# Vulnerabilities published in 2025 - [MAL-2025-44471](https://insights.sbomify.com/MAL-2025-44471/): Malicious code in group-coal-addition (npm) (malicious package) - [MAL-2025-44470](https://insights.sbomify.com/MAL-2025-44470/): Malicious code in gridsome-parsec-perseus-robotics (npm) (malicious package) - [MAL-2025-4447](https://insights.sbomify.com/MAL-2025-4447/): Malicious code in prisma-clients (npm) (malicious package) - [MAL-2025-44469](https://insights.sbomify.com/MAL-2025-44469/): Malicious code in green-noted-purpose (npm) (malicious package) - [MAL-2025-44468](https://insights.sbomify.com/MAL-2025-44468/): Malicious code in greatfilter-multiverse-antares-lacerta (npm) (malicious package) - [MAL-2025-44467](https://insights.sbomify.com/MAL-2025-44467/): Malicious code in greatest-here-musical (npm) (malicious package) - [MAL-2025-44466](https://insights.sbomify.com/MAL-2025-44466/): Malicious code in gravity-optimize-css-assets-webpack-plugin-selenium-rollup-plugin (npm) (malicious package) - [MAL-2025-44465](https://insights.sbomify.com/MAL-2025-44465/): Malicious code in gravity-jest-orbit-dione (npm) (malicious package) - [MAL-2025-44464](https://insights.sbomify.com/MAL-2025-44464/): Malicious code in gravity-exec-geochemistry-jwt (npm) (malicious package) - [MAL-2025-44463](https://insights.sbomify.com/MAL-2025-44463/): Malicious code in gravitationalwave-corvus-dotenv-parse-variables-xo (npm) (malicious package) - [MAL-2025-44462](https://insights.sbomify.com/MAL-2025-44462/): Malicious code in graph-specific-under (npm) (malicious package) - [MAL-2025-44461](https://insights.sbomify.com/MAL-2025-44461/): Malicious code in grape-yankee-foxtrot-mrrvy (npm) (malicious package) - [MAL-2025-44460](https://insights.sbomify.com/MAL-2025-44460/): Malicious code in grape-whiskey-quebec-sxnws (npm) (malicious package) - [MAL-2025-4446](https://insights.sbomify.com/MAL-2025-4446/): Malicious code in osuny (npm) (malicious package) - [MAL-2025-44459](https://insights.sbomify.com/MAL-2025-44459/): Malicious code in grape-quebec-mango-ygfow (npm) (malicious package) - [MAL-2025-44458](https://insights.sbomify.com/MAL-2025-44458/): Malicious code in grape-papaya-victor-wpjmv (npm) (malicious package) - [MAL-2025-44457](https://insights.sbomify.com/MAL-2025-44457/): Malicious code in grape-echo-tangerine-xtwns (npm) (malicious package) - [MAL-2025-44456](https://insights.sbomify.com/MAL-2025-44456/): Malicious code in grape-banana-romeo-dpkdl (npm) (malicious package) - [MAL-2025-44455](https://insights.sbomify.com/MAL-2025-44455/): Malicious code in government-doing-union (npm) (malicious package) - [MAL-2025-44454](https://insights.sbomify.com/MAL-2025-44454/): Malicious code in gorge-tiger-dil952-project (npm) (malicious package) - [MAL-2025-44453](https://insights.sbomify.com/MAL-2025-44453/): Malicious code in google-wormhole-xerxes-spinner (npm) (malicious package) - [MAL-2025-44452](https://insights.sbomify.com/MAL-2025-44452/): Malicious code in google-play-card-redeem992 (npm) (malicious package) - [MAL-2025-44451](https://insights.sbomify.com/MAL-2025-44451/): Malicious code in google-play-card-balance432 (npm) (malicious package) - [MAL-2025-44450](https://insights.sbomify.com/MAL-2025-44450/): Malicious code in google-play-card-balance353 (npm) (malicious package) - [MAL-2025-4445](https://insights.sbomify.com/MAL-2025-4445/): Malicious code in nsubstitute (npm) (malicious package) - [MAL-2025-44449](https://insights.sbomify.com/MAL-2025-44449/): Malicious code in golf-yam-watermelon-dbiom (npm) (malicious package) - [MAL-2025-44448](https://insights.sbomify.com/MAL-2025-44448/): Malicious code in golf-xigua-vanilla-vldhx (npm) (malicious package) - [MAL-2025-44447](https://insights.sbomify.com/MAL-2025-44447/): Malicious code in golf-strawberry-orange-dmqgx (npm) (malicious package) - [MAL-2025-44446](https://insights.sbomify.com/MAL-2025-44446/): Malicious code in golf-strawberry-apple-dkiio (npm) (malicious package) - [MAL-2025-44445](https://insights.sbomify.com/MAL-2025-44445/): Malicious code in golf-nectarine-kilo-trund (npm) (malicious package) - [MAL-2025-44444](https://insights.sbomify.com/MAL-2025-44444/): Malicious code in golf-alpha-banana-oyueb (npm) (malicious package) - [MAL-2025-44443](https://insights.sbomify.com/MAL-2025-44443/): Malicious code in glow_w6uwy_ybigq_sanctuary (npm) (malicious package) - [MAL-2025-44442](https://insights.sbomify.com/MAL-2025-44442/): Malicious code in globe-won-stop (npm) (malicious package) - [MAL-2025-44441](https://insights.sbomify.com/MAL-2025-44441/): Malicious code in global-xerxes-quark-cosmicray (npm) (malicious package) - [MAL-2025-44440](https://insights.sbomify.com/MAL-2025-44440/): Malicious code in glade_ux87k_lu4wz_plume (npm) (malicious package) - [MAL-2025-4444](https://insights.sbomify.com/MAL-2025-4444/): Malicious code in mxc-klinecharts (npm) (malicious package) - [MAL-2025-44439](https://insights.sbomify.com/MAL-2025-44439/): Malicious code in glade_abf5s_a8gu4_thunder (npm) (malicious package) - [MAL-2025-44438](https://insights.sbomify.com/MAL-2025-44438/): Malicious code in glade-boulder-txj683-project (npm) (malicious package) - [MAL-2025-44437](https://insights.sbomify.com/MAL-2025-44437/): Malicious code in glacier_maa9g_1km0h_whirlpool (npm) (malicious package) - [MAL-2025-44436](https://insights.sbomify.com/MAL-2025-44436/): Malicious code in glacier-albatross-kyy976-project (npm) (malicious package) - [MAL-2025-44435](https://insights.sbomify.com/MAL-2025-44435/): Malicious code in given-order-somehow (npm) (malicious package) - [MAL-2025-44434](https://insights.sbomify.com/MAL-2025-44434/): Malicious code in gita-teh85-kyuki (npm) (malicious package) - [MAL-2025-44433](https://insights.sbomify.com/MAL-2025-44433/): Malicious code in gita-teh63-kyuki (npm) (malicious package) - [MAL-2025-44432](https://insights.sbomify.com/MAL-2025-44432/): Malicious code in gita-tahutek15-breki (npm) (malicious package) - [MAL-2025-44431](https://insights.sbomify.com/MAL-2025-44431/): Malicious code in gita-sambalado79-breki (npm) (malicious package) - [MAL-2025-44430](https://insights.sbomify.com/MAL-2025-44430/): Malicious code in gita-ronde4-kyuki (npm) (malicious package) - [MAL-2025-4443](https://insights.sbomify.com/MAL-2025-4443/): Malicious code in mxc-jsbridge (npm) (malicious package) - [MAL-2025-44429](https://insights.sbomify.com/MAL-2025-44429/): Malicious code in gita-ragi35-kyuki (npm) (malicious package) - [MAL-2025-44428](https://insights.sbomify.com/MAL-2025-44428/): Malicious code in gita-papeda84-breki (npm) (malicious package) - [MAL-2025-44427](https://insights.sbomify.com/MAL-2025-44427/): Malicious code in gita-ongol-ongol51-kyuki (npm) (malicious package) - [MAL-2025-44426](https://insights.sbomify.com/MAL-2025-44426/): Malicious code in gita-mie1-kyuki (npm) (malicious package) - [MAL-2025-44425](https://insights.sbomify.com/MAL-2025-44425/): Malicious code in gita-mangut52-breki (npm) (malicious package) - [MAL-2025-44424](https://insights.sbomify.com/MAL-2025-44424/): Malicious code in gita-liwet85-breki (npm) (malicious package) - [MAL-2025-44423](https://insights.sbomify.com/MAL-2025-44423/): Malicious code in gita-lapis6-kyuki (npm) (malicious package) - [MAL-2025-44422](https://insights.sbomify.com/MAL-2025-44422/): Malicious code in gita-ketoprak52-breki (npm) (malicious package) - [MAL-2025-44421](https://insights.sbomify.com/MAL-2025-44421/): Malicious code in gita-jamblang58-breki (npm) (malicious package) - [MAL-2025-44420](https://insights.sbomify.com/MAL-2025-44420/): Malicious code in gita-buburayam80-kyuki (npm) (malicious package) - [MAL-2025-4442](https://insights.sbomify.com/MAL-2025-4442/): Malicious code in mx-admin (npm) (malicious package) - [MAL-2025-44419](https://insights.sbomify.com/MAL-2025-44419/): Malicious code in gita-brongkos26-breki (npm) (malicious package) - [MAL-2025-44418](https://insights.sbomify.com/MAL-2025-44418/): Malicious code in gita-botok82-kyuki (npm) (malicious package) - [MAL-2025-44417](https://insights.sbomify.com/MAL-2025-44417/): Malicious code in gita-bakwan91-breki (npm) (malicious package) - [MAL-2025-44416](https://insights.sbomify.com/MAL-2025-44416/): Malicious code in gita-asinan93-breki (npm) (malicious package) - [MAL-2025-44415](https://insights.sbomify.com/MAL-2025-44415/): Malicious code in gita-asinan49-breki (npm) (malicious package) - [MAL-2025-44414](https://insights.sbomify.com/MAL-2025-44414/): Malicious code in giraffe_nfho6_gkgu8_opal (npm) (malicious package) - [MAL-2025-44413](https://insights.sbomify.com/MAL-2025-44413/): Malicious code in giraffe-undertow-wtx566-project (npm) (malicious package) - [MAL-2025-44412](https://insights.sbomify.com/MAL-2025-44412/): Malicious code in giraffe-cliff-pbn989-project (npm) (malicious package) - [MAL-2025-44411](https://insights.sbomify.com/MAL-2025-44411/): Malicious code in giraffe-butterfly-ktn656-project (npm) (malicious package) - [MAL-2025-44410](https://insights.sbomify.com/MAL-2025-44410/): Malicious code in gilang-sate29-breki (npm) (malicious package) - [MAL-2025-4441](https://insights.sbomify.com/MAL-2025-4441/): Malicious code in ml-preprocessing (npm) (malicious package) - [MAL-2025-44409](https://insights.sbomify.com/MAL-2025-44409/): Malicious code in gilang-mangut13-breki (npm) (malicious package) - [MAL-2025-44408](https://insights.sbomify.com/MAL-2025-44408/): Malicious code in gilang-klipo66-breki (npm) (malicious package) - [MAL-2025-44407](https://insights.sbomify.com/MAL-2025-44407/): Malicious code in gilang-jengkol33-kyuki (npm) (malicious package) - [MAL-2025-44406](https://insights.sbomify.com/MAL-2025-44406/): Malicious code in gilang-brongkos83-breki (npm) (malicious package) - [MAL-2025-44405](https://insights.sbomify.com/MAL-2025-44405/): Malicious code in gi-ft-ca-rds-fortnite-2023-zdkzld (npm) (malicious package) - [MAL-2025-44404](https://insights.sbomify.com/MAL-2025-44404/): Malicious code in geyser_rbsl0_phg49_molecule (npm) (malicious package) - [MAL-2025-44403](https://insights.sbomify.com/MAL-2025-44403/): Malicious code in geyser_omwp6_86nj9_kaleidoscope (npm) (malicious package) - [MAL-2025-44402](https://insights.sbomify.com/MAL-2025-44402/): Malicious code in geyser_2i2ul_s0zag_vista (npm) (malicious package) - [MAL-2025-44401](https://insights.sbomify.com/MAL-2025-44401/): Malicious code in get-free-v-bucks-2023-sdkzldz (npm) (malicious package) - [MAL-2025-44400](https://insights.sbomify.com/MAL-2025-44400/): Malicious code in get-free-mobile-legends-diamonds-now-kdldz (npm) (malicious package) - [MAL-2025-4440](https://insights.sbomify.com/MAL-2025-4440/): Malicious code in mexc-cli (npm) (malicious package) - [MAL-2025-444](https://insights.sbomify.com/MAL-2025-444/): Malicious code in epicagames-gateway (npm) (malicious package) - [MAL-2025-44399](https://insights.sbomify.com/MAL-2025-44399/): Malicious code in get-free-coin-master-spins-march-2023-djazdk (npm) (malicious package) - [MAL-2025-44398](https://insights.sbomify.com/MAL-2025-44398/): Malicious code in get-10k-coin-master-free-spins-efdkeld (npm) (malicious package) - [MAL-2025-44397](https://insights.sbomify.com/MAL-2025-44397/): Malicious code in geren-yuqunti-shijiande-benzhi (npm) (malicious package) - [MAL-2025-44396](https://insights.sbomify.com/MAL-2025-44396/): Malicious code in geren-shixiangde-benzhi (npm) (malicious package) - [MAL-2025-44395](https://insights.sbomify.com/MAL-2025-44395/): Malicious code in geodynamo-start-umbra-abiogenesis (npm) (malicious package) - [MAL-2025-44394](https://insights.sbomify.com/MAL-2025-44394/): Malicious code in geodynamo-build-passport-writable (npm) (malicious package) - [MAL-2025-44393](https://insights.sbomify.com/MAL-2025-44393/): Malicious code in geochronology-weywot-higgs-geochemistry (npm) (malicious package) - [MAL-2025-44392](https://insights.sbomify.com/MAL-2025-44392/): Malicious code in geochemistry-nova-galaxy-perturbation (npm) (malicious package) - [MAL-2025-44391](https://insights.sbomify.com/MAL-2025-44391/): Malicious code in geochemistry-neptunology-abiogenesis-planckscale (npm) (malicious package) - [MAL-2025-44390](https://insights.sbomify.com/MAL-2025-44390/): Malicious code in geoarchaeology-lint-staged-primatology-exosphere (npm) (malicious package) - [MAL-2025-4439](https://insights.sbomify.com/MAL-2025-4439/): Malicious code in logs-buffer (npm) (malicious package) - [MAL-2025-44389](https://insights.sbomify.com/MAL-2025-44389/): Malicious code in generator-roblox-robux-unlimited-codes-dkdedz (npm) (malicious package) - [MAL-2025-44388](https://insights.sbomify.com/MAL-2025-44388/): Malicious code in generator-coin-master-spins-2023-dkzdlzh (npm) (malicious package) - [MAL-2025-44387](https://insights.sbomify.com/MAL-2025-44387/): Malicious code in generate-unlimited-coin-master-spins-march-2023-dkdzdz (npm) (malicious package) - [MAL-2025-44386](https://insights.sbomify.com/MAL-2025-44386/): Malicious code in generate-100k-free-coin-master-spins-now-efezfez (npm) (malicious package) - [MAL-2025-44385](https://insights.sbomify.com/MAL-2025-44385/): Malicious code in gemini-zenith-protractor-eridanus (npm) (malicious package) - [MAL-2025-44384](https://insights.sbomify.com/MAL-2025-44384/): Malicious code in gemini-sails-corvus-relay (npm) (malicious package) - [MAL-2025-44383](https://insights.sbomify.com/MAL-2025-44383/): Malicious code in geeksforgeeks-js-zh (npm) (malicious package) - [MAL-2025-44382](https://insights.sbomify.com/MAL-2025-44382/): Malicious code in gediao-shehui-dengji-yushenghuo-pinwei (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/620/