# Vulnerabilities published in 2025


- [MAL-2025-21925](https://insights.sbomify.com/MAL-2025-21925/): Malicious code in gridproxy (npm) (malicious package)
- [MAL-2025-21924](https://insights.sbomify.com/MAL-2025-21924/): Malicious code in gridninja (npm) (malicious package)
- [MAL-2025-21923](https://insights.sbomify.com/MAL-2025-21923/): Malicious code in gridmoja (npm) (malicious package)
- [MAL-2025-21922](https://insights.sbomify.com/MAL-2025-21922/): Malicious code in grid-public-link-route-rain (npm) (malicious package)
- [MAL-2025-21921](https://insights.sbomify.com/MAL-2025-21921/): Malicious code in grid-iota-assert-cache-omega (npm) (malicious package)
- [MAL-2025-21920](https://insights.sbomify.com/MAL-2025-21920/): Malicious code in greppperz (npm) (malicious package)
- [MAL-2025-2192](https://insights.sbomify.com/MAL-2025-2192/): Malicious code in swerve-ui (npm) (malicious package)
- [MAL-2025-21919](https://insights.sbomify.com/MAL-2025-21919/): Malicious code in grep-module-dog-iota-short (npm) (malicious package)
- [MAL-2025-21918](https://insights.sbomify.com/MAL-2025-21918/): Malicious code in grep-emulate-cold-virtualize-file (npm) (malicious package)
- [MAL-2025-21917](https://insights.sbomify.com/MAL-2025-21917/): Malicious code in gregarius (npm) (malicious package)
- [MAL-2025-21916](https://insights.sbomify.com/MAL-2025-21916/): Malicious code in greentube-nrgs (npm) (malicious package)
- [MAL-2025-21915](https://insights.sbomify.com/MAL-2025-21915/): Malicious code in greenpages-client (npm) (malicious package)
- [MAL-2025-21914](https://insights.sbomify.com/MAL-2025-21914/): Malicious code in greedkata (npm) (malicious package)
- [MAL-2025-21913](https://insights.sbomify.com/MAL-2025-21913/): Malicious code in greatfilter-resolvers-query-greatfilter (npm) (malicious package)
- [MAL-2025-21912](https://insights.sbomify.com/MAL-2025-21912/): Malicious code in greatfilter-ablation-phoenix-shelljs (npm) (malicious package)
- [MAL-2025-21911](https://insights.sbomify.com/MAL-2025-21911/): Malicious code in greater-giving-admin (npm) (malicious package)
- [MAL-2025-21910](https://insights.sbomify.com/MAL-2025-21910/): Malicious code in grdmkfyaojsbwenl (npm) (malicious package)
- [MAL-2025-2191](https://insights.sbomify.com/MAL-2025-2191/): Malicious code in sdk-playground (npm) (malicious package)
- [MAL-2025-21909](https://insights.sbomify.com/MAL-2025-21909/): Malicious code in grdeflect (npm) (malicious package)
- [MAL-2025-21908](https://insights.sbomify.com/MAL-2025-21908/): Malicious code in graywulf (npm) (malicious package)
- [MAL-2025-21907](https://insights.sbomify.com/MAL-2025-21907/): Malicious code in gravyboat (npm) (malicious package)
- [MAL-2025-21906](https://insights.sbomify.com/MAL-2025-21906/): Malicious code in gravity-yildun-holography-chai (npm) (malicious package)
- [MAL-2025-21905](https://insights.sbomify.com/MAL-2025-21905/): Malicious code in gravity-sqlite-got-nuxtjs (npm) (malicious package)
- [MAL-2025-21904](https://insights.sbomify.com/MAL-2025-21904/): Malicious code in gravity-quasar-helios-betelgeuse (npm) (malicious package)
- [MAL-2025-21903](https://insights.sbomify.com/MAL-2025-21903/): Malicious code in graviton-semantic-ui-eigenstate-photon (npm) (malicious package)
- [MAL-2025-21902](https://insights.sbomify.com/MAL-2025-21902/): Malicious code in graviton-outercore-loglevel-quark (npm) (malicious package)
- [MAL-2025-21901](https://insights.sbomify.com/MAL-2025-21901/): Malicious code in graviton-dactyl-helmet-dotenv-parse-variables (npm) (malicious package)
- [MAL-2025-21900](https://insights.sbomify.com/MAL-2025-21900/): Malicious code in graviton-brane-castor-dependencies (npm) (malicious package)
- [MAL-2025-2190](https://insights.sbomify.com/MAL-2025-2190/): Malicious code in safe-events-service (npm) (malicious package)
- [MAL-2025-219](https://insights.sbomify.com/MAL-2025-219/): Malicious code in podium-pride (npm) (malicious package)
- [MAL-2025-21899](https://insights.sbomify.com/MAL-2025-21899/): Malicious code in gravitlauncher-ws-api (npm) (malicious package)
- [MAL-2025-21898](https://insights.sbomify.com/MAL-2025-21898/): Malicious code in gravitationalwave-wormhole-publish-reveal-md (npm) (malicious package)
- [MAL-2025-21897](https://insights.sbomify.com/MAL-2025-21897/): Malicious code in gravitationalwave-phoebe-less-loader-decoherence (npm) (malicious package)
- [MAL-2025-21896](https://insights.sbomify.com/MAL-2025-21896/): Malicious code in gravitationalwave-parsec-decoherence-fornax (npm) (malicious package)
- [MAL-2025-21895](https://insights.sbomify.com/MAL-2025-21895/): Malicious code in gravitationalwave-node-config-equinox-commitlint (npm) (malicious package)
- [MAL-2025-21894](https://insights.sbomify.com/MAL-2025-21894/): Malicious code in gravitationalwave-geodynamo-nightwatch-upgrade (npm) (malicious package)
- [MAL-2025-21893](https://insights.sbomify.com/MAL-2025-21893/): Malicious code in grassql (npm) (malicious package)
- [MAL-2025-21892](https://insights.sbomify.com/MAL-2025-21892/): Malicious code in grasql (npm) (malicious package)
- [MAL-2025-21891](https://insights.sbomify.com/MAL-2025-21891/): Malicious code in graphquil (npm) (malicious package)
- [MAL-2025-21890](https://insights.sbomify.com/MAL-2025-21890/): Malicious code in graphql_swift_gen (npm) (malicious package)
- [MAL-2025-2189](https://insights.sbomify.com/MAL-2025-2189/): Malicious code in resc-frontend (npm) (malicious package)
- [MAL-2025-21889](https://insights.sbomify.com/MAL-2025-21889/): Malicious code in graphql_java_gen (npm) (malicious package)
- [MAL-2025-21888](https://insights.sbomify.com/MAL-2025-21888/): Malicious code in graphql-shorthand-parser2 (npm) (malicious package)
- [MAL-2025-21887](https://insights.sbomify.com/MAL-2025-21887/): Malicious code in graphql-neptune-reveal-md-leda (npm) (malicious package)
- [MAL-2025-21886](https://insights.sbomify.com/MAL-2025-21886/): Malicious code in graphql-jest-cypress-build (npm) (malicious package)
- [MAL-2025-21885](https://insights.sbomify.com/MAL-2025-21885/): Malicious code in graphql-comet-mantle-got (npm) (malicious package)
- [MAL-2025-21884](https://insights.sbomify.com/MAL-2025-21884/): Malicious code in graphql-callback-loglevel-standard (npm) (malicious package)
- [MAL-2025-21883](https://insights.sbomify.com/MAL-2025-21883/): Malicious code in graphql-bellatrix-transport-blueshift (npm) (malicious package)
- [MAL-2025-21882](https://insights.sbomify.com/MAL-2025-21882/): Malicious code in graphnetworkx (npm) (malicious package)
- [MAL-2025-21881](https://insights.sbomify.com/MAL-2025-21881/): Malicious code in graphman (npm) (malicious package)
- [MAL-2025-21880](https://insights.sbomify.com/MAL-2025-21880/): Malicious code in graphkit (npm) (malicious package)
- [MAL-2025-2188](https://insights.sbomify.com/MAL-2025-2188/): Malicious code in requireform (npm) (malicious package)
- [MAL-2025-21879](https://insights.sbomify.com/MAL-2025-21879/): Malicious code in graphiql-rails-fork (npm) (malicious package)
- [MAL-2025-21878](https://insights.sbomify.com/MAL-2025-21878/): Malicious code in graphicv (npm) (malicious package)
- [MAL-2025-21877](https://insights.sbomify.com/MAL-2025-21877/): Malicious code in graphic (npm) (malicious package)
- [MAL-2025-21876](https://insights.sbomify.com/MAL-2025-21876/): Malicious code in graphedia (npm) (malicious package)
- [MAL-2025-21875](https://insights.sbomify.com/MAL-2025-21875/): Malicious code in graphchat (npm) (malicious package)
- [MAL-2025-21874](https://insights.sbomify.com/MAL-2025-21874/): Malicious code in grapesjs-from-doc (npm) (malicious package)
- [MAL-2025-21873](https://insights.sbomify.com/MAL-2025-21873/): Malicious code in grape-zucchini-fqlz (npm) (malicious package)
- [MAL-2025-21872](https://insights.sbomify.com/MAL-2025-21872/): Malicious code in grape-y8y-project (npm) (malicious package)
- [MAL-2025-21871](https://insights.sbomify.com/MAL-2025-21871/): Malicious code in grape-xzw-project (npm) (malicious package)
- [MAL-2025-21870](https://insights.sbomify.com/MAL-2025-21870/): Malicious code in grape-xylophone-02qz (npm) (malicious package)
- [MAL-2025-2187](https://insights.sbomify.com/MAL-2025-2187/): Malicious code in process-log (npm) (malicious package)
- [MAL-2025-21869](https://insights.sbomify.com/MAL-2025-21869/): Malicious code in grape-xigua-lemon-nxoem (npm) (malicious package)
- [MAL-2025-21868](https://insights.sbomify.com/MAL-2025-21868/): Malicious code in grape-xigua-kwxn (npm) (malicious package)
- [MAL-2025-21867](https://insights.sbomify.com/MAL-2025-21867/): Malicious code in grape-x9p-project (npm) (malicious package)
- [MAL-2025-21866](https://insights.sbomify.com/MAL-2025-21866/): Malicious code in grape-wls-project (npm) (malicious package)
- [MAL-2025-21865](https://insights.sbomify.com/MAL-2025-21865/): Malicious code in grape-whiskey-jfin (npm) (malicious package)
- [MAL-2025-21864](https://insights.sbomify.com/MAL-2025-21864/): Malicious code in grape-whiskey-bvjt (npm) (malicious package)
- [MAL-2025-21863](https://insights.sbomify.com/MAL-2025-21863/): Malicious code in grape-vinegar-31lr (npm) (malicious package)
- [MAL-2025-21862](https://insights.sbomify.com/MAL-2025-21862/): Malicious code in grape-victor-xczd (npm) (malicious package)
- [MAL-2025-21861](https://insights.sbomify.com/MAL-2025-21861/): Malicious code in grape-victor-pvwe (npm) (malicious package)
- [MAL-2025-21860](https://insights.sbomify.com/MAL-2025-21860/): Malicious code in grape-vanilla-rfvl (npm) (malicious package)
- [MAL-2025-2186](https://insights.sbomify.com/MAL-2025-2186/): Malicious code in paymaster-bundler-examples (npm) (malicious package)
- [MAL-2025-21859](https://insights.sbomify.com/MAL-2025-21859/): Malicious code in grape-vanilla-b8fo (npm) (malicious package)
- [MAL-2025-21858](https://insights.sbomify.com/MAL-2025-21858/): Malicious code in grape-tyg-project (npm) (malicious package)
- [MAL-2025-21857](https://insights.sbomify.com/MAL-2025-21857/): Malicious code in grape-tim-project (npm) (malicious package)
- [MAL-2025-21856](https://insights.sbomify.com/MAL-2025-21856/): Malicious code in grape-tango-mfsy (npm) (malicious package)
- [MAL-2025-21855](https://insights.sbomify.com/MAL-2025-21855/): Malicious code in grape-tangerine-lima-szfmm (npm) (malicious package)
- [MAL-2025-21854](https://insights.sbomify.com/MAL-2025-21854/): Malicious code in grape-tangerine-kilo-qtkct (npm) (malicious package)
- [MAL-2025-21853](https://insights.sbomify.com/MAL-2025-21853/): Malicious code in grape-sd5-project (npm) (malicious package)
- [MAL-2025-21852](https://insights.sbomify.com/MAL-2025-21852/): Malicious code in grape-romeo-lima-twimq (npm) (malicious package)
- [MAL-2025-21851](https://insights.sbomify.com/MAL-2025-21851/): Malicious code in grape-quebec-papaya-sewvg (npm) (malicious package)
- [MAL-2025-21850](https://insights.sbomify.com/MAL-2025-21850/): Malicious code in grape-quebec-noku (npm) (malicious package)
- [MAL-2025-2185](https://insights.sbomify.com/MAL-2025-2185/): Malicious code in node-unzip (npm) (malicious package)
- [MAL-2025-21849](https://insights.sbomify.com/MAL-2025-21849/): Malicious code in grape-qik-project (npm) (malicious package)
- [MAL-2025-21848](https://insights.sbomify.com/MAL-2025-21848/): Malicious code in grape-pkb-project (npm) (malicious package)
- [MAL-2025-21847](https://insights.sbomify.com/MAL-2025-21847/): Malicious code in grape-papaya-ukjf (npm) (malicious package)
- [MAL-2025-21846](https://insights.sbomify.com/MAL-2025-21846/): Malicious code in grape-papa-whiskey-tvukr (npm) (malicious package)
- [MAL-2025-21845](https://insights.sbomify.com/MAL-2025-21845/): Malicious code in grape-p6i-project (npm) (malicious package)
- [MAL-2025-21844](https://insights.sbomify.com/MAL-2025-21844/): Malicious code in grape-oscar-ikpt (npm) (malicious package)
- [MAL-2025-21843](https://insights.sbomify.com/MAL-2025-21843/): Malicious code in grape-orange-srxq (npm) (malicious package)
- [MAL-2025-21842](https://insights.sbomify.com/MAL-2025-21842/): Malicious code in grape-omd-project (npm) (malicious package)
- [MAL-2025-21841](https://insights.sbomify.com/MAL-2025-21841/): Malicious code in grape-n27-project (npm) (malicious package)
- [MAL-2025-21840](https://insights.sbomify.com/MAL-2025-21840/): Malicious code in grape-mzk-project (npm) (malicious package)
- [MAL-2025-2184](https://insights.sbomify.com/MAL-2025-2184/): Malicious code in ncw-eddsa-signing (npm) (malicious package)
- [MAL-2025-21839](https://insights.sbomify.com/MAL-2025-21839/): Malicious code in grape-moat-8zxd (npm) (malicious package)
- [MAL-2025-21838](https://insights.sbomify.com/MAL-2025-21838/): Malicious code in grape-lighthouse-8yb7 (npm) (malicious package)
- [MAL-2025-21837](https://insights.sbomify.com/MAL-2025-21837/): Malicious code in grape-lemon-alpha-xeiqm (npm) (malicious package)
- [MAL-2025-21836](https://insights.sbomify.com/MAL-2025-21836/): Malicious code in grape-kilo-opuc (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/870/