# Vulnerabilities published in 2025 - [MAL-2025-32378](https://insights.sbomify.com/MAL-2025-32378/): Malicious code in romeo-dkz-project (npm) (malicious package) - [MAL-2025-32377](https://insights.sbomify.com/MAL-2025-32377/): Malicious code in romeo-delta-yankee-zagbj (npm) (malicious package) - [MAL-2025-32376](https://insights.sbomify.com/MAL-2025-32376/): Malicious code in romeo-bravo-eyhb (npm) (malicious package) - [MAL-2025-32375](https://insights.sbomify.com/MAL-2025-32375/): Malicious code in romeo-bravo-bmbo (npm) (malicious package) - [MAL-2025-32374](https://insights.sbomify.com/MAL-2025-32374/): Malicious code in romeo-beg-project (npm) (malicious package) - [MAL-2025-32373](https://insights.sbomify.com/MAL-2025-32373/): Malicious code in romeo-banana-bxex (npm) (malicious package) - [MAL-2025-32372](https://insights.sbomify.com/MAL-2025-32372/): Malicious code in romeo-apple-zeve (npm) (malicious package) - [MAL-2025-32371](https://insights.sbomify.com/MAL-2025-32371/): Malicious code in romeo-apple-yxaz (npm) (malicious package) - [MAL-2025-32370](https://insights.sbomify.com/MAL-2025-32370/): Malicious code in romeo-apple-aczo (npm) (malicious package) - [MAL-2025-3237](https://insights.sbomify.com/MAL-2025-3237/): Malicious code in eigenlayer-middleware (npm) (malicious package) - [MAL-2025-32369](https://insights.sbomify.com/MAL-2025-32369/): Malicious code in romeo-9wy-project (npm) (malicious package) - [MAL-2025-32368](https://insights.sbomify.com/MAL-2025-32368/): Malicious code in romeo-85w-project (npm) (malicious package) - [MAL-2025-32367](https://insights.sbomify.com/MAL-2025-32367/): Malicious code in romeo-7m0-project (npm) (malicious package) - [MAL-2025-32366](https://insights.sbomify.com/MAL-2025-32366/): Malicious code in romeo-0u4-project (npm) (malicious package) - [MAL-2025-32365](https://insights.sbomify.com/MAL-2025-32365/): Malicious code in romeo-0bm-project (npm) (malicious package) - [MAL-2025-32364](https://insights.sbomify.com/MAL-2025-32364/): Malicious code in rollup-vega-passport-quasar (npm) (malicious package) - [MAL-2025-32363](https://insights.sbomify.com/MAL-2025-32363/): Malicious code in rollup-polaris-publish-cosmochemistry (npm) (malicious package) - [MAL-2025-32362](https://insights.sbomify.com/MAL-2025-32362/): Malicious code in rollup-plugin-raptor-compiler (npm) (malicious package) - [MAL-2025-32361](https://insights.sbomify.com/MAL-2025-32361/): Malicious code in rollup-plugin-odin-xenos-ophiuchus (npm) (malicious package) - [MAL-2025-32360](https://insights.sbomify.com/MAL-2025-32360/): Malicious code in rollup-plugin-hermes-coronalmassejection-deneb (npm) (malicious package) - [MAL-2025-3236](https://insights.sbomify.com/MAL-2025-3236/): Malicious code in eco-solver (npm) (malicious package) - [MAL-2025-32359](https://insights.sbomify.com/MAL-2025-32359/): Malicious code in rollup-plugin-graviton-library-sublimation (npm) (malicious package) - [MAL-2025-32358](https://insights.sbomify.com/MAL-2025-32358/): Malicious code in rollup-plugin-fusion-axios-grunt (npm) (malicious package) - [MAL-2025-32357](https://insights.sbomify.com/MAL-2025-32357/): Malicious code in rollup-plugin-archaeoastronomy-mocha-backend (npm) (malicious package) - [MAL-2025-32356](https://insights.sbomify.com/MAL-2025-32356/): Malicious code in rollup-indus-terser-outercore (npm) (malicious package) - [MAL-2025-32355](https://insights.sbomify.com/MAL-2025-32355/): Malicious code in rollup-global-google-ini (npm) (malicious package) - [MAL-2025-32354](https://insights.sbomify.com/MAL-2025-32354/): Malicious code in rollup-development-vega-prettier-plugin-markdown (npm) (malicious package) - [MAL-2025-32353](https://insights.sbomify.com/MAL-2025-32353/): Malicious code in rollup-dagda-less-loader-optimize-css-assets-webpack-plugin (npm) (malicious package) - [MAL-2025-32352](https://insights.sbomify.com/MAL-2025-32352/): Malicious code in rollup-cors-paleoanthropology-radiometric (npm) (malicious package) - [MAL-2025-32351](https://insights.sbomify.com/MAL-2025-32351/): Malicious code in rollout-models (npm) (malicious package) - [MAL-2025-32350](https://insights.sbomify.com/MAL-2025-32350/): Malicious code in rolfsausi (npm) (malicious package) - [MAL-2025-3235](https://insights.sbomify.com/MAL-2025-3235/): Malicious code in dc-genai-dropin (npm) (malicious package) - [MAL-2025-32349](https://insights.sbomify.com/MAL-2025-32349/): Malicious code in roldev (npm) (malicious package) - [MAL-2025-32348](https://insights.sbomify.com/MAL-2025-32348/): Malicious code in rokurterm (npm) (malicious package) - [MAL-2025-32347](https://insights.sbomify.com/MAL-2025-32347/): Malicious code in rodzilla (npm) (malicious package) - [MAL-2025-32346](https://insights.sbomify.com/MAL-2025-32346/): Malicious code in rodsdep (npm) (malicious package) - [MAL-2025-32345](https://insights.sbomify.com/MAL-2025-32345/): Malicious code in rocnroll (npm) (malicious package) - [MAL-2025-32344](https://insights.sbomify.com/MAL-2025-32344/): Malicious code in rocksbot (npm) (malicious package) - [MAL-2025-32343](https://insights.sbomify.com/MAL-2025-32343/): Malicious code in rockgod (npm) (malicious package) - [MAL-2025-32342](https://insights.sbomify.com/MAL-2025-32342/): Malicious code in rocket_cent_api (npm) (malicious package) - [MAL-2025-32341](https://insights.sbomify.com/MAL-2025-32341/): Malicious code in rocket-xanthus-changelog-quark (npm) (malicious package) - [MAL-2025-32340](https://insights.sbomify.com/MAL-2025-32340/): Malicious code in rocket-callback-bellatrix-typeorm (npm) (malicious package) - [MAL-2025-3234](https://insights.sbomify.com/MAL-2025-3234/): Malicious code in dc-comments-beta-dropin (npm) (malicious package) - [MAL-2025-32339](https://insights.sbomify.com/MAL-2025-32339/): Malicious code in rocket-antares-impulse-envconfig (npm) (malicious package) - [MAL-2025-32338](https://insights.sbomify.com/MAL-2025-32338/): Malicious code in rocket-accretion-airbnb-geochronology (npm) (malicious package) - [MAL-2025-32337](https://insights.sbomify.com/MAL-2025-32337/): Malicious code in rockdios (npm) (malicious package) - [MAL-2025-32336](https://insights.sbomify.com/MAL-2025-32336/): Malicious code in rocephin (npm) (malicious package) - [MAL-2025-32335](https://insights.sbomify.com/MAL-2025-32335/): Malicious code in robust-free-bootstrap-admin-template (npm) (malicious package) - [MAL-2025-32334](https://insights.sbomify.com/MAL-2025-32334/): Malicious code in robtium (npm) (malicious package) - [MAL-2025-32333](https://insights.sbomify.com/MAL-2025-32333/): Malicious code in robovm (npm) (malicious package) - [MAL-2025-32332](https://insights.sbomify.com/MAL-2025-32332/): Malicious code in robotvn (npm) (malicious package) - [MAL-2025-32331](https://insights.sbomify.com/MAL-2025-32331/): Malicious code in robotkittens-gsap (npm) (malicious package) - [MAL-2025-32330](https://insights.sbomify.com/MAL-2025-32330/): Malicious code in robotec (npm) (malicious package) - [MAL-2025-3233](https://insights.sbomify.com/MAL-2025-3233/): Malicious code in compat-data (npm) (malicious package) - [MAL-2025-32329](https://insights.sbomify.com/MAL-2025-32329/): Malicious code in robotdb (npm) (malicious package) - [MAL-2025-32328](https://insights.sbomify.com/MAL-2025-32328/): Malicious code in robochan (npm) (malicious package) - [MAL-2025-32327](https://insights.sbomify.com/MAL-2025-32327/): Malicious code in roblab (npm) (malicious package) - [MAL-2025-32326](https://insights.sbomify.com/MAL-2025-32326/): Malicious code in robinet (npm) (malicious package) - [MAL-2025-32325](https://insights.sbomify.com/MAL-2025-32325/): Malicious code in robbie-visio-sdk (npm) (malicious package) - [MAL-2025-32324](https://insights.sbomify.com/MAL-2025-32324/): Malicious code in roardnys (npm) (malicious package) - [MAL-2025-32323](https://insights.sbomify.com/MAL-2025-32323/): Malicious code in roady (npm) (malicious package) - [MAL-2025-32322](https://insights.sbomify.com/MAL-2025-32322/): Malicious code in rns-parser (npm) (malicious package) - [MAL-2025-32321](https://insights.sbomify.com/MAL-2025-32321/): Malicious code in rnnoise-wasm (npm) (malicious package) - [MAL-2025-32320](https://insights.sbomify.com/MAL-2025-32320/): Malicious code in rngblpszdjxuiwoe (npm) (malicious package) - [MAL-2025-3232](https://insights.sbomify.com/MAL-2025-3232/): Malicious code in bespoke-it (npm) (malicious package) - [MAL-2025-32319](https://insights.sbomify.com/MAL-2025-32319/): Malicious code in rndtable (npm) (malicious package) - [MAL-2025-32318](https://insights.sbomify.com/MAL-2025-32318/): Malicious code in rname (npm) (malicious package) - [MAL-2025-32317](https://insights.sbomify.com/MAL-2025-32317/): Malicious code in rn-unacademy-player (npm) (malicious package) - [MAL-2025-32316](https://insights.sbomify.com/MAL-2025-32316/): Malicious code in rn-native-toast (npm) (malicious package) - [MAL-2025-32315](https://insights.sbomify.com/MAL-2025-32315/): Malicious code in rmpbeta (npm) (malicious package) - [MAL-2025-32314](https://insights.sbomify.com/MAL-2025-32314/): Malicious code in rmp-api (npm) (malicious package) - [MAL-2025-32313](https://insights.sbomify.com/MAL-2025-32313/): Malicious code in rmftests (npm) (malicious package) - [MAL-2025-32312](https://insights.sbomify.com/MAL-2025-32312/): Malicious code in rmdhqlesycfuanwk (npm) (malicious package) - [MAL-2025-32311](https://insights.sbomify.com/MAL-2025-32311/): Malicious code in rmartinez (npm) (malicious package) - [MAL-2025-32310](https://insights.sbomify.com/MAL-2025-32310/): Malicious code in rlogcat (npm) (malicious package) - [MAL-2025-3231](https://insights.sbomify.com/MAL-2025-3231/): Malicious code in airbnb-header (npm) (malicious package) - [MAL-2025-32309](https://insights.sbomify.com/MAL-2025-32309/): Malicious code in rlictd (npm) (malicious package) - [MAL-2025-32308](https://insights.sbomify.com/MAL-2025-32308/): Malicious code in rlectron (npm) (malicious package) - [MAL-2025-32307](https://insights.sbomify.com/MAL-2025-32307/): Malicious code in rkhbytecigpvfnqm (npm) (malicious package) - [MAL-2025-32306](https://insights.sbomify.com/MAL-2025-32306/): Malicious code in rkakbq (npm) (malicious package) - [MAL-2025-32305](https://insights.sbomify.com/MAL-2025-32305/): Malicious code in riyu-xuexi-jiaming-biaozhu-erlingyiwulingwu-erlingyiliulingsi (npm) (malicious package) - [MAL-2025-32304](https://insights.sbomify.com/MAL-2025-32304/): Malicious code in riyu-xuexi-jiaming-biaozhu-erlingyisiyiling-erlingyiwulingsi (npm) (malicious package) - [MAL-2025-32303](https://insights.sbomify.com/MAL-2025-32303/): Malicious code in riyu-xuexi-jiaming-biaozhu-erlingyiqilingqi-erlingyiqiyier (npm) (malicious package) - [MAL-2025-32302](https://insights.sbomify.com/MAL-2025-32302/): Malicious code in riverpy (npm) (malicious package) - [MAL-2025-32301](https://insights.sbomify.com/MAL-2025-32301/): Malicious code in river-yacht-znh979-project (npm) (malicious package) - [MAL-2025-32300](https://insights.sbomify.com/MAL-2025-32300/): Malicious code in river-xkupf-tp21l-zephyr-project (npm) (malicious package) - [MAL-2025-3230](https://insights.sbomify.com/MAL-2025-3230/): Malicious code in airbnb-embed-frame (npm) (malicious package) - [MAL-2025-323](https://insights.sbomify.com/MAL-2025-323/): Malicious code in mathworks.github.io (npm) (malicious package) - [MAL-2025-32299](https://insights.sbomify.com/MAL-2025-32299/): Malicious code in river-xerox-sjk732-project (npm) (malicious package) - [MAL-2025-32298](https://insights.sbomify.com/MAL-2025-32298/): Malicious code in river-wzhtt-anu41-crescent-project (npm) (malicious package) - [MAL-2025-32297](https://insights.sbomify.com/MAL-2025-32297/): Malicious code in river-volcano-srq745-project (npm) (malicious package) - [MAL-2025-32296](https://insights.sbomify.com/MAL-2025-32296/): Malicious code in river-taxso-b7qew-quartz-project (npm) (malicious package) - [MAL-2025-32295](https://insights.sbomify.com/MAL-2025-32295/): Malicious code in river-rose-krq702-project (npm) (malicious package) - [MAL-2025-32294](https://insights.sbomify.com/MAL-2025-32294/): Malicious code in river-pebble-duy582-project (npm) (malicious package) - [MAL-2025-32293](https://insights.sbomify.com/MAL-2025-32293/): Malicious code in river-myth-zwo360-project (npm) (malicious package) - [MAL-2025-32292](https://insights.sbomify.com/MAL-2025-32292/): Malicious code in river-mock (npm) (malicious package) - [MAL-2025-32291](https://insights.sbomify.com/MAL-2025-32291/): Malicious code in river-koala-srn764-project (npm) (malicious package) - [MAL-2025-32290](https://insights.sbomify.com/MAL-2025-32290/): Malicious code in river-jacket-cho336-project (npm) (malicious package) - [MAL-2025-3229](https://insights.sbomify.com/MAL-2025-3229/): Malicious code in airbnb-datepickeroptions (npm) (malicious package) - [MAL-2025-32289](https://insights.sbomify.com/MAL-2025-32289/): Malicious code in river-ikw7h-wovwe-ice-project (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/754/