# Vulnerabilities published in 2025


- [MAL-2025-21835](https://insights.sbomify.com/MAL-2025-21835/): Malicious code in grape-hotel-juliet-mgihg (npm) (malicious package)
- [MAL-2025-21834](https://insights.sbomify.com/MAL-2025-21834/): Malicious code in grape-hotel-jcwr (npm) (malicious package)
- [MAL-2025-21833](https://insights.sbomify.com/MAL-2025-21833/): Malicious code in grape-hotel-ebpv (npm) (malicious package)
- [MAL-2025-21832](https://insights.sbomify.com/MAL-2025-21832/): Malicious code in grape-honeydew-xeio (npm) (malicious package)
- [MAL-2025-21831](https://insights.sbomify.com/MAL-2025-21831/): Malicious code in grape-honeydew-bdnx (npm) (malicious package)
- [MAL-2025-21830](https://insights.sbomify.com/MAL-2025-21830/): Malicious code in grape-hob-project (npm) (malicious package)
- [MAL-2025-2183](https://insights.sbomify.com/MAL-2025-2183/): Malicious code in nazir-scraper (npm) (malicious package)
- [MAL-2025-21829](https://insights.sbomify.com/MAL-2025-21829/): Malicious code in grape-hlk-project (npm) (malicious package)
- [MAL-2025-21828](https://insights.sbomify.com/MAL-2025-21828/): Malicious code in grape-h51-project (npm) (malicious package)
- [MAL-2025-21827](https://insights.sbomify.com/MAL-2025-21827/): Malicious code in grape-gri-project (npm) (malicious package)
- [MAL-2025-21826](https://insights.sbomify.com/MAL-2025-21826/): Malicious code in grape-golf-papaya-fddmr (npm) (malicious package)
- [MAL-2025-21825](https://insights.sbomify.com/MAL-2025-21825/): Malicious code in grape-golf-jpdv (npm) (malicious package)
- [MAL-2025-21824](https://insights.sbomify.com/MAL-2025-21824/): Malicious code in grape-ga3-project (npm) (malicious package)
- [MAL-2025-21823](https://insights.sbomify.com/MAL-2025-21823/): Malicious code in grape-foxtrot-nsrq (npm) (malicious package)
- [MAL-2025-21822](https://insights.sbomify.com/MAL-2025-21822/): Malicious code in grape-fhj-project (npm) (malicious package)
- [MAL-2025-21821](https://insights.sbomify.com/MAL-2025-21821/): Malicious code in grape-ew8-project (npm) (malicious package)
- [MAL-2025-21820](https://insights.sbomify.com/MAL-2025-21820/): Malicious code in grape-eul-project (npm) (malicious package)
- [MAL-2025-2182](https://insights.sbomify.com/MAL-2025-2182/): Malicious code in nazir-botjs (npm) (malicious package)
- [MAL-2025-21819](https://insights.sbomify.com/MAL-2025-21819/): Malicious code in grape-date-uhon (npm) (malicious package)
- [MAL-2025-21818](https://insights.sbomify.com/MAL-2025-21818/): Malicious code in grape-cherry-fedo (npm) (malicious package)
- [MAL-2025-21817](https://insights.sbomify.com/MAL-2025-21817/): Malicious code in grape-brv-project (npm) (malicious package)
- [MAL-2025-21816](https://insights.sbomify.com/MAL-2025-21816/): Malicious code in grape-bravo-bwpu (npm) (malicious package)
- [MAL-2025-21815](https://insights.sbomify.com/MAL-2025-21815/): Malicious code in grape-boa-project (npm) (malicious package)
- [MAL-2025-21814](https://insights.sbomify.com/MAL-2025-21814/): Malicious code in grape-beetroot-n788 (npm) (malicious package)
- [MAL-2025-21813](https://insights.sbomify.com/MAL-2025-21813/): Malicious code in grape-banana-ksns (npm) (malicious package)
- [MAL-2025-21812](https://insights.sbomify.com/MAL-2025-21812/): Malicious code in grape-asteroid-krt5 (npm) (malicious package)
- [MAL-2025-21811](https://insights.sbomify.com/MAL-2025-21811/): Malicious code in grape-alpha-wuuc (npm) (malicious package)
- [MAL-2025-21810](https://insights.sbomify.com/MAL-2025-21810/): Malicious code in grape-9u7-project (npm) (malicious package)
- [MAL-2025-2181](https://insights.sbomify.com/MAL-2025-2181/): Malicious code in makerspace-cpx-intro (npm) (malicious package)
- [MAL-2025-21809](https://insights.sbomify.com/MAL-2025-21809/): Malicious code in grape-9rp-project (npm) (malicious package)
- [MAL-2025-21808](https://insights.sbomify.com/MAL-2025-21808/): Malicious code in grape-67t-project (npm) (malicious package)
- [MAL-2025-21807](https://insights.sbomify.com/MAL-2025-21807/): Malicious code in grakopp (npm) (malicious package)
- [MAL-2025-21806](https://insights.sbomify.com/MAL-2025-21806/): Malicious code in grailedapi (npm) (malicious package)
- [MAL-2025-21805](https://insights.sbomify.com/MAL-2025-21805/): Malicious code in grafield (npm) (malicious package)
- [MAL-2025-21804](https://insights.sbomify.com/MAL-2025-21804/): Malicious code in grafanaversion (npm) (malicious package)
- [MAL-2025-21803](https://insights.sbomify.com/MAL-2025-21803/): Malicious code in grafana-toolkit (npm) (malicious package)
- [MAL-2025-21802](https://insights.sbomify.com/MAL-2025-21802/): Malicious code in graduation (npm) (malicious package)
- [MAL-2025-21801](https://insights.sbomify.com/MAL-2025-21801/): Malicious code in gradlew (npm) (malicious package)
- [MAL-2025-21800](https://insights.sbomify.com/MAL-2025-21800/): Malicious code in grabshot (npm) (malicious package)
- [MAL-2025-2180](https://insights.sbomify.com/MAL-2025-2180/): Malicious code in leonardo-nomorepo (npm) (malicious package)
- [MAL-2025-218](https://insights.sbomify.com/MAL-2025-218/): Malicious code in plib-ai-chat-response (npm) (malicious package)
- [MAL-2025-21799](https://insights.sbomify.com/MAL-2025-21799/): Malicious code in grablib (npm) (malicious package)
- [MAL-2025-21798](https://insights.sbomify.com/MAL-2025-21798/): Malicious code in grabit-utils (npm) (malicious package)
- [MAL-2025-21797](https://insights.sbomify.com/MAL-2025-21797/): Malicious code in grab-id-client (npm) (malicious package)
- [MAL-2025-21796](https://insights.sbomify.com/MAL-2025-21796/): Malicious code in gql-generated (npm) (malicious package)
- [MAL-2025-21795](https://insights.sbomify.com/MAL-2025-21795/): Malicious code in gpyblog (npm) (malicious package)
- [MAL-2025-21794](https://insights.sbomify.com/MAL-2025-21794/): Malicious code in gpxqsdzbhvoimeru (npm) (malicious package)
- [MAL-2025-21793](https://insights.sbomify.com/MAL-2025-21793/): Malicious code in gpustatjs (npm) (malicious package)
- [MAL-2025-21792](https://insights.sbomify.com/MAL-2025-21792/): Malicious code in gpumon-datadog (npm) (malicious package)
- [MAL-2025-21791](https://insights.sbomify.com/MAL-2025-21791/): Malicious code in gpswake (npm) (malicious package)
- [MAL-2025-21790](https://insights.sbomify.com/MAL-2025-21790/): Malicious code in gpsignup (npm) (malicious package)
- [MAL-2025-2179](https://insights.sbomify.com/MAL-2025-2179/): Malicious code in leonardo-monorepo (npm) (malicious package)
- [MAL-2025-21789](https://insights.sbomify.com/MAL-2025-21789/): Malicious code in gpsfix (npm) (malicious package)
- [MAL-2025-21788](https://insights.sbomify.com/MAL-2025-21788/): Malicious code in gpscamera (npm) (malicious package)
- [MAL-2025-21787](https://insights.sbomify.com/MAL-2025-21787/): Malicious code in gpress (npm) (malicious package)
- [MAL-2025-21786](https://insights.sbomify.com/MAL-2025-21786/): Malicious code in gpnjxoyo10tkfvfnvt40kdaqoyl2e1ov (npm) (malicious package)
- [MAL-2025-21785](https://insights.sbomify.com/MAL-2025-21785/): Malicious code in gpgame (npm) (malicious package)
- [MAL-2025-21784](https://insights.sbomify.com/MAL-2025-21784/): Malicious code in gperiodic (npm) (malicious package)
- [MAL-2025-21783](https://insights.sbomify.com/MAL-2025-21783/): Malicious code in gpcembed (npm) (malicious package)
- [MAL-2025-21782](https://insights.sbomify.com/MAL-2025-21782/): Malicious code in gp-logger (npm) (malicious package)
- [MAL-2025-21781](https://insights.sbomify.com/MAL-2025-21781/): Malicious code in gp-db-models (npm) (malicious package)
- [MAL-2025-21780](https://insights.sbomify.com/MAL-2025-21780/): Malicious code in gourmetta (npm) (malicious package)
- [MAL-2025-2178](https://insights.sbomify.com/MAL-2025-2178/): Malicious code in jquery-suggestable (npm) (malicious package)
- [MAL-2025-21779](https://insights.sbomify.com/MAL-2025-21779/): Malicious code in gothimbl (npm) (malicious package)
- [MAL-2025-21778](https://insights.sbomify.com/MAL-2025-21778/): Malicious code in gotdone (npm) (malicious package)
- [MAL-2025-21777](https://insights.sbomify.com/MAL-2025-21777/): Malicious code in got-webpack-selenium-sails (npm) (malicious package)
- [MAL-2025-21776](https://insights.sbomify.com/MAL-2025-21776/): Malicious code in got-backend-pegasus-perseus (npm) (malicious package)
- [MAL-2025-21775](https://insights.sbomify.com/MAL-2025-21775/): Malicious code in got-atlas-inquirer-bulma (npm) (malicious package)
- [MAL-2025-21774](https://insights.sbomify.com/MAL-2025-21774/): Malicious code in gostatic (npm) (malicious package)
- [MAL-2025-21773](https://insights.sbomify.com/MAL-2025-21773/): Malicious code in gosocks (npm) (malicious package)
- [MAL-2025-21772](https://insights.sbomify.com/MAL-2025-21772/): Malicious code in goshell (npm) (malicious package)
- [MAL-2025-21771](https://insights.sbomify.com/MAL-2025-21771/): Malicious code in goshape (npm) (malicious package)
- [MAL-2025-21770](https://insights.sbomify.com/MAL-2025-21770/): Malicious code in gosbvypiawcuzexj (npm) (malicious package)
- [MAL-2025-2177](https://insights.sbomify.com/MAL-2025-2177/): Malicious code in internoapi-rota (npm) (malicious package)
- [MAL-2025-21769](https://insights.sbomify.com/MAL-2025-21769/): Malicious code in gorilla-umbrella-hck963-project (npm) (malicious package)
- [MAL-2025-21768](https://insights.sbomify.com/MAL-2025-21768/): Malicious code in gorilla-tornado-qal524-project (npm) (malicious package)
- [MAL-2025-21767](https://insights.sbomify.com/MAL-2025-21767/): Malicious code in gorilla-strawberry-ylcg (npm) (malicious package)
- [MAL-2025-21766](https://insights.sbomify.com/MAL-2025-21766/): Malicious code in gorilla-redwood-tgom (npm) (malicious package)
- [MAL-2025-21765](https://insights.sbomify.com/MAL-2025-21765/): Malicious code in gorilla-igloo-g838 (npm) (malicious package)
- [MAL-2025-21764](https://insights.sbomify.com/MAL-2025-21764/): Malicious code in gorilla-harbor-uwo619-project (npm) (malicious package)
- [MAL-2025-21763](https://insights.sbomify.com/MAL-2025-21763/): Malicious code in gorilla-foxtrot-yqcj (npm) (malicious package)
- [MAL-2025-21762](https://insights.sbomify.com/MAL-2025-21762/): Malicious code in gorilla-fern-ohc952-project (npm) (malicious package)
- [MAL-2025-21761](https://insights.sbomify.com/MAL-2025-21761/): Malicious code in gorilla-fennel-yziu (npm) (malicious package)
- [MAL-2025-21760](https://insights.sbomify.com/MAL-2025-21760/): Malicious code in gorilla-dove-koz256-project (npm) (malicious package)
- [MAL-2025-2176](https://insights.sbomify.com/MAL-2025-2176/): Malicious code in innersource-sig (npm) (malicious package)
- [MAL-2025-21759](https://insights.sbomify.com/MAL-2025-21759/): Malicious code in gorilla-comet-txa5 (npm) (malicious package)
- [MAL-2025-21758](https://insights.sbomify.com/MAL-2025-21758/): Malicious code in gorilla-butterfly-yfl962-project (npm) (malicious package)
- [MAL-2025-21757](https://insights.sbomify.com/MAL-2025-21757/): Malicious code in gorge-yard-vso323-project (npm) (malicious package)
- [MAL-2025-21756](https://insights.sbomify.com/MAL-2025-21756/): Malicious code in gorge-xerox-asw449-project (npm) (malicious package)
- [MAL-2025-21755](https://insights.sbomify.com/MAL-2025-21755/): Malicious code in gorge-xenon-yln990-project (npm) (malicious package)
- [MAL-2025-21754](https://insights.sbomify.com/MAL-2025-21754/): Malicious code in gorge-wisp-xwv460-project (npm) (malicious package)
- [MAL-2025-21753](https://insights.sbomify.com/MAL-2025-21753/): Malicious code in gorge-topaz-ptp670-project (npm) (malicious package)
- [MAL-2025-21752](https://insights.sbomify.com/MAL-2025-21752/): Malicious code in gorge-tiger-jcf388-project (npm) (malicious package)
- [MAL-2025-21751](https://insights.sbomify.com/MAL-2025-21751/): Malicious code in gorge-prairie-mou652-project (npm) (malicious package)
- [MAL-2025-21750](https://insights.sbomify.com/MAL-2025-21750/): Malicious code in gorge-orchid-tts835-project (npm) (malicious package)
- [MAL-2025-2175](https://insights.sbomify.com/MAL-2025-2175/): Malicious code in hookform-resolvers (npm) (malicious package)
- [MAL-2025-21749](https://insights.sbomify.com/MAL-2025-21749/): Malicious code in gorge-mountain-oag677-project (npm) (malicious package)
- [MAL-2025-21748](https://insights.sbomify.com/MAL-2025-21748/): Malicious code in gorge-labyrinth-kqk027-project (npm) (malicious package)
- [MAL-2025-21747](https://insights.sbomify.com/MAL-2025-21747/): Malicious code in gorge-jasmine-fdb137-project (npm) (malicious package)
- [MAL-2025-21746](https://insights.sbomify.com/MAL-2025-21746/): Malicious code in gorge-jade-aal999-project (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/871/