# Vulnerabilities published in 2025


- [MAL-2025-22104](https://insights.sbomify.com/MAL-2025-22104/): Malicious code in hackywaky (npm) (malicious package)
- [MAL-2025-22103](https://insights.sbomify.com/MAL-2025-22103/): Malicious code in hackvault (npm) (malicious package)
- [MAL-2025-22102](https://insights.sbomify.com/MAL-2025-22102/): Malicious code in hackuoft (npm) (malicious package)
- [MAL-2025-22101](https://insights.sbomify.com/MAL-2025-22101/): Malicious code in hackua (npm) (malicious package)
- [MAL-2025-22100](https://insights.sbomify.com/MAL-2025-22100/): Malicious code in hacktunes (npm) (malicious package)
- [MAL-2025-2210](https://insights.sbomify.com/MAL-2025-2210/): Malicious code in poc-genrateed-by-noob (RubyGems) (malicious package)
- [MAL-2025-221](https://insights.sbomify.com/MAL-2025-221/): Malicious code in prem-babu-fca (npm) (malicious package)
- [MAL-2025-22099](https://insights.sbomify.com/MAL-2025-22099/): Malicious code in hackplus (npm) (malicious package)
- [MAL-2025-22098](https://insights.sbomify.com/MAL-2025-22098/): Malicious code in hackml (npm) (malicious package)
- [MAL-2025-22097](https://insights.sbomify.com/MAL-2025-22097/): Malicious code in hacklocal (npm) (malicious package)
- [MAL-2025-22096](https://insights.sbomify.com/MAL-2025-22096/): Malicious code in hackfsu (npm) (malicious package)
- [MAL-2025-22095](https://insights.sbomify.com/MAL-2025-22095/): Malicious code in hackcdmx (npm) (malicious package)
- [MAL-2025-22094](https://insights.sbomify.com/MAL-2025-22094/): Malicious code in hack0xme (npm) (malicious package)
- [MAL-2025-22093](https://insights.sbomify.com/MAL-2025-22093/): Malicious code in hachowm (npm) (malicious package)
- [MAL-2025-22092](https://insights.sbomify.com/MAL-2025-22092/): Malicious code in habite (npm) (malicious package)
- [MAL-2025-22091](https://insights.sbomify.com/MAL-2025-22091/): Malicious code in habblitz (npm) (malicious package)
- [MAL-2025-22090](https://insights.sbomify.com/MAL-2025-22090/): Malicious code in habarihub (npm) (malicious package)
- [MAL-2025-2209](https://insights.sbomify.com/MAL-2025-2209/): Malicious code in poc-by-shahwar (RubyGems) (malicious package)
- [MAL-2025-22089](https://insights.sbomify.com/MAL-2025-22089/): Malicious code in haba-tea (npm) (malicious package)
- [MAL-2025-22088](https://insights.sbomify.com/MAL-2025-22088/): Malicious code in h65vd2 (npm) (malicious package)
- [MAL-2025-22087](https://insights.sbomify.com/MAL-2025-22087/): Malicious code in h4x0r-dz01 (npm) (malicious package)
- [MAL-2025-22086](https://insights.sbomify.com/MAL-2025-22086/): Malicious code in h4x0r-dz-test (npm) (malicious package)
- [MAL-2025-22085](https://insights.sbomify.com/MAL-2025-22085/): Malicious code in h2-test-remix-oxygen (npm) (malicious package)
- [MAL-2025-22084](https://insights.sbomify.com/MAL-2025-22084/): Malicious code in h2-test-hydrogen-remix (npm) (malicious package)
- [MAL-2025-22083](https://insights.sbomify.com/MAL-2025-22083/): Malicious code in h2-test-hydrogen (npm) (malicious package)
- [MAL-2025-22082](https://insights.sbomify.com/MAL-2025-22082/): Malicious code in h1-cli-ext-storage-vault (npm) (malicious package)
- [MAL-2025-22081](https://insights.sbomify.com/MAL-2025-22081/): Malicious code in h1-cli-ext-root-openapi-generator (npm) (malicious package)
- [MAL-2025-22080](https://insights.sbomify.com/MAL-2025-22080/): Malicious code in h1-cli-ext-root-auth (npm) (malicious package)
- [MAL-2025-2208](https://insights.sbomify.com/MAL-2025-2208/): Malicious code in evil_gem (RubyGems) (malicious package)
- [MAL-2025-22079](https://insights.sbomify.com/MAL-2025-22079/): Malicious code in h1-cli-ext-iam-project-select (npm) (malicious package)
- [MAL-2025-22078](https://insights.sbomify.com/MAL-2025-22078/): Malicious code in h1-cli-device-node (npm) (malicious package)
- [MAL-2025-22077](https://insights.sbomify.com/MAL-2025-22077/): Malicious code in h1-cli-device-browser (npm) (malicious package)
- [MAL-2025-22076](https://insights.sbomify.com/MAL-2025-22076/): Malicious code in h1-cli-core (npm) (malicious package)
- [MAL-2025-22075](https://insights.sbomify.com/MAL-2025-22075/): Malicious code in gzkgame (npm) (malicious package)
- [MAL-2025-22074](https://insights.sbomify.com/MAL-2025-22074/): Malicious code in gyptjwbcknamkfqr (npm) (malicious package)
- [MAL-2025-22073](https://insights.sbomify.com/MAL-2025-22073/): Malicious code in gymarb (npm) (malicious package)
- [MAL-2025-22072](https://insights.sbomify.com/MAL-2025-22072/): Malicious code in gym-http-api (npm) (malicious package)
- [MAL-2025-22071](https://insights.sbomify.com/MAL-2025-22071/): Malicious code in gyf-api-game-username (npm) (malicious package)
- [MAL-2025-22070](https://insights.sbomify.com/MAL-2025-22070/): Malicious code in gwodot (npm) (malicious package)
- [MAL-2025-2207](https://insights.sbomify.com/MAL-2025-2207/): Malicious code in rif-lumino (npm) (malicious package)
- [MAL-2025-22069](https://insights.sbomify.com/MAL-2025-22069/): Malicious code in gvdesign (npm) (malicious package)
- [MAL-2025-22068](https://insights.sbomify.com/MAL-2025-22068/): Malicious code in gvargas (npm) (malicious package)
- [MAL-2025-22067](https://insights.sbomify.com/MAL-2025-22067/): Malicious code in gus.js (npm) (malicious package)
- [MAL-2025-22066](https://insights.sbomify.com/MAL-2025-22066/): Malicious code in gurucoder (npm) (malicious package)
- [MAL-2025-22065](https://insights.sbomify.com/MAL-2025-22065/): Malicious code in guru-service-js-client (npm) (malicious package)
- [MAL-2025-22064](https://insights.sbomify.com/MAL-2025-22064/): Malicious code in guru-react-native-widgets (npm) (malicious package)
- [MAL-2025-22063](https://insights.sbomify.com/MAL-2025-22063/): Malicious code in guru-common-kotlin-js (npm) (malicious package)
- [MAL-2025-22062](https://insights.sbomify.com/MAL-2025-22062/): Malicious code in guqxzrkivseotpal (npm) (malicious package)
- [MAL-2025-22061](https://insights.sbomify.com/MAL-2025-22061/): Malicious code in gunnerbot (npm) (malicious package)
- [MAL-2025-22060](https://insights.sbomify.com/MAL-2025-22060/): Malicious code in guniver (npm) (malicious package)
- [MAL-2025-2206](https://insights.sbomify.com/MAL-2025-2206/): Malicious code in @domons/test (npm) (malicious package)
- [MAL-2025-22059](https://insights.sbomify.com/MAL-2025-22059/): Malicious code in GumbaJS (npm) (malicious package)
- [MAL-2025-22058](https://insights.sbomify.com/MAL-2025-22058/): Malicious code in gulp-sitecore (npm) (malicious package)
- [MAL-2025-22057](https://insights.sbomify.com/MAL-2025-22057/): Malicious code in gulp-putalioss (npm) (malicious package)
- [MAL-2025-22056](https://insights.sbomify.com/MAL-2025-22056/): Malicious code in gulp-nts-uit-index-helper (npm) (malicious package)
- [MAL-2025-22055](https://insights.sbomify.com/MAL-2025-22055/): Malicious code in gulp-mocha-electron (npm) (malicious package)
- [MAL-2025-22054](https://insights.sbomify.com/MAL-2025-22054/): Malicious code in gulp-jspm-fix (npm) (malicious package)
- [MAL-2025-22053](https://insights.sbomify.com/MAL-2025-22053/): Malicious code in gulp-javascriptobfuscator-ficik (npm) (malicious package)
- [MAL-2025-22052](https://insights.sbomify.com/MAL-2025-22052/): Malicious code in gulp-ile-contents-to-keys (npm) (malicious package)
- [MAL-2025-22051](https://insights.sbomify.com/MAL-2025-22051/): Malicious code in gulp-helios-adonis-helmet (npm) (malicious package)
- [MAL-2025-22050](https://insights.sbomify.com/MAL-2025-22050/): Malicious code in gulp-es6-browserfy-boilerplate (npm) (malicious package)
- [MAL-2025-2205](https://insights.sbomify.com/MAL-2025-2205/): Malicious code in wrap.scrt.network (npm) (malicious package)
- [MAL-2025-22049](https://insights.sbomify.com/MAL-2025-22049/): Malicious code in gulp-dslash (npm) (malicious package)
- [MAL-2025-22048](https://insights.sbomify.com/MAL-2025-22048/): Malicious code in gulp-data-mask (npm) (malicious package)
- [MAL-2025-22047](https://insights.sbomify.com/MAL-2025-22047/): Malicious code in gulp-css-colorseur (npm) (malicious package)
- [MAL-2025-22046](https://insights.sbomify.com/MAL-2025-22046/): Malicious code in gulp-coveralls2 (npm) (malicious package)
- [MAL-2025-22045](https://insights.sbomify.com/MAL-2025-22045/): Malicious code in gulp-angular-templatecache-ionic (npm) (malicious package)
- [MAL-2025-22044](https://insights.sbomify.com/MAL-2025-22044/): Malicious code in gulp-alivevn-os-del-files (npm) (malicious package)
- [MAL-2025-22043](https://insights.sbomify.com/MAL-2025-22043/): Malicious code in gulp-airbnb-child-process-pulsar (npm) (malicious package)
- [MAL-2025-22042](https://insights.sbomify.com/MAL-2025-22042/): Malicious code in guimain (npm) (malicious package)
- [MAL-2025-22041](https://insights.sbomify.com/MAL-2025-22041/): Malicious code in guildview (npm) (malicious package)
- [MAL-2025-22040](https://insights.sbomify.com/MAL-2025-22040/): Malicious code in guidamon (npm) (malicious package)
- [MAL-2025-2204](https://insights.sbomify.com/MAL-2025-2204/): Malicious code in depx-contract (npm) (malicious package)
- [MAL-2025-22039](https://insights.sbomify.com/MAL-2025-22039/): Malicious code in guestia (npm) (malicious package)
- [MAL-2025-22038](https://insights.sbomify.com/MAL-2025-22038/): Malicious code in guestbook (npm) (malicious package)
- [MAL-2025-22037](https://insights.sbomify.com/MAL-2025-22037/): Malicious code in guessxy (npm) (malicious package)
- [MAL-2025-22036](https://insights.sbomify.com/MAL-2025-22036/): Malicious code in guess_the_number-732161 (npm) (malicious package)
- [MAL-2025-22035](https://insights.sbomify.com/MAL-2025-22035/): Malicious code in guess-zodiac (npm) (malicious package)
- [MAL-2025-22034](https://insights.sbomify.com/MAL-2025-22034/): Malicious code in guess-smartphone (npm) (malicious package)
- [MAL-2025-22033](https://insights.sbomify.com/MAL-2025-22033/): Malicious code in guess-pets (npm) (malicious package)
- [MAL-2025-22032](https://insights.sbomify.com/MAL-2025-22032/): Malicious code in guess-iq (npm) (malicious package)
- [MAL-2025-22031](https://insights.sbomify.com/MAL-2025-22031/): Malicious code in guess-ideology (npm) (malicious package)
- [MAL-2025-22030](https://insights.sbomify.com/MAL-2025-22030/): Malicious code in gtunes (npm) (malicious package)
- [MAL-2025-2203](https://insights.sbomify.com/MAL-2025-2203/): Malicious code in midle-contracts (npm) (malicious package)
- [MAL-2025-22029](https://insights.sbomify.com/MAL-2025-22029/): Malicious code in gtracer (npm) (malicious package)
- [MAL-2025-22028](https://insights.sbomify.com/MAL-2025-22028/): Malicious code in gtldlist (npm) (malicious package)
- [MAL-2025-22027](https://insights.sbomify.com/MAL-2025-22027/): Malicious code in gtjapp (npm) (malicious package)
- [MAL-2025-22026](https://insights.sbomify.com/MAL-2025-22026/): Malicious code in gtejmhrvkukqonps (npm) (malicious package)
- [MAL-2025-22025](https://insights.sbomify.com/MAL-2025-22025/): Malicious code in gt.ui.common (npm) (malicious package)
- [MAL-2025-22024](https://insights.sbomify.com/MAL-2025-22024/): Malicious code in gt.module.shipping-orders (npm) (malicious package)
- [MAL-2025-22023](https://insights.sbomify.com/MAL-2025-22023/): Malicious code in gt.framework (npm) (malicious package)
- [MAL-2025-22022](https://insights.sbomify.com/MAL-2025-22022/): Malicious code in gswbdkazmynvexrq (npm) (malicious package)
- [MAL-2025-22021](https://insights.sbomify.com/MAL-2025-22021/): Malicious code in gstrtpfec (npm) (malicious package)
- [MAL-2025-22020](https://insights.sbomify.com/MAL-2025-22020/): Malicious code in gstream-consumer (npm) (malicious package)
- [MAL-2025-2202](https://insights.sbomify.com/MAL-2025-2202/): Malicious code in opstooling-js-style (npm) (malicious package)
- [MAL-2025-22019](https://insights.sbomify.com/MAL-2025-22019/): Malicious code in gstmain (npm) (malicious package)
- [MAL-2025-22018](https://insights.sbomify.com/MAL-2025-22018/): Malicious code in gsteal (npm) (malicious package)
- [MAL-2025-22017](https://insights.sbomify.com/MAL-2025-22017/): Malicious code in gsmanager (npm) (malicious package)
- [MAL-2025-22016](https://insights.sbomify.com/MAL-2025-22016/): Malicious code in gskowron2 (npm) (malicious package)
- [MAL-2025-22015](https://insights.sbomify.com/MAL-2025-22015/): Malicious code in gsg (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/868/