# Vulnerabilities published in 2025


- [MAL-2025-21475](https://insights.sbomify.com/MAL-2025-21475/): Malicious code in gitali (npm) (malicious package)
- [MAL-2025-21474](https://insights.sbomify.com/MAL-2025-21474/): Malicious code in gita-toge89-breki (npm) (malicious package)
- [MAL-2025-21473](https://insights.sbomify.com/MAL-2025-21473/): Malicious code in gita-tempe7-kuki (npm) (malicious package)
- [MAL-2025-21472](https://insights.sbomify.com/MAL-2025-21472/): Malicious code in gita-telur59-kuki (npm) (malicious package)
- [MAL-2025-21471](https://insights.sbomify.com/MAL-2025-21471/): Malicious code in gita-teh70-breki (npm) (malicious package)
- [MAL-2025-21470](https://insights.sbomify.com/MAL-2025-21470/): Malicious code in gita-ronde60-sukiwir (npm) (malicious package)
- [MAL-2025-2147](https://insights.sbomify.com/MAL-2025-2147/): Malicious code in wishorn-log (npm) (malicious package)
- [MAL-2025-21469](https://insights.sbomify.com/MAL-2025-21469/): Malicious code in gita-rendang7-breki (npm) (malicious package)
- [MAL-2025-21468](https://insights.sbomify.com/MAL-2025-21468/): Malicious code in gita-lupis61-sukiwir (npm) (malicious package)
- [MAL-2025-21467](https://insights.sbomify.com/MAL-2025-21467/): Malicious code in gita-lapis87-breki (npm) (malicious package)
- [MAL-2025-21466](https://insights.sbomify.com/MAL-2025-21466/): Malicious code in gita-kupat27-breki (npm) (malicious package)
- [MAL-2025-21465](https://insights.sbomify.com/MAL-2025-21465/): Malicious code in gita-kue62-breki (npm) (malicious package)
- [MAL-2025-21464](https://insights.sbomify.com/MAL-2025-21464/): Malicious code in gita-kolak77-breki (npm) (malicious package)
- [MAL-2025-21463](https://insights.sbomify.com/MAL-2025-21463/): Malicious code in gita-ketoprak40-breki (npm) (malicious package)
- [MAL-2025-21462](https://insights.sbomify.com/MAL-2025-21462/): Malicious code in gita-gepuk15-breki (npm) (malicious package)
- [MAL-2025-21461](https://insights.sbomify.com/MAL-2025-21461/): Malicious code in gita-gado-gado28-breki (npm) (malicious package)
- [MAL-2025-21460](https://insights.sbomify.com/MAL-2025-21460/): Malicious code in gita-bika38-breki (npm) (malicious package)
- [MAL-2025-2146](https://insights.sbomify.com/MAL-2025-2146/): Malicious code in whitebit-test (npm) (malicious package)
- [MAL-2025-21459](https://insights.sbomify.com/MAL-2025-21459/): Malicious code in gita-bakwan72-breki (npm) (malicious package)
- [MAL-2025-21458](https://insights.sbomify.com/MAL-2025-21458/): Malicious code in git-ps (npm) (malicious package)
- [MAL-2025-21457](https://insights.sbomify.com/MAL-2025-21457/): Malicious code in git-pl (npm) (malicious package)
- [MAL-2025-21456](https://insights.sbomify.com/MAL-2025-21456/): Malicious code in git-ocr (npm) (malicious package)
- [MAL-2025-21455](https://insights.sbomify.com/MAL-2025-21455/): Malicious code in git-mirror-client (npm) (malicious package)
- [MAL-2025-21454](https://insights.sbomify.com/MAL-2025-21454/): Malicious code in git-lg (npm) (malicious package)
- [MAL-2025-21453](https://insights.sbomify.com/MAL-2025-21453/): Malicious code in git-cliff-win32-x64 (npm) (malicious package)
- [MAL-2025-21452](https://insights.sbomify.com/MAL-2025-21452/): Malicious code in git-cliff-win32-arm64 (npm) (malicious package)
- [MAL-2025-21451](https://insights.sbomify.com/MAL-2025-21451/): Malicious code in gistpad (npm) (malicious package)
- [MAL-2025-21450](https://insights.sbomify.com/MAL-2025-21450/): Malicious code in girltalk (npm) (malicious package)
- [MAL-2025-2145](https://insights.sbomify.com/MAL-2025-2145/): Malicious code in whitebit-main (npm) (malicious package)
- [MAL-2025-21449](https://insights.sbomify.com/MAL-2025-21449/): Malicious code in GirlJS (npm) (malicious package)
- [MAL-2025-21448](https://insights.sbomify.com/MAL-2025-21448/): Malicious code in girard (npm) (malicious package)
- [MAL-2025-21447](https://insights.sbomify.com/MAL-2025-21447/): Malicious code in giraffe_s6y6n_ygi84_sanctuary (npm) (malicious package)
- [MAL-2025-21446](https://insights.sbomify.com/MAL-2025-21446/): Malicious code in giraffe_of6tw_9ljzv_aspen (npm) (malicious package)
- [MAL-2025-21445](https://insights.sbomify.com/MAL-2025-21445/): Malicious code in giraffe_ngqb2_fhbb1_quiver (npm) (malicious package)
- [MAL-2025-21444](https://insights.sbomify.com/MAL-2025-21444/): Malicious code in giraffe_n23uq_lyuko_vortex (npm) (malicious package)
- [MAL-2025-21443](https://insights.sbomify.com/MAL-2025-21443/): Malicious code in giraffe_lnz7u_5pb8q_dew (npm) (malicious package)
- [MAL-2025-21442](https://insights.sbomify.com/MAL-2025-21442/): Malicious code in giraffe_cff0d_c0r1s_iris (npm) (malicious package)
- [MAL-2025-21441](https://insights.sbomify.com/MAL-2025-21441/): Malicious code in giraffe_45hrm_dfcsz_xylophone (npm) (malicious package)
- [MAL-2025-21440](https://insights.sbomify.com/MAL-2025-21440/): Malicious code in giraffe-yucca-lsc635-project (npm) (malicious package)
- [MAL-2025-2144](https://insights.sbomify.com/MAL-2025-2144/): Malicious code in whitebit-internal (npm) (malicious package)
- [MAL-2025-21439](https://insights.sbomify.com/MAL-2025-21439/): Malicious code in giraffe-reports (npm) (malicious package)
- [MAL-2025-21438](https://insights.sbomify.com/MAL-2025-21438/): Malicious code in giraffe-oak-iao978-project (npm) (malicious package)
- [MAL-2025-21437](https://insights.sbomify.com/MAL-2025-21437/): Malicious code in giraffe-nymph-chj096-project (npm) (malicious package)
- [MAL-2025-21436](https://insights.sbomify.com/MAL-2025-21436/): Malicious code in giraffe-lagoon-nwe755-project (npm) (malicious package)
- [MAL-2025-21435](https://insights.sbomify.com/MAL-2025-21435/): Malicious code in giraffe-jade-cnx074-project (npm) (malicious package)
- [MAL-2025-21434](https://insights.sbomify.com/MAL-2025-21434/): Malicious code in giraffe-glade-ppc442-project (npm) (malicious package)
- [MAL-2025-21433](https://insights.sbomify.com/MAL-2025-21433/): Malicious code in giraffe-fox-qok168-project (npm) (malicious package)
- [MAL-2025-21432](https://insights.sbomify.com/MAL-2025-21432/): Malicious code in giraffe-fern-xeb201-project (npm) (malicious package)
- [MAL-2025-21431](https://insights.sbomify.com/MAL-2025-21431/): Malicious code in giraffe-cloud-pkt622-project (npm) (malicious package)
- [MAL-2025-21430](https://insights.sbomify.com/MAL-2025-21430/): Malicious code in giraffe-cloud-cvd846-project (npm) (malicious package)
- [MAL-2025-2143](https://insights.sbomify.com/MAL-2025-2143/): Malicious code in whitebit-dev (npm) (malicious package)
- [MAL-2025-21429](https://insights.sbomify.com/MAL-2025-21429/): Malicious code in giraffe-cliff-soi316-project (npm) (malicious package)
- [MAL-2025-21428](https://insights.sbomify.com/MAL-2025-21428/): Malicious code in giraffe-cliff-gbh685-project (npm) (malicious package)
- [MAL-2025-21427](https://insights.sbomify.com/MAL-2025-21427/): Malicious code in giovanna (npm) (malicious package)
- [MAL-2025-21426](https://insights.sbomify.com/MAL-2025-21426/): Malicious code in ginkgo-xerophyte-mqol (npm) (malicious package)
- [MAL-2025-21425](https://insights.sbomify.com/MAL-2025-21425/): Malicious code in ginkgo-volcano-agyo (npm) (malicious package)
- [MAL-2025-21424](https://insights.sbomify.com/MAL-2025-21424/): Malicious code in ginkgo-raspberry-ky0c (npm) (malicious package)
- [MAL-2025-21423](https://insights.sbomify.com/MAL-2025-21423/): Malicious code in ginkgo-golf-5ho5 (npm) (malicious package)
- [MAL-2025-21422](https://insights.sbomify.com/MAL-2025-21422/): Malicious code in ginkgo-elephant-h1pp (npm) (malicious package)
- [MAL-2025-21421](https://insights.sbomify.com/MAL-2025-21421/): Malicious code in ginger-viaduct-jse0 (npm) (malicious package)
- [MAL-2025-21420](https://insights.sbomify.com/MAL-2025-21420/): Malicious code in ginger-temple-c4k3 (npm) (malicious package)
- [MAL-2025-2142](https://insights.sbomify.com/MAL-2025-2142/): Malicious code in whitebit (npm) (malicious package)
- [MAL-2025-21419](https://insights.sbomify.com/MAL-2025-21419/): Malicious code in ginger-kangaroo-de3b (npm) (malicious package)
- [MAL-2025-21418](https://insights.sbomify.com/MAL-2025-21418/): Malicious code in ginger-heliosphere-s5g1 (npm) (malicious package)
- [MAL-2025-21417](https://insights.sbomify.com/MAL-2025-21417/): Malicious code in ginger-ferry-cbxl (npm) (malicious package)
- [MAL-2025-21416](https://insights.sbomify.com/MAL-2025-21416/): Malicious code in gimp (npm) (malicious package)
- [MAL-2025-21415](https://insights.sbomify.com/MAL-2025-21415/): Malicious code in gilang-tahu1-sukiwir (npm) (malicious package)
- [MAL-2025-21414](https://insights.sbomify.com/MAL-2025-21414/): Malicious code in gilang-sate31-kuki (npm) (malicious package)
- [MAL-2025-21413](https://insights.sbomify.com/MAL-2025-21413/): Malicious code in gilang-rendang13-sukiwir (npm) (malicious package)
- [MAL-2025-21412](https://insights.sbomify.com/MAL-2025-21412/): Malicious code in gilang-mieayam19-breki (npm) (malicious package)
- [MAL-2025-21411](https://insights.sbomify.com/MAL-2025-21411/): Malicious code in gilang-kupang94-breki (npm) (malicious package)
- [MAL-2025-21410](https://insights.sbomify.com/MAL-2025-21410/): Malicious code in gifhorse-cli (npm) (malicious package)
- [MAL-2025-2141](https://insights.sbomify.com/MAL-2025-2141/): Malicious code in webauthn-codelab (npm) (malicious package)
- [MAL-2025-21409](https://insights.sbomify.com/MAL-2025-21409/): Malicious code in gifhorse (npm) (malicious package)
- [MAL-2025-21408](https://insights.sbomify.com/MAL-2025-21408/): Malicious code in gifgen (npm) (malicious package)
- [MAL-2025-21407](https://insights.sbomify.com/MAL-2025-21407/): Malicious code in giasxhktpkbcymvd (npm) (malicious package)
- [MAL-2025-21406](https://insights.sbomify.com/MAL-2025-21406/): Malicious code in gianello (npm) (malicious package)
- [MAL-2025-21405](https://insights.sbomify.com/MAL-2025-21405/): Malicious code in ghzliwcfupdbyexk (npm) (malicious package)
- [MAL-2025-21404](https://insights.sbomify.com/MAL-2025-21404/): Malicious code in ghuloum (npm) (malicious package)
- [MAL-2025-21403](https://insights.sbomify.com/MAL-2025-21403/): Malicious code in ghostlulz-dependency (npm) (malicious package)
- [MAL-2025-21402](https://insights.sbomify.com/MAL-2025-21402/): Malicious code in ghostdrop (npm) (malicious package)
- [MAL-2025-21401](https://insights.sbomify.com/MAL-2025-21401/): Malicious code in ghcudlmhk15dmriqil4k8rxzd5axu9ri (npm) (malicious package)
- [MAL-2025-21400](https://insights.sbomify.com/MAL-2025-21400/): Malicious code in ggpserver (npm) (malicious package)
- [MAL-2025-2140](https://insights.sbomify.com/MAL-2025-2140/): Malicious code in web3-2-alpha (npm) (malicious package)
- [MAL-2025-214](https://insights.sbomify.com/MAL-2025-214/): Malicious code in opensea-developer-docs (npm) (malicious package)
- [MAL-2025-21399](https://insights.sbomify.com/MAL-2025-21399/): Malicious code in ggjvic (npm) (malicious package)
- [MAL-2025-21398](https://insights.sbomify.com/MAL-2025-21398/): Malicious code in ggc3ekbfsuhscfrw5jdmzi087ftjv2ip (npm) (malicious package)
- [MAL-2025-21397](https://insights.sbomify.com/MAL-2025-21397/): Malicious code in gfyrt34 (npm) (malicious package)
- [MAL-2025-21396](https://insights.sbomify.com/MAL-2025-21396/): Malicious code in gfxapi (npm) (malicious package)
- [MAL-2025-21395](https://insights.sbomify.com/MAL-2025-21395/): Malicious code in gfwealth-nightswatch (npm) (malicious package)
- [MAL-2025-21394](https://insights.sbomify.com/MAL-2025-21394/): Malicious code in gfsni-backend (npm) (malicious package)
- [MAL-2025-21393](https://insights.sbomify.com/MAL-2025-21393/): Malicious code in gfrr4 (npm) (malicious package)
- [MAL-2025-21392](https://insights.sbomify.com/MAL-2025-21392/): Malicious code in gformjs (npm) (malicious package)
- [MAL-2025-21391](https://insights.sbomify.com/MAL-2025-21391/): Malicious code in gfk-bba-backend (npm) (malicious package)
- [MAL-2025-21390](https://insights.sbomify.com/MAL-2025-21390/): Malicious code in gfh56 (npm) (malicious package)
- [MAL-2025-2139](https://insights.sbomify.com/MAL-2025-2139/): Malicious code in vue-integration (npm) (malicious package)
- [MAL-2025-21389](https://insights.sbomify.com/MAL-2025-21389/): Malicious code in gfg24 (npm) (malicious package)
- [MAL-2025-21388](https://insights.sbomify.com/MAL-2025-21388/): Malicious code in gfdg4t4 (npm) (malicious package)
- [MAL-2025-21387](https://insights.sbomify.com/MAL-2025-21387/): Malicious code in gfd444 (npm) (malicious package)
- [MAL-2025-21386](https://insights.sbomify.com/MAL-2025-21386/): Malicious code in gf43 (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/875/