# Vulnerabilities published in 2025


- [MAL-2025-186357](https://insights.sbomify.com/MAL-2025-186357/): Malicious code in cosmos-centaurus-charon-tool (npm) (malicious package)
- [MAL-2025-186356](https://insights.sbomify.com/MAL-2025-186356/): Malicious code in cosmology-schema-morgan-canopus (npm) (malicious package)
- [MAL-2025-186355](https://insights.sbomify.com/MAL-2025-186355/): Malicious code in cosmology-levels-terser-iota (npm) (malicious package)
- [MAL-2025-186354](https://insights.sbomify.com/MAL-2025-186354/): Malicious code in cosmology-geodynamo-blaze-perturbation (npm) (malicious package)
- [MAL-2025-186353](https://insights.sbomify.com/MAL-2025-186353/): Malicious code in cosmogenic-spinner-andromeda-quasarjet (npm) (malicious package)
- [MAL-2025-186352](https://insights.sbomify.com/MAL-2025-186352/): Malicious code in cosmogenic-polaris-helios-atlas (npm) (malicious package)
- [MAL-2025-186351](https://insights.sbomify.com/MAL-2025-186351/): Malicious code in cosmogenic-genomics-scripts-cache (npm) (malicious package)
- [MAL-2025-186350](https://insights.sbomify.com/MAL-2025-186350/): Malicious code in cosmogenic-astroinformatics-mesosphere-soap (npm) (malicious package)
- [MAL-2025-18635](https://insights.sbomify.com/MAL-2025-18635/): Malicious code in dono-mieaceh30-breki (npm) (malicious package)
- [MAL-2025-186349](https://insights.sbomify.com/MAL-2025-186349/): Malicious code in cosmochemistry-transport-primatology-xenos (npm) (malicious package)
- [MAL-2025-186348](https://insights.sbomify.com/MAL-2025-186348/): Malicious code in cosmochemistry-lynx-ceres-europa (npm) (malicious package)
- [MAL-2025-186347](https://insights.sbomify.com/MAL-2025-186347/): Malicious code in cosmochemistry-less-enceladus-eigenstate (npm) (malicious package)
- [MAL-2025-186346](https://insights.sbomify.com/MAL-2025-186346/): Malicious code in cosmochemistry-lacerta-magnetosphere-reveal-md (npm) (malicious package)
- [MAL-2025-186345](https://insights.sbomify.com/MAL-2025-186345/): Malicious code in cosmochemistry-gemini-release-it-neuromorphic (npm) (malicious package)
- [MAL-2025-186344](https://insights.sbomify.com/MAL-2025-186344/): Malicious code in cosmicweb-sedimentology-ignite-library (npm) (malicious package)
- [MAL-2025-186343](https://insights.sbomify.com/MAL-2025-186343/): Malicious code in cosmicweb-miranda-xerxes-uglify-js (npm) (malicious package)
- [MAL-2025-186342](https://insights.sbomify.com/MAL-2025-186342/): Malicious code in cosmicweb-leda-sadr-reveal-md (npm) (malicious package)
- [MAL-2025-186341](https://insights.sbomify.com/MAL-2025-186341/): Malicious code in cosmicweb-antares-lithosphere-phoenix (npm) (malicious package)
- [MAL-2025-186340](https://insights.sbomify.com/MAL-2025-186340/): Malicious code in cosmicsilence-uranology-io-solis (npm) (malicious package)
- [MAL-2025-18634](https://insights.sbomify.com/MAL-2025-18634/): Malicious code in dono-martabak85-kuki (npm) (malicious package)
- [MAL-2025-186339](https://insights.sbomify.com/MAL-2025-186339/): Malicious code in cosmicsilence-quasar-vulcan-gammarayburst (npm) (malicious package)
- [MAL-2025-186338](https://insights.sbomify.com/MAL-2025-186338/): Malicious code in cosmicray-ursa-helmet-deneb (npm) (malicious package)
- [MAL-2025-186337](https://insights.sbomify.com/MAL-2025-186337/): Malicious code in cosmicray-nova-regulus-eleventy (npm) (malicious package)
- [MAL-2025-186336](https://insights.sbomify.com/MAL-2025-186336/): Malicious code in cosmicray-mechatronics-selenium-tailwindcss (npm) (malicious package)
- [MAL-2025-186335](https://insights.sbomify.com/MAL-2025-186335/): Malicious code in cosmicray-foundation-nconf-plutology (npm) (malicious package)
- [MAL-2025-186334](https://insights.sbomify.com/MAL-2025-186334/): Malicious code in cosmicray-draco-interferometry-heka (npm) (malicious package)
- [MAL-2025-186333](https://insights.sbomify.com/MAL-2025-186333/): Malicious code in cosmicray-andromeda-registry-npm (npm) (malicious package)
- [MAL-2025-186332](https://insights.sbomify.com/MAL-2025-186332/): Malicious code in cosmiconfig-xml-rehype-webpack (npm) (malicious package)
- [MAL-2025-186331](https://insights.sbomify.com/MAL-2025-186331/): Malicious code in cosmiconfig-perseus-redgiant-apollo (npm) (malicious package)
- [MAL-2025-186330](https://insights.sbomify.com/MAL-2025-186330/): Malicious code in cosmiconfig-gatsby-janus-slides (npm) (malicious package)
- [MAL-2025-18633](https://insights.sbomify.com/MAL-2025-18633/): Malicious code in dono-mangut8-kuki (npm) (malicious package)
- [MAL-2025-186329](https://insights.sbomify.com/MAL-2025-186329/): Malicious code in cosmiconfig-fermiparadox-parsec-forever (npm) (malicious package)
- [MAL-2025-186328](https://insights.sbomify.com/MAL-2025-186328/): Malicious code in cosmiconfig-deimos-kaus-hyperion (npm) (malicious package)
- [MAL-2025-186327](https://insights.sbomify.com/MAL-2025-186327/): Malicious code in cosmiconfig-biosignature-vulcan-pipe (npm) (malicious package)
- [MAL-2025-186326](https://insights.sbomify.com/MAL-2025-186326/): Malicious code in corvus-vuepress-concurrently-elara (npm) (malicious package)
- [MAL-2025-186325](https://insights.sbomify.com/MAL-2025-186325/): Malicious code in corvus-phylogenetics-metabolomics-puppeteer (npm) (malicious package)
- [MAL-2025-186324](https://insights.sbomify.com/MAL-2025-186324/): Malicious code in corvus-javascript-charon-semantic-ui (npm) (malicious package)
- [MAL-2025-186323](https://insights.sbomify.com/MAL-2025-186323/): Malicious code in corvus-darkmatter-titan-version (npm) (malicious package)
- [MAL-2025-186322](https://insights.sbomify.com/MAL-2025-186322/): Malicious code in corvus-biohacking-helmet-pm2 (npm) (malicious package)
- [MAL-2025-186321](https://insights.sbomify.com/MAL-2025-186321/): Malicious code in cors-zenobia-dagda-lint (npm) (malicious package)
- [MAL-2025-186320](https://insights.sbomify.com/MAL-2025-186320/): Malicious code in cors-warp-farout-testcafe (npm) (malicious package)
- [MAL-2025-18632](https://insights.sbomify.com/MAL-2025-18632/): Malicious code in dono-lumpur47-kuki (npm) (malicious package)
- [MAL-2025-186319](https://insights.sbomify.com/MAL-2025-186319/): Malicious code in cors-standard-epimetheus-telesto (npm) (malicious package)
- [MAL-2025-186318](https://insights.sbomify.com/MAL-2025-186318/): Malicious code in cors-relay-mini-css-extract-plugin-winston (npm) (malicious package)
- [MAL-2025-186317](https://insights.sbomify.com/MAL-2025-186317/): Malicious code in cors-google-mocha-prettier (npm) (malicious package)
- [MAL-2025-186316](https://insights.sbomify.com/MAL-2025-186316/): Malicious code in cors-centaurus-electron-builder-galaxy (npm) (malicious package)
- [MAL-2025-186315](https://insights.sbomify.com/MAL-2025-186315/): Malicious code in coronalmassejection-terser-zooarchaeology-telesto (npm) (malicious package)
- [MAL-2025-186314](https://insights.sbomify.com/MAL-2025-186314/): Malicious code in coronalmassejection-sirius-morgan-process (npm) (malicious package)
- [MAL-2025-186313](https://insights.sbomify.com/MAL-2025-186313/): Malicious code in coronalmassejection-holography-dorado-command (npm) (malicious package)
- [MAL-2025-186312](https://insights.sbomify.com/MAL-2025-186312/): Malicious code in coronalmassejection-express-stream-cryonics (npm) (malicious package)
- [MAL-2025-186311](https://insights.sbomify.com/MAL-2025-186311/): Malicious code in coronalmassejection-asthenosphere-astrobiology-cassini (npm) (malicious package)
- [MAL-2025-186310](https://insights.sbomify.com/MAL-2025-186310/): Malicious code in cordelia-zenith-ganymede-mutation (npm) (malicious package)
- [MAL-2025-18631](https://insights.sbomify.com/MAL-2025-18631/): Malicious code in dongnebook (npm) (malicious package)
- [MAL-2025-186309](https://insights.sbomify.com/MAL-2025-186309/): Malicious code in cordelia-websockets-yakutsk-quark (npm) (malicious package)
- [MAL-2025-186308](https://insights.sbomify.com/MAL-2025-186308/): Malicious code in cordelia-solis-markdown-xerxes (npm) (malicious package)
- [MAL-2025-186307](https://insights.sbomify.com/MAL-2025-186307/): Malicious code in cordelia-indus-cors-dotenv-safe (npm) (malicious package)
- [MAL-2025-186306](https://insights.sbomify.com/MAL-2025-186306/): Malicious code in cordelia-dione-hyperion-superposition (npm) (malicious package)
- [MAL-2025-186305](https://insights.sbomify.com/MAL-2025-186305/): Malicious code in cordelia-cors-lyra-accretion (npm) (malicious package)
- [MAL-2025-186304](https://insights.sbomify.com/MAL-2025-186304/): Malicious code in cordelia-babel-on-proxima (npm) (malicious package)
- [MAL-2025-186303](https://insights.sbomify.com/MAL-2025-186303/): Malicious code in cordelia-async-chariklo-farout (npm) (malicious package)
- [MAL-2025-186302](https://insights.sbomify.com/MAL-2025-186302/): Malicious code in convict-writable-webpack-cosmogenic (npm) (malicious package)
- [MAL-2025-186301](https://insights.sbomify.com/MAL-2025-186301/): Malicious code in convict-ultra-paleoceanography-carpo (npm) (malicious package)
- [MAL-2025-186300](https://insights.sbomify.com/MAL-2025-186300/): Malicious code in convict-thuban-blackhole-chromedriver (npm) (malicious package)
- [MAL-2025-18630](https://insights.sbomify.com/MAL-2025-18630/): Malicious code in donantes (npm) (malicious package)
- [MAL-2025-1863](https://insights.sbomify.com/MAL-2025-1863/): Malicious code in instacart-sync (npm) (malicious package)
- [MAL-2025-186299](https://insights.sbomify.com/MAL-2025-186299/): Malicious code in convict-spawn-gravitationalwave-stream (npm) (malicious package)
- [MAL-2025-186298](https://insights.sbomify.com/MAL-2025-186298/): Malicious code in convict-quantum-hermes-enif (npm) (malicious package)
- [MAL-2025-186297](https://insights.sbomify.com/MAL-2025-186297/): Malicious code in convict-private-cors-superagent (npm) (malicious package)
- [MAL-2025-186296](https://insights.sbomify.com/MAL-2025-186296/): Malicious code in convict-miranda-deimos-astrochemistry (npm) (malicious package)
- [MAL-2025-186295](https://insights.sbomify.com/MAL-2025-186295/): Malicious code in convict-axios-cosmogenic-miranda (npm) (malicious package)
- [MAL-2025-186294](https://insights.sbomify.com/MAL-2025-186294/): Malicious code in container-void-virtualize-transpile-try (npm) (malicious package)
- [MAL-2025-186293](https://insights.sbomify.com/MAL-2025-186293/): Malicious code in container-tree-signal-notify-permission (npm) (malicious package)
- [MAL-2025-186292](https://insights.sbomify.com/MAL-2025-186292/): Malicious code in container-error-sanitize-authenticate-sigma (npm) (malicious package)
- [MAL-2025-186291](https://insights.sbomify.com/MAL-2025-186291/): Malicious code in container-encrypt-kappa-virtualize-old (npm) (malicious package)
- [MAL-2025-186290](https://insights.sbomify.com/MAL-2025-186290/): Malicious code in container-bundle-wind-private-resolve (npm) (malicious package)
- [MAL-2025-18629](https://insights.sbomify.com/MAL-2025-18629/): Malicious code in domyhobby (npm) (malicious package)
- [MAL-2025-186289](https://insights.sbomify.com/MAL-2025-186289/): Malicious code in container-async-awk-zeta-runtime (npm) (malicious package)
- [MAL-2025-186288](https://insights.sbomify.com/MAL-2025-186288/): Malicious code in configstore-quark-sync-callback (npm) (malicious package)
- [MAL-2025-186287](https://insights.sbomify.com/MAL-2025-186287/): Malicious code in configstore-mongoose-interferometry-terser-webpack-plugin (npm) (malicious package)
- [MAL-2025-186286](https://insights.sbomify.com/MAL-2025-186286/): Malicious code in configstore-mensa-airbnb-quark (npm) (malicious package)
- [MAL-2025-186285](https://insights.sbomify.com/MAL-2025-186285/): Malicious code in configstore-jabbah-koa-public (npm) (malicious package)
- [MAL-2025-186284](https://insights.sbomify.com/MAL-2025-186284/): Malicious code in configstore-hermes-development-update (npm) (malicious package)
- [MAL-2025-186283](https://insights.sbomify.com/MAL-2025-186283/): Malicious code in configstore-eslint-config-celeste-archaeometry (npm) (malicious package)
- [MAL-2025-186282](https://insights.sbomify.com/MAL-2025-186282/): Malicious code in configstore-centaurus-writable-express (npm) (malicious package)
- [MAL-2025-186281](https://insights.sbomify.com/MAL-2025-186281/): Malicious code in config-xml-sirius-config (npm) (malicious package)
- [MAL-2025-186280](https://insights.sbomify.com/MAL-2025-186280/): Malicious code in config-regulus-auth-ophiuchus (npm) (malicious package)
- [MAL-2025-18628](https://insights.sbomify.com/MAL-2025-18628/): Malicious code in domrazaku (npm) (malicious package)
- [MAL-2025-186279](https://insights.sbomify.com/MAL-2025-186279/): Malicious code in config-pipe-promise-start (npm) (malicious package)
- [MAL-2025-186278](https://insights.sbomify.com/MAL-2025-186278/): Malicious code in config-ophiuchus-levels-version (npm) (malicious package)
- [MAL-2025-186277](https://insights.sbomify.com/MAL-2025-186277/): Malicious code in config-event-install-lacerta (npm) (malicious package)
- [MAL-2025-186276](https://insights.sbomify.com/MAL-2025-186276/): Malicious code in config-elara-leda-nucleosynthesis (npm) (malicious package)
- [MAL-2025-186275](https://insights.sbomify.com/MAL-2025-186275/): Malicious code in config-darkenergy-heliophysics-quark (npm) (malicious package)
- [MAL-2025-186274](https://insights.sbomify.com/MAL-2025-186274/): Malicious code in config-dactyl-foundation-sirius (npm) (malicious package)
- [MAL-2025-186273](https://insights.sbomify.com/MAL-2025-186273/): Malicious code in config-cross-env-nova-bunyan (npm) (malicious package)
- [MAL-2025-186272](https://insights.sbomify.com/MAL-2025-186272/): Malicious code in concurrently-ultra-protractor-paleoceanography (npm) (malicious package)
- [MAL-2025-186271](https://insights.sbomify.com/MAL-2025-186271/): Malicious code in concurrently-scripts-plutology-nightmare (npm) (malicious package)
- [MAL-2025-186270](https://insights.sbomify.com/MAL-2025-186270/): Malicious code in concurrently-janus-spinner-palynology (npm) (malicious package)
- [MAL-2025-18627](https://insights.sbomify.com/MAL-2025-18627/): Malicious code in dompurifier (npm) (malicious package)
- [MAL-2025-186269](https://insights.sbomify.com/MAL-2025-186269/): Malicious code in concurrently-janus-equinox-spinner (npm) (malicious package)
- [MAL-2025-186268](https://insights.sbomify.com/MAL-2025-186268/): Malicious code in concurrently-hawkingradiation-tailwindcss-janus (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/973/