# Vulnerabilities published in 2025


- [MAL-2025-45731](https://insights.sbomify.com/MAL-2025-45731/): Malicious code in quilt-bamboo-yxv852-project (npm) (malicious package)
- [MAL-2025-45730](https://insights.sbomify.com/MAL-2025-45730/): Malicious code in query-less-loader-passport-rest (npm) (malicious package)
- [MAL-2025-4573](https://insights.sbomify.com/MAL-2025-4573/): Malicious code in nuget-trends (npm) (malicious package)
- [MAL-2025-45729](https://insights.sbomify.com/MAL-2025-45729/): Malicious code in quasarjet-stratigraphy-readable-parallax (npm) (malicious package)
- [MAL-2025-45728](https://insights.sbomify.com/MAL-2025-45728/): Malicious code in quasarjet-hyperion-archaeogenetics-mutation (npm) (malicious package)
- [MAL-2025-45727](https://insights.sbomify.com/MAL-2025-45727/): Malicious code in quasarjet-gridsome-greatfilter-sync (npm) (malicious package)
- [MAL-2025-45726](https://insights.sbomify.com/MAL-2025-45726/): Malicious code in quasar-vista-cqk739-project (npm) (malicious package)
- [MAL-2025-45725](https://insights.sbomify.com/MAL-2025-45725/): Malicious code in quasar-regulus-epigenetics-mutation (npm) (malicious package)
- [MAL-2025-45724](https://insights.sbomify.com/MAL-2025-45724/): Malicious code in quasar-ophiuchus-heka-dotenv (npm) (malicious package)
- [MAL-2025-45723](https://insights.sbomify.com/MAL-2025-45723/): Malicious code in quartz-whale-tkq494-project (npm) (malicious package)
- [MAL-2025-45722](https://insights.sbomify.com/MAL-2025-45722/): Malicious code in quark-socketio-configstore-remark (npm) (malicious package)
- [MAL-2025-45721](https://insights.sbomify.com/MAL-2025-45721/): Malicious code in quark-mdx-blaze-foundation (npm) (malicious package)
- [MAL-2025-45720](https://insights.sbomify.com/MAL-2025-45720/): Malicious code in quark-markdown-soap-jekyll (npm) (malicious package)
- [MAL-2025-4572](https://insights.sbomify.com/MAL-2025-4572/): Malicious code in nb-tsconfig (npm) (malicious package)
- [MAL-2025-45719](https://insights.sbomify.com/MAL-2025-45719/): Malicious code in quark-colors-thermosphere-auriga (npm) (malicious package)
- [MAL-2025-45718](https://insights.sbomify.com/MAL-2025-45718/): Malicious code in quanxi-taiyi (npm) (malicious package)
- [MAL-2025-45717](https://insights.sbomify.com/MAL-2025-45717/): Malicious code in quantum-regulus-concurrently-yaml (npm) (malicious package)
- [MAL-2025-45716](https://insights.sbomify.com/MAL-2025-45716/): Malicious code in quant-learning (npm) (malicious package)
- [MAL-2025-45715](https://insights.sbomify.com/MAL-2025-45715/): Malicious code in quail-kale-zpn721-project (npm) (malicious package)
- [MAL-2025-45714](https://insights.sbomify.com/MAL-2025-45714/): Malicious code in quagmire-cascade-raz505-project (npm) (malicious package)
- [MAL-2025-45713](https://insights.sbomify.com/MAL-2025-45713/): Malicious code in qori-tiwul52-kyuki (npm) (malicious package)
- [MAL-2025-45712](https://insights.sbomify.com/MAL-2025-45712/): Malicious code in qori-semur95-breki (npm) (malicious package)
- [MAL-2025-45711](https://insights.sbomify.com/MAL-2025-45711/): Malicious code in qori-peyek3-breki (npm) (malicious package)
- [MAL-2025-45710](https://insights.sbomify.com/MAL-2025-45710/): Malicious code in qori-nasipecel75-breki (npm) (malicious package)
- [MAL-2025-4571](https://insights.sbomify.com/MAL-2025-4571/): Malicious code in muto-kaiju-npm (npm) (malicious package)
- [MAL-2025-45709](https://insights.sbomify.com/MAL-2025-45709/): Malicious code in qori-kue56-kyuki (npm) (malicious package)
- [MAL-2025-45708](https://insights.sbomify.com/MAL-2025-45708/): Malicious code in qori-kue24-kyuki (npm) (malicious package)
- [MAL-2025-45707](https://insights.sbomify.com/MAL-2025-45707/): Malicious code in qori-kue15-kyuki (npm) (malicious package)
- [MAL-2025-45706](https://insights.sbomify.com/MAL-2025-45706/): Malicious code in qori-klentik34-breki (npm) (malicious package)
- [MAL-2025-45705](https://insights.sbomify.com/MAL-2025-45705/): Malicious code in qori-ketan38-kyuki (npm) (malicious package)
- [MAL-2025-45704](https://insights.sbomify.com/MAL-2025-45704/): Malicious code in qori-kacang69-breki (npm) (malicious package)
- [MAL-2025-45703](https://insights.sbomify.com/MAL-2025-45703/): Malicious code in qori-gaplek68-breki (npm) (malicious package)
- [MAL-2025-45702](https://insights.sbomify.com/MAL-2025-45702/): Malicious code in qori-gandul87-breki (npm) (malicious package)
- [MAL-2025-45701](https://insights.sbomify.com/MAL-2025-45701/): Malicious code in qori-empal26-kyuki (npm) (malicious package)
- [MAL-2025-45700](https://insights.sbomify.com/MAL-2025-45700/): Malicious code in qori-donat70-breki (npm) (malicious package)
- [MAL-2025-4570](https://insights.sbomify.com/MAL-2025-4570/): Malicious code in muto-kaiju-log (npm) (malicious package)
- [MAL-2025-457](https://insights.sbomify.com/MAL-2025-457/): Malicious code in godaddy-analytics (npm) (malicious package)
- [MAL-2025-45699](https://insights.sbomify.com/MAL-2025-45699/): Malicious code in qori-bakwan7-breki (npm) (malicious package)
- [MAL-2025-45698](https://insights.sbomify.com/MAL-2025-45698/): Malicious code in qishibadude-zhihui (npm) (malicious package)
- [MAL-2025-45697](https://insights.sbomify.com/MAL-2025-45697/): Malicious code in qishi-niyijing-hentaluole (npm) (malicious package)
- [MAL-2025-45696](https://insights.sbomify.com/MAL-2025-45696/): Malicious code in qingxingmeng-wanquan-shouce (npm) (malicious package)
- [MAL-2025-45695](https://insights.sbomify.com/MAL-2025-45695/): Malicious code in qingxingmeng (npm) (malicious package)
- [MAL-2025-45694](https://insights.sbomify.com/MAL-2025-45694/): Malicious code in qingmi-taluo (npm) (malicious package)
- [MAL-2025-45693](https://insights.sbomify.com/MAL-2025-45693/): Malicious code in qingdi-gonglue-langji (npm) (malicious package)
- [MAL-2025-45692](https://insights.sbomify.com/MAL-2025-45692/): Malicious code in qimen-zhigui (npm) (malicious package)
- [MAL-2025-45691](https://insights.sbomify.com/MAL-2025-45691/): Malicious code in qimen-yusizhu (npm) (malicious package)
- [MAL-2025-45690](https://insights.sbomify.com/MAL-2025-45690/): Malicious code in qimen-yucexue (npm) (malicious package)
- [MAL-2025-4569](https://insights.sbomify.com/MAL-2025-4569/): Malicious code in miro-plugin-tag-crawler (npm) (malicious package)
- [MAL-2025-45689](https://insights.sbomify.com/MAL-2025-45689/): Malicious code in qimen-shiyong-yucexue (npm) (malicious package)
- [MAL-2025-45688](https://insights.sbomify.com/MAL-2025-45688/): Malicious code in qimen-qiwu (npm) (malicious package)
- [MAL-2025-45687](https://insights.sbomify.com/MAL-2025-45687/): Malicious code in qimen-mizhan (npm) (malicious package)
- [MAL-2025-45686](https://insights.sbomify.com/MAL-2025-45686/): Malicious code in qimen-jingcui (npm) (malicious package)
- [MAL-2025-45685](https://insights.sbomify.com/MAL-2025-45685/): Malicious code in qimen-gushi-shizhan-jiemi (npm) (malicious package)
- [MAL-2025-45684](https://insights.sbomify.com/MAL-2025-45684/): Malicious code in qimen-guizong (npm) (malicious package)
- [MAL-2025-45683](https://insights.sbomify.com/MAL-2025-45683/): Malicious code in qimen-dunjia-zhanbupian (npm) (malicious package)
- [MAL-2025-45682](https://insights.sbomify.com/MAL-2025-45682/): Malicious code in qimen-dunjia-yindunpian (npm) (malicious package)
- [MAL-2025-45681](https://insights.sbomify.com/MAL-2025-45681/): Malicious code in qimen-dunjia-yimao (npm) (malicious package)
- [MAL-2025-45680](https://insights.sbomify.com/MAL-2025-45680/): Malicious code in qimen-dunjia-yangzhaipian (npm) (malicious package)
- [MAL-2025-4568](https://insights.sbomify.com/MAL-2025-4568/): Malicious code in mergify-browser-extension (npm) (malicious package)
- [MAL-2025-45679](https://insights.sbomify.com/MAL-2025-45679/): Malicious code in qimen-dunjia-yangdunpian (npm) (malicious package)
- [MAL-2025-45678](https://insights.sbomify.com/MAL-2025-45678/): Malicious code in qimen-dunjia-jiezhen (npm) (malicious package)
- [MAL-2025-45677](https://insights.sbomify.com/MAL-2025-45677/): Malicious code in qimen-dunjia-jichupian (npm) (malicious package)
- [MAL-2025-45676](https://insights.sbomify.com/MAL-2025-45676/): Malicious code in qimen-dunjia-gongjupian (npm) (malicious package)
- [MAL-2025-45675](https://insights.sbomify.com/MAL-2025-45675/): Malicious code in qidong-linggan (npm) (malicious package)
- [MAL-2025-45674](https://insights.sbomify.com/MAL-2025-45674/): Malicious code in qiaomiao-caokong-renxinde-anhei-xinlixue (npm) (malicious package)
- [MAL-2025-45673](https://insights.sbomify.com/MAL-2025-45673/): Malicious code in qianshi-jinsheng-shiliutang-shengsi-qimengke (npm) (malicious package)
- [MAL-2025-45672](https://insights.sbomify.com/MAL-2025-45672/): Malicious code in qianshi-jinsheng-aiweiyang (npm) (malicious package)
- [MAL-2025-45671](https://insights.sbomify.com/MAL-2025-45671/): Malicious code in qiangzhe-shouce (npm) (malicious package)
- [MAL-2025-45670](https://insights.sbomify.com/MAL-2025-45670/): Malicious code in qdi-zhichang-yinan-quanmou-baodian (npm) (malicious package)
- [MAL-2025-4567](https://insights.sbomify.com/MAL-2025-4567/): Malicious code in log5j-v2 (npm) (malicious package)
- [MAL-2025-45669](https://insights.sbomify.com/MAL-2025-45669/): Malicious code in pyxis-sass-loader-achernar-jekyll (npm) (malicious package)
- [MAL-2025-45668](https://insights.sbomify.com/MAL-2025-45668/): Malicious code in pyxis-postcss-nightwatch-markdownlint (npm) (malicious package)
- [MAL-2025-45667](https://insights.sbomify.com/MAL-2025-45667/): Malicious code in pyxis-link-express-prettier (npm) (malicious package)
- [MAL-2025-45666](https://insights.sbomify.com/MAL-2025-45666/): Malicious code in pytorch-doc-zh (npm) (malicious package)
- [MAL-2025-45665](https://insights.sbomify.com/MAL-2025-45665/): Malicious code in pythonspot-zh (npm) (malicious package)
- [MAL-2025-45664](https://insights.sbomify.com/MAL-2025-45664/): Malicious code in pythonbasics-zh (npm) (malicious package)
- [MAL-2025-45663](https://insights.sbomify.com/MAL-2025-45663/): Malicious code in python-programming-net-zh (npm) (malicious package)
- [MAL-2025-45662](https://insights.sbomify.com/MAL-2025-45662/): Malicious code in python-auto-wiki (npm) (malicious package)
- [MAL-2025-45661](https://insights.sbomify.com/MAL-2025-45661/): Malicious code in pyqt4-doc-zh (npm) (malicious package)
- [MAL-2025-45660](https://insights.sbomify.com/MAL-2025-45660/): Malicious code in pyminer-dev-guide (npm) (malicious package)
- [MAL-2025-4566](https://insights.sbomify.com/MAL-2025-4566/): Malicious code in k8s-lint-action (npm) (malicious package)
- [MAL-2025-45659](https://insights.sbomify.com/MAL-2025-45659/): Malicious code in pyda-2e-zh (npm) (malicious package)
- [MAL-2025-45658](https://insights.sbomify.com/MAL-2025-45658/): Malicious code in putri-tempe50-breki (npm) (malicious package)
- [MAL-2025-45657](https://insights.sbomify.com/MAL-2025-45657/): Malicious code in putri-telurtahu5-breki (npm) (malicious package)
- [MAL-2025-45656](https://insights.sbomify.com/MAL-2025-45656/): Malicious code in putri-telur39-breki (npm) (malicious package)
- [MAL-2025-45655](https://insights.sbomify.com/MAL-2025-45655/): Malicious code in putri-takokak94-kyuki (npm) (malicious package)
- [MAL-2025-45654](https://insights.sbomify.com/MAL-2025-45654/): Malicious code in putri-takokak38-kyuki (npm) (malicious package)
- [MAL-2025-45653](https://insights.sbomify.com/MAL-2025-45653/): Malicious code in putri-tahu93-breki (npm) (malicious package)
- [MAL-2025-45652](https://insights.sbomify.com/MAL-2025-45652/): Malicious code in putri-serimuka72-breki (npm) (malicious package)
- [MAL-2025-45651](https://insights.sbomify.com/MAL-2025-45651/): Malicious code in putri-sambalado95-kyuki (npm) (malicious package)
- [MAL-2025-45650](https://insights.sbomify.com/MAL-2025-45650/): Malicious code in putri-rujak37-breki (npm) (malicious package)
- [MAL-2025-4565](https://insights.sbomify.com/MAL-2025-4565/): Malicious code in justeatapplepayjs (npm) (malicious package)
- [MAL-2025-45649](https://insights.sbomify.com/MAL-2025-45649/): Malicious code in putri-ronde19-kyuki (npm) (malicious package)
- [MAL-2025-45648](https://insights.sbomify.com/MAL-2025-45648/): Malicious code in putri-rangi5-breki (npm) (malicious package)
- [MAL-2025-45647](https://insights.sbomify.com/MAL-2025-45647/): Malicious code in putri-nasi28-kyuki (npm) (malicious package)
- [MAL-2025-45646](https://insights.sbomify.com/MAL-2025-45646/): Malicious code in putri-moci57-breki (npm) (malicious package)
- [MAL-2025-45645](https://insights.sbomify.com/MAL-2025-45645/): Malicious code in putri-menjes32-breki (npm) (malicious package)
- [MAL-2025-45644](https://insights.sbomify.com/MAL-2025-45644/): Malicious code in putri-martabak23-breki (npm) (malicious package)
- [MAL-2025-45643](https://insights.sbomify.com/MAL-2025-45643/): Malicious code in putri-lutis71-breki (npm) (malicious package)
- [MAL-2025-45642](https://insights.sbomify.com/MAL-2025-45642/): Malicious code in putri-kupat40-breki (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/606/