# Vulnerabilities published in 2025 - [MAL-2025-147295](https://insights.sbomify.com/MAL-2025-147295/): Malicious code in request-hyperion-gridsome-unuk (npm) (malicious package) - [MAL-2025-147294](https://insights.sbomify.com/MAL-2025-147294/): Malicious code in request-halley-chakra-ui-bootstrap (npm) (malicious package) - [MAL-2025-147293](https://insights.sbomify.com/MAL-2025-147293/): Malicious code in request-event-antares-sqlite (npm) (malicious package) - [MAL-2025-147292](https://insights.sbomify.com/MAL-2025-147292/): Malicious code in request-despina-cors-gemini (npm) (malicious package) - [MAL-2025-147291](https://insights.sbomify.com/MAL-2025-147291/): Malicious code in request-css-minimizer-webpack-plugin-resolvers-standard (npm) (malicious package) - [MAL-2025-147290](https://insights.sbomify.com/MAL-2025-147290/): Malicious code in request-cordelia-cypress-spica (npm) (malicious package) - [MAL-2025-14729](https://insights.sbomify.com/MAL-2025-14729/): Malicious code in applovin-max-native-plugin-demo (npm) (malicious package) - [MAL-2025-147289](https://insights.sbomify.com/MAL-2025-147289/): Malicious code in request-changelog-fomalhaut-public (npm) (malicious package) - [MAL-2025-147288](https://insights.sbomify.com/MAL-2025-147288/): Malicious code in request-callisto-apex-passport (npm) (malicious package) - [MAL-2025-147287](https://insights.sbomify.com/MAL-2025-147287/): Malicious code in request-andromeda-corvus-iota (npm) (malicious package) - [MAL-2025-147286](https://insights.sbomify.com/MAL-2025-147286/): Malicious code in repository-xanadu-pyxis-nightmare (npm) (malicious package) - [MAL-2025-147285](https://insights.sbomify.com/MAL-2025-147285/): Malicious code in repository-webpack-hugo-impulse (npm) (malicious package) - [MAL-2025-147284](https://insights.sbomify.com/MAL-2025-147284/): Malicious code in repository-triton-canopus-odin (npm) (malicious package) - [MAL-2025-147283](https://insights.sbomify.com/MAL-2025-147283/): Malicious code in repository-transport-delphinus-solis (npm) (malicious package) - [MAL-2025-147282](https://insights.sbomify.com/MAL-2025-147282/): Malicious code in repository-spinner-chakra-ui-airbnb (npm) (malicious package) - [MAL-2025-147281](https://insights.sbomify.com/MAL-2025-147281/): Malicious code in repository-rigel-nodemon-websockets (npm) (malicious package) - [MAL-2025-147280](https://insights.sbomify.com/MAL-2025-147280/): Malicious code in repository-prompts-rate-limiter-passport (npm) (malicious package) - [MAL-2025-14728](https://insights.sbomify.com/MAL-2025-14728/): Malicious code in applitest (npm) (malicious package) - [MAL-2025-147279](https://insights.sbomify.com/MAL-2025-147279/): Malicious code in repository-phoenix-altair-firebase (npm) (malicious package) - [MAL-2025-147278](https://insights.sbomify.com/MAL-2025-147278/): Malicious code in repository-passport-vortex-auriga (npm) (malicious package) - [MAL-2025-147277](https://insights.sbomify.com/MAL-2025-147277/): Malicious code in repository-orbit-scripts-kastra (npm) (malicious package) - [MAL-2025-147276](https://insights.sbomify.com/MAL-2025-147276/): Malicious code in repository-optimize-css-assets-webpack-plugin-comet-fork (npm) (malicious package) - [MAL-2025-147275](https://insights.sbomify.com/MAL-2025-147275/): Malicious code in repository-oberon-private-sirius (npm) (malicious package) - [MAL-2025-147274](https://insights.sbomify.com/MAL-2025-147274/): Malicious code in repository-meissa-commitizen-andromeda (npm) (malicious package) - [MAL-2025-147273](https://insights.sbomify.com/MAL-2025-147273/): Malicious code in repository-mdx-init-xanthus (npm) (malicious package) - [MAL-2025-147272](https://insights.sbomify.com/MAL-2025-147272/): Malicious code in repository-lyra-react-bootstrap-ursa (npm) (malicious package) - [MAL-2025-147271](https://insights.sbomify.com/MAL-2025-147271/): Malicious code in repository-lyra-husky-await (npm) (malicious package) - [MAL-2025-147270](https://insights.sbomify.com/MAL-2025-147270/): Malicious code in repository-loglevel-node-config-react-bootstrap (npm) (malicious package) - [MAL-2025-14727](https://insights.sbomify.com/MAL-2025-14727/): Malicious code in applications.services.devcloud.image-search-client (npm) (malicious package) - [MAL-2025-147269](https://insights.sbomify.com/MAL-2025-147269/): Malicious code in repository-less-loader-wolf-reveal-md (npm) (malicious package) - [MAL-2025-147268](https://insights.sbomify.com/MAL-2025-147268/): Malicious code in repository-json-pino-chariklo (npm) (malicious package) - [MAL-2025-147267](https://insights.sbomify.com/MAL-2025-147267/): Malicious code in repository-hexo-vulcan-vuepress (npm) (malicious package) - [MAL-2025-147266](https://insights.sbomify.com/MAL-2025-147266/): Malicious code in repository-global-commitlint-radiant (npm) (malicious package) - [MAL-2025-147265](https://insights.sbomify.com/MAL-2025-147265/): Malicious code in repository-dynamo-yonder-bunyan (npm) (malicious package) - [MAL-2025-147264](https://insights.sbomify.com/MAL-2025-147264/): Malicious code in repository-dotenv-safe-xanthus-orbit (npm) (malicious package) - [MAL-2025-147263](https://insights.sbomify.com/MAL-2025-147263/): Malicious code in repository-dotenv-parse-variables-foundation-websockets (npm) (malicious package) - [MAL-2025-147262](https://insights.sbomify.com/MAL-2025-147262/): Malicious code in repository-dependencies-hydra-async (npm) (malicious package) - [MAL-2025-147261](https://insights.sbomify.com/MAL-2025-147261/): Malicious code in repository-cross-env-centaurus-colors (npm) (malicious package) - [MAL-2025-147260](https://insights.sbomify.com/MAL-2025-147260/): Malicious code in repository-commitlint-config-angular-fetch-xenos (npm) (malicious package) - [MAL-2025-14726](https://insights.sbomify.com/MAL-2025-14726/): Malicious code in apple_portal_sync (npm) (malicious package) - [MAL-2025-147259](https://insights.sbomify.com/MAL-2025-147259/): Malicious code in repository-canopus-csrf-stop (npm) (malicious package) - [MAL-2025-147258](https://insights.sbomify.com/MAL-2025-147258/): Malicious code in remark-wolf-jwt-electron (npm) (malicious package) - [MAL-2025-147257](https://insights.sbomify.com/MAL-2025-147257/): Malicious code in remark-venus-restart-sagitta (npm) (malicious package) - [MAL-2025-147256](https://insights.sbomify.com/MAL-2025-147256/): Malicious code in remark-shelljs-phoenix-sedna (npm) (malicious package) - [MAL-2025-147255](https://insights.sbomify.com/MAL-2025-147255/): Malicious code in remark-meteor-slides-nightwatch (npm) (malicious package) - [MAL-2025-147254](https://insights.sbomify.com/MAL-2025-147254/): Malicious code in remark-meteor-slides-kaus (npm) (malicious package) - [MAL-2025-147253](https://insights.sbomify.com/MAL-2025-147253/): Malicious code in remark-meteor-leda-sequelize (npm) (malicious package) - [MAL-2025-147252](https://insights.sbomify.com/MAL-2025-147252/): Malicious code in remark-mensa-publish-koa (npm) (malicious package) - [MAL-2025-147251](https://insights.sbomify.com/MAL-2025-147251/): Malicious code in remark-markdownlint-capella-promise (npm) (malicious package) - [MAL-2025-147250](https://insights.sbomify.com/MAL-2025-147250/): Malicious code in remark-magellan-init-envconfig (npm) (malicious package) - [MAL-2025-14725](https://insights.sbomify.com/MAL-2025-14725/): Malicious code in apple-zucchini-strawberry-sggqf (npm) (malicious package) - [MAL-2025-147249](https://insights.sbomify.com/MAL-2025-147249/): Malicious code in remark-jupiter-izar-xanadu (npm) (malicious package) - [MAL-2025-147248](https://insights.sbomify.com/MAL-2025-147248/): Malicious code in remark-janus-socketio-electron (npm) (malicious package) - [MAL-2025-147247](https://insights.sbomify.com/MAL-2025-147247/): Malicious code in remark-ini-cosmos-spica (npm) (malicious package) - [MAL-2025-147246](https://insights.sbomify.com/MAL-2025-147246/): Malicious code in remark-hydra-rate-limiter-oauth (npm) (malicious package) - [MAL-2025-147245](https://insights.sbomify.com/MAL-2025-147245/): Malicious code in remark-fusion-phoebe-meissa (npm) (malicious package) - [MAL-2025-147244](https://insights.sbomify.com/MAL-2025-147244/): Malicious code in remark-dotenv-safe-betelgeuse-testcafe (npm) (malicious package) - [MAL-2025-147243](https://insights.sbomify.com/MAL-2025-147243/): Malicious code in remark-castor-ophiuchus-lynx (npm) (malicious package) - [MAL-2025-147242](https://insights.sbomify.com/MAL-2025-147242/): Malicious code in remark-async-development-exec (npm) (malicious package) - [MAL-2025-147241](https://insights.sbomify.com/MAL-2025-147241/): Malicious code in remark-astro-forever-eslint (npm) (malicious package) - [MAL-2025-147240](https://insights.sbomify.com/MAL-2025-147240/): Malicious code in release-it-xo-quantum-bellatrix (npm) (malicious package) - [MAL-2025-14724](https://insights.sbomify.com/MAL-2025-14724/): Malicious code in apple-zucchini-raspberry-glbnu (npm) (malicious package) - [MAL-2025-147239](https://insights.sbomify.com/MAL-2025-147239/): Malicious code in release-it-xo-jekyll-relay (npm) (malicious package) - [MAL-2025-147238](https://insights.sbomify.com/MAL-2025-147238/): Malicious code in release-it-transform-grus-apex (npm) (malicious package) - [MAL-2025-147237](https://insights.sbomify.com/MAL-2025-147237/): Malicious code in release-it-toml-transport-carpo (npm) (malicious package) - [MAL-2025-147236](https://insights.sbomify.com/MAL-2025-147236/): Malicious code in release-it-tailwindcss-pyxis-module (npm) (malicious package) - [MAL-2025-147235](https://insights.sbomify.com/MAL-2025-147235/): Malicious code in release-it-sass-loader-parcel-fork (npm) (malicious package) - [MAL-2025-147234](https://insights.sbomify.com/MAL-2025-147234/): Malicious code in release-it-release-it-semantic-ui-vortex (npm) (malicious package) - [MAL-2025-147233](https://insights.sbomify.com/MAL-2025-147233/): Malicious code in release-it-quark-antd-meteor (npm) (malicious package) - [MAL-2025-147232](https://insights.sbomify.com/MAL-2025-147232/): Malicious code in release-it-quantum-delphinus-readable (npm) (malicious package) - [MAL-2025-147231](https://insights.sbomify.com/MAL-2025-147231/): Malicious code in release-it-polaris-rollup-plugin-corvus (npm) (malicious package) - [MAL-2025-147230](https://insights.sbomify.com/MAL-2025-147230/): Malicious code in release-it-phoenix-node-sass-dependencies (npm) (malicious package) - [MAL-2025-14723](https://insights.sbomify.com/MAL-2025-14723/): Malicious code in apple-yankee-mbaa (npm) (malicious package) - [MAL-2025-147229](https://insights.sbomify.com/MAL-2025-147229/): Malicious code in release-it-optimize-css-assets-webpack-plugin-nextjs-development (npm) (malicious package) - [MAL-2025-147228](https://insights.sbomify.com/MAL-2025-147228/): Malicious code in release-it-node-sass-browserify-css-minimizer-webpack-plugin (npm) (malicious package) - [MAL-2025-147227](https://insights.sbomify.com/MAL-2025-147227/): Malicious code in release-it-nightwatch-jekyll-yildun (npm) (malicious package) - [MAL-2025-147226](https://insights.sbomify.com/MAL-2025-147226/): Malicious code in release-it-mini-css-extract-plugin-prettier-plugin-markdown-commitlint (npm) (malicious package) - [MAL-2025-147225](https://insights.sbomify.com/MAL-2025-147225/): Malicious code in release-it-meteor-dorado-supervisor (npm) (malicious package) - [MAL-2025-147224](https://insights.sbomify.com/MAL-2025-147224/): Malicious code in release-it-hyperion-gacrux-slidev (npm) (malicious package) - [MAL-2025-147223](https://insights.sbomify.com/MAL-2025-147223/): Malicious code in release-it-hyperion-firebase-halley (npm) (malicious package) - [MAL-2025-147222](https://insights.sbomify.com/MAL-2025-147222/): Malicious code in release-it-eslint-nodejs-titan (npm) (malicious package) - [MAL-2025-147221](https://insights.sbomify.com/MAL-2025-147221/): Malicious code in release-it-convict-io-framework (npm) (malicious package) - [MAL-2025-147220](https://insights.sbomify.com/MAL-2025-147220/): Malicious code in release-it-commitlint-config-angular-soap-prettier-stylelint (npm) (malicious package) - [MAL-2025-14722](https://insights.sbomify.com/MAL-2025-14722/): Malicious code in apple-yam-kusc (npm) (malicious package) - [MAL-2025-147219](https://insights.sbomify.com/MAL-2025-147219/): Malicious code in release-it-command-express-pyxis (npm) (malicious package) - [MAL-2025-147218](https://insights.sbomify.com/MAL-2025-147218/): Malicious code in release-it-chai-framework-nodejs (npm) (malicious package) - [MAL-2025-147217](https://insights.sbomify.com/MAL-2025-147217/): Malicious code in release-it-blitz-colors-protractor (npm) (malicious package) - [MAL-2025-147216](https://insights.sbomify.com/MAL-2025-147216/): Malicious code in release-it-apollo-cypress-oberon (npm) (malicious package) - [MAL-2025-147215](https://insights.sbomify.com/MAL-2025-147215/): Malicious code in relay-zenobia-webdriver-mocha-jekyll (npm) (malicious package) - [MAL-2025-147214](https://insights.sbomify.com/MAL-2025-147214/): Malicious code in relay-xo-resolvers-got (npm) (malicious package) - [MAL-2025-147213](https://insights.sbomify.com/MAL-2025-147213/): Malicious code in relay-xenon-arcturus-canopus (npm) (malicious package) - [MAL-2025-147212](https://insights.sbomify.com/MAL-2025-147212/): Malicious code in relay-wezen-procyon-galaxy (npm) (malicious package) - [MAL-2025-147211](https://insights.sbomify.com/MAL-2025-147211/): Malicious code in relay-virgo-native-norma (npm) (malicious package) - [MAL-2025-147210](https://insights.sbomify.com/MAL-2025-147210/): Malicious code in relay-sedna-gulp-altair (npm) (malicious package) - [MAL-2025-14721](https://insights.sbomify.com/MAL-2025-14721/): Malicious code in apple-xwq-project (npm) (malicious package) - [MAL-2025-147209](https://insights.sbomify.com/MAL-2025-147209/): Malicious code in relay-sails-postcss-quito (npm) (malicious package) - [MAL-2025-147208](https://insights.sbomify.com/MAL-2025-147208/): Malicious code in relay-relay-development-warp (npm) (malicious package) - [MAL-2025-147207](https://insights.sbomify.com/MAL-2025-147207/): Malicious code in relay-odin-weywot-dorado (npm) (malicious package) - [MAL-2025-147206](https://insights.sbomify.com/MAL-2025-147206/): Malicious code in relay-nodejs-gulp-proxima (npm) (malicious package) - [MAL-2025-147205](https://insights.sbomify.com/MAL-2025-147205/): Malicious code in relay-nebula-redis-nightmare (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/1407/