# Vulnerabilities published in 2025


- [MAL-2025-147024](https://insights.sbomify.com/MAL-2025-147024/): Malicious code in radiant-spinner-prompts-puppeteer (npm) (malicious package)
- [MAL-2025-147023](https://insights.sbomify.com/MAL-2025-147023/): Malicious code in radiant-spica-aquarius-css-minimizer-webpack-plugin (npm) (malicious package)
- [MAL-2025-147022](https://insights.sbomify.com/MAL-2025-147022/): Malicious code in radiant-publish-triton-xanthus (npm) (malicious package)
- [MAL-2025-147021](https://insights.sbomify.com/MAL-2025-147021/): Malicious code in radiant-proxima-kastra-middleware (npm) (malicious package)
- [MAL-2025-147020](https://insights.sbomify.com/MAL-2025-147020/): Malicious code in radiant-proxima-dotenv-safe-global (npm) (malicious package)
- [MAL-2025-14702](https://insights.sbomify.com/MAL-2025-14702/): Malicious code in apple-nrw-project (npm) (malicious package)
- [MAL-2025-147019](https://insights.sbomify.com/MAL-2025-147019/): Malicious code in radiant-polaris-oberon-prompts (npm) (malicious package)
- [MAL-2025-147018](https://insights.sbomify.com/MAL-2025-147018/): Malicious code in radiant-perseus-betelgeuse-apex (npm) (malicious package)
- [MAL-2025-147017](https://insights.sbomify.com/MAL-2025-147017/): Malicious code in radiant-nightmare-xo-browserify (npm) (malicious package)
- [MAL-2025-147016](https://insights.sbomify.com/MAL-2025-147016/): Malicious code in radiant-mira-cypress-callback (npm) (malicious package)
- [MAL-2025-147015](https://insights.sbomify.com/MAL-2025-147015/): Malicious code in radiant-local-magellan-dactyl (npm) (malicious package)
- [MAL-2025-147014](https://insights.sbomify.com/MAL-2025-147014/): Malicious code in radiant-equinox-pm2-restart (npm) (malicious package)
- [MAL-2025-147013](https://insights.sbomify.com/MAL-2025-147013/): Malicious code in radiant-development-eslint-plugin-nodejs (npm) (malicious package)
- [MAL-2025-147012](https://insights.sbomify.com/MAL-2025-147012/): Malicious code in radiant-comet-module-gulp (npm) (malicious package)
- [MAL-2025-147011](https://insights.sbomify.com/MAL-2025-147011/): Malicious code in radiant-charon-jwt-restart (npm) (malicious package)
- [MAL-2025-147010](https://insights.sbomify.com/MAL-2025-147010/): Malicious code in radiant-chai-mocha-pulsar (npm) (malicious package)
- [MAL-2025-14701](https://insights.sbomify.com/MAL-2025-14701/): Malicious code in apple-november-xblr (npm) (malicious package)
- [MAL-2025-147009](https://insights.sbomify.com/MAL-2025-147009/): Malicious code in quito-weywot-luna-nightwatch (npm) (malicious package)
- [MAL-2025-147008](https://insights.sbomify.com/MAL-2025-147008/): Malicious code in quito-websockets-aldebaran-oberon (npm) (malicious package)
- [MAL-2025-147007](https://insights.sbomify.com/MAL-2025-147007/): Malicious code in quito-umbra-registry-procyon (npm) (malicious package)
- [MAL-2025-147006](https://insights.sbomify.com/MAL-2025-147006/): Malicious code in quito-superagent-juno-css-loader (npm) (malicious package)
- [MAL-2025-147005](https://insights.sbomify.com/MAL-2025-147005/): Malicious code in quito-subscription-neptune-ini (npm) (malicious package)
- [MAL-2025-147004](https://insights.sbomify.com/MAL-2025-147004/): Malicious code in quito-sequelize-spectron-wezen (npm) (malicious package)
- [MAL-2025-147003](https://insights.sbomify.com/MAL-2025-147003/): Malicious code in quito-sequelize-process-promise (npm) (malicious package)
- [MAL-2025-147002](https://insights.sbomify.com/MAL-2025-147002/): Malicious code in quito-request-karma-html-webpack-plugin (npm) (malicious package)
- [MAL-2025-147001](https://insights.sbomify.com/MAL-2025-147001/): Malicious code in quito-phoenix-process-inquirer (npm) (malicious package)
- [MAL-2025-147000](https://insights.sbomify.com/MAL-2025-147000/): Malicious code in quito-phoebe-gemini-astro (npm) (malicious package)
- [MAL-2025-14700](https://insights.sbomify.com/MAL-2025-14700/): Malicious code in apple-nectarine-whiskey-tivzq (npm) (malicious package)
- [MAL-2025-1470](https://insights.sbomify.com/MAL-2025-1470/): Malicious code in mygcpconfusedfunctionpocmaliciouspackage (npm) (malicious package)
- [MAL-2025-147](https://insights.sbomify.com/MAL-2025-147/): Malicious code in testpacke (npm) (malicious package)
- [MAL-2025-146999](https://insights.sbomify.com/MAL-2025-146999/): Malicious code in quito-ophiuchus-jabbah-yaml (npm) (malicious package)
- [MAL-2025-146998](https://insights.sbomify.com/MAL-2025-146998/): Malicious code in quito-lynx-astro-readable (npm) (malicious package)
- [MAL-2025-146997](https://insights.sbomify.com/MAL-2025-146997/): Malicious code in quito-loop-scripts-event (npm) (malicious package)
- [MAL-2025-146996](https://insights.sbomify.com/MAL-2025-146996/): Malicious code in quito-kronos-sails-mui (npm) (malicious package)
- [MAL-2025-146995](https://insights.sbomify.com/MAL-2025-146995/): Malicious code in quito-javascript-achernar-wezen (npm) (malicious package)
- [MAL-2025-146994](https://insights.sbomify.com/MAL-2025-146994/): Malicious code in quito-hermes-mysql-sirius (npm) (malicious package)
- [MAL-2025-146993](https://insights.sbomify.com/MAL-2025-146993/): Malicious code in quito-flare-convict-thuban (npm) (malicious package)
- [MAL-2025-146992](https://insights.sbomify.com/MAL-2025-146992/): Malicious code in quito-firebase-supervisor-spinner (npm) (malicious package)
- [MAL-2025-146991](https://insights.sbomify.com/MAL-2025-146991/): Malicious code in quito-eris-markdown-pdf-uglify-js (npm) (malicious package)
- [MAL-2025-146990](https://insights.sbomify.com/MAL-2025-146990/): Malicious code in quito-betelgeuse-ursa-element-ui (npm) (malicious package)
- [MAL-2025-14699](https://insights.sbomify.com/MAL-2025-14699/): Malicious code in apple-mike-banana-lzpuo (npm) (malicious package)
- [MAL-2025-146989](https://insights.sbomify.com/MAL-2025-146989/): Malicious code in quito-bellatrix-polaris-foundation (npm) (malicious package)
- [MAL-2025-146988](https://insights.sbomify.com/MAL-2025-146988/): Malicious code in quito-barnard-selenium-nova (npm) (malicious package)
- [MAL-2025-146987](https://insights.sbomify.com/MAL-2025-146987/): Malicious code in quito-apollo-europa-async (npm) (malicious package)
- [MAL-2025-146986](https://insights.sbomify.com/MAL-2025-146986/): Malicious code in query-winston-taurus-dotenv-safe (npm) (malicious package)
- [MAL-2025-146985](https://insights.sbomify.com/MAL-2025-146985/): Malicious code in query-wezen-ophiuchus-nightwatch (npm) (malicious package)
- [MAL-2025-146984](https://insights.sbomify.com/MAL-2025-146984/): Malicious code in query-webdriver-mocha-version-shelljs (npm) (malicious package)
- [MAL-2025-146983](https://insights.sbomify.com/MAL-2025-146983/): Malicious code in query-webdriver-manager-writable-tailwindcss (npm) (malicious package)
- [MAL-2025-146982](https://insights.sbomify.com/MAL-2025-146982/): Malicious code in query-ultra-foundation-link (npm) (malicious package)
- [MAL-2025-146981](https://insights.sbomify.com/MAL-2025-146981/): Malicious code in query-toml-mongodb-alphard (npm) (malicious package)
- [MAL-2025-146980](https://insights.sbomify.com/MAL-2025-146980/): Malicious code in query-tethys-venus-geckodriver (npm) (malicious package)
- [MAL-2025-14698](https://insights.sbomify.com/MAL-2025-14698/): Malicious code in apple-mike-abvo (npm) (malicious package)
- [MAL-2025-146979](https://insights.sbomify.com/MAL-2025-146979/): Malicious code in query-taurus-phoenix-chakra-ui (npm) (malicious package)
- [MAL-2025-146978](https://insights.sbomify.com/MAL-2025-146978/): Malicious code in query-sirius-materialize-morgan (npm) (malicious package)
- [MAL-2025-146977](https://insights.sbomify.com/MAL-2025-146977/): Malicious code in query-scorpius-meissa-nodejs (npm) (malicious package)
- [MAL-2025-146976](https://insights.sbomify.com/MAL-2025-146976/): Malicious code in query-release-it-pulsar-nextjs (npm) (malicious package)
- [MAL-2025-146975](https://insights.sbomify.com/MAL-2025-146975/): Malicious code in query-nightmare-cz-conventional-changelog-juno (npm) (malicious package)
- [MAL-2025-146974](https://insights.sbomify.com/MAL-2025-146974/): Malicious code in query-nconf-jekyll-chai (npm) (malicious package)
- [MAL-2025-146973](https://insights.sbomify.com/MAL-2025-146973/): Malicious code in query-morgan-thuban-vega (npm) (malicious package)
- [MAL-2025-146972](https://insights.sbomify.com/MAL-2025-146972/): Malicious code in query-middleware-promise-development (npm) (malicious package)
- [MAL-2025-146971](https://insights.sbomify.com/MAL-2025-146971/): Malicious code in query-lint-staged-library-jasmine (npm) (malicious package)
- [MAL-2025-146970](https://insights.sbomify.com/MAL-2025-146970/): Malicious code in query-lint-dione-cross-env (npm) (malicious package)
- [MAL-2025-14697](https://insights.sbomify.com/MAL-2025-14697/): Malicious code in apple-mango-yjwr (npm) (malicious package)
- [MAL-2025-146969](https://insights.sbomify.com/MAL-2025-146969/): Malicious code in query-jabbah-eslint-config-jupiter (npm) (malicious package)
- [MAL-2025-146968](https://insights.sbomify.com/MAL-2025-146968/): Malicious code in query-fornax-loop-lyra (npm) (malicious package)
- [MAL-2025-146967](https://insights.sbomify.com/MAL-2025-146967/): Malicious code in query-epimetheus-chromedriver-prettier-plugin-markdown (npm) (malicious package)
- [MAL-2025-146966](https://insights.sbomify.com/MAL-2025-146966/): Malicious code in query-despina-css-minimizer-webpack-plugin-juno (npm) (malicious package)
- [MAL-2025-146965](https://insights.sbomify.com/MAL-2025-146965/): Malicious code in query-deimos-semantic-ui-procyon (npm) (malicious package)
- [MAL-2025-146964](https://insights.sbomify.com/MAL-2025-146964/): Malicious code in query-bellatrix-helmet-spectron-webdriver (npm) (malicious package)
- [MAL-2025-146963](https://insights.sbomify.com/MAL-2025-146963/): Malicious code in quasar-xanadu-ophiuchus-shelljs (npm) (malicious package)
- [MAL-2025-146962](https://insights.sbomify.com/MAL-2025-146962/): Malicious code in quasar-transport-spinner-concurrently (npm) (malicious package)
- [MAL-2025-146961](https://insights.sbomify.com/MAL-2025-146961/): Malicious code in quasar-tethys-auth0-promise (npm) (malicious package)
- [MAL-2025-146960](https://insights.sbomify.com/MAL-2025-146960/): Malicious code in quasar-rollup-adonis-equinox (npm) (malicious package)
- [MAL-2025-14696](https://insights.sbomify.com/MAL-2025-14696/): Malicious code in apple-mango-yam-inhns (npm) (malicious package)
- [MAL-2025-146959](https://insights.sbomify.com/MAL-2025-146959/): Malicious code in quasar-remark-csrf-chai (npm) (malicious package)
- [MAL-2025-146958](https://insights.sbomify.com/MAL-2025-146958/): Malicious code in quasar-rate-limiter-changelog-aquarius (npm) (malicious package)
- [MAL-2025-146957](https://insights.sbomify.com/MAL-2025-146957/): Malicious code in quasar-query-mongoose-alphard (npm) (malicious package)
- [MAL-2025-146956](https://insights.sbomify.com/MAL-2025-146956/): Malicious code in quasar-neptune-bootstrap-altair (npm) (malicious package)
- [MAL-2025-146955](https://insights.sbomify.com/MAL-2025-146955/): Malicious code in quasar-markdownlint-ceres-atlas (npm) (malicious package)
- [MAL-2025-146954](https://insights.sbomify.com/MAL-2025-146954/): Malicious code in quasar-jwt-chariklo-virgo (npm) (malicious package)
- [MAL-2025-146953](https://insights.sbomify.com/MAL-2025-146953/): Malicious code in quasar-jest-wasat-luna (npm) (malicious package)
- [MAL-2025-146952](https://insights.sbomify.com/MAL-2025-146952/): Malicious code in quasar-janus-nightwatch-janus (npm) (malicious package)
- [MAL-2025-146951](https://insights.sbomify.com/MAL-2025-146951/): Malicious code in quasar-indus-spinner-pulsar (npm) (malicious package)
- [MAL-2025-146950](https://insights.sbomify.com/MAL-2025-146950/): Malicious code in quasar-geckodriver-got-chakra-ui (npm) (malicious package)
- [MAL-2025-14695](https://insights.sbomify.com/MAL-2025-14695/): Malicious code in apple-mango-quince-wmfae (npm) (malicious package)
- [MAL-2025-146949](https://insights.sbomify.com/MAL-2025-146949/): Malicious code in quasar-framework-superagent-remark (npm) (malicious package)
- [MAL-2025-146948](https://insights.sbomify.com/MAL-2025-146948/): Malicious code in quasar-firebase-fornax-eslint-config (npm) (malicious package)
- [MAL-2025-146947](https://insights.sbomify.com/MAL-2025-146947/): Malicious code in quasar-electron-geckodriver-vuepress (npm) (malicious package)
- [MAL-2025-146946](https://insights.sbomify.com/MAL-2025-146946/): Malicious code in quasar-eclipse-galaxy-resolvers (npm) (malicious package)
- [MAL-2025-146945](https://insights.sbomify.com/MAL-2025-146945/): Malicious code in quasar-cz-conventional-changelog-aquarius-weywot (npm) (malicious package)
- [MAL-2025-146944](https://insights.sbomify.com/MAL-2025-146944/): Malicious code in quasar-cosmiconfig-async-json (npm) (malicious package)
- [MAL-2025-146943](https://insights.sbomify.com/MAL-2025-146943/): Malicious code in quasar-cluster-deneb-indus (npm) (malicious package)
- [MAL-2025-146942](https://insights.sbomify.com/MAL-2025-146942/): Malicious code in quasar-ceres-morgan-uninstall (npm) (malicious package)
- [MAL-2025-146941](https://insights.sbomify.com/MAL-2025-146941/): Malicious code in quasar-bulma-tethys-capella (npm) (malicious package)
- [MAL-2025-146940](https://insights.sbomify.com/MAL-2025-146940/): Malicious code in quark-webdriver-manager-redis-pino (npm) (malicious package)
- [MAL-2025-14694](https://insights.sbomify.com/MAL-2025-14694/): Malicious code in apple-lrl-project (npm) (malicious package)
- [MAL-2025-146939](https://insights.sbomify.com/MAL-2025-146939/): Malicious code in quark-toml-iota-nashira (npm) (malicious package)
- [MAL-2025-146938](https://insights.sbomify.com/MAL-2025-146938/): Malicious code in quark-sirius-fornax-odin (npm) (malicious package)
- [MAL-2025-146937](https://insights.sbomify.com/MAL-2025-146937/): Malicious code in quark-sass-loader-tethys-css-loader (npm) (malicious package)
- [MAL-2025-146936](https://insights.sbomify.com/MAL-2025-146936/): Malicious code in quark-reveal-md-celeste-iota (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1410/