-140836/): Malicious code in cluster-sync-development-cosmos (npm) (malicious package)
- [MAL-2025-140835](https://insights.sbomify.com/MAL-2025-140835/): Malicious code in cluster-rigel-pino-chalk (npm) (malicious package)
- [MAL-2025-140834](https://insights.sbomify.com/MAL-2025-140834/): Malicious code in cluster-nodemon-hexo-umbra (npm) (malicious package)
- [MAL-2025-140833](https://insights.sbomify.com/MAL-2025-140833/): Malicious code in cluster-neptune-phoebe-iota (npm) (malicious package)
- [MAL-2025-140832](https://insights.sbomify.com/MAL-2025-140832/): Malicious code in cluster-mui-terser-astro (npm) (malicious package)
- [MAL-2025-140831](https://insights.sbomify.com/MAL-2025-140831/): Malicious code in cluster-markdownlint-equinox-dynamo (npm) (malicious package)
- [MAL-2025-140830](https://insights.sbomify.com/MAL-2025-140830/): Malicious code in cluster-loop-ignite-telesto (npm) (malicious package)
- [MAL-2025-14083](https://insights.sbomify.com/MAL-2025-14083/): Malicious code in ade-tahu10-kuki (npm) (malicious package)
- [MAL-2025-140829](https://insights.sbomify.com/MAL-2025-140829/): Malicious code in cluster-kaus-tethys-meissa (npm) (malicious package)
- [MAL-2025-140828](https://insights.sbomify.com/MAL-2025-140828/): Malicious code in cluster-ignite-ganymede-library (npm) (malicious package)
- [MAL-2025-140827](https://insights.sbomify.com/MAL-2025-140827/): Malicious code in cluster-gemini-jekyll-semantic-ui (npm) (malicious package)
- [MAL-2025-140826](https://insights.sbomify.com/MAL-2025-140826/): Malicious code in cluster-geckodriver-child-process-sails (npm) (malicious package)
- [MAL-2025-140825](https://insights.sbomify.com/MAL-2025-140825/): Malicious code in cluster-elara-eclipse-betelgeuse (npm) (malicious package)
- [MAL-2025-140824](https://insights.sbomify.com/MAL-2025-140824/): Malicious code in cluster-dynamo-morgan-radiant (npm) (malicious package)
- [MAL-2025-140823](https://insights.sbomify.com/MAL-2025-140823/): Malicious code in cluster-css-minimizer-webpack-plugin-module-rehype (npm) (malicious package)
- [MAL-2025-140822](https://insights.sbomify.com/MAL-2025-140822/): Malicious code in cluster-css-loader-halley-cressida (npm) (malicious package)
- [MAL-2025-140821](https://insights.sbomify.com/MAL-2025-140821/): Malicious code in cluster-callisto-ursa-standard (npm) (malicious package)
- [MAL-2025-140820](https://insights.sbomify.com/MAL-2025-140820/): Malicious code in cluster-axios-mongodb-nebula (npm) (malicious package)
- [MAL-2025-14082](https://insights.sbomify.com/MAL-2025-14082/): Malicious code in ade-moci82-breki (npm) (malicious package)
- [MAL-2025-140819](https://insights.sbomify.com/MAL-2025-140819/): Malicious code in cluster-auth0-json-dotenv-safe (npm) (malicious package)
- [MAL-2025-140818](https://insights.sbomify.com/MAL-2025-140818/): Malicious code in cli-zephyr-pegasus-commitizen (npm) (malicious package)
- [MAL-2025-140817](https://insights.sbomify.com/MAL-2025-140817/): Malicious code in cli-xerxes-less-gulp (npm) (malicious package)
- [MAL-2025-140816](https://insights.sbomify.com/MAL-2025-140816/): Malicious code in cli-vuepress-html-webpack-plugin-eris (npm) (malicious package)
- [MAL-2025-140815](https://insights.sbomify.com/MAL-2025-140815/): Malicious code in cli-version-standard-antares (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1478/