# Vulnerabilities published in 2025


- [MAL-2025-22014](https://insights.sbomify.com/MAL-2025-22014/): Malicious code in gsfrt4 (npm) (malicious package)
- [MAL-2025-22013](https://insights.sbomify.com/MAL-2025-22013/): Malicious code in gsf.document-list (npm) (malicious package)
- [MAL-2025-22012](https://insights.sbomify.com/MAL-2025-22012/): Malicious code in gsf.certificate-list (npm) (malicious package)
- [MAL-2025-22011](https://insights.sbomify.com/MAL-2025-22011/): Malicious code in gsf.billing-summary (npm) (malicious package)
- [MAL-2025-22010](https://insights.sbomify.com/MAL-2025-22010/): Malicious code in gsd-common (npm) (malicious package)
- [MAL-2025-2201](https://insights.sbomify.com/MAL-2025-2201/): Malicious code in auth0-ai-js (npm) (malicious package)
- [MAL-2025-22009](https://insights.sbomify.com/MAL-2025-22009/): Malicious code in grzwxodcbpynuhta (npm) (malicious package)
- [MAL-2025-22008](https://insights.sbomify.com/MAL-2025-22008/): Malicious code in gryfter (npm) (malicious package)
- [MAL-2025-22007](https://insights.sbomify.com/MAL-2025-22007/): Malicious code in grutils (npm) (malicious package)
- [MAL-2025-22006](https://insights.sbomify.com/MAL-2025-22006/): Malicious code in grus-css-loader-javascript-elektra (npm) (malicious package)
- [MAL-2025-22005](https://insights.sbomify.com/MAL-2025-22005/): Malicious code in grus-asthenosphere-uglify-js-corvus (npm) (malicious package)
- [MAL-2025-22004](https://insights.sbomify.com/MAL-2025-22004/): Malicious code in grunt-zeptojs (npm) (malicious package)
- [MAL-2025-22003](https://insights.sbomify.com/MAL-2025-22003/): Malicious code in grunt-vox-svg-prepper (npm) (malicious package)
- [MAL-2025-22002](https://insights.sbomify.com/MAL-2025-22002/): Malicious code in grunt-vox-asset-bundle-parser (npm) (malicious package)
- [MAL-2025-22001](https://insights.sbomify.com/MAL-2025-22001/): Malicious code in grunt-vagrant-ssh (npm) (malicious package)
- [MAL-2025-22000](https://insights.sbomify.com/MAL-2025-22000/): Malicious code in grunt-stream-pavo-version (npm) (malicious package)
- [MAL-2025-2200](https://insights.sbomify.com/MAL-2025-2200/): Malicious code in zz-react-custom-widget (npm) (malicious package)
- [MAL-2025-220](https://insights.sbomify.com/MAL-2025-220/): Malicious code in prem-babu-api (npm) (malicious package)
- [MAL-2025-22](https://insights.sbomify.com/MAL-2025-22/): Malicious code in @vf-org/smapi-js-core (npm) (malicious package)
- [MAL-2025-21999](https://insights.sbomify.com/MAL-2025-21999/): Malicious code in grunt-spinner-janus-tool (npm) (malicious package)
- [MAL-2025-21998](https://insights.sbomify.com/MAL-2025-21998/): Malicious code in grunt-smart-download (npm) (malicious package)
- [MAL-2025-21997](https://insights.sbomify.com/MAL-2025-21997/): Malicious code in grunt-schema-chalk-nodejs (npm) (malicious package)
- [MAL-2025-21996](https://insights.sbomify.com/MAL-2025-21996/): Malicious code in grunt-nwabap-ui5uploader2 (npm) (malicious package)
- [MAL-2025-21995](https://insights.sbomify.com/MAL-2025-21995/): Malicious code in grunt-mdx-upgrade-rollup (npm) (malicious package)
- [MAL-2025-21994](https://insights.sbomify.com/MAL-2025-21994/): Malicious code in grunt-html2requirejs (npm) (malicious package)
- [MAL-2025-21993](https://insights.sbomify.com/MAL-2025-21993/): Malicious code in grunt-alphard-ionosphere-nebula (npm) (malicious package)
- [MAL-2025-21992](https://insights.sbomify.com/MAL-2025-21992/): Malicious code in grubhero (npm) (malicious package)
- [MAL-2025-21991](https://insights.sbomify.com/MAL-2025-21991/): Malicious code in growunit (npm) (malicious package)
- [MAL-2025-21990](https://insights.sbomify.com/MAL-2025-21990/): Malicious code in growtower (npm) (malicious package)
- [MAL-2025-2199](https://insights.sbomify.com/MAL-2025-2199/): Malicious code in zz-aipage-widget (npm) (malicious package)
- [MAL-2025-21989](https://insights.sbomify.com/MAL-2025-21989/): Malicious code in growthbook-cli (npm) (malicious package)
- [MAL-2025-21988](https://insights.sbomify.com/MAL-2025-21988/): Malicious code in growling (npm) (malicious package)
- [MAL-2025-21987](https://insights.sbomify.com/MAL-2025-21987/): Malicious code in grovie (npm) (malicious package)
- [MAL-2025-21986](https://insights.sbomify.com/MAL-2025-21986/): Malicious code in grove_ju8yd_82rgx_ocean (npm) (malicious package)
- [MAL-2025-21985](https://insights.sbomify.com/MAL-2025-21985/): Malicious code in grove_icuqw_b7g43_yew (npm) (malicious package)
- [MAL-2025-21984](https://insights.sbomify.com/MAL-2025-21984/): Malicious code in grove_cpiqf_td252_jasmine (npm) (malicious package)
- [MAL-2025-21983](https://insights.sbomify.com/MAL-2025-21983/): Malicious code in grove_a1hs3_dm8nr_kaleidoscope (npm) (malicious package)
- [MAL-2025-21982](https://insights.sbomify.com/MAL-2025-21982/): Malicious code in grove_7ox32_tewvq_bloom (npm) (malicious package)
- [MAL-2025-21981](https://insights.sbomify.com/MAL-2025-21981/): Malicious code in grove_6ii0a_be99b_tundra (npm) (malicious package)
- [MAL-2025-21980](https://insights.sbomify.com/MAL-2025-21980/): Malicious code in grove_1cieh_0ae8a_crown (npm) (malicious package)
- [MAL-2025-2198](https://insights.sbomify.com/MAL-2025-2198/): Malicious code in vscode-ps1 (npm) (malicious package)
- [MAL-2025-21979](https://insights.sbomify.com/MAL-2025-21979/): Malicious code in grove-zymwh-heuk3-xylophone-project (npm) (malicious package)
- [MAL-2025-21978](https://insights.sbomify.com/MAL-2025-21978/): Malicious code in grove-zodiac-jgi174-project (npm) (malicious package)
- [MAL-2025-21977](https://insights.sbomify.com/MAL-2025-21977/): Malicious code in grove-zeppelin-npw743-project (npm) (malicious package)
- [MAL-2025-21976](https://insights.sbomify.com/MAL-2025-21976/): Malicious code in grove-z7hek-zg9rl-wisp-project (npm) (malicious package)
- [MAL-2025-21975](https://insights.sbomify.com/MAL-2025-21975/): Malicious code in grove-vf653-z6vg0-yonder-project (npm) (malicious package)
- [MAL-2025-21974](https://insights.sbomify.com/MAL-2025-21974/): Malicious code in grove-uogxw-q0lv4-iceberg-project (npm) (malicious package)
- [MAL-2025-21973](https://insights.sbomify.com/MAL-2025-21973/): Malicious code in grove-unicorn-yiu798-project (npm) (malicious package)
- [MAL-2025-21972](https://insights.sbomify.com/MAL-2025-21972/): Malicious code in grove-sunset-pkg228-project (npm) (malicious package)
- [MAL-2025-21971](https://insights.sbomify.com/MAL-2025-21971/): Malicious code in grove-star-pij476-project (npm) (malicious package)
- [MAL-2025-21970](https://insights.sbomify.com/MAL-2025-21970/): Malicious code in grove-rainbow-tzs205-project (npm) (malicious package)
- [MAL-2025-2197](https://insights.sbomify.com/MAL-2025-2197/): Malicious code in totem-project-website (npm) (malicious package)
- [MAL-2025-21969](https://insights.sbomify.com/MAL-2025-21969/): Malicious code in grove-quasar-keb769-project (npm) (malicious package)
- [MAL-2025-21968](https://insights.sbomify.com/MAL-2025-21968/): Malicious code in grove-qsk5k-e3xsm-pinnacle-project (npm) (malicious package)
- [MAL-2025-21967](https://insights.sbomify.com/MAL-2025-21967/): Malicious code in grove-qq77w-xavbc-coral-project (npm) (malicious package)
- [MAL-2025-21966](https://insights.sbomify.com/MAL-2025-21966/): Malicious code in grove-o6s45-ig67e-thunder-project (npm) (malicious package)
- [MAL-2025-21965](https://insights.sbomify.com/MAL-2025-21965/): Malicious code in grove-labyrinth-bns772-project (npm) (malicious package)
- [MAL-2025-21964](https://insights.sbomify.com/MAL-2025-21964/): Malicious code in grove-ky3yz-x9ge8-indigo-project (npm) (malicious package)
- [MAL-2025-21963](https://insights.sbomify.com/MAL-2025-21963/): Malicious code in grove-jellyfish-dsy041-project (npm) (malicious package)
- [MAL-2025-21962](https://insights.sbomify.com/MAL-2025-21962/): Malicious code in grove-hill-ica923-project (npm) (malicious package)
- [MAL-2025-21961](https://insights.sbomify.com/MAL-2025-21961/): Malicious code in grove-hill-anq301-project (npm) (malicious package)
- [MAL-2025-21960](https://insights.sbomify.com/MAL-2025-21960/): Malicious code in grove-hiim3-2wce6-drift-project (npm) (malicious package)
- [MAL-2025-2196](https://insights.sbomify.com/MAL-2025-2196/): Malicious code in test-hahahaha-rce3 (npm) (malicious package)
- [MAL-2025-21959](https://insights.sbomify.com/MAL-2025-21959/): Malicious code in grove-gorge-kav018-project (npm) (malicious package)
- [MAL-2025-21958](https://insights.sbomify.com/MAL-2025-21958/): Malicious code in grove-fuk89-p24zm-birch-project (npm) (malicious package)
- [MAL-2025-21957](https://insights.sbomify.com/MAL-2025-21957/): Malicious code in grove-emerald-ggf347-project (npm) (malicious package)
- [MAL-2025-21956](https://insights.sbomify.com/MAL-2025-21956/): Malicious code in grove-e0w0k-o6e8h-knoll-project (npm) (malicious package)
- [MAL-2025-21955](https://insights.sbomify.com/MAL-2025-21955/): Malicious code in grove-dove-hjg826-project (npm) (malicious package)
- [MAL-2025-21954](https://insights.sbomify.com/MAL-2025-21954/): Malicious code in grove-czy3n-0pipo-yeti-project (npm) (malicious package)
- [MAL-2025-21953](https://insights.sbomify.com/MAL-2025-21953/): Malicious code in grove-blossom-fes057-project (npm) (malicious package)
- [MAL-2025-21952](https://insights.sbomify.com/MAL-2025-21952/): Malicious code in grove-63gol-93zth-silk-project (npm) (malicious package)
- [MAL-2025-21951](https://insights.sbomify.com/MAL-2025-21951/): Malicious code in grove-2yjlo-1a6ph-wisp-project (npm) (malicious package)
- [MAL-2025-21950](https://insights.sbomify.com/MAL-2025-21950/): Malicious code in grove-1tzhe-m74x3-ash-project (npm) (malicious package)
- [MAL-2025-2195](https://insights.sbomify.com/MAL-2025-2195/): Malicious code in test-hahahaha-rce2 (npm) (malicious package)
- [MAL-2025-21949](https://insights.sbomify.com/MAL-2025-21949/): Malicious code in grove-1ma73-t0gy9-crescent-project (npm) (malicious package)
- [MAL-2025-21948](https://insights.sbomify.com/MAL-2025-21948/): Malicious code in grove-0ynpt-5kta6-breeze-project (npm) (malicious package)
- [MAL-2025-21947](https://insights.sbomify.com/MAL-2025-21947/): Malicious code in groupseq (npm) (malicious package)
- [MAL-2025-21946](https://insights.sbomify.com/MAL-2025-21946/): Malicious code in groupon-social (npm) (malicious package)
- [MAL-2025-21945](https://insights.sbomify.com/MAL-2025-21945/): Malicious code in groupmessagejs (npm) (malicious package)
- [MAL-2025-21944](https://insights.sbomify.com/MAL-2025-21944/): Malicious code in groupfs (npm) (malicious package)
- [MAL-2025-21943](https://insights.sbomify.com/MAL-2025-21943/): Malicious code in groupe00001_henritran-nguyen_tp3 (npm) (malicious package)
- [MAL-2025-21942](https://insights.sbomify.com/MAL-2025-21942/): Malicious code in grosvenor (npm) (malicious package)
- [MAL-2025-21941](https://insights.sbomify.com/MAL-2025-21941/): Malicious code in groq-appgen (npm) (malicious package)
- [MAL-2025-21940](https://insights.sbomify.com/MAL-2025-21940/): Malicious code in groovyxsd (npm) (malicious package)
- [MAL-2025-2194](https://insights.sbomify.com/MAL-2025-2194/): Malicious code in test-hahahaha-rce1 (npm) (malicious package)
- [MAL-2025-21939](https://insights.sbomify.com/MAL-2025-21939/): Malicious code in groots-cli (npm) (malicious package)
- [MAL-2025-21938](https://insights.sbomify.com/MAL-2025-21938/): Malicious code in groopy (npm) (malicious package)
- [MAL-2025-21937](https://insights.sbomify.com/MAL-2025-21937/): Malicious code in groceboom (npm) (malicious package)
- [MAL-2025-21936](https://insights.sbomify.com/MAL-2025-21936/): Malicious code in grmakers (npm) (malicious package)
- [MAL-2025-21935](https://insights.sbomify.com/MAL-2025-21935/): Malicious code in griffin-webpack-plugin (npm) (malicious package)
- [MAL-2025-21934](https://insights.sbomify.com/MAL-2025-21934/): Malicious code in griffin-paypal (npm) (malicious package)
- [MAL-2025-21933](https://insights.sbomify.com/MAL-2025-21933/): Malicious code in griffin-content-react (npm) (malicious package)
- [MAL-2025-21932](https://insights.sbomify.com/MAL-2025-21932/): Malicious code in griffin-content-client (npm) (malicious package)
- [MAL-2025-21931](https://insights.sbomify.com/MAL-2025-21931/): Malicious code in grievance (npm) (malicious package)
- [MAL-2025-21930](https://insights.sbomify.com/MAL-2025-21930/): Malicious code in griefjs (npm) (malicious package)
- [MAL-2025-2193](https://insights.sbomify.com/MAL-2025-2193/): Malicious code in test-hahahaha-rce (npm) (malicious package)
- [MAL-2025-21929](https://insights.sbomify.com/MAL-2025-21929/): Malicious code in gridstrap_ (npm) (malicious package)
- [MAL-2025-21928](https://insights.sbomify.com/MAL-2025-21928/): Malicious code in gridsome-tailwindcss-public-neuromorphic (npm) (malicious package)
- [MAL-2025-21927](https://insights.sbomify.com/MAL-2025-21927/): Malicious code in gridsome-orogeny-prettier-plugin-markdown-asteroid (npm) (malicious package)
- [MAL-2025-21926](https://insights.sbomify.com/MAL-2025-21926/): Malicious code in gridsome-mysql-avior-callback (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/869/