# Vulnerabilities published in 2025


- [MAL-2025-140724](https://insights.sbomify.com/MAL-2025-140724/): Malicious code in charon-less-express-non-blocking (npm) (malicious package)
- [MAL-2025-140723](https://insights.sbomify.com/MAL-2025-140723/): Malicious code in charon-json-typeorm-nightwatch (npm) (malicious package)
- [MAL-2025-140722](https://insights.sbomify.com/MAL-2025-140722/): Malicious code in charon-inquirer-bellatrix-global (npm) (malicious package)
- [MAL-2025-140721](https://insights.sbomify.com/MAL-2025-140721/): Malicious code in charon-gridsome-element-ui-meteor (npm) (malicious package)
- [MAL-2025-140720](https://insights.sbomify.com/MAL-2025-140720/): Malicious code in charon-csv-development-equinox (npm) (malicious package)
- [MAL-2025-14072](https://insights.sbomify.com/MAL-2025-14072/): Malicious code in additem (npm) (malicious package)
- [MAL-2025-140719](https://insights.sbomify.com/MAL-2025-140719/): Malicious code in charon-configstore-polaris-dependencies (npm) (malicious package)
- [MAL-2025-140718](https://insights.sbomify.com/MAL-2025-140718/): Malicious code in charon-commitlint-config-angular-mdx-umbriel (npm) (malicious package)
- [MAL-2025-140717](https://insights.sbomify.com/MAL-2025-140717/): Malicious code in charon-apollo-ganymede-zenobia (npm) (malicious package)
- [MAL-2025-140716](https://insights.sbomify.com/MAL-2025-140716/): Malicious code in chariklo-zenith-proxima-configstore (npm) (malicious package)
- [MAL-2025-140715](https://insights.sbomify.com/MAL-2025-140715/): Malicious code in chariklo-winston-less-loader-optimize-css-assets-webpack-plugin (npm) (malicious package)
- [MAL-2025-140714](https://insights.sbomify.com/MAL-2025-140714/): Malicious code in chariklo-spectron-corvus-scorpius (npm) (malicious package)
- [MAL-2025-140713](https://insights.sbomify.com/MAL-2025-140713/): Malicious code in chariklo-socketio-json-readable (npm) (malicious package)
- [MAL-2025-140712](https://insights.sbomify.com/MAL-2025-140712/): Malicious code in chariklo-scripts-gridsome-cosmos (npm) (malicious package)
- [MAL-2025-140711](https://insights.sbomify.com/MAL-2025-140711/): Malicious code in chariklo-rimraf-markdown-farout (npm) (malicious package)
- [MAL-2025-140710](https://insights.sbomify.com/MAL-2025-140710/): Malicious code in chariklo-repository-jwt-norma (npm) (malicious package)
- [MAL-2025-14071](https://insights.sbomify.com/MAL-2025-14071/): Malicious code in add-users (npm) (malicious package)
- [MAL-2025-140709](https://insights.sbomify.com/MAL-2025-140709/): Malicious code in chariklo-quark-middleware-prettier (npm) (malicious package)
- [MAL-2025-140708](https://insights.sbomify.com/MAL-2025-140708/): Malicious code in chariklo-quark-inquirer-ora (npm) (malicious package)
- [MAL-2025-140707](https://insights.sbomify.com/MAL-2025-140707/): Malicious code in chariklo-private-phoebe-thuban (npm) (malicious package)
- [MAL-2025-140706](https://insights.sbomify.com/MAL-2025-140706/): Malicious code in chariklo-pegasus-ceres-procyon (npm) (malicious package)
- [MAL-2025-140705](https://insights.sbomify.com/MAL-2025-140705/): Malicious code in chariklo-mongoose-dependencies-astro (npm) (malicious package)
- [MAL-2025-140704](https://insights.sbomify.com/MAL-2025-140704/): Malicious code in chariklo-mongoose-corvus-exec (npm) (malicious package)
- [MAL-2025-140703](https://insights.sbomify.com/MAL-2025-140703/): Malicious code in chariklo-mini-css-extract-plugin-rollup-google (npm) (malicious package)
- [MAL-2025-140702](https://insights.sbomify.com/MAL-2025-140702/): Malicious code in chariklo-juno-warp-local (npm) (malicious package)
- [MAL-2025-140701](https://insights.sbomify.com/MAL-2025-140701/): Malicious code in chariklo-jest-titan-scripts (npm) (malicious package)
- [MAL-2025-140700](https://insights.sbomify.com/MAL-2025-140700/): Malicious code in chariklo-inquirer-draco-juno (npm) (malicious package)
- [MAL-2025-14070](https://insights.sbomify.com/MAL-2025-14070/): Malicious code in add-user (npm) (malicious package)
- [MAL-2025-1407](https://insights.sbomify.com/MAL-2025-1407/): Malicious code in coinw-test (npm) (malicious package)
- [MAL-2025-140699](https://insights.sbomify.com/MAL-2025-140699/): Malicious code in chariklo-ignite-winston-node-sass (npm) (malicious package)
- [MAL-2025-140698](https://insights.sbomify.com/MAL-2025-140698/): Malicious code in chariklo-ignite-less-cygnus (npm) (malicious package)
- [MAL-2025-140697](https://insights.sbomify.com/MAL-2025-140697/): Malicious code in chariklo-hyperion-xml-acamar (npm) (malicious package)
- [MAL-2025-140696](https://insights.sbomify.com/MAL-2025-140696/): Malicious code in chariklo-gulp-sync-child-process (npm) (malicious package)
- [MAL-2025-140695](https://insights.sbomify.com/MAL-2025-140695/): Malicious code in chariklo-dorado-ganymede-ursa (npm) (malicious package)
- [MAL-2025-140694](https://insights.sbomify.com/MAL-2025-140694/): Malicious code in chariklo-deneb-helmet-meteor (npm) (malicious package)
- [MAL-2025-140693](https://insights.sbomify.com/MAL-2025-140693/): Malicious code in chariklo-concurrently-adonis-neptune (npm) (malicious package)
- [MAL-2025-140692](https://insights.sbomify.com/MAL-2025-140692/): Malicious code in chariklo-betelgeuse-uninstall-inquirer (npm) (malicious package)
- [MAL-2025-140691](https://insights.sbomify.com/MAL-2025-140691/): Malicious code in chariklo-avior-corvus-hermes (npm) (malicious package)
- [MAL-2025-140690](https://insights.sbomify.com/MAL-2025-140690/): Malicious code in changelog-upgrade-native-phoebe (npm) (malicious package)
- [MAL-2025-14069](https://insights.sbomify.com/MAL-2025-14069/): Malicious code in add-dictionary (npm) (malicious package)
- [MAL-2025-140689](https://insights.sbomify.com/MAL-2025-140689/): Malicious code in changelog-uninstall-mensa-vulcan (npm) (malicious package)
- [MAL-2025-140688](https://insights.sbomify.com/MAL-2025-140688/): Malicious code in changelog-typeorm-ursa-europa (npm) (malicious package)
- [MAL-2025-140687](https://insights.sbomify.com/MAL-2025-140687/): Malicious code in changelog-taurus-registry-dactyl (npm) (malicious package)
- [MAL-2025-140686](https://insights.sbomify.com/MAL-2025-140686/): Malicious code in changelog-stop-spectron-webdriver-flare (npm) (malicious package)
- [MAL-2025-140685](https://insights.sbomify.com/MAL-2025-140685/): Malicious code in changelog-spawn-spectron-webdriver-query (npm) (malicious package)
- [MAL-2025-140684](https://insights.sbomify.com/MAL-2025-140684/): Malicious code in changelog-slides-update-galaxy (npm) (malicious package)
- [MAL-2025-140683](https://insights.sbomify.com/MAL-2025-140683/): Malicious code in changelog-scripts-avior-relay (npm) (malicious package)
- [MAL-2025-140682](https://insights.sbomify.com/MAL-2025-140682/): Malicious code in changelog-sadr-enceladus-pavo (npm) (malicious package)
- [MAL-2025-140681](https://insights.sbomify.com/MAL-2025-140681/): Malicious code in changelog-rollup-proxima-process (npm) (malicious package)
- [MAL-2025-140680](https://insights.sbomify.com/MAL-2025-140680/): Malicious code in changelog-query-adonis-equinox (npm) (malicious package)
- [MAL-2025-14068](https://insights.sbomify.com/MAL-2025-14068/): Malicious code in adcm-web2 (npm) (malicious package)
- [MAL-2025-140679](https://insights.sbomify.com/MAL-2025-140679/): Malicious code in changelog-protractor-bunyan-sedna (npm) (malicious package)
- [MAL-2025-140678](https://insights.sbomify.com/MAL-2025-140678/): Malicious code in changelog-prompts-perseus-phenomic (npm) (malicious package)
- [MAL-2025-140677](https://insights.sbomify.com/MAL-2025-140677/): Malicious code in changelog-pino-pretty-webpack-bellatrix (npm) (malicious package)
- [MAL-2025-140676](https://insights.sbomify.com/MAL-2025-140676/): Malicious code in changelog-package-eclipse-sirius (npm) (malicious package)
- [MAL-2025-140675](https://insights.sbomify.com/MAL-2025-140675/): Malicious code in changelog-optimize-css-assets-webpack-plugin-leda-passport (npm) (malicious package)
- [MAL-2025-140674](https://insights.sbomify.com/MAL-2025-140674/): Malicious code in changelog-markdown-pdf-rocket-hermes (npm) (malicious package)
- [MAL-2025-140673](https://insights.sbomify.com/MAL-2025-140673/): Malicious code in changelog-library-morgan-build (npm) (malicious package)
- [MAL-2025-140672](https://insights.sbomify.com/MAL-2025-140672/): Malicious code in changelog-juno-odin-chakra-ui (npm) (malicious package)
- [MAL-2025-140671](https://insights.sbomify.com/MAL-2025-140671/): Malicious code in changelog-ignite-query-markdown (npm) (malicious package)
- [MAL-2025-140670](https://insights.sbomify.com/MAL-2025-140670/): Malicious code in changelog-hydra-hugo-ini (npm) (malicious package)
- [MAL-2025-14067](https://insights.sbomify.com/MAL-2025-14067/): Malicious code in adbputty (npm) (malicious package)
- [MAL-2025-140669](https://insights.sbomify.com/MAL-2025-140669/): Malicious code in changelog-eris-apollo-cross-env (npm) (malicious package)
- [MAL-2025-140668](https://insights.sbomify.com/MAL-2025-140668/): Malicious code in changelog-epimetheus-playwright-style-loader (npm) (malicious package)
- [MAL-2025-140667](https://insights.sbomify.com/MAL-2025-140667/): Malicious code in changelog-cosmos-sync-transform (npm) (malicious package)
- [MAL-2025-140666](https://insights.sbomify.com/MAL-2025-140666/): Malicious code in changelog-cosmiconfig-sass-loader-commitlint (npm) (malicious package)
- [MAL-2025-140665](https://insights.sbomify.com/MAL-2025-140665/): Malicious code in changelog-concurrently-sync-antares (npm) (malicious package)
- [MAL-2025-140664](https://insights.sbomify.com/MAL-2025-140664/): Malicious code in changelog-concurrently-subscription-middleware (npm) (malicious package)
- [MAL-2025-140663](https://insights.sbomify.com/MAL-2025-140663/): Malicious code in changelog-bulma-meissa-cz-conventional-changelog (npm) (malicious package)
- [MAL-2025-140662](https://insights.sbomify.com/MAL-2025-140662/): Malicious code in chalk-yonder-cassini-rimraf (npm) (malicious package)
- [MAL-2025-140661](https://insights.sbomify.com/MAL-2025-140661/): Malicious code in chalk-xanthus-repository-carpo (npm) (malicious package)
- [MAL-2025-140660](https://insights.sbomify.com/MAL-2025-140660/): Malicious code in chalk-wasat-juno-materialize (npm) (malicious package)
- [MAL-2025-14066](https://insights.sbomify.com/MAL-2025-14066/): Malicious code in adawong (npm) (malicious package)
- [MAL-2025-140659](https://insights.sbomify.com/MAL-2025-140659/): Malicious code in chalk-ursa-leda-pegasus (npm) (malicious package)
- [MAL-2025-140658](https://insights.sbomify.com/MAL-2025-140658/): Malicious code in chalk-subscription-mutation-less-loader (npm) (malicious package)
- [MAL-2025-140657](https://insights.sbomify.com/MAL-2025-140657/): Malicious code in chalk-sqlite-perseus-server (npm) (malicious package)
- [MAL-2025-140656](https://insights.sbomify.com/MAL-2025-140656/): Malicious code in chalk-sirius-commitlint-hapi (npm) (malicious package)
- [MAL-2025-140655](https://insights.sbomify.com/MAL-2025-140655/): Malicious code in chalk-sedna-global-fornax (npm) (malicious package)
- [MAL-2025-140654](https://insights.sbomify.com/MAL-2025-140654/): Malicious code in chalk-run-script-prompts-css-loader (npm) (malicious package)
- [MAL-2025-140653](https://insights.sbomify.com/MAL-2025-140653/): Malicious code in chalk-procyon-nebula-lint (npm) (malicious package)
- [MAL-2025-140652](https://insights.sbomify.com/MAL-2025-140652/): Malicious code in chalk-passport-xo-mensa (npm) (malicious package)
- [MAL-2025-140651](https://insights.sbomify.com/MAL-2025-140651/): Malicious code in chalk-orbit-dynamo-cosmiconfig (npm) (malicious package)
- [MAL-2025-140650](https://insights.sbomify.com/MAL-2025-140650/): Malicious code in chalk-miranda-stream-ursa (npm) (malicious package)
- [MAL-2025-14065](https://insights.sbomify.com/MAL-2025-14065/): Malicious code in adacgh (npm) (malicious package)
- [MAL-2025-140649](https://insights.sbomify.com/MAL-2025-140649/): Malicious code in chalk-mini-css-extract-plugin-await-xo (npm) (malicious package)
- [MAL-2025-140648](https://insights.sbomify.com/MAL-2025-140648/): Malicious code in chalk-lynx-alphard-virgo (npm) (malicious package)
- [MAL-2025-140647](https://insights.sbomify.com/MAL-2025-140647/): Malicious code in chalk-loglevel-io-upgrade (npm) (malicious package)
- [MAL-2025-140646](https://insights.sbomify.com/MAL-2025-140646/): Malicious code in chalk-kaus-eslint-helios (npm) (malicious package)
- [MAL-2025-140645](https://insights.sbomify.com/MAL-2025-140645/): Malicious code in chalk-kaus-despina-chariklo (npm) (malicious package)
- [MAL-2025-140644](https://insights.sbomify.com/MAL-2025-140644/): Malicious code in chalk-jest-nestjs-node-config (npm) (malicious package)
- [MAL-2025-140643](https://insights.sbomify.com/MAL-2025-140643/): Malicious code in chalk-ignite-polaris-puppeteer (npm) (malicious package)
- [MAL-2025-140642](https://insights.sbomify.com/MAL-2025-140642/): Malicious code in chalk-hydra-parcel-prompts (npm) (malicious package)
- [MAL-2025-140641](https://insights.sbomify.com/MAL-2025-140641/): Malicious code in chalk-gulp-helmet-andromeda (npm) (malicious package)
- [MAL-2025-140640](https://insights.sbomify.com/MAL-2025-140640/): Malicious code in chalk-gemini-nconf-cz-conventional-changelog (npm) (malicious package)
- [MAL-2025-14064](https://insights.sbomify.com/MAL-2025-14064/): Malicious code in acydienmwkjkltrp (npm) (malicious package)
- [MAL-2025-140639](https://insights.sbomify.com/MAL-2025-140639/): Malicious code in chalk-ganymede-postgres-publish (npm) (malicious package)
- [MAL-2025-140638](https://insights.sbomify.com/MAL-2025-140638/): Malicious code in chalk-ganymede-dependencies-oauth (npm) (malicious package)
- [MAL-2025-140637](https://insights.sbomify.com/MAL-2025-140637/): Malicious code in chalk-ganymede-delphinus-javascript (npm) (malicious package)
- [MAL-2025-140636](https://insights.sbomify.com/MAL-2025-140636/): Malicious code in chalk-elara-mutation-protractor (npm) (malicious package)
- [MAL-2025-140635](https://insights.sbomify.com/MAL-2025-140635/): Malicious code in chalk-draco-wezen-canopus (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1480/