# Vulnerabilities published in 2025


- [MAL-2025-186267](https://insights.sbomify.com/MAL-2025-186267/): Malicious code in concurrently-grus-vuepress-zenith (npm) (malicious package)
- [MAL-2025-186266](https://insights.sbomify.com/MAL-2025-186266/): Malicious code in concurrently-fork-blazar-helios (npm) (malicious package)
- [MAL-2025-186265](https://insights.sbomify.com/MAL-2025-186265/): Malicious code in concurrently-configstore-lyra-perseus (npm) (malicious package)
- [MAL-2025-186264](https://insights.sbomify.com/MAL-2025-186264/): Malicious code in compress-water-cluster-slow-cat (npm) (malicious package)
- [MAL-2025-186263](https://insights.sbomify.com/MAL-2025-186263/): Malicious code in compress-tau-enum-book-serialize (npm) (malicious package)
- [MAL-2025-186262](https://insights.sbomify.com/MAL-2025-186262/): Malicious code in compress-async-rho-boolean-assert (npm) (malicious package)
- [MAL-2025-186261](https://insights.sbomify.com/MAL-2025-186261/): Malicious code in compile-xi-small-star-decompress (npm) (malicious package)
- [MAL-2025-186260](https://insights.sbomify.com/MAL-2025-186260/): Malicious code in compile-validate-sandbox-node-async (npm) (malicious package)
- [MAL-2025-18626](https://insights.sbomify.com/MAL-2025-18626/): Malicious code in domotina (npm) (malicious package)
- [MAL-2025-186259](https://insights.sbomify.com/MAL-2025-186259/): Malicious code in compile-gamma-wind-code-deserialize (npm) (malicious package)
- [MAL-2025-186258](https://insights.sbomify.com/MAL-2025-186258/): Malicious code in compile-catch-gamma-encode-resolve (npm) (malicious package)
- [MAL-2025-186257](https://insights.sbomify.com/MAL-2025-186257/): Malicious code in commitlint-slides-octans-resolvers (npm) (malicious package)
- [MAL-2025-186256](https://insights.sbomify.com/MAL-2025-186256/): Malicious code in commitlint-resolvers-procyon-pm2 (npm) (malicious package)
- [MAL-2025-186255](https://insights.sbomify.com/MAL-2025-186255/): Malicious code in commitlint-publish-fornax-prettier-stylelint (npm) (malicious package)
- [MAL-2025-186254](https://insights.sbomify.com/MAL-2025-186254/): Malicious code in commitlint-prosthetics-altair-magnetosphere (npm) (malicious package)
- [MAL-2025-186253](https://insights.sbomify.com/MAL-2025-186253/): Malicious code in commitlint-config-angular-sadr-cluster-mira (npm) (malicious package)
- [MAL-2025-186252](https://insights.sbomify.com/MAL-2025-186252/): Malicious code in commitlint-config-angular-nodejs-carpo-vortex (npm) (malicious package)
- [MAL-2025-186251](https://insights.sbomify.com/MAL-2025-186251/): Malicious code in commitlint-config-angular-init-miranda-luna (npm) (malicious package)
- [MAL-2025-186250](https://insights.sbomify.com/MAL-2025-186250/): Malicious code in commitlint-config-angular-hercules-express-yonder (npm) (malicious package)
- [MAL-2025-18625](https://insights.sbomify.com/MAL-2025-18625/): Malicious code in domofwk (npm) (malicious package)
- [MAL-2025-186249](https://insights.sbomify.com/MAL-2025-186249/): Malicious code in commitlint-config-angular-graphql-ursa-yakutsk (npm) (malicious package)
- [MAL-2025-186248](https://insights.sbomify.com/MAL-2025-186248/): Malicious code in commitlint-config-angular-forever-dotenv-parse-variables-google (npm) (malicious package)
- [MAL-2025-186247](https://insights.sbomify.com/MAL-2025-186247/): Malicious code in commitlint-chalk-neptune-auriga (npm) (malicious package)
- [MAL-2025-186246](https://insights.sbomify.com/MAL-2025-186246/): Malicious code in commitlint-chalk-eclipse-init (npm) (malicious package)
- [MAL-2025-186245](https://insights.sbomify.com/MAL-2025-186245/): Malicious code in commitlint-betelgeuse-yaml-indus (npm) (malicious package)
- [MAL-2025-186244](https://insights.sbomify.com/MAL-2025-186244/): Malicious code in commitizen-singularitarianism-framework-wavefunction (npm) (malicious package)
- [MAL-2025-186243](https://insights.sbomify.com/MAL-2025-186243/): Malicious code in commitizen-radioastronomy-steganography-grunt (npm) (malicious package)
- [MAL-2025-186242](https://insights.sbomify.com/MAL-2025-186242/): Malicious code in commitizen-playwright-selenium-publish (npm) (malicious package)
- [MAL-2025-186241](https://insights.sbomify.com/MAL-2025-186241/): Malicious code in commitizen-markdown-luminescence-meteor (npm) (malicious package)
- [MAL-2025-186240](https://insights.sbomify.com/MAL-2025-186240/): Malicious code in commitizen-eclipse-sadr-chariklo (npm) (malicious package)
- [MAL-2025-18624](https://insights.sbomify.com/MAL-2025-18624/): Malicious code in domobserverplugin (npm) (malicious package)
- [MAL-2025-186239](https://insights.sbomify.com/MAL-2025-186239/): Malicious code in commitizen-chromedriver-redis-polaris (npm) (malicious package)
- [MAL-2025-186238](https://insights.sbomify.com/MAL-2025-186238/): Malicious code in commitizen-antares-magellan-saturnology (npm) (malicious package)
- [MAL-2025-186237](https://insights.sbomify.com/MAL-2025-186237/): Malicious code in command-xo-module-antd (npm) (malicious package)
- [MAL-2025-186236](https://insights.sbomify.com/MAL-2025-186236/): Malicious code in command-react-bootstrap-neuromorphic-magellan (npm) (malicious package)
- [MAL-2025-186235](https://insights.sbomify.com/MAL-2025-186235/): Malicious code in command-pulsar-atlas-on (npm) (malicious package)
- [MAL-2025-186234](https://insights.sbomify.com/MAL-2025-186234/): Malicious code in command-prettier-stylelint-server-schema (npm) (malicious package)
- [MAL-2025-186233](https://insights.sbomify.com/MAL-2025-186233/): Malicious code in command-leda-fetch-delphinus (npm) (malicious package)
- [MAL-2025-186232](https://insights.sbomify.com/MAL-2025-186232/): Malicious code in command-dotenv-safe-oberon-lint-staged (npm) (malicious package)
- [MAL-2025-186231](https://insights.sbomify.com/MAL-2025-186231/): Malicious code in command-dotenv-betelgeuse-neutronstar (npm) (malicious package)
- [MAL-2025-186230](https://insights.sbomify.com/MAL-2025-186230/): Malicious code in command-celeste-resonance-hyperion (npm) (malicious package)
- [MAL-2025-18623](https://insights.sbomify.com/MAL-2025-18623/): Malicious code in domman (npm) (malicious package)
- [MAL-2025-186229](https://insights.sbomify.com/MAL-2025-186229/): Malicious code in command-bootstrap-exoplanetology-paleontology (npm) (malicious package)
- [MAL-2025-186228](https://insights.sbomify.com/MAL-2025-186228/): Malicious code in command-blazar-node-config-phylogenetics (npm) (malicious package)
- [MAL-2025-186227](https://insights.sbomify.com/MAL-2025-186227/): Malicious code in command-axios-asteroid-carina (npm) (malicious package)
- [MAL-2025-186226](https://insights.sbomify.com/MAL-2025-186226/): Malicious code in comet-xanthus-cosmos-protoplanetarydisk (npm) (malicious package)
- [MAL-2025-186225](https://insights.sbomify.com/MAL-2025-186225/): Malicious code in comet-rehype-transport-entanglement (npm) (malicious package)
- [MAL-2025-186224](https://insights.sbomify.com/MAL-2025-186224/): Malicious code in comet-pyxis-cosmochemistry-library (npm) (malicious package)
- [MAL-2025-186223](https://insights.sbomify.com/MAL-2025-186223/): Malicious code in comet-publish-palynology-farout (npm) (malicious package)
- [MAL-2025-186222](https://insights.sbomify.com/MAL-2025-186222/): Malicious code in comet-private-crust-andromeda (npm) (malicious package)
- [MAL-2025-186221](https://insights.sbomify.com/MAL-2025-186221/): Malicious code in comet-perturbation-testcafe-astrobiology (npm) (malicious package)
- [MAL-2025-186220](https://insights.sbomify.com/MAL-2025-186220/): Malicious code in comet-perseus-andromeda-terraforming (npm) (malicious package)
- [MAL-2025-18622](https://insights.sbomify.com/MAL-2025-18622/): Malicious code in domino-utils (npm) (malicious package)
- [MAL-2025-186219](https://insights.sbomify.com/MAL-2025-186219/): Malicious code in comet-orbit-umbriel-thermochronology (npm) (malicious package)
- [MAL-2025-186218](https://insights.sbomify.com/MAL-2025-186218/): Malicious code in comet-oauth-airbnb-tethys (npm) (malicious package)
- [MAL-2025-186217](https://insights.sbomify.com/MAL-2025-186217/): Malicious code in comet-norma-semantic-release-rest (npm) (malicious package)
- [MAL-2025-186216](https://insights.sbomify.com/MAL-2025-186216/): Malicious code in comet-mutation-commitlint-csrf (npm) (malicious package)
- [MAL-2025-186215](https://insights.sbomify.com/MAL-2025-186215/): Malicious code in comet-exoplanet-oortcloud-cosmicsilence (npm) (malicious package)
- [MAL-2025-186214](https://insights.sbomify.com/MAL-2025-186214/): Malicious code in comet-cassini-stratigraphy-mensa (npm) (malicious package)
- [MAL-2025-186213](https://insights.sbomify.com/MAL-2025-186213/): Malicious code in comet-axios-chakra-ui-ora (npm) (malicious package)
- [MAL-2025-186212](https://insights.sbomify.com/MAL-2025-186212/): Malicious code in comet-auth-html-webpack-plugin-request (npm) (malicious package)
- [MAL-2025-186211](https://insights.sbomify.com/MAL-2025-186211/): Malicious code in comet-areology-exobiology-perturbation (npm) (malicious package)
- [MAL-2025-186210](https://insights.sbomify.com/MAL-2025-186210/): Malicious code in colors-superflare-rigel-quark (npm) (malicious package)
- [MAL-2025-18621](https://insights.sbomify.com/MAL-2025-18621/): Malicious code in domains-client (npm) (malicious package)
- [MAL-2025-186209](https://insights.sbomify.com/MAL-2025-186209/): Malicious code in colors-style-loader-bellatrix-tool (npm) (malicious package)
- [MAL-2025-186208](https://insights.sbomify.com/MAL-2025-186208/): Malicious code in colors-rigel-bellatrix-pyxis (npm) (malicious package)
- [MAL-2025-186207](https://insights.sbomify.com/MAL-2025-186207/): Malicious code in colors-request-xo-xerxes (npm) (malicious package)
- [MAL-2025-186206](https://insights.sbomify.com/MAL-2025-186206/): Malicious code in colors-paleomagnetism-global-unuk (npm) (malicious package)
- [MAL-2025-186205](https://insights.sbomify.com/MAL-2025-186205/): Malicious code in colors-nightwatch-antimatter-postcss-loader (npm) (malicious package)
- [MAL-2025-186204](https://insights.sbomify.com/MAL-2025-186204/): Malicious code in colors-gravity-cosmiconfig-zephyr (npm) (malicious package)
- [MAL-2025-186203](https://insights.sbomify.com/MAL-2025-186203/): Malicious code in colors-eventhoriz-react-bootstrap-zooarchaeology (npm) (malicious package)
- [MAL-2025-186202](https://insights.sbomify.com/MAL-2025-186202/): Malicious code in cold-phi-cloud-cluster-private (npm) (malicious package)
- [MAL-2025-186201](https://insights.sbomify.com/MAL-2025-186201/): Malicious code in cold-old-monitor-zeta-process (npm) (malicious package)
- [MAL-2025-186200](https://insights.sbomify.com/MAL-2025-186200/): Malicious code in cold-mock-daemon-hash-thread (npm) (malicious package)
- [MAL-2025-18620](https://insights.sbomify.com/MAL-2025-18620/): Malicious code in domainbox (npm) (malicious package)
- [MAL-2025-1862](https://insights.sbomify.com/MAL-2025-1862/): Malicious code in instacart-service (npm) (malicious package)
- [MAL-2025-186199](https://insights.sbomify.com/MAL-2025-186199/): Malicious code in cold-hot-beta-log-daemon (npm) (malicious package)
- [MAL-2025-186198](https://insights.sbomify.com/MAL-2025-186198/): Malicious code in cold-dog-module-notify-good (npm) (malicious package)
- [MAL-2025-186197](https://insights.sbomify.com/MAL-2025-186197/): Malicious code in cold-cron-object-chi-export (npm) (malicious package)
- [MAL-2025-186196](https://insights.sbomify.com/MAL-2025-186196/): Malicious code in cold-bad-theta-epsilon-route (npm) (malicious package)
- [MAL-2025-186195](https://insights.sbomify.com/MAL-2025-186195/): Malicious code in code-report-cold-iota-root (npm) (malicious package)
- [MAL-2025-186194](https://insights.sbomify.com/MAL-2025-186194/): Malicious code in code-interpret-finally-decode-cold (npm) (malicious package)
- [MAL-2025-186193](https://insights.sbomify.com/MAL-2025-186193/): Malicious code in code-code-old-reject-cat (npm) (malicious package)
- [MAL-2025-186192](https://insights.sbomify.com/MAL-2025-186192/): Malicious code in cluster-wind-fork-view-monitor (npm) (malicious package)
- [MAL-2025-186191](https://insights.sbomify.com/MAL-2025-186191/): Malicious code in cluster-wind-decode-sigma-web (npm) (malicious package)
- [MAL-2025-186190](https://insights.sbomify.com/MAL-2025-186190/): Malicious code in cluster-wavefunction-subduction-transhumanism (npm) (malicious package)
- [MAL-2025-18619](https://insights.sbomify.com/MAL-2025-18619/): Malicious code in domain-name (npm) (malicious package)
- [MAL-2025-186189](https://insights.sbomify.com/MAL-2025-186189/): Malicious code in cluster-volcanology-eslint-plugin-singularity (npm) (malicious package)
- [MAL-2025-186188](https://insights.sbomify.com/MAL-2025-186188/): Malicious code in cluster-tool-quasarjet-meteor (npm) (malicious package)
- [MAL-2025-186187](https://insights.sbomify.com/MAL-2025-186187/): Malicious code in cluster-steganography-slides-entanglement (npm) (malicious package)
- [MAL-2025-186186](https://insights.sbomify.com/MAL-2025-186186/): Malicious code in cluster-sirius-promise-neutrino (npm) (malicious package)
- [MAL-2025-186185](https://insights.sbomify.com/MAL-2025-186185/): Malicious code in cluster-simple-encrypt-cloud-balance (npm) (malicious package)
- [MAL-2025-186184](https://insights.sbomify.com/MAL-2025-186184/): Malicious code in cluster-sanitize-resolve-omega-encrypt (npm) (malicious package)
- [MAL-2025-186183](https://insights.sbomify.com/MAL-2025-186183/): Malicious code in cluster-protected-resolve-cloud-refactor (npm) (malicious package)
- [MAL-2025-186182](https://insights.sbomify.com/MAL-2025-186182/): Malicious code in cluster-norma-solarnebula-outercore (npm) (malicious package)
- [MAL-2025-186181](https://insights.sbomify.com/MAL-2025-186181/): Malicious code in cluster-magnetar-leda-scorpius (npm) (malicious package)
- [MAL-2025-186180](https://insights.sbomify.com/MAL-2025-186180/): Malicious code in cluster-decompress-double-encode-quick (npm) (malicious package)
- [MAL-2025-18618](https://insights.sbomify.com/MAL-2025-18618/): Malicious code in dom-style-parser (npm) (malicious package)
- [MAL-2025-186179](https://insights.sbomify.com/MAL-2025-186179/): Malicious code in cluster-cosmochemistry-helmet-xenon (npm) (malicious package)
- [MAL-2025-186178](https://insights.sbomify.com/MAL-2025-186178/): Malicious code in cluster-concurrently-wolf-astrometry (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/974/