# Vulnerabilities published in 2025 - [MAL-2025-48076](https://insights.sbomify.com/MAL-2025-48076/): Malicious code in redirect-v74zee (npm) (malicious package) - [MAL-2025-48075](https://insights.sbomify.com/MAL-2025-48075/): Malicious code in redirect-udmf0u (npm) (malicious package) - [MAL-2025-48074](https://insights.sbomify.com/MAL-2025-48074/): Malicious code in redirect-t65vz6 (npm) (malicious package) - [MAL-2025-48073](https://insights.sbomify.com/MAL-2025-48073/): Malicious code in redirect-rc2ewa (npm) (malicious package) - [MAL-2025-48072](https://insights.sbomify.com/MAL-2025-48072/): Malicious code in redirect-r3s2jv (npm) (malicious package) - [MAL-2025-48071](https://insights.sbomify.com/MAL-2025-48071/): Malicious code in redirect-qrah57 (npm) (malicious package) - [MAL-2025-48070](https://insights.sbomify.com/MAL-2025-48070/): Malicious code in redirect-q4vs8m (npm) (malicious package) - [MAL-2025-4807](https://insights.sbomify.com/MAL-2025-4807/): Malicious code in @loybung/unicode-fonts (npm) (malicious package) - [MAL-2025-48069](https://insights.sbomify.com/MAL-2025-48069/): Malicious code in redirect-prhts6 (npm) (malicious package) - [MAL-2025-48068](https://insights.sbomify.com/MAL-2025-48068/): Malicious code in redirect-p8ris1 (npm) (malicious package) - [MAL-2025-48067](https://insights.sbomify.com/MAL-2025-48067/): Malicious code in redirect-nuyvwk (npm) (malicious package) - [MAL-2025-48066](https://insights.sbomify.com/MAL-2025-48066/): Malicious code in redirect-nqfhsn (npm) (malicious package) - [MAL-2025-48065](https://insights.sbomify.com/MAL-2025-48065/): Malicious code in redirect-lp2xe6 (npm) (malicious package) - [MAL-2025-48064](https://insights.sbomify.com/MAL-2025-48064/): Malicious code in redirect-l6qi9e (npm) (malicious package) - [MAL-2025-48063](https://insights.sbomify.com/MAL-2025-48063/): Malicious code in redirect-l0m7on (npm) (malicious package) - [MAL-2025-48062](https://insights.sbomify.com/MAL-2025-48062/): Malicious code in redirect-k5j1u7 (npm) (malicious package) - [MAL-2025-48061](https://insights.sbomify.com/MAL-2025-48061/): Malicious code in redirect-jr2idt (npm) (malicious package) - [MAL-2025-48060](https://insights.sbomify.com/MAL-2025-48060/): Malicious code in redirect-igk4sd (npm) (malicious package) - [MAL-2025-4806](https://insights.sbomify.com/MAL-2025-4806/): Malicious code in @loybung/textreplace (npm) (malicious package) - [MAL-2025-48059](https://insights.sbomify.com/MAL-2025-48059/): Malicious code in redirect-ht8x82 (npm) (malicious package) - [MAL-2025-48058](https://insights.sbomify.com/MAL-2025-48058/): Malicious code in redirect-h0i672 (npm) (malicious package) - [MAL-2025-48057](https://insights.sbomify.com/MAL-2025-48057/): Malicious code in redirect-gzixvc (npm) (malicious package) - [MAL-2025-48056](https://insights.sbomify.com/MAL-2025-48056/): Malicious code in redirect-g7gn31 (npm) (malicious package) - [MAL-2025-48055](https://insights.sbomify.com/MAL-2025-48055/): Malicious code in redirect-fhelhf (npm) (malicious package) - [MAL-2025-48054](https://insights.sbomify.com/MAL-2025-48054/): Malicious code in redirect-f1wut9 (npm) (malicious package) - [MAL-2025-48053](https://insights.sbomify.com/MAL-2025-48053/): Malicious code in redirect-e761hq (npm) (malicious package) - [MAL-2025-48052](https://insights.sbomify.com/MAL-2025-48052/): Malicious code in redirect-dravb9 (npm) (malicious package) - [MAL-2025-48051](https://insights.sbomify.com/MAL-2025-48051/): Malicious code in redirect-ci4ynt (npm) (malicious package) - [MAL-2025-48050](https://insights.sbomify.com/MAL-2025-48050/): Malicious code in redirect-aw9itj (npm) (malicious package) - [MAL-2025-4805](https://insights.sbomify.com/MAL-2025-4805/): Malicious code in @loybung/textfont (npm) (malicious package) - [MAL-2025-48049](https://insights.sbomify.com/MAL-2025-48049/): Malicious code in redirect-a1gs61 (npm) (malicious package) - [MAL-2025-48048](https://insights.sbomify.com/MAL-2025-48048/): Malicious code in redirect-7vw41m (npm) (malicious package) - [MAL-2025-48047](https://insights.sbomify.com/MAL-2025-48047/): Malicious code in redirect-7bqfg6 (npm) (malicious package) - [MAL-2025-48046](https://insights.sbomify.com/MAL-2025-48046/): Malicious code in redirect-4nwrkg (npm) (malicious package) - [MAL-2025-48045](https://insights.sbomify.com/MAL-2025-48045/): Malicious code in redirect-4iyfat (npm) (malicious package) - [MAL-2025-48044](https://insights.sbomify.com/MAL-2025-48044/): Malicious code in redirect-3viu68 (npm) (malicious package) - [MAL-2025-48043](https://insights.sbomify.com/MAL-2025-48043/): Malicious code in redirect-297vpk (npm) (malicious package) - [MAL-2025-48042](https://insights.sbomify.com/MAL-2025-48042/): Malicious code in redirect-1akzwg (npm) (malicious package) - [MAL-2025-48041](https://insights.sbomify.com/MAL-2025-48041/): Malicious code in redirect-0g91q6 (npm) (malicious package) - [MAL-2025-48040](https://insights.sbomify.com/MAL-2025-48040/): Malicious code in rails-html-sanitizer (npm) (malicious package) - [MAL-2025-4804](https://insights.sbomify.com/MAL-2025-4804/): Malicious code in @loybung/systeminfo (npm) (malicious package) - [MAL-2025-48039](https://insights.sbomify.com/MAL-2025-48039/): Malicious code in rails-dom-testing (npm) (malicious package) - [MAL-2025-48038](https://insights.sbomify.com/MAL-2025-48038/): Malicious code in qr-code-demo (npm) (malicious package) - [MAL-2025-48037](https://insights.sbomify.com/MAL-2025-48037/): Malicious code in python-dotenv (npm) (malicious package) - [MAL-2025-48036](https://insights.sbomify.com/MAL-2025-48036/): Malicious code in pyjwt (npm) (malicious package) - [MAL-2025-48035](https://insights.sbomify.com/MAL-2025-48035/): Malicious code in prettier-utils (npm) (malicious package) - [MAL-2025-48034](https://insights.sbomify.com/MAL-2025-48034/): Malicious code in nokogiri (npm) (malicious package) - [MAL-2025-48033](https://insights.sbomify.com/MAL-2025-48033/): Malicious code in nextjs-edge (npm) (malicious package) - [MAL-2025-48032](https://insights.sbomify.com/MAL-2025-48032/): Malicious code in mkto-flow-lookup (npm) (malicious package) - [MAL-2025-48031](https://insights.sbomify.com/MAL-2025-48031/): Malicious code in migration-docs (npm) (malicious package) - [MAL-2025-48030](https://insights.sbomify.com/MAL-2025-48030/): Malicious code in langflow-api-chat (npm) (malicious package) - [MAL-2025-4803](https://insights.sbomify.com/MAL-2025-4803/): Malicious code in @loybung/rdcw-slipverify (npm) (malicious package) - [MAL-2025-48029](https://insights.sbomify.com/MAL-2025-48029/): Malicious code in hrm-absence-frontend-deps (npm) (malicious package) - [MAL-2025-48028](https://insights.sbomify.com/MAL-2025-48028/): Malicious code in func-analyst (npm) (malicious package) - [MAL-2025-48027](https://insights.sbomify.com/MAL-2025-48027/): Malicious code in erubi (npm) (malicious package) - [MAL-2025-48026](https://insights.sbomify.com/MAL-2025-48026/): Malicious code in concurrent-ruby (npm) (malicious package) - [MAL-2025-48025](https://insights.sbomify.com/MAL-2025-48025/): Malicious code in cf-editor-generate-variation (npm) (malicious package) - [MAL-2025-48024](https://insights.sbomify.com/MAL-2025-48024/): Malicious code in cassandra-driver-examples (npm) (malicious package) - [MAL-2025-48023](https://insights.sbomify.com/MAL-2025-48023/): Malicious code in buildkite-pipelines (npm) (malicious package) - [MAL-2025-48022](https://insights.sbomify.com/MAL-2025-48022/): Malicious code in astra-db-recommendations-starter (npm) (malicious package) - [MAL-2025-48021](https://insights.sbomify.com/MAL-2025-48021/): Malicious code in actionmailbox (npm) (malicious package) - [MAL-2025-48020](https://insights.sbomify.com/MAL-2025-48020/): Malicious code in @erfix/frontend-logger (npm) (malicious package) - [MAL-2025-4802](https://insights.sbomify.com/MAL-2025-4802/): Malicious code in @loybung/provider-loader (npm) (malicious package) - [MAL-2025-48019](https://insights.sbomify.com/MAL-2025-48019/): Malicious code in @erfix/frontend-logge (npm) (malicious package) - [MAL-2025-48018](https://insights.sbomify.com/MAL-2025-48018/): Malicious code in zero-slot-utility (npm) (malicious package) - [MAL-2025-48017](https://insights.sbomify.com/MAL-2025-48017/): Malicious code in vite-plugin-opticompress (npm) (malicious package) - [MAL-2025-48016](https://insights.sbomify.com/MAL-2025-48016/): Malicious code in testcatplzignore2 (npm) (malicious package) - [MAL-2025-48015](https://insights.sbomify.com/MAL-2025-48015/): Malicious code in cross-session (npm) (malicious package) - [MAL-2025-48014](https://insights.sbomify.com/MAL-2025-48014/): Malicious code in async-chai (npm) (malicious package) - [MAL-2025-48013](https://insights.sbomify.com/MAL-2025-48013/): Malicious code in hari-zxcv (npm) (malicious package) - [MAL-2025-48012](https://insights.sbomify.com/MAL-2025-48012/): Malicious code in webpack-dev-serve-middleware (npm) (malicious package) - [MAL-2025-48011](https://insights.sbomify.com/MAL-2025-48011/): Malicious code in vishu_transitive_fn (npm) (malicious package) - [MAL-2025-48010](https://insights.sbomify.com/MAL-2025-48010/): Malicious code in unitest2 (npm) (malicious package) - [MAL-2025-4801](https://insights.sbomify.com/MAL-2025-4801/): Malicious code in @loybung/launcher (npm) (malicious package) - [MAL-2025-48009](https://insights.sbomify.com/MAL-2025-48009/): Malicious code in uniswappools (npm) (malicious package) - [MAL-2025-48008](https://insights.sbomify.com/MAL-2025-48008/): Malicious code in uniswappols (npm) (malicious package) - [MAL-2025-48007](https://insights.sbomify.com/MAL-2025-48007/): Malicious code in uniswaplabss (npm) (malicious package) - [MAL-2025-48006](https://insights.sbomify.com/MAL-2025-48006/): Malicious code in toskasldfjaldf-parser (npm) (malicious package) - [MAL-2025-48005](https://insights.sbomify.com/MAL-2025-48005/): Malicious code in tmp-npmsnha (npm) (malicious package) - [MAL-2025-48004](https://insights.sbomify.com/MAL-2025-48004/): Malicious code in res-notification (npm) (malicious package) - [MAL-2025-48003](https://insights.sbomify.com/MAL-2025-48003/): Malicious code in raydiums1 (npm) (malicious package) - [MAL-2025-48002](https://insights.sbomify.com/MAL-2025-48002/): Malicious code in poolcake (npm) (malicious package) - [MAL-2025-48001](https://insights.sbomify.com/MAL-2025-48001/): Malicious code in pb-digital (npm) (malicious package) - [MAL-2025-48000](https://insights.sbomify.com/MAL-2025-48000/): Malicious code in pancakepool (npm) (malicious package) - [MAL-2025-4800](https://insights.sbomify.com/MAL-2025-4800/): Malicious code in @loybung/inject (npm) (malicious package) - [MAL-2025-480](https://insights.sbomify.com/MAL-2025-480/): Malicious code in google-database (npm) (malicious package) - [MAL-2025-48](https://insights.sbomify.com/MAL-2025-48/): Malicious code in ilovenyxx (PyPI) (malicious package) - [MAL-2025-47999](https://insights.sbomify.com/MAL-2025-47999/): Malicious code in metadata-lib (npm) (malicious package) - [MAL-2025-47998](https://insights.sbomify.com/MAL-2025-47998/): Malicious code in mapbox-gl-ts (npm) (malicious package) - [MAL-2025-47997](https://insights.sbomify.com/MAL-2025-47997/): Malicious code in mad-6.0.0.2.2.8. (npm) (malicious package) - [MAL-2025-47996](https://insights.sbomify.com/MAL-2025-47996/): Malicious code in mad-5.0.1.2.2.8. (npm) (malicious package) - [MAL-2025-47995](https://insights.sbomify.com/MAL-2025-47995/): Malicious code in kios (npm) (malicious package) - [MAL-2025-47994](https://insights.sbomify.com/MAL-2025-47994/): Malicious code in karma-verbose-summary-reporter (npm) (malicious package) - [MAL-2025-47993](https://insights.sbomify.com/MAL-2025-47993/): Malicious code in jupjs1 (npm) (malicious package) - [MAL-2025-47992](https://insights.sbomify.com/MAL-2025-47992/): Malicious code in incommincentives (npm) (malicious package) - [MAL-2025-47991](https://insights.sbomify.com/MAL-2025-47991/): Malicious code in grunt-qunit-tap (npm) (malicious package) - [MAL-2025-47990](https://insights.sbomify.com/MAL-2025-47990/): Malicious code in e2e-test-utils (npm) (malicious package) - [MAL-2025-4799](https://insights.sbomify.com/MAL-2025-4799/): Malicious code in @loybung/hyper-client (npm) (malicious package) - [MAL-2025-47989](https://insights.sbomify.com/MAL-2025-47989/): Malicious code in bildguga (npm) (malicious package) - [MAL-2025-47988](https://insights.sbomify.com/MAL-2025-47988/): Malicious code in bildgoogl (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/580/