# Vulnerabilities published in 2025 - [MAL-2025-147475](https://insights.sbomify.com/MAL-2025-147475/): Malicious code in rocket-orbit-grus-sass-loader (npm) (malicious package) - [MAL-2025-147474](https://insights.sbomify.com/MAL-2025-147474/): Malicious code in rocket-node-sass-transport-buffer (npm) (malicious package) - [MAL-2025-147473](https://insights.sbomify.com/MAL-2025-147473/): Malicious code in rocket-nestjs-csrf-mensa (npm) (malicious package) - [MAL-2025-147472](https://insights.sbomify.com/MAL-2025-147472/): Malicious code in rocket-koa-query-loop (npm) (malicious package) - [MAL-2025-147471](https://insights.sbomify.com/MAL-2025-147471/): Malicious code in rocket-jwt-webdriver-mocha-sirius (npm) (malicious package) - [MAL-2025-147470](https://insights.sbomify.com/MAL-2025-147470/): Malicious code in rocket-jekyll-geckodriver-dactyl (npm) (malicious package) - [MAL-2025-14747](https://insights.sbomify.com/MAL-2025-14747/): Malicious code in appyday (npm) (malicious package) - [MAL-2025-147469](https://insights.sbomify.com/MAL-2025-147469/): Malicious code in rocket-jasmine-babel-scorpius (npm) (malicious package) - [MAL-2025-147468](https://insights.sbomify.com/MAL-2025-147468/): Malicious code in rocket-hermes-tailwindcss-astro (npm) (malicious package) - [MAL-2025-147467](https://insights.sbomify.com/MAL-2025-147467/): Malicious code in rocket-graphql-ini-ini (npm) (malicious package) - [MAL-2025-147466](https://insights.sbomify.com/MAL-2025-147466/): Malicious code in rocket-fornax-capella-convict (npm) (malicious package) - [MAL-2025-147465](https://insights.sbomify.com/MAL-2025-147465/): Malicious code in rocket-eclipse-stop-procyon (npm) (malicious package) - [MAL-2025-147464](https://insights.sbomify.com/MAL-2025-147464/): Malicious code in rocket-despina-izar-achernar (npm) (malicious package) - [MAL-2025-147463](https://insights.sbomify.com/MAL-2025-147463/): Malicious code in rocket-bellatrix-slides-pegasus (npm) (malicious package) - [MAL-2025-147462](https://insights.sbomify.com/MAL-2025-147462/): Malicious code in rocket-astro-cli-zenith (npm) (malicious package) - [MAL-2025-147461](https://insights.sbomify.com/MAL-2025-147461/): Malicious code in rimraf-vortex-nashira-europa (npm) (malicious package) - [MAL-2025-147460](https://insights.sbomify.com/MAL-2025-147460/): Malicious code in rimraf-update-hyperion-astro (npm) (malicious package) - [MAL-2025-14746](https://insights.sbomify.com/MAL-2025-14746/): Malicious code in appx-compiler (npm) (malicious package) - [MAL-2025-147459](https://insights.sbomify.com/MAL-2025-147459/): Malicious code in rimraf-sync-koa-test (npm) (malicious package) - [MAL-2025-147458](https://insights.sbomify.com/MAL-2025-147458/): Malicious code in rimraf-procyon-eclipse-link (npm) (malicious package) - [MAL-2025-147457](https://insights.sbomify.com/MAL-2025-147457/): Malicious code in rimraf-pegasus-blaze-install (npm) (malicious package) - [MAL-2025-147456](https://insights.sbomify.com/MAL-2025-147456/): Malicious code in rimraf-ophiuchus-supervisor-lyra (npm) (malicious package) - [MAL-2025-147455](https://insights.sbomify.com/MAL-2025-147455/): Malicious code in rimraf-npm-figures-bunyan (npm) (malicious package) - [MAL-2025-147454](https://insights.sbomify.com/MAL-2025-147454/): Malicious code in rimraf-native-wezen-karma (npm) (malicious package) - [MAL-2025-147453](https://insights.sbomify.com/MAL-2025-147453/): Malicious code in rimraf-morgan-hugo-quark (npm) (malicious package) - [MAL-2025-147452](https://insights.sbomify.com/MAL-2025-147452/): Malicious code in rimraf-leda-proxima-cz-conventional-changelog (npm) (malicious package) - [MAL-2025-147451](https://insights.sbomify.com/MAL-2025-147451/): Malicious code in rimraf-kaus-despina-grus (npm) (malicious package) - [MAL-2025-147450](https://insights.sbomify.com/MAL-2025-147450/): Malicious code in rimraf-izar-html-webpack-plugin-rigel (npm) (malicious package) - [MAL-2025-14745](https://insights.sbomify.com/MAL-2025-14745/): Malicious code in appwall (npm) (malicious package) - [MAL-2025-147449](https://insights.sbomify.com/MAL-2025-147449/): Malicious code in rimraf-dotenv-safe-wasat-hugo (npm) (malicious package) - [MAL-2025-147448](https://insights.sbomify.com/MAL-2025-147448/): Malicious code in rimraf-dagda-sass-loader-orbit (npm) (malicious package) - [MAL-2025-147447](https://insights.sbomify.com/MAL-2025-147447/): Malicious code in rimraf-concurrently-release-it-impulse (npm) (malicious package) - [MAL-2025-147446](https://insights.sbomify.com/MAL-2025-147446/): Malicious code in rimraf-carpo-eleventy-supervisor (npm) (malicious package) - [MAL-2025-147445](https://insights.sbomify.com/MAL-2025-147445/): Malicious code in rimraf-canopus-promise-janus (npm) (malicious package) - [MAL-2025-147444](https://insights.sbomify.com/MAL-2025-147444/): Malicious code in rimraf-auth0-style-loader-xenos (npm) (malicious package) - [MAL-2025-147443](https://insights.sbomify.com/MAL-2025-147443/): Malicious code in rimraf-arcturus-callback-meissa (npm) (malicious package) - [MAL-2025-147442](https://insights.sbomify.com/MAL-2025-147442/): Malicious code in rigel-websockets-centaurus-lyra (npm) (malicious package) - [MAL-2025-147441](https://insights.sbomify.com/MAL-2025-147441/): Malicious code in rigel-tailwindcss-electron-bunyan (npm) (malicious package) - [MAL-2025-147440](https://insights.sbomify.com/MAL-2025-147440/): Malicious code in rigel-spectron-webdriver-dotenv-commitlint (npm) (malicious package) - [MAL-2025-14744](https://insights.sbomify.com/MAL-2025-14744/): Malicious code in appversion-generator (npm) (malicious package) - [MAL-2025-147439](https://insights.sbomify.com/MAL-2025-147439/): Malicious code in rigel-radiant-uglify-js-node-config (npm) (malicious package) - [MAL-2025-147438](https://insights.sbomify.com/MAL-2025-147438/): Malicious code in rigel-polaris-semantic-ui-lynx (npm) (malicious package) - [MAL-2025-147437](https://insights.sbomify.com/MAL-2025-147437/): Malicious code in rigel-npm-husky-bulma (npm) (malicious package) - [MAL-2025-147436](https://insights.sbomify.com/MAL-2025-147436/): Malicious code in rigel-module-ariel-auth (npm) (malicious package) - [MAL-2025-147435](https://insights.sbomify.com/MAL-2025-147435/): Malicious code in rigel-mini-css-extract-plugin-husky-grunt (npm) (malicious package) - [MAL-2025-147434](https://insights.sbomify.com/MAL-2025-147434/): Malicious code in rigel-magellan-dotenv-parse-variables-mensa (npm) (malicious package) - [MAL-2025-147433](https://insights.sbomify.com/MAL-2025-147433/): Malicious code in rigel-lint-orbit-spica (npm) (malicious package) - [MAL-2025-147432](https://insights.sbomify.com/MAL-2025-147432/): Malicious code in rigel-less-lint-changelog (npm) (malicious package) - [MAL-2025-147431](https://insights.sbomify.com/MAL-2025-147431/): Malicious code in rigel-kronos-react-bootstrap-server (npm) (malicious package) - [MAL-2025-147430](https://insights.sbomify.com/MAL-2025-147430/): Malicious code in rigel-bulma-mocha-janus (npm) (malicious package) - [MAL-2025-14743](https://insights.sbomify.com/MAL-2025-14743/): Malicious code in apptmpl (npm) (malicious package) - [MAL-2025-147429](https://insights.sbomify.com/MAL-2025-147429/): Malicious code in rigel-bootstrap-triton-hyperion (npm) (malicious package) - [MAL-2025-147428](https://insights.sbomify.com/MAL-2025-147428/): Malicious code in rigel-aldebaran-lyra-nightwatch (npm) (malicious package) - [MAL-2025-147427](https://insights.sbomify.com/MAL-2025-147427/): Malicious code in reveal-md-yildun-auth0-cz-conventional-changelog (npm) (malicious package) - [MAL-2025-147426](https://insights.sbomify.com/MAL-2025-147426/): Malicious code in reveal-md-transform-miranda-dotenv-safe (npm) (malicious package) - [MAL-2025-147425](https://insights.sbomify.com/MAL-2025-147425/): Malicious code in reveal-md-query-gemini-europa (npm) (malicious package) - [MAL-2025-147424](https://insights.sbomify.com/MAL-2025-147424/): Malicious code in reveal-md-proxima-changelog-publish (npm) (malicious package) - [MAL-2025-147423](https://insights.sbomify.com/MAL-2025-147423/): Malicious code in reveal-md-procyon-comet-jabbah (npm) (malicious package) - [MAL-2025-147422](https://insights.sbomify.com/MAL-2025-147422/): Malicious code in reveal-md-postcss-loader-enceladus-xanthus (npm) (malicious package) - [MAL-2025-147421](https://insights.sbomify.com/MAL-2025-147421/): Malicious code in reveal-md-passport-farout-delphinus (npm) (malicious package) - [MAL-2025-147420](https://insights.sbomify.com/MAL-2025-147420/): Malicious code in reveal-md-oberon-native-exec (npm) (malicious package) - [MAL-2025-14742](https://insights.sbomify.com/MAL-2025-14742/): Malicious code in appsworld (npm) (malicious package) - [MAL-2025-147419](https://insights.sbomify.com/MAL-2025-147419/): Malicious code in reveal-md-oauth-jsonp-prettier-plugin-markdown (npm) (malicious package) - [MAL-2025-147418](https://insights.sbomify.com/MAL-2025-147418/): Malicious code in reveal-md-npm-xanadu-telesto (npm) (malicious package) - [MAL-2025-147417](https://insights.sbomify.com/MAL-2025-147417/): Malicious code in reveal-md-miranda-levels-spectron-webdriver (npm) (malicious package) - [MAL-2025-147416](https://insights.sbomify.com/MAL-2025-147416/): Malicious code in reveal-md-mdx-geckodriver-callback (npm) (malicious package) - [MAL-2025-147415](https://insights.sbomify.com/MAL-2025-147415/): Malicious code in reveal-md-lynx-semantic-ui-mensa (npm) (malicious package) - [MAL-2025-147414](https://insights.sbomify.com/MAL-2025-147414/): Malicious code in reveal-md-koa-venus-betelgeuse (npm) (malicious package) - [MAL-2025-147413](https://insights.sbomify.com/MAL-2025-147413/): Malicious code in reveal-md-karma-rocket-webpack (npm) (malicious package) - [MAL-2025-147412](https://insights.sbomify.com/MAL-2025-147412/): Malicious code in reveal-md-hyperion-websockets-schema (npm) (malicious package) - [MAL-2025-147411](https://insights.sbomify.com/MAL-2025-147411/): Malicious code in reveal-md-grus-middleware-polaris (npm) (malicious package) - [MAL-2025-147410](https://insights.sbomify.com/MAL-2025-147410/): Malicious code in reveal-md-ganymede-chromedriver-dotenv-parse-variables (npm) (malicious package) - [MAL-2025-14741](https://insights.sbomify.com/MAL-2025-14741/): Malicious code in appstor (npm) (malicious package) - [MAL-2025-147409](https://insights.sbomify.com/MAL-2025-147409/): Malicious code in reveal-md-fork-rehype-yakutsk (npm) (malicious package) - [MAL-2025-147408](https://insights.sbomify.com/MAL-2025-147408/): Malicious code in reveal-md-fomalhaut-prettier-plugin-markdown-fork (npm) (malicious package) - [MAL-2025-147407](https://insights.sbomify.com/MAL-2025-147407/): Malicious code in reveal-md-flare-kastra-css-loader (npm) (malicious package) - [MAL-2025-147406](https://insights.sbomify.com/MAL-2025-147406/): Malicious code in reveal-md-epimetheus-impulse-procyon (npm) (malicious package) - [MAL-2025-147405](https://insights.sbomify.com/MAL-2025-147405/): Malicious code in reveal-md-elara-algol-jovian (npm) (malicious package) - [MAL-2025-147404](https://insights.sbomify.com/MAL-2025-147404/): Malicious code in reveal-md-celeste-ariel-fornax (npm) (malicious package) - [MAL-2025-147403](https://insights.sbomify.com/MAL-2025-147403/): Malicious code in restart-yaml-celeste-writable (npm) (malicious package) - [MAL-2025-147402](https://insights.sbomify.com/MAL-2025-147402/): Malicious code in restart-xanadu-warp-semantic-release (npm) (malicious package) - [MAL-2025-147401](https://insights.sbomify.com/MAL-2025-147401/): Malicious code in restart-webdriver-manager-websockets-eleventy (npm) (malicious package) - [MAL-2025-147400](https://insights.sbomify.com/MAL-2025-147400/): Malicious code in restart-vulcan-slides-mui (npm) (malicious package) - [MAL-2025-14740](https://insights.sbomify.com/MAL-2025-14740/): Malicious code in appsdks (npm) (malicious package) - [MAL-2025-1474](https://insights.sbomify.com/MAL-2025-1474/): Malicious code in @roku-web-ui/pills (npm) (malicious package) - [MAL-2025-147399](https://insights.sbomify.com/MAL-2025-147399/): Malicious code in restart-ultra-centaurus-babel (npm) (malicious package) - [MAL-2025-147398](https://insights.sbomify.com/MAL-2025-147398/): Malicious code in restart-terser-webpack-plugin-sails-package (npm) (malicious package) - [MAL-2025-147397](https://insights.sbomify.com/MAL-2025-147397/): Malicious code in restart-tailwindcss-dynamo-deneb (npm) (malicious package) - [MAL-2025-147396](https://insights.sbomify.com/MAL-2025-147396/): Malicious code in restart-style-loader-farout-style-loader (npm) (malicious package) - [MAL-2025-147395](https://insights.sbomify.com/MAL-2025-147395/): Malicious code in restart-registry-proxima-hexo (npm) (malicious package) - [MAL-2025-147394](https://insights.sbomify.com/MAL-2025-147394/): Malicious code in restart-quark-fusion-castor (npm) (malicious package) - [MAL-2025-147393](https://insights.sbomify.com/MAL-2025-147393/): Malicious code in restart-quantum-venus-config (npm) (malicious package) - [MAL-2025-147392](https://insights.sbomify.com/MAL-2025-147392/): Malicious code in restart-proxima-apex-despina (npm) (malicious package) - [MAL-2025-147391](https://insights.sbomify.com/MAL-2025-147391/): Malicious code in restart-protractor-quantum-pino-pretty (npm) (malicious package) - [MAL-2025-147390](https://insights.sbomify.com/MAL-2025-147390/): Malicious code in restart-protractor-auriga-bootstrap (npm) (malicious package) - [MAL-2025-14739](https://insights.sbomify.com/MAL-2025-14739/): Malicious code in appsaholic-sdk (npm) (malicious package) - [MAL-2025-147389](https://insights.sbomify.com/MAL-2025-147389/): Malicious code in restart-procyon-apollo-playwright (npm) (malicious package) - [MAL-2025-147388](https://insights.sbomify.com/MAL-2025-147388/): Malicious code in restart-ophiuchus-mensa-style-loader (npm) (malicious package) - [MAL-2025-147387](https://insights.sbomify.com/MAL-2025-147387/): Malicious code in restart-octans-kastra-sirius (npm) (malicious package) - [MAL-2025-147386](https://insights.sbomify.com/MAL-2025-147386/): Malicious code in restart-mui-nashira-playwright (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/1405/