# Vulnerabilities published in 2025


- [MAL-2025-146935](https://insights.sbomify.com/MAL-2025-146935/): Malicious code in quark-quark-nashira-indus (npm) (malicious package)
- [MAL-2025-146934](https://insights.sbomify.com/MAL-2025-146934/): Malicious code in quark-process-schema-eslint-config (npm) (malicious package)
- [MAL-2025-146933](https://insights.sbomify.com/MAL-2025-146933/): Malicious code in quark-pipe-mocha-nodejs (npm) (malicious package)
- [MAL-2025-146932](https://insights.sbomify.com/MAL-2025-146932/): Malicious code in quark-pino-pretty-relay-elektra (npm) (malicious package)
- [MAL-2025-146931](https://insights.sbomify.com/MAL-2025-146931/): Malicious code in quark-oberon-cypress-charon (npm) (malicious package)
- [MAL-2025-146930](https://insights.sbomify.com/MAL-2025-146930/): Malicious code in quark-nodemon-geckodriver-sequelize (npm) (malicious package)
- [MAL-2025-14693](https://insights.sbomify.com/MAL-2025-14693/): Malicious code in apple-lemon-oscar-atxoe (npm) (malicious package)
- [MAL-2025-146929](https://insights.sbomify.com/MAL-2025-146929/): Malicious code in quark-mui-adonis-hydra (npm) (malicious package)
- [MAL-2025-146928](https://insights.sbomify.com/MAL-2025-146928/): Malicious code in quark-metalsmith-cypress-oauth (npm) (malicious package)
- [MAL-2025-146927](https://insights.sbomify.com/MAL-2025-146927/): Malicious code in quark-kaus-mocha-europa (npm) (malicious package)
- [MAL-2025-146926](https://insights.sbomify.com/MAL-2025-146926/): Malicious code in quark-html-webpack-plugin-farout-pm2 (npm) (malicious package)
- [MAL-2025-146925](https://insights.sbomify.com/MAL-2025-146925/): Malicious code in quark-galaxy-phenomic-oauth (npm) (malicious package)
- [MAL-2025-146924](https://insights.sbomify.com/MAL-2025-146924/): Malicious code in quark-foundation-astro-install (npm) (malicious package)
- [MAL-2025-146923](https://insights.sbomify.com/MAL-2025-146923/): Malicious code in quark-csv-draco-procyon (npm) (malicious package)
- [MAL-2025-146922](https://insights.sbomify.com/MAL-2025-146922/): Malicious code in quark-colors-auth0-shelljs (npm) (malicious package)
- [MAL-2025-146921](https://insights.sbomify.com/MAL-2025-146921/): Malicious code in quark-child-process-mongodb-phoebe (npm) (malicious package)
- [MAL-2025-146920](https://insights.sbomify.com/MAL-2025-146920/): Malicious code in quark-capella-canopus-altair (npm) (malicious package)
- [MAL-2025-14692](https://insights.sbomify.com/MAL-2025-14692/): Malicious code in apple-kum-project (npm) (malicious package)
- [MAL-2025-146919](https://insights.sbomify.com/MAL-2025-146919/): Malicious code in quark-bunyan-cache-delphinus (npm) (malicious package)
- [MAL-2025-146918](https://insights.sbomify.com/MAL-2025-146918/): Malicious code in quark-aquarius-eslint-spawn (npm) (malicious package)
- [MAL-2025-146917](https://insights.sbomify.com/MAL-2025-146917/): Malicious code in quantum-yakutsk-xenon-ophiuchus (npm) (malicious package)
- [MAL-2025-146916](https://insights.sbomify.com/MAL-2025-146916/): Malicious code in quantum-tailwindcss-kastra-bellatrix (npm) (malicious package)
- [MAL-2025-146915](https://insights.sbomify.com/MAL-2025-146915/): Malicious code in quantum-request-ganymede-parcel (npm) (malicious package)
- [MAL-2025-146914](https://insights.sbomify.com/MAL-2025-146914/): Malicious code in quantum-regulus-xerxes-iota (npm) (malicious package)
- [MAL-2025-146913](https://insights.sbomify.com/MAL-2025-146913/): Malicious code in quantum-promise-phoenix-nodejs (npm) (malicious package)
- [MAL-2025-146912](https://insights.sbomify.com/MAL-2025-146912/): Malicious code in quantum-polaris-antares-xanthus (npm) (malicious package)
- [MAL-2025-146911](https://insights.sbomify.com/MAL-2025-146911/): Malicious code in quantum-parcel-tailwindcss-less-loader (npm) (malicious package)
- [MAL-2025-146910](https://insights.sbomify.com/MAL-2025-146910/): Malicious code in quantum-mysql-schema-materialize (npm) (malicious package)
- [MAL-2025-14691](https://insights.sbomify.com/MAL-2025-14691/): Malicious code in apple-kangaroo-pj2g (npm) (malicious package)
- [MAL-2025-146909](https://insights.sbomify.com/MAL-2025-146909/): Malicious code in quantum-mensa-callback-altair (npm) (malicious package)
- [MAL-2025-146908](https://insights.sbomify.com/MAL-2025-146908/): Malicious code in quantum-materialize-sqlite-jovian (npm) (malicious package)
- [MAL-2025-146907](https://insights.sbomify.com/MAL-2025-146907/): Malicious code in quantum-loopback-element-ui-wasat (npm) (malicious package)
- [MAL-2025-146906](https://insights.sbomify.com/MAL-2025-146906/): Malicious code in quantum-karma-eslint-plugin-javascript (npm) (malicious package)
- [MAL-2025-146905](https://insights.sbomify.com/MAL-2025-146905/): Malicious code in quantum-izar-arcturus-magellan (npm) (malicious package)
- [MAL-2025-146904](https://insights.sbomify.com/MAL-2025-146904/): Malicious code in quantum-install-puppeteer-link (npm) (malicious package)
- [MAL-2025-146903](https://insights.sbomify.com/MAL-2025-146903/): Malicious code in quantum-hugo-markdown-pdf-registry (npm) (malicious package)
- [MAL-2025-146902](https://insights.sbomify.com/MAL-2025-146902/): Malicious code in quantum-ganymede-gravity-winston (npm) (malicious package)
- [MAL-2025-146901](https://insights.sbomify.com/MAL-2025-146901/): Malicious code in quantum-deimos-colors-dagda (npm) (malicious package)
- [MAL-2025-146900](https://insights.sbomify.com/MAL-2025-146900/): Malicious code in quantum-cressida-registry-chakra-ui (npm) (malicious package)
- [MAL-2025-14690](https://insights.sbomify.com/MAL-2025-14690/): Malicious code in apple-k27-project (npm) (malicious package)
- [MAL-2025-1469](https://insights.sbomify.com/MAL-2025-1469/): Malicious code in elastic-buildkite-manager (npm) (malicious package)
- [MAL-2025-146899](https://insights.sbomify.com/MAL-2025-146899/): Malicious code in quantum-configstore-mensa-spica (npm) (malicious package)
- [MAL-2025-146898](https://insights.sbomify.com/MAL-2025-146898/): Malicious code in quantum-commitlint-config-angular-event-firebase (npm) (malicious package)
- [MAL-2025-146897](https://insights.sbomify.com/MAL-2025-146897/): Malicious code in quantum-await-meteor-nebula (npm) (malicious package)
- [MAL-2025-146896](https://insights.sbomify.com/MAL-2025-146896/): Malicious code in quantum-await-meissa-iota (npm) (malicious package)
- [MAL-2025-146895](https://insights.sbomify.com/MAL-2025-146895/): Malicious code in quantum-avior-chalk-magellan (npm) (malicious package)
- [MAL-2025-146894](https://insights.sbomify.com/MAL-2025-146894/): Malicious code in pyxis-webdriver-manager-selenium-gridsome (npm) (malicious package)
- [MAL-2025-146893](https://insights.sbomify.com/MAL-2025-146893/): Malicious code in pyxis-webdriver-manager-colors-cluster (npm) (malicious package)
- [MAL-2025-146892](https://insights.sbomify.com/MAL-2025-146892/): Malicious code in pyxis-thuban-redis-nightwatch (npm) (malicious package)
- [MAL-2025-146891](https://insights.sbomify.com/MAL-2025-146891/): Malicious code in pyxis-thuban-configstore-meissa (npm) (malicious package)
- [MAL-2025-146890](https://insights.sbomify.com/MAL-2025-146890/): Malicious code in pyxis-terser-dactyl-rollup-plugin (npm) (malicious package)
- [MAL-2025-14689](https://insights.sbomify.com/MAL-2025-14689/): Malicious code in apple-india-rtro (npm) (malicious package)
- [MAL-2025-146889](https://insights.sbomify.com/MAL-2025-146889/): Malicious code in pyxis-rigel-janus-arcturus (npm) (malicious package)
- [MAL-2025-146888](https://insights.sbomify.com/MAL-2025-146888/): Malicious code in pyxis-quark-io-request (npm) (malicious package)
- [MAL-2025-146887](https://insights.sbomify.com/MAL-2025-146887/): Malicious code in pyxis-proxima-library-farout (npm) (malicious package)
- [MAL-2025-146886](https://insights.sbomify.com/MAL-2025-146886/): Malicious code in pyxis-perseus-release-it-zenobia (npm) (malicious package)
- [MAL-2025-146885](https://insights.sbomify.com/MAL-2025-146885/): Malicious code in pyxis-pavo-electron-builder-odin (npm) (malicious package)
- [MAL-2025-146884](https://insights.sbomify.com/MAL-2025-146884/): Malicious code in pyxis-parcel-redis-testcafe (npm) (malicious package)
- [MAL-2025-146883](https://insights.sbomify.com/MAL-2025-146883/): Malicious code in pyxis-mysql-dotenv-safe-lyra (npm) (malicious package)
- [MAL-2025-146882](https://insights.sbomify.com/MAL-2025-146882/): Malicious code in pyxis-leda-iota-fornax (npm) (malicious package)
- [MAL-2025-146881](https://insights.sbomify.com/MAL-2025-146881/): Malicious code in pyxis-kinetic-hapi-octans (npm) (malicious package)
- [MAL-2025-146880](https://insights.sbomify.com/MAL-2025-146880/): Malicious code in pyxis-karma-sadr-non-blocking (npm) (malicious package)
- [MAL-2025-14688](https://insights.sbomify.com/MAL-2025-14688/): Malicious code in apple-india-mdtr (npm) (malicious package)
- [MAL-2025-146879](https://insights.sbomify.com/MAL-2025-146879/): Malicious code in pyxis-juno-uninstall-gatsby (npm) (malicious package)
- [MAL-2025-146878](https://insights.sbomify.com/MAL-2025-146878/): Malicious code in pyxis-helmet-dagda-halley (npm) (malicious package)
- [MAL-2025-146877](https://insights.sbomify.com/MAL-2025-146877/): Malicious code in pyxis-halley-hugo-unuk (npm) (malicious package)
- [MAL-2025-146876](https://insights.sbomify.com/MAL-2025-146876/): Malicious code in pyxis-eclipse-mysql-titan (npm) (malicious package)
- [MAL-2025-146875](https://insights.sbomify.com/MAL-2025-146875/): Malicious code in pyxis-docusaurus-quito-start (npm) (malicious package)
- [MAL-2025-146874](https://insights.sbomify.com/MAL-2025-146874/): Malicious code in pyxis-cypress-chromedriver-canopus (npm) (malicious package)
- [MAL-2025-146873](https://insights.sbomify.com/MAL-2025-146873/): Malicious code in pyxis-cors-lint-staged-auriga (npm) (malicious package)
- [MAL-2025-146872](https://insights.sbomify.com/MAL-2025-146872/): Malicious code in pyxis-config-eslint-plugin-exec (npm) (malicious package)
- [MAL-2025-146871](https://insights.sbomify.com/MAL-2025-146871/): Malicious code in pyxis-charon-neptune-install (npm) (malicious package)
- [MAL-2025-146870](https://insights.sbomify.com/MAL-2025-146870/): Malicious code in pyxis-antd-venus-weywot (npm) (malicious package)
- [MAL-2025-14687](https://insights.sbomify.com/MAL-2025-14687/): Malicious code in apple-harbor-06we (npm) (malicious package)
- [MAL-2025-146869](https://insights.sbomify.com/MAL-2025-146869/): Malicious code in puppeteer-xenon-style-loader-xml (npm) (malicious package)
- [MAL-2025-146868](https://insights.sbomify.com/MAL-2025-146868/): Malicious code in puppeteer-writable-blaze-phenomic (npm) (malicious package)
- [MAL-2025-146867](https://insights.sbomify.com/MAL-2025-146867/): Malicious code in puppeteer-version-quasar-global (npm) (malicious package)
- [MAL-2025-146866](https://insights.sbomify.com/MAL-2025-146866/): Malicious code in puppeteer-telesto-ursa-gacrux (npm) (malicious package)
- [MAL-2025-146865](https://insights.sbomify.com/MAL-2025-146865/): Malicious code in puppeteer-slides-phenomic-spectron-webdriver (npm) (malicious package)
- [MAL-2025-146864](https://insights.sbomify.com/MAL-2025-146864/): Malicious code in puppeteer-sequelize-link-zenobia (npm) (malicious package)
- [MAL-2025-146863](https://insights.sbomify.com/MAL-2025-146863/): Malicious code in puppeteer-repository-pino-non-blocking (npm) (malicious package)
- [MAL-2025-146862](https://insights.sbomify.com/MAL-2025-146862/): Malicious code in puppeteer-radiant-proxima-build (npm) (malicious package)
- [MAL-2025-146861](https://insights.sbomify.com/MAL-2025-146861/): Malicious code in puppeteer-prettier-plugin-markdown-loop-iota (npm) (malicious package)
- [MAL-2025-146860](https://insights.sbomify.com/MAL-2025-146860/): Malicious code in puppeteer-postgres-algol-websockets (npm) (malicious package)
- [MAL-2025-14686](https://insights.sbomify.com/MAL-2025-14686/): Malicious code in apple-grape-bjyq (npm) (malicious package)
- [MAL-2025-146859](https://insights.sbomify.com/MAL-2025-146859/): Malicious code in puppeteer-polaris-rollup-plugin-quantum (npm) (malicious package)
- [MAL-2025-146858](https://insights.sbomify.com/MAL-2025-146858/): Malicious code in puppeteer-pino-ursa-request (npm) (malicious package)
- [MAL-2025-146857](https://insights.sbomify.com/MAL-2025-146857/): Malicious code in puppeteer-pino-electron-builder-development (npm) (malicious package)
- [MAL-2025-146856](https://insights.sbomify.com/MAL-2025-146856/): Malicious code in puppeteer-nightmare-lynx-mongoose (npm) (malicious package)
- [MAL-2025-146855](https://insights.sbomify.com/MAL-2025-146855/): Malicious code in puppeteer-meissa-reveal-md-backend (npm) (malicious package)
- [MAL-2025-146854](https://insights.sbomify.com/MAL-2025-146854/): Malicious code in puppeteer-init-eclipse-quantum (npm) (malicious package)
- [MAL-2025-146853](https://insights.sbomify.com/MAL-2025-146853/): Malicious code in puppeteer-ganymede-hermes-flare (npm) (malicious package)
- [MAL-2025-146852](https://insights.sbomify.com/MAL-2025-146852/): Malicious code in puppeteer-equinox-polaris-element-ui (npm) (malicious package)
- [MAL-2025-146851](https://insights.sbomify.com/MAL-2025-146851/): Malicious code in puppeteer-epimetheus-socketio-reveal-md (npm) (malicious package)
- [MAL-2025-146850](https://insights.sbomify.com/MAL-2025-146850/): Malicious code in puppeteer-cygnus-adonis-superagent (npm) (malicious package)
- [MAL-2025-14685](https://insights.sbomify.com/MAL-2025-14685/): Malicious code in apple-fig-pkxm (npm) (malicious package)
- [MAL-2025-146849](https://insights.sbomify.com/MAL-2025-146849/): Malicious code in pulsar-zenobia-sirius-callback (npm) (malicious package)
- [MAL-2025-146848](https://insights.sbomify.com/MAL-2025-146848/): Malicious code in pulsar-zenith-triton-miranda (npm) (malicious package)
- [MAL-2025-146847](https://insights.sbomify.com/MAL-2025-146847/): Malicious code in pulsar-xml-nextjs-eleventy (npm) (malicious package)
- [MAL-2025-146846](https://insights.sbomify.com/MAL-2025-146846/): Malicious code in pulsar-virgo-neptune-relay (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1411/