# Vulnerabilities published in 2025 - [MAL-2025-147385](https://insights.sbomify.com/MAL-2025-147385/): Malicious code in restart-lynx-meissa-superagent (npm) (malicious package) - [MAL-2025-147384](https://insights.sbomify.com/MAL-2025-147384/): Malicious code in restart-loop-quito-antd (npm) (malicious package) - [MAL-2025-147383](https://insights.sbomify.com/MAL-2025-147383/): Malicious code in restart-helios-metalsmith-prompts (npm) (malicious package) - [MAL-2025-147382](https://insights.sbomify.com/MAL-2025-147382/): Malicious code in restart-flare-axios-unuk (npm) (malicious package) - [MAL-2025-147381](https://insights.sbomify.com/MAL-2025-147381/): Malicious code in restart-event-achernar-native (npm) (malicious package) - [MAL-2025-147380](https://insights.sbomify.com/MAL-2025-147380/): Malicious code in restart-eridanus-less-loader-cordelia (npm) (malicious package) - [MAL-2025-14738](https://insights.sbomify.com/MAL-2025-14738/): Malicious code in apps-script-oauth2 (npm) (malicious package) - [MAL-2025-147379](https://insights.sbomify.com/MAL-2025-147379/): Malicious code in restart-dotenv-safe-proxima-celeste (npm) (malicious package) - [MAL-2025-147378](https://insights.sbomify.com/MAL-2025-147378/): Malicious code in restart-dagda-commitlint-achernar (npm) (malicious package) - [MAL-2025-147377](https://insights.sbomify.com/MAL-2025-147377/): Malicious code in restart-cordelia-equinox-virgo (npm) (malicious package) - [MAL-2025-147376](https://insights.sbomify.com/MAL-2025-147376/): Malicious code in restart-convict-juno-envconfig (npm) (malicious package) - [MAL-2025-147375](https://insights.sbomify.com/MAL-2025-147375/): Malicious code in restart-chromedriver-release-it-resolvers (npm) (malicious package) - [MAL-2025-147374](https://insights.sbomify.com/MAL-2025-147374/): Malicious code in restart-changelog-heka-eslint-plugin (npm) (malicious package) - [MAL-2025-147373](https://insights.sbomify.com/MAL-2025-147373/): Malicious code in restart-antares-europa-update (npm) (malicious package) - [MAL-2025-147372](https://insights.sbomify.com/MAL-2025-147372/): Malicious code in restart-alphard-procyon-phoebe (npm) (malicious package) - [MAL-2025-147371](https://insights.sbomify.com/MAL-2025-147371/): Malicious code in rest-xml-oberon-eslint (npm) (malicious package) - [MAL-2025-147370](https://insights.sbomify.com/MAL-2025-147370/): Malicious code in rest-wasat-standard-ganymede (npm) (malicious package) - [MAL-2025-14737](https://insights.sbomify.com/MAL-2025-14737/): Malicious code in approval-workflow (npm) (malicious package) - [MAL-2025-147369](https://insights.sbomify.com/MAL-2025-147369/): Malicious code in rest-ursa-chalk-rimraf (npm) (malicious package) - [MAL-2025-147368](https://insights.sbomify.com/MAL-2025-147368/): Malicious code in rest-tailwindcss-hyperion-cache (npm) (malicious package) - [MAL-2025-147367](https://insights.sbomify.com/MAL-2025-147367/): Malicious code in rest-sqlite-exec-hugo (npm) (malicious package) - [MAL-2025-147366](https://insights.sbomify.com/MAL-2025-147366/): Malicious code in rest-slidev-taurus-algol (npm) (malicious package) - [MAL-2025-147365](https://insights.sbomify.com/MAL-2025-147365/): Malicious code in rest-sagitta-subscription-ophiuchus (npm) (malicious package) - [MAL-2025-147364](https://insights.sbomify.com/MAL-2025-147364/): Malicious code in rest-rimraf-auth0-comet (npm) (malicious package) - [MAL-2025-147363](https://insights.sbomify.com/MAL-2025-147363/): Malicious code in rest-rate-limiter-xanadu-helios (npm) (malicious package) - [MAL-2025-147362](https://insights.sbomify.com/MAL-2025-147362/): Malicious code in rest-quito-betelgeuse-corvus (npm) (malicious package) - [MAL-2025-147361](https://insights.sbomify.com/MAL-2025-147361/): Malicious code in rest-publish-algol-dotenv-parse-variables (npm) (malicious package) - [MAL-2025-147360](https://insights.sbomify.com/MAL-2025-147360/): Malicious code in rest-pegasus-miranda-markdown (npm) (malicious package) - [MAL-2025-14736](https://insights.sbomify.com/MAL-2025-14736/): Malicious code in approuter (npm) (malicious package) - [MAL-2025-147359](https://insights.sbomify.com/MAL-2025-147359/): Malicious code in rest-nightmare-postcss-loader-ophiuchus (npm) (malicious package) - [MAL-2025-147358](https://insights.sbomify.com/MAL-2025-147358/): Malicious code in rest-nextjs-pegasus-colors (npm) (malicious package) - [MAL-2025-147357](https://insights.sbomify.com/MAL-2025-147357/): Malicious code in rest-nebula-apollo-bootes (npm) (malicious package) - [MAL-2025-147356](https://insights.sbomify.com/MAL-2025-147356/): Malicious code in rest-mongoose-cosmos-centaurus (npm) (malicious package) - [MAL-2025-147355](https://insights.sbomify.com/MAL-2025-147355/): Malicious code in rest-meteor-avior-webdriver-manager (npm) (malicious package) - [MAL-2025-147354](https://insights.sbomify.com/MAL-2025-147354/): Malicious code in rest-metalsmith-phoebe-pm2 (npm) (malicious package) - [MAL-2025-147353](https://insights.sbomify.com/MAL-2025-147353/): Malicious code in rest-izar-jest-xo (npm) (malicious package) - [MAL-2025-147352](https://insights.sbomify.com/MAL-2025-147352/): Malicious code in rest-hyperion-json-gridsome (npm) (malicious package) - [MAL-2025-147351](https://insights.sbomify.com/MAL-2025-147351/): Malicious code in rest-hyperion-await-phoebe (npm) (malicious package) - [MAL-2025-147350](https://insights.sbomify.com/MAL-2025-147350/): Malicious code in rest-husky-aurora-chromedriver (npm) (malicious package) - [MAL-2025-14735](https://insights.sbomify.com/MAL-2025-14735/): Malicious code in approject (npm) (malicious package) - [MAL-2025-147349](https://insights.sbomify.com/MAL-2025-147349/): Malicious code in rest-grunt-gatsby-impulse (npm) (malicious package) - [MAL-2025-147348](https://insights.sbomify.com/MAL-2025-147348/): Malicious code in rest-galaxy-command-sqlite (npm) (malicious package) - [MAL-2025-147347](https://insights.sbomify.com/MAL-2025-147347/): Malicious code in rest-exec-graphql-algol (npm) (malicious package) - [MAL-2025-147346](https://insights.sbomify.com/MAL-2025-147346/): Malicious code in rest-eris-norma-rollup-plugin (npm) (malicious package) - [MAL-2025-147345](https://insights.sbomify.com/MAL-2025-147345/): Malicious code in rest-docusaurus-xanthus-atlas (npm) (malicious package) - [MAL-2025-147344](https://insights.sbomify.com/MAL-2025-147344/): Malicious code in rest-commitlint-config-angular-ophiuchus-luna (npm) (malicious package) - [MAL-2025-147343](https://insights.sbomify.com/MAL-2025-147343/): Malicious code in rest-command-callback-command (npm) (malicious package) - [MAL-2025-147342](https://insights.sbomify.com/MAL-2025-147342/): Malicious code in rest-colors-xenon-rigel (npm) (malicious package) - [MAL-2025-147341](https://insights.sbomify.com/MAL-2025-147341/): Malicious code in rest-centauri-remark-express (npm) (malicious package) - [MAL-2025-147340](https://insights.sbomify.com/MAL-2025-147340/): Malicious code in rest-arcturus-io-spinner (npm) (malicious package) - [MAL-2025-14734](https://insights.sbomify.com/MAL-2025-14734/): Malicious code in apprepo (npm) (malicious package) - [MAL-2025-147339](https://insights.sbomify.com/MAL-2025-147339/): Malicious code in rest-andromeda-ora-oauth (npm) (malicious package) - [MAL-2025-147338](https://insights.sbomify.com/MAL-2025-147338/): Malicious code in rest-altair-csrf-arcturus (npm) (malicious package) - [MAL-2025-147337](https://insights.sbomify.com/MAL-2025-147337/): Malicious code in rest-adonis-framework-ganymede (npm) (malicious package) - [MAL-2025-147336](https://insights.sbomify.com/MAL-2025-147336/): Malicious code in resolvers-sedna-callback-vuepress (npm) (malicious package) - [MAL-2025-147335](https://insights.sbomify.com/MAL-2025-147335/): Malicious code in resolvers-scorpius-react-bootstrap-rocket (npm) (malicious package) - [MAL-2025-147334](https://insights.sbomify.com/MAL-2025-147334/): Malicious code in resolvers-rimraf-tethys-transport (npm) (malicious package) - [MAL-2025-147333](https://insights.sbomify.com/MAL-2025-147333/): Malicious code in resolvers-registry-less-loader-phoenix (npm) (malicious package) - [MAL-2025-147332](https://insights.sbomify.com/MAL-2025-147332/): Malicious code in resolvers-meteor-nodemon-antares (npm) (malicious package) - [MAL-2025-147331](https://insights.sbomify.com/MAL-2025-147331/): Malicious code in resolvers-luna-cassini-webdriverio (npm) (malicious package) - [MAL-2025-147330](https://insights.sbomify.com/MAL-2025-147330/): Malicious code in resolvers-kastra-hydra-eclipse (npm) (malicious package) - [MAL-2025-14733](https://insights.sbomify.com/MAL-2025-14733/): Malicious code in appointment-widget (npm) (malicious package) - [MAL-2025-147329](https://insights.sbomify.com/MAL-2025-147329/): Malicious code in resolvers-karma-leda-io (npm) (malicious package) - [MAL-2025-147328](https://insights.sbomify.com/MAL-2025-147328/): Malicious code in resolvers-json-spectron-enif (npm) (malicious package) - [MAL-2025-147327](https://insights.sbomify.com/MAL-2025-147327/): Malicious code in resolvers-init-ursa-docusaurus (npm) (malicious package) - [MAL-2025-147326](https://insights.sbomify.com/MAL-2025-147326/): Malicious code in resolvers-hydra-adonis-webpack (npm) (malicious package) - [MAL-2025-147325](https://insights.sbomify.com/MAL-2025-147325/): Malicious code in resolvers-framework-framework-markdown (npm) (malicious package) - [MAL-2025-147324](https://insights.sbomify.com/MAL-2025-147324/): Malicious code in resolvers-forever-grunt-koa (npm) (malicious package) - [MAL-2025-147323](https://insights.sbomify.com/MAL-2025-147323/): Malicious code in resolvers-eslint-markdown-pdf-style-loader (npm) (malicious package) - [MAL-2025-147322](https://insights.sbomify.com/MAL-2025-147322/): Malicious code in resolvers-eleventy-hexo-altair (npm) (malicious package) - [MAL-2025-147321](https://insights.sbomify.com/MAL-2025-147321/): Malicious code in resolvers-dactyl-process-fomalhaut (npm) (malicious package) - [MAL-2025-147320](https://insights.sbomify.com/MAL-2025-147320/): Malicious code in resolvers-cygnus-subscription-event (npm) (malicious package) - [MAL-2025-14732](https://insights.sbomify.com/MAL-2025-14732/): Malicious code in appmarx (npm) (malicious package) - [MAL-2025-147319](https://insights.sbomify.com/MAL-2025-147319/): Malicious code in resolvers-celeste-antd-sequelize (npm) (malicious package) - [MAL-2025-147318](https://insights.sbomify.com/MAL-2025-147318/): Malicious code in resolvers-bellatrix-jsonp-public (npm) (malicious package) - [MAL-2025-147317](https://insights.sbomify.com/MAL-2025-147317/): Malicious code in resolvers-backend-antares-atlas (npm) (malicious package) - [MAL-2025-147316](https://insights.sbomify.com/MAL-2025-147316/): Malicious code in request-wasat-mui-lynx (npm) (malicious package) - [MAL-2025-147315](https://insights.sbomify.com/MAL-2025-147315/): Malicious code in request-typeorm-elara-passport (npm) (malicious package) - [MAL-2025-147314](https://insights.sbomify.com/MAL-2025-147314/): Malicious code in request-sync-magellan-loopback (npm) (malicious package) - [MAL-2025-147313](https://insights.sbomify.com/MAL-2025-147313/): Malicious code in request-standard-proxima-magellan (npm) (malicious package) - [MAL-2025-147312](https://insights.sbomify.com/MAL-2025-147312/): Malicious code in request-server-ariel-sirius (npm) (malicious package) - [MAL-2025-147311](https://insights.sbomify.com/MAL-2025-147311/): Malicious code in request-sails-equinox-electron-builder (npm) (malicious package) - [MAL-2025-147310](https://insights.sbomify.com/MAL-2025-147310/): Malicious code in request-sagitta-rest-prettier-stylelint (npm) (malicious package) - [MAL-2025-14731](https://insights.sbomify.com/MAL-2025-14731/): Malicious code in appmania (npm) (malicious package) - [MAL-2025-147309](https://insights.sbomify.com/MAL-2025-147309/): Malicious code in request-repository-meissa-ursa (npm) (malicious package) - [MAL-2025-147308](https://insights.sbomify.com/MAL-2025-147308/): Malicious code in request-remark-sadr-callisto (npm) (malicious package) - [MAL-2025-147307](https://insights.sbomify.com/MAL-2025-147307/): Malicious code in request-readable-radiant-forever (npm) (malicious package) - [MAL-2025-147306](https://insights.sbomify.com/MAL-2025-147306/): Malicious code in request-react-bootstrap-eslint-config-superagent (npm) (malicious package) - [MAL-2025-147305](https://insights.sbomify.com/MAL-2025-147305/): Malicious code in request-proxima-nashira-link (npm) (malicious package) - [MAL-2025-147304](https://insights.sbomify.com/MAL-2025-147304/): Malicious code in request-neptune-meissa-xo (npm) (malicious package) - [MAL-2025-147303](https://insights.sbomify.com/MAL-2025-147303/): Malicious code in request-nebula-prettier-galaxy (npm) (malicious package) - [MAL-2025-147302](https://insights.sbomify.com/MAL-2025-147302/): Malicious code in request-mysql-equinox-ariel (npm) (malicious package) - [MAL-2025-147301](https://insights.sbomify.com/MAL-2025-147301/): Malicious code in request-magellan-nashira-jsonp (npm) (malicious package) - [MAL-2025-147300](https://insights.sbomify.com/MAL-2025-147300/): Malicious code in request-loglevel-webdriver-mocha-hugo (npm) (malicious package) - [MAL-2025-14730](https://insights.sbomify.com/MAL-2025-14730/): Malicious code in appmake (npm) (malicious package) - [MAL-2025-1473](https://insights.sbomify.com/MAL-2025-1473/): Malicious code in @roku-web-ui/modal (npm) (malicious package) - [MAL-2025-147299](https://insights.sbomify.com/MAL-2025-147299/): Malicious code in request-loglevel-luna-materialize (npm) (malicious package) - [MAL-2025-147298](https://insights.sbomify.com/MAL-2025-147298/): Malicious code in request-kronos-elektra-stop (npm) (malicious package) - [MAL-2025-147297](https://insights.sbomify.com/MAL-2025-147297/): Malicious code in request-jwt-jest-perseus (npm) (malicious package) - [MAL-2025-147296](https://insights.sbomify.com/MAL-2025-147296/): Malicious code in request-iota-mensa-weywot (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/1406/