# Vulnerabilities published in 2025


- [MAL-2025-31927](https://insights.sbomify.com/MAL-2025-31927/): Malicious code in redgiant-kardashevscale-accretion-cluster (npm) (malicious package)
- [MAL-2025-31926](https://insights.sbomify.com/MAL-2025-31926/): Malicious code in redgiant-celeste-innercore-betelgeuse (npm) (malicious package)
- [MAL-2025-31925](https://insights.sbomify.com/MAL-2025-31925/): Malicious code in redgiant-biohacking-chromedriver-titan (npm) (malicious package)
- [MAL-2025-31924](https://insights.sbomify.com/MAL-2025-31924/): Malicious code in reddited (npm) (malicious package)
- [MAL-2025-31923](https://insights.sbomify.com/MAL-2025-31923/): Malicious code in reddit-mobile-plugin-metrics (npm) (malicious package)
- [MAL-2025-31922](https://insights.sbomify.com/MAL-2025-31922/): Malicious code in reddit-mobile-plugin-ads (npm) (malicious package)
- [MAL-2025-31921](https://insights.sbomify.com/MAL-2025-31921/): Malicious code in reddit-mobile (npm) (malicious package)
- [MAL-2025-31920](https://insights.sbomify.com/MAL-2025-31920/): Malicious code in reddevdoc (npm) (malicious package)
- [MAL-2025-3192](https://insights.sbomify.com/MAL-2025-3192/): Malicious code in lme4 (npm) (malicious package)
- [MAL-2025-31919](https://insights.sbomify.com/MAL-2025-31919/): Malicious code in redcode (npm) (malicious package)
- [MAL-2025-31918](https://insights.sbomify.com/MAL-2025-31918/): Malicious code in redcedar (npm) (malicious package)
- [MAL-2025-31917](https://insights.sbomify.com/MAL-2025-31917/): Malicious code in redaxscript-flaticon (npm) (malicious package)
- [MAL-2025-31916](https://insights.sbomify.com/MAL-2025-31916/): Malicious code in redaction-lib-osx (npm) (malicious package)
- [MAL-2025-31915](https://insights.sbomify.com/MAL-2025-31915/): Malicious code in redaction-lib (npm) (malicious package)
- [MAL-2025-31914](https://insights.sbomify.com/MAL-2025-31914/): Malicious code in red-contrib-enable-gps (npm) (malicious package)
- [MAL-2025-31913](https://insights.sbomify.com/MAL-2025-31913/): Malicious code in recynex (npm) (malicious package)
- [MAL-2025-31912](https://insights.sbomify.com/MAL-2025-31912/): Malicious code in recursive-diff.js (npm) (malicious package)
- [MAL-2025-31911](https://insights.sbomify.com/MAL-2025-31911/): Malicious code in recsam (npm) (malicious package)
- [MAL-2025-31910](https://insights.sbomify.com/MAL-2025-31910/): Malicious code in recrutment (npm) (malicious package)
- [MAL-2025-3191](https://insights.sbomify.com/MAL-2025-3191/): Malicious code in kalluabkl (npm) (malicious package)
- [MAL-2025-31909](https://insights.sbomify.com/MAL-2025-31909/): Malicious code in recrut (npm) (malicious package)
- [MAL-2025-31908](https://insights.sbomify.com/MAL-2025-31908/): Malicious code in recriut (npm) (malicious package)
- [MAL-2025-31907](https://insights.sbomify.com/MAL-2025-31907/): Malicious code in record_query (npm) (malicious package)
- [MAL-2025-31906](https://insights.sbomify.com/MAL-2025-31906/): Malicious code in reconcast (npm) (malicious package)
- [MAL-2025-31905](https://insights.sbomify.com/MAL-2025-31905/): Malicious code in recojets (npm) (malicious package)
- [MAL-2025-31904](https://insights.sbomify.com/MAL-2025-31904/): Malicious code in recital (npm) (malicious package)
- [MAL-2025-31903](https://insights.sbomify.com/MAL-2025-31903/): Malicious code in recipe-archive (npm) (malicious package)
- [MAL-2025-31902](https://insights.sbomify.com/MAL-2025-31902/): Malicious code in recipants (npm) (malicious package)
- [MAL-2025-31901](https://insights.sbomify.com/MAL-2025-31901/): Malicious code in recents (npm) (malicious package)
- [MAL-2025-31900](https://insights.sbomify.com/MAL-2025-31900/): Malicious code in rebloc (npm) (malicious package)
- [MAL-2025-3190](https://insights.sbomify.com/MAL-2025-3190/): Malicious code in highcharts-mouse-wheel-zoom (npm) (malicious package)
- [MAL-2025-319](https://insights.sbomify.com/MAL-2025-319/): Malicious code in webpack-inline-constant-exports-plugin (npm) (malicious package)
- [MAL-2025-31899](https://insights.sbomify.com/MAL-2025-31899/): Malicious code in rebelspy (npm) (malicious package)
- [MAL-2025-31898](https://insights.sbomify.com/MAL-2025-31898/): Malicious code in reatc-native-components (npm) (malicious package)
- [MAL-2025-31897](https://insights.sbomify.com/MAL-2025-31897/): Malicious code in reatc (npm) (malicious package)
- [MAL-2025-31896](https://insights.sbomify.com/MAL-2025-31896/): Malicious code in reat (npm) (malicious package)
- [MAL-2025-31895](https://insights.sbomify.com/MAL-2025-31895/): Malicious code in realtimequeryserv (npm) (malicious package)
- [MAL-2025-31894](https://insights.sbomify.com/MAL-2025-31894/): Malicious code in realtimecat (npm) (malicious package)
- [MAL-2025-31893](https://insights.sbomify.com/MAL-2025-31893/): Malicious code in realmtodo (npm) (malicious package)
- [MAL-2025-31892](https://insights.sbomify.com/MAL-2025-31892/): Malicious code in realmassive-styled-theme (npm) (malicious package)
- [MAL-2025-31891](https://insights.sbomify.com/MAL-2025-31891/): Malicious code in realm_ssp9i_vlipj_nebula (npm) (malicious package)
- [MAL-2025-31890](https://insights.sbomify.com/MAL-2025-31890/): Malicious code in realm_mjcvi_m87ia_opal (npm) (malicious package)
- [MAL-2025-3189](https://insights.sbomify.com/MAL-2025-3189/): Malicious code in healenium-webdriverio (npm) (malicious package)
- [MAL-2025-31889](https://insights.sbomify.com/MAL-2025-31889/): Malicious code in realm_blkb6_7tp1z_fern (npm) (malicious package)
- [MAL-2025-31888](https://insights.sbomify.com/MAL-2025-31888/): Malicious code in realm_0m5jn_5v6oj_banyan (npm) (malicious package)
- [MAL-2025-31887](https://insights.sbomify.com/MAL-2025-31887/): Malicious code in realkd (npm) (malicious package)
- [MAL-2025-31886](https://insights.sbomify.com/MAL-2025-31886/): Malicious code in realise (npm) (malicious package)
- [MAL-2025-31885](https://insights.sbomify.com/MAL-2025-31885/): Malicious code in real_sub (npm) (malicious package)
- [MAL-2025-31884](https://insights.sbomify.com/MAL-2025-31884/): Malicious code in real2 (npm) (malicious package)
- [MAL-2025-31883](https://insights.sbomify.com/MAL-2025-31883/): Malicious code in readme-utils (npm) (malicious package)
- [MAL-2025-31882](https://insights.sbomify.com/MAL-2025-31882/): Malicious code in readbook (npm) (malicious package)
- [MAL-2025-31881](https://insights.sbomify.com/MAL-2025-31881/): Malicious code in readable-protractor-standard-postcss-loader (npm) (malicious package)
- [MAL-2025-31880](https://insights.sbomify.com/MAL-2025-31880/): Malicious code in readable-karma-elektra-norma (npm) (malicious package)
- [MAL-2025-3188](https://insights.sbomify.com/MAL-2025-3188/): Malicious code in healenium-web (npm) (malicious package)
- [MAL-2025-31879](https://insights.sbomify.com/MAL-2025-31879/): Malicious code in readable-geodynamo-quasarjet-brane (npm) (malicious package)
- [MAL-2025-31878](https://insights.sbomify.com/MAL-2025-31878/): Malicious code in read-cli-input (npm) (malicious package)
- [MAL-2025-31877](https://insights.sbomify.com/MAL-2025-31877/): Malicious code in reactyiqi-shejimoshi-zuijia-shijian (npm) (malicious package)
- [MAL-2025-31876](https://insights.sbomify.com/MAL-2025-31876/): Malicious code in reactyiliu-moju (npm) (malicious package)
- [MAL-2025-31875](https://insights.sbomify.com/MAL-2025-31875/): Malicious code in reactyiliu-jichuzhishi (npm) (malicious package)
- [MAL-2025-31874](https://insights.sbomify.com/MAL-2025-31874/): Malicious code in reactsy (npm) (malicious package)
- [MAL-2025-31873](https://insights.sbomify.com/MAL-2025-31873/): Malicious code in reactmsagl (npm) (malicious package)
- [MAL-2025-31872](https://insights.sbomify.com/MAL-2025-31872/): Malicious code in reactive-root (npm) (malicious package)
- [MAL-2025-31871](https://insights.sbomify.com/MAL-2025-31871/): Malicious code in reacthunter (npm) (malicious package)
- [MAL-2025-31870](https://insights.sbomify.com/MAL-2025-31870/): Malicious code in reactcodepad (npm) (malicious package)
- [MAL-2025-3187](https://insights.sbomify.com/MAL-2025-3187/): Malicious code in flutter_cupertino_date_picker (npm) (malicious package)
- [MAL-2025-31869](https://insights.sbomify.com/MAL-2025-31869/): Malicious code in reactatouille-boilerplate (npm) (malicious package)
- [MAL-2025-31868](https://insights.sbomify.com/MAL-2025-31868/): Malicious code in react_vs_ng (npm) (malicious package)
- [MAL-2025-31867](https://insights.sbomify.com/MAL-2025-31867/): Malicious code in react-y-typeahead (npm) (malicious package)
- [MAL-2025-31866](https://insights.sbomify.com/MAL-2025-31866/): Malicious code in react-y-pills (npm) (malicious package)
- [MAL-2025-31865](https://insights.sbomify.com/MAL-2025-31865/): Malicious code in react-wt-jquery-and-css (npm) (malicious package)
- [MAL-2025-31864](https://insights.sbomify.com/MAL-2025-31864/): Malicious code in react-weapp (npm) (malicious package)
- [MAL-2025-31863](https://insights.sbomify.com/MAL-2025-31863/): Malicious code in react-vis-showcase (npm) (malicious package)
- [MAL-2025-31862](https://insights.sbomify.com/MAL-2025-31862/): Malicious code in react-ui-bootstrap (npm) (malicious package)
- [MAL-2025-31861](https://insights.sbomify.com/MAL-2025-31861/): Malicious code in react-typexs (npm) (malicious package)
- [MAL-2025-31860](https://insights.sbomify.com/MAL-2025-31860/): Malicious code in react-typex (npm) (malicious package)
- [MAL-2025-3186](https://insights.sbomify.com/MAL-2025-3186/): Malicious code in fasteners (npm) (malicious package)
- [MAL-2025-31859](https://insights.sbomify.com/MAL-2025-31859/): Malicious code in react-type-toastify (npm) (malicious package)
- [MAL-2025-31858](https://insights.sbomify.com/MAL-2025-31858/): Malicious code in react-type-next (npm) (malicious package)
- [MAL-2025-31857](https://insights.sbomify.com/MAL-2025-31857/): Malicious code in react-tinderable-ws (npm) (malicious package)
- [MAL-2025-31856](https://insights.sbomify.com/MAL-2025-31856/): Malicious code in react-stay-scrolled-examples (npm) (malicious package)
- [MAL-2025-31855](https://insights.sbomify.com/MAL-2025-31855/): Malicious code in react-scripts-cep (npm) (malicious package)
- [MAL-2025-31854](https://insights.sbomify.com/MAL-2025-31854/): Malicious code in react-router2 (npm) (malicious package)
- [MAL-2025-31853](https://insights.sbomify.com/MAL-2025-31853/): Malicious code in react-router-dom-5 (npm) (malicious package)
- [MAL-2025-31852](https://insights.sbomify.com/MAL-2025-31852/): Malicious code in react-reporting-poc (npm) (malicious package)
- [MAL-2025-31851](https://insights.sbomify.com/MAL-2025-31851/): Malicious code in react-radio-group-a11y (npm) (malicious package)
- [MAL-2025-31850](https://insights.sbomify.com/MAL-2025-31850/): Malicious code in react-promethion-eeprom-reader (npm) (malicious package)
- [MAL-2025-3185](https://insights.sbomify.com/MAL-2025-3185/): Malicious code in esy-m4 (npm) (malicious package)
- [MAL-2025-31849](https://insights.sbomify.com/MAL-2025-31849/): Malicious code in react-play-action (npm) (malicious package)
- [MAL-2025-31848](https://insights.sbomify.com/MAL-2025-31848/): Malicious code in react-pdd-tips (npm) (malicious package)
- [MAL-2025-31847](https://insights.sbomify.com/MAL-2025-31847/): Malicious code in react-pdd-table (npm) (malicious package)
- [MAL-2025-31846](https://insights.sbomify.com/MAL-2025-31846/): Malicious code in react-pdd-tab (npm) (malicious package)
- [MAL-2025-31845](https://insights.sbomify.com/MAL-2025-31845/): Malicious code in react-pdd-select (npm) (malicious package)
- [MAL-2025-31844](https://insights.sbomify.com/MAL-2025-31844/): Malicious code in react-pdd-pagination (npm) (malicious package)
- [MAL-2025-31843](https://insights.sbomify.com/MAL-2025-31843/): Malicious code in react-pdd-msg (npm) (malicious package)
- [MAL-2025-31842](https://insights.sbomify.com/MAL-2025-31842/): Malicious code in react-pdd-modal (npm) (malicious package)
- [MAL-2025-31841](https://insights.sbomify.com/MAL-2025-31841/): Malicious code in react-pdd-form (npm) (malicious package)
- [MAL-2025-31840](https://insights.sbomify.com/MAL-2025-31840/): Malicious code in react-pdd-dui (npm) (malicious package)
- [MAL-2025-3184](https://insights.sbomify.com/MAL-2025-3184/): Malicious code in dyalog-ride (npm) (malicious package)
- [MAL-2025-31839](https://insights.sbomify.com/MAL-2025-31839/): Malicious code in react-pdd-confirm (npm) (malicious package)
- [MAL-2025-31838](https://insights.sbomify.com/MAL-2025-31838/): Malicious code in react-pdd-calendar-expand (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/759/