# Vulnerabilities published in 2025


- [MAL-2025-186627](https://insights.sbomify.com/MAL-2025-186627/): Malicious code in dotenv-safe-vortex-meissa-webdriverio (npm) (malicious package)
- [MAL-2025-186626](https://insights.sbomify.com/MAL-2025-186626/): Malicious code in dotenv-safe-sedimentology-wolf-singularity (npm) (malicious package)
- [MAL-2025-186625](https://insights.sbomify.com/MAL-2025-186625/): Malicious code in dotenv-safe-pino-pretty-terser-postcss (npm) (malicious package)
- [MAL-2025-186624](https://insights.sbomify.com/MAL-2025-186624/): Malicious code in dotenv-safe-parsec-soap-polaris (npm) (malicious package)
- [MAL-2025-186623](https://insights.sbomify.com/MAL-2025-186623/): Malicious code in dotenv-safe-norma-vuetify-paleomagnetism (npm) (malicious package)
- [MAL-2025-186622](https://insights.sbomify.com/MAL-2025-186622/): Malicious code in dotenv-safe-nodemon-ariel-petrology (npm) (malicious package)
- [MAL-2025-186621](https://insights.sbomify.com/MAL-2025-186621/): Malicious code in dotenv-safe-jovian-astroinformatics-ablation (npm) (malicious package)
- [MAL-2025-186620](https://insights.sbomify.com/MAL-2025-186620/): Malicious code in dotenv-safe-electron-delphinus-dynamo (npm) (malicious package)
- [MAL-2025-18662](https://insights.sbomify.com/MAL-2025-18662/): Malicious code in dotenv-parse-variables-neutrino-spinner-higgs (npm) (malicious package)
- [MAL-2025-186619](https://insights.sbomify.com/MAL-2025-186619/): Malicious code in dotenv-parse-variables-public-cosmiconfig-zenobia (npm) (malicious package)
- [MAL-2025-186618](https://insights.sbomify.com/MAL-2025-186618/): Malicious code in dotenv-parse-variables-init-child-process-genomics (npm) (malicious package)
- [MAL-2025-186617](https://insights.sbomify.com/MAL-2025-186617/): Malicious code in dotenv-parse-variables-heliophysics-wasat-metalsmith (npm) (malicious package)
- [MAL-2025-186616](https://insights.sbomify.com/MAL-2025-186616/): Malicious code in dotenv-parse-variables-biogeochemistry-version-betelgeuse (npm) (malicious package)
- [MAL-2025-186615](https://insights.sbomify.com/MAL-2025-186615/): Malicious code in dotenv-parse-variables-astrobiology-readable-magellan (npm) (malicious package)
- [MAL-2025-186614](https://insights.sbomify.com/MAL-2025-186614/): Malicious code in dotenv-ophiuchus-steganography-event (npm) (malicious package)
- [MAL-2025-186613](https://insights.sbomify.com/MAL-2025-186613/): Malicious code in dotenv-metalsmith-proxima-heliophysics (npm) (malicious package)
- [MAL-2025-186612](https://insights.sbomify.com/MAL-2025-186612/): Malicious code in dotenv-hexo-apollo-cryonics (npm) (malicious package)
- [MAL-2025-186611](https://insights.sbomify.com/MAL-2025-186611/): Malicious code in dorado-spectron-webdriver-spectron-cache (npm) (malicious package)
- [MAL-2025-186610](https://insights.sbomify.com/MAL-2025-186610/): Malicious code in dorado-slidev-hyperion-avior (npm) (malicious package)
- [MAL-2025-18661](https://insights.sbomify.com/MAL-2025-18661/): Malicious code in dotenv-lib (npm) (malicious package)
- [MAL-2025-186609](https://insights.sbomify.com/MAL-2025-186609/): Malicious code in dorado-norma-sequelize-hydrogeology (npm) (malicious package)
- [MAL-2025-186608](https://insights.sbomify.com/MAL-2025-186608/): Malicious code in dorado-jest-gatsby-fornax (npm) (malicious package)
- [MAL-2025-186607](https://insights.sbomify.com/MAL-2025-186607/): Malicious code in dorado-hydrogeology-zooarchaeology-regulus (npm) (malicious package)
- [MAL-2025-186606](https://insights.sbomify.com/MAL-2025-186606/): Malicious code in dorado-hexo-sqlite-postcss-loader (npm) (malicious package)
- [MAL-2025-186605](https://insights.sbomify.com/MAL-2025-186605/): Malicious code in dorado-development-troposphere-futurology (npm) (malicious package)
- [MAL-2025-186604](https://insights.sbomify.com/MAL-2025-186604/): Malicious code in dog-water-double-sudo-export (npm) (malicious package)
- [MAL-2025-186603](https://insights.sbomify.com/MAL-2025-186603/): Malicious code in dog-process-file-file-moon (npm) (malicious package)
- [MAL-2025-186602](https://insights.sbomify.com/MAL-2025-186602/): Malicious code in dog-daemon-transpile-grid-bundle (npm) (malicious package)
- [MAL-2025-186601](https://insights.sbomify.com/MAL-2025-186601/): Malicious code in dog-book-protected-scale-grid (npm) (malicious package)
- [MAL-2025-186600](https://insights.sbomify.com/MAL-2025-186600/): Malicious code in docusaurus-xml-proxima-luna (npm) (malicious package)
- [MAL-2025-18660](https://insights.sbomify.com/MAL-2025-18660/): Malicious code in dotenv-fusion-ini-miranda (npm) (malicious package)
- [MAL-2025-1866](https://insights.sbomify.com/MAL-2025-1866/): Malicious code in instacart-tools (npm) (malicious package)
- [MAL-2025-186599](https://insights.sbomify.com/MAL-2025-186599/): Malicious code in docusaurus-titan-betelgeuse-request (npm) (malicious package)
- [MAL-2025-186598](https://insights.sbomify.com/MAL-2025-186598/): Malicious code in docusaurus-thermosphere-aquarius-rehype (npm) (malicious package)
- [MAL-2025-186597](https://insights.sbomify.com/MAL-2025-186597/): Malicious code in docusaurus-robotics-supercluster-sublimation (npm) (malicious package)
- [MAL-2025-186596](https://insights.sbomify.com/MAL-2025-186596/): Malicious code in docusaurus-mdx-ionosphere-fermiparadox (npm) (malicious package)
- [MAL-2025-186595](https://insights.sbomify.com/MAL-2025-186595/): Malicious code in docusaurus-impulse-dagda-ignite (npm) (malicious package)
- [MAL-2025-186594](https://insights.sbomify.com/MAL-2025-186594/): Malicious code in docusaurus-hugo-uglify-js-dione (npm) (malicious package)
- [MAL-2025-186593](https://insights.sbomify.com/MAL-2025-186593/): Malicious code in docusaurus-eventhoriz-heliophysics-neutronstar (npm) (malicious package)
- [MAL-2025-186592](https://insights.sbomify.com/MAL-2025-186592/): Malicious code in docusaurus-callback-abiogenesis-mesosphere (npm) (malicious package)
- [MAL-2025-186591](https://insights.sbomify.com/MAL-2025-186591/): Malicious code in docusaurus-buffer-sequelize-cassini (npm) (malicious package)
- [MAL-2025-186590](https://insights.sbomify.com/MAL-2025-186590/): Malicious code in docusaurus-bellatrix-xanthus-virgo (npm) (malicious package)
- [MAL-2025-18659](https://insights.sbomify.com/MAL-2025-18659/): Malicious code in dotenv-foundation-perseus-version (npm) (malicious package)
- [MAL-2025-186589](https://insights.sbomify.com/MAL-2025-186589/): Malicious code in dione-troposphere-oscillation-andromeda (npm) (malicious package)
- [MAL-2025-186588](https://insights.sbomify.com/MAL-2025-186588/): Malicious code in dione-transport-astrobiology-leda (npm) (malicious package)
- [MAL-2025-186587](https://insights.sbomify.com/MAL-2025-186587/): Malicious code in dione-kastra-public-react-bootstrap (npm) (malicious package)
- [MAL-2025-186586](https://insights.sbomify.com/MAL-2025-186586/): Malicious code in dione-dorado-apollo-mongodb (npm) (malicious package)
- [MAL-2025-186585](https://insights.sbomify.com/MAL-2025-186585/): Malicious code in dione-cressida-schema-spectron (npm) (malicious package)
- [MAL-2025-186584](https://insights.sbomify.com/MAL-2025-186584/): Malicious code in development-xerxes-dagda-repository (npm) (malicious package)
- [MAL-2025-186583](https://insights.sbomify.com/MAL-2025-186583/): Malicious code in development-webdriver-mocha-leda-bellatrix (npm) (malicious package)
- [MAL-2025-186582](https://insights.sbomify.com/MAL-2025-186582/): Malicious code in development-warp-geoarchaeology-odin (npm) (malicious package)
- [MAL-2025-186581](https://insights.sbomify.com/MAL-2025-186581/): Malicious code in development-rollup-pipe-koa (npm) (malicious package)
- [MAL-2025-186580](https://insights.sbomify.com/MAL-2025-186580/): Malicious code in development-postcss-loader-webpack-cosmicweb (npm) (malicious package)
- [MAL-2025-18658](https://insights.sbomify.com/MAL-2025-18658/): Malicious code in dotenv-cryonics-rate-limiter-membrane (npm) (malicious package)
- [MAL-2025-186579](https://insights.sbomify.com/MAL-2025-186579/): Malicious code in development-playwright-stratosphere-parcel (npm) (malicious package)
- [MAL-2025-186578](https://insights.sbomify.com/MAL-2025-186578/): Malicious code in development-outercore-neptune-singularitarianism (npm) (malicious package)
- [MAL-2025-186577](https://insights.sbomify.com/MAL-2025-186577/): Malicious code in development-mineralogy-vortex-scripts (npm) (malicious package)
- [MAL-2025-186576](https://insights.sbomify.com/MAL-2025-186576/): Malicious code in development-kinetic-mocha-equinox (npm) (malicious package)
- [MAL-2025-186575](https://insights.sbomify.com/MAL-2025-186575/): Malicious code in development-dependencies-cybernetics-cryptography (npm) (malicious package)
- [MAL-2025-186574](https://insights.sbomify.com/MAL-2025-186574/): Malicious code in development-cypress-nebula-spectron (npm) (malicious package)
- [MAL-2025-186573](https://insights.sbomify.com/MAL-2025-186573/): Malicious code in development-child-process-npm-socketio (npm) (malicious package)
- [MAL-2025-186572](https://insights.sbomify.com/MAL-2025-186572/): Malicious code in development-antares-xerxes-membrane (npm) (malicious package)
- [MAL-2025-186571](https://insights.sbomify.com/MAL-2025-186571/): Malicious code in despina-winston-query-higgs (npm) (malicious package)
- [MAL-2025-186570](https://insights.sbomify.com/MAL-2025-186570/): Malicious code in despina-publish-spectron-webdriver-dotenv-safe (npm) (malicious package)
- [MAL-2025-18657](https://insights.sbomify.com/MAL-2025-18657/): Malicious code in dotenv-cosmos-taurus-kinetic (npm) (malicious package)
- [MAL-2025-186569](https://insights.sbomify.com/MAL-2025-186569/): Malicious code in despina-photon-nodejs-on (npm) (malicious package)
- [MAL-2025-186568](https://insights.sbomify.com/MAL-2025-186568/): Malicious code in despina-lightyear-yakutsk-jwt (npm) (malicious package)
- [MAL-2025-186567](https://insights.sbomify.com/MAL-2025-186567/): Malicious code in despina-kastra-forever-supervisor (npm) (malicious package)
- [MAL-2025-186566](https://insights.sbomify.com/MAL-2025-186566/): Malicious code in despina-cluster-asteroid-wormhole (npm) (malicious package)
- [MAL-2025-186565](https://insights.sbomify.com/MAL-2025-186565/): Malicious code in deserialize-rain-stub-alpha-socket (npm) (malicious package)
- [MAL-2025-186564](https://insights.sbomify.com/MAL-2025-186564/): Malicious code in deserialize-load-byte-delta-optimize (npm) (malicious package)
- [MAL-2025-186563](https://insights.sbomify.com/MAL-2025-186563/): Malicious code in deserialize-double-simulate-interpret-tau (npm) (malicious package)
- [MAL-2025-186562](https://insights.sbomify.com/MAL-2025-186562/): Malicious code in deserialize-book-cloud-awk-finally (npm) (malicious package)
- [MAL-2025-186561](https://insights.sbomify.com/MAL-2025-186561/): Malicious code in deploy-thread-scale-omega-enum (npm) (malicious package)
- [MAL-2025-186560](https://insights.sbomify.com/MAL-2025-186560/): Malicious code in deploy-good-data-double-unix (npm) (malicious package)
- [MAL-2025-18656](https://insights.sbomify.com/MAL-2025-18656/): Malicious code in dotenv-antares-exobiology-hermes (npm) (malicious package)
- [MAL-2025-186559](https://insights.sbomify.com/MAL-2025-186559/): Malicious code in deploy-awk-user-psi-mu (npm) (malicious package)
- [MAL-2025-186558](https://insights.sbomify.com/MAL-2025-186558/): Malicious code in dependencies-tectonophysics-archaeoastronomy-mechatronics (npm) (malicious package)
- [MAL-2025-186557](https://insights.sbomify.com/MAL-2025-186557/): Malicious code in dependencies-taurus-dotenv-safe-ora (npm) (malicious package)
- [MAL-2025-186556](https://insights.sbomify.com/MAL-2025-186556/): Malicious code in dependencies-nova-meteor-mira (npm) (malicious package)
- [MAL-2025-186555](https://insights.sbomify.com/MAL-2025-186555/): Malicious code in dependencies-galaxy-install-module (npm) (malicious package)
- [MAL-2025-186554](https://insights.sbomify.com/MAL-2025-186554/): Malicious code in dependencies-dynamo-optimize-css-assets-webpack-plugin-gatsby (npm) (malicious package)
- [MAL-2025-186553](https://insights.sbomify.com/MAL-2025-186553/): Malicious code in deneb-warp-nucleosynthesis-lepton (npm) (malicious package)
- [MAL-2025-186552](https://insights.sbomify.com/MAL-2025-186552/): Malicious code in deneb-terser-webpack-plugin-lightyear-enceladus (npm) (malicious package)
- [MAL-2025-186551](https://insights.sbomify.com/MAL-2025-186551/): Malicious code in deneb-speleology-sadr-config (npm) (malicious package)
- [MAL-2025-186550](https://insights.sbomify.com/MAL-2025-186550/): Malicious code in deneb-parallax-aldebaran-prettier (npm) (malicious package)
- [MAL-2025-18655](https://insights.sbomify.com/MAL-2025-18655/): Malicious code in dotconfig (npm) (malicious package)
- [MAL-2025-186549](https://insights.sbomify.com/MAL-2025-186549/): Malicious code in deneb-multiverse-augmentedreality-phoenix (npm) (malicious package)
- [MAL-2025-186548](https://insights.sbomify.com/MAL-2025-186548/): Malicious code in deneb-juno-virtualreality-middleware (npm) (malicious package)
- [MAL-2025-186547](https://insights.sbomify.com/MAL-2025-186547/): Malicious code in deneb-juno-telesto-shelljs (npm) (malicious package)
- [MAL-2025-186546](https://insights.sbomify.com/MAL-2025-186546/): Malicious code in deneb-iota-xenos-celeste (npm) (malicious package)
- [MAL-2025-186545](https://insights.sbomify.com/MAL-2025-186545/): Malicious code in deneb-halley-astrochemistry-nightwatch (npm) (malicious package)
- [MAL-2025-186544](https://insights.sbomify.com/MAL-2025-186544/): Malicious code in deneb-biosignature-taphonomy-glaciology (npm) (malicious package)
- [MAL-2025-186543](https://insights.sbomify.com/MAL-2025-186543/): Malicious code in deneb-bellatrix-eridanus-cz-conventional-changelog (npm) (malicious package)
- [MAL-2025-186542](https://insights.sbomify.com/MAL-2025-186542/): Malicious code in dendrochronology-test-markdownlint-grunt (npm) (malicious package)
- [MAL-2025-186541](https://insights.sbomify.com/MAL-2025-186541/): Malicious code in dendrochronology-pm2-chromedriver-orogeny (npm) (malicious package)
- [MAL-2025-186540](https://insights.sbomify.com/MAL-2025-186540/): Malicious code in dendrochronology-metalsmith-rollup-plutology (npm) (malicious package)
- [MAL-2025-18654](https://insights.sbomify.com/MAL-2025-18654/): Malicious code in doscolors (npm) (malicious package)
- [MAL-2025-186539](https://insights.sbomify.com/MAL-2025-186539/): Malicious code in dendrochronology-graphql-betelgeuse-acamar (npm) (malicious package)
- [MAL-2025-186538](https://insights.sbomify.com/MAL-2025-186538/): Malicious code in dendrochronology-eslint-plugin-andromeda-helios (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/970/