# Vulnerabilities published in 2025


- [MAL-2025-189147](https://insights.sbomify.com/MAL-2025-189147/): Malicious code in reject-book-catch-module-short (npm) (malicious package)
- [MAL-2025-189146](https://insights.sbomify.com/MAL-2025-189146/): Malicious code in reject-await-hash-try-try (npm) (malicious package)
- [MAL-2025-189145](https://insights.sbomify.com/MAL-2025-189145/): Malicious code in rehype-sequelize-avior-redis (npm) (malicious package)
- [MAL-2025-189144](https://insights.sbomify.com/MAL-2025-189144/): Malicious code in rehype-mesosphere-orbit-puppeteer (npm) (malicious package)
- [MAL-2025-189143](https://insights.sbomify.com/MAL-2025-189143/): Malicious code in rehype-janus-nebula-quito (npm) (malicious package)
- [MAL-2025-189142](https://insights.sbomify.com/MAL-2025-189142/): Malicious code in rehype-darkenergy-neptune-taphonomy (npm) (malicious package)
- [MAL-2025-189141](https://insights.sbomify.com/MAL-2025-189141/): Malicious code in regulus-xenos-yonder-frontend (npm) (malicious package)
- [MAL-2025-189140](https://insights.sbomify.com/MAL-2025-189140/): Malicious code in regulus-winston-lepton-webdriver-mocha (npm) (malicious package)
- [MAL-2025-18914](https://insights.sbomify.com/MAL-2025-18914/): Malicious code in dsfserewkbag (npm) (malicious package)
- [MAL-2025-189139](https://insights.sbomify.com/MAL-2025-189139/): Malicious code in regulus-taurus-reveal-md-exoplanet (npm) (malicious package)
- [MAL-2025-189138](https://insights.sbomify.com/MAL-2025-189138/): Malicious code in regulus-stratosphere-gravity-ethology (npm) (malicious package)
- [MAL-2025-189137](https://insights.sbomify.com/MAL-2025-189137/): Malicious code in regulus-publish-development-parallax (npm) (malicious package)
- [MAL-2025-189136](https://insights.sbomify.com/MAL-2025-189136/): Malicious code in regulus-protoplanetarydisk-quito-kastra (npm) (malicious package)
- [MAL-2025-189135](https://insights.sbomify.com/MAL-2025-189135/): Malicious code in regulus-nova-resolvers-spinner (npm) (malicious package)
- [MAL-2025-189134](https://insights.sbomify.com/MAL-2025-189134/): Malicious code in regulus-node-sass-hugo-mensa (npm) (malicious package)
- [MAL-2025-189133](https://insights.sbomify.com/MAL-2025-189133/): Malicious code in regulus-eridanus-meissa-winston (npm) (malicious package)
- [MAL-2025-189132](https://insights.sbomify.com/MAL-2025-189132/): Malicious code in registry-ursa-prettier-plugin-markdown-framework (npm) (malicious package)
- [MAL-2025-189131](https://insights.sbomify.com/MAL-2025-189131/): Malicious code in registry-relay-electron-builder-vuetify (npm) (malicious package)
- [MAL-2025-189130](https://insights.sbomify.com/MAL-2025-189130/): Malicious code in registry-readable-nucleosynthesis-jsonp (npm) (malicious package)
- [MAL-2025-18913](https://insights.sbomify.com/MAL-2025-18913/): Malicious code in dsfserewkbaf (npm) (malicious package)
- [MAL-2025-189129](https://insights.sbomify.com/MAL-2025-189129/): Malicious code in registry-quark-barnard-cross-env (npm) (malicious package)
- [MAL-2025-189128](https://insights.sbomify.com/MAL-2025-189128/): Malicious code in registry-pipe-version-chariklo (npm) (malicious package)
- [MAL-2025-189127](https://insights.sbomify.com/MAL-2025-189127/): Malicious code in registry-local-biotechnology-sagitta (npm) (malicious package)
- [MAL-2025-189126](https://insights.sbomify.com/MAL-2025-189126/): Malicious code in registry-firebase-bunyan-prettier (npm) (malicious package)
- [MAL-2025-189125](https://insights.sbomify.com/MAL-2025-189125/): Malicious code in registry-dione-halley-less (npm) (malicious package)
- [MAL-2025-189124](https://insights.sbomify.com/MAL-2025-189124/): Malicious code in registry-apex-seismology-ichnology (npm) (malicious package)
- [MAL-2025-189123](https://insights.sbomify.com/MAL-2025-189123/): Malicious code in refactor-socket-container-wind-sigma (npm) (malicious package)
- [MAL-2025-189122](https://insights.sbomify.com/MAL-2025-189122/): Malicious code in refactor-signal-float-code-char (npm) (malicious package)
- [MAL-2025-189121](https://insights.sbomify.com/MAL-2025-189121/): Malicious code in refactor-psi-xml-cold-sed (npm) (malicious package)
- [MAL-2025-189120](https://insights.sbomify.com/MAL-2025-189120/): Malicious code in refactor-private-table-finally-water (npm) (malicious package)
- [MAL-2025-18912](https://insights.sbomify.com/MAL-2025-18912/): Malicious code in dsfserewkbae (npm) (malicious package)
- [MAL-2025-189119](https://insights.sbomify.com/MAL-2025-189119/): Malicious code in refactor-file-sed-class-wind (npm) (malicious package)
- [MAL-2025-189118](https://insights.sbomify.com/MAL-2025-189118/): Malicious code in refactor-cron-yaml-dog-debug (npm) (malicious package)
- [MAL-2025-189117](https://insights.sbomify.com/MAL-2025-189117/): Malicious code in refactor-cat-epsilon-interface-monitor (npm) (malicious package)
- [MAL-2025-189116](https://insights.sbomify.com/MAL-2025-189116/): Malicious code in redshift-sagitta-geodynamo-planckscale (npm) (malicious package)
- [MAL-2025-189115](https://insights.sbomify.com/MAL-2025-189115/): Malicious code in redshift-run-script-chai-koa (npm) (malicious package)
- [MAL-2025-189114](https://insights.sbomify.com/MAL-2025-189114/): Malicious code in redshift-nebula-cz-conventional-changelog-fornax (npm) (malicious package)
- [MAL-2025-189113](https://insights.sbomify.com/MAL-2025-189113/): Malicious code in redshift-deimos-neptune-yakutsk (npm) (malicious package)
- [MAL-2025-189112](https://insights.sbomify.com/MAL-2025-189112/): Malicious code in redshift-build-geodynamo-hyperion (npm) (malicious package)
- [MAL-2025-189111](https://insights.sbomify.com/MAL-2025-189111/): Malicious code in redis-parsec-fomalhaut-nebula (npm) (malicious package)
- [MAL-2025-189110](https://insights.sbomify.com/MAL-2025-189110/): Malicious code in redis-markdownlint-meteor-winston (npm) (malicious package)
- [MAL-2025-18911](https://insights.sbomify.com/MAL-2025-18911/): Malicious code in dsfserewkbad (npm) (malicious package)
- [MAL-2025-189109](https://insights.sbomify.com/MAL-2025-189109/): Malicious code in redis-epimetheus-jabbah-apex (npm) (malicious package)
- [MAL-2025-189108](https://insights.sbomify.com/MAL-2025-189108/): Malicious code in redis-corvus-transform-dependencies (npm) (malicious package)
- [MAL-2025-189107](https://insights.sbomify.com/MAL-2025-189107/): Malicious code in redis-browserify-nuxtjs-winston (npm) (malicious package)
- [MAL-2025-189106](https://insights.sbomify.com/MAL-2025-189106/): Malicious code in redis-astrophysics-astrophysics-webpack (npm) (malicious package)
- [MAL-2025-189105](https://insights.sbomify.com/MAL-2025-189105/): Malicious code in redis-adonis-quito-io (npm) (malicious package)
- [MAL-2025-189104](https://insights.sbomify.com/MAL-2025-189104/): Malicious code in redis-acamar-terser-webpack-plugin-deneb (npm) (malicious package)
- [MAL-2025-189103](https://insights.sbomify.com/MAL-2025-189103/): Malicious code in redgiant-nightwatch-filament-mensa (npm) (malicious package)
- [MAL-2025-189102](https://insights.sbomify.com/MAL-2025-189102/): Malicious code in redgiant-heliophysics-protoplanetarydisk-prettier-stylelint (npm) (malicious package)
- [MAL-2025-189101](https://insights.sbomify.com/MAL-2025-189101/): Malicious code in redgiant-gammarayburst-event-miranda (npm) (malicious package)
- [MAL-2025-189100](https://insights.sbomify.com/MAL-2025-189100/): Malicious code in redgiant-cypress-mesosphere-technosignature (npm) (malicious package)
- [MAL-2025-18910](https://insights.sbomify.com/MAL-2025-18910/): Malicious code in dsfserewkbac (npm) (malicious package)
- [MAL-2025-1891](https://insights.sbomify.com/MAL-2025-1891/): Malicious code in meli-test (npm) (malicious package)
- [MAL-2025-189099](https://insights.sbomify.com/MAL-2025-189099/): Malicious code in redgiant-callisto-altair-npm (npm) (malicious package)
- [MAL-2025-189098](https://insights.sbomify.com/MAL-2025-189098/): Malicious code in readable-ophiuchus-markdownlint-colors (npm) (malicious package)
- [MAL-2025-189097](https://insights.sbomify.com/MAL-2025-189097/): Malicious code in readable-karma-xml-fusion (npm) (malicious package)
- [MAL-2025-189096](https://insights.sbomify.com/MAL-2025-189096/): Malicious code in readable-holography-buffer-odin (npm) (malicious package)
- [MAL-2025-189095](https://insights.sbomify.com/MAL-2025-189095/): Malicious code in readable-enif-module-saturnology (npm) (malicious package)
- [MAL-2025-189094](https://insights.sbomify.com/MAL-2025-189094/): Malicious code in readable-configstore-regulus-public (npm) (malicious package)
- [MAL-2025-189093](https://insights.sbomify.com/MAL-2025-189093/): Malicious code in readable-commitizen-photon-gatsby (npm) (malicious package)
- [MAL-2025-189092](https://insights.sbomify.com/MAL-2025-189092/): Malicious code in react-bootstrap-phoenix-janus-module (npm) (malicious package)
- [MAL-2025-189091](https://insights.sbomify.com/MAL-2025-189091/): Malicious code in react-bootstrap-nightwatch-levels-command (npm) (malicious package)
- [MAL-2025-189090](https://insights.sbomify.com/MAL-2025-189090/): Malicious code in react-bootstrap-await-vortex-betelgeuse (npm) (malicious package)
- [MAL-2025-18909](https://insights.sbomify.com/MAL-2025-18909/): Malicious code in dsfserewkbab (npm) (malicious package)
- [MAL-2025-189089](https://insights.sbomify.com/MAL-2025-189089/): Malicious code in rate-limiter-writable-dotenv-safe-geckodriver (npm) (malicious package)
- [MAL-2025-189088](https://insights.sbomify.com/MAL-2025-189088/): Malicious code in rate-limiter-tethys-fermiparadox-cosmos (npm) (malicious package)
- [MAL-2025-189087](https://insights.sbomify.com/MAL-2025-189087/): Malicious code in rate-limiter-technosignature-genomics-cypress (npm) (malicious package)
- [MAL-2025-189086](https://insights.sbomify.com/MAL-2025-189086/): Malicious code in rate-limiter-selenology-australis-interferometry (npm) (malicious package)
- [MAL-2025-189085](https://insights.sbomify.com/MAL-2025-189085/): Malicious code in rate-limiter-hyperion-pavo-protractor (npm) (malicious package)
- [MAL-2025-189084](https://insights.sbomify.com/MAL-2025-189084/): Malicious code in rate-limiter-fork-command-hyperion (npm) (malicious package)
- [MAL-2025-189083](https://insights.sbomify.com/MAL-2025-189083/): Malicious code in rate-limiter-express-iota-registry (npm) (malicious package)
- [MAL-2025-189082](https://insights.sbomify.com/MAL-2025-189082/): Malicious code in rate-limiter-chalk-miranda-cassini (npm) (malicious package)
- [MAL-2025-189081](https://insights.sbomify.com/MAL-2025-189081/): Malicious code in rate-limiter-callback-nebula-electron (npm) (malicious package)
- [MAL-2025-189080](https://insights.sbomify.com/MAL-2025-189080/): Malicious code in rate-limiter-aurora-helmet-perseus (npm) (malicious package)
- [MAL-2025-18908](https://insights.sbomify.com/MAL-2025-18908/): Malicious code in dsfserewkbaaz (npm) (malicious package)
- [MAL-2025-189079](https://insights.sbomify.com/MAL-2025-189079/): Malicious code in rate-limiter-areology-dorado-apex (npm) (malicious package)
- [MAL-2025-189078](https://insights.sbomify.com/MAL-2025-189078/): Malicious code in rate-limiter-achernar-hydrogeology-antimatter (npm) (malicious package)
- [MAL-2025-189077](https://insights.sbomify.com/MAL-2025-189077/): Malicious code in rain-theta-thread-star-simulate (npm) (malicious package)
- [MAL-2025-189076](https://insights.sbomify.com/MAL-2025-189076/): Malicious code in rain-interface-java-bundle-wind (npm) (malicious package)
- [MAL-2025-189075](https://insights.sbomify.com/MAL-2025-189075/): Malicious code in rain-final-bash-bad-resolve (npm) (malicious package)
- [MAL-2025-189074](https://insights.sbomify.com/MAL-2025-189074/): Malicious code in radiometric-vega-element-ui-oortcloud (npm) (malicious package)
- [MAL-2025-189073](https://insights.sbomify.com/MAL-2025-189073/): Malicious code in radiometric-stratigraphy-nodemon-start (npm) (malicious package)
- [MAL-2025-189072](https://insights.sbomify.com/MAL-2025-189072/): Malicious code in radiometric-proxima-ophiuchus-bellatrix (npm) (malicious package)
- [MAL-2025-189071](https://insights.sbomify.com/MAL-2025-189071/): Malicious code in radiometric-nova-rocket-transport (npm) (malicious package)
- [MAL-2025-189070](https://insights.sbomify.com/MAL-2025-189070/): Malicious code in radiometric-native-adonis-cygnus (npm) (malicious package)
- [MAL-2025-18907](https://insights.sbomify.com/MAL-2025-18907/): Malicious code in dsfserewkbaax (npm) (malicious package)
- [MAL-2025-189069](https://insights.sbomify.com/MAL-2025-189069/): Malicious code in radiometric-csrf-odin-tool (npm) (malicious package)
- [MAL-2025-189068](https://insights.sbomify.com/MAL-2025-189068/): Malicious code in radioastronomy-zooarchaeology-got-magnetar (npm) (malicious package)
- [MAL-2025-189067](https://insights.sbomify.com/MAL-2025-189067/): Malicious code in radioastronomy-readable-proxima-sadr (npm) (malicious package)
- [MAL-2025-189066](https://insights.sbomify.com/MAL-2025-189066/): Malicious code in radioastronomy-photon-eslint-apollo (npm) (malicious package)
- [MAL-2025-189065](https://insights.sbomify.com/MAL-2025-189065/): Malicious code in radioastronomy-mongoose-inquirer-hyperion (npm) (malicious package)
- [MAL-2025-189064](https://insights.sbomify.com/MAL-2025-189064/): Malicious code in radioastronomy-holography-express-avior (npm) (malicious package)
- [MAL-2025-189063](https://insights.sbomify.com/MAL-2025-189063/): Malicious code in radioastronomy-eventhoriz-thuban-kinetic (npm) (malicious package)
- [MAL-2025-189062](https://insights.sbomify.com/MAL-2025-189062/): Malicious code in radioastronomy-eslint-plugin-procyon-kastra (npm) (malicious package)
- [MAL-2025-189061](https://insights.sbomify.com/MAL-2025-189061/): Malicious code in radioastronomy-augmentedreality-library-style-loader (npm) (malicious package)
- [MAL-2025-189060](https://insights.sbomify.com/MAL-2025-189060/): Malicious code in radiant-toml-primatology-dotenv-safe (npm) (malicious package)
- [MAL-2025-18906](https://insights.sbomify.com/MAL-2025-18906/): Malicious code in dsfserewkbaaw (npm) (malicious package)
- [MAL-2025-189059](https://insights.sbomify.com/MAL-2025-189059/): Malicious code in radiant-relay-castor-bulma (npm) (malicious package)
- [MAL-2025-189058](https://insights.sbomify.com/MAL-2025-189058/): Malicious code in radiant-on-oscillation-indus (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/942/