# Vulnerabilities published in 2025 - [MAL-2025-21204](https://insights.sbomify.com/MAL-2025-21204/): Malicious code in gatojr (npm) (malicious package) - [MAL-2025-21203](https://insights.sbomify.com/MAL-2025-21203/): Malicious code in gateway-ui (npm) (malicious package) - [MAL-2025-21202](https://insights.sbomify.com/MAL-2025-21202/): Malicious code in gateway-query-parser (npm) (malicious package) - [MAL-2025-21201](https://insights.sbomify.com/MAL-2025-21201/): Malicious code in gatestats (npm) (malicious package) - [MAL-2025-21200](https://insights.sbomify.com/MAL-2025-21200/): Malicious code in gate-context-client (npm) (malicious package) - [MAL-2025-2120](https://insights.sbomify.com/MAL-2025-2120/): Malicious code in organizer-nodejs (npm) (malicious package) - [MAL-2025-212](https://insights.sbomify.com/MAL-2025-212/): Malicious code in nr-reports-core (npm) (malicious package) - [MAL-2025-21199](https://insights.sbomify.com/MAL-2025-21199/): Malicious code in gatcang (npm) (malicious package) - [MAL-2025-21198](https://insights.sbomify.com/MAL-2025-21198/): Malicious code in gasview (npm) (malicious package) - [MAL-2025-21197](https://insights.sbomify.com/MAL-2025-21197/): Malicious code in gasmap (npm) (malicious package) - [MAL-2025-21196](https://insights.sbomify.com/MAL-2025-21196/): Malicious code in gasbag (npm) (malicious package) - [MAL-2025-21195](https://insights.sbomify.com/MAL-2025-21195/): Malicious code in gartcl (npm) (malicious package) - [MAL-2025-21194](https://insights.sbomify.com/MAL-2025-21194/): Malicious code in garretts (npm) (malicious package) - [MAL-2025-21193](https://insights.sbomify.com/MAL-2025-21193/): Malicious code in garage11-lib (npm) (malicious package) - [MAL-2025-21192](https://insights.sbomify.com/MAL-2025-21192/): Malicious code in ganymede-sync-materialize-jabbah (npm) (malicious package) - [MAL-2025-21191](https://insights.sbomify.com/MAL-2025-21191/): Malicious code in ganymede-kastra-antd-javascript (npm) (malicious package) - [MAL-2025-21190](https://insights.sbomify.com/MAL-2025-21190/): Malicious code in ganymede-fornax-juno-husky (npm) (malicious package) - [MAL-2025-2119](https://insights.sbomify.com/MAL-2025-2119/): Malicious code in nnnn1111222 (npm) (malicious package) - [MAL-2025-21189](https://insights.sbomify.com/MAL-2025-21189/): Malicious code in ganymede-cache-capella-testcafe (npm) (malicious package) - [MAL-2025-21188](https://insights.sbomify.com/MAL-2025-21188/): Malicious code in ganymede-blaze-eclipse-arcturus (npm) (malicious package) - [MAL-2025-21187](https://insights.sbomify.com/MAL-2025-21187/): Malicious code in ganymede-babel-ethology-auth (npm) (malicious package) - [MAL-2025-21186](https://insights.sbomify.com/MAL-2025-21186/): Malicious code in ganrepo (npm) (malicious package) - [MAL-2025-21185](https://insights.sbomify.com/MAL-2025-21185/): Malicious code in ganescha-template (npm) (malicious package) - [MAL-2025-21184](https://insights.sbomify.com/MAL-2025-21184/): Malicious code in gammarayburst-yonder-loopback-nightwatch (npm) (malicious package) - [MAL-2025-21183](https://insights.sbomify.com/MAL-2025-21183/): Malicious code in gammarayburst-rigel-biomimicry-quantum-computing (npm) (malicious package) - [MAL-2025-21182](https://insights.sbomify.com/MAL-2025-21182/): Malicious code in gammarayburst-local-nova-graviton (npm) (malicious package) - [MAL-2025-21181](https://insights.sbomify.com/MAL-2025-21181/): Malicious code in gamma-throw-report-deserialize-uglify (npm) (malicious package) - [MAL-2025-21180](https://insights.sbomify.com/MAL-2025-21180/): Malicious code in gamma-rho-protected-balance-load (npm) (malicious package) - [MAL-2025-2118](https://insights.sbomify.com/MAL-2025-2118/): Malicious code in nncd (npm) (malicious package) - [MAL-2025-21179](https://insights.sbomify.com/MAL-2025-21179/): Malicious code in gamma-good-good-process-rain (npm) (malicious package) - [MAL-2025-21178](https://insights.sbomify.com/MAL-2025-21178/): Malicious code in gamine (npm) (malicious package) - [MAL-2025-21177](https://insights.sbomify.com/MAL-2025-21177/): Malicious code in gameworks (npm) (malicious package) - [MAL-2025-21176](https://insights.sbomify.com/MAL-2025-21176/): Malicious code in gametrax (npm) (malicious package) - [MAL-2025-21175](https://insights.sbomify.com/MAL-2025-21175/): Malicious code in gamestore (npm) (malicious package) - [MAL-2025-21174](https://insights.sbomify.com/MAL-2025-21174/): Malicious code in gamestab (npm) (malicious package) - [MAL-2025-21173](https://insights.sbomify.com/MAL-2025-21173/): Malicious code in gamerz (npm) (malicious package) - [MAL-2025-21172](https://insights.sbomify.com/MAL-2025-21172/): Malicious code in gamerlive (npm) (malicious package) - [MAL-2025-21171](https://insights.sbomify.com/MAL-2025-21171/): Malicious code in gameliner (npm) (malicious package) - [MAL-2025-21170](https://insights.sbomify.com/MAL-2025-21170/): Malicious code in gamefiles (npm) (malicious package) - [MAL-2025-2117](https://insights.sbomify.com/MAL-2025-2117/): Malicious code in my-custom-vue-widget (npm) (malicious package) - [MAL-2025-21169](https://insights.sbomify.com/MAL-2025-21169/): Malicious code in gamealter (npm) (malicious package) - [MAL-2025-21168](https://insights.sbomify.com/MAL-2025-21168/): Malicious code in gameai (npm) (malicious package) - [MAL-2025-21167](https://insights.sbomify.com/MAL-2025-21167/): Malicious code in game-support-stylelint-config (npm) (malicious package) - [MAL-2025-21166](https://insights.sbomify.com/MAL-2025-21166/): Malicious code in game-list (npm) (malicious package) - [MAL-2025-21165](https://insights.sbomify.com/MAL-2025-21165/): Malicious code in gambas (npm) (malicious package) - [MAL-2025-21164](https://insights.sbomify.com/MAL-2025-21164/): Malicious code in gama-report (npm) (malicious package) - [MAL-2025-21163](https://insights.sbomify.com/MAL-2025-21163/): Malicious code in gama-orm (npm) (malicious package) - [MAL-2025-21162](https://insights.sbomify.com/MAL-2025-21162/): Malicious code in gama-mq (npm) (malicious package) - [MAL-2025-21161](https://insights.sbomify.com/MAL-2025-21161/): Malicious code in gama-connection (npm) (malicious package) - [MAL-2025-21160](https://insights.sbomify.com/MAL-2025-21160/): Malicious code in gama-common-ap (npm) (malicious package) - [MAL-2025-2116](https://insights.sbomify.com/MAL-2025-2116/): Malicious code in morpho-blue-irm (npm) (malicious package) - [MAL-2025-21159](https://insights.sbomify.com/MAL-2025-21159/): Malicious code in galvao (npm) (malicious package) - [MAL-2025-21158](https://insights.sbomify.com/MAL-2025-21158/): Malicious code in galih-rangginang42-breki (npm) (malicious package) - [MAL-2025-21157](https://insights.sbomify.com/MAL-2025-21157/): Malicious code in galih-nasi5-kuki (npm) (malicious package) - [MAL-2025-21156](https://insights.sbomify.com/MAL-2025-21156/): Malicious code in galih-martabak47-kuki (npm) (malicious package) - [MAL-2025-21155](https://insights.sbomify.com/MAL-2025-21155/): Malicious code in galih-kripik34-kuki (npm) (malicious package) - [MAL-2025-21154](https://insights.sbomify.com/MAL-2025-21154/): Malicious code in galenjiangfirtcommit (npm) (malicious package) - [MAL-2025-21153](https://insights.sbomify.com/MAL-2025-21153/): Malicious code in galen-node-project (npm) (malicious package) - [MAL-2025-21152](https://insights.sbomify.com/MAL-2025-21152/): Malicious code in gale-xfxtt-c35z5-glen-project (npm) (malicious package) - [MAL-2025-21151](https://insights.sbomify.com/MAL-2025-21151/): Malicious code in gale-svtyl-d57z0-alchemy-project (npm) (malicious package) - [MAL-2025-21150](https://insights.sbomify.com/MAL-2025-21150/): Malicious code in gale-s9plg-5flv3-horizon-project (npm) (malicious package) - [MAL-2025-2115](https://insights.sbomify.com/MAL-2025-2115/): Malicious code in mahesh.testpackage (npm) (malicious package) - [MAL-2025-21149](https://insights.sbomify.com/MAL-2025-21149/): Malicious code in gale-qk7bl-2tf5d-utopia-project (npm) (malicious package) - [MAL-2025-21148](https://insights.sbomify.com/MAL-2025-21148/): Malicious code in gale-iql03-1hwja-yew-project (npm) (malicious package) - [MAL-2025-21147](https://insights.sbomify.com/MAL-2025-21147/): Malicious code in gale-atp80-1whee-fable-project (npm) (malicious package) - [MAL-2025-21146](https://insights.sbomify.com/MAL-2025-21146/): Malicious code in gale-9vhrq-tite8-neptune-project (npm) (malicious package) - [MAL-2025-21145](https://insights.sbomify.com/MAL-2025-21145/): Malicious code in gale-84na6-51igk-ultra-project (npm) (malicious package) - [MAL-2025-21144](https://insights.sbomify.com/MAL-2025-21144/): Malicious code in gale-1o4wu-dzdzs-kismet-project (npm) (malicious package) - [MAL-2025-21143](https://insights.sbomify.com/MAL-2025-21143/): Malicious code in galcon (npm) (malicious package) - [MAL-2025-21142](https://insights.sbomify.com/MAL-2025-21142/): Malicious code in galaxy-zodiac-cxf637-project (npm) (malicious package) - [MAL-2025-21141](https://insights.sbomify.com/MAL-2025-21141/): Malicious code in galaxy-ziggurat-vbo8 (npm) (malicious package) - [MAL-2025-21140](https://insights.sbomify.com/MAL-2025-21140/): Malicious code in galaxy-zest-82vn (npm) (malicious package) - [MAL-2025-2114](https://insights.sbomify.com/MAL-2025-2114/): Malicious code in link-outside-nest (npm) (malicious package) - [MAL-2025-21139](https://insights.sbomify.com/MAL-2025-21139/): Malicious code in galaxy-whale-mgy197-project (npm) (malicious package) - [MAL-2025-21138](https://insights.sbomify.com/MAL-2025-21138/): Malicious code in galaxy-wezen-release-it-neuromorphic (npm) (malicious package) - [MAL-2025-21137](https://insights.sbomify.com/MAL-2025-21137/): Malicious code in galaxy-webpack-deneb-wasat (npm) (malicious package) - [MAL-2025-21136](https://insights.sbomify.com/MAL-2025-21136/): Malicious code in galaxy-tundra-wdx487-project (npm) (malicious package) - [MAL-2025-21135](https://insights.sbomify.com/MAL-2025-21135/): Malicious code in galaxy-tornado-tkv3 (npm) (malicious package) - [MAL-2025-21134](https://insights.sbomify.com/MAL-2025-21134/): Malicious code in galaxy-stream-query-astrometry (npm) (malicious package) - [MAL-2025-21133](https://insights.sbomify.com/MAL-2025-21133/): Malicious code in galaxy-sequelize-nebula-gravity (npm) (malicious package) - [MAL-2025-21132](https://insights.sbomify.com/MAL-2025-21132/): Malicious code in galaxy-sapphire-fsw022-project (npm) (malicious package) - [MAL-2025-21131](https://insights.sbomify.com/MAL-2025-21131/): Malicious code in galaxy-nugget-yoc303-project (npm) (malicious package) - [MAL-2025-21130](https://insights.sbomify.com/MAL-2025-21130/): Malicious code in galaxy-nebula-muh516-project (npm) (malicious package) - [MAL-2025-2113](https://insights.sbomify.com/MAL-2025-2113/): Malicious code in latoken-test (npm) (malicious package) - [MAL-2025-21129](https://insights.sbomify.com/MAL-2025-21129/): Malicious code in galaxy-mist-izr448-project (npm) (malicious package) - [MAL-2025-21128](https://insights.sbomify.com/MAL-2025-21128/): Malicious code in galaxy-javascript-meissa-quantum-computing (npm) (malicious package) - [MAL-2025-21127](https://insights.sbomify.com/MAL-2025-21127/): Malicious code in galaxy-glacier-crm282-project (npm) (malicious package) - [MAL-2025-21126](https://insights.sbomify.com/MAL-2025-21126/): Malicious code in galaxy-comet-pnns (npm) (malicious package) - [MAL-2025-21125](https://insights.sbomify.com/MAL-2025-21125/): Malicious code in galaxy-callback-webdriver-mocha-neptunology (npm) (malicious package) - [MAL-2025-21124](https://insights.sbomify.com/MAL-2025-21124/): Malicious code in galaxy-banana-1f8d (npm) (malicious package) - [MAL-2025-21123](https://insights.sbomify.com/MAL-2025-21123/): Malicious code in galaxy-anchor-o7nb (npm) (malicious package) - [MAL-2025-21122](https://insights.sbomify.com/MAL-2025-21122/): Malicious code in galaxy-altair-babel-link (npm) (malicious package) - [MAL-2025-21121](https://insights.sbomify.com/MAL-2025-21121/): Malicious code in galaxy-alpha-e4oz (npm) (malicious package) - [MAL-2025-21120](https://insights.sbomify.com/MAL-2025-21120/): Malicious code in gajira-cli (npm) (malicious package) - [MAL-2025-2112](https://insights.sbomify.com/MAL-2025-2112/): Malicious code in latoken-main (npm) (malicious package) - [MAL-2025-21119](https://insights.sbomify.com/MAL-2025-21119/): Malicious code in gahrinish (npm) (malicious package) - [MAL-2025-21118](https://insights.sbomify.com/MAL-2025-21118/): Malicious code in gagenda (npm) (malicious package) - [MAL-2025-21117](https://insights.sbomify.com/MAL-2025-21117/): Malicious code in gaeblog (npm) (malicious package) - [MAL-2025-21116](https://insights.sbomify.com/MAL-2025-21116/): Malicious code in gadzillion (npm) (malicious package) - [MAL-2025-21115](https://insights.sbomify.com/MAL-2025-21115/): Malicious code in gadgetrie (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/878/