# Vulnerabilities published in 2025


- [MAL-2025-32288](https://insights.sbomify.com/MAL-2025-32288/): Malicious code in river-h9l0h-8z1pt-amber-project (npm) (malicious package)
- [MAL-2025-32287](https://insights.sbomify.com/MAL-2025-32287/): Malicious code in river-forest-fcs406-project (npm) (malicious package)
- [MAL-2025-32286](https://insights.sbomify.com/MAL-2025-32286/): Malicious code in river-fjord-djc041-project (npm) (malicious package)
- [MAL-2025-32285](https://insights.sbomify.com/MAL-2025-32285/): Malicious code in river-emerald-qlg835-project (npm) (malicious package)
- [MAL-2025-32284](https://insights.sbomify.com/MAL-2025-32284/): Malicious code in river-bqt84-b4bau-echo-project (npm) (malicious package)
- [MAL-2025-32283](https://insights.sbomify.com/MAL-2025-32283/): Malicious code in river-boulder-bhj193-project (npm) (malicious package)
- [MAL-2025-32282](https://insights.sbomify.com/MAL-2025-32282/): Malicious code in river-blossom-ece291-project (npm) (malicious package)
- [MAL-2025-32281](https://insights.sbomify.com/MAL-2025-32281/): Malicious code in river-acorn-pvm996-project (npm) (malicious package)
- [MAL-2025-32280](https://insights.sbomify.com/MAL-2025-32280/): Malicious code in river-a80qk-j2wms-celestial-project (npm) (malicious package)
- [MAL-2025-3228](https://insights.sbomify.com/MAL-2025-3228/): Malicious code in @zkasm/zkevm-rom (npm) (malicious package)
- [MAL-2025-32279](https://insights.sbomify.com/MAL-2025-32279/): Malicious code in ritz (npm) (malicious package)
- [MAL-2025-32278](https://insights.sbomify.com/MAL-2025-32278/): Malicious code in ritadagaz (npm) (malicious package)
- [MAL-2025-32277](https://insights.sbomify.com/MAL-2025-32277/): Malicious code in riskudalserv (npm) (malicious package)
- [MAL-2025-32276](https://insights.sbomify.com/MAL-2025-32276/): Malicious code in Risks-Tables (npm) (malicious package)
- [MAL-2025-32275](https://insights.sbomify.com/MAL-2025-32275/): Malicious code in risklmtnlifecycleserv (npm) (malicious package)
- [MAL-2025-32274](https://insights.sbomify.com/MAL-2025-32274/): Malicious code in riskfalifecycleserv (npm) (malicious package)
- [MAL-2025-32273](https://insights.sbomify.com/MAL-2025-32273/): Malicious code in riskdash (npm) (malicious package)
- [MAL-2025-32272](https://insights.sbomify.com/MAL-2025-32272/): Malicious code in risdjango (npm) (malicious package)
- [MAL-2025-32271](https://insights.sbomify.com/MAL-2025-32271/): Malicious code in risc-zero-developer-website (npm) (malicious package)
- [MAL-2025-32270](https://insights.sbomify.com/MAL-2025-32270/): Malicious code in riqra (npm) (malicious package)
- [MAL-2025-3227](https://insights.sbomify.com/MAL-2025-3227/): Malicious code in @x-mlbtv/client-utils (npm) (malicious package)
- [MAL-2025-32269](https://insights.sbomify.com/MAL-2025-32269/): Malicious code in ripple_ysgjw_yxjcy_unicorn (npm) (malicious package)
- [MAL-2025-32268](https://insights.sbomify.com/MAL-2025-32268/): Malicious code in ripple_ysfme_4zhsn_dusk (npm) (malicious package)
- [MAL-2025-32267](https://insights.sbomify.com/MAL-2025-32267/): Malicious code in ripple_pxq2o_9r9vo_fireworks (npm) (malicious package)
- [MAL-2025-32266](https://insights.sbomify.com/MAL-2025-32266/): Malicious code in ripple_mix89_tksex_tundra (npm) (malicious package)
- [MAL-2025-32265](https://insights.sbomify.com/MAL-2025-32265/): Malicious code in ripple_eivs9_e4ewn_yosemite (npm) (malicious package)
- [MAL-2025-32264](https://insights.sbomify.com/MAL-2025-32264/): Malicious code in ripple_ditsx_n6del_quartz (npm) (malicious package)
- [MAL-2025-32263](https://insights.sbomify.com/MAL-2025-32263/): Malicious code in ripple-zebra-dio025-project (npm) (malicious package)
- [MAL-2025-32262](https://insights.sbomify.com/MAL-2025-32262/): Malicious code in ripple-yacht-ebt803-project (npm) (malicious package)
- [MAL-2025-32261](https://insights.sbomify.com/MAL-2025-32261/): Malicious code in ripple-xylophone-hbq101-project (npm) (malicious package)
- [MAL-2025-32260](https://insights.sbomify.com/MAL-2025-32260/): Malicious code in ripple-xerox-cal129-project (npm) (malicious package)
- [MAL-2025-3226](https://insights.sbomify.com/MAL-2025-3226/): Malicious code in @mlbtv-clients/isu (npm) (malicious package)
- [MAL-2025-32259](https://insights.sbomify.com/MAL-2025-32259/): Malicious code in ripple-xclia-u8axy-spark-project (npm) (malicious package)
- [MAL-2025-32258](https://insights.sbomify.com/MAL-2025-32258/): Malicious code in ripple-whale-roo897-project (npm) (malicious package)
- [MAL-2025-32257](https://insights.sbomify.com/MAL-2025-32257/): Malicious code in ripple-w2laf-r1w2v-jungle-project (npm) (malicious package)
- [MAL-2025-32256](https://insights.sbomify.com/MAL-2025-32256/): Malicious code in ripple-savanna-mdp191-project (npm) (malicious package)
- [MAL-2025-32255](https://insights.sbomify.com/MAL-2025-32255/): Malicious code in ripple-pebble-ecr284-project (npm) (malicious package)
- [MAL-2025-32254](https://insights.sbomify.com/MAL-2025-32254/): Malicious code in ripple-oyt82-myvl8-moonstone-project (npm) (malicious package)
- [MAL-2025-32253](https://insights.sbomify.com/MAL-2025-32253/): Malicious code in ripple-orangutan-eqe533-project (npm) (malicious package)
- [MAL-2025-32252](https://insights.sbomify.com/MAL-2025-32252/): Malicious code in ripple-nebula-lkr586-project (npm) (malicious package)
- [MAL-2025-32251](https://insights.sbomify.com/MAL-2025-32251/): Malicious code in ripple-kite-rnc131-project (npm) (malicious package)
- [MAL-2025-32250](https://insights.sbomify.com/MAL-2025-32250/): Malicious code in ripple-glide-gkc204-project (npm) (malicious package)
- [MAL-2025-3225](https://insights.sbomify.com/MAL-2025-3225/): Malicious code in @harvest-finance/harvest-strategy-arbitrum (npm) (malicious package)
- [MAL-2025-32249](https://insights.sbomify.com/MAL-2025-32249/): Malicious code in ripple-ct2fr-z4jwe-echo-project (npm) (malicious package)
- [MAL-2025-32248](https://insights.sbomify.com/MAL-2025-32248/): Malicious code in ripple-blossom-uxv616-project (npm) (malicious package)
- [MAL-2025-32247](https://insights.sbomify.com/MAL-2025-32247/): Malicious code in ripple-7p2bv-s8wxk-pebble-project (npm) (malicious package)
- [MAL-2025-32246](https://insights.sbomify.com/MAL-2025-32246/): Malicious code in ripple-1dlu7-12q0i-unicorn-project (npm) (malicious package)
- [MAL-2025-32245](https://insights.sbomify.com/MAL-2025-32245/): Malicious code in riotbar-react (npm) (malicious package)
- [MAL-2025-32244](https://insights.sbomify.com/MAL-2025-32244/): Malicious code in rinobot-plugin-interactive-heatmap (npm) (malicious package)
- [MAL-2025-32243](https://insights.sbomify.com/MAL-2025-32243/): Malicious code in rinobot-heatmap (npm) (malicious package)
- [MAL-2025-32242](https://insights.sbomify.com/MAL-2025-32242/): Malicious code in ringfs (npm) (malicious package)
- [MAL-2025-32241](https://insights.sbomify.com/MAL-2025-32241/): Malicious code in ringcentral-web-modules (npm) (malicious package)
- [MAL-2025-32240](https://insights.sbomify.com/MAL-2025-32240/): Malicious code in rinchi (npm) (malicious package)
- [MAL-2025-3224](https://insights.sbomify.com/MAL-2025-3224/): Malicious code in @bane-mlb/less-styles (npm) (malicious package)
- [MAL-2025-32239](https://insights.sbomify.com/MAL-2025-32239/): Malicious code in rina-tempe81-breki (npm) (malicious package)
- [MAL-2025-32238](https://insights.sbomify.com/MAL-2025-32238/): Malicious code in rina-tahu10-breki (npm) (malicious package)
- [MAL-2025-32237](https://insights.sbomify.com/MAL-2025-32237/): Malicious code in rina-rujak9-breki (npm) (malicious package)
- [MAL-2025-32236](https://insights.sbomify.com/MAL-2025-32236/): Malicious code in rina-miebogor94-sukiwir (npm) (malicious package)
- [MAL-2025-32235](https://insights.sbomify.com/MAL-2025-32235/): Malicious code in rimraff (npm) (malicious package)
- [MAL-2025-32234](https://insights.sbomify.com/MAL-2025-32234/): Malicious code in rimraf-string-aquarius-query (npm) (malicious package)
- [MAL-2025-32233](https://insights.sbomify.com/MAL-2025-32233/): Malicious code in rimraf-glob (npm) (malicious package)
- [MAL-2025-32232](https://insights.sbomify.com/MAL-2025-32232/): Malicious code in riipen-web (npm) (malicious package)
- [MAL-2025-32231](https://insights.sbomify.com/MAL-2025-32231/): Malicious code in rihcatxnmdzybefk (npm) (malicious package)
- [MAL-2025-32230](https://insights.sbomify.com/MAL-2025-32230/): Malicious code in rigel-subduction-eclipse-nucleosynthesis (npm) (malicious package)
- [MAL-2025-3223](https://insights.sbomify.com/MAL-2025-3223/): Malicious code in @0xzyo/confutionrce (npm) (malicious package)
- [MAL-2025-32229](https://insights.sbomify.com/MAL-2025-32229/): Malicious code in rigel-mocha-element-ui-cassini (npm) (malicious package)
- [MAL-2025-32228](https://insights.sbomify.com/MAL-2025-32228/): Malicious code in rifqi-takokak95-kuki (npm) (malicious package)
- [MAL-2025-32227](https://insights.sbomify.com/MAL-2025-32227/): Malicious code in rifqi-soto36-sukiwir (npm) (malicious package)
- [MAL-2025-32226](https://insights.sbomify.com/MAL-2025-32226/): Malicious code in rifqi-peyek62-sukiwir (npm) (malicious package)
- [MAL-2025-32225](https://insights.sbomify.com/MAL-2025-32225/): Malicious code in rifqi-oblok11-sukiwir (npm) (malicious package)
- [MAL-2025-32224](https://insights.sbomify.com/MAL-2025-32224/): Malicious code in rifqi-kue80-sukiwir (npm) (malicious package)
- [MAL-2025-32223](https://insights.sbomify.com/MAL-2025-32223/): Malicious code in rifqi-kemplang52-breki (npm) (malicious package)
- [MAL-2025-32222](https://insights.sbomify.com/MAL-2025-32222/): Malicious code in rifqi-jengkol1-kuki (npm) (malicious package)
- [MAL-2025-32221](https://insights.sbomify.com/MAL-2025-32221/): Malicious code in rifler-lego-i18n-tools (npm) (malicious package)
- [MAL-2025-32220](https://insights.sbomify.com/MAL-2025-32220/): Malicious code in rifleman (npm) (malicious package)
- [MAL-2025-3222](https://insights.sbomify.com/MAL-2025-3222/): Malicious code in web-sim-control (npm) (malicious package)
- [MAL-2025-32219](https://insights.sbomify.com/MAL-2025-32219/): Malicious code in ridge-trail-dni560-project (npm) (malicious package)
- [MAL-2025-32218](https://insights.sbomify.com/MAL-2025-32218/): Malicious code in ridesapp (npm) (malicious package)
- [MAL-2025-32217](https://insights.sbomify.com/MAL-2025-32217/): Malicious code in rideapp (npm) (malicious package)
- [MAL-2025-32216](https://insights.sbomify.com/MAL-2025-32216/): Malicious code in richg_module (npm) (malicious package)
- [MAL-2025-32215](https://insights.sbomify.com/MAL-2025-32215/): Malicious code in ricfile (npm) (malicious package)
- [MAL-2025-32214](https://insights.sbomify.com/MAL-2025-32214/): Malicious code in ricecake (npm) (malicious package)
- [MAL-2025-32213](https://insights.sbomify.com/MAL-2025-32213/): Malicious code in ricebox (npm) (malicious package)
- [MAL-2025-32212](https://insights.sbomify.com/MAL-2025-32212/): Malicious code in riana-tomat27-sukiwir (npm) (malicious package)
- [MAL-2025-32211](https://insights.sbomify.com/MAL-2025-32211/): Malicious code in riana-telur52-sukiwir (npm) (malicious package)
- [MAL-2025-32210](https://insights.sbomify.com/MAL-2025-32210/): Malicious code in riana-sate73-sukiwir (npm) (malicious package)
- [MAL-2025-3221](https://insights.sbomify.com/MAL-2025-3221/): Malicious code in r5-wallet (npm) (malicious package)
- [MAL-2025-32209](https://insights.sbomify.com/MAL-2025-32209/): Malicious code in riana-lumpur95-breki (npm) (malicious package)
- [MAL-2025-32208](https://insights.sbomify.com/MAL-2025-32208/): Malicious code in riana-gandul31-kuki (npm) (malicious package)
- [MAL-2025-32207](https://insights.sbomify.com/MAL-2025-32207/): Malicious code in riadmc (npm) (malicious package)
- [MAL-2025-32206](https://insights.sbomify.com/MAL-2025-32206/): Malicious code in rhynpm (npm) (malicious package)
- [MAL-2025-32205](https://insights.sbomify.com/MAL-2025-32205/): Malicious code in rhpdlmkazfjkogxc (npm) (malicious package)
- [MAL-2025-32204](https://insights.sbomify.com/MAL-2025-32204/): Malicious code in rhodemap (npm) (malicious package)
- [MAL-2025-32203](https://insights.sbomify.com/MAL-2025-32203/): Malicious code in rho-warn-rain-transpile-optimize (npm) (malicious package)
- [MAL-2025-32202](https://insights.sbomify.com/MAL-2025-32202/): Malicious code in rho-rho-runtime-small-root (npm) (malicious package)
- [MAL-2025-32201](https://insights.sbomify.com/MAL-2025-32201/): Malicious code in rho-private-string-key-mu (npm) (malicious package)
- [MAL-2025-32200](https://insights.sbomify.com/MAL-2025-32200/): Malicious code in rhinode (npm) (malicious package)
- [MAL-2025-3220](https://insights.sbomify.com/MAL-2025-3220/): Malicious code in verif8 (npm) (malicious package)
- [MAL-2025-322](https://insights.sbomify.com/MAL-2025-322/): Malicious code in canva-connect-api-starter-kit (npm) (malicious package)
- [MAL-2025-32199](https://insights.sbomify.com/MAL-2025-32199/): Malicious code in rhinobot (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/755/