# Vulnerabilities published in 2025


- [MAL-2025-21114](https://insights.sbomify.com/MAL-2025-21114/): Malicious code in gacrux-tailwindcss-io-hyperion (npm) (malicious package)
- [MAL-2025-21113](https://insights.sbomify.com/MAL-2025-21113/): Malicious code in gacrux-start-mesosphere-vuepress (npm) (malicious package)
- [MAL-2025-21112](https://insights.sbomify.com/MAL-2025-21112/): Malicious code in gacrux-sedna-release-it-css-loader (npm) (malicious package)
- [MAL-2025-21111](https://insights.sbomify.com/MAL-2025-21111/): Malicious code in gacrux-rocket-ganymede-technocracy (npm) (malicious package)
- [MAL-2025-21110](https://insights.sbomify.com/MAL-2025-21110/): Malicious code in gacrux-promise-vega-umbriel (npm) (malicious package)
- [MAL-2025-2111](https://insights.sbomify.com/MAL-2025-2111/): Malicious code in latoken-internal (npm) (malicious package)
- [MAL-2025-21109](https://insights.sbomify.com/MAL-2025-21109/): Malicious code in gacrux-promise-test-apollo (npm) (malicious package)
- [MAL-2025-21108](https://insights.sbomify.com/MAL-2025-21108/): Malicious code in gacrux-iota-exec-shelljs (npm) (malicious package)
- [MAL-2025-21107](https://insights.sbomify.com/MAL-2025-21107/): Malicious code in gacor (npm) (malicious package)
- [MAL-2025-21106](https://insights.sbomify.com/MAL-2025-21106/): Malicious code in gacdata (npm) (malicious package)
- [MAL-2025-21105](https://insights.sbomify.com/MAL-2025-21105/): Malicious code in gabagoojs (npm) (malicious package)
- [MAL-2025-21104](https://insights.sbomify.com/MAL-2025-21104/): Malicious code in gaaaaaam (npm) (malicious package)
- [MAL-2025-21103](https://insights.sbomify.com/MAL-2025-21103/): Malicious code in g2plot-geo-world-map (npm) (malicious package)
- [MAL-2025-21102](https://insights.sbomify.com/MAL-2025-21102/): Malicious code in g2a-tooltip (npm) (malicious package)
- [MAL-2025-21101](https://insights.sbomify.com/MAL-2025-21101/): Malicious code in fzz-plugin (npm) (malicious package)
- [MAL-2025-21100](https://insights.sbomify.com/MAL-2025-21100/): Malicious code in fzylpgnxtawmihqs (npm) (malicious package)
- [MAL-2025-2110](https://insights.sbomify.com/MAL-2025-2110/): Malicious code in latoken-dev (npm) (malicious package)
- [MAL-2025-211](https://insights.sbomify.com/MAL-2025-211/): Malicious code in nimiq-validators-trustscore (npm) (malicious package)
- [MAL-2025-21099](https://insights.sbomify.com/MAL-2025-21099/): Malicious code in fzantalis (npm) (malicious package)
- [MAL-2025-21098](https://insights.sbomify.com/MAL-2025-21098/): Malicious code in fxtrader (npm) (malicious package)
- [MAL-2025-21097](https://insights.sbomify.com/MAL-2025-21097/): Malicious code in fxlnvythpzujcoks (npm) (malicious package)
- [MAL-2025-21096](https://insights.sbomify.com/MAL-2025-21096/): Malicious code in fxjewh (npm) (malicious package)
- [MAL-2025-21095](https://insights.sbomify.com/MAL-2025-21095/): Malicious code in fxgcsmkrdalviuhz (npm) (malicious package)
- [MAL-2025-21094](https://insights.sbomify.com/MAL-2025-21094/): Malicious code in fxcess (npm) (malicious package)
- [MAL-2025-21093](https://insights.sbomify.com/MAL-2025-21093/): Malicious code in fx-private-relay (npm) (malicious package)
- [MAL-2025-21092](https://insights.sbomify.com/MAL-2025-21092/): Malicious code in fvger3 (npm) (malicious package)
- [MAL-2025-21091](https://insights.sbomify.com/MAL-2025-21091/): Malicious code in fv333 (npm) (malicious package)
- [MAL-2025-21090](https://insights.sbomify.com/MAL-2025-21090/): Malicious code in fuzzyj (npm) (malicious package)
- [MAL-2025-2109](https://insights.sbomify.com/MAL-2025-2109/): Malicious code in lappsec-testpackage (npm) (malicious package)
- [MAL-2025-21089](https://insights.sbomify.com/MAL-2025-21089/): Malicious code in fuze-node (npm) (malicious package)
- [MAL-2025-21088](https://insights.sbomify.com/MAL-2025-21088/): Malicious code in fuusen (npm) (malicious package)
- [MAL-2025-21087](https://insights.sbomify.com/MAL-2025-21087/): Malicious code in futurology-parsec-blackhole-browserify (npm) (malicious package)
- [MAL-2025-21086](https://insights.sbomify.com/MAL-2025-21086/): Malicious code in futurology-babel-ionosphere-sequelize (npm) (malicious package)
- [MAL-2025-21085](https://insights.sbomify.com/MAL-2025-21085/): Malicious code in futurology-ariel-troposphere-mineralogy (npm) (malicious package)
- [MAL-2025-21084](https://insights.sbomify.com/MAL-2025-21084/): Malicious code in futuresjs (npm) (malicious package)
- [MAL-2025-21083](https://insights.sbomify.com/MAL-2025-21083/): Malicious code in futuota (npm) (malicious package)
- [MAL-2025-21082](https://insights.sbomify.com/MAL-2025-21082/): Malicious code in futilewm (npm) (malicious package)
- [MAL-2025-21081](https://insights.sbomify.com/MAL-2025-21081/): Malicious code in futebot (npm) (malicious package)
- [MAL-2025-21080](https://insights.sbomify.com/MAL-2025-21080/): Malicious code in fusion-theme (npm) (malicious package)
- [MAL-2025-2108](https://insights.sbomify.com/MAL-2025-2108/): Malicious code in kitchensink-ui-base (npm) (malicious package)
- [MAL-2025-21079](https://insights.sbomify.com/MAL-2025-21079/): Malicious code in fusion-starter-build-scripts (npm) (malicious package)
- [MAL-2025-21078](https://insights.sbomify.com/MAL-2025-21078/): Malicious code in fusion-starter (npm) (malicious package)
- [MAL-2025-21077](https://insights.sbomify.com/MAL-2025-21077/): Malicious code in fusion-plugin-urate (npm) (malicious package)
- [MAL-2025-21076](https://insights.sbomify.com/MAL-2025-21076/): Malicious code in fusion-plugin-tracer (npm) (malicious package)
- [MAL-2025-21075](https://insights.sbomify.com/MAL-2025-21075/): Malicious code in fusion-plugin-tchannel (npm) (malicious package)
- [MAL-2025-21074](https://insights.sbomify.com/MAL-2025-21074/): Malicious code in fusion-plugin-secure-headers (npm) (malicious package)
- [MAL-2025-21073](https://insights.sbomify.com/MAL-2025-21073/): Malicious code in fusion-plugin-secrets (npm) (malicious package)
- [MAL-2025-21072](https://insights.sbomify.com/MAL-2025-21072/): Malicious code in fusion-plugin-s3-asset-proxying (npm) (malicious package)
- [MAL-2025-21071](https://insights.sbomify.com/MAL-2025-21071/): Malicious code in fusion-plugin-rosetta (npm) (malicious package)
- [MAL-2025-21070](https://insights.sbomify.com/MAL-2025-21070/): Malicious code in fusion-plugin-m3-react (npm) (malicious package)
- [MAL-2025-2107](https://insights.sbomify.com/MAL-2025-2107/): Malicious code in hh-sol-artifact-1 (npm) (malicious package)
- [MAL-2025-21069](https://insights.sbomify.com/MAL-2025-21069/): Malicious code in fusion-plugin-logtron-react (npm) (malicious package)
- [MAL-2025-21068](https://insights.sbomify.com/MAL-2025-21068/): Malicious code in fusion-plugin-heatpipe (npm) (malicious package)
- [MAL-2025-21067](https://insights.sbomify.com/MAL-2025-21067/): Malicious code in fusion-plugin-google-analytics-react (npm) (malicious package)
- [MAL-2025-21066](https://insights.sbomify.com/MAL-2025-21066/): Malicious code in fusion-plugin-galileo (npm) (malicious package)
- [MAL-2025-21065](https://insights.sbomify.com/MAL-2025-21065/): Malicious code in fusion-plugin-flipr (npm) (malicious package)
- [MAL-2025-21064](https://insights.sbomify.com/MAL-2025-21064/): Malicious code in fusion-plugin-auth-headers (npm) (malicious package)
- [MAL-2025-21063](https://insights.sbomify.com/MAL-2025-21063/): Malicious code in fusion-plugin-atreyu (npm) (malicious package)
- [MAL-2025-21062](https://insights.sbomify.com/MAL-2025-21062/): Malicious code in fusion-plugin-analytics-session (npm) (malicious package)
- [MAL-2025-21061](https://insights.sbomify.com/MAL-2025-21061/): Malicious code in fusion-node-config-parsec-glaciology (npm) (malicious package)
- [MAL-2025-21060](https://insights.sbomify.com/MAL-2025-21060/): Malicious code in fusion-dev-cli (npm) (malicious package)
- [MAL-2025-2106](https://insights.sbomify.com/MAL-2025-2106/): Malicious code in header-account-flyout (npm) (malicious package)
- [MAL-2025-21059](https://insights.sbomify.com/MAL-2025-21059/): Malicious code in fusion-codemods (npm) (malicious package)
- [MAL-2025-21058](https://insights.sbomify.com/MAL-2025-21058/): Malicious code in furhwslaejpygtbz (npm) (malicious package)
- [MAL-2025-21057](https://insights.sbomify.com/MAL-2025-21057/): Malicious code in funrun (npm) (malicious package)
- [MAL-2025-21056](https://insights.sbomify.com/MAL-2025-21056/): Malicious code in funout (npm) (malicious package)
- [MAL-2025-21055](https://insights.sbomify.com/MAL-2025-21055/): Malicious code in funnygame (npm) (malicious package)
- [MAL-2025-21054](https://insights.sbomify.com/MAL-2025-21054/): Malicious code in funnel-fragment (npm) (malicious package)
- [MAL-2025-21053](https://insights.sbomify.com/MAL-2025-21053/): Malicious code in funlayer (npm) (malicious package)
- [MAL-2025-21052](https://insights.sbomify.com/MAL-2025-21052/): Malicious code in funforday (npm) (malicious package)
- [MAL-2025-21051](https://insights.sbomify.com/MAL-2025-21051/): Malicious code in fundingpolicy-paypal (npm) (malicious package)
- [MAL-2025-21050](https://insights.sbomify.com/MAL-2025-21050/): Malicious code in fundify (npm) (malicious package)
- [MAL-2025-2105](https://insights.sbomify.com/MAL-2025-2105/): Malicious code in hashkey-internal (npm) (malicious package)
- [MAL-2025-21049](https://insights.sbomify.com/MAL-2025-21049/): Malicious code in function-new-alert-visualize-compile (npm) (malicious package)
- [MAL-2025-21048](https://insights.sbomify.com/MAL-2025-21048/): Malicious code in funcoes-estatisticas.js (npm) (malicious package)
- [MAL-2025-21047](https://insights.sbomify.com/MAL-2025-21047/): Malicious code in funcconf (npm) (malicious package)
- [MAL-2025-21046](https://insights.sbomify.com/MAL-2025-21046/): Malicious code in funbox-frontend-env-gulp (npm) (malicious package)
- [MAL-2025-21045](https://insights.sbomify.com/MAL-2025-21045/): Malicious code in funbox-frontend-env-angular (npm) (malicious package)
- [MAL-2025-21044](https://insights.sbomify.com/MAL-2025-21044/): Malicious code in funbill (npm) (malicious package)
- [MAL-2025-21043](https://insights.sbomify.com/MAL-2025-21043/): Malicious code in funbeca (npm) (malicious package)
- [MAL-2025-21042](https://insights.sbomify.com/MAL-2025-21042/): Malicious code in fumseck (npm) (malicious package)
- [MAL-2025-21041](https://insights.sbomify.com/MAL-2025-21041/): Malicious code in fullypwnd (npm) (malicious package)
- [MAL-2025-21040](https://insights.sbomify.com/MAL-2025-21040/): Malicious code in fullscreen-card-renderer (npm) (malicious package)
- [MAL-2025-2104](https://insights.sbomify.com/MAL-2025-2104/): Malicious code in gas-fee-saver (npm) (malicious package)
- [MAL-2025-21039](https://insights.sbomify.com/MAL-2025-21039/): Malicious code in fullcube-webhooks-incoming (npm) (malicious package)
- [MAL-2025-21038](https://insights.sbomify.com/MAL-2025-21038/): Malicious code in fullcube-recurly-refresh (npm) (malicious package)
- [MAL-2025-21037](https://insights.sbomify.com/MAL-2025-21037/): Malicious code in fullcube-angular-base (npm) (malicious package)
- [MAL-2025-21036](https://insights.sbomify.com/MAL-2025-21036/): Malicious code in fuji-css (npm) (malicious package)
- [MAL-2025-21035](https://insights.sbomify.com/MAL-2025-21035/): Malicious code in fuimonos (npm) (malicious package)
- [MAL-2025-21034](https://insights.sbomify.com/MAL-2025-21034/): Malicious code in fugaplug (npm) (malicious package)
- [MAL-2025-21033](https://insights.sbomify.com/MAL-2025-21033/): Malicious code in fuffer-xor (npm) (malicious package)
- [MAL-2025-21032](https://insights.sbomify.com/MAL-2025-21032/): Malicious code in fuffamail (npm) (malicious package)
- [MAL-2025-21031](https://insights.sbomify.com/MAL-2025-21031/): Malicious code in fuctioons (npm) (malicious package)
- [MAL-2025-21030](https://insights.sbomify.com/MAL-2025-21030/): Malicious code in fuctioon (npm) (malicious package)
- [MAL-2025-2103](https://insights.sbomify.com/MAL-2025-2103/): Malicious code in discord-getting-started (npm) (malicious package)
- [MAL-2025-21029](https://insights.sbomify.com/MAL-2025-21029/): Malicious code in fuctionjs (npm) (malicious package)
- [MAL-2025-21028](https://insights.sbomify.com/MAL-2025-21028/): Malicious code in fucoin (npm) (malicious package)
- [MAL-2025-21027](https://insights.sbomify.com/MAL-2025-21027/): Malicious code in fuckyou (npm) (malicious package)
- [MAL-2025-21026](https://insights.sbomify.com/MAL-2025-21026/): Malicious code in fubtcoqejapyvgsw (npm) (malicious package)
- [MAL-2025-21025](https://insights.sbomify.com/MAL-2025-21025/): Malicious code in fubo-player (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/879/