# Vulnerabilities published in 2025


- [MAL-2025-21565](https://insights.sbomify.com/MAL-2025-21565/): Malicious code in gleam-oak-lka367-project (npm) (malicious package)
- [MAL-2025-21564](https://insights.sbomify.com/MAL-2025-21564/): Malicious code in gleam-murmur-zlz108-project (npm) (malicious package)
- [MAL-2025-21563](https://insights.sbomify.com/MAL-2025-21563/): Malicious code in glasquare (npm) (malicious package)
- [MAL-2025-21562](https://insights.sbomify.com/MAL-2025-21562/): Malicious code in gladiatus (npm) (malicious package)
- [MAL-2025-21561](https://insights.sbomify.com/MAL-2025-21561/): Malicious code in glade_v41ye_iizzd_kaleidoscope (npm) (malicious package)
- [MAL-2025-21560](https://insights.sbomify.com/MAL-2025-21560/): Malicious code in glade_hf85v_lfb2d_xenith (npm) (malicious package)
- [MAL-2025-2156](https://insights.sbomify.com/MAL-2025-2156/): Malicious code in tommyboytesting (npm) (malicious package)
- [MAL-2025-21559](https://insights.sbomify.com/MAL-2025-21559/): Malicious code in glade_cwxwo_72lzv_crown (npm) (malicious package)
- [MAL-2025-21558](https://insights.sbomify.com/MAL-2025-21558/): Malicious code in glade_bf0pd_05wxe_legend (npm) (malicious package)
- [MAL-2025-21557](https://insights.sbomify.com/MAL-2025-21557/): Malicious code in glade-zebra-gjf139-project (npm) (malicious package)
- [MAL-2025-21556](https://insights.sbomify.com/MAL-2025-21556/): Malicious code in glade-xerox-qis487-project (npm) (malicious package)
- [MAL-2025-21555](https://insights.sbomify.com/MAL-2025-21555/): Malicious code in glade-quasar-dfc689-project (npm) (malicious package)
- [MAL-2025-21554](https://insights.sbomify.com/MAL-2025-21554/): Malicious code in glade-quail-vbz748-project (npm) (malicious package)
- [MAL-2025-21553](https://insights.sbomify.com/MAL-2025-21553/): Malicious code in glade-opaline-auo863-project (npm) (malicious package)
- [MAL-2025-21552](https://insights.sbomify.com/MAL-2025-21552/): Malicious code in glade-opal-bxl097-project (npm) (malicious package)
- [MAL-2025-21551](https://insights.sbomify.com/MAL-2025-21551/): Malicious code in glade-nautilus-ine810-project (npm) (malicious package)
- [MAL-2025-21550](https://insights.sbomify.com/MAL-2025-21550/): Malicious code in glade-moon-agg795-project (npm) (malicious package)
- [MAL-2025-2155](https://insights.sbomify.com/MAL-2025-2155/): Malicious code in sdxcode1 (npm) (malicious package)
- [MAL-2025-21549](https://insights.sbomify.com/MAL-2025-21549/): Malicious code in glade-lilac-ysn943-project (npm) (malicious package)
- [MAL-2025-21548](https://insights.sbomify.com/MAL-2025-21548/): Malicious code in glade-lightning-plt546-project (npm) (malicious package)
- [MAL-2025-21547](https://insights.sbomify.com/MAL-2025-21547/): Malicious code in glade-igloo-gvh812-project (npm) (malicious package)
- [MAL-2025-21546](https://insights.sbomify.com/MAL-2025-21546/): Malicious code in glade-fern-dph574-project (npm) (malicious package)
- [MAL-2025-21545](https://insights.sbomify.com/MAL-2025-21545/): Malicious code in glade-dove-kqd619-project (npm) (malicious package)
- [MAL-2025-21544](https://insights.sbomify.com/MAL-2025-21544/): Malicious code in glaciology-wolf-parsec-server (npm) (malicious package)
- [MAL-2025-21543](https://insights.sbomify.com/MAL-2025-21543/): Malicious code in glaciology-vulcan-cryonics-javascript (npm) (malicious package)
- [MAL-2025-21542](https://insights.sbomify.com/MAL-2025-21542/): Malicious code in glaciology-query-fetch-exec (npm) (malicious package)
- [MAL-2025-21541](https://insights.sbomify.com/MAL-2025-21541/): Malicious code in glaciology-mira-blackhole-greatfilter (npm) (malicious package)
- [MAL-2025-21540](https://insights.sbomify.com/MAL-2025-21540/): Malicious code in glaciology-electron-builder-docusaurus-configstore (npm) (malicious package)
- [MAL-2025-2154](https://insights.sbomify.com/MAL-2025-2154/): Malicious code in crypto-invoicer (npm) (malicious package)
- [MAL-2025-21539](https://insights.sbomify.com/MAL-2025-21539/): Malicious code in glaciology-castor-buffer-webdriverio (npm) (malicious package)
- [MAL-2025-21538](https://insights.sbomify.com/MAL-2025-21538/): Malicious code in glacier_xy667_hlfu1_yonder (npm) (malicious package)
- [MAL-2025-21537](https://insights.sbomify.com/MAL-2025-21537/): Malicious code in glacier_x94xq_i8bvi_breeze (npm) (malicious package)
- [MAL-2025-21536](https://insights.sbomify.com/MAL-2025-21536/): Malicious code in glacier_vdr4v_kbxz6_glade (npm) (malicious package)
- [MAL-2025-21535](https://insights.sbomify.com/MAL-2025-21535/): Malicious code in glacier_k3ob4_3o3og_oasis (npm) (malicious package)
- [MAL-2025-21534](https://insights.sbomify.com/MAL-2025-21534/): Malicious code in glacier_im4le_3uuys_heather (npm) (malicious package)
- [MAL-2025-21533](https://insights.sbomify.com/MAL-2025-21533/): Malicious code in glacier_hijch_ofgay_xenith (npm) (malicious package)
- [MAL-2025-21532](https://insights.sbomify.com/MAL-2025-21532/): Malicious code in glacier_6mq3n_i0nkx_evoke (npm) (malicious package)
- [MAL-2025-21531](https://insights.sbomify.com/MAL-2025-21531/): Malicious code in glacier-yellow-pof386-project (npm) (malicious package)
- [MAL-2025-21530](https://insights.sbomify.com/MAL-2025-21530/): Malicious code in glacier-yellow-opu263-project (npm) (malicious package)
- [MAL-2025-2153](https://insights.sbomify.com/MAL-2025-2153/): Malicious code in upload-testflight-action (npm) (malicious package)
- [MAL-2025-21529](https://insights.sbomify.com/MAL-2025-21529/): Malicious code in glacier-x6uw0-u15n3-quartz-project (npm) (malicious package)
- [MAL-2025-21528](https://insights.sbomify.com/MAL-2025-21528/): Malicious code in glacier-waterfall-ckb568-project (npm) (malicious package)
- [MAL-2025-21527](https://insights.sbomify.com/MAL-2025-21527/): Malicious code in glacier-spruce-lcp491-project (npm) (malicious package)
- [MAL-2025-21526](https://insights.sbomify.com/MAL-2025-21526/): Malicious code in glacier-quail-yyi309-project (npm) (malicious package)
- [MAL-2025-21525](https://insights.sbomify.com/MAL-2025-21525/): Malicious code in glacier-piano-wgz803-project (npm) (malicious package)
- [MAL-2025-21524](https://insights.sbomify.com/MAL-2025-21524/): Malicious code in glacier-opal-kgh733-project (npm) (malicious package)
- [MAL-2025-21523](https://insights.sbomify.com/MAL-2025-21523/): Malicious code in glacier-lilac-yay654-project (npm) (malicious package)
- [MAL-2025-21522](https://insights.sbomify.com/MAL-2025-21522/): Malicious code in glacier-lagoon-oco032-project (npm) (malicious package)
- [MAL-2025-21521](https://insights.sbomify.com/MAL-2025-21521/): Malicious code in glacier-lagoon-app009-project (npm) (malicious package)
- [MAL-2025-21520](https://insights.sbomify.com/MAL-2025-21520/): Malicious code in glacier-kite-ged465-project (npm) (malicious package)
- [MAL-2025-2152](https://insights.sbomify.com/MAL-2025-2152/): Malicious code in certifications (PyPI) (malicious package)
- [MAL-2025-21519](https://insights.sbomify.com/MAL-2025-21519/): Malicious code in glacier-iceberg-ijp896-project (npm) (malicious package)
- [MAL-2025-21518](https://insights.sbomify.com/MAL-2025-21518/): Malicious code in glacier-horizon-ahd256-project (npm) (malicious package)
- [MAL-2025-21517](https://insights.sbomify.com/MAL-2025-21517/): Malicious code in glacier-honeycomb-yrc049-project (npm) (malicious package)
- [MAL-2025-21516](https://insights.sbomify.com/MAL-2025-21516/): Malicious code in glacier-coral-yun199-project (npm) (malicious package)
- [MAL-2025-21515](https://insights.sbomify.com/MAL-2025-21515/): Malicious code in glacier-cloud-yqk343-project (npm) (malicious package)
- [MAL-2025-21514](https://insights.sbomify.com/MAL-2025-21514/): Malicious code in glacier-cherry-ket500-project (npm) (malicious package)
- [MAL-2025-21513](https://insights.sbomify.com/MAL-2025-21513/): Malicious code in glacier-bonfire-mtj174-project (npm) (malicious package)
- [MAL-2025-21512](https://insights.sbomify.com/MAL-2025-21512/): Malicious code in glacier-akn1n-diogl-xenith-project (npm) (malicious package)
- [MAL-2025-21511](https://insights.sbomify.com/MAL-2025-21511/): Malicious code in gkzysqdhmoakwvpl (npm) (malicious package)
- [MAL-2025-21510](https://insights.sbomify.com/MAL-2025-21510/): Malicious code in gkyzohjukivxndrb (npm) (malicious package)
- [MAL-2025-2151](https://insights.sbomify.com/MAL-2025-2151/): Malicious code in dexter-server (npm) (malicious package)
- [MAL-2025-21509](https://insights.sbomify.com/MAL-2025-21509/): Malicious code in gkufdxrvzehskmbq (npm) (malicious package)
- [MAL-2025-21508](https://insights.sbomify.com/MAL-2025-21508/): Malicious code in gkrzwfculhbvsqyx (npm) (malicious package)
- [MAL-2025-21507](https://insights.sbomify.com/MAL-2025-21507/): Malicious code in gkrtalpha (npm) (malicious package)
- [MAL-2025-21506](https://insights.sbomify.com/MAL-2025-21506/): Malicious code in gkqhjraptnskyxmv (npm) (malicious package)
- [MAL-2025-21505](https://insights.sbomify.com/MAL-2025-21505/): Malicious code in gkozvefrhxdqlkap (npm) (malicious package)
- [MAL-2025-21504](https://insights.sbomify.com/MAL-2025-21504/): Malicious code in gkmenwcaszhvotlf (npm) (malicious package)
- [MAL-2025-21503](https://insights.sbomify.com/MAL-2025-21503/): Malicious code in gkhptyjmckfdzaui (npm) (malicious package)
- [MAL-2025-21502](https://insights.sbomify.com/MAL-2025-21502/): Malicious code in gkfhztsmuxjbvkyw (npm) (malicious package)
- [MAL-2025-21501](https://insights.sbomify.com/MAL-2025-21501/): Malicious code in gka-01-bp-address-auto-complete-by-component (npm) (malicious package)
- [MAL-2025-21500](https://insights.sbomify.com/MAL-2025-21500/): Malicious code in gjs-development-scripts (npm) (malicious package)
- [MAL-2025-2150](https://insights.sbomify.com/MAL-2025-2150/): Malicious code in migrate-npm-registry (npm) (malicious package)
- [MAL-2025-215](https://insights.sbomify.com/MAL-2025-215/): Malicious code in percy-cake-electron-app (npm) (malicious package)
- [MAL-2025-21499](https://insights.sbomify.com/MAL-2025-21499/): Malicious code in gizmocoin (npm) (malicious package)
- [MAL-2025-21498](https://insights.sbomify.com/MAL-2025-21498/): Malicious code in gixxcel (npm) (malicious package)
- [MAL-2025-21497](https://insights.sbomify.com/MAL-2025-21497/): Malicious code in givecrm (npm) (malicious package)
- [MAL-2025-21496](https://insights.sbomify.com/MAL-2025-21496/): Malicious code in give-advice-10th (npm) (malicious package)
- [MAL-2025-21495](https://insights.sbomify.com/MAL-2025-21495/): Malicious code in gittorial (npm) (malicious package)
- [MAL-2025-21494](https://insights.sbomify.com/MAL-2025-21494/): Malicious code in gitter-irc-bridge (npm) (malicious package)
- [MAL-2025-21493](https://insights.sbomify.com/MAL-2025-21493/): Malicious code in gitsskill (npm) (malicious package)
- [MAL-2025-21492](https://insights.sbomify.com/MAL-2025-21492/): Malicious code in gitshrub (npm) (malicious package)
- [MAL-2025-21491](https://insights.sbomify.com/MAL-2025-21491/): Malicious code in gitrepr (npm) (malicious package)
- [MAL-2025-21490](https://insights.sbomify.com/MAL-2025-21490/): Malicious code in gitology (npm) (malicious package)
- [MAL-2025-2149](https://insights.sbomify.com/MAL-2025-2149/): Malicious code in nmp-frontend-libraries (npm) (malicious package)
- [MAL-2025-21489](https://insights.sbomify.com/MAL-2025-21489/): Malicious code in gitmodel (npm) (malicious package)
- [MAL-2025-21488](https://insights.sbomify.com/MAL-2025-21488/): Malicious code in gitkurs (npm) (malicious package)
- [MAL-2025-21487](https://insights.sbomify.com/MAL-2025-21487/): Malicious code in gitkoning (npm) (malicious package)
- [MAL-2025-21486](https://insights.sbomify.com/MAL-2025-21486/): Malicious code in githwqy (npm) (malicious package)
- [MAL-2025-21485](https://insights.sbomify.com/MAL-2025-21485/): Malicious code in githut-api-fbnew (npm) (malicious package)
- [MAL-2025-21484](https://insights.sbomify.com/MAL-2025-21484/): Malicious code in githubtes (npm) (malicious package)
- [MAL-2025-21483](https://insights.sbomify.com/MAL-2025-21483/): Malicious code in githubinfo (npm) (malicious package)
- [MAL-2025-21482](https://insights.sbomify.com/MAL-2025-21482/): Malicious code in github-react-components (npm) (malicious package)
- [MAL-2025-21481](https://insights.sbomify.com/MAL-2025-21481/): Malicious code in githsc (npm) (malicious package)
- [MAL-2025-21480](https://insights.sbomify.com/MAL-2025-21480/): Malicious code in githowto (npm) (malicious package)
- [MAL-2025-2148](https://insights.sbomify.com/MAL-2025-2148/): Malicious code in d4rk0nm3 (npm) (malicious package)
- [MAL-2025-21479](https://insights.sbomify.com/MAL-2025-21479/): Malicious code in gitbub (npm) (malicious package)
- [MAL-2025-21478](https://insights.sbomify.com/MAL-2025-21478/): Malicious code in gitbook-plugin-datadotworld (npm) (malicious package)
- [MAL-2025-21477](https://insights.sbomify.com/MAL-2025-21477/): Malicious code in gitarise (npm) (malicious package)
- [MAL-2025-21476](https://insights.sbomify.com/MAL-2025-21476/): Malicious code in gitalien (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/874/