# Vulnerabilities published in 2025


- [MAL-2025-140634](https://insights.sbomify.com/MAL-2025-140634/): Malicious code in chalk-dactyl-orbit-standard (npm) (malicious package)
- [MAL-2025-140633](https://insights.sbomify.com/MAL-2025-140633/): Malicious code in chalk-cosmiconfig-kinetic-lint (npm) (malicious package)
- [MAL-2025-140632](https://insights.sbomify.com/MAL-2025-140632/): Malicious code in chakra-ui-webdriver-mocha-pavo-child-process (npm) (malicious package)
- [MAL-2025-140631](https://insights.sbomify.com/MAL-2025-140631/): Malicious code in chakra-ui-vega-express-soap (npm) (malicious package)
- [MAL-2025-140630](https://insights.sbomify.com/MAL-2025-140630/): Malicious code in chakra-ui-transform-callisto-unuk (npm) (malicious package)
- [MAL-2025-14063](https://insights.sbomify.com/MAL-2025-14063/): Malicious code in acyclovir (npm) (malicious package)
- [MAL-2025-140629](https://insights.sbomify.com/MAL-2025-140629/): Malicious code in chakra-ui-subscription-vuepress-gulp (npm) (malicious package)
- [MAL-2025-140628](https://insights.sbomify.com/MAL-2025-140628/): Malicious code in chakra-ui-semantic-ui-query-virgo (npm) (malicious package)
- [MAL-2025-140627](https://insights.sbomify.com/MAL-2025-140627/): Malicious code in chakra-ui-scripts-procyon-pino-pretty (npm) (malicious package)
- [MAL-2025-140626](https://insights.sbomify.com/MAL-2025-140626/): Malicious code in chakra-ui-rigel-juno-virgo (npm) (malicious package)
- [MAL-2025-140625](https://insights.sbomify.com/MAL-2025-140625/): Malicious code in chakra-ui-repository-jsonp-version (npm) (malicious package)
- [MAL-2025-140624](https://insights.sbomify.com/MAL-2025-140624/): Malicious code in chakra-ui-protractor-jekyll-protractor (npm) (malicious package)
- [MAL-2025-140623](https://insights.sbomify.com/MAL-2025-140623/): Malicious code in chakra-ui-nodemon-metalsmith-loop (npm) (malicious package)
- [MAL-2025-140622](https://insights.sbomify.com/MAL-2025-140622/): Malicious code in chakra-ui-nodemon-gridsome-quito (npm) (malicious package)
- [MAL-2025-140621](https://insights.sbomify.com/MAL-2025-140621/): Malicious code in chakra-ui-neptune-eslint-koa (npm) (malicious package)
- [MAL-2025-140620](https://insights.sbomify.com/MAL-2025-140620/): Malicious code in chakra-ui-lint-webpack-yildun (npm) (malicious package)
- [MAL-2025-14062](https://insights.sbomify.com/MAL-2025-14062/): Malicious code in acvlib (npm) (malicious package)
- [MAL-2025-140619](https://insights.sbomify.com/MAL-2025-140619/): Malicious code in chakra-ui-lacerta-tethys-protractor (npm) (malicious package)
- [MAL-2025-140618](https://insights.sbomify.com/MAL-2025-140618/): Malicious code in chakra-ui-jekyll-algol-prompts (npm) (malicious package)
- [MAL-2025-140617](https://insights.sbomify.com/MAL-2025-140617/): Malicious code in chakra-ui-indus-castor-betelgeuse (npm) (malicious package)
- [MAL-2025-140616](https://insights.sbomify.com/MAL-2025-140616/): Malicious code in chakra-ui-gravity-mini-css-extract-plugin-chromedriver (npm) (malicious package)
- [MAL-2025-140615](https://insights.sbomify.com/MAL-2025-140615/): Malicious code in chakra-ui-gemini-astro-eslint (npm) (malicious package)
- [MAL-2025-140614](https://insights.sbomify.com/MAL-2025-140614/): Malicious code in chakra-ui-gatsby-terser-webpack-plugin-gulp (npm) (malicious package)
- [MAL-2025-140613](https://insights.sbomify.com/MAL-2025-140613/): Malicious code in chakra-ui-eslint-toml-react-bootstrap (npm) (malicious package)
- [MAL-2025-140612](https://insights.sbomify.com/MAL-2025-140612/): Malicious code in chakra-ui-eslint-plugin-dependencies-geckodriver (npm) (malicious package)
- [MAL-2025-140611](https://insights.sbomify.com/MAL-2025-140611/): Malicious code in chakra-ui-cypress-juno-pm2 (npm) (malicious package)
- [MAL-2025-140610](https://insights.sbomify.com/MAL-2025-140610/): Malicious code in chakra-ui-command-passport-kastra (npm) (malicious package)
- [MAL-2025-14061](https://insights.sbomify.com/MAL-2025-14061/): Malicious code in actusjsmath (npm) (malicious package)
- [MAL-2025-140609](https://insights.sbomify.com/MAL-2025-140609/): Malicious code in chakra-ui-comet-style-loader-markdown (npm) (malicious package)
- [MAL-2025-140608](https://insights.sbomify.com/MAL-2025-140608/): Malicious code in chai-zephyr-jasmine-stop (npm) (malicious package)
- [MAL-2025-140607](https://insights.sbomify.com/MAL-2025-140607/): Malicious code in chai-virgo-spica-blaze (npm) (malicious package)
- [MAL-2025-140606](https://insights.sbomify.com/MAL-2025-140606/): Malicious code in chai-semantic-ui-sagitta-stream (npm) (malicious package)
- [MAL-2025-140605](https://insights.sbomify.com/MAL-2025-140605/): Malicious code in chai-sedna-configstore-subscription (npm) (malicious package)
- [MAL-2025-140604](https://insights.sbomify.com/MAL-2025-140604/): Malicious code in chai-pulsar-carpo-mysql (npm) (malicious package)
- [MAL-2025-140603](https://insights.sbomify.com/MAL-2025-140603/): Malicious code in chai-protractor-dotenv-parse-variables-native (npm) (malicious package)
- [MAL-2025-140602](https://insights.sbomify.com/MAL-2025-140602/): Malicious code in chai-procyon-postcss-loader-forever (npm) (malicious package)
- [MAL-2025-140601](https://insights.sbomify.com/MAL-2025-140601/): Malicious code in chai-postgres-spica-odin (npm) (malicious package)
- [MAL-2025-140600](https://insights.sbomify.com/MAL-2025-140600/): Malicious code in chai-postcss-loader-subscription-epimetheus (npm) (malicious package)
- [MAL-2025-14060](https://insights.sbomify.com/MAL-2025-14060/): Malicious code in actual-free-xbox-codes686 (npm) (malicious package)
- [MAL-2025-1406](https://insights.sbomify.com/MAL-2025-1406/): Malicious code in coinw-main (npm) (malicious package)
- [MAL-2025-140599](https://insights.sbomify.com/MAL-2025-140599/): Malicious code in chai-pegasus-janus-dactyl (npm) (malicious package)
- [MAL-2025-140598](https://insights.sbomify.com/MAL-2025-140598/): Malicious code in chai-morgan-aurora-commitlint (npm) (malicious package)
- [MAL-2025-140597](https://insights.sbomify.com/MAL-2025-140597/): Malicious code in chai-luna-sagitta-galaxy (npm) (malicious package)
- [MAL-2025-140596](https://insights.sbomify.com/MAL-2025-140596/): Malicious code in chai-library-nebula-norma (npm) (malicious package)
- [MAL-2025-140595](https://insights.sbomify.com/MAL-2025-140595/): Malicious code in chai-less-publish-sedna (npm) (malicious package)
- [MAL-2025-140594](https://insights.sbomify.com/MAL-2025-140594/): Malicious code in chai-less-loader-less-repository (npm) (malicious package)
- [MAL-2025-140593](https://insights.sbomify.com/MAL-2025-140593/): Malicious code in chai-janus-venus-dorado (npm) (malicious package)
- [MAL-2025-140592](https://insights.sbomify.com/MAL-2025-140592/): Malicious code in chai-hydra-nova-playwright (npm) (malicious package)
- [MAL-2025-140591](https://insights.sbomify.com/MAL-2025-140591/): Malicious code in chai-html-webpack-plugin-nightwatch-yakutsk (npm) (malicious package)
- [MAL-2025-140590](https://insights.sbomify.com/MAL-2025-140590/): Malicious code in chai-fomalhaut-private-link (npm) (malicious package)
- [MAL-2025-14059](https://insights.sbomify.com/MAL-2025-14059/): Malicious code in actual-free-xbox-codes008 (npm) (malicious package)
- [MAL-2025-140589](https://insights.sbomify.com/MAL-2025-140589/): Malicious code in chai-firebase-koa-wezen (npm) (malicious package)
- [MAL-2025-140588](https://insights.sbomify.com/MAL-2025-140588/): Malicious code in chai-dione-juno-antares (npm) (malicious package)
- [MAL-2025-140587](https://insights.sbomify.com/MAL-2025-140587/): Malicious code in chai-cordelia-quito-playwright (npm) (malicious package)
- [MAL-2025-140586](https://insights.sbomify.com/MAL-2025-140586/): Malicious code in chai-chalk-procyon-fornax (npm) (malicious package)
- [MAL-2025-140585](https://insights.sbomify.com/MAL-2025-140585/): Malicious code in chai-bunyan-gacrux-docusaurus (npm) (malicious package)
- [MAL-2025-140584](https://insights.sbomify.com/MAL-2025-140584/): Malicious code in chai-astro-vega-husky (npm) (malicious package)
- [MAL-2025-140583](https://insights.sbomify.com/MAL-2025-140583/): Malicious code in chai-ariel-leda-remark (npm) (malicious package)
- [MAL-2025-140582](https://insights.sbomify.com/MAL-2025-140582/): Malicious code in chai-antares-gravity-eslint-config (npm) (malicious package)
- [MAL-2025-140581](https://insights.sbomify.com/MAL-2025-140581/): Malicious code in ceres-yonder-global-adonis (npm) (malicious package)
- [MAL-2025-140580](https://insights.sbomify.com/MAL-2025-140580/): Malicious code in ceres-vega-update-jovian (npm) (malicious package)
- [MAL-2025-14058](https://insights.sbomify.com/MAL-2025-14058/): Malicious code in actordata (npm) (malicious package)
- [MAL-2025-140579](https://insights.sbomify.com/MAL-2025-140579/): Malicious code in ceres-telesto-bootstrap-optimize-css-assets-webpack-plugin (npm) (malicious package)
- [MAL-2025-140578](https://insights.sbomify.com/MAL-2025-140578/): Malicious code in ceres-taurus-quasar-mui (npm) (malicious package)
- [MAL-2025-140577](https://insights.sbomify.com/MAL-2025-140577/): Malicious code in ceres-superagent-sedna-spinner (npm) (malicious package)
- [MAL-2025-140576](https://insights.sbomify.com/MAL-2025-140576/): Malicious code in ceres-scripts-koa-halley (npm) (malicious package)
- [MAL-2025-140575](https://insights.sbomify.com/MAL-2025-140575/): Malicious code in ceres-rollup-warp-helios (npm) (malicious package)
- [MAL-2025-140574](https://insights.sbomify.com/MAL-2025-140574/): Malicious code in ceres-react-bootstrap-gatsby-standard (npm) (malicious package)
- [MAL-2025-140573](https://insights.sbomify.com/MAL-2025-140573/): Malicious code in ceres-oberon-less-loader-proxima (npm) (malicious package)
- [MAL-2025-140572](https://insights.sbomify.com/MAL-2025-140572/): Malicious code in ceres-mensa-convict-process (npm) (malicious package)
- [MAL-2025-140571](https://insights.sbomify.com/MAL-2025-140571/): Malicious code in ceres-lynx-upgrade-local (npm) (malicious package)
- [MAL-2025-140570](https://insights.sbomify.com/MAL-2025-140570/): Malicious code in ceres-loopback-sequelize-browserify (npm) (malicious package)
- [MAL-2025-14057](https://insights.sbomify.com/MAL-2025-14057/): Malicious code in activscreen-player (npm) (malicious package)
- [MAL-2025-140569](https://insights.sbomify.com/MAL-2025-140569/): Malicious code in ceres-kronos-warp-got (npm) (malicious package)
- [MAL-2025-140568](https://insights.sbomify.com/MAL-2025-140568/): Malicious code in ceres-hydra-rocket-stop (npm) (malicious package)
- [MAL-2025-140567](https://insights.sbomify.com/MAL-2025-140567/): Malicious code in ceres-helmet-wezen-stream (npm) (malicious package)
- [MAL-2025-140566](https://insights.sbomify.com/MAL-2025-140566/): Malicious code in ceres-geckodriver-hercules-promise (npm) (malicious package)
- [MAL-2025-140565](https://insights.sbomify.com/MAL-2025-140565/): Malicious code in ceres-fusion-socketio-metalsmith (npm) (malicious package)
- [MAL-2025-140564](https://insights.sbomify.com/MAL-2025-140564/): Malicious code in ceres-eridanus-eslint-config-triton (npm) (malicious package)
- [MAL-2025-140563](https://insights.sbomify.com/MAL-2025-140563/): Malicious code in ceres-electron-builder-nuxtjs-acamar (npm) (malicious package)
- [MAL-2025-140562](https://insights.sbomify.com/MAL-2025-140562/): Malicious code in ceres-dione-materialize-quasar (npm) (malicious package)
- [MAL-2025-140561](https://insights.sbomify.com/MAL-2025-140561/): Malicious code in ceres-dependencies-restart-prompts (npm) (malicious package)
- [MAL-2025-140560](https://insights.sbomify.com/MAL-2025-140560/): Malicious code in ceres-cressida-lacerta-foundation (npm) (malicious package)
- [MAL-2025-14056](https://insights.sbomify.com/MAL-2025-14056/): Malicious code in activity-reader (npm) (malicious package)
- [MAL-2025-140559](https://insights.sbomify.com/MAL-2025-140559/): Malicious code in ceres-configstore-jwt-chalk (npm) (malicious package)
- [MAL-2025-140558](https://insights.sbomify.com/MAL-2025-140558/): Malicious code in centaurus-websockets-enceladus-semantic-release (npm) (malicious package)
- [MAL-2025-140557](https://insights.sbomify.com/MAL-2025-140557/): Malicious code in centaurus-vuepress-concurrently-koa (npm) (malicious package)
- [MAL-2025-140556](https://insights.sbomify.com/MAL-2025-140556/): Malicious code in centaurus-venus-ophiuchus-umbra (npm) (malicious package)
- [MAL-2025-140555](https://insights.sbomify.com/MAL-2025-140555/): Malicious code in centaurus-update-xanadu-less (npm) (malicious package)
- [MAL-2025-140554](https://insights.sbomify.com/MAL-2025-140554/): Malicious code in centaurus-spectron-element-ui-css-minimizer-webpack-plugin (npm) (malicious package)
- [MAL-2025-140553](https://insights.sbomify.com/MAL-2025-140553/): Malicious code in centaurus-scripts-gulp-terser-webpack-plugin (npm) (malicious package)
- [MAL-2025-140552](https://insights.sbomify.com/MAL-2025-140552/): Malicious code in centaurus-rimraf-install-rollup-plugin (npm) (malicious package)
- [MAL-2025-140551](https://insights.sbomify.com/MAL-2025-140551/): Malicious code in centaurus-reveal-md-ignite-dactyl (npm) (malicious package)
- [MAL-2025-140550](https://insights.sbomify.com/MAL-2025-140550/): Malicious code in centaurus-puppeteer-epimetheus-gacrux (npm) (malicious package)
- [MAL-2025-14055](https://insights.sbomify.com/MAL-2025-14055/): Malicious code in activesplit (npm) (malicious package)
- [MAL-2025-140549](https://insights.sbomify.com/MAL-2025-140549/): Malicious code in centaurus-publish-zenith-transport (npm) (malicious package)
- [MAL-2025-140548](https://insights.sbomify.com/MAL-2025-140548/): Malicious code in centaurus-protractor-pegasus-hugo (npm) (malicious package)
- [MAL-2025-140547](https://insights.sbomify.com/MAL-2025-140547/): Malicious code in centaurus-mongoose-antares-ora (npm) (malicious package)
- [MAL-2025-140546](https://insights.sbomify.com/MAL-2025-140546/): Malicious code in centaurus-kinetic-sirius-commitizen (npm) (malicious package)
- [MAL-2025-140545](https://insights.sbomify.com/MAL-2025-140545/): Malicious code in centaurus-fork-webpack-react-bootstrap (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1481/