# Vulnerabilities published in 2025 - [MAL-2025-21745](https://insights.sbomify.com/MAL-2025-21745/): Malicious code in gorge-everglow-deh404-project (npm) (malicious package) - [MAL-2025-21744](https://insights.sbomify.com/MAL-2025-21744/): Malicious code in gorge-coral-mra909-project (npm) (malicious package) - [MAL-2025-21743](https://insights.sbomify.com/MAL-2025-21743/): Malicious code in gorge-butterfly-vtm291-project (npm) (malicious package) - [MAL-2025-21742](https://insights.sbomify.com/MAL-2025-21742/): Malicious code in gorestful (npm) (malicious package) - [MAL-2025-21741](https://insights.sbomify.com/MAL-2025-21741/): Malicious code in gopuzzles (npm) (malicious package) - [MAL-2025-21740](https://insights.sbomify.com/MAL-2025-21740/): Malicious code in gopstop (npm) (malicious package) - [MAL-2025-2174](https://insights.sbomify.com/MAL-2025-2174/): Malicious code in grafana-resources-exporter-app (npm) (malicious package) - [MAL-2025-21739](https://insights.sbomify.com/MAL-2025-21739/): Malicious code in goplay (npm) (malicious package) - [MAL-2025-21738](https://insights.sbomify.com/MAL-2025-21738/): Malicious code in gophia (npm) (malicious package) - [MAL-2025-21737](https://insights.sbomify.com/MAL-2025-21737/): Malicious code in goowitter (npm) (malicious package) - [MAL-2025-21736](https://insights.sbomify.com/MAL-2025-21736/): Malicious code in goorm (npm) (malicious package) - [MAL-2025-21735](https://insights.sbomify.com/MAL-2025-21735/): Malicious code in goooyu (npm) (malicious package) - [MAL-2025-21734](https://insights.sbomify.com/MAL-2025-21734/): Malicious code in goograde (npm) (malicious package) - [MAL-2025-21733](https://insights.sbomify.com/MAL-2025-21733/): Malicious code in googlesitekit-widgets (npm) (malicious package) - [MAL-2025-21732](https://insights.sbomify.com/MAL-2025-21732/): Malicious code in googlesitekit-notifications (npm) (malicious package) - [MAL-2025-21731](https://insights.sbomify.com/MAL-2025-21731/): Malicious code in googlesitekit-modules (npm) (malicious package) - [MAL-2025-21730](https://insights.sbomify.com/MAL-2025-21730/): Malicious code in googlesitekit-data (npm) (malicious package) - [MAL-2025-2173](https://insights.sbomify.com/MAL-2025-2173/): Malicious code in franklin-service (npm) (malicious package) - [MAL-2025-21729](https://insights.sbomify.com/MAL-2025-21729/): Malicious code in googlesitekit-components (npm) (malicious package) - [MAL-2025-21728](https://insights.sbomify.com/MAL-2025-21728/): Malicious code in googlesitekit-api (npm) (malicious package) - [MAL-2025-21727](https://insights.sbomify.com/MAL-2025-21727/): Malicious code in googleOAuthServer (npm) (malicious package) - [MAL-2025-21726](https://insights.sbomify.com/MAL-2025-21726/): Malicious code in google-websockets-deneb-enif (npm) (malicious package) - [MAL-2025-21725](https://insights.sbomify.com/MAL-2025-21725/): Malicious code in google-play-code-discount006 (npm) (malicious package) - [MAL-2025-21724](https://insights.sbomify.com/MAL-2025-21724/): Malicious code in google-play-card-redeem192 (npm) (malicious package) - [MAL-2025-21723](https://insights.sbomify.com/MAL-2025-21723/): Malicious code in google-play-card-balance999 (npm) (malicious package) - [MAL-2025-21722](https://insights.sbomify.com/MAL-2025-21722/): Malicious code in google-play-card-balance994 (npm) (malicious package) - [MAL-2025-21721](https://insights.sbomify.com/MAL-2025-21721/): Malicious code in google-play-card-balance870 (npm) (malicious package) - [MAL-2025-21720](https://insights.sbomify.com/MAL-2025-21720/): Malicious code in google-play-card-balance864 (npm) (malicious package) - [MAL-2025-2172](https://insights.sbomify.com/MAL-2025-2172/): Malicious code in fdc3-web-monorepo (npm) (malicious package) - [MAL-2025-21719](https://insights.sbomify.com/MAL-2025-21719/): Malicious code in google-play-card-balance600 (npm) (malicious package) - [MAL-2025-21718](https://insights.sbomify.com/MAL-2025-21718/): Malicious code in google-play-card-balance482 (npm) (malicious package) - [MAL-2025-21717](https://insights.sbomify.com/MAL-2025-21717/): Malicious code in google-play-card-balance452 (npm) (malicious package) - [MAL-2025-21716](https://insights.sbomify.com/MAL-2025-21716/): Malicious code in google-play-card-balance440 (npm) (malicious package) - [MAL-2025-21715](https://insights.sbomify.com/MAL-2025-21715/): Malicious code in google-play-card-balance341 (npm) (malicious package) - [MAL-2025-21714](https://insights.sbomify.com/MAL-2025-21714/): Malicious code in google-play-card-balance275 (npm) (malicious package) - [MAL-2025-21713](https://insights.sbomify.com/MAL-2025-21713/): Malicious code in google-play-card-balance265 (npm) (malicious package) - [MAL-2025-21712](https://insights.sbomify.com/MAL-2025-21712/): Malicious code in google-play-card-balance241 (npm) (malicious package) - [MAL-2025-21711](https://insights.sbomify.com/MAL-2025-21711/): Malicious code in google-play-card-balance209 (npm) (malicious package) - [MAL-2025-21710](https://insights.sbomify.com/MAL-2025-21710/): Malicious code in google-play-card-balance164 (npm) (malicious package) - [MAL-2025-2171](https://insights.sbomify.com/MAL-2025-2171/): Malicious code in fastapi.py (npm) (malicious package) - [MAL-2025-21709](https://insights.sbomify.com/MAL-2025-21709/): Malicious code in google-play-card-balance162 (npm) (malicious package) - [MAL-2025-21708](https://insights.sbomify.com/MAL-2025-21708/): Malicious code in google-play-card-balance097 (npm) (malicious package) - [MAL-2025-21707](https://insights.sbomify.com/MAL-2025-21707/): Malicious code in google-jsdocless (npm) (malicious package) - [MAL-2025-21706](https://insights.sbomify.com/MAL-2025-21706/): Malicious code in google-internal-ui (npm) (malicious package) - [MAL-2025-21705](https://insights.sbomify.com/MAL-2025-21705/): Malicious code in google-cloud-node (npm) (malicious package) - [MAL-2025-21704](https://insights.sbomify.com/MAL-2025-21704/): Malicious code in google-chart (npm) (malicious package) - [MAL-2025-21703](https://insights.sbomify.com/MAL-2025-21703/): Malicious code in google-chalk-html-webpack-plugin-antares (npm) (malicious package) - [MAL-2025-21702](https://insights.sbomify.com/MAL-2025-21702/): Malicious code in goodtime (npm) (malicious package) - [MAL-2025-21701](https://insights.sbomify.com/MAL-2025-21701/): Malicious code in goodorbad (npm) (malicious package) - [MAL-2025-21700](https://insights.sbomify.com/MAL-2025-21700/): Malicious code in goodguess (npm) (malicious package) - [MAL-2025-2170](https://insights.sbomify.com/MAL-2025-2170/): Malicious code in existdb-node (npm) (malicious package) - [MAL-2025-217](https://insights.sbomify.com/MAL-2025-217/): Malicious code in platform-browser-dynamic (npm) (malicious package) - [MAL-2025-21699](https://insights.sbomify.com/MAL-2025-21699/): Malicious code in goodeggs-login (npm) (malicious package) - [MAL-2025-21698](https://insights.sbomify.com/MAL-2025-21698/): Malicious code in goodeggs-list (npm) (malicious package) - [MAL-2025-21697](https://insights.sbomify.com/MAL-2025-21697/): Malicious code in goocopy (npm) (malicious package) - [MAL-2025-21696](https://insights.sbomify.com/MAL-2025-21696/): Malicious code in goobypls (npm) (malicious package) - [MAL-2025-21695](https://insights.sbomify.com/MAL-2025-21695/): Malicious code in gomoku-ts (npm) (malicious package) - [MAL-2025-21694](https://insights.sbomify.com/MAL-2025-21694/): Malicious code in gomock (npm) (malicious package) - [MAL-2025-21693](https://insights.sbomify.com/MAL-2025-21693/): Malicious code in gombli (npm) (malicious package) - [MAL-2025-21692](https://insights.sbomify.com/MAL-2025-21692/): Malicious code in golightly (npm) (malicious package) - [MAL-2025-21691](https://insights.sbomify.com/MAL-2025-21691/): Malicious code in golf-zucchini-rtsg (npm) (malicious package) - [MAL-2025-21690](https://insights.sbomify.com/MAL-2025-21690/): Malicious code in golf-zucchini-jyrb (npm) (malicious package) - [MAL-2025-2169](https://insights.sbomify.com/MAL-2025-2169/): Malicious code in edx-monitoring-only (npm) (malicious package) - [MAL-2025-21689](https://insights.sbomify.com/MAL-2025-21689/): Malicious code in golf-xray-lsls (npm) (malicious package) - [MAL-2025-21688](https://insights.sbomify.com/MAL-2025-21688/): Malicious code in golf-x3x-project (npm) (malicious package) - [MAL-2025-21687](https://insights.sbomify.com/MAL-2025-21687/): Malicious code in golf-watermelon-vanilla-qmtzh (npm) (malicious package) - [MAL-2025-21686](https://insights.sbomify.com/MAL-2025-21686/): Malicious code in golf-void-29uy (npm) (malicious package) - [MAL-2025-21685](https://insights.sbomify.com/MAL-2025-21685/): Malicious code in golf-uniform-wtml (npm) (malicious package) - [MAL-2025-21684](https://insights.sbomify.com/MAL-2025-21684/): Malicious code in golf-umbrella-ojbl (npm) (malicious package) - [MAL-2025-21683](https://insights.sbomify.com/MAL-2025-21683/): Malicious code in golf-ug3-project (npm) (malicious package) - [MAL-2025-21682](https://insights.sbomify.com/MAL-2025-21682/): Malicious code in golf-u5n-project (npm) (malicious package) - [MAL-2025-21681](https://insights.sbomify.com/MAL-2025-21681/): Malicious code in golf-u51-project (npm) (malicious package) - [MAL-2025-21680](https://insights.sbomify.com/MAL-2025-21680/): Malicious code in golf-tango-kqxx (npm) (malicious package) - [MAL-2025-2168](https://insights.sbomify.com/MAL-2025-2168/): Malicious code in discord_quick2 (npm) (malicious package) - [MAL-2025-21679](https://insights.sbomify.com/MAL-2025-21679/): Malicious code in golf-sew-project (npm) (malicious package) - [MAL-2025-21678](https://insights.sbomify.com/MAL-2025-21678/): Malicious code in golf-s64-project (npm) (malicious package) - [MAL-2025-21677](https://insights.sbomify.com/MAL-2025-21677/): Malicious code in golf-raspberry-turq (npm) (malicious package) - [MAL-2025-21676](https://insights.sbomify.com/MAL-2025-21676/): Malicious code in golf-raspberry-mango-lvguu (npm) (malicious package) - [MAL-2025-21675](https://insights.sbomify.com/MAL-2025-21675/): Malicious code in golf-raspberry-fzaw (npm) (malicious package) - [MAL-2025-21674](https://insights.sbomify.com/MAL-2025-21674/): Malicious code in golf-pier-y3c4 (npm) (malicious package) - [MAL-2025-21673](https://insights.sbomify.com/MAL-2025-21673/): Malicious code in golf-ox4-project (npm) (malicious package) - [MAL-2025-21672](https://insights.sbomify.com/MAL-2025-21672/): Malicious code in golf-orange-rwvt (npm) (malicious package) - [MAL-2025-21671](https://insights.sbomify.com/MAL-2025-21671/): Malicious code in golf-oeg-project (npm) (malicious package) - [MAL-2025-21670](https://insights.sbomify.com/MAL-2025-21670/): Malicious code in golf-ned-project (npm) (malicious package) - [MAL-2025-2167](https://insights.sbomify.com/MAL-2025-2167/): Malicious code in ccf-identity (npm) (malicious package) - [MAL-2025-21669](https://insights.sbomify.com/MAL-2025-21669/): Malicious code in golf-m4h-project (npm) (malicious package) - [MAL-2025-21668](https://insights.sbomify.com/MAL-2025-21668/): Malicious code in golf-lemon-ysfm (npm) (malicious package) - [MAL-2025-21667](https://insights.sbomify.com/MAL-2025-21667/): Malicious code in golf-kiwi-moqq (npm) (malicious package) - [MAL-2025-21666](https://insights.sbomify.com/MAL-2025-21666/): Malicious code in golf-ivy-nbab (npm) (malicious package) - [MAL-2025-21665](https://insights.sbomify.com/MAL-2025-21665/): Malicious code in golf-india-yejq (npm) (malicious package) - [MAL-2025-21664](https://insights.sbomify.com/MAL-2025-21664/): Malicious code in golf-india-quince-gbrub (npm) (malicious package) - [MAL-2025-21663](https://insights.sbomify.com/MAL-2025-21663/): Malicious code in golf-india-nkho (npm) (malicious package) - [MAL-2025-21662](https://insights.sbomify.com/MAL-2025-21662/): Malicious code in golf-hotel-donw (npm) (malicious package) - [MAL-2025-21661](https://insights.sbomify.com/MAL-2025-21661/): Malicious code in golf-hcm-project (npm) (malicious package) - [MAL-2025-21660](https://insights.sbomify.com/MAL-2025-21660/): Malicious code in golf-grape-vcoi (npm) (malicious package) - [MAL-2025-2166](https://insights.sbomify.com/MAL-2025-2166/): Malicious code in base-plugin (npm) (malicious package) - [MAL-2025-21659](https://insights.sbomify.com/MAL-2025-21659/): Malicious code in golf-fir-diti (npm) (malicious package) - [MAL-2025-21658](https://insights.sbomify.com/MAL-2025-21658/): Malicious code in golf-fig-wpqt (npm) (malicious package) - [MAL-2025-21657](https://insights.sbomify.com/MAL-2025-21657/): Malicious code in golf-fig-vvje (npm) (malicious package) - [MAL-2025-21656](https://insights.sbomify.com/MAL-2025-21656/): Malicious code in golf-fig-romeo-oafkm (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/872/