# Vulnerabilities published in 2025 - [MAL-2025-31837](https://insights.sbomify.com/MAL-2025-31837/): Malicious code in react-pdd-calendar (npm) (malicious package) - [MAL-2025-31836](https://insights.sbomify.com/MAL-2025-31836/): Malicious code in react-pdd-base (npm) (malicious package) - [MAL-2025-31835](https://insights.sbomify.com/MAL-2025-31835/): Malicious code in react-pagifier (npm) (malicious package) - [MAL-2025-31834](https://insights.sbomify.com/MAL-2025-31834/): Malicious code in react-on-liferay (npm) (malicious package) - [MAL-2025-31833](https://insights.sbomify.com/MAL-2025-31833/): Malicious code in react-odm (npm) (malicious package) - [MAL-2025-31832](https://insights.sbomify.com/MAL-2025-31832/): Malicious code in react-natvie-components (npm) (malicious package) - [MAL-2025-31831](https://insights.sbomify.com/MAL-2025-31831/): Malicious code in react-native-website (npm) (malicious package) - [MAL-2025-31830](https://insights.sbomify.com/MAL-2025-31830/): Malicious code in react-native-testing-log (npm) (malicious package) - [MAL-2025-3183](https://insights.sbomify.com/MAL-2025-3183/): Malicious code in domino-db (npm) (malicious package) - [MAL-2025-31829](https://insights.sbomify.com/MAL-2025-31829/): Malicious code in react-native-sims (npm) (malicious package) - [MAL-2025-31828](https://insights.sbomify.com/MAL-2025-31828/): Malicious code in react-native-save-base64-image (npm) (malicious package) - [MAL-2025-31827](https://insights.sbomify.com/MAL-2025-31827/): Malicious code in react-native-react-native-show-message-extension (npm) (malicious package) - [MAL-2025-31826](https://insights.sbomify.com/MAL-2025-31826/): Malicious code in react-native-performance-navigation-drawer (npm) (malicious package) - [MAL-2025-31825](https://insights.sbomify.com/MAL-2025-31825/): Malicious code in react-native-performance-navigation-bottom-tabs (npm) (malicious package) - [MAL-2025-31824](https://insights.sbomify.com/MAL-2025-31824/): Malicious code in react-native-performance-navigation (npm) (malicious package) - [MAL-2025-31823](https://insights.sbomify.com/MAL-2025-31823/): Malicious code in react-native-performance-lists-profiler (npm) (malicious package) - [MAL-2025-31822](https://insights.sbomify.com/MAL-2025-31822/): Malicious code in react-native-pankanis-log (npm) (malicious package) - [MAL-2025-31821](https://insights.sbomify.com/MAL-2025-31821/): Malicious code in react-native-native-toast-library-2022 (npm) (malicious package) - [MAL-2025-31820](https://insights.sbomify.com/MAL-2025-31820/): Malicious code in react-native-native-toast (npm) (malicious package) - [MAL-2025-3182](https://insights.sbomify.com/MAL-2025-3182/): Malicious code in deltaprime (npm) (malicious package) - [MAL-2025-31819](https://insights.sbomify.com/MAL-2025-31819/): Malicious code in react-native-m49-area-picker-modal (npm) (malicious package) - [MAL-2025-31818](https://insights.sbomify.com/MAL-2025-31818/): Malicious code in react-native-lip-sdk (npm) (malicious package) - [MAL-2025-31817](https://insights.sbomify.com/MAL-2025-31817/): Malicious code in react-native-lib-teste (npm) (malicious package) - [MAL-2025-31816](https://insights.sbomify.com/MAL-2025-31816/): Malicious code in react-native-ezio-face-id-sdk (npm) (malicious package) - [MAL-2025-31815](https://insights.sbomify.com/MAL-2025-31815/): Malicious code in react-native-elemets (npm) (malicious package) - [MAL-2025-31814](https://insights.sbomify.com/MAL-2025-31814/): Malicious code in react-native-elemens (npm) (malicious package) - [MAL-2025-31813](https://insights.sbomify.com/MAL-2025-31813/): Malicious code in react-native-data-sdk (npm) (malicious package) - [MAL-2025-31812](https://insights.sbomify.com/MAL-2025-31812/): Malicious code in react-native-comopnents (npm) (malicious package) - [MAL-2025-31811](https://insights.sbomify.com/MAL-2025-31811/): Malicious code in react-native-cmoponents (npm) (malicious package) - [MAL-2025-31810](https://insights.sbomify.com/MAL-2025-31810/): Malicious code in react-native-chorus-player (npm) (malicious package) - [MAL-2025-3181](https://insights.sbomify.com/MAL-2025-3181/): Malicious code in data-memocombinators (npm) (malicious package) - [MAL-2025-31809](https://insights.sbomify.com/MAL-2025-31809/): Malicious code in react-native-background-geolocation-android (npm) (malicious package) - [MAL-2025-31808](https://insights.sbomify.com/MAL-2025-31808/): Malicious code in react-native-audio-recorder-android (npm) (malicious package) - [MAL-2025-31807](https://insights.sbomify.com/MAL-2025-31807/): Malicious code in react-native-apollo-upload-client (npm) (malicious package) - [MAL-2025-31806](https://insights.sbomify.com/MAL-2025-31806/): Malicious code in react-native-agnavigation (npm) (malicious package) - [MAL-2025-31805](https://insights.sbomify.com/MAL-2025-31805/): Malicious code in react-naitve-components (npm) (malicious package) - [MAL-2025-31804](https://insights.sbomify.com/MAL-2025-31804/): Malicious code in react-mutator (npm) (malicious package) - [MAL-2025-31803](https://insights.sbomify.com/MAL-2025-31803/): Malicious code in react-microphone-controls (npm) (malicious package) - [MAL-2025-31802](https://insights.sbomify.com/MAL-2025-31802/): Malicious code in react-menu-toolbar (npm) (malicious package) - [MAL-2025-31801](https://insights.sbomify.com/MAL-2025-31801/): Malicious code in react-launch (npm) (malicious package) - [MAL-2025-31800](https://insights.sbomify.com/MAL-2025-31800/): Malicious code in react-keel (npm) (malicious package) - [MAL-2025-3180](https://insights.sbomify.com/MAL-2025-3180/): Malicious code in cors-jwt (npm) (malicious package) - [MAL-2025-318](https://insights.sbomify.com/MAL-2025-318/): Malicious code in webpack-extensive-lodash-replacement-plugin (npm) (malicious package) - [MAL-2025-31799](https://insights.sbomify.com/MAL-2025-31799/): Malicious code in react-image2base64 (npm) (malicious package) - [MAL-2025-31798](https://insights.sbomify.com/MAL-2025-31798/): Malicious code in react-i18nify-mobx (npm) (malicious package) - [MAL-2025-31797](https://insights.sbomify.com/MAL-2025-31797/): Malicious code in react-i18n-swc-plugin (npm) (malicious package) - [MAL-2025-31796](https://insights.sbomify.com/MAL-2025-31796/): Malicious code in react-hook-eslint (npm) (malicious package) - [MAL-2025-31795](https://insights.sbomify.com/MAL-2025-31795/): Malicious code in react-headers (npm) (malicious package) - [MAL-2025-31794](https://insights.sbomify.com/MAL-2025-31794/): Malicious code in react-grid-suite (npm) (malicious package) - [MAL-2025-31793](https://insights.sbomify.com/MAL-2025-31793/): Malicious code in react-googleplaces-component (npm) (malicious package) - [MAL-2025-31792](https://insights.sbomify.com/MAL-2025-31792/): Malicious code in react-google-publisher-tag-v15 (npm) (malicious package) - [MAL-2025-31791](https://insights.sbomify.com/MAL-2025-31791/): Malicious code in react-google-calendar-events (npm) (malicious package) - [MAL-2025-31790](https://insights.sbomify.com/MAL-2025-31790/): Malicious code in react-found (npm) (malicious package) - [MAL-2025-3179](https://insights.sbomify.com/MAL-2025-3179/): Malicious code in bitcore-message-zen (npm) (malicious package) - [MAL-2025-31789](https://insights.sbomify.com/MAL-2025-31789/): Malicious code in react-focus-lock-next (npm) (malicious package) - [MAL-2025-31788](https://insights.sbomify.com/MAL-2025-31788/): Malicious code in react-flyout (npm) (malicious package) - [MAL-2025-31787](https://insights.sbomify.com/MAL-2025-31787/): Malicious code in react-flipboard (npm) (malicious package) - [MAL-2025-31786](https://insights.sbomify.com/MAL-2025-31786/): Malicious code in react-flex-dropdowns (npm) (malicious package) - [MAL-2025-31785](https://insights.sbomify.com/MAL-2025-31785/): Malicious code in react-flamechart (npm) (malicious package) - [MAL-2025-31784](https://insights.sbomify.com/MAL-2025-31784/): Malicious code in react-fincharts (npm) (malicious package) - [MAL-2025-31783](https://insights.sbomify.com/MAL-2025-31783/): Malicious code in react-filter-tree (npm) (malicious package) - [MAL-2025-31782](https://insights.sbomify.com/MAL-2025-31782/): Malicious code in react-fatigue-dev-boiler (npm) (malicious package) - [MAL-2025-31781](https://insights.sbomify.com/MAL-2025-31781/): Malicious code in react-dropdownhunter (npm) (malicious package) - [MAL-2025-31780](https://insights.sbomify.com/MAL-2025-31780/): Malicious code in react-dom.js (npm) (malicious package) - [MAL-2025-3178](https://insights.sbomify.com/MAL-2025-3178/): Malicious code in @medialink-ml/yuzu-widget (npm) (malicious package) - [MAL-2025-31779](https://insights.sbomify.com/MAL-2025-31779/): Malicious code in react-dmo (npm) (malicious package) - [MAL-2025-31778](https://insights.sbomify.com/MAL-2025-31778/): Malicious code in react-developer-task (npm) (malicious package) - [MAL-2025-31777](https://insights.sbomify.com/MAL-2025-31777/): Malicious code in react-data-grid-eppsta (npm) (malicious package) - [MAL-2025-31776](https://insights.sbomify.com/MAL-2025-31776/): Malicious code in react-corn (npm) (malicious package) - [MAL-2025-31775](https://insights.sbomify.com/MAL-2025-31775/): Malicious code in react-context-stylizer (npm) (malicious package) - [MAL-2025-31774](https://insights.sbomify.com/MAL-2025-31774/): Malicious code in react-component-adbox (npm) (malicious package) - [MAL-2025-31773](https://insights.sbomify.com/MAL-2025-31773/): Malicious code in react-chtr-object-methods (npm) (malicious package) - [MAL-2025-31772](https://insights.sbomify.com/MAL-2025-31772/): Malicious code in react-chtr-form (npm) (malicious package) - [MAL-2025-31771](https://insights.sbomify.com/MAL-2025-31771/): Malicious code in react-choose (npm) (malicious package) - [MAL-2025-31770](https://insights.sbomify.com/MAL-2025-31770/): Malicious code in react-bootstrap-prettier-stylelint-parsec-mechatronics (npm) (malicious package) - [MAL-2025-3177](https://insights.sbomify.com/MAL-2025-3177/): Malicious code in google-youtube (npm) (malicious package) - [MAL-2025-31769](https://insights.sbomify.com/MAL-2025-31769/): Malicious code in react-bootstrap-paleontology-kinetic-luminescence (npm) (malicious package) - [MAL-2025-31768](https://insights.sbomify.com/MAL-2025-31768/): Malicious code in react-bootstrap-nightwatch-andromeda-mysql (npm) (malicious package) - [MAL-2025-31767](https://insights.sbomify.com/MAL-2025-31767/): Malicious code in react-bootstrap-mocha-command-scripts (npm) (malicious package) - [MAL-2025-31766](https://insights.sbomify.com/MAL-2025-31766/): Malicious code in react-babelfish (npm) (malicious package) - [MAL-2025-31765](https://insights.sbomify.com/MAL-2025-31765/): Malicious code in react-atomic-css (npm) (malicious package) - [MAL-2025-31764](https://insights.sbomify.com/MAL-2025-31764/): Malicious code in react-aside (npm) (malicious package) - [MAL-2025-31763](https://insights.sbomify.com/MAL-2025-31763/): Malicious code in react-airbnb-prettier (npm) (malicious package) - [MAL-2025-31762](https://insights.sbomify.com/MAL-2025-31762/): Malicious code in react-adblockdetect (npm) (malicious package) - [MAL-2025-31761](https://insights.sbomify.com/MAL-2025-31761/): Malicious code in react-360-with-awareness (npm) (malicious package) - [MAL-2025-31760](https://insights.sbomify.com/MAL-2025-31760/): Malicious code in reacct (npm) (malicious package) - [MAL-2025-3176](https://insights.sbomify.com/MAL-2025-3176/): Malicious code in @n37scancp/highlight.js (npm) (malicious package) - [MAL-2025-31759](https://insights.sbomify.com/MAL-2025-31759/): Malicious code in reaact (npm) (malicious package) - [MAL-2025-31758](https://insights.sbomify.com/MAL-2025-31758/): Malicious code in re4e-zh (npm) (malicious package) - [MAL-2025-31757](https://insights.sbomify.com/MAL-2025-31757/): Malicious code in rdpfox_clientprocess (npm) (malicious package) - [MAL-2025-31756](https://insights.sbomify.com/MAL-2025-31756/): Malicious code in rdpfox-onboard-client (npm) (malicious package) - [MAL-2025-31755](https://insights.sbomify.com/MAL-2025-31755/): Malicious code in rdjava (npm) (malicious package) - [MAL-2025-31754](https://insights.sbomify.com/MAL-2025-31754/): Malicious code in rdio-js-api (npm) (malicious package) - [MAL-2025-31753](https://insights.sbomify.com/MAL-2025-31753/): Malicious code in rdhkeqficymozlvt (npm) (malicious package) - [MAL-2025-31752](https://insights.sbomify.com/MAL-2025-31752/): Malicious code in rdatapkg (npm) (malicious package) - [MAL-2025-31751](https://insights.sbomify.com/MAL-2025-31751/): Malicious code in rdaport (npm) (malicious package) - [MAL-2025-31750](https://insights.sbomify.com/MAL-2025-31750/): Malicious code in rcs_ocs (npm) (malicious package) - [MAL-2025-3175](https://insights.sbomify.com/MAL-2025-3175/): Malicious code in nucleus-form (npm) (malicious package) - [MAL-2025-31749](https://insights.sbomify.com/MAL-2025-31749/): Malicious code in rcppsmc (npm) (malicious package) - [MAL-2025-31748](https://insights.sbomify.com/MAL-2025-31748/): Malicious code in rckuvwhqzyspijtg (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/760/