# Vulnerabilities published in 2025 - [MAL-2025-32558](https://insights.sbomify.com/MAL-2025-32558/): Malicious code in run-dev (npm) (malicious package) - [MAL-2025-32557](https://insights.sbomify.com/MAL-2025-32557/): Malicious code in run-after (npm) (malicious package) - [MAL-2025-32556](https://insights.sbomify.com/MAL-2025-32556/): Malicious code in rule34news (npm) (malicious package) - [MAL-2025-32555](https://insights.sbomify.com/MAL-2025-32555/): Malicious code in rule-editor (npm) (malicious package) - [MAL-2025-32554](https://insights.sbomify.com/MAL-2025-32554/): Malicious code in rukovsky (npm) (malicious package) - [MAL-2025-32553](https://insights.sbomify.com/MAL-2025-32553/): Malicious code in ruiaylin (npm) (malicious package) - [MAL-2025-32552](https://insights.sbomify.com/MAL-2025-32552/): Malicious code in rui-types (npm) (malicious package) - [MAL-2025-32551](https://insights.sbomify.com/MAL-2025-32551/): Malicious code in ruglan (npm) (malicious package) - [MAL-2025-32550](https://insights.sbomify.com/MAL-2025-32550/): Malicious code in ruffer-xor (npm) (malicious package) - [MAL-2025-3255](https://insights.sbomify.com/MAL-2025-3255/): Malicious code in helper-member-expression-to-functions (npm) (malicious package) - [MAL-2025-32549](https://insights.sbomify.com/MAL-2025-32549/): Malicious code in ruevents (npm) (malicious package) - [MAL-2025-32548](https://insights.sbomify.com/MAL-2025-32548/): Malicious code in rudi-ubi2-breki (npm) (malicious package) - [MAL-2025-32547](https://insights.sbomify.com/MAL-2025-32547/): Malicious code in rudi-saguer59-sukiwir (npm) (malicious package) - [MAL-2025-32546](https://insights.sbomify.com/MAL-2025-32546/): Malicious code in rudi-papeda60-breki (npm) (malicious package) - [MAL-2025-32545](https://insights.sbomify.com/MAL-2025-32545/): Malicious code in rudi-lumpur28-sukiwir (npm) (malicious package) - [MAL-2025-32544](https://insights.sbomify.com/MAL-2025-32544/): Malicious code in rudi-kembang47-breki (npm) (malicious package) - [MAL-2025-32543](https://insights.sbomify.com/MAL-2025-32543/): Malicious code in rudi-dradag69-sukiwir (npm) (malicious package) - [MAL-2025-32542](https://insights.sbomify.com/MAL-2025-32542/): Malicious code in rubytest (npm) (malicious package) - [MAL-2025-32541](https://insights.sbomify.com/MAL-2025-32541/): Malicious code in rubytask (npm) (malicious package) - [MAL-2025-32540](https://insights.sbomify.com/MAL-2025-32540/): Malicious code in rubyore (npm) (malicious package) - [MAL-2025-3254](https://insights.sbomify.com/MAL-2025-3254/): Malicious code in helper-hoist-variables (npm) (malicious package) - [MAL-2025-32539](https://insights.sbomify.com/MAL-2025-32539/): Malicious code in rubymdp (npm) (malicious package) - [MAL-2025-32538](https://insights.sbomify.com/MAL-2025-32538/): Malicious code in rubyheap (npm) (malicious package) - [MAL-2025-32537](https://insights.sbomify.com/MAL-2025-32537/): Malicious code in rubyhead (npm) (malicious package) - [MAL-2025-32536](https://insights.sbomify.com/MAL-2025-32536/): Malicious code in rubygrep (npm) (malicious package) - [MAL-2025-32535](https://insights.sbomify.com/MAL-2025-32535/): Malicious code in rubyfile (npm) (malicious package) - [MAL-2025-32534](https://insights.sbomify.com/MAL-2025-32534/): Malicious code in rubyduino (npm) (malicious package) - [MAL-2025-32533](https://insights.sbomify.com/MAL-2025-32533/): Malicious code in rubycoin (npm) (malicious package) - [MAL-2025-32532](https://insights.sbomify.com/MAL-2025-32532/): Malicious code in ruby-limiter (npm) (malicious package) - [MAL-2025-32531](https://insights.sbomify.com/MAL-2025-32531/): Malicious code in ruby-kafka-oauth-client (npm) (malicious package) - [MAL-2025-32530](https://insights.sbomify.com/MAL-2025-32530/): Malicious code in rubocop-sorbet (npm) (malicious package) - [MAL-2025-3253](https://insights.sbomify.com/MAL-2025-3253/): Malicious code in helper-get-function-arity (npm) (malicious package) - [MAL-2025-32529](https://insights.sbomify.com/MAL-2025-32529/): Malicious code in rubocop-shopify (npm) (malicious package) - [MAL-2025-32528](https://insights.sbomify.com/MAL-2025-32528/): Malicious code in rubix-ng2 (npm) (malicious package) - [MAL-2025-32527](https://insights.sbomify.com/MAL-2025-32527/): Malicious code in rubequ (npm) (malicious package) - [MAL-2025-32526](https://insights.sbomify.com/MAL-2025-32526/): Malicious code in rubalto (npm) (malicious package) - [MAL-2025-32525](https://insights.sbomify.com/MAL-2025-32525/): Malicious code in ru.rostel (npm) (malicious package) - [MAL-2025-32524](https://insights.sbomify.com/MAL-2025-32524/): Malicious code in rtyrtrtw1 (npm) (malicious package) - [MAL-2025-32523](https://insights.sbomify.com/MAL-2025-32523/): Malicious code in rtwqwubna1 (npm) (malicious package) - [MAL-2025-32522](https://insights.sbomify.com/MAL-2025-32522/): Malicious code in rtsoccer (npm) (malicious package) - [MAL-2025-32521](https://insights.sbomify.com/MAL-2025-32521/): Malicious code in rts-sdk-api-nodejs (npm) (malicious package) - [MAL-2025-32520](https://insights.sbomify.com/MAL-2025-32520/): Malicious code in rtpve (npm) (malicious package) - [MAL-2025-3252](https://insights.sbomify.com/MAL-2025-3252/): Malicious code in helper-function-name (npm) (malicious package) - [MAL-2025-32519](https://insights.sbomify.com/MAL-2025-32519/): Malicious code in rtotime (npm) (malicious package) - [MAL-2025-32518](https://insights.sbomify.com/MAL-2025-32518/): Malicious code in rtlvod (npm) (malicious package) - [MAL-2025-32517](https://insights.sbomify.com/MAL-2025-32517/): Malicious code in rtkthesis (npm) (malicious package) - [MAL-2025-32516](https://insights.sbomify.com/MAL-2025-32516/): Malicious code in rtcsaves (npm) (malicious package) - [MAL-2025-32515](https://insights.sbomify.com/MAL-2025-32515/): Malicious code in rtchose (npm) (malicious package) - [MAL-2025-32514](https://insights.sbomify.com/MAL-2025-32514/): Malicious code in rtc-js-sdk (npm) (malicious package) - [MAL-2025-32513](https://insights.sbomify.com/MAL-2025-32513/): Malicious code in rtc-js-demo (npm) (malicious package) - [MAL-2025-32512](https://insights.sbomify.com/MAL-2025-32512/): Malicious code in rt2s (npm) (malicious package) - [MAL-2025-32511](https://insights.sbomify.com/MAL-2025-32511/): Malicious code in rsulley (npm) (malicious package) - [MAL-2025-32510](https://insights.sbomify.com/MAL-2025-32510/): Malicious code in rstm (npm) (malicious package) - [MAL-2025-3251](https://insights.sbomify.com/MAL-2025-3251/): Malicious code in helper-compilation-targets (npm) (malicious package) - [MAL-2025-32509](https://insights.sbomify.com/MAL-2025-32509/): Malicious code in rssruby (npm) (malicious package) - [MAL-2025-32508](https://insights.sbomify.com/MAL-2025-32508/): Malicious code in rssnews (npm) (malicious package) - [MAL-2025-32507](https://insights.sbomify.com/MAL-2025-32507/): Malicious code in rssmusic (npm) (malicious package) - [MAL-2025-32506](https://insights.sbomify.com/MAL-2025-32506/): Malicious code in rssmind (npm) (malicious package) - [MAL-2025-32505](https://insights.sbomify.com/MAL-2025-32505/): Malicious code in rssfeeder (npm) (malicious package) - [MAL-2025-32504](https://insights.sbomify.com/MAL-2025-32504/): Malicious code in rssboard (npm) (malicious package) - [MAL-2025-32503](https://insights.sbomify.com/MAL-2025-32503/): Malicious code in rssauth (npm) (malicious package) - [MAL-2025-32502](https://insights.sbomify.com/MAL-2025-32502/): Malicious code in rso-example-app (npm) (malicious package) - [MAL-2025-32501](https://insights.sbomify.com/MAL-2025-32501/): Malicious code in rsiconfig (npm) (malicious package) - [MAL-2025-32500](https://insights.sbomify.com/MAL-2025-32500/): Malicious code in rs-thrift2ts-win32-x64-msvc (npm) (malicious package) - [MAL-2025-3250](https://insights.sbomify.com/MAL-2025-3250/): Malicious code in helper-annotate-as-pure (npm) (malicious package) - [MAL-2025-325](https://insights.sbomify.com/MAL-2025-325/): Malicious code in wallet-history-demo-backend (npm) (malicious package) - [MAL-2025-32499](https://insights.sbomify.com/MAL-2025-32499/): Malicious code in rrjcui-weapp (npm) (malicious package) - [MAL-2025-32498](https://insights.sbomify.com/MAL-2025-32498/): Malicious code in rrissues (npm) (malicious package) - [MAL-2025-32497](https://insights.sbomify.com/MAL-2025-32497/): Malicious code in rrgod (npm) (malicious package) - [MAL-2025-32496](https://insights.sbomify.com/MAL-2025-32496/): Malicious code in rrequest (npm) (malicious package) - [MAL-2025-32495](https://insights.sbomify.com/MAL-2025-32495/): Malicious code in rrenderer (npm) (malicious package) - [MAL-2025-32494](https://insights.sbomify.com/MAL-2025-32494/): Malicious code in rredis (npm) (malicious package) - [MAL-2025-32493](https://insights.sbomify.com/MAL-2025-32493/): Malicious code in rreact (npm) (malicious package) - [MAL-2025-32492](https://insights.sbomify.com/MAL-2025-32492/): Malicious code in rqzixwhtgnkfcpoa (npm) (malicious package) - [MAL-2025-32491](https://insights.sbomify.com/MAL-2025-32491/): Malicious code in rqrauhvmra__tobi (npm) (malicious package) - [MAL-2025-32490](https://insights.sbomify.com/MAL-2025-32490/): Malicious code in rqeuest (npm) (malicious package) - [MAL-2025-3249](https://insights.sbomify.com/MAL-2025-3249/): Malicious code in featureapp-service (npm) (malicious package) - [MAL-2025-32489](https://insights.sbomify.com/MAL-2025-32489/): Malicious code in rpotato (npm) (malicious package) - [MAL-2025-32488](https://insights.sbomify.com/MAL-2025-32488/): Malicious code in rplanit (npm) (malicious package) - [MAL-2025-32487](https://insights.sbomify.com/MAL-2025-32487/): Malicious code in rpimotion (npm) (malicious package) - [MAL-2025-32486](https://insights.sbomify.com/MAL-2025-32486/): Malicious code in rpilib (npm) (malicious package) - [MAL-2025-32485](https://insights.sbomify.com/MAL-2025-32485/): Malicious code in rph-tools (npm) (malicious package) - [MAL-2025-32484](https://insights.sbomify.com/MAL-2025-32484/): Malicious code in rpcombat (npm) (malicious package) - [MAL-2025-32483](https://insights.sbomify.com/MAL-2025-32483/): Malicious code in rpc-mock-server (npm) (malicious package) - [MAL-2025-32482](https://insights.sbomify.com/MAL-2025-32482/): Malicious code in rozily (npm) (malicious package) - [MAL-2025-32481](https://insights.sbomify.com/MAL-2025-32481/): Malicious code in rox-browser-test (npm) (malicious package) - [MAL-2025-32480](https://insights.sbomify.com/MAL-2025-32480/): Malicious code in rowshow (npm) (malicious package) - [MAL-2025-3248](https://insights.sbomify.com/MAL-2025-3248/): Malicious code in fatfingers-hellooo (npm) (malicious package) - [MAL-2025-32479](https://insights.sbomify.com/MAL-2025-32479/): Malicious code in rowling (npm) (malicious package) - [MAL-2025-32478](https://insights.sbomify.com/MAL-2025-32478/): Malicious code in row5it (npm) (malicious package) - [MAL-2025-32477](https://insights.sbomify.com/MAL-2025-32477/): Malicious code in route-theta-sanitize-iota-await (npm) (malicious package) - [MAL-2025-32476](https://insights.sbomify.com/MAL-2025-32476/): Malicious code in route-promise-class-file-encode (npm) (malicious package) - [MAL-2025-32475](https://insights.sbomify.com/MAL-2025-32475/): Malicious code in route-air-private-static-bash (npm) (malicious package) - [MAL-2025-32474](https://insights.sbomify.com/MAL-2025-32474/): Malicious code in rouser (npm) (malicious package) - [MAL-2025-32473](https://insights.sbomify.com/MAL-2025-32473/): Malicious code in rougemagz2025 (npm) (malicious package) - [MAL-2025-32472](https://insights.sbomify.com/MAL-2025-32472/): Malicious code in rouffj (npm) (malicious package) - [MAL-2025-32471](https://insights.sbomify.com/MAL-2025-32471/): Malicious code in rou4ng (npm) (malicious package) - [MAL-2025-32470](https://insights.sbomify.com/MAL-2025-32470/): Malicious code in rotavitheme (npm) (malicious package) - [MAL-2025-3247](https://insights.sbomify.com/MAL-2025-3247/): Malicious code in fatfingers-helloo (npm) (malicious package) - [MAL-2025-32469](https://insights.sbomify.com/MAL-2025-32469/): Malicious code in rotatable_secret (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/752/