# Vulnerabilities published in 2025 - [MAL-2025-32468](https://insights.sbomify.com/MAL-2025-32468/): Malicious code in rosterweb (npm) (malicious package) - [MAL-2025-32467](https://insights.sbomify.com/MAL-2025-32467/): Malicious code in rospozor (npm) (malicious package) - [MAL-2025-32466](https://insights.sbomify.com/MAL-2025-32466/): Malicious code in roseperks (npm) (malicious package) - [MAL-2025-32465](https://insights.sbomify.com/MAL-2025-32465/): Malicious code in roselle (npm) (malicious package) - [MAL-2025-32464](https://insights.sbomify.com/MAL-2025-32464/): Malicious code in rose_sfrzr_lpd8j_dusk (npm) (malicious package) - [MAL-2025-32463](https://insights.sbomify.com/MAL-2025-32463/): Malicious code in rose_riuft_1wtsy_kale (npm) (malicious package) - [MAL-2025-32462](https://insights.sbomify.com/MAL-2025-32462/): Malicious code in rose_iliqk_mwxdr_kaleidoscope (npm) (malicious package) - [MAL-2025-32461](https://insights.sbomify.com/MAL-2025-32461/): Malicious code in rose_fo5fs_pwkde_tempest (npm) (malicious package) - [MAL-2025-32460](https://insights.sbomify.com/MAL-2025-32460/): Malicious code in rose_d6zyd_r6s3n_yosemite (npm) (malicious package) - [MAL-2025-3246](https://insights.sbomify.com/MAL-2025-3246/): Malicious code in fatfingers-hello (npm) (malicious package) - [MAL-2025-32459](https://insights.sbomify.com/MAL-2025-32459/): Malicious code in rose_ajfri_hehwo_obelisk (npm) (malicious package) - [MAL-2025-32458](https://insights.sbomify.com/MAL-2025-32458/): Malicious code in rose-y3znm-d3hdt-unity-project (npm) (malicious package) - [MAL-2025-32457](https://insights.sbomify.com/MAL-2025-32457/): Malicious code in rose-whirlpool-abs347-project (npm) (malicious package) - [MAL-2025-32456](https://insights.sbomify.com/MAL-2025-32456/): Malicious code in rose-tetg8-xcllx-thunder-project (npm) (malicious package) - [MAL-2025-32455](https://insights.sbomify.com/MAL-2025-32455/): Malicious code in rose-pjwdj-hhisj-quasar-project (npm) (malicious package) - [MAL-2025-32454](https://insights.sbomify.com/MAL-2025-32454/): Malicious code in rose-peacock-pms134-project (npm) (malicious package) - [MAL-2025-32453](https://insights.sbomify.com/MAL-2025-32453/): Malicious code in rose-opal-sya256-project (npm) (malicious package) - [MAL-2025-32452](https://insights.sbomify.com/MAL-2025-32452/): Malicious code in rose-nymph-esr138-project (npm) (malicious package) - [MAL-2025-32451](https://insights.sbomify.com/MAL-2025-32451/): Malicious code in rose-myth-cqc821-project (npm) (malicious package) - [MAL-2025-32450](https://insights.sbomify.com/MAL-2025-32450/): Malicious code in rose-koala-cxl197-project (npm) (malicious package) - [MAL-2025-3245](https://insights.sbomify.com/MAL-2025-3245/): Malicious code in fatfingers-hahayeet3333 (npm) (malicious package) - [MAL-2025-32449](https://insights.sbomify.com/MAL-2025-32449/): Malicious code in rose-kiwi-xed630-project (npm) (malicious package) - [MAL-2025-32448](https://insights.sbomify.com/MAL-2025-32448/): Malicious code in rose-kaleidoscope-fbg917-project (npm) (malicious package) - [MAL-2025-32447](https://insights.sbomify.com/MAL-2025-32447/): Malicious code in rose-elephant-ylu913-project (npm) (malicious package) - [MAL-2025-32446](https://insights.sbomify.com/MAL-2025-32446/): Malicious code in rose-ehpcl-0rkjr-twilight-project (npm) (malicious package) - [MAL-2025-32445](https://insights.sbomify.com/MAL-2025-32445/): Malicious code in rose-dove-yjn704-project (npm) (malicious package) - [MAL-2025-32444](https://insights.sbomify.com/MAL-2025-32444/): Malicious code in rose-crystal-uab187-project (npm) (malicious package) - [MAL-2025-32443](https://insights.sbomify.com/MAL-2025-32443/): Malicious code in rose-cascade-ort672-project (npm) (malicious package) - [MAL-2025-32442](https://insights.sbomify.com/MAL-2025-32442/): Malicious code in rose-bttvf-85j11-frost-project (npm) (malicious package) - [MAL-2025-32441](https://insights.sbomify.com/MAL-2025-32441/): Malicious code in rose-boulder-wrv253-project (npm) (malicious package) - [MAL-2025-32440](https://insights.sbomify.com/MAL-2025-32440/): Malicious code in rose-aroma-jsi289-project (npm) (malicious package) - [MAL-2025-3244](https://insights.sbomify.com/MAL-2025-3244/): Malicious code in fatfingers-hahayeet333 (npm) (malicious package) - [MAL-2025-32439](https://insights.sbomify.com/MAL-2025-32439/): Malicious code in rose-7s48w-kfxh9-blossom-project (npm) (malicious package) - [MAL-2025-32438](https://insights.sbomify.com/MAL-2025-32438/): Malicious code in rorclass (npm) (malicious package) - [MAL-2025-32437](https://insights.sbomify.com/MAL-2025-32437/): Malicious code in root_lib (npm) (malicious package) - [MAL-2025-32436](https://insights.sbomify.com/MAL-2025-32436/): Malicious code in root-app (npm) (malicious package) - [MAL-2025-32435](https://insights.sbomify.com/MAL-2025-32435/): Malicious code in rooshil (npm) (malicious package) - [MAL-2025-32434](https://insights.sbomify.com/MAL-2025-32434/): Malicious code in roommates (npm) (malicious package) - [MAL-2025-32433](https://insights.sbomify.com/MAL-2025-32433/): Malicious code in roomflog (npm) (malicious package) - [MAL-2025-32432](https://insights.sbomify.com/MAL-2025-32432/): Malicious code in roomami (npm) (malicious package) - [MAL-2025-32431](https://insights.sbomify.com/MAL-2025-32431/): Malicious code in roofim (npm) (malicious package) - [MAL-2025-32430](https://insights.sbomify.com/MAL-2025-32430/): Malicious code in rontest (npm) (malicious package) - [MAL-2025-3243](https://insights.sbomify.com/MAL-2025-3243/): Malicious code in fatfingers-hahayeet33 (npm) (malicious package) - [MAL-2025-32429](https://insights.sbomify.com/MAL-2025-32429/): Malicious code in ronjeremy (npm) (malicious package) - [MAL-2025-32428](https://insights.sbomify.com/MAL-2025-32428/): Malicious code in romizhang (npm) (malicious package) - [MAL-2025-32427](https://insights.sbomify.com/MAL-2025-32427/): Malicious code in romeo-zulu-orange-xmbvw (npm) (malicious package) - [MAL-2025-32426](https://insights.sbomify.com/MAL-2025-32426/): Malicious code in romeo-zulu-hdal (npm) (malicious package) - [MAL-2025-32425](https://insights.sbomify.com/MAL-2025-32425/): Malicious code in romeo-zucchini-charlie-qjaux (npm) (malicious package) - [MAL-2025-32424](https://insights.sbomify.com/MAL-2025-32424/): Malicious code in romeo-zfo-project (npm) (malicious package) - [MAL-2025-32423](https://insights.sbomify.com/MAL-2025-32423/): Malicious code in romeo-z09-project (npm) (malicious package) - [MAL-2025-32422](https://insights.sbomify.com/MAL-2025-32422/): Malicious code in romeo-yankee-zulu-dyibr (npm) (malicious package) - [MAL-2025-32421](https://insights.sbomify.com/MAL-2025-32421/): Malicious code in romeo-yankee-watermelon-ndyym (npm) (malicious package) - [MAL-2025-32420](https://insights.sbomify.com/MAL-2025-32420/): Malicious code in romeo-yankee-kiev (npm) (malicious package) - [MAL-2025-3242](https://insights.sbomify.com/MAL-2025-3242/): Malicious code in fatfingers-hahayeet3 (npm) (malicious package) - [MAL-2025-32419](https://insights.sbomify.com/MAL-2025-32419/): Malicious code in romeo-yam-nshb (npm) (malicious package) - [MAL-2025-32418](https://insights.sbomify.com/MAL-2025-32418/): Malicious code in romeo-y65-project (npm) (malicious package) - [MAL-2025-32417](https://insights.sbomify.com/MAL-2025-32417/): Malicious code in romeo-wormhole-j96v (npm) (malicious package) - [MAL-2025-32416](https://insights.sbomify.com/MAL-2025-32416/): Malicious code in romeo-whiskey-wxbw (npm) (malicious package) - [MAL-2025-32415](https://insights.sbomify.com/MAL-2025-32415/): Malicious code in romeo-whiskey-uqns (npm) (malicious package) - [MAL-2025-32414](https://insights.sbomify.com/MAL-2025-32414/): Malicious code in romeo-watermelon-ogok (npm) (malicious package) - [MAL-2025-32413](https://insights.sbomify.com/MAL-2025-32413/): Malicious code in romeo-watermelon-lapk (npm) (malicious package) - [MAL-2025-32412](https://insights.sbomify.com/MAL-2025-32412/): Malicious code in romeo-w8c-project (npm) (malicious package) - [MAL-2025-32411](https://insights.sbomify.com/MAL-2025-32411/): Malicious code in romeo-vanilla-qsaj (npm) (malicious package) - [MAL-2025-32410](https://insights.sbomify.com/MAL-2025-32410/): Malicious code in romeo-uniform-xray-cmqnp (npm) (malicious package) - [MAL-2025-3241](https://insights.sbomify.com/MAL-2025-3241/): Malicious code in fatfingers-hahayeet2 (npm) (malicious package) - [MAL-2025-32409](https://insights.sbomify.com/MAL-2025-32409/): Malicious code in romeo-uniform-honeydew-dpxak (npm) (malicious package) - [MAL-2025-32408](https://insights.sbomify.com/MAL-2025-32408/): Malicious code in romeo-ugli-veqk (npm) (malicious package) - [MAL-2025-32407](https://insights.sbomify.com/MAL-2025-32407/): Malicious code in romeo-ugli-dkxp (npm) (malicious package) - [MAL-2025-32406](https://insights.sbomify.com/MAL-2025-32406/): Malicious code in romeo-uaj-project (npm) (malicious package) - [MAL-2025-32405](https://insights.sbomify.com/MAL-2025-32405/): Malicious code in romeo-tango-vtti (npm) (malicious package) - [MAL-2025-32404](https://insights.sbomify.com/MAL-2025-32404/): Malicious code in romeo-tango-nwuo (npm) (malicious package) - [MAL-2025-32403](https://insights.sbomify.com/MAL-2025-32403/): Malicious code in romeo-t3c-project (npm) (malicious package) - [MAL-2025-32402](https://insights.sbomify.com/MAL-2025-32402/): Malicious code in romeo-sierra-mpzo (npm) (malicious package) - [MAL-2025-32401](https://insights.sbomify.com/MAL-2025-32401/): Malicious code in romeo-sierra-bkxh (npm) (malicious package) - [MAL-2025-32400](https://insights.sbomify.com/MAL-2025-32400/): Malicious code in romeo-rew-project (npm) (malicious package) - [MAL-2025-3240](https://insights.sbomify.com/MAL-2025-3240/): Malicious code in fatfingers-hahayeet (npm) (malicious package) - [MAL-2025-324](https://insights.sbomify.com/MAL-2025-324/): Malicious code in built-with-workers (npm) (malicious package) - [MAL-2025-32399](https://insights.sbomify.com/MAL-2025-32399/): Malicious code in romeo-quebec-xigua-iubzj (npm) (malicious package) - [MAL-2025-32398](https://insights.sbomify.com/MAL-2025-32398/): Malicious code in romeo-qil-project (npm) (malicious package) - [MAL-2025-32397](https://insights.sbomify.com/MAL-2025-32397/): Malicious code in romeo-oscar-qawg (npm) (malicious package) - [MAL-2025-32396](https://insights.sbomify.com/MAL-2025-32396/): Malicious code in romeo-oscar-cvou (npm) (malicious package) - [MAL-2025-32395](https://insights.sbomify.com/MAL-2025-32395/): Malicious code in romeo-ntt-project (npm) (malicious package) - [MAL-2025-32394](https://insights.sbomify.com/MAL-2025-32394/): Malicious code in romeo-november-papaya-xosxq (npm) (malicious package) - [MAL-2025-32393](https://insights.sbomify.com/MAL-2025-32393/): Malicious code in romeo-november-amsi (npm) (malicious package) - [MAL-2025-32392](https://insights.sbomify.com/MAL-2025-32392/): Malicious code in romeo-nectarine-yqhn (npm) (malicious package) - [MAL-2025-32391](https://insights.sbomify.com/MAL-2025-32391/): Malicious code in romeo-maple-cm8h (npm) (malicious package) - [MAL-2025-32390](https://insights.sbomify.com/MAL-2025-32390/): Malicious code in romeo-lima-pxqp (npm) (malicious package) - [MAL-2025-3239](https://insights.sbomify.com/MAL-2025-3239/): Malicious code in ezidox (npm) (malicious package) - [MAL-2025-32389](https://insights.sbomify.com/MAL-2025-32389/): Malicious code in romeo-l0p-project (npm) (malicious package) - [MAL-2025-32388](https://insights.sbomify.com/MAL-2025-32388/): Malicious code in romeo-juliet-golf-qgjvb (npm) (malicious package) - [MAL-2025-32387](https://insights.sbomify.com/MAL-2025-32387/): Malicious code in romeo-inferno-nh22 (npm) (malicious package) - [MAL-2025-32386](https://insights.sbomify.com/MAL-2025-32386/): Malicious code in romeo-india-tangerine-txiot (npm) (malicious package) - [MAL-2025-32385](https://insights.sbomify.com/MAL-2025-32385/): Malicious code in romeo-honeydew-wdki (npm) (malicious package) - [MAL-2025-32384](https://insights.sbomify.com/MAL-2025-32384/): Malicious code in romeo-grape-yaec (npm) (malicious package) - [MAL-2025-32383](https://insights.sbomify.com/MAL-2025-32383/): Malicious code in romeo-golf-vlpc (npm) (malicious package) - [MAL-2025-32382](https://insights.sbomify.com/MAL-2025-32382/): Malicious code in romeo-golf-v7zf (npm) (malicious package) - [MAL-2025-32381](https://insights.sbomify.com/MAL-2025-32381/): Malicious code in romeo-foxtrot-november-gxrka (npm) (malicious package) - [MAL-2025-32380](https://insights.sbomify.com/MAL-2025-32380/): Malicious code in romeo-echo-quince-rpbbl (npm) (malicious package) - [MAL-2025-3238](https://insights.sbomify.com/MAL-2025-3238/): Malicious code in express-exp (npm) (malicious package) - [MAL-2025-32379](https://insights.sbomify.com/MAL-2025-32379/): Malicious code in romeo-e2a-project (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/753/