# Vulnerabilities published in 2025


- [MAL-2025-186447](https://insights.sbomify.com/MAL-2025-186447/): Malicious code in cypress-enif-robotics-miranda (npm) (malicious package)
- [MAL-2025-186446](https://insights.sbomify.com/MAL-2025-186446/): Malicious code in cypress-cosmiconfig-dotenv-safe-telesto (npm) (malicious package)
- [MAL-2025-186445](https://insights.sbomify.com/MAL-2025-186445/): Malicious code in cygnus-winston-geodynamo-biomimicry (npm) (malicious package)
- [MAL-2025-186444](https://insights.sbomify.com/MAL-2025-186444/): Malicious code in cygnus-whitedwarf-entanglement-google (npm) (malicious package)
- [MAL-2025-186443](https://insights.sbomify.com/MAL-2025-186443/): Malicious code in cygnus-umbra-webdriver-mocha-docusaurus (npm) (malicious package)
- [MAL-2025-186442](https://insights.sbomify.com/MAL-2025-186442/): Malicious code in cygnus-tool-update-xenos (npm) (malicious package)
- [MAL-2025-186441](https://insights.sbomify.com/MAL-2025-186441/): Malicious code in cygnus-got-nconf-public (npm) (malicious package)
- [MAL-2025-186440](https://insights.sbomify.com/MAL-2025-186440/): Malicious code in cybernetics-uninstall-kinetic-neptune (npm) (malicious package)
- [MAL-2025-18644](https://insights.sbomify.com/MAL-2025-18644/): Malicious code in door (npm) (malicious package)
- [MAL-2025-186439](https://insights.sbomify.com/MAL-2025-186439/): Malicious code in cybernetics-selenology-local-eridanus (npm) (malicious package)
- [MAL-2025-186438](https://insights.sbomify.com/MAL-2025-186438/): Malicious code in cybernetics-duplex-wolf-json (npm) (malicious package)
- [MAL-2025-186437](https://insights.sbomify.com/MAL-2025-186437/): Malicious code in cybernetics-duplex-oscillation-publish (npm) (malicious package)
- [MAL-2025-186436](https://insights.sbomify.com/MAL-2025-186436/): Malicious code in cybernetics-configstore-apex-luna (npm) (malicious package)
- [MAL-2025-186435](https://insights.sbomify.com/MAL-2025-186435/): Malicious code in cybernetics-concurrently-testcafe-foundation (npm) (malicious package)
- [MAL-2025-186434](https://insights.sbomify.com/MAL-2025-186434/): Malicious code in csv-steganography-sadr-buffer (npm) (malicious package)
- [MAL-2025-186433](https://insights.sbomify.com/MAL-2025-186433/): Malicious code in csv-puppeteer-phoenix-event (npm) (malicious package)
- [MAL-2025-186432](https://insights.sbomify.com/MAL-2025-186432/): Malicious code in csv-mongodb-rehype-less-loader (npm) (malicious package)
- [MAL-2025-186431](https://insights.sbomify.com/MAL-2025-186431/): Malicious code in csv-mensa-hadron-sagitta (npm) (malicious package)
- [MAL-2025-186430](https://insights.sbomify.com/MAL-2025-186430/): Malicious code in csv-helmet-dione-canopus (npm) (malicious package)
- [MAL-2025-18643](https://insights.sbomify.com/MAL-2025-18643/): Malicious code in doomclock (npm) (malicious package)
- [MAL-2025-186429](https://insights.sbomify.com/MAL-2025-186429/): Malicious code in csv-envconfig-achernar-stratigraphy (npm) (malicious package)
- [MAL-2025-186428](https://insights.sbomify.com/MAL-2025-186428/): Malicious code in csv-dysonswarm-aether-optimize-css-assets-webpack-plugin (npm) (malicious package)
- [MAL-2025-186427](https://insights.sbomify.com/MAL-2025-186427/): Malicious code in csv-aldebaran-biohacking-cluster (npm) (malicious package)
- [MAL-2025-186426](https://insights.sbomify.com/MAL-2025-186426/): Malicious code in css-minimizer-webpack-plugin-vuetify-ichnology-redshift (npm) (malicious package)
- [MAL-2025-186425](https://insights.sbomify.com/MAL-2025-186425/): Malicious code in css-minimizer-webpack-plugin-virtualreality-ignite-node-sass (npm) (malicious package)
- [MAL-2025-186424](https://insights.sbomify.com/MAL-2025-186424/): Malicious code in css-minimizer-webpack-plugin-superagent-npm-private (npm) (malicious package)
- [MAL-2025-186423](https://insights.sbomify.com/MAL-2025-186423/): Malicious code in css-minimizer-webpack-plugin-phoebe-biogeochemistry-lint (npm) (malicious package)
- [MAL-2025-186422](https://insights.sbomify.com/MAL-2025-186422/): Malicious code in css-minimizer-webpack-plugin-hugo-gemini-command (npm) (malicious package)
- [MAL-2025-186421](https://insights.sbomify.com/MAL-2025-186421/): Malicious code in css-minimizer-webpack-plugin-hermes-spectron-pavo (npm) (malicious package)
- [MAL-2025-186420](https://insights.sbomify.com/MAL-2025-186420/): Malicious code in css-minimizer-webpack-plugin-framework-nextjs-upgrade (npm) (malicious package)
- [MAL-2025-18642](https://insights.sbomify.com/MAL-2025-18642/): Malicious code in donotinstallthis (npm) (malicious package)
- [MAL-2025-186419](https://insights.sbomify.com/MAL-2025-186419/): Malicious code in css-minimizer-webpack-plugin-firebase-corvus-supernova (npm) (malicious package)
- [MAL-2025-186418](https://insights.sbomify.com/MAL-2025-186418/): Malicious code in css-minimizer-webpack-plugin-brane-saturnology-quito (npm) (malicious package)
- [MAL-2025-186417](https://insights.sbomify.com/MAL-2025-186417/): Malicious code in css-loader-rehype-toml-version (npm) (malicious package)
- [MAL-2025-186416](https://insights.sbomify.com/MAL-2025-186416/): Malicious code in css-loader-mui-wasat-standard (npm) (malicious package)
- [MAL-2025-186415](https://insights.sbomify.com/MAL-2025-186415/): Malicious code in css-loader-iota-celeste-electron (npm) (malicious package)
- [MAL-2025-186414](https://insights.sbomify.com/MAL-2025-186414/): Malicious code in css-loader-castor-supervisor-elara (npm) (malicious package)
- [MAL-2025-186413](https://insights.sbomify.com/MAL-2025-186413/): Malicious code in csrf-thermochronology-oscillation-janus (npm) (malicious package)
- [MAL-2025-186412](https://insights.sbomify.com/MAL-2025-186412/): Malicious code in csrf-relay-miranda-halley (npm) (malicious package)
- [MAL-2025-186411](https://insights.sbomify.com/MAL-2025-186411/): Malicious code in csrf-mutation-oauth-convict (npm) (malicious package)
- [MAL-2025-186410](https://insights.sbomify.com/MAL-2025-186410/): Malicious code in csrf-farout-backend-fomalhaut (npm) (malicious package)
- [MAL-2025-18641](https://insights.sbomify.com/MAL-2025-18641/): Malicious code in donotdownload (npm) (malicious package)
- [MAL-2025-186409](https://insights.sbomify.com/MAL-2025-186409/): Malicious code in csrf-eslint-config-futurology-sass-loader (npm) (malicious package)
- [MAL-2025-186408](https://insights.sbomify.com/MAL-2025-186408/): Malicious code in csrf-carina-technocracy-areology (npm) (malicious package)
- [MAL-2025-186407](https://insights.sbomify.com/MAL-2025-186407/): Malicious code in csrf-callisto-hapi-nextjs (npm) (malicious package)
- [MAL-2025-186406](https://insights.sbomify.com/MAL-2025-186406/): Malicious code in csrf-bootes-html-webpack-plugin-ichnology (npm) (malicious package)
- [MAL-2025-186405](https://insights.sbomify.com/MAL-2025-186405/): Malicious code in cryptography-webdriver-manager-schema-test (npm) (malicious package)
- [MAL-2025-186404](https://insights.sbomify.com/MAL-2025-186404/): Malicious code in cryptography-epimetheus-prettier-plugin-markdown-run-script (npm) (malicious package)
- [MAL-2025-186403](https://insights.sbomify.com/MAL-2025-186403/): Malicious code in cryptography-cross-env-google-yildun (npm) (malicious package)
- [MAL-2025-186402](https://insights.sbomify.com/MAL-2025-186402/): Malicious code in cryptography-biohacking-xml-graphql (npm) (malicious package)
- [MAL-2025-186401](https://insights.sbomify.com/MAL-2025-186401/): Malicious code in cryovolcano-transhumanism-scripts-janus (npm) (malicious package)
- [MAL-2025-186400](https://insights.sbomify.com/MAL-2025-186400/): Malicious code in cryovolcano-miranda-blueshift-rimraf (npm) (malicious package)
- [MAL-2025-18640](https://insights.sbomify.com/MAL-2025-18640/): Malicious code in dono-toge83-sukiwir (npm) (malicious package)
- [MAL-2025-1864](https://insights.sbomify.com/MAL-2025-1864/): Malicious code in instacart-test (npm) (malicious package)
- [MAL-2025-186399](https://insights.sbomify.com/MAL-2025-186399/): Malicious code in cryovolcano-grus-ini-proxima (npm) (malicious package)
- [MAL-2025-186398](https://insights.sbomify.com/MAL-2025-186398/): Malicious code in cryonics-publish-dactyl-pyxis (npm) (malicious package)
- [MAL-2025-186397](https://insights.sbomify.com/MAL-2025-186397/): Malicious code in cryonics-neutronstar-webdriver-mocha-whitedwarf (npm) (malicious package)
- [MAL-2025-186396](https://insights.sbomify.com/MAL-2025-186396/): Malicious code in cryonics-meteor-spawn-halley (npm) (malicious package)
- [MAL-2025-186395](https://insights.sbomify.com/MAL-2025-186395/): Malicious code in cryonics-magellan-bionics-tardigrade (npm) (malicious package)
- [MAL-2025-186394](https://insights.sbomify.com/MAL-2025-186394/): Malicious code in cryonics-jest-tachyon-hydra (npm) (malicious package)
- [MAL-2025-186393](https://insights.sbomify.com/MAL-2025-186393/): Malicious code in cryonics-cypress-stream-lithosphere (npm) (malicious package)
- [MAL-2025-186392](https://insights.sbomify.com/MAL-2025-186392/): Malicious code in cryonics-convict-tectonophysics-interstellarmedium (npm) (malicious package)
- [MAL-2025-186391](https://insights.sbomify.com/MAL-2025-186391/): Malicious code in cryonics-blazar-nightwatch-inflation (npm) (malicious package)
- [MAL-2025-186390](https://insights.sbomify.com/MAL-2025-186390/): Malicious code in crust-thuban-archaeogenetics-callback (npm) (malicious package)
- [MAL-2025-18639](https://insights.sbomify.com/MAL-2025-18639/): Malicious code in dono-soto31-breki (npm) (malicious package)
- [MAL-2025-186389](https://insights.sbomify.com/MAL-2025-186389/): Malicious code in crust-proxima-typeorm-duplex (npm) (malicious package)
- [MAL-2025-186388](https://insights.sbomify.com/MAL-2025-186388/): Malicious code in crust-mui-development-norma (npm) (malicious package)
- [MAL-2025-186387](https://insights.sbomify.com/MAL-2025-186387/): Malicious code in cross-env-vega-native-blazar (npm) (malicious package)
- [MAL-2025-186386](https://insights.sbomify.com/MAL-2025-186386/): Malicious code in cross-env-singularity-europa-paleobotany (npm) (malicious package)
- [MAL-2025-186385](https://insights.sbomify.com/MAL-2025-186385/): Malicious code in cross-env-package-rimraf-antares (npm) (malicious package)
- [MAL-2025-186384](https://insights.sbomify.com/MAL-2025-186384/): Malicious code in cross-env-native-centaurus-dynamo (npm) (malicious package)
- [MAL-2025-186383](https://insights.sbomify.com/MAL-2025-186383/): Malicious code in cross-env-geochemistry-global-juno (npm) (malicious package)
- [MAL-2025-186382](https://insights.sbomify.com/MAL-2025-186382/): Malicious code in cross-env-flare-hyperion-meissa (npm) (malicious package)
- [MAL-2025-186381](https://insights.sbomify.com/MAL-2025-186381/): Malicious code in cross-env-dorado-eslint-config-zephyr (npm) (malicious package)
- [MAL-2025-186380](https://insights.sbomify.com/MAL-2025-186380/): Malicious code in cross-env-cybernetics-juno-iota (npm) (malicious package)
- [MAL-2025-18638](https://insights.sbomify.com/MAL-2025-18638/): Malicious code in dono-rawon2-sukiwir (npm) (malicious package)
- [MAL-2025-186379](https://insights.sbomify.com/MAL-2025-186379/): Malicious code in cross-env-cross-env-photon-superposition (npm) (malicious package)
- [MAL-2025-186378](https://insights.sbomify.com/MAL-2025-186378/): Malicious code in cross-env-atlas-thuban-enif (npm) (malicious package)
- [MAL-2025-186377](https://insights.sbomify.com/MAL-2025-186377/): Malicious code in cross-env-atlas-non-blocking-eslint (npm) (malicious package)
- [MAL-2025-186376](https://insights.sbomify.com/MAL-2025-186376/): Malicious code in cron-tree-query-unix-report (npm) (malicious package)
- [MAL-2025-186375](https://insights.sbomify.com/MAL-2025-186375/): Malicious code in cron-rho-analyze-socket-air (npm) (malicious package)
- [MAL-2025-186374](https://insights.sbomify.com/MAL-2025-186374/): Malicious code in cron-optimize-thread-cat-compile (npm) (malicious package)
- [MAL-2025-186373](https://insights.sbomify.com/MAL-2025-186373/): Malicious code in cron-kappa-bash-serialize-beta (npm) (malicious package)
- [MAL-2025-186372](https://insights.sbomify.com/MAL-2025-186372/): Malicious code in cressida-yakutsk-zephyr-rollup (npm) (malicious package)
- [MAL-2025-186371](https://insights.sbomify.com/MAL-2025-186371/): Malicious code in cressida-vortex-lint-staged-blueshift (npm) (malicious package)
- [MAL-2025-186370](https://insights.sbomify.com/MAL-2025-186370/): Malicious code in cressida-prettier-plugin-markdown-pulsar-stream (npm) (malicious package)
- [MAL-2025-18637](https://insights.sbomify.com/MAL-2025-18637/): Malicious code in dono-pisang2-breki (npm) (malicious package)
- [MAL-2025-186369](https://insights.sbomify.com/MAL-2025-186369/): Malicious code in cressida-jwt-loglevel-fetch (npm) (malicious package)
- [MAL-2025-186368](https://insights.sbomify.com/MAL-2025-186368/): Malicious code in cressida-indus-epimetheus-borealis (npm) (malicious package)
- [MAL-2025-186367](https://insights.sbomify.com/MAL-2025-186367/): Malicious code in cressida-cybernetics-rollup-plugin-node-sass (npm) (malicious package)
- [MAL-2025-186366](https://insights.sbomify.com/MAL-2025-186366/): Malicious code in cressida-cache-iota-antares (npm) (malicious package)
- [MAL-2025-186365](https://insights.sbomify.com/MAL-2025-186365/): Malicious code in cosmos-yonder-grunt-nashira (npm) (malicious package)
- [MAL-2025-186364](https://insights.sbomify.com/MAL-2025-186364/): Malicious code in cosmos-volcanology-cassini-nova (npm) (malicious package)
- [MAL-2025-186363](https://insights.sbomify.com/MAL-2025-186363/): Malicious code in cosmos-void-procyon-nanotechnology (npm) (malicious package)
- [MAL-2025-186362](https://insights.sbomify.com/MAL-2025-186362/): Malicious code in cosmos-public-warp-planckscale (npm) (malicious package)
- [MAL-2025-186361](https://insights.sbomify.com/MAL-2025-186361/): Malicious code in cosmos-geochemistry-sqlite-lint-staged (npm) (malicious package)
- [MAL-2025-186360](https://insights.sbomify.com/MAL-2025-186360/): Malicious code in cosmos-framework-gacrux-pm2 (npm) (malicious package)
- [MAL-2025-18636](https://insights.sbomify.com/MAL-2025-18636/): Malicious code in dono-oblok12-breki (npm) (malicious package)
- [MAL-2025-186359](https://insights.sbomify.com/MAL-2025-186359/): Malicious code in cosmos-coronalmassejection-remark-arcturus (npm) (malicious package)
- [MAL-2025-186358](https://insights.sbomify.com/MAL-2025-186358/): Malicious code in cosmos-concurrently-uninstall-jest (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/972/