# Vulnerabilities published in 2025 - [MAL-2025-140814](https://insights.sbomify.com/MAL-2025-140814/): Malicious code in cli-ursa-rigel-dotenv-parse-variables (npm) (malicious package) - [MAL-2025-140813](https://insights.sbomify.com/MAL-2025-140813/): Malicious code in cli-ursa-lyra-middleware (npm) (malicious package) - [MAL-2025-140812](https://insights.sbomify.com/MAL-2025-140812/): Malicious code in cli-supervisor-meissa-transform (npm) (malicious package) - [MAL-2025-140811](https://insights.sbomify.com/MAL-2025-140811/): Malicious code in cli-start-husky-pyxis (npm) (malicious package) - [MAL-2025-140810](https://insights.sbomify.com/MAL-2025-140810/): Malicious code in cli-sedna-xo-tool (npm) (malicious package) - [MAL-2025-14081](https://insights.sbomify.com/MAL-2025-14081/): Malicious code in ade-klipo27-breki (npm) (malicious package) - [MAL-2025-140809](https://insights.sbomify.com/MAL-2025-140809/): Malicious code in cli-rimraf-callback-exec (npm) (malicious package) - [MAL-2025-140808](https://insights.sbomify.com/MAL-2025-140808/): Malicious code in cli-quantum-graphql-phoebe (npm) (malicious package) - [MAL-2025-140807](https://insights.sbomify.com/MAL-2025-140807/): Malicious code in cli-passport-iota-corvus (npm) (malicious package) - [MAL-2025-140806](https://insights.sbomify.com/MAL-2025-140806/): Malicious code in cli-npm-postcss-loader-juno (npm) (malicious package) - [MAL-2025-140805](https://insights.sbomify.com/MAL-2025-140805/): Malicious code in cli-norma-celeste-less (npm) (malicious package) - [MAL-2025-140804](https://insights.sbomify.com/MAL-2025-140804/): Malicious code in cli-node-config-eridanus-dione (npm) (malicious package) - [MAL-2025-140803](https://insights.sbomify.com/MAL-2025-140803/): Malicious code in cli-magellan-farout-regulus (npm) (malicious package) - [MAL-2025-140802](https://insights.sbomify.com/MAL-2025-140802/): Malicious code in cli-lynx-nova-element-ui (npm) (malicious package) - [MAL-2025-140801](https://insights.sbomify.com/MAL-2025-140801/): Malicious code in cli-install-hercules-prompts (npm) (malicious package) - [MAL-2025-140800](https://insights.sbomify.com/MAL-2025-140800/): Malicious code in cli-gemini-kastra-unuk (npm) (malicious package) - [MAL-2025-14080](https://insights.sbomify.com/MAL-2025-14080/): Malicious code in ade-bakso53-breki (npm) (malicious package) - [MAL-2025-1408](https://insights.sbomify.com/MAL-2025-1408/): Malicious code in digifinex-dev (npm) (malicious package) - [MAL-2025-140799](https://insights.sbomify.com/MAL-2025-140799/): Malicious code in cli-geckodriver-sirius-winston (npm) (malicious package) - [MAL-2025-140798](https://insights.sbomify.com/MAL-2025-140798/): Malicious code in cli-geckodriver-aether-morgan (npm) (malicious package) - [MAL-2025-140797](https://insights.sbomify.com/MAL-2025-140797/): Malicious code in cli-ganymede-markdownlint-indus (npm) (malicious package) - [MAL-2025-140796](https://insights.sbomify.com/MAL-2025-140796/): Malicious code in cli-gacrux-slidev-redis (npm) (malicious package) - [MAL-2025-140795](https://insights.sbomify.com/MAL-2025-140795/): Malicious code in cli-flare-kronos-dotenv (npm) (malicious package) - [MAL-2025-140794](https://insights.sbomify.com/MAL-2025-140794/): Malicious code in cli-electron-builder-sagitta-proxima (npm) (malicious package) - [MAL-2025-140793](https://insights.sbomify.com/MAL-2025-140793/): Malicious code in cli-dagda-heka-config (npm) (malicious package) - [MAL-2025-140792](https://insights.sbomify.com/MAL-2025-140792/): Malicious code in cli-dactyl-restart-meteor (npm) (malicious package) - [MAL-2025-140791](https://insights.sbomify.com/MAL-2025-140791/): Malicious code in cli-cypress-chai-geckodriver (npm) (malicious package) - [MAL-2025-140790](https://insights.sbomify.com/MAL-2025-140790/): Malicious code in cli-cluster-duplex-eslint-config (npm) (malicious package) - [MAL-2025-14079](https://insights.sbomify.com/MAL-2025-14079/): Malicious code in addtaxa (npm) (malicious package) - [MAL-2025-140789](https://insights.sbomify.com/MAL-2025-140789/): Malicious code in cli-charon-hyperion-flare (npm) (malicious package) - [MAL-2025-140788](https://insights.sbomify.com/MAL-2025-140788/): Malicious code in cli-celeste-cors-fornax (npm) (malicious package) - [MAL-2025-140787](https://insights.sbomify.com/MAL-2025-140787/): Malicious code in cli-browserify-mini-css-extract-plugin-frontend (npm) (malicious package) - [MAL-2025-140786](https://insights.sbomify.com/MAL-2025-140786/): Malicious code in cli-axios-kronos-ophiuchus (npm) (malicious package) - [MAL-2025-140785](https://insights.sbomify.com/MAL-2025-140785/): Malicious code in cli-auth-elara-sedna (npm) (malicious package) - [MAL-2025-140784](https://insights.sbomify.com/MAL-2025-140784/): Malicious code in classical-blush-goose (npm) (malicious package) - [MAL-2025-140783](https://insights.sbomify.com/MAL-2025-140783/): Malicious code in chromedriver-xml-pegasus-changelog (npm) (malicious package) - [MAL-2025-140782](https://insights.sbomify.com/MAL-2025-140782/): Malicious code in chromedriver-relay-sirius-rest (npm) (malicious package) - [MAL-2025-140781](https://insights.sbomify.com/MAL-2025-140781/): Malicious code in chromedriver-ophiuchus-prompts-enif (npm) (malicious package) - [MAL-2025-140780](https://insights.sbomify.com/MAL-2025-140780/): Malicious code in chromedriver-oauth-janus-firebase (npm) (malicious package) - [MAL-2025-14078](https://insights.sbomify.com/MAL-2025-14078/): Malicious code in addressed (npm) (malicious package) - [MAL-2025-140779](https://insights.sbomify.com/MAL-2025-140779/): Malicious code in chromedriver-nashira-auth-cz-conventional-changelog (npm) (malicious package) - [MAL-2025-140778](https://insights.sbomify.com/MAL-2025-140778/): Malicious code in chromedriver-metalsmith-toml-nightwatch (npm) (malicious package) - [MAL-2025-140777](https://insights.sbomify.com/MAL-2025-140777/): Malicious code in chromedriver-jest-phoenix-spectron-webdriver (npm) (malicious package) - [MAL-2025-140776](https://insights.sbomify.com/MAL-2025-140776/): Malicious code in chromedriver-jekyll-typeorm-colors (npm) (malicious package) - [MAL-2025-140775](https://insights.sbomify.com/MAL-2025-140775/): Malicious code in chromedriver-init-puppeteer-gravity (npm) (malicious package) - [MAL-2025-140774](https://insights.sbomify.com/MAL-2025-140774/): Malicious code in chromedriver-husky-flare-bellatrix (npm) (malicious package) - [MAL-2025-140773](https://insights.sbomify.com/MAL-2025-140773/): Malicious code in chromedriver-framework-private-less (npm) (malicious package) - [MAL-2025-140772](https://insights.sbomify.com/MAL-2025-140772/): Malicious code in chromedriver-foundation-ophiuchus-meteor (npm) (malicious package) - [MAL-2025-140771](https://insights.sbomify.com/MAL-2025-140771/): Malicious code in chromedriver-fornax-stop-apex (npm) (malicious package) - [MAL-2025-140770](https://insights.sbomify.com/MAL-2025-140770/): Malicious code in chromedriver-farout-link-registry (npm) (malicious package) - [MAL-2025-14077](https://insights.sbomify.com/MAL-2025-14077/): Malicious code in addongit (npm) (malicious package) - [MAL-2025-140769](https://insights.sbomify.com/MAL-2025-140769/): Malicious code in chromedriver-equinox-websockets-dependencies (npm) (malicious package) - [MAL-2025-140768](https://insights.sbomify.com/MAL-2025-140768/): Malicious code in chromedriver-elektra-halley-loopback (npm) (malicious package) - [MAL-2025-140767](https://insights.sbomify.com/MAL-2025-140767/): Malicious code in chromedriver-dione-server-sqlite (npm) (malicious package) - [MAL-2025-140766](https://insights.sbomify.com/MAL-2025-140766/): Malicious code in chromedriver-development-meissa-telesto (npm) (malicious package) - [MAL-2025-140765](https://insights.sbomify.com/MAL-2025-140765/): Malicious code in chromedriver-deneb-auriga-jabbah (npm) (malicious package) - [MAL-2025-140764](https://insights.sbomify.com/MAL-2025-140764/): Malicious code in chromedriver-csrf-ariel-hapi (npm) (malicious package) - [MAL-2025-140763](https://insights.sbomify.com/MAL-2025-140763/): Malicious code in chromedriver-commitlint-norma-less-loader (npm) (malicious package) - [MAL-2025-140762](https://insights.sbomify.com/MAL-2025-140762/): Malicious code in chromedriver-await-enceladus-nightmare (npm) (malicious package) - [MAL-2025-140761](https://insights.sbomify.com/MAL-2025-140761/): Malicious code in chromedriver-arcturus-pino-airbnb (npm) (malicious package) - [MAL-2025-140760](https://insights.sbomify.com/MAL-2025-140760/): Malicious code in chromedriver-aldebaran-helmet-bunyan (npm) (malicious package) - [MAL-2025-14076](https://insights.sbomify.com/MAL-2025-14076/): Malicious code in additor-react-grid-layout (npm) (malicious package) - [MAL-2025-140759](https://insights.sbomify.com/MAL-2025-140759/): Malicious code in child-process-zenobia-mocha-despina (npm) (malicious package) - [MAL-2025-140758](https://insights.sbomify.com/MAL-2025-140758/): Malicious code in child-process-uninstall-mui-dactyl (npm) (malicious package) - [MAL-2025-140757](https://insights.sbomify.com/MAL-2025-140757/): Malicious code in child-process-telesto-test-proxima (npm) (malicious package) - [MAL-2025-140756](https://insights.sbomify.com/MAL-2025-140756/): Malicious code in child-process-socketio-envconfig-umbriel (npm) (malicious package) - [MAL-2025-140755](https://insights.sbomify.com/MAL-2025-140755/): Malicious code in child-process-registry-chai-nashira (npm) (malicious package) - [MAL-2025-140754](https://insights.sbomify.com/MAL-2025-140754/): Malicious code in child-process-prettier-stylelint-draco-vuepress (npm) (malicious package) - [MAL-2025-140753](https://insights.sbomify.com/MAL-2025-140753/): Malicious code in child-process-miranda-enif-nightwatch (npm) (malicious package) - [MAL-2025-140752](https://insights.sbomify.com/MAL-2025-140752/): Malicious code in child-process-mini-css-extract-plugin-carina-tailwindcss (npm) (malicious package) - [MAL-2025-140751](https://insights.sbomify.com/MAL-2025-140751/): Malicious code in child-process-metalsmith-sadr-nextjs (npm) (malicious package) - [MAL-2025-140750](https://insights.sbomify.com/MAL-2025-140750/): Malicious code in child-process-lint-staged-less-style-loader (npm) (malicious package) - [MAL-2025-14075](https://insights.sbomify.com/MAL-2025-14075/): Malicious code in additor-elements-evo (npm) (malicious package) - [MAL-2025-140749](https://insights.sbomify.com/MAL-2025-140749/): Malicious code in child-process-init-winston-frontend (npm) (malicious package) - [MAL-2025-140748](https://insights.sbomify.com/MAL-2025-140748/): Malicious code in child-process-graphql-unuk-bootstrap (npm) (malicious package) - [MAL-2025-140747](https://insights.sbomify.com/MAL-2025-140747/): Malicious code in child-process-framework-metalsmith-celeste (npm) (malicious package) - [MAL-2025-140746](https://insights.sbomify.com/MAL-2025-140746/): Malicious code in child-process-foundation-eclipse-spectron (npm) (malicious package) - [MAL-2025-140745](https://insights.sbomify.com/MAL-2025-140745/): Malicious code in child-process-fornax-ophiuchus-enceladus (npm) (malicious package) - [MAL-2025-140744](https://insights.sbomify.com/MAL-2025-140744/): Malicious code in child-process-dotenv-antares-dione (npm) (malicious package) - [MAL-2025-140743](https://insights.sbomify.com/MAL-2025-140743/): Malicious code in child-process-altair-convict-dynamo (npm) (malicious package) - [MAL-2025-140742](https://insights.sbomify.com/MAL-2025-140742/): Malicious code in charon-yildun-io-chariklo (npm) (malicious package) - [MAL-2025-140741](https://insights.sbomify.com/MAL-2025-140741/): Malicious code in charon-yakutsk-elektra-cache (npm) (malicious package) - [MAL-2025-140740](https://insights.sbomify.com/MAL-2025-140740/): Malicious code in charon-webdriver-mocha-grunt-kinetic (npm) (malicious package) - [MAL-2025-14074](https://insights.sbomify.com/MAL-2025-14074/): Malicious code in additor-elements-client (npm) (malicious package) - [MAL-2025-140739](https://insights.sbomify.com/MAL-2025-140739/): Malicious code in charon-wasat-octans-zenith (npm) (malicious package) - [MAL-2025-140738](https://insights.sbomify.com/MAL-2025-140738/): Malicious code in charon-ursa-ganymede-ignite (npm) (malicious package) - [MAL-2025-140737](https://insights.sbomify.com/MAL-2025-140737/): Malicious code in charon-thuban-axios-thuban (npm) (malicious package) - [MAL-2025-140736](https://insights.sbomify.com/MAL-2025-140736/): Malicious code in charon-start-miranda-zephyr (npm) (malicious package) - [MAL-2025-140735](https://insights.sbomify.com/MAL-2025-140735/): Malicious code in charon-spawn-miranda-auriga (npm) (malicious package) - [MAL-2025-140734](https://insights.sbomify.com/MAL-2025-140734/): Malicious code in charon-semantic-release-vuepress-centaurus (npm) (malicious package) - [MAL-2025-140733](https://insights.sbomify.com/MAL-2025-140733/): Malicious code in charon-semantic-release-nashira-child-process (npm) (malicious package) - [MAL-2025-140732](https://insights.sbomify.com/MAL-2025-140732/): Malicious code in charon-redis-ariel-commitlint (npm) (malicious package) - [MAL-2025-140731](https://insights.sbomify.com/MAL-2025-140731/): Malicious code in charon-puppeteer-eclipse-draco (npm) (malicious package) - [MAL-2025-140730](https://insights.sbomify.com/MAL-2025-140730/): Malicious code in charon-polaris-socketio-configstore (npm) (malicious package) - [MAL-2025-14073](https://insights.sbomify.com/MAL-2025-14073/): Malicious code in additor-elements (npm) (malicious package) - [MAL-2025-140729](https://insights.sbomify.com/MAL-2025-140729/): Malicious code in charon-pegasus-jsonp-schema (npm) (malicious package) - [MAL-2025-140728](https://insights.sbomify.com/MAL-2025-140728/): Malicious code in charon-nashira-sadr-impulse (npm) (malicious package) - [MAL-2025-140727](https://insights.sbomify.com/MAL-2025-140727/): Malicious code in charon-mongodb-webdriver-manager-comet (npm) (malicious package) - [MAL-2025-140726](https://insights.sbomify.com/MAL-2025-140726/): Malicious code in charon-mdx-mdx-rehype (npm) (malicious package) - [MAL-2025-140725](https://insights.sbomify.com/MAL-2025-140725/): Malicious code in charon-lint-envconfig-firebase (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/1479/