# Vulnerabilities published in 2025


- [MAL-2025-21385](https://insights.sbomify.com/MAL-2025-21385/): Malicious code in gf-ionic2 (npm) (malicious package)
- [MAL-2025-21384](https://insights.sbomify.com/MAL-2025-21384/): Malicious code in gezi-core (npm) (malicious package)
- [MAL-2025-21383](https://insights.sbomify.com/MAL-2025-21383/): Malicious code in gezi (npm) (malicious package)
- [MAL-2025-21382](https://insights.sbomify.com/MAL-2025-21382/): Malicious code in geyser_zo3iy_9nrnt_mist (npm) (malicious package)
- [MAL-2025-21381](https://insights.sbomify.com/MAL-2025-21381/): Malicious code in geyser_yvbq0_ja8z7_xenon (npm) (malicious package)
- [MAL-2025-21380](https://insights.sbomify.com/MAL-2025-21380/): Malicious code in geyser_yrbcu_ipnwd_karma (npm) (malicious package)
- [MAL-2025-2138](https://insights.sbomify.com/MAL-2025-2138/): Malicious code in vue-custom-widget-template1 (npm) (malicious package)
- [MAL-2025-21379](https://insights.sbomify.com/MAL-2025-21379/): Malicious code in geyser_oo9bt_fpus2_echo (npm) (malicious package)
- [MAL-2025-21378](https://insights.sbomify.com/MAL-2025-21378/): Malicious code in geyser_oj26s_rqwsb_breeze (npm) (malicious package)
- [MAL-2025-21377](https://insights.sbomify.com/MAL-2025-21377/): Malicious code in geyser_jjian_mxak4_wander (npm) (malicious package)
- [MAL-2025-21376](https://insights.sbomify.com/MAL-2025-21376/): Malicious code in geyser_c34yi_5hbiw_obsidian (npm) (malicious package)
- [MAL-2025-21375](https://insights.sbomify.com/MAL-2025-21375/): Malicious code in geyser_3d9l4_scsig_island (npm) (malicious package)
- [MAL-2025-21374](https://insights.sbomify.com/MAL-2025-21374/): Malicious code in gevpro (npm) (malicious package)
- [MAL-2025-21373](https://insights.sbomify.com/MAL-2025-21373/): Malicious code in gettick-node (npm) (malicious package)
- [MAL-2025-21372](https://insights.sbomify.com/MAL-2025-21372/): Malicious code in getpaid (npm) (malicious package)
- [MAL-2025-21371](https://insights.sbomify.com/MAL-2025-21371/): Malicious code in getissues (npm) (malicious package)
- [MAL-2025-21370](https://insights.sbomify.com/MAL-2025-21370/): Malicious code in getissue (npm) (malicious package)
- [MAL-2025-2137](https://insights.sbomify.com/MAL-2025-2137/): Malicious code in v1ue-custom-widget-template (npm) (malicious package)
- [MAL-2025-21369](https://insights.sbomify.com/MAL-2025-21369/): Malicious code in gethostinfo (npm) (malicious package)
- [MAL-2025-21368](https://insights.sbomify.com/MAL-2025-21368/): Malicious code in getcookies (npm) (malicious package)
- [MAL-2025-21367](https://insights.sbomify.com/MAL-2025-21367/): Malicious code in getamped (npm) (malicious package)
- [MAL-2025-21366](https://insights.sbomify.com/MAL-2025-21366/): Malicious code in get-stats-from-planning-file (npm) (malicious package)
- [MAL-2025-21365](https://insights.sbomify.com/MAL-2025-21365/): Malicious code in get-start-synpress (npm) (malicious package)
- [MAL-2025-21364](https://insights.sbomify.com/MAL-2025-21364/): Malicious code in get-asphalt-9-legends-credits-generator (npm) (malicious package)
- [MAL-2025-21363](https://insights.sbomify.com/MAL-2025-21363/): Malicious code in get-ark-survival-ancient-amber-generator (npm) (malicious package)
- [MAL-2025-21362](https://insights.sbomify.com/MAL-2025-21362/): Malicious code in gestor-creditos (npm) (malicious package)
- [MAL-2025-21361](https://insights.sbomify.com/MAL-2025-21361/): Malicious code in gestaouab (npm) (malicious package)
- [MAL-2025-21360](https://insights.sbomify.com/MAL-2025-21360/): Malicious code in gestalt-borders (npm) (malicious package)
- [MAL-2025-2136](https://insights.sbomify.com/MAL-2025-2136/): Malicious code in upbit-test (npm) (malicious package)
- [MAL-2025-21359](https://insights.sbomify.com/MAL-2025-21359/): Malicious code in gestalt-avatar (npm) (malicious package)
- [MAL-2025-21358](https://insights.sbomify.com/MAL-2025-21358/): Malicious code in gestalt-accessibility-token (npm) (malicious package)
- [MAL-2025-21357](https://insights.sbomify.com/MAL-2025-21357/): Malicious code in gercon (npm) (malicious package)
- [MAL-2025-21356](https://insights.sbomify.com/MAL-2025-21356/): Malicious code in georgios (npm) (malicious package)
- [MAL-2025-21355](https://insights.sbomify.com/MAL-2025-21355/): Malicious code in georef (npm) (malicious package)
- [MAL-2025-21354](https://insights.sbomify.com/MAL-2025-21354/): Malicious code in geoposty (npm) (malicious package)
- [MAL-2025-21353](https://insights.sbomify.com/MAL-2025-21353/): Malicious code in geoport-i18n (npm) (malicious package)
- [MAL-2025-21352](https://insights.sbomify.com/MAL-2025-21352/): Malicious code in geomorphology-petrology-pm2-antd (npm) (malicious package)
- [MAL-2025-21351](https://insights.sbomify.com/MAL-2025-21351/): Malicious code in geomorphology-leda-subscription-magellan (npm) (malicious package)
- [MAL-2025-21350](https://insights.sbomify.com/MAL-2025-21350/): Malicious code in geomnet (npm) (malicious package)
- [MAL-2025-2135](https://insights.sbomify.com/MAL-2025-2135/): Malicious code in upbit-production (npm) (malicious package)
- [MAL-2025-21349](https://insights.sbomify.com/MAL-2025-21349/): Malicious code in geomip (npm) (malicious package)
- [MAL-2025-21348](https://insights.sbomify.com/MAL-2025-21348/): Malicious code in geomatics (npm) (malicious package)
- [MAL-2025-21347](https://insights.sbomify.com/MAL-2025-21347/): Malicious code in geojackal (npm) (malicious package)
- [MAL-2025-21346](https://insights.sbomify.com/MAL-2025-21346/): Malicious code in geoflux (npm) (malicious package)
- [MAL-2025-21345](https://insights.sbomify.com/MAL-2025-21345/): Malicious code in geofake (npm) (malicious package)
- [MAL-2025-21344](https://insights.sbomify.com/MAL-2025-21344/): Malicious code in geoevent (npm) (malicious package)
- [MAL-2025-21343](https://insights.sbomify.com/MAL-2025-21343/): Malicious code in geodynamo-standard-meteor-string (npm) (malicious package)
- [MAL-2025-21342](https://insights.sbomify.com/MAL-2025-21342/): Malicious code in geodynamo-inflation-superflare-spinner (npm) (malicious package)
- [MAL-2025-21341](https://insights.sbomify.com/MAL-2025-21341/): Malicious code in geodynamo-geochemistry-brane-antares (npm) (malicious package)
- [MAL-2025-21340](https://insights.sbomify.com/MAL-2025-21340/): Malicious code in geodatix (npm) (malicious package)
- [MAL-2025-2134](https://insights.sbomify.com/MAL-2025-2134/): Malicious code in upbit-main (npm) (malicious package)
- [MAL-2025-21339](https://insights.sbomify.com/MAL-2025-21339/): Malicious code in geochronology-polaris-elektra-sociobiology (npm) (malicious package)
- [MAL-2025-21338](https://insights.sbomify.com/MAL-2025-21338/): Malicious code in geochronology-markdown-jupiter-dotenv-parse-variables (npm) (malicious package)
- [MAL-2025-21337](https://insights.sbomify.com/MAL-2025-21337/): Malicious code in geochronology-luminescence-electron-builder-supernova (npm) (malicious package)
- [MAL-2025-21336](https://insights.sbomify.com/MAL-2025-21336/): Malicious code in geochemistry-shelljs-terser-webpack-plugin-koa (npm) (malicious package)
- [MAL-2025-21335](https://insights.sbomify.com/MAL-2025-21335/): Malicious code in geochemistry-seismology-higgs-karma (npm) (malicious package)
- [MAL-2025-21334](https://insights.sbomify.com/MAL-2025-21334/): Malicious code in geochemistry-panspermia-uglify-js-pulsar (npm) (malicious package)
- [MAL-2025-21333](https://insights.sbomify.com/MAL-2025-21333/): Malicious code in geobase6 (npm) (malicious package)
- [MAL-2025-21332](https://insights.sbomify.com/MAL-2025-21332/): Malicious code in geoarchaeology-vulcan-celeste-style-loader (npm) (malicious package)
- [MAL-2025-21331](https://insights.sbomify.com/MAL-2025-21331/): Malicious code in geoarchaeology-taurus-async-writable (npm) (malicious package)
- [MAL-2025-21330](https://insights.sbomify.com/MAL-2025-21330/): Malicious code in geoarchaeology-run-script-parcel-local (npm) (malicious package)
- [MAL-2025-2133](https://insights.sbomify.com/MAL-2025-2133/): Malicious code in upbit-internal (npm) (malicious package)
- [MAL-2025-21329](https://insights.sbomify.com/MAL-2025-21329/): Malicious code in geoarchaeology-deneb-local-supernova (npm) (malicious package)
- [MAL-2025-21328](https://insights.sbomify.com/MAL-2025-21328/): Malicious code in genyjs (npm) (malicious package)
- [MAL-2025-21327](https://insights.sbomify.com/MAL-2025-21327/): Malicious code in genpkg (npm) (malicious package)
- [MAL-2025-21326](https://insights.sbomify.com/MAL-2025-21326/): Malicious code in genomics-testcafe-proxima-xanthus (npm) (malicious package)
- [MAL-2025-21325](https://insights.sbomify.com/MAL-2025-21325/): Malicious code in genomics-tectonophysics-vulcan-fornax (npm) (malicious package)
- [MAL-2025-21324](https://insights.sbomify.com/MAL-2025-21324/): Malicious code in genomics-quito-mesosphere-ganymede (npm) (malicious package)
- [MAL-2025-21323](https://insights.sbomify.com/MAL-2025-21323/): Malicious code in genomics-middleware-loglevel-iota (npm) (malicious package)
- [MAL-2025-21322](https://insights.sbomify.com/MAL-2025-21322/): Malicious code in genlog (npm) (malicious package)
- [MAL-2025-21321](https://insights.sbomify.com/MAL-2025-21321/): Malicious code in geniussports.sportstream.corxjs (npm) (malicious package)
- [MAL-2025-21320](https://insights.sbomify.com/MAL-2025-21320/): Malicious code in geniusbar (npm) (malicious package)
- [MAL-2025-2132](https://insights.sbomify.com/MAL-2025-2132/): Malicious code in upbit-dev (npm) (malicious package)
- [MAL-2025-21319](https://insights.sbomify.com/MAL-2025-21319/): Malicious code in genie-smoke (npm) (malicious package)
- [MAL-2025-21318](https://insights.sbomify.com/MAL-2025-21318/): Malicious code in genesis_collector (npm) (malicious package)
- [MAL-2025-21317](https://insights.sbomify.com/MAL-2025-21317/): Malicious code in genesis_client (npm) (malicious package)
- [MAL-2025-21316](https://insights.sbomify.com/MAL-2025-21316/): Malicious code in genesis-bugs-rc1 (npm) (malicious package)
- [MAL-2025-21315](https://insights.sbomify.com/MAL-2025-21315/): Malicious code in generic-rpc (npm) (malicious package)
- [MAL-2025-21314](https://insights.sbomify.com/MAL-2025-21314/): Malicious code in generator-watson-voice-of-the-customer (npm) (malicious package)
- [MAL-2025-21313](https://insights.sbomify.com/MAL-2025-21313/): Malicious code in generator-watson-text-bot (npm) (malicious package)
- [MAL-2025-21312](https://insights.sbomify.com/MAL-2025-21312/): Malicious code in generator-watson-social-customer-care (npm) (malicious package)
- [MAL-2025-21311](https://insights.sbomify.com/MAL-2025-21311/): Malicious code in generator-watson-news-intelligence (npm) (malicious package)
- [MAL-2025-21310](https://insights.sbomify.com/MAL-2025-21310/): Malicious code in generator-unicorn-cli (npm) (malicious package)
- [MAL-2025-2131](https://insights.sbomify.com/MAL-2025-2131/): Malicious code in toloka-ui (npm) (malicious package)
- [MAL-2025-21309](https://insights.sbomify.com/MAL-2025-21309/): Malicious code in generator-torbjorn (npm) (malicious package)
- [MAL-2025-21308](https://insights.sbomify.com/MAL-2025-21308/): Malicious code in generator-thescene-lib (npm) (malicious package)
- [MAL-2025-21307](https://insights.sbomify.com/MAL-2025-21307/): Malicious code in generator-test-bla (npm) (malicious package)
- [MAL-2025-21306](https://insights.sbomify.com/MAL-2025-21306/): Malicious code in generator-studio-api (npm) (malicious package)
- [MAL-2025-21305](https://insights.sbomify.com/MAL-2025-21305/): Malicious code in generator-speedseed-polymer-whitespace (npm) (malicious package)
- [MAL-2025-21304](https://insights.sbomify.com/MAL-2025-21304/): Malicious code in generator-speedseed-angular2-whitespace (npm) (malicious package)
- [MAL-2025-21303](https://insights.sbomify.com/MAL-2025-21303/): Malicious code in generator-sglk (npm) (malicious package)
- [MAL-2025-21302](https://insights.sbomify.com/MAL-2025-21302/): Malicious code in generator-sciencelogic (npm) (malicious package)
- [MAL-2025-21301](https://insights.sbomify.com/MAL-2025-21301/): Malicious code in generator-rollup (npm) (malicious package)
- [MAL-2025-21300](https://insights.sbomify.com/MAL-2025-21300/): Malicious code in generator-react-ui-component (npm) (malicious package)
- [MAL-2025-2130](https://insights.sbomify.com/MAL-2025-2130/): Malicious code in testaaa11 (npm) (malicious package)
- [MAL-2025-213](https://insights.sbomify.com/MAL-2025-213/): Malicious code in okta-help (npm) (malicious package)
- [MAL-2025-21299](https://insights.sbomify.com/MAL-2025-21299/): Malicious code in generator-plyo (npm) (malicious package)
- [MAL-2025-21298](https://insights.sbomify.com/MAL-2025-21298/): Malicious code in generator-plato (npm) (malicious package)
- [MAL-2025-21297](https://insights.sbomify.com/MAL-2025-21297/): Malicious code in generator-modeus-app (npm) (malicious package)
- [MAL-2025-21296](https://insights.sbomify.com/MAL-2025-21296/): Malicious code in generator-mendixreact (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/876/