# Vulnerabilities published in 2025


- [MAL-2025-32107](https://insights.sbomify.com/MAL-2025-32107/): Malicious code in request-loger (npm) (malicious package)
- [MAL-2025-32106](https://insights.sbomify.com/MAL-2025-32106/): Malicious code in request-figures-winston-biogeochemistry (npm) (malicious package)
- [MAL-2025-32105](https://insights.sbomify.com/MAL-2025-32105/): Malicious code in requesst (npm) (malicious package)
- [MAL-2025-32104](https://insights.sbomify.com/MAL-2025-32104/): Malicious code in reques (npm) (malicious package)
- [MAL-2025-32103](https://insights.sbomify.com/MAL-2025-32103/): Malicious code in requeest (npm) (malicious package)
- [MAL-2025-32102](https://insights.sbomify.com/MAL-2025-32102/): Malicious code in reqquest (npm) (malicious package)
- [MAL-2025-32101](https://insights.sbomify.com/MAL-2025-32101/): Malicious code in reqest (npm) (malicious package)
- [MAL-2025-32100](https://insights.sbomify.com/MAL-2025-32100/): Malicious code in reqct (npm) (malicious package)
- [MAL-2025-3210](https://insights.sbomify.com/MAL-2025-3210/): Malicious code in flex-key (npm) (malicious package)
- [MAL-2025-321](https://insights.sbomify.com/MAL-2025-321/): Malicious code in apple.github.io (npm) (malicious package)
- [MAL-2025-32099](https://insights.sbomify.com/MAL-2025-32099/): Malicious code in repotil (npm) (malicious package)
- [MAL-2025-32098](https://insights.sbomify.com/MAL-2025-32098/): Malicious code in reposte (npm) (malicious package)
- [MAL-2025-32097](https://insights.sbomify.com/MAL-2025-32097/): Malicious code in repository-semantic-ui-spinner-barnard (npm) (malicious package)
- [MAL-2025-32096](https://insights.sbomify.com/MAL-2025-32096/): Malicious code in repository-protractor-eclipse-proxima (npm) (malicious package)
- [MAL-2025-32095](https://insights.sbomify.com/MAL-2025-32095/): Malicious code in repository-protoplanetarydisk-extremophile-luna (npm) (malicious package)
- [MAL-2025-32094](https://insights.sbomify.com/MAL-2025-32094/): Malicious code in repository-holography-slidev-fusion (npm) (malicious package)
- [MAL-2025-32093](https://insights.sbomify.com/MAL-2025-32093/): Malicious code in repository-command-antd-webdriver-mocha (npm) (malicious package)
- [MAL-2025-32092](https://insights.sbomify.com/MAL-2025-32092/): Malicious code in repository-comet-innercore-oscillation (npm) (malicious package)
- [MAL-2025-32091](https://insights.sbomify.com/MAL-2025-32091/): Malicious code in reportwebvitals (npm) (malicious package)
- [MAL-2025-32090](https://insights.sbomify.com/MAL-2025-32090/): Malicious code in reports-ux (npm) (malicious package)
- [MAL-2025-3209](https://insights.sbomify.com/MAL-2025-3209/): Malicious code in @talentai/carbon-addons-talent-ai (npm) (malicious package)
- [MAL-2025-32089](https://insights.sbomify.com/MAL-2025-32089/): Malicious code in reports-angular-api (npm) (malicious package)
- [MAL-2025-32088](https://insights.sbomify.com/MAL-2025-32088/): Malicious code in reportify_api (npm) (malicious package)
- [MAL-2025-32087](https://insights.sbomify.com/MAL-2025-32087/): Malicious code in reportdoc (npm) (malicious package)
- [MAL-2025-32086](https://insights.sbomify.com/MAL-2025-32086/): Malicious code in report-test-private-xml-fast (npm) (malicious package)
- [MAL-2025-32085](https://insights.sbomify.com/MAL-2025-32085/): Malicious code in repong (npm) (malicious package)
- [MAL-2025-32084](https://insights.sbomify.com/MAL-2025-32084/): Malicious code in repoform (npm) (malicious package)
- [MAL-2025-32083](https://insights.sbomify.com/MAL-2025-32083/): Malicious code in repoadm (npm) (malicious package)
- [MAL-2025-32082](https://insights.sbomify.com/MAL-2025-32082/): Malicious code in repo-package-stats (npm) (malicious package)
- [MAL-2025-32081](https://insights.sbomify.com/MAL-2025-32081/): Malicious code in replybox (npm) (malicious package)
- [MAL-2025-32080](https://insights.sbomify.com/MAL-2025-32080/): Malicious code in replitstalk (npm) (malicious package)
- [MAL-2025-32079](https://insights.sbomify.com/MAL-2025-32079/): Malicious code in rephlect (npm) (malicious package)
- [MAL-2025-32078](https://insights.sbomify.com/MAL-2025-32078/): Malicious code in repaso (npm) (malicious package)
- [MAL-2025-32077](https://insights.sbomify.com/MAL-2025-32077/): Malicious code in rentshare (npm) (malicious package)
- [MAL-2025-32076](https://insights.sbomify.com/MAL-2025-32076/): Malicious code in RentalAdvantage (npm) (malicious package)
- [MAL-2025-32075](https://insights.sbomify.com/MAL-2025-32075/): Malicious code in renimages (npm) (malicious package)
- [MAL-2025-32074](https://insights.sbomify.com/MAL-2025-32074/): Malicious code in rendimg (npm) (malicious package)
- [MAL-2025-32073](https://insights.sbomify.com/MAL-2025-32073/): Malicious code in render-loop (npm) (malicious package)
- [MAL-2025-32072](https://insights.sbomify.com/MAL-2025-32072/): Malicious code in renamev (npm) (malicious package)
- [MAL-2025-32071](https://insights.sbomify.com/MAL-2025-32071/): Malicious code in remote-inp (npm) (malicious package)
- [MAL-2025-32070](https://insights.sbomify.com/MAL-2025-32070/): Malicious code in remix-oxygen (npm) (malicious package)
- [MAL-2025-3207](https://insights.sbomify.com/MAL-2025-3207/): Malicious code in empty-validator-plugin (npm) (malicious package)
- [MAL-2025-32069](https://insights.sbomify.com/MAL-2025-32069/): Malicious code in reminise (npm) (malicious package)
- [MAL-2025-32068](https://insights.sbomify.com/MAL-2025-32068/): Malicious code in remigame (npm) (malicious package)
- [MAL-2025-32067](https://insights.sbomify.com/MAL-2025-32067/): Malicious code in remark-spectron-protractor-epigenetics (npm) (malicious package)
- [MAL-2025-32066](https://insights.sbomify.com/MAL-2025-32066/): Malicious code in remark-robotics-nebula-nucleosynthesis (npm) (malicious package)
- [MAL-2025-32065](https://insights.sbomify.com/MAL-2025-32065/): Malicious code in remark-parsec-exoplanet-stop (npm) (malicious package)
- [MAL-2025-32064](https://insights.sbomify.com/MAL-2025-32064/): Malicious code in remark-commitizen-sirius-css-loader (npm) (malicious package)
- [MAL-2025-32063](https://insights.sbomify.com/MAL-2025-32063/): Malicious code in remark-chakra-ui-neptune-parsec (npm) (malicious package)
- [MAL-2025-32062](https://insights.sbomify.com/MAL-2025-32062/): Malicious code in remark-betelgeuse-shelljs-stream (npm) (malicious package)
- [MAL-2025-32061](https://insights.sbomify.com/MAL-2025-32061/): Malicious code in remark-algol-blackhole-filament (npm) (malicious package)
- [MAL-2025-32060](https://insights.sbomify.com/MAL-2025-32060/): Malicious code in reliease-release (npm) (malicious package)
- [MAL-2025-3206](https://insights.sbomify.com/MAL-2025-3206/): Malicious code in zqdl333zqdl222 (npm) (malicious package)
- [MAL-2025-32059](https://insights.sbomify.com/MAL-2025-32059/): Malicious code in relectron (npm) (malicious package)
- [MAL-2025-32058](https://insights.sbomify.com/MAL-2025-32058/): Malicious code in release-to-github (npm) (malicious package)
- [MAL-2025-32057](https://insights.sbomify.com/MAL-2025-32057/): Malicious code in release-it-whitedwarf-taurus-hapi (npm) (malicious package)
- [MAL-2025-32056](https://insights.sbomify.com/MAL-2025-32056/): Malicious code in release-it-ultra-transport-eslint-config (npm) (malicious package)
- [MAL-2025-32055](https://insights.sbomify.com/MAL-2025-32055/): Malicious code in release-it-perseus-prettier-plugin-markdown-leda (npm) (malicious package)
- [MAL-2025-32054](https://insights.sbomify.com/MAL-2025-32054/): Malicious code in release-it-nebula-init-scripts (npm) (malicious package)
- [MAL-2025-32053](https://insights.sbomify.com/MAL-2025-32053/): Malicious code in release-it-exobiology-fork-aether (npm) (malicious package)
- [MAL-2025-32052](https://insights.sbomify.com/MAL-2025-32052/): Malicious code in release-it-aether-equinox-miranda (npm) (malicious package)
- [MAL-2025-32051](https://insights.sbomify.com/MAL-2025-32051/): Malicious code in relay-typeorm-norma-nova (npm) (malicious package)
- [MAL-2025-32050](https://insights.sbomify.com/MAL-2025-32050/): Malicious code in relay-thuban-geckodriver-technosignature (npm) (malicious package)
- [MAL-2025-3205](https://insights.sbomify.com/MAL-2025-3205/): Malicious code in wormhole-messenger-solana (npm) (malicious package)
- [MAL-2025-32049](https://insights.sbomify.com/MAL-2025-32049/): Malicious code in relay-test (npm) (malicious package)
- [MAL-2025-32048](https://insights.sbomify.com/MAL-2025-32048/): Malicious code in relay-buffer-perseus-nanotechnology (npm) (malicious package)
- [MAL-2025-32047](https://insights.sbomify.com/MAL-2025-32047/): Malicious code in relativity-web-utilities (npm) (malicious package)
- [MAL-2025-32046](https://insights.sbomify.com/MAL-2025-32046/): Malicious code in relativity-web-assets (npm) (malicious package)
- [MAL-2025-32045](https://insights.sbomify.com/MAL-2025-32045/): Malicious code in relation-release (npm) (malicious package)
- [MAL-2025-32044](https://insights.sbomify.com/MAL-2025-32044/): Malicious code in rejoice-opaline-dil653-project (npm) (malicious package)
- [MAL-2025-32043](https://insights.sbomify.com/MAL-2025-32043/): Malicious code in reject-uglify-phi-xml-quick (npm) (malicious package)
- [MAL-2025-32042](https://insights.sbomify.com/MAL-2025-32042/): Malicious code in reject-sun-wind-refactor-compress (npm) (malicious package)
- [MAL-2025-32041](https://insights.sbomify.com/MAL-2025-32041/): Malicious code in reject-sun-deserialize-runtime-emulate (npm) (malicious package)
- [MAL-2025-32040](https://insights.sbomify.com/MAL-2025-32040/): Malicious code in reject-stub-nu-long-delta (npm) (malicious package)
- [MAL-2025-3204](https://insights.sbomify.com/MAL-2025-3204/): Malicious code in wormhole-liquidity-layer-sdk (npm) (malicious package)
- [MAL-2025-32039](https://insights.sbomify.com/MAL-2025-32039/): Malicious code in reject-eta-xi-wind-query (npm) (malicious package)
- [MAL-2025-32038](https://insights.sbomify.com/MAL-2025-32038/): Malicious code in reject-book-execute-bash-code (npm) (malicious package)
- [MAL-2025-32037](https://insights.sbomify.com/MAL-2025-32037/): Malicious code in reiebruewe (npm) (malicious package)
- [MAL-2025-32036](https://insights.sbomify.com/MAL-2025-32036/): Malicious code in rehype-remark-neptune-europa (npm) (malicious package)
- [MAL-2025-32035](https://insights.sbomify.com/MAL-2025-32035/): Malicious code in rehype-redshift-aether-csrf (npm) (malicious package)
- [MAL-2025-32034](https://insights.sbomify.com/MAL-2025-32034/): Malicious code in rehype-parallax-superflare-resonance (npm) (malicious package)
- [MAL-2025-32033](https://insights.sbomify.com/MAL-2025-32033/): Malicious code in rehype-ora-norma-cosmos (npm) (malicious package)
- [MAL-2025-32032](https://insights.sbomify.com/MAL-2025-32032/): Malicious code in rehype-nova-higgs-leda (npm) (malicious package)
- [MAL-2025-32031](https://insights.sbomify.com/MAL-2025-32031/): Malicious code in rehype-config-gravitationalwave-cli (npm) (malicious package)
- [MAL-2025-32030](https://insights.sbomify.com/MAL-2025-32030/): Malicious code in rehabili (npm) (malicious package)
- [MAL-2025-3203](https://insights.sbomify.com/MAL-2025-3203/): Malicious code in vite-plugin-monorepo (npm) (malicious package)
- [MAL-2025-32029](https://insights.sbomify.com/MAL-2025-32029/): Malicious code in regulus-petrology-zephyr-astrometry (npm) (malicious package)
- [MAL-2025-32028](https://insights.sbomify.com/MAL-2025-32028/): Malicious code in regulus-gravity-geochronology-superposition (npm) (malicious package)
- [MAL-2025-32027](https://insights.sbomify.com/MAL-2025-32027/): Malicious code in regulamin (npm) (malicious package)
- [MAL-2025-32026](https://insights.sbomify.com/MAL-2025-32026/): Malicious code in regpage (npm) (malicious package)
- [MAL-2025-32025](https://insights.sbomify.com/MAL-2025-32025/): Malicious code in registry-promise-quantumfoam-playwright (npm) (malicious package)
- [MAL-2025-32024](https://insights.sbomify.com/MAL-2025-32024/): Malicious code in registry-pino-solis-vulcan (npm) (malicious package)
- [MAL-2025-32023](https://insights.sbomify.com/MAL-2025-32023/): Malicious code in registry-oauth-vortex-hapi (npm) (malicious package)
- [MAL-2025-32022](https://insights.sbomify.com/MAL-2025-32022/): Malicious code in registry-got-babel-adonis (npm) (malicious package)
- [MAL-2025-32021](https://insights.sbomify.com/MAL-2025-32021/): Malicious code in regenrator (npm) (malicious package)
- [MAL-2025-32020](https://insights.sbomify.com/MAL-2025-32020/): Malicious code in regenraotr (npm) (malicious package)
- [MAL-2025-3202](https://insights.sbomify.com/MAL-2025-3202/): Malicious code in unreal-engine-material-editor (npm) (malicious package)
- [MAL-2025-32019](https://insights.sbomify.com/MAL-2025-32019/): Malicious code in refskin (npm) (malicious package)
- [MAL-2025-32018](https://insights.sbomify.com/MAL-2025-32018/): Malicious code in refpcer (npm) (malicious package)
- [MAL-2025-32017](https://insights.sbomify.com/MAL-2025-32017/): Malicious code in reflogui (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/757/