# Vulnerabilities published in 2025


- [MAL-2025-32016](https://insights.sbomify.com/MAL-2025-32016/): Malicious code in refine-object (npm) (malicious package)
- [MAL-2025-32015](https://insights.sbomify.com/MAL-2025-32015/): Malicious code in refactoring_toolkit (npm) (malicious package)
- [MAL-2025-32014](https://insights.sbomify.com/MAL-2025-32014/): Malicious code in reequest (npm) (malicious package)
- [MAL-2025-32013](https://insights.sbomify.com/MAL-2025-32013/): Malicious code in reelmc (npm) (malicious package)
- [MAL-2025-32012](https://insights.sbomify.com/MAL-2025-32012/): Malicious code in reelcal (npm) (malicious package)
- [MAL-2025-32011](https://insights.sbomify.com/MAL-2025-32011/): Malicious code in reef_wamzb_s5ixg_illusion (npm) (malicious package)
- [MAL-2025-32010](https://insights.sbomify.com/MAL-2025-32010/): Malicious code in reef_5p1oq_sidm8_honey (npm) (malicious package)
- [MAL-2025-3201](https://insights.sbomify.com/MAL-2025-3201/): Malicious code in some-error-logging-package (npm) (malicious package)
- [MAL-2025-32009](https://insights.sbomify.com/MAL-2025-32009/): Malicious code in reef_4aspa_cj5ri_crystal (npm) (malicious package)
- [MAL-2025-32008](https://insights.sbomify.com/MAL-2025-32008/): Malicious code in reef_295jh_lbwwd_trill (npm) (malicious package)
- [MAL-2025-32007](https://insights.sbomify.com/MAL-2025-32007/): Malicious code in reef-zebra-lbj882-project (npm) (malicious package)
- [MAL-2025-32006](https://insights.sbomify.com/MAL-2025-32006/): Malicious code in reef-xerox-ygc139-project (npm) (malicious package)
- [MAL-2025-32005](https://insights.sbomify.com/MAL-2025-32005/): Malicious code in reef-xerophyte-el22 (npm) (malicious package)
- [MAL-2025-32004](https://insights.sbomify.com/MAL-2025-32004/): Malicious code in reef-whale-tbp602-project (npm) (malicious package)
- [MAL-2025-32003](https://insights.sbomify.com/MAL-2025-32003/): Malicious code in reef-whale-kpn090-project (npm) (malicious package)
- [MAL-2025-32002](https://insights.sbomify.com/MAL-2025-32002/): Malicious code in reef-whale-dym553-project (npm) (malicious package)
- [MAL-2025-32001](https://insights.sbomify.com/MAL-2025-32001/): Malicious code in reef-wave-ywq516-project (npm) (malicious package)
- [MAL-2025-32000](https://insights.sbomify.com/MAL-2025-32000/): Malicious code in reef-wave-gil278-project (npm) (malicious package)
- [MAL-2025-3200](https://insights.sbomify.com/MAL-2025-3200/): Malicious code in solana-candles-oracle-example (npm) (malicious package)
- [MAL-2025-320](https://insights.sbomify.com/MAL-2025-320/): Malicious code in wp-babel-makepot (npm) (malicious package)
- [MAL-2025-32](https://insights.sbomify.com/MAL-2025-32/): Malicious code in hts-open-dex-react-ui (npm) (malicious package)
- [MAL-2025-31999](https://insights.sbomify.com/MAL-2025-31999/): Malicious code in reef-vzxen-tnu34-zenith-project (npm) (malicious package)
- [MAL-2025-31998](https://insights.sbomify.com/MAL-2025-31998/): Malicious code in reef-vulture-squ384-project (npm) (malicious package)
- [MAL-2025-31997](https://insights.sbomify.com/MAL-2025-31997/): Malicious code in reef-valley-xht136-project (npm) (malicious package)
- [MAL-2025-31996](https://insights.sbomify.com/MAL-2025-31996/): Malicious code in reef-v0fw7-6emc1-yarn-project (npm) (malicious package)
- [MAL-2025-31995](https://insights.sbomify.com/MAL-2025-31995/): Malicious code in reef-unicorn-taa726-project (npm) (malicious package)
- [MAL-2025-31994](https://insights.sbomify.com/MAL-2025-31994/): Malicious code in reef-tundra-zdp656-project (npm) (malicious package)
- [MAL-2025-31993](https://insights.sbomify.com/MAL-2025-31993/): Malicious code in reef-tide-syc865-project (npm) (malicious package)
- [MAL-2025-31992](https://insights.sbomify.com/MAL-2025-31992/): Malicious code in reef-sunset-ghq980-project (npm) (malicious package)
- [MAL-2025-31991](https://insights.sbomify.com/MAL-2025-31991/): Malicious code in reef-saturn-ftx707-project (npm) (malicious package)
- [MAL-2025-31990](https://insights.sbomify.com/MAL-2025-31990/): Malicious code in reef-rose-wcr652-project (npm) (malicious package)
- [MAL-2025-3199](https://insights.sbomify.com/MAL-2025-3199/): Malicious code in sht-calculator-opener (npm) (malicious package)
- [MAL-2025-31989](https://insights.sbomify.com/MAL-2025-31989/): Malicious code in reef-rose-rfe604-project (npm) (malicious package)
- [MAL-2025-31988](https://insights.sbomify.com/MAL-2025-31988/): Malicious code in reef-quasar-nkp387-project (npm) (malicious package)
- [MAL-2025-31987](https://insights.sbomify.com/MAL-2025-31987/): Malicious code in reef-quail-mbm521-project (npm) (malicious package)
- [MAL-2025-31986](https://insights.sbomify.com/MAL-2025-31986/): Malicious code in reef-orangutan-pde586-project (npm) (malicious package)
- [MAL-2025-31985](https://insights.sbomify.com/MAL-2025-31985/): Malicious code in reef-oak-big190-project (npm) (malicious package)
- [MAL-2025-31984](https://insights.sbomify.com/MAL-2025-31984/): Malicious code in reef-nv9mo-lqai4-ice-project (npm) (malicious package)
- [MAL-2025-31983](https://insights.sbomify.com/MAL-2025-31983/): Malicious code in reef-nugget-dst166-project (npm) (malicious package)
- [MAL-2025-31982](https://insights.sbomify.com/MAL-2025-31982/): Malicious code in reef-nebula-wrqj (npm) (malicious package)
- [MAL-2025-31981](https://insights.sbomify.com/MAL-2025-31981/): Malicious code in reef-lettuce-9us1 (npm) (malicious package)
- [MAL-2025-31980](https://insights.sbomify.com/MAL-2025-31980/): Malicious code in reef-larch-wx34 (npm) (malicious package)
- [MAL-2025-3198](https://insights.sbomify.com/MAL-2025-3198/): Malicious code in sharp-heic (npm) (malicious package)
- [MAL-2025-31979](https://insights.sbomify.com/MAL-2025-31979/): Malicious code in reef-koala-ecz459-project (npm) (malicious package)
- [MAL-2025-31978](https://insights.sbomify.com/MAL-2025-31978/): Malicious code in reef-jade-iea006-project (npm) (malicious package)
- [MAL-2025-31977](https://insights.sbomify.com/MAL-2025-31977/): Malicious code in reef-icicle-kej358-project (npm) (malicious package)
- [MAL-2025-31976](https://insights.sbomify.com/MAL-2025-31976/): Malicious code in reef-iceberg-amv057-project (npm) (malicious package)
- [MAL-2025-31975](https://insights.sbomify.com/MAL-2025-31975/): Malicious code in reef-gorge-mnw474-project (npm) (malicious package)
- [MAL-2025-31974](https://insights.sbomify.com/MAL-2025-31974/): Malicious code in reef-gorge-ifq121-project (npm) (malicious package)
- [MAL-2025-31973](https://insights.sbomify.com/MAL-2025-31973/): Malicious code in reef-galaxy-b6ie (npm) (malicious package)
- [MAL-2025-31972](https://insights.sbomify.com/MAL-2025-31972/): Malicious code in reef-fhuf4-ppvaa-velvet-project (npm) (malicious package)
- [MAL-2025-31971](https://insights.sbomify.com/MAL-2025-31971/): Malicious code in reef-fern-zmx322-project (npm) (malicious package)
- [MAL-2025-31970](https://insights.sbomify.com/MAL-2025-31970/): Malicious code in reef-falcon-jox044-project (npm) (malicious package)
- [MAL-2025-3197](https://insights.sbomify.com/MAL-2025-3197/): Malicious code in scatterpie (npm) (malicious package)
- [MAL-2025-31969](https://insights.sbomify.com/MAL-2025-31969/): Malicious code in reef-elephant-gcs618-project (npm) (malicious package)
- [MAL-2025-31968](https://insights.sbomify.com/MAL-2025-31968/): Malicious code in reef-desert-gvn283-project (npm) (malicious package)
- [MAL-2025-31967](https://insights.sbomify.com/MAL-2025-31967/): Malicious code in reef-bonfire-ats242-project (npm) (malicious package)
- [MAL-2025-31966](https://insights.sbomify.com/MAL-2025-31966/): Malicious code in reef-blossom-xlq631-project (npm) (malicious package)
- [MAL-2025-31965](https://insights.sbomify.com/MAL-2025-31965/): Malicious code in reef-asteroid-o5mz (npm) (malicious package)
- [MAL-2025-31964](https://insights.sbomify.com/MAL-2025-31964/): Malicious code in reef-ant-jnq160-project (npm) (malicious package)
- [MAL-2025-31963](https://insights.sbomify.com/MAL-2025-31963/): Malicious code in reef-8bsw7-htbz7-nymph-project (npm) (malicious package)
- [MAL-2025-31962](https://insights.sbomify.com/MAL-2025-31962/): Malicious code in reedsws (npm) (malicious package)
- [MAL-2025-31961](https://insights.sbomify.com/MAL-2025-31961/): Malicious code in reeact (npm) (malicious package)
- [MAL-2025-31960](https://insights.sbomify.com/MAL-2025-31960/): Malicious code in redwood-yew-d7xz (npm) (malicious package)
- [MAL-2025-3196](https://insights.sbomify.com/MAL-2025-3196/): Malicious code in phpseclib (npm) (malicious package)
- [MAL-2025-31959](https://insights.sbomify.com/MAL-2025-31959/): Malicious code in redwood-yearling-22ia (npm) (malicious package)
- [MAL-2025-31958](https://insights.sbomify.com/MAL-2025-31958/): Malicious code in redwood-wormhole-kqxq (npm) (malicious package)
- [MAL-2025-31957](https://insights.sbomify.com/MAL-2025-31957/): Malicious code in redwood-umbrella-d7j8 (npm) (malicious package)
- [MAL-2025-31956](https://insights.sbomify.com/MAL-2025-31956/): Malicious code in redwood-lima-5cvm (npm) (malicious package)
- [MAL-2025-31955](https://insights.sbomify.com/MAL-2025-31955/): Malicious code in redux-ui-panels (npm) (malicious package)
- [MAL-2025-31954](https://insights.sbomify.com/MAL-2025-31954/): Malicious code in redux-swarm (npm) (malicious package)
- [MAL-2025-31953](https://insights.sbomify.com/MAL-2025-31953/): Malicious code in redux-starter (npm) (malicious package)
- [MAL-2025-31952](https://insights.sbomify.com/MAL-2025-31952/): Malicious code in redux-saga-validator (npm) (malicious package)
- [MAL-2025-31951](https://insights.sbomify.com/MAL-2025-31951/): Malicious code in redux-res (npm) (malicious package)
- [MAL-2025-31950](https://insights.sbomify.com/MAL-2025-31950/): Malicious code in redux-readable-reducer (npm) (malicious package)
- [MAL-2025-3195](https://insights.sbomify.com/MAL-2025-3195/): Malicious code in neo4j-apoc-procedures (npm) (malicious package)
- [MAL-2025-31949](https://insights.sbomify.com/MAL-2025-31949/): Malicious code in redux-ace (npm) (malicious package)
- [MAL-2025-31948](https://insights.sbomify.com/MAL-2025-31948/): Malicious code in redshift-volcano-4ufm (npm) (malicious package)
- [MAL-2025-31947](https://insights.sbomify.com/MAL-2025-31947/): Malicious code in redshift-titan-6axh (npm) (malicious package)
- [MAL-2025-31946](https://insights.sbomify.com/MAL-2025-31946/): Malicious code in redshift-oscar-z6pt (npm) (malicious package)
- [MAL-2025-31945](https://insights.sbomify.com/MAL-2025-31945/): Malicious code in redshift-jsonp-triton-ursa (npm) (malicious package)
- [MAL-2025-31944](https://insights.sbomify.com/MAL-2025-31944/): Malicious code in redshift-delta-8zf3 (npm) (malicious package)
- [MAL-2025-31943](https://insights.sbomify.com/MAL-2025-31943/): Malicious code in redshift-bravo-odvs (npm) (malicious package)
- [MAL-2025-31942](https://insights.sbomify.com/MAL-2025-31942/): Malicious code in redshift-betelgeuse-aldebaran-corvus (npm) (malicious package)
- [MAL-2025-31941](https://insights.sbomify.com/MAL-2025-31941/): Malicious code in redlog (npm) (malicious package)
- [MAL-2025-31940](https://insights.sbomify.com/MAL-2025-31940/): Malicious code in redisws.server (npm) (malicious package)
- [MAL-2025-3194](https://insights.sbomify.com/MAL-2025-3194/): Malicious code in neo4j-apoc (npm) (malicious package)
- [MAL-2025-31939](https://insights.sbomify.com/MAL-2025-31939/): Malicious code in redis-webpack-bunyan-bellatrix (npm) (malicious package)
- [MAL-2025-31938](https://insights.sbomify.com/MAL-2025-31938/): Malicious code in redis-state (npm) (malicious package)
- [MAL-2025-31937](https://insights.sbomify.com/MAL-2025-31937/): Malicious code in redis-paleomagnetism-exoplanet-testcafe (npm) (malicious package)
- [MAL-2025-31936](https://insights.sbomify.com/MAL-2025-31936/): Malicious code in redis-mantle-andromeda-lint-staged (npm) (malicious package)
- [MAL-2025-31935](https://insights.sbomify.com/MAL-2025-31935/): Malicious code in redis-gacrux-astrochemistry-lint-staged (npm) (malicious package)
- [MAL-2025-31934](https://insights.sbomify.com/MAL-2025-31934/): Malicious code in redis-darkenergy-brane-polaris (npm) (malicious package)
- [MAL-2025-31933](https://insights.sbomify.com/MAL-2025-31933/): Malicious code in redis-cosmogenic-foundation-xanthus (npm) (malicious package)
- [MAL-2025-31932](https://insights.sbomify.com/MAL-2025-31932/): Malicious code in redis-clustre (npm) (malicious package)
- [MAL-2025-31931](https://insights.sbomify.com/MAL-2025-31931/): Malicious code in redis-chromedriver-typeorm-magellan (npm) (malicious package)
- [MAL-2025-31930](https://insights.sbomify.com/MAL-2025-31930/): Malicious code in redis-asteroid-outercore-entanglement (npm) (malicious package)
- [MAL-2025-3193](https://insights.sbomify.com/MAL-2025-3193/): Malicious code in mongoose-to-json (npm) (malicious package)
- [MAL-2025-31929](https://insights.sbomify.com/MAL-2025-31929/): Malicious code in redgiant-pm2-gridsome-fusion (npm) (malicious package)
- [MAL-2025-31928](https://insights.sbomify.com/MAL-2025-31928/): Malicious code in redgiant-luna-backend-framework (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/758/