# Vulnerabilities published in 2025 - [MAL-2025-45821](https://insights.sbomify.com/MAL-2025-45821/): Malicious code in rest-hugo-dactyl-kastra (npm) (malicious package) - [MAL-2025-45820](https://insights.sbomify.com/MAL-2025-45820/): Malicious code in rest-changelog-mini-css-extract-plugin-eslint-plugin (npm) (malicious package) - [MAL-2025-4582](https://insights.sbomify.com/MAL-2025-4582/): Malicious code in typescript-go (npm) (malicious package) - [MAL-2025-45819](https://insights.sbomify.com/MAL-2025-45819/): Malicious code in resonance-spawn-perturbation-venus (npm) (malicious package) - [MAL-2025-45818](https://insights.sbomify.com/MAL-2025-45818/): Malicious code in resolvers-umbra-chai-uninstall (npm) (malicious package) - [MAL-2025-45817](https://insights.sbomify.com/MAL-2025-45817/): Malicious code in resolvers-geckodriver-radioastronomy-spectron-webdriver (npm) (malicious package) - [MAL-2025-45816](https://insights.sbomify.com/MAL-2025-45816/): Malicious code in research-gently-able (npm) (malicious package) - [MAL-2025-45815](https://insights.sbomify.com/MAL-2025-45815/): Malicious code in request-xo-robotics-umbriel (npm) (malicious package) - [MAL-2025-45814](https://insights.sbomify.com/MAL-2025-45814/): Malicious code in request-xerxes-orbit-jekyll (npm) (malicious package) - [MAL-2025-45813](https://insights.sbomify.com/MAL-2025-45813/): Malicious code in request-fork-markdown-pdf-elektra (npm) (malicious package) - [MAL-2025-45812](https://insights.sbomify.com/MAL-2025-45812/): Malicious code in repository-helios-mini-css-extract-plugin-gemini (npm) (malicious package) - [MAL-2025-45811](https://insights.sbomify.com/MAL-2025-45811/): Malicious code in renzhi-yixue-jiqi-liaoyu-fangfa (npm) (malicious package) - [MAL-2025-45810](https://insights.sbomify.com/MAL-2025-45810/): Malicious code in renzhan-huixuan (npm) (malicious package) - [MAL-2025-4581](https://insights.sbomify.com/MAL-2025-4581/): Malicious code in syf-api (npm) (malicious package) - [MAL-2025-45809](https://insights.sbomify.com/MAL-2025-45809/): Malicious code in renshenshude-liaoyu-qiji (npm) (malicious package) - [MAL-2025-45808](https://insights.sbomify.com/MAL-2025-45808/): Malicious code in renshengde-shierge-mainxiang (npm) (malicious package) - [MAL-2025-45807](https://insights.sbomify.com/MAL-2025-45807/): Malicious code in renshengde-beiju-congdangge-guaihaizi-kaishi (npm) (malicious package) - [MAL-2025-45806](https://insights.sbomify.com/MAL-2025-45806/): Malicious code in rensheng-qijide-zhiyuli (npm) (malicious package) - [MAL-2025-45805](https://insights.sbomify.com/MAL-2025-45805/): Malicious code in renjiushijian (npm) (malicious package) - [MAL-2025-45804](https://insights.sbomify.com/MAL-2025-45804/): Malicious code in renji-zhanxingxue (npm) (malicious package) - [MAL-2025-45803](https://insights.sbomify.com/MAL-2025-45803/): Malicious code in renji-hepan-zhanxing-quanshu (npm) (malicious package) - [MAL-2025-45802](https://insights.sbomify.com/MAL-2025-45802/): Malicious code in remikuni (npm) (malicious package) - [MAL-2025-45801](https://insights.sbomify.com/MAL-2025-45801/): Malicious code in remiko (npm) (malicious package) - [MAL-2025-45800](https://insights.sbomify.com/MAL-2025-45800/): Malicious code in remark-pulsar-vortex-lint-staged (npm) (malicious package) - [MAL-2025-4580](https://insights.sbomify.com/MAL-2025-4580/): Malicious code in style-value-parser (npm) (malicious package) - [MAL-2025-458](https://insights.sbomify.com/MAL-2025-458/): Malicious code in godaddy-api-client (npm) (malicious package) - [MAL-2025-45799](https://insights.sbomify.com/MAL-2025-45799/): Malicious code in remark-exoplanetology-meissa-astro (npm) (malicious package) - [MAL-2025-45798](https://insights.sbomify.com/MAL-2025-45798/): Malicious code in remark-charon-await-kinetic (npm) (malicious package) - [MAL-2025-45797](https://insights.sbomify.com/MAL-2025-45797/): Malicious code in remark-celeste-hydra-cressida (npm) (malicious package) - [MAL-2025-45796](https://insights.sbomify.com/MAL-2025-45796/): Malicious code in remark-callisto-reveal-md-chai (npm) (malicious package) - [MAL-2025-45795](https://insights.sbomify.com/MAL-2025-45795/): Malicious code in release-it-winston-lightyear-magellan (npm) (malicious package) - [MAL-2025-45794](https://insights.sbomify.com/MAL-2025-45794/): Malicious code in release-it-prettier-nodejs-fornax (npm) (malicious package) - [MAL-2025-45793](https://insights.sbomify.com/MAL-2025-45793/): Malicious code in release-it-oscillation-lithosphere-dysonswarm (npm) (malicious package) - [MAL-2025-45792](https://insights.sbomify.com/MAL-2025-45792/): Malicious code in release-it-blazar-warp-avior (npm) (malicious package) - [MAL-2025-45791](https://insights.sbomify.com/MAL-2025-45791/): Malicious code in relay-sedna-build-quantum (npm) (malicious package) - [MAL-2025-45790](https://insights.sbomify.com/MAL-2025-45790/): Malicious code in rehype-phoenix-apollo-ceres (npm) (malicious package) - [MAL-2025-4579](https://insights.sbomify.com/MAL-2025-4579/): Malicious code in skipthedishes_react (npm) (malicious package) - [MAL-2025-45789](https://insights.sbomify.com/MAL-2025-45789/): Malicious code in rehype-castor-scripts-spectron-webdriver (npm) (malicious package) - [MAL-2025-45788](https://insights.sbomify.com/MAL-2025-45788/): Malicious code in regulus-pegasus-lacerta-node-config (npm) (malicious package) - [MAL-2025-45787](https://insights.sbomify.com/MAL-2025-45787/): Malicious code in regulus-elara-rest-triton (npm) (malicious package) - [MAL-2025-45786](https://insights.sbomify.com/MAL-2025-45786/): Malicious code in regulus-eigenstate-multiverse-quantum-computing (npm) (malicious package) - [MAL-2025-45785](https://insights.sbomify.com/MAL-2025-45785/): Malicious code in regulus-cygnus-geochronology-cryonics (npm) (malicious package) - [MAL-2025-45784](https://insights.sbomify.com/MAL-2025-45784/): Malicious code in registry-library-registry-graphql (npm) (malicious package) - [MAL-2025-45783](https://insights.sbomify.com/MAL-2025-45783/): Malicious code in refer-would-announced (npm) (malicious package) - [MAL-2025-45782](https://insights.sbomify.com/MAL-2025-45782/): Malicious code in reef-xylophone-ith481-project (npm) (malicious package) - [MAL-2025-45781](https://insights.sbomify.com/MAL-2025-45781/): Malicious code in redshift-nuxtjs-antares-sedna (npm) (malicious package) - [MAL-2025-45780](https://insights.sbomify.com/MAL-2025-45780/): Malicious code in redshift-halley-hadron-rollup-plugin (npm) (malicious package) - [MAL-2025-4578](https://insights.sbomify.com/MAL-2025-4578/): Malicious code in shaktihacker (npm) (malicious package) - [MAL-2025-45779](https://insights.sbomify.com/MAL-2025-45779/): Malicious code in redshift-darkenergy-mongodb-node-sass (npm) (malicious package) - [MAL-2025-45778](https://insights.sbomify.com/MAL-2025-45778/): Malicious code in redgiant-chariklo-cors-hermes (npm) (malicious package) - [MAL-2025-45777](https://insights.sbomify.com/MAL-2025-45777/): Malicious code in recent-coach-suddenly (npm) (malicious package) - [MAL-2025-45776](https://insights.sbomify.com/MAL-2025-45776/): Malicious code in receive-creature-mighty (npm) (malicious package) - [MAL-2025-45775](https://insights.sbomify.com/MAL-2025-45775/): Malicious code in ready-headed-circus (npm) (malicious package) - [MAL-2025-45774](https://insights.sbomify.com/MAL-2025-45774/): Malicious code in readable-augmentedreality-transport-paleoceanography (npm) (malicious package) - [MAL-2025-45773](https://insights.sbomify.com/MAL-2025-45773/): Malicious code in reactvr-rumen-shouce (npm) (malicious package) - [MAL-2025-45772](https://insights.sbomify.com/MAL-2025-45772/): Malicious code in react-xiangmu (npm) (malicious package) - [MAL-2025-45771](https://insights.sbomify.com/MAL-2025-45771/): Malicious code in react-typescript-node-quanzhan-kaifa (npm) (malicious package) - [MAL-2025-45770](https://insights.sbomify.com/MAL-2025-45770/): Malicious code in react-router-dom-stable (npm) (malicious package) - [MAL-2025-4577](https://insights.sbomify.com/MAL-2025-4577/): Malicious code in reacts-gh (npm) (malicious package) - [MAL-2025-45769](https://insights.sbomify.com/MAL-2025-45769/): Malicious code in react-router-dom-beta (npm) (malicious package) - [MAL-2025-45768](https://insights.sbomify.com/MAL-2025-45768/): Malicious code in react-router-beta (npm) (malicious package) - [MAL-2025-45767](https://insights.sbomify.com/MAL-2025-45767/): Malicious code in react-native-wm-weighingscale (npm) (malicious package) - [MAL-2025-45766](https://insights.sbomify.com/MAL-2025-45766/): Malicious code in react-native-wm-utils (npm) (malicious package) - [MAL-2025-45765](https://insights.sbomify.com/MAL-2025-45765/): Malicious code in react-native-wm-barcode (npm) (malicious package) - [MAL-2025-45764](https://insights.sbomify.com/MAL-2025-45764/): Malicious code in react-native-httpapi (npm) (malicious package) - [MAL-2025-45763](https://insights.sbomify.com/MAL-2025-45763/): Malicious code in react-milton (npm) (malicious package) - [MAL-2025-45762](https://insights.sbomify.com/MAL-2025-45762/): Malicious code in react-bootstrap-zooarchaeology-impulse-janus (npm) (malicious package) - [MAL-2025-45761](https://insights.sbomify.com/MAL-2025-45761/): Malicious code in react-bootstrap-telesto-jupiter-transform (npm) (malicious package) - [MAL-2025-45760](https://insights.sbomify.com/MAL-2025-45760/): Malicious code in react-bootstrap-helmet-archaeometry-server (npm) (malicious package) - [MAL-2025-4576](https://insights.sbomify.com/MAL-2025-4576/): Malicious code in react-native-xaml-repo (npm) (malicious package) - [MAL-2025-45759](https://insights.sbomify.com/MAL-2025-45759/): Malicious code in react-bootstrap-fornax-deimos-prettier-plugin-markdown (npm) (malicious package) - [MAL-2025-45758](https://insights.sbomify.com/MAL-2025-45758/): Malicious code in rayuki (npm) (malicious package) - [MAL-2025-45757](https://insights.sbomify.com/MAL-2025-45757/): Malicious code in ratemysupervisor (npm) (malicious package) - [MAL-2025-45756](https://insights.sbomify.com/MAL-2025-45756/): Malicious code in rate-limiter-umbriel-neutronstar-slidev (npm) (malicious package) - [MAL-2025-45755](https://insights.sbomify.com/MAL-2025-45755/): Malicious code in rate-limiter-io-antares-loopback (npm) (malicious package) - [MAL-2025-45754](https://insights.sbomify.com/MAL-2025-45754/): Malicious code in random-job-selector (npm) (malicious package) - [MAL-2025-45753](https://insights.sbomify.com/MAL-2025-45753/): Malicious code in rainbow-grove-mks261-project (npm) (malicious package) - [MAL-2025-45752](https://insights.sbomify.com/MAL-2025-45752/): Malicious code in raid-shadow-legends-promo-codes288 (npm) (malicious package) - [MAL-2025-45751](https://insights.sbomify.com/MAL-2025-45751/): Malicious code in raid-shadow-legends-hack505 (npm) (malicious package) - [MAL-2025-45750](https://insights.sbomify.com/MAL-2025-45750/): Malicious code in raid-shadow-legends-hack335 (npm) (malicious package) - [MAL-2025-4575](https://insights.sbomify.com/MAL-2025-4575/): Malicious code in qsc-workspace (npm) (malicious package) - [MAL-2025-45749](https://insights.sbomify.com/MAL-2025-45749/): Malicious code in raid-shadow-legends-hack118 (npm) (malicious package) - [MAL-2025-45748](https://insights.sbomify.com/MAL-2025-45748/): Malicious code in raid-shadow-legends-hack104 (npm) (malicious package) - [MAL-2025-45747](https://insights.sbomify.com/MAL-2025-45747/): Malicious code in raid-shadow-legends-generator305 (npm) (malicious package) - [MAL-2025-45746](https://insights.sbomify.com/MAL-2025-45746/): Malicious code in raid-shadow-legends-generator028 (npm) (malicious package) - [MAL-2025-45745](https://insights.sbomify.com/MAL-2025-45745/): Malicious code in raid-shadow-legends-codes962 (npm) (malicious package) - [MAL-2025-45744](https://insights.sbomify.com/MAL-2025-45744/): Malicious code in raid-shadow-legends-codes905 (npm) (malicious package) - [MAL-2025-45743](https://insights.sbomify.com/MAL-2025-45743/): Malicious code in raid-shadow-legends-codes499 (npm) (malicious package) - [MAL-2025-45742](https://insights.sbomify.com/MAL-2025-45742/): Malicious code in raid-shadow-legends-codes489 (npm) (malicious package) - [MAL-2025-45741](https://insights.sbomify.com/MAL-2025-45741/): Malicious code in raekwonchroniclesslots (npm) (malicious package) - [MAL-2025-45740](https://insights.sbomify.com/MAL-2025-45740/): Malicious code in raekwonchronicles_2025 (npm) (malicious package) - [MAL-2025-4574](https://insights.sbomify.com/MAL-2025-4574/): Malicious code in primereact-sass-theme (npm) (malicious package) - [MAL-2025-45739](https://insights.sbomify.com/MAL-2025-45739/): Malicious code in radiometric-bulma-mineralogy-titan (npm) (malicious package) - [MAL-2025-45738](https://insights.sbomify.com/MAL-2025-45738/): Malicious code in radioastronomy-stop-framework-coronalmassejection (npm) (malicious package) - [MAL-2025-45737](https://insights.sbomify.com/MAL-2025-45737/): Malicious code in radioastronomy-node-config-antd-selenium (npm) (malicious package) - [MAL-2025-45736](https://insights.sbomify.com/MAL-2025-45736/): Malicious code in radiant-neptune-nova-nova (npm) (malicious package) - [MAL-2025-45735](https://insights.sbomify.com/MAL-2025-45735/): Malicious code in quito-promise-protractor-supercluster (npm) (malicious package) - [MAL-2025-45734](https://insights.sbomify.com/MAL-2025-45734/): Malicious code in quito-magnetar-cladistics-server (npm) (malicious package) - [MAL-2025-45733](https://insights.sbomify.com/MAL-2025-45733/): Malicious code in quilt-thunder-lnx784-project (npm) (malicious package) - [MAL-2025-45732](https://insights.sbomify.com/MAL-2025-45732/): Malicious code in quilt-nugget-ztb445-project (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/605/