# Vulnerabilities published in 2025


- [MAL-2025-21655](https://insights.sbomify.com/MAL-2025-21655/): Malicious code in golf-ferry-kfvr (npm) (malicious package)
- [MAL-2025-21654](https://insights.sbomify.com/MAL-2025-21654/): Malicious code in golf-elderberry-cvty (npm) (malicious package)
- [MAL-2025-21653](https://insights.sbomify.com/MAL-2025-21653/): Malicious code in golf-echo-okfe (npm) (malicious package)
- [MAL-2025-21652](https://insights.sbomify.com/MAL-2025-21652/): Malicious code in golf-ebx-project (npm) (malicious package)
- [MAL-2025-21651](https://insights.sbomify.com/MAL-2025-21651/): Malicious code in golf-cherry-ygem (npm) (malicious package)
- [MAL-2025-21650](https://insights.sbomify.com/MAL-2025-21650/): Malicious code in golf-cherry-iabh (npm) (malicious package)
- [MAL-2025-2165](https://insights.sbomify.com/MAL-2025-2165/): Malicious code in async-query-data (npm) (malicious package)
- [MAL-2025-21649](https://insights.sbomify.com/MAL-2025-21649/): Malicious code in golf-cherry-fhno (npm) (malicious package)
- [MAL-2025-21648](https://insights.sbomify.com/MAL-2025-21648/): Malicious code in golf-charlie-susu (npm) (malicious package)
- [MAL-2025-21647](https://insights.sbomify.com/MAL-2025-21647/): Malicious code in golf-charlie-fldx (npm) (malicious package)
- [MAL-2025-21646](https://insights.sbomify.com/MAL-2025-21646/): Malicious code in golf-carrot-ufbe (npm) (malicious package)
- [MAL-2025-21645](https://insights.sbomify.com/MAL-2025-21645/): Malicious code in golf-61r-project (npm) (malicious package)
- [MAL-2025-21644](https://insights.sbomify.com/MAL-2025-21644/): Malicious code in golf-5vv-project (npm) (malicious package)
- [MAL-2025-21643](https://insights.sbomify.com/MAL-2025-21643/): Malicious code in golf-5km-project (npm) (malicious package)
- [MAL-2025-21642](https://insights.sbomify.com/MAL-2025-21642/): Malicious code in golf-466-project (npm) (malicious package)
- [MAL-2025-21641](https://insights.sbomify.com/MAL-2025-21641/): Malicious code in golf-1d8-project (npm) (malicious package)
- [MAL-2025-21640](https://insights.sbomify.com/MAL-2025-21640/): Malicious code in golf-030-project (npm) (malicious package)
- [MAL-2025-2164](https://insights.sbomify.com/MAL-2025-2164/): Malicious code in api-discord.js-v14 (npm) (malicious package)
- [MAL-2025-21639](https://insights.sbomify.com/MAL-2025-21639/): Malicious code in goldpoint-cac-module (npm) (malicious package)
- [MAL-2025-21638](https://insights.sbomify.com/MAL-2025-21638/): Malicious code in goldeneye (npm) (malicious package)
- [MAL-2025-21637](https://insights.sbomify.com/MAL-2025-21637/): Malicious code in golangtw (npm) (malicious package)
- [MAL-2025-21636](https://insights.sbomify.com/MAL-2025-21636/): Malicious code in gojs2 (npm) (malicious package)
- [MAL-2025-21635](https://insights.sbomify.com/MAL-2025-21635/): Malicious code in gojs-designer (npm) (malicious package)
- [MAL-2025-21634](https://insights.sbomify.com/MAL-2025-21634/): Malicious code in gojs-artisan (npm) (malicious package)
- [MAL-2025-21633](https://insights.sbomify.com/MAL-2025-21633/): Malicious code in gojek-tv (npm) (malicious package)
- [MAL-2025-21632](https://insights.sbomify.com/MAL-2025-21632/): Malicious code in gohelix (npm) (malicious package)
- [MAL-2025-21631](https://insights.sbomify.com/MAL-2025-21631/): Malicious code in goforums (npm) (malicious package)
- [MAL-2025-21630](https://insights.sbomify.com/MAL-2025-21630/): Malicious code in gofinity (npm) (malicious package)
- [MAL-2025-2163](https://insights.sbomify.com/MAL-2025-2163/): Malicious code in alexpavlov--jquery-suggestable (npm) (malicious package)
- [MAL-2025-21629](https://insights.sbomify.com/MAL-2025-21629/): Malicious code in godswar (npm) (malicious package)
- [MAL-2025-21628](https://insights.sbomify.com/MAL-2025-21628/): Malicious code in godenv (npm) (malicious package)
- [MAL-2025-21627](https://insights.sbomify.com/MAL-2025-21627/): Malicious code in godana (npm) (malicious package)
- [MAL-2025-21626](https://insights.sbomify.com/MAL-2025-21626/): Malicious code in gocodego (npm) (malicious package)
- [MAL-2025-21625](https://insights.sbomify.com/MAL-2025-21625/): Malicious code in gocast (npm) (malicious package)
- [MAL-2025-21624](https://insights.sbomify.com/MAL-2025-21624/): Malicious code in gobotplus (npm) (malicious package)
- [MAL-2025-21623](https://insights.sbomify.com/MAL-2025-21623/): Malicious code in gobblers (npm) (malicious package)
- [MAL-2025-21622](https://insights.sbomify.com/MAL-2025-21622/): Malicious code in goantifraud-reborn (npm) (malicious package)
- [MAL-2025-21621](https://insights.sbomify.com/MAL-2025-21621/): Malicious code in goantifraud (npm) (malicious package)
- [MAL-2025-21620](https://insights.sbomify.com/MAL-2025-21620/): Malicious code in goagent (npm) (malicious package)
- [MAL-2025-2162](https://insights.sbomify.com/MAL-2025-2162/): Malicious code in aem-headless-advanced-tutorial-wknd-app (npm) (malicious package)
- [MAL-2025-21619](https://insights.sbomify.com/MAL-2025-21619/): Malicious code in go-notify (npm) (malicious package)
- [MAL-2025-21618](https://insights.sbomify.com/MAL-2025-21618/): Malicious code in go-api-starter (npm) (malicious package)
- [MAL-2025-21617](https://insights.sbomify.com/MAL-2025-21617/): Malicious code in gnoptix (npm) (malicious package)
- [MAL-2025-21616](https://insights.sbomify.com/MAL-2025-21616/): Malicious code in gnadelite (npm) (malicious package)
- [MAL-2025-21615](https://insights.sbomify.com/MAL-2025-21615/): Malicious code in gmykzvuloidfjkwq (npm) (malicious package)
- [MAL-2025-21614](https://insights.sbomify.com/MAL-2025-21614/): Malicious code in gmxlib (npm) (malicious package)
- [MAL-2025-21613](https://insights.sbomify.com/MAL-2025-21613/): Malicious code in gmx-synthetics (npm) (malicious package)
- [MAL-2025-21612](https://insights.sbomify.com/MAL-2025-21612/): Malicious code in gmx-subgraph (npm) (malicious package)
- [MAL-2025-21611](https://insights.sbomify.com/MAL-2025-21611/): Malicious code in gmx-share (npm) (malicious package)
- [MAL-2025-21610](https://insights.sbomify.com/MAL-2025-21610/): Malicious code in gmmongoanonymizer (npm) (malicious package)
- [MAL-2025-2161](https://insights.sbomify.com/MAL-2025-2161/): Malicious code in adyen-web-main (npm) (malicious package)
- [MAL-2025-21609](https://insights.sbomify.com/MAL-2025-21609/): Malicious code in gmbcliepjkzonhkv (npm) (malicious package)
- [MAL-2025-21608](https://insights.sbomify.com/MAL-2025-21608/): Malicious code in gmailtask (npm) (malicious package)
- [MAL-2025-21607](https://insights.sbomify.com/MAL-2025-21607/): Malicious code in gluedb (npm) (malicious package)
- [MAL-2025-21606](https://insights.sbomify.com/MAL-2025-21606/): Malicious code in glpenguin (npm) (malicious package)
- [MAL-2025-21605](https://insights.sbomify.com/MAL-2025-21605/): Malicious code in glow_uxxmn_nhsk3_zenith (npm) (malicious package)
- [MAL-2025-21604](https://insights.sbomify.com/MAL-2025-21604/): Malicious code in glow_sux6h_gv5lg_tempest (npm) (malicious package)
- [MAL-2025-21603](https://insights.sbomify.com/MAL-2025-21603/): Malicious code in glow_b7flw_rcx7y_keystone (npm) (malicious package)
- [MAL-2025-21602](https://insights.sbomify.com/MAL-2025-21602/): Malicious code in glow_957h7_gbtid_drizzle (npm) (malicious package)
- [MAL-2025-21601](https://insights.sbomify.com/MAL-2025-21601/): Malicious code in glow-zfvhq-3vj5l-jade-project (npm) (malicious package)
- [MAL-2025-21600](https://insights.sbomify.com/MAL-2025-21600/): Malicious code in glow-y1z1a-yv7rc-jungle-project (npm) (malicious package)
- [MAL-2025-2160](https://insights.sbomify.com/MAL-2025-2160/): Malicious code in aave-v3-crosschain-listing-template (npm) (malicious package)
- [MAL-2025-216](https://insights.sbomify.com/MAL-2025-216/): Malicious code in pilcom2 (npm) (malicious package)
- [MAL-2025-21599](https://insights.sbomify.com/MAL-2025-21599/): Malicious code in glow-wds16-y23uq-alchemy-project (npm) (malicious package)
- [MAL-2025-21598](https://insights.sbomify.com/MAL-2025-21598/): Malicious code in glow-v3nsf-o1w38-yellow-project (npm) (malicious package)
- [MAL-2025-21597](https://insights.sbomify.com/MAL-2025-21597/): Malicious code in glow-p3wmn-2cmta-bison-project (npm) (malicious package)
- [MAL-2025-21596](https://insights.sbomify.com/MAL-2025-21596/): Malicious code in glow-os232-pbc9r-yellow-project (npm) (malicious package)
- [MAL-2025-21595](https://insights.sbomify.com/MAL-2025-21595/): Malicious code in glow-m7ob1-tgmj0-raven-project (npm) (malicious package)
- [MAL-2025-21594](https://insights.sbomify.com/MAL-2025-21594/): Malicious code in glow-ijsn3-xlrpg-nymph-project (npm) (malicious package)
- [MAL-2025-21593](https://insights.sbomify.com/MAL-2025-21593/): Malicious code in glow-folgj-r4nz8-emerald-project (npm) (malicious package)
- [MAL-2025-21592](https://insights.sbomify.com/MAL-2025-21592/): Malicious code in glow-fkhrk-kwhgl-bison-project (npm) (malicious package)
- [MAL-2025-21591](https://insights.sbomify.com/MAL-2025-21591/): Malicious code in glow-earvq-vrre5-quiver-project (npm) (malicious package)
- [MAL-2025-21590](https://insights.sbomify.com/MAL-2025-21590/): Malicious code in glow-d8x1i-z5vb3-vista-project (npm) (malicious package)
- [MAL-2025-2159](https://insights.sbomify.com/MAL-2025-2159/): Malicious code in @adminproxy/module-utils-server (npm) (malicious package)
- [MAL-2025-21589](https://insights.sbomify.com/MAL-2025-21589/): Malicious code in glow-8rs4t-ryjre-nymph-project (npm) (malicious package)
- [MAL-2025-21588](https://insights.sbomify.com/MAL-2025-21588/): Malicious code in glow-1xrcr-ju80e-yellow-project (npm) (malicious package)
- [MAL-2025-21587](https://insights.sbomify.com/MAL-2025-21587/): Malicious code in glossa (npm) (malicious package)
- [MAL-2025-21586](https://insights.sbomify.com/MAL-2025-21586/): Malicious code in gloparser (npm) (malicious package)
- [MAL-2025-21585](https://insights.sbomify.com/MAL-2025-21585/): Malicious code in globonews (npm) (malicious package)
- [MAL-2025-21584](https://insights.sbomify.com/MAL-2025-21584/): Malicious code in globedemo (npm) (malicious package)
- [MAL-2025-21583](https://insights.sbomify.com/MAL-2025-21583/): Malicious code in globalid (npm) (malicious package)
- [MAL-2025-21582](https://insights.sbomify.com/MAL-2025-21582/): Malicious code in global-rest-gacrux-test (npm) (malicious package)
- [MAL-2025-21581](https://insights.sbomify.com/MAL-2025-21581/): Malicious code in global-one (npm) (malicious package)
- [MAL-2025-21580](https://insights.sbomify.com/MAL-2025-21580/): Malicious code in global-logger-joongo (npm) (malicious package)
- [MAL-2025-2158](https://insights.sbomify.com/MAL-2025-2158/): Malicious code in @adminproxy/module-utils-common (npm) (malicious package)
- [MAL-2025-21579](https://insights.sbomify.com/MAL-2025-21579/): Malicious code in global-chariklo-phylogenetics-terraforming (npm) (malicious package)
- [MAL-2025-21578](https://insights.sbomify.com/MAL-2025-21578/): Malicious code in global-baryon-dotenv-parse-variables-frontend (npm) (malicious package)
- [MAL-2025-21577](https://insights.sbomify.com/MAL-2025-21577/): Malicious code in glob-match (npm) (malicious package)
- [MAL-2025-21576](https://insights.sbomify.com/MAL-2025-21576/): Malicious code in glitchpy (npm) (malicious package)
- [MAL-2025-21575](https://insights.sbomify.com/MAL-2025-21575/): Malicious code in glital (npm) (malicious package)
- [MAL-2025-21574](https://insights.sbomify.com/MAL-2025-21574/): Malicious code in glisten-revel-ldd699-project (npm) (malicious package)
- [MAL-2025-21573](https://insights.sbomify.com/MAL-2025-21573/): Malicious code in glisten-delight-yxs008-project (npm) (malicious package)
- [MAL-2025-21572](https://insights.sbomify.com/MAL-2025-21572/): Malicious code in glip.socket.io (npm) (malicious package)
- [MAL-2025-21571](https://insights.sbomify.com/MAL-2025-21571/): Malicious code in glints-js-sdk (npm) (malicious package)
- [MAL-2025-21570](https://insights.sbomify.com/MAL-2025-21570/): Malicious code in glenzie (npm) (malicious package)
- [MAL-2025-2157](https://insights.sbomify.com/MAL-2025-2157/): Malicious code in @adminproxy/module-utils-client (npm) (malicious package)
- [MAL-2025-21569](https://insights.sbomify.com/MAL-2025-21569/): Malicious code in glen-wiqha-0noll-haven-project (npm) (malicious package)
- [MAL-2025-21568](https://insights.sbomify.com/MAL-2025-21568/): Malicious code in glen-w0p0c-walnf-crescent-project (npm) (malicious package)
- [MAL-2025-21567](https://insights.sbomify.com/MAL-2025-21567/): Malicious code in glen-p0jb3-v974l-drift-project (npm) (malicious package)
- [MAL-2025-21566](https://insights.sbomify.com/MAL-2025-21566/): Malicious code in glen-6yann-y1g4s-yonder-project (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/873/