# Vulnerabilities published in 2025 - [MAL-2025-32648](https://insights.sbomify.com/MAL-2025-32648/): Malicious code in saltdb (npm) (malicious package) - [MAL-2025-32647](https://insights.sbomify.com/MAL-2025-32647/): Malicious code in salsahpc (npm) (malicious package) - [MAL-2025-32646](https://insights.sbomify.com/MAL-2025-32646/): Malicious code in salryana (npm) (malicious package) - [MAL-2025-32645](https://insights.sbomify.com/MAL-2025-32645/): Malicious code in salesgui (npm) (malicious package) - [MAL-2025-32644](https://insights.sbomify.com/MAL-2025-32644/): Malicious code in salesforce-knowledge (npm) (malicious package) - [MAL-2025-32643](https://insights.sbomify.com/MAL-2025-32643/): Malicious code in salayout (npm) (malicious package) - [MAL-2025-32642](https://insights.sbomify.com/MAL-2025-32642/): Malicious code in salami (npm) (malicious package) - [MAL-2025-32641](https://insights.sbomify.com/MAL-2025-32641/): Malicious code in salahcsc (npm) (malicious package) - [MAL-2025-32640](https://insights.sbomify.com/MAL-2025-32640/): Malicious code in sailwithme-frontend (npm) (malicious package) - [MAL-2025-3264](https://insights.sbomify.com/MAL-2025-3264/): Malicious code in ton-evm-bridge (npm) (malicious package) - [MAL-2025-32639](https://insights.sbomify.com/MAL-2025-32639/): Malicious code in sails-generate-migrate-app (npm) (malicious package) - [MAL-2025-32638](https://insights.sbomify.com/MAL-2025-32638/): Malicious code in sails-event-sirius-jwt (npm) (malicious package) - [MAL-2025-32637](https://insights.sbomify.com/MAL-2025-32637/): Malicious code in sails-colors-dorado-indus (npm) (malicious package) - [MAL-2025-32636](https://insights.sbomify.com/MAL-2025-32636/): Malicious code in sahale (npm) (malicious package) - [MAL-2025-32635](https://insights.sbomify.com/MAL-2025-32635/): Malicious code in sagitta-redis-phoenix-inquirer (npm) (malicious package) - [MAL-2025-32634](https://insights.sbomify.com/MAL-2025-32634/): Malicious code in sagitta-package-subscription-google (npm) (malicious package) - [MAL-2025-32633](https://insights.sbomify.com/MAL-2025-32633/): Malicious code in sagitta-morgan-luna-octans (npm) (malicious package) - [MAL-2025-32632](https://insights.sbomify.com/MAL-2025-32632/): Malicious code in sagitta-mongoose-gravitationalwave-postcss-loader (npm) (malicious package) - [MAL-2025-32631](https://insights.sbomify.com/MAL-2025-32631/): Malicious code in sagitta-jovian-relay-hydra (npm) (malicious package) - [MAL-2025-32630](https://insights.sbomify.com/MAL-2025-32630/): Malicious code in sagitta-halley-async-leda (npm) (malicious package) - [MAL-2025-3263](https://insights.sbomify.com/MAL-2025-3263/): Malicious code in task-bots (npm) (malicious package) - [MAL-2025-32629](https://insights.sbomify.com/MAL-2025-32629/): Malicious code in sagitta-chromedriver-radiometric-extremophile (npm) (malicious package) - [MAL-2025-32628](https://insights.sbomify.com/MAL-2025-32628/): Malicious code in sagitta-cache-flare-paleontology (npm) (malicious package) - [MAL-2025-32627](https://insights.sbomify.com/MAL-2025-32627/): Malicious code in sagitta-antd-castor-oberon (npm) (malicious package) - [MAL-2025-32626](https://insights.sbomify.com/MAL-2025-32626/): Malicious code in sagermaker_notebooks_extension (npm) (malicious package) - [MAL-2025-32625](https://insights.sbomify.com/MAL-2025-32625/): Malicious code in sagemaker_sharing_extension (npm) (malicious package) - [MAL-2025-32624](https://insights.sbomify.com/MAL-2025-32624/): Malicious code in sagemaker_session_manager (npm) (malicious package) - [MAL-2025-32623](https://insights.sbomify.com/MAL-2025-32623/): Malicious code in sagemaker_notebooks_extension (npm) (malicious package) - [MAL-2025-32622](https://insights.sbomify.com/MAL-2025-32622/): Malicious code in sagemaker_examples (npm) (malicious package) - [MAL-2025-32621](https://insights.sbomify.com/MAL-2025-32621/): Malicious code in sagemaker-forked-extensions (npm) (malicious package) - [MAL-2025-32620](https://insights.sbomify.com/MAL-2025-32620/): Malicious code in sagedb (npm) (malicious package) - [MAL-2025-3262](https://insights.sbomify.com/MAL-2025-3262/): Malicious code in talsec-react-native-security-plugin (npm) (malicious package) - [MAL-2025-32619](https://insights.sbomify.com/MAL-2025-32619/): Malicious code in saffron_vlrfe_de9i9_aurora (npm) (malicious package) - [MAL-2025-32618](https://insights.sbomify.com/MAL-2025-32618/): Malicious code in saffron_tiu8b_jue34_molecule (npm) (malicious package) - [MAL-2025-32617](https://insights.sbomify.com/MAL-2025-32617/): Malicious code in saffron_su8p6_01bph_willow (npm) (malicious package) - [MAL-2025-32616](https://insights.sbomify.com/MAL-2025-32616/): Malicious code in saffron_1evz4_ubp97_molecule (npm) (malicious package) - [MAL-2025-32615](https://insights.sbomify.com/MAL-2025-32615/): Malicious code in safe-chain-test (npm) (malicious package) - [MAL-2025-32614](https://insights.sbomify.com/MAL-2025-32614/): Malicious code in sadr-transhumanism-janus-bootstrap (npm) (malicious package) - [MAL-2025-32613](https://insights.sbomify.com/MAL-2025-32613/): Malicious code in sadr-sass-loader-darkmatter-redshift (npm) (malicious package) - [MAL-2025-32612](https://insights.sbomify.com/MAL-2025-32612/): Malicious code in sadr-radioastronomy-speleology-stream (npm) (malicious package) - [MAL-2025-32611](https://insights.sbomify.com/MAL-2025-32611/): Malicious code in sadr-nightwatch-sirius-meissa (npm) (malicious package) - [MAL-2025-32610](https://insights.sbomify.com/MAL-2025-32610/): Malicious code in sadr-cache-update-module (npm) (malicious package) - [MAL-2025-3261](https://insights.sbomify.com/MAL-2025-3261/): Malicious code in responsive-pitch-fx (npm) (malicious package) - [MAL-2025-32609](https://insights.sbomify.com/MAL-2025-32609/): Malicious code in sadr-cache-optimize-css-assets-webpack-plugin-ursa (npm) (malicious package) - [MAL-2025-32608](https://insights.sbomify.com/MAL-2025-32608/): Malicious code in sadr-blitz-capella-grus (npm) (malicious package) - [MAL-2025-32607](https://insights.sbomify.com/MAL-2025-32607/): Malicious code in sadjad (npm) (malicious package) - [MAL-2025-32606](https://insights.sbomify.com/MAL-2025-32606/): Malicious code in sadeweb (npm) (malicious package) - [MAL-2025-32605](https://insights.sbomify.com/MAL-2025-32605/): Malicious code in saccorepo (npm) (malicious package) - [MAL-2025-32604](https://insights.sbomify.com/MAL-2025-32604/): Malicious code in saber-string (npm) (malicious package) - [MAL-2025-32603](https://insights.sbomify.com/MAL-2025-32603/): Malicious code in saber-run (npm) (malicious package) - [MAL-2025-32602](https://insights.sbomify.com/MAL-2025-32602/): Malicious code in sabeerali (npm) (malicious package) - [MAL-2025-32601](https://insights.sbomify.com/MAL-2025-32601/): Malicious code in sabbytest (npm) (malicious package) - [MAL-2025-32600](https://insights.sbomify.com/MAL-2025-32600/): Malicious code in sabalan (npm) (malicious package) - [MAL-2025-3260](https://insights.sbomify.com/MAL-2025-3260/): Malicious code in kernelcon-bad-packagexp (npm) (malicious package) - [MAL-2025-326](https://insights.sbomify.com/MAL-2025-326/): Malicious code in bigcommerce.github.io (npm) (malicious package) - [MAL-2025-32599](https://insights.sbomify.com/MAL-2025-32599/): Malicious code in saas-client-oc-v6 (npm) (malicious package) - [MAL-2025-32598](https://insights.sbomify.com/MAL-2025-32598/): Malicious code in s8d (npm) (malicious package) - [MAL-2025-32597](https://insights.sbomify.com/MAL-2025-32597/): Malicious code in s7dzdggxm9v29ki2s1cykztjzveurn7o (npm) (malicious package) - [MAL-2025-32596](https://insights.sbomify.com/MAL-2025-32596/): Malicious code in s4-node-test-backend (npm) (malicious package) - [MAL-2025-32595](https://insights.sbomify.com/MAL-2025-32595/): Malicious code in s360.auth.pkg (npm) (malicious package) - [MAL-2025-32594](https://insights.sbomify.com/MAL-2025-32594/): Malicious code in s3-lister-js (npm) (malicious package) - [MAL-2025-32593](https://insights.sbomify.com/MAL-2025-32593/): Malicious code in s1e7ok (npm) (malicious package) - [MAL-2025-32592](https://insights.sbomify.com/MAL-2025-32592/): Malicious code in s03kx5 (npm) (malicious package) - [MAL-2025-32591](https://insights.sbomify.com/MAL-2025-32591/): Malicious code in rzstav (npm) (malicious package) - [MAL-2025-32590](https://insights.sbomify.com/MAL-2025-32590/): Malicious code in rzpacker (npm) (malicious package) - [MAL-2025-3259](https://insights.sbomify.com/MAL-2025-3259/): Malicious code in juvare (npm) (malicious package) - [MAL-2025-32589](https://insights.sbomify.com/MAL-2025-32589/): Malicious code in rznyvk (npm) (malicious package) - [MAL-2025-32588](https://insights.sbomify.com/MAL-2025-32588/): Malicious code in ryoucss (npm) (malicious package) - [MAL-2025-32587](https://insights.sbomify.com/MAL-2025-32587/): Malicious code in rxrwimnw (npm) (malicious package) - [MAL-2025-32586](https://insights.sbomify.com/MAL-2025-32586/): Malicious code in rxlocal-pdk (npm) (malicious package) - [MAL-2025-32585](https://insights.sbomify.com/MAL-2025-32585/): Malicious code in rxkfbkhivydeusga (npm) (malicious package) - [MAL-2025-32584](https://insights.sbomify.com/MAL-2025-32584/): Malicious code in rwords (npm) (malicious package) - [MAL-2025-32583](https://insights.sbomify.com/MAL-2025-32583/): Malicious code in rwiimote (npm) (malicious package) - [MAL-2025-32582](https://insights.sbomify.com/MAL-2025-32582/): Malicious code in rwgps-ui (npm) (malicious package) - [MAL-2025-32581](https://insights.sbomify.com/MAL-2025-32581/): Malicious code in rwdisk (npm) (malicious package) - [MAL-2025-32580](https://insights.sbomify.com/MAL-2025-32580/): Malicious code in rw-family-auth (npm) (malicious package) - [MAL-2025-3258](https://insights.sbomify.com/MAL-2025-3258/): Malicious code in ink-web-app (npm) (malicious package) - [MAL-2025-32579](https://insights.sbomify.com/MAL-2025-32579/): Malicious code in rvxknfomuysjzwlc (npm) (malicious package) - [MAL-2025-32578](https://insights.sbomify.com/MAL-2025-32578/): Malicious code in rvuset (npm) (malicious package) - [MAL-2025-32577](https://insights.sbomify.com/MAL-2025-32577/): Malicious code in rvi-http-node-server (npm) (malicious package) - [MAL-2025-32576](https://insights.sbomify.com/MAL-2025-32576/): Malicious code in rvdtest (npm) (malicious package) - [MAL-2025-32575](https://insights.sbomify.com/MAL-2025-32575/): Malicious code in rv99k3 (npm) (malicious package) - [MAL-2025-32574](https://insights.sbomify.com/MAL-2025-32574/): Malicious code in rv-config-helper (npm) (malicious package) - [MAL-2025-32573](https://insights.sbomify.com/MAL-2025-32573/): Malicious code in rusnames (npm) (malicious package) - [MAL-2025-32572](https://insights.sbomify.com/MAL-2025-32572/): Malicious code in ruserba (npm) (malicious package) - [MAL-2025-32571](https://insights.sbomify.com/MAL-2025-32571/): Malicious code in RunwayLogger (npm) (malicious package) - [MAL-2025-32570](https://insights.sbomify.com/MAL-2025-32570/): Malicious code in runtime_client (npm) (malicious package) - [MAL-2025-3257](https://insights.sbomify.com/MAL-2025-3257/): Malicious code in helper-split-export-declaration (npm) (malicious package) - [MAL-2025-32569](https://insights.sbomify.com/MAL-2025-32569/): Malicious code in runtime-bundle-armi (npm) (malicious package) - [MAL-2025-32568](https://insights.sbomify.com/MAL-2025-32568/): Malicious code in runeworld (npm) (malicious package) - [MAL-2025-32567](https://insights.sbomify.com/MAL-2025-32567/): Malicious code in runescpae (npm) (malicious package) - [MAL-2025-32566](https://insights.sbomify.com/MAL-2025-32566/): Malicious code in runbitman (npm) (malicious package) - [MAL-2025-32565](https://insights.sbomify.com/MAL-2025-32565/): Malicious code in run-serially (npm) (malicious package) - [MAL-2025-32564](https://insights.sbomify.com/MAL-2025-32564/): Malicious code in run-script-testcafe-eslint-config-palynology (npm) (malicious package) - [MAL-2025-32563](https://insights.sbomify.com/MAL-2025-32563/): Malicious code in run-script-meissa-charon-sedna (npm) (malicious package) - [MAL-2025-32562](https://insights.sbomify.com/MAL-2025-32562/): Malicious code in run-script-command-celeste-eris (npm) (malicious package) - [MAL-2025-32561](https://insights.sbomify.com/MAL-2025-32561/): Malicious code in run-script-bootes-lithosphere-electron-builder (npm) (malicious package) - [MAL-2025-32560](https://insights.sbomify.com/MAL-2025-32560/): Malicious code in run-script-astrophysics-tool-cosmochemistry (npm) (malicious package) - [MAL-2025-3256](https://insights.sbomify.com/MAL-2025-3256/): Malicious code in helper-plugin-utils (npm) (malicious package) - [MAL-2025-32559](https://insights.sbomify.com/MAL-2025-32559/): Malicious code in run-paralelly (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/751/