# Vulnerabilities published in 2025


- [MAL-2025-147114](https://insights.sbomify.com/MAL-2025-147114/): Malicious code in redis-rehype-ursa-apollo (npm) (malicious package)
- [MAL-2025-147113](https://insights.sbomify.com/MAL-2025-147113/): Malicious code in redis-readable-convict-odin (npm) (malicious package)
- [MAL-2025-147112](https://insights.sbomify.com/MAL-2025-147112/): Malicious code in redis-promise-sails-umbra (npm) (malicious package)
- [MAL-2025-147111](https://insights.sbomify.com/MAL-2025-147111/): Malicious code in redis-phoenix-dependencies-ceres (npm) (malicious package)
- [MAL-2025-147110](https://insights.sbomify.com/MAL-2025-147110/): Malicious code in redis-module-prompts-phoebe (npm) (malicious package)
- [MAL-2025-14711](https://insights.sbomify.com/MAL-2025-14711/): Malicious code in apple-tangerine-papaya-vehsm (npm) (malicious package)
- [MAL-2025-147109](https://insights.sbomify.com/MAL-2025-147109/): Malicious code in redis-magellan-hexo-equinox (npm) (malicious package)
- [MAL-2025-147108](https://insights.sbomify.com/MAL-2025-147108/): Malicious code in redis-leda-cluster-transport (npm) (malicious package)
- [MAL-2025-147107](https://insights.sbomify.com/MAL-2025-147107/): Malicious code in redis-juno-restart-chakra-ui (npm) (malicious package)
- [MAL-2025-147106](https://insights.sbomify.com/MAL-2025-147106/): Malicious code in redis-javascript-ursa-polaris (npm) (malicious package)
- [MAL-2025-147105](https://insights.sbomify.com/MAL-2025-147105/): Malicious code in redis-izar-react-bootstrap-run-script (npm) (malicious package)
- [MAL-2025-147104](https://insights.sbomify.com/MAL-2025-147104/): Malicious code in redis-install-xml-atlas (npm) (malicious package)
- [MAL-2025-147103](https://insights.sbomify.com/MAL-2025-147103/): Malicious code in redis-ignite-browserify-atlas (npm) (malicious package)
- [MAL-2025-147102](https://insights.sbomify.com/MAL-2025-147102/): Malicious code in redis-hermes-mocha-ophiuchus (npm) (malicious package)
- [MAL-2025-147101](https://insights.sbomify.com/MAL-2025-147101/): Malicious code in redis-gulp-lynx-spectron-webdriver (npm) (malicious package)
- [MAL-2025-147100](https://insights.sbomify.com/MAL-2025-147100/): Malicious code in redis-fornax-loglevel-scorpius (npm) (malicious package)
- [MAL-2025-14710](https://insights.sbomify.com/MAL-2025-14710/): Malicious code in apple-tangerine-ltdn (npm) (malicious package)
- [MAL-2025-1471](https://insights.sbomify.com/MAL-2025-1471/): Malicious code in wkndaemassetcompute (npm) (malicious package)
- [MAL-2025-147099](https://insights.sbomify.com/MAL-2025-147099/): Malicious code in redis-europa-nodejs-rate-limiter (npm) (malicious package)
- [MAL-2025-147098](https://insights.sbomify.com/MAL-2025-147098/): Malicious code in redis-eleventy-eslint-plugin-typeorm (npm) (malicious package)
- [MAL-2025-147097](https://insights.sbomify.com/MAL-2025-147097/): Malicious code in redis-despina-process-aquarius (npm) (malicious package)
- [MAL-2025-147096](https://insights.sbomify.com/MAL-2025-147096/): Malicious code in redis-atlas-docusaurus-antd (npm) (malicious package)
- [MAL-2025-147095](https://insights.sbomify.com/MAL-2025-147095/): Malicious code in redis-ariel-metalsmith-enceladus (npm) (malicious package)
- [MAL-2025-147094](https://insights.sbomify.com/MAL-2025-147094/): Malicious code in readable-xanadu-zenobia-css-minimizer-webpack-plugin (npm) (malicious package)
- [MAL-2025-147093](https://insights.sbomify.com/MAL-2025-147093/): Malicious code in readable-thuban-init-pyxis (npm) (malicious package)
- [MAL-2025-147092](https://insights.sbomify.com/MAL-2025-147092/): Malicious code in readable-sqlite-lint-staged-ora (npm) (malicious package)
- [MAL-2025-147091](https://insights.sbomify.com/MAL-2025-147091/): Malicious code in readable-spawn-miranda-husky (npm) (malicious package)
- [MAL-2025-147090](https://insights.sbomify.com/MAL-2025-147090/): Malicious code in readable-pulsar-umbra-pegasus (npm) (malicious package)
- [MAL-2025-14709](https://insights.sbomify.com/MAL-2025-14709/): Malicious code in apple-sierra-vckp (npm) (malicious package)
- [MAL-2025-147089](https://insights.sbomify.com/MAL-2025-147089/): Malicious code in readable-pino-pretty-style-loader-jekyll (npm) (malicious package)
- [MAL-2025-147088](https://insights.sbomify.com/MAL-2025-147088/): Malicious code in readable-pino-loop-nightwatch (npm) (malicious package)
- [MAL-2025-147087](https://insights.sbomify.com/MAL-2025-147087/): Malicious code in readable-ophiuchus-heka-update (npm) (malicious package)
- [MAL-2025-147086](https://insights.sbomify.com/MAL-2025-147086/): Malicious code in readable-nodemon-envconfig-fomalhaut (npm) (malicious package)
- [MAL-2025-147085](https://insights.sbomify.com/MAL-2025-147085/): Malicious code in readable-mysql-bulma-delphinus (npm) (malicious package)
- [MAL-2025-147084](https://insights.sbomify.com/MAL-2025-147084/): Malicious code in readable-kastra-spectron-oberon (npm) (malicious package)
- [MAL-2025-147083](https://insights.sbomify.com/MAL-2025-147083/): Malicious code in readable-jwt-fornax-ultra (npm) (malicious package)
- [MAL-2025-147082](https://insights.sbomify.com/MAL-2025-147082/): Malicious code in readable-heka-chakra-ui-lacerta (npm) (malicious package)
- [MAL-2025-147081](https://insights.sbomify.com/MAL-2025-147081/): Malicious code in readable-geckodriver-thuban-vortex (npm) (malicious package)
- [MAL-2025-147080](https://insights.sbomify.com/MAL-2025-147080/): Malicious code in readable-eslint-config-fomalhaut-dotenv (npm) (malicious package)
- [MAL-2025-14708](https://insights.sbomify.com/MAL-2025-14708/): Malicious code in apple-rlu-project (npm) (malicious package)
- [MAL-2025-147079](https://insights.sbomify.com/MAL-2025-147079/): Malicious code in readable-element-ui-webdriver-mocha-loop (npm) (malicious package)
- [MAL-2025-147078](https://insights.sbomify.com/MAL-2025-147078/): Malicious code in readable-element-ui-browserify-style-loader (npm) (malicious package)
- [MAL-2025-147077](https://insights.sbomify.com/MAL-2025-147077/): Malicious code in readable-browserify-cors-odin (npm) (malicious package)
- [MAL-2025-147076](https://insights.sbomify.com/MAL-2025-147076/): Malicious code in readable-astro-npm-prompts (npm) (malicious package)
- [MAL-2025-147075](https://insights.sbomify.com/MAL-2025-147075/): Malicious code in react-bootstrap-socketio-nestjs-jsonp (npm) (malicious package)
- [MAL-2025-147074](https://insights.sbomify.com/MAL-2025-147074/): Malicious code in react-bootstrap-sails-websockets-upgrade (npm) (malicious package)
- [MAL-2025-147073](https://insights.sbomify.com/MAL-2025-147073/): Malicious code in react-bootstrap-rocket-async-meteor (npm) (malicious package)
- [MAL-2025-147072](https://insights.sbomify.com/MAL-2025-147072/): Malicious code in react-bootstrap-publish-concurrently-command (npm) (malicious package)
- [MAL-2025-147071](https://insights.sbomify.com/MAL-2025-147071/): Malicious code in react-bootstrap-polaris-prompts-duplex (npm) (malicious package)
- [MAL-2025-147070](https://insights.sbomify.com/MAL-2025-147070/): Malicious code in react-bootstrap-perseus-loop-octans (npm) (malicious package)
- [MAL-2025-14707](https://insights.sbomify.com/MAL-2025-14707/): Malicious code in apple-raspberry-bakh (npm) (malicious package)
- [MAL-2025-147069](https://insights.sbomify.com/MAL-2025-147069/): Malicious code in react-bootstrap-nightwatch-phoenix-node-config (npm) (malicious package)
- [MAL-2025-147068](https://insights.sbomify.com/MAL-2025-147068/): Malicious code in react-bootstrap-native-rehype-style-loader (npm) (malicious package)
- [MAL-2025-147067](https://insights.sbomify.com/MAL-2025-147067/): Malicious code in react-bootstrap-mongodb-phenomic-google (npm) (malicious package)
- [MAL-2025-147066](https://insights.sbomify.com/MAL-2025-147066/): Malicious code in react-bootstrap-magellan-xanthus-scorpius (npm) (malicious package)
- [MAL-2025-147065](https://insights.sbomify.com/MAL-2025-147065/): Malicious code in react-bootstrap-lynx-neptune-docusaurus (npm) (malicious package)
- [MAL-2025-147064](https://insights.sbomify.com/MAL-2025-147064/): Malicious code in react-bootstrap-loopback-acamar-csrf (npm) (malicious package)
- [MAL-2025-147063](https://insights.sbomify.com/MAL-2025-147063/): Malicious code in react-bootstrap-lint-alphard-ursa (npm) (malicious package)
- [MAL-2025-147062](https://insights.sbomify.com/MAL-2025-147062/): Malicious code in react-bootstrap-jasmine-restart-jupiter (npm) (malicious package)
- [MAL-2025-147061](https://insights.sbomify.com/MAL-2025-147061/): Malicious code in react-bootstrap-hyperion-gemini-eris (npm) (malicious package)
- [MAL-2025-147060](https://insights.sbomify.com/MAL-2025-147060/): Malicious code in react-bootstrap-hapi-init-quantum (npm) (malicious package)
- [MAL-2025-14706](https://insights.sbomify.com/MAL-2025-14706/): Malicious code in apple-quince-hkra (npm) (malicious package)
- [MAL-2025-147059](https://insights.sbomify.com/MAL-2025-147059/): Malicious code in react-bootstrap-europa-postcss-polaris (npm) (malicious package)
- [MAL-2025-147058](https://insights.sbomify.com/MAL-2025-147058/): Malicious code in react-bootstrap-envconfig-juno-rate-limiter (npm) (malicious package)
- [MAL-2025-147057](https://insights.sbomify.com/MAL-2025-147057/): Malicious code in react-bootstrap-enceladus-oauth-antares (npm) (malicious package)
- [MAL-2025-147056](https://insights.sbomify.com/MAL-2025-147056/): Malicious code in react-bootstrap-element-ui-gatsby-forever (npm) (malicious package)
- [MAL-2025-147055](https://insights.sbomify.com/MAL-2025-147055/): Malicious code in react-bootstrap-draco-nuxtjs-charon (npm) (malicious package)
- [MAL-2025-147054](https://insights.sbomify.com/MAL-2025-147054/): Malicious code in react-bootstrap-docusaurus-release-it-wasat (npm) (malicious package)
- [MAL-2025-147053](https://insights.sbomify.com/MAL-2025-147053/): Malicious code in react-bootstrap-bootstrap-fusion-buffer (npm) (malicious package)
- [MAL-2025-147052](https://insights.sbomify.com/MAL-2025-147052/): Malicious code in react-bootstrap-betelgeuse-rehype-betelgeuse (npm) (malicious package)
- [MAL-2025-147051](https://insights.sbomify.com/MAL-2025-147051/): Malicious code in react-bootstrap-auth0-quito-sedna (npm) (malicious package)
- [MAL-2025-147050](https://insights.sbomify.com/MAL-2025-147050/): Malicious code in react-bootstrap-achernar-procyon-mini-css-extract-plugin (npm) (malicious package)
- [MAL-2025-14705](https://insights.sbomify.com/MAL-2025-14705/): Malicious code in apple-pk0-project (npm) (malicious package)
- [MAL-2025-147049](https://insights.sbomify.com/MAL-2025-147049/): Malicious code in rate-limiter-unuk-less-terser (npm) (malicious package)
- [MAL-2025-147048](https://insights.sbomify.com/MAL-2025-147048/): Malicious code in rate-limiter-soap-colors-testcafe (npm) (malicious package)
- [MAL-2025-147047](https://insights.sbomify.com/MAL-2025-147047/): Malicious code in rate-limiter-rimraf-kastra-eris (npm) (malicious package)
- [MAL-2025-147046](https://insights.sbomify.com/MAL-2025-147046/): Malicious code in rate-limiter-postcss-vega-chromedriver (npm) (malicious package)
- [MAL-2025-147045](https://insights.sbomify.com/MAL-2025-147045/): Malicious code in rate-limiter-ophiuchus-cluster-child-process (npm) (malicious package)
- [MAL-2025-147044](https://insights.sbomify.com/MAL-2025-147044/): Malicious code in rate-limiter-mira-test-figures (npm) (malicious package)
- [MAL-2025-147043](https://insights.sbomify.com/MAL-2025-147043/): Malicious code in rate-limiter-lynx-shelljs-gulp (npm) (malicious package)
- [MAL-2025-147042](https://insights.sbomify.com/MAL-2025-147042/): Malicious code in rate-limiter-loop-npm-farout (npm) (malicious package)
- [MAL-2025-147041](https://insights.sbomify.com/MAL-2025-147041/): Malicious code in rate-limiter-jwt-webdriver-mocha-dotenv (npm) (malicious package)
- [MAL-2025-147040](https://insights.sbomify.com/MAL-2025-147040/): Malicious code in rate-limiter-inquirer-helmet-jekyll (npm) (malicious package)
- [MAL-2025-14704](https://insights.sbomify.com/MAL-2025-14704/): Malicious code in apple-oscar-uttn (npm) (malicious package)
- [MAL-2025-147039](https://insights.sbomify.com/MAL-2025-147039/): Malicious code in rate-limiter-hermes-eridanus-transform (npm) (malicious package)
- [MAL-2025-147038](https://insights.sbomify.com/MAL-2025-147038/): Malicious code in rate-limiter-google-halley-changelog (npm) (malicious package)
- [MAL-2025-147037](https://insights.sbomify.com/MAL-2025-147037/): Malicious code in rate-limiter-europa-pino-pretty-google (npm) (malicious package)
- [MAL-2025-147036](https://insights.sbomify.com/MAL-2025-147036/): Malicious code in rate-limiter-draco-hyperion-procyon (npm) (malicious package)
- [MAL-2025-147035](https://insights.sbomify.com/MAL-2025-147035/): Malicious code in rate-limiter-config-galaxy-ophiuchus (npm) (malicious package)
- [MAL-2025-147034](https://insights.sbomify.com/MAL-2025-147034/): Malicious code in rate-limiter-cluster-react-bootstrap-ariel (npm) (malicious package)
- [MAL-2025-147033](https://insights.sbomify.com/MAL-2025-147033/): Malicious code in rate-limiter-carina-despina-uglify-js (npm) (malicious package)
- [MAL-2025-147032](https://insights.sbomify.com/MAL-2025-147032/): Malicious code in rate-limiter-bunyan-centaurus-native (npm) (malicious package)
- [MAL-2025-147031](https://insights.sbomify.com/MAL-2025-147031/): Malicious code in rate-limiter-bulma-enif-leda (npm) (malicious package)
- [MAL-2025-147030](https://insights.sbomify.com/MAL-2025-147030/): Malicious code in rate-limiter-babel-package-ursa (npm) (malicious package)
- [MAL-2025-14703](https://insights.sbomify.com/MAL-2025-14703/): Malicious code in apple-orange-banana-kpynd (npm) (malicious package)
- [MAL-2025-147029](https://insights.sbomify.com/MAL-2025-147029/): Malicious code in rate-limiter-ariel-slides-reveal-md (npm) (malicious package)
- [MAL-2025-147028](https://insights.sbomify.com/MAL-2025-147028/): Malicious code in rate-limiter-acamar-cache-prettier-plugin-markdown (npm) (malicious package)
- [MAL-2025-147027](https://insights.sbomify.com/MAL-2025-147027/): Malicious code in radiant-vuetify-pulsar-xml (npm) (malicious package)
- [MAL-2025-147026](https://insights.sbomify.com/MAL-2025-147026/): Malicious code in radiant-tool-postcss-loader-algol (npm) (malicious package)
- [MAL-2025-147025](https://insights.sbomify.com/MAL-2025-147025/): Malicious code in radiant-superagent-ganymede-link (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1409/