# Vulnerabilities published in 2025 - [MAL-2025-147204](https://insights.sbomify.com/MAL-2025-147204/): Malicious code in relay-mocha-mutation-rate-limiter (npm) (malicious package) - [MAL-2025-147203](https://insights.sbomify.com/MAL-2025-147203/): Malicious code in relay-loopback-electron-builder-chalk (npm) (malicious package) - [MAL-2025-147202](https://insights.sbomify.com/MAL-2025-147202/): Malicious code in relay-link-algol-quasar (npm) (malicious package) - [MAL-2025-147201](https://insights.sbomify.com/MAL-2025-147201/): Malicious code in relay-jsonp-jsonp-csrf (npm) (malicious package) - [MAL-2025-147200](https://insights.sbomify.com/MAL-2025-147200/): Malicious code in relay-iota-sass-loader-enceladus (npm) (malicious package) - [MAL-2025-14720](https://insights.sbomify.com/MAL-2025-14720/): Malicious code in apple-xta-project (npm) (malicious package) - [MAL-2025-1472](https://insights.sbomify.com/MAL-2025-1472/): Malicious code in @supera/shared (npm) (malicious package) - [MAL-2025-147199](https://insights.sbomify.com/MAL-2025-147199/): Malicious code in relay-cors-callisto-buffer (npm) (malicious package) - [MAL-2025-147198](https://insights.sbomify.com/MAL-2025-147198/): Malicious code in relay-cli-altair-forever (npm) (malicious package) - [MAL-2025-147197](https://insights.sbomify.com/MAL-2025-147197/): Malicious code in relay-changelog-webdriverio-pegasus (npm) (malicious package) - [MAL-2025-147196](https://insights.sbomify.com/MAL-2025-147196/): Malicious code in relay-auth0-taurus-async (npm) (malicious package) - [MAL-2025-147195](https://insights.sbomify.com/MAL-2025-147195/): Malicious code in relay-auth-cassini-winston (npm) (malicious package) - [MAL-2025-147194](https://insights.sbomify.com/MAL-2025-147194/): Malicious code in rehype-yaml-tailwindcss-levels (npm) (malicious package) - [MAL-2025-147193](https://insights.sbomify.com/MAL-2025-147193/): Malicious code in rehype-winston-webpack-iota (npm) (malicious package) - [MAL-2025-147192](https://insights.sbomify.com/MAL-2025-147192/): Malicious code in rehype-winston-octans-pino (npm) (malicious package) - [MAL-2025-147191](https://insights.sbomify.com/MAL-2025-147191/): Malicious code in rehype-upgrade-npm-loop (npm) (malicious package) - [MAL-2025-147190](https://insights.sbomify.com/MAL-2025-147190/): Malicious code in rehype-typeorm-rate-limiter-koa (npm) (malicious package) - [MAL-2025-14719](https://insights.sbomify.com/MAL-2025-14719/): Malicious code in apple-wek-project (npm) (malicious package) - [MAL-2025-147189](https://insights.sbomify.com/MAL-2025-147189/): Malicious code in rehype-testcafe-iota-sails (npm) (malicious package) - [MAL-2025-147188](https://insights.sbomify.com/MAL-2025-147188/): Malicious code in rehype-tailwindcss-spica-flare (npm) (malicious package) - [MAL-2025-147187](https://insights.sbomify.com/MAL-2025-147187/): Malicious code in rehype-spinner-wasat-helios (npm) (malicious package) - [MAL-2025-147186](https://insights.sbomify.com/MAL-2025-147186/): Malicious code in rehype-solis-nebula-rehype (npm) (malicious package) - [MAL-2025-147185](https://insights.sbomify.com/MAL-2025-147185/): Malicious code in rehype-socketio-arcturus-ursa (npm) (malicious package) - [MAL-2025-147184](https://insights.sbomify.com/MAL-2025-147184/): Malicious code in rehype-slides-vuetify-dagda (npm) (malicious package) - [MAL-2025-147183](https://insights.sbomify.com/MAL-2025-147183/): Malicious code in rehype-run-script-soap-process (npm) (malicious package) - [MAL-2025-147182](https://insights.sbomify.com/MAL-2025-147182/): Malicious code in rehype-remark-sagitta-prettier-plugin-markdown (npm) (malicious package) - [MAL-2025-147181](https://insights.sbomify.com/MAL-2025-147181/): Malicious code in rehype-protractor-ganymede-bulma (npm) (malicious package) - [MAL-2025-147180](https://insights.sbomify.com/MAL-2025-147180/): Malicious code in rehype-procyon-tethys-janus (npm) (malicious package) - [MAL-2025-14718](https://insights.sbomify.com/MAL-2025-14718/): Malicious code in apple-watermelon-vanilla-lwavc (npm) (malicious package) - [MAL-2025-147179](https://insights.sbomify.com/MAL-2025-147179/): Malicious code in rehype-orbit-yildun-dependencies (npm) (malicious package) - [MAL-2025-147178](https://insights.sbomify.com/MAL-2025-147178/): Malicious code in rehype-nextjs-xenon-standard (npm) (malicious package) - [MAL-2025-147177](https://insights.sbomify.com/MAL-2025-147177/): Malicious code in rehype-neptune-buffer-cassini (npm) (malicious package) - [MAL-2025-147176](https://insights.sbomify.com/MAL-2025-147176/): Malicious code in rehype-meteor-pegasus-transform (npm) (malicious package) - [MAL-2025-147175](https://insights.sbomify.com/MAL-2025-147175/): Malicious code in rehype-lyra-iota-bulma (npm) (malicious package) - [MAL-2025-147174](https://insights.sbomify.com/MAL-2025-147174/): Malicious code in rehype-lint-staged-electron-builder-readable (npm) (malicious package) - [MAL-2025-147173](https://insights.sbomify.com/MAL-2025-147173/): Malicious code in rehype-impulse-webdriverio-auth (npm) (malicious package) - [MAL-2025-147172](https://insights.sbomify.com/MAL-2025-147172/): Malicious code in rehype-hermes-spica-webdriver-mocha (npm) (malicious package) - [MAL-2025-147171](https://insights.sbomify.com/MAL-2025-147171/): Malicious code in rehype-halley-dagda-neptune (npm) (malicious package) - [MAL-2025-147170](https://insights.sbomify.com/MAL-2025-147170/): Malicious code in rehype-gravity-rimraf-nebula (npm) (malicious package) - [MAL-2025-14717](https://insights.sbomify.com/MAL-2025-14717/): Malicious code in apple-vm1-project (npm) (malicious package) - [MAL-2025-147169](https://insights.sbomify.com/MAL-2025-147169/): Malicious code in rehype-galaxy-hydra-prettier-plugin-markdown (npm) (malicious package) - [MAL-2025-147168](https://insights.sbomify.com/MAL-2025-147168/): Malicious code in rehype-eris-algol-ignite (npm) (malicious package) - [MAL-2025-147167](https://insights.sbomify.com/MAL-2025-147167/): Malicious code in rehype-dotenv-safe-electron-builder-zenobia (npm) (malicious package) - [MAL-2025-147166](https://insights.sbomify.com/MAL-2025-147166/): Malicious code in rehype-docusaurus-nightmare-node-config (npm) (malicious package) - [MAL-2025-147165](https://insights.sbomify.com/MAL-2025-147165/): Malicious code in rehype-css-loader-metalsmith-carina (npm) (malicious package) - [MAL-2025-147164](https://insights.sbomify.com/MAL-2025-147164/): Malicious code in rehype-cordelia-framework-ceres (npm) (malicious package) - [MAL-2025-147163](https://insights.sbomify.com/MAL-2025-147163/): Malicious code in rehype-auth0-superagent-semantic-release (npm) (malicious package) - [MAL-2025-147162](https://insights.sbomify.com/MAL-2025-147162/): Malicious code in rehype-auriga-google-gravity (npm) (malicious package) - [MAL-2025-147161](https://insights.sbomify.com/MAL-2025-147161/): Malicious code in rehype-astro-pm2-vuepress (npm) (malicious package) - [MAL-2025-147160](https://insights.sbomify.com/MAL-2025-147160/): Malicious code in regulus-xenos-equinox-mocha (npm) (malicious package) - [MAL-2025-14716](https://insights.sbomify.com/MAL-2025-14716/): Malicious code in apple-victor-nrgc (npm) (malicious package) - [MAL-2025-147159](https://insights.sbomify.com/MAL-2025-147159/): Malicious code in regulus-transport-postcss-carina (npm) (malicious package) - [MAL-2025-147158](https://insights.sbomify.com/MAL-2025-147158/): Malicious code in regulus-spica-passport-exec (npm) (malicious package) - [MAL-2025-147157](https://insights.sbomify.com/MAL-2025-147157/): Malicious code in regulus-restart-apex-element-ui (npm) (malicious package) - [MAL-2025-147156](https://insights.sbomify.com/MAL-2025-147156/): Malicious code in regulus-remark-achernar-virgo (npm) (malicious package) - [MAL-2025-147155](https://insights.sbomify.com/MAL-2025-147155/): Malicious code in regulus-playwright-module-changelog (npm) (malicious package) - [MAL-2025-147154](https://insights.sbomify.com/MAL-2025-147154/): Malicious code in regulus-phoebe-corvus-cypress (npm) (malicious package) - [MAL-2025-147153](https://insights.sbomify.com/MAL-2025-147153/): Malicious code in regulus-perseus-aldebaran-centaurus (npm) (malicious package) - [MAL-2025-147152](https://insights.sbomify.com/MAL-2025-147152/): Malicious code in regulus-nextjs-chariklo-prettier (npm) (malicious package) - [MAL-2025-147151](https://insights.sbomify.com/MAL-2025-147151/): Malicious code in regulus-mira-sequelize-lyra (npm) (malicious package) - [MAL-2025-147150](https://insights.sbomify.com/MAL-2025-147150/): Malicious code in regulus-loopback-gravity-postgres (npm) (malicious package) - [MAL-2025-14715](https://insights.sbomify.com/MAL-2025-14715/): Malicious code in apple-vanilla-uknp (npm) (malicious package) - [MAL-2025-147149](https://insights.sbomify.com/MAL-2025-147149/): Malicious code in regulus-local-eslint-config-callisto (npm) (malicious package) - [MAL-2025-147148](https://insights.sbomify.com/MAL-2025-147148/): Malicious code in regulus-iota-flare-eris (npm) (malicious package) - [MAL-2025-147147](https://insights.sbomify.com/MAL-2025-147147/): Malicious code in regulus-geckodriver-apollo-ignite (npm) (malicious package) - [MAL-2025-147146](https://insights.sbomify.com/MAL-2025-147146/): Malicious code in regulus-framework-chai-andromeda (npm) (malicious package) - [MAL-2025-147145](https://insights.sbomify.com/MAL-2025-147145/): Malicious code in regulus-electron-builder-toml-convict (npm) (malicious package) - [MAL-2025-147144](https://insights.sbomify.com/MAL-2025-147144/): Malicious code in regulus-child-process-sedna-terser-webpack-plugin (npm) (malicious package) - [MAL-2025-147143](https://insights.sbomify.com/MAL-2025-147143/): Malicious code in regulus-bulma-fornax-norma (npm) (malicious package) - [MAL-2025-147142](https://insights.sbomify.com/MAL-2025-147142/): Malicious code in regulus-blitz-jwt-jabbah (npm) (malicious package) - [MAL-2025-147141](https://insights.sbomify.com/MAL-2025-147141/): Malicious code in regulus-bellatrix-lyra-pavo (npm) (malicious package) - [MAL-2025-147140](https://insights.sbomify.com/MAL-2025-147140/): Malicious code in regulus-atlas-passport-ursa (npm) (malicious package) - [MAL-2025-14714](https://insights.sbomify.com/MAL-2025-14714/): Malicious code in apple-vanilla-qkbb (npm) (malicious package) - [MAL-2025-147139](https://insights.sbomify.com/MAL-2025-147139/): Malicious code in regulus-apex-package-css-minimizer-webpack-plugin (npm) (malicious package) - [MAL-2025-147138](https://insights.sbomify.com/MAL-2025-147138/): Malicious code in regulus-acamar-dynamo-xanthus (npm) (malicious package) - [MAL-2025-147137](https://insights.sbomify.com/MAL-2025-147137/): Malicious code in registry-zenith-redis-elara (npm) (malicious package) - [MAL-2025-147136](https://insights.sbomify.com/MAL-2025-147136/): Malicious code in registry-taurus-changelog-xerxes (npm) (malicious package) - [MAL-2025-147135](https://insights.sbomify.com/MAL-2025-147135/): Malicious code in registry-sirius-testcafe-sails (npm) (malicious package) - [MAL-2025-147134](https://insights.sbomify.com/MAL-2025-147134/): Malicious code in registry-server-jekyll-stream (npm) (malicious package) - [MAL-2025-147133](https://insights.sbomify.com/MAL-2025-147133/): Malicious code in registry-rollup-vortex-meteor (npm) (malicious package) - [MAL-2025-147132](https://insights.sbomify.com/MAL-2025-147132/): Malicious code in registry-pegasus-ganymede-spawn (npm) (malicious package) - [MAL-2025-147131](https://insights.sbomify.com/MAL-2025-147131/): Malicious code in registry-kronos-bootstrap-hyperion (npm) (malicious package) - [MAL-2025-147130](https://insights.sbomify.com/MAL-2025-147130/): Malicious code in registry-koa-iota-wolf (npm) (malicious package) - [MAL-2025-14713](https://insights.sbomify.com/MAL-2025-14713/): Malicious code in apple-uz8-project (npm) (malicious package) - [MAL-2025-147129](https://insights.sbomify.com/MAL-2025-147129/): Malicious code in registry-gacrux-heka-yonder (npm) (malicious package) - [MAL-2025-147128](https://insights.sbomify.com/MAL-2025-147128/): Malicious code in registry-fork-terser-webpack-plugin-rollup (npm) (malicious package) - [MAL-2025-147127](https://insights.sbomify.com/MAL-2025-147127/): Malicious code in registry-firebase-less-loader-subscription (npm) (malicious package) - [MAL-2025-147126](https://insights.sbomify.com/MAL-2025-147126/): Malicious code in registry-firebase-command-sync (npm) (malicious package) - [MAL-2025-147125](https://insights.sbomify.com/MAL-2025-147125/): Malicious code in registry-europa-antares-neptune (npm) (malicious package) - [MAL-2025-147124](https://insights.sbomify.com/MAL-2025-147124/): Malicious code in registry-eris-grunt-jasmine (npm) (malicious package) - [MAL-2025-147123](https://insights.sbomify.com/MAL-2025-147123/): Malicious code in registry-cygnus-jekyll-rimraf (npm) (malicious package) - [MAL-2025-147122](https://insights.sbomify.com/MAL-2025-147122/): Malicious code in registry-csv-corvus-mocha (npm) (malicious package) - [MAL-2025-147121](https://insights.sbomify.com/MAL-2025-147121/): Malicious code in registry-concurrently-hercules-docusaurus (npm) (malicious package) - [MAL-2025-147120](https://insights.sbomify.com/MAL-2025-147120/): Malicious code in registry-barnard-hexo-io (npm) (malicious package) - [MAL-2025-14712](https://insights.sbomify.com/MAL-2025-14712/): Malicious code in apple-tangerine-tryf (npm) (malicious package) - [MAL-2025-147119](https://insights.sbomify.com/MAL-2025-147119/): Malicious code in redis-yakutsk-hyperion-nashira (npm) (malicious package) - [MAL-2025-147118](https://insights.sbomify.com/MAL-2025-147118/): Malicious code in redis-webdriverio-radiant-helmet (npm) (malicious package) - [MAL-2025-147117](https://insights.sbomify.com/MAL-2025-147117/): Malicious code in redis-webdriver-manager-cluster-metalsmith (npm) (malicious package) - [MAL-2025-147116](https://insights.sbomify.com/MAL-2025-147116/): Malicious code in redis-version-dependencies-zephyr (npm) (malicious package) - [MAL-2025-147115](https://insights.sbomify.com/MAL-2025-147115/): Malicious code in redis-sqlite-odin-cosmiconfig (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/1408/