# Vulnerabilities published in 2025 - [MAL-2025-21295](https://insights.sbomify.com/MAL-2025-21295/): Malicious code in generator-mean-coffee (npm) (malicious package) - [MAL-2025-21294](https://insights.sbomify.com/MAL-2025-21294/): Malicious code in generator-ls-template (npm) (malicious package) - [MAL-2025-21293](https://insights.sbomify.com/MAL-2025-21293/): Malicious code in generator-longtailbanners (npm) (malicious package) - [MAL-2025-21292](https://insights.sbomify.com/MAL-2025-21292/): Malicious code in generator-longtail-banners (npm) (malicious package) - [MAL-2025-21291](https://insights.sbomify.com/MAL-2025-21291/): Malicious code in generator-longtail (npm) (malicious package) - [MAL-2025-21290](https://insights.sbomify.com/MAL-2025-21290/): Malicious code in generator-kraken-react (npm) (malicious package) - [MAL-2025-2129](https://insights.sbomify.com/MAL-2025-2129/): Malicious code in sol-web3-bundler (npm) (malicious package) - [MAL-2025-21289](https://insights.sbomify.com/MAL-2025-21289/): Malicious code in generator-just (npm) (malicious package) - [MAL-2025-21288](https://insights.sbomify.com/MAL-2025-21288/): Malicious code in generator-ionicmod (npm) (malicious package) - [MAL-2025-21287](https://insights.sbomify.com/MAL-2025-21287/): Malicious code in generator-ikom-microservice (npm) (malicious package) - [MAL-2025-21286](https://insights.sbomify.com/MAL-2025-21286/): Malicious code in generator-iea (npm) (malicious package) - [MAL-2025-21285](https://insights.sbomify.com/MAL-2025-21285/): Malicious code in generator-httpeace-react (npm) (malicious package) - [MAL-2025-21284](https://insights.sbomify.com/MAL-2025-21284/): Malicious code in generator-httpeace-node (npm) (malicious package) - [MAL-2025-21283](https://insights.sbomify.com/MAL-2025-21283/): Malicious code in generator-gobsmack (npm) (malicious package) - [MAL-2025-21282](https://insights.sbomify.com/MAL-2025-21282/): Malicious code in generator-flynt (npm) (malicious package) - [MAL-2025-21281](https://insights.sbomify.com/MAL-2025-21281/): Malicious code in generator-dr-service-template (npm) (malicious package) - [MAL-2025-21280](https://insights.sbomify.com/MAL-2025-21280/): Malicious code in generator-dmh (npm) (malicious package) - [MAL-2025-2128](https://insights.sbomify.com/MAL-2025-2128/): Malicious code in serum-anchor-wallet (npm) (malicious package) - [MAL-2025-21279](https://insights.sbomify.com/MAL-2025-21279/): Malicious code in generator-django-kickstart (npm) (malicious package) - [MAL-2025-21278](https://insights.sbomify.com/MAL-2025-21278/): Malicious code in generator-ctech-component-generator (npm) (malicious package) - [MAL-2025-21277](https://insights.sbomify.com/MAL-2025-21277/): Malicious code in generator-chainy-plugin (npm) (malicious package) - [MAL-2025-21276](https://insights.sbomify.com/MAL-2025-21276/): Malicious code in generator-chainy-bundle (npm) (malicious package) - [MAL-2025-21275](https://insights.sbomify.com/MAL-2025-21275/): Malicious code in generator-chainy (npm) (malicious package) - [MAL-2025-21274](https://insights.sbomify.com/MAL-2025-21274/): Malicious code in generator-bot-template-generator (npm) (malicious package) - [MAL-2025-21273](https://insights.sbomify.com/MAL-2025-21273/): Malicious code in generator-bbc-vj (npm) (malicious package) - [MAL-2025-21272](https://insights.sbomify.com/MAL-2025-21272/): Malicious code in generator-banner-dny (npm) (malicious package) - [MAL-2025-21271](https://insights.sbomify.com/MAL-2025-21271/): Malicious code in generator-angular-cli-library (npm) (malicious package) - [MAL-2025-21270](https://insights.sbomify.com/MAL-2025-21270/): Malicious code in generator-accelerate-redux (npm) (malicious package) - [MAL-2025-2127](https://insights.sbomify.com/MAL-2025-2127/): Malicious code in sample-action (npm) (malicious package) - [MAL-2025-21269](https://insights.sbomify.com/MAL-2025-21269/): Malicious code in generator-accelerate-react-native (npm) (malicious package) - [MAL-2025-21268](https://insights.sbomify.com/MAL-2025-21268/): Malicious code in generator-accelerate-react (npm) (malicious package) - [MAL-2025-21267](https://insights.sbomify.com/MAL-2025-21267/): Malicious code in generator-accelerate-node-microservice (npm) (malicious package) - [MAL-2025-21266](https://insights.sbomify.com/MAL-2025-21266/): Malicious code in generator-accelerate-node-api (npm) (malicious package) - [MAL-2025-21265](https://insights.sbomify.com/MAL-2025-21265/): Malicious code in generator-accelerate-mongodb (npm) (malicious package) - [MAL-2025-21264](https://insights.sbomify.com/MAL-2025-21264/): Malicious code in generator-accelerate-mern (npm) (malicious package) - [MAL-2025-21263](https://insights.sbomify.com/MAL-2025-21263/): Malicious code in generator-accelerate-data-transform (npm) (malicious package) - [MAL-2025-21262](https://insights.sbomify.com/MAL-2025-21262/): Malicious code in generator-accelerate-couchdb (npm) (malicious package) - [MAL-2025-21261](https://insights.sbomify.com/MAL-2025-21261/): Malicious code in genehive (npm) (malicious package) - [MAL-2025-21260](https://insights.sbomify.com/MAL-2025-21260/): Malicious code in gempak (npm) (malicious package) - [MAL-2025-2126](https://insights.sbomify.com/MAL-2025-2126/): Malicious code in saml-sp-linking-sample (npm) (malicious package) - [MAL-2025-21259](https://insights.sbomify.com/MAL-2025-21259/): Malicious code in gemjacker (npm) (malicious package) - [MAL-2025-21258](https://insights.sbomify.com/MAL-2025-21258/): Malicious code in gemini-resolvers-superagent-backend (npm) (malicious package) - [MAL-2025-21257](https://insights.sbomify.com/MAL-2025-21257/): Malicious code in gemini-install-server-radioastronomy (npm) (malicious package) - [MAL-2025-21256](https://insights.sbomify.com/MAL-2025-21256/): Malicious code in gemini-andromeda-geckodriver-prompts (npm) (malicious package) - [MAL-2025-21255](https://insights.sbomify.com/MAL-2025-21255/): Malicious code in gem-client (npm) (malicious package) - [MAL-2025-21254](https://insights.sbomify.com/MAL-2025-21254/): Malicious code in gelato-framework (npm) (malicious package) - [MAL-2025-21253](https://insights.sbomify.com/MAL-2025-21253/): Malicious code in geepurin (npm) (malicious package) - [MAL-2025-21252](https://insights.sbomify.com/MAL-2025-21252/): Malicious code in geekonn (npm) (malicious package) - [MAL-2025-21251](https://insights.sbomify.com/MAL-2025-21251/): Malicious code in geekml (npm) (malicious package) - [MAL-2025-21250](https://insights.sbomify.com/MAL-2025-21250/): Malicious code in geekbar (npm) (malicious package) - [MAL-2025-2125](https://insights.sbomify.com/MAL-2025-2125/): Malicious code in safe-backend-integration (npm) (malicious package) - [MAL-2025-21249](https://insights.sbomify.com/MAL-2025-21249/): Malicious code in geckodriver-seismology-capella-lightyear (npm) (malicious package) - [MAL-2025-21248](https://insights.sbomify.com/MAL-2025-21248/): Malicious code in geckodriver-pipe-quasar-css-loader (npm) (malicious package) - [MAL-2025-21247](https://insights.sbomify.com/MAL-2025-21247/): Malicious code in geckodriver-link-vortex-spinner (npm) (malicious package) - [MAL-2025-21246](https://insights.sbomify.com/MAL-2025-21246/): Malicious code in geckodriver-install-install-radioastronomy (npm) (malicious package) - [MAL-2025-21245](https://insights.sbomify.com/MAL-2025-21245/): Malicious code in gebxyswpvhijfntq (npm) (malicious package) - [MAL-2025-21244](https://insights.sbomify.com/MAL-2025-21244/): Malicious code in gdwvytlercmzufqo (npm) (malicious package) - [MAL-2025-21243](https://insights.sbomify.com/MAL-2025-21243/): Malicious code in gduqokxtpivwzlmf (npm) (malicious package) - [MAL-2025-21242](https://insights.sbomify.com/MAL-2025-21242/): Malicious code in gdskrvpylwhquxfo (npm) (malicious package) - [MAL-2025-21241](https://insights.sbomify.com/MAL-2025-21241/): Malicious code in gdruveakthycolij (npm) (malicious package) - [MAL-2025-21240](https://insights.sbomify.com/MAL-2025-21240/): Malicious code in gdocopt (npm) (malicious package) - [MAL-2025-2124](https://insights.sbomify.com/MAL-2025-2124/): Malicious code in safe-apps-list (npm) (malicious package) - [MAL-2025-21239](https://insights.sbomify.com/MAL-2025-21239/): Malicious code in gdftre43 (npm) (malicious package) - [MAL-2025-21238](https://insights.sbomify.com/MAL-2025-21238/): Malicious code in gdfgtr44 (npm) (malicious package) - [MAL-2025-21237](https://insights.sbomify.com/MAL-2025-21237/): Malicious code in gdf3 (npm) (malicious package) - [MAL-2025-21236](https://insights.sbomify.com/MAL-2025-21236/): Malicious code in gctrack (npm) (malicious package) - [MAL-2025-21235](https://insights.sbomify.com/MAL-2025-21235/): Malicious code in gcswnrfvkaqijxku (npm) (malicious package) - [MAL-2025-21234](https://insights.sbomify.com/MAL-2025-21234/): Malicious code in gcsearch (npm) (malicious package) - [MAL-2025-21233](https://insights.sbomify.com/MAL-2025-21233/): Malicious code in gcplive (npm) (malicious package) - [MAL-2025-21232](https://insights.sbomify.com/MAL-2025-21232/): Malicious code in gcmhelper (npm) (malicious package) - [MAL-2025-21231](https://insights.sbomify.com/MAL-2025-21231/): Malicious code in gces-dataset (npm) (malicious package) - [MAL-2025-21230](https://insights.sbomify.com/MAL-2025-21230/): Malicious code in gccwrap (npm) (malicious package) - [MAL-2025-2123](https://insights.sbomify.com/MAL-2025-2123/): Malicious code in raydium-sdk-liquidity-init (npm) (malicious package) - [MAL-2025-21229](https://insights.sbomify.com/MAL-2025-21229/): Malicious code in gboxghost (npm) (malicious package) - [MAL-2025-21228](https://insights.sbomify.com/MAL-2025-21228/): Malicious code in gbncleyvqwdrzkxf (npm) (malicious package) - [MAL-2025-21227](https://insights.sbomify.com/MAL-2025-21227/): Malicious code in gbldksyqhnozcxpr (npm) (malicious package) - [MAL-2025-21226](https://insights.sbomify.com/MAL-2025-21226/): Malicious code in gbenergy (npm) (malicious package) - [MAL-2025-21225](https://insights.sbomify.com/MAL-2025-21225/): Malicious code in gazros (npm) (malicious package) - [MAL-2025-21224](https://insights.sbomify.com/MAL-2025-21224/): Malicious code in gazebo-ziggurat-bgrn (npm) (malicious package) - [MAL-2025-21223](https://insights.sbomify.com/MAL-2025-21223/): Malicious code in gazebo-ugli-3a62 (npm) (malicious package) - [MAL-2025-21222](https://insights.sbomify.com/MAL-2025-21222/): Malicious code in gazebo-titan-7iae (npm) (malicious package) - [MAL-2025-21221](https://insights.sbomify.com/MAL-2025-21221/): Malicious code in gazebo-nutmeg-77ha (npm) (malicious package) - [MAL-2025-21220](https://insights.sbomify.com/MAL-2025-21220/): Malicious code in gazebo-fir-nhbd (npm) (malicious package) - [MAL-2025-2122](https://insights.sbomify.com/MAL-2025-2122/): Malicious code in provider-wallet (npm) (malicious package) - [MAL-2025-21219](https://insights.sbomify.com/MAL-2025-21219/): Malicious code in gazebo-falcon-qm3s (npm) (malicious package) - [MAL-2025-21218](https://insights.sbomify.com/MAL-2025-21218/): Malicious code in gazebo-drone-eajr (npm) (malicious package) - [MAL-2025-21217](https://insights.sbomify.com/MAL-2025-21217/): Malicious code in gaze-tenderly-cnk505-project (npm) (malicious package) - [MAL-2025-21216](https://insights.sbomify.com/MAL-2025-21216/): Malicious code in gauss-react-rest (npm) (malicious package) - [MAL-2025-21215](https://insights.sbomify.com/MAL-2025-21215/): Malicious code in gaurun (npm) (malicious package) - [MAL-2025-21214](https://insights.sbomify.com/MAL-2025-21214/): Malicious code in gaugesjs (npm) (malicious package) - [MAL-2025-21213](https://insights.sbomify.com/MAL-2025-21213/): Malicious code in gatsbyimageserver (npm) (malicious package) - [MAL-2025-21212](https://insights.sbomify.com/MAL-2025-21212/): Malicious code in gatsby-theme-bulmaio (npm) (malicious package) - [MAL-2025-21211](https://insights.sbomify.com/MAL-2025-21211/): Malicious code in gatsby-superflare-asteroid-bionics (npm) (malicious package) - [MAL-2025-21210](https://insights.sbomify.com/MAL-2025-21210/): Malicious code in gatsby-source-wordpress-bcgdv (npm) (malicious package) - [MAL-2025-2121](https://insights.sbomify.com/MAL-2025-2121/): Malicious code in pkl-lang.org (npm) (malicious package) - [MAL-2025-21209](https://insights.sbomify.com/MAL-2025-21209/): Malicious code in gatsby-source-fauna-id (npm) (malicious package) - [MAL-2025-21208](https://insights.sbomify.com/MAL-2025-21208/): Malicious code in gatsby-plugin-easy-i18n (npm) (malicious package) - [MAL-2025-21207](https://insights.sbomify.com/MAL-2025-21207/): Malicious code in gatsby-enif-remark-castor (npm) (malicious package) - [MAL-2025-21206](https://insights.sbomify.com/MAL-2025-21206/): Malicious code in gatsby-enif-polaris-passport (npm) (malicious package) - [MAL-2025-21205](https://insights.sbomify.com/MAL-2025-21205/): Malicious code in gatsby-delphinus-command-publish (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/877/