# Vulnerabilities published in 2025


- [MAL-2025-31477](https://insights.sbomify.com/MAL-2025-31477/): Malicious code in radiance-iggjj-1ty6g-nova-project (npm) (malicious package)
- [MAL-2025-31476](https://insights.sbomify.com/MAL-2025-31476/): Malicious code in radiance-i7yxr-h4u63-echo-project (npm) (malicious package)
- [MAL-2025-31475](https://insights.sbomify.com/MAL-2025-31475/): Malicious code in radiance-0d0hn-q9m3l-silk-project (npm) (malicious package)
- [MAL-2025-31474](https://insights.sbomify.com/MAL-2025-31474/): Malicious code in radiance-03ovp-ri3dm-jungle-project (npm) (malicious package)
- [MAL-2025-31473](https://insights.sbomify.com/MAL-2025-31473/): Malicious code in radhikagb (npm) (malicious package)
- [MAL-2025-31472](https://insights.sbomify.com/MAL-2025-31472/): Malicious code in radexgrid (npm) (malicious package)
- [MAL-2025-31471](https://insights.sbomify.com/MAL-2025-31471/): Malicious code in radbot-wikipedia (npm) (malicious package)
- [MAL-2025-31470](https://insights.sbomify.com/MAL-2025-31470/): Malicious code in radbot-mdn (npm) (malicious package)
- [MAL-2025-3147](https://insights.sbomify.com/MAL-2025-3147/): Malicious code in byted-midas (npm) (malicious package)
- [MAL-2025-31469](https://insights.sbomify.com/MAL-2025-31469/): Malicious code in radbot (npm) (malicious package)
- [MAL-2025-31468](https://insights.sbomify.com/MAL-2025-31468/): Malicious code in radar-cms (npm) (malicious package)
- [MAL-2025-31467](https://insights.sbomify.com/MAL-2025-31467/): Malicious code in rack-path_mapper (npm) (malicious package)
- [MAL-2025-31466](https://insights.sbomify.com/MAL-2025-31466/): Malicious code in racism (npm) (malicious package)
- [MAL-2025-31465](https://insights.sbomify.com/MAL-2025-31465/): Malicious code in rachyweb (npm) (malicious package)
- [MAL-2025-31464](https://insights.sbomify.com/MAL-2025-31464/): Malicious code in rachael-io-common (npm) (malicious package)
- [MAL-2025-31463](https://insights.sbomify.com/MAL-2025-31463/): Malicious code in rabugento (npm) (malicious package)
- [MAL-2025-31462](https://insights.sbomify.com/MAL-2025-31462/): Malicious code in rabishot (npm) (malicious package)
- [MAL-2025-31461](https://insights.sbomify.com/MAL-2025-31461/): Malicious code in ra-data-google-sheets (npm) (malicious package)
- [MAL-2025-31460](https://insights.sbomify.com/MAL-2025-31460/): Malicious code in qxmelarnhitdkzyp (npm) (malicious package)
- [MAL-2025-3146](https://insights.sbomify.com/MAL-2025-3146/): Malicious code in boss-ui-ats (npm) (malicious package)
- [MAL-2025-31459](https://insights.sbomify.com/MAL-2025-31459/): Malicious code in qxierknpsbtofhja (npm) (malicious package)
- [MAL-2025-31458](https://insights.sbomify.com/MAL-2025-31458/): Malicious code in qxfwfd (npm) (malicious package)
- [MAL-2025-31457](https://insights.sbomify.com/MAL-2025-31457/): Malicious code in qwplzadyhvunjtgo (npm) (malicious package)
- [MAL-2025-31456](https://insights.sbomify.com/MAL-2025-31456/): Malicious code in qwortet (npm) (malicious package)
- [MAL-2025-31455](https://insights.sbomify.com/MAL-2025-31455/): Malicious code in qwepivnzosmkjryd (npm) (malicious package)
- [MAL-2025-31454](https://insights.sbomify.com/MAL-2025-31454/): Malicious code in qvukwtgfzoercxlp (npm) (malicious package)
- [MAL-2025-31453](https://insights.sbomify.com/MAL-2025-31453/): Malicious code in quxlhdvgksrwmcjp (npm) (malicious package)
- [MAL-2025-31452](https://insights.sbomify.com/MAL-2025-31452/): Malicious code in qute-tea (npm) (malicious package)
- [MAL-2025-31451](https://insights.sbomify.com/MAL-2025-31451/): Malicious code in qutaccess (npm) (malicious package)
- [MAL-2025-31450](https://insights.sbomify.com/MAL-2025-31450/): Malicious code in quotly (npm) (malicious package)
- [MAL-2025-3145](https://insights.sbomify.com/MAL-2025-3145/): Malicious code in boss-traceid (npm) (malicious package)
- [MAL-2025-31449](https://insights.sbomify.com/MAL-2025-31449/): Malicious code in quotebase (npm) (malicious package)
- [MAL-2025-31448](https://insights.sbomify.com/MAL-2025-31448/): Malicious code in quote-2 (npm) (malicious package)
- [MAL-2025-31447](https://insights.sbomify.com/MAL-2025-31447/): Malicious code in quota_tracker_ruby (npm) (malicious package)
- [MAL-2025-31446](https://insights.sbomify.com/MAL-2025-31446/): Malicious code in quokka-ziggurat-9yyt (npm) (malicious package)
- [MAL-2025-31445](https://insights.sbomify.com/MAL-2025-31445/): Malicious code in quokka-yankee-fy0o (npm) (malicious package)
- [MAL-2025-31444](https://insights.sbomify.com/MAL-2025-31444/): Malicious code in quokka-xenon-ypi7 (npm) (malicious package)
- [MAL-2025-31443](https://insights.sbomify.com/MAL-2025-31443/): Malicious code in quokka-quebec-9d0l (npm) (malicious package)
- [MAL-2025-31442](https://insights.sbomify.com/MAL-2025-31442/): Malicious code in quokka-mushroom-rdn2 (npm) (malicious package)
- [MAL-2025-31441](https://insights.sbomify.com/MAL-2025-31441/): Malicious code in quokka-eggplant-qcqy (npm) (malicious package)
- [MAL-2025-31440](https://insights.sbomify.com/MAL-2025-31440/): Malicious code in quokka-dock-ovyg (npm) (malicious package)
- [MAL-2025-3144](https://insights.sbomify.com/MAL-2025-3144/): Malicious code in awx-sme (npm) (malicious package)
- [MAL-2025-31439](https://insights.sbomify.com/MAL-2025-31439/): Malicious code in quokka-castle-tkkj (npm) (malicious package)
- [MAL-2025-31438](https://insights.sbomify.com/MAL-2025-31438/): Malicious code in quokka-bark-krv5 (npm) (malicious package)
- [MAL-2025-31437](https://insights.sbomify.com/MAL-2025-31437/): Malicious code in quokka-asteroid-8vwb (npm) (malicious package)
- [MAL-2025-31436](https://insights.sbomify.com/MAL-2025-31436/): Malicious code in quizzzz (npm) (malicious package)
- [MAL-2025-31435](https://insights.sbomify.com/MAL-2025-31435/): Malicious code in quizui (npm) (malicious package)
- [MAL-2025-31434](https://insights.sbomify.com/MAL-2025-31434/): Malicious code in quizsort (npm) (malicious package)
- [MAL-2025-31433](https://insights.sbomify.com/MAL-2025-31433/): Malicious code in quizol (npm) (malicious package)
- [MAL-2025-31432](https://insights.sbomify.com/MAL-2025-31432/): Malicious code in quizme (npm) (malicious package)
- [MAL-2025-31431](https://insights.sbomify.com/MAL-2025-31431/): Malicious code in quizharry (npm) (malicious package)
- [MAL-2025-31430](https://insights.sbomify.com/MAL-2025-31430/): Malicious code in quizegame (npm) (malicious package)
- [MAL-2025-3143](https://insights.sbomify.com/MAL-2025-3143/): Malicious code in arnotest (npm) (malicious package)
- [MAL-2025-31429](https://insights.sbomify.com/MAL-2025-31429/): Malicious code in quizdsl (npm) (malicious package)
- [MAL-2025-31428](https://insights.sbomify.com/MAL-2025-31428/): Malicious code in quiver_vd9q1_v5xfi_quarry (npm) (malicious package)
- [MAL-2025-31427](https://insights.sbomify.com/MAL-2025-31427/): Malicious code in quiver_rco8o_fl7j5_elephant (npm) (malicious package)
- [MAL-2025-31426](https://insights.sbomify.com/MAL-2025-31426/): Malicious code in quiver_qr5se_607lq_trill (npm) (malicious package)
- [MAL-2025-31425](https://insights.sbomify.com/MAL-2025-31425/): Malicious code in quiver_qdr9c_79wrv_xenolith (npm) (malicious package)
- [MAL-2025-31424](https://insights.sbomify.com/MAL-2025-31424/): Malicious code in quiver_oragi_k5skk_molecule (npm) (malicious package)
- [MAL-2025-31423](https://insights.sbomify.com/MAL-2025-31423/): Malicious code in quiver_ohdgq_4v3yj_iris (npm) (malicious package)
- [MAL-2025-31422](https://insights.sbomify.com/MAL-2025-31422/): Malicious code in quiver_69fqk_iiixf_zodiac (npm) (malicious package)
- [MAL-2025-31421](https://insights.sbomify.com/MAL-2025-31421/): Malicious code in quiver-zxezj-iztvv-reef-project (npm) (malicious package)
- [MAL-2025-31420](https://insights.sbomify.com/MAL-2025-31420/): Malicious code in quiver-mg8a4-zwtku-xenon-project (npm) (malicious package)
- [MAL-2025-3142](https://insights.sbomify.com/MAL-2025-3142/): Malicious code in arno-react (npm) (malicious package)
- [MAL-2025-31419](https://insights.sbomify.com/MAL-2025-31419/): Malicious code in quiver-dogrx-ydr03-unity-project (npm) (malicious package)
- [MAL-2025-31418](https://insights.sbomify.com/MAL-2025-31418/): Malicious code in quiver-acguz-e10cj-yarn-project (npm) (malicious package)
- [MAL-2025-31417](https://insights.sbomify.com/MAL-2025-31417/): Malicious code in quiver-97clv-nni6m-glen-project (npm) (malicious package)
- [MAL-2025-31416](https://insights.sbomify.com/MAL-2025-31416/): Malicious code in quiver-91c8p-veerp-aurora-project (npm) (malicious package)
- [MAL-2025-31415](https://insights.sbomify.com/MAL-2025-31415/): Malicious code in quiver-7h4m8-w23rr-song-project (npm) (malicious package)
- [MAL-2025-31414](https://insights.sbomify.com/MAL-2025-31414/): Malicious code in quiver-5cpgy-htdke-phoenix-project (npm) (malicious package)
- [MAL-2025-31413](https://insights.sbomify.com/MAL-2025-31413/): Malicious code in quittance (npm) (malicious package)
- [MAL-2025-31412](https://insights.sbomify.com/MAL-2025-31412/): Malicious code in quito-subscription-gridsome-airbnb (npm) (malicious package)
- [MAL-2025-31411](https://insights.sbomify.com/MAL-2025-31411/): Malicious code in quito-spectroscopy-forever-fornax (npm) (malicious package)
- [MAL-2025-31410](https://insights.sbomify.com/MAL-2025-31410/): Malicious code in quito-puppeteer-hyperion-rollup-plugin (npm) (malicious package)
- [MAL-2025-3141](https://insights.sbomify.com/MAL-2025-3141/): Malicious code in ac-localnav (npm) (malicious package)
- [MAL-2025-31409](https://insights.sbomify.com/MAL-2025-31409/): Malicious code in quito-private-oscillation-lacerta (npm) (malicious package)
- [MAL-2025-31408](https://insights.sbomify.com/MAL-2025-31408/): Malicious code in quito-outercore-repository-perseus (npm) (malicious package)
- [MAL-2025-31407](https://insights.sbomify.com/MAL-2025-31407/): Malicious code in quito-hydra-local-bellatrix (npm) (malicious package)
- [MAL-2025-31406](https://insights.sbomify.com/MAL-2025-31406/): Malicious code in quito-graviton-eslint-ursa (npm) (malicious package)
- [MAL-2025-31405](https://insights.sbomify.com/MAL-2025-31405/): Malicious code in quito-express-xenon-indus (npm) (malicious package)
- [MAL-2025-31404](https://insights.sbomify.com/MAL-2025-31404/): Malicious code in quito-eslint-config-octans-ophiuchus (npm) (malicious package)
- [MAL-2025-31403](https://insights.sbomify.com/MAL-2025-31403/): Malicious code in quito-cryovolcano-relay-csrf (npm) (malicious package)
- [MAL-2025-31402](https://insights.sbomify.com/MAL-2025-31402/): Malicious code in quintessence_zl5ym_46j82_evoke (npm) (malicious package)
- [MAL-2025-31401](https://insights.sbomify.com/MAL-2025-31401/): Malicious code in quintessence_w42vm_8dnb4_raven (npm) (malicious package)
- [MAL-2025-31400](https://insights.sbomify.com/MAL-2025-31400/): Malicious code in quintessence_pq1dc_tsnig_night (npm) (malicious package)
- [MAL-2025-3140](https://insights.sbomify.com/MAL-2025-3140/): Malicious code in ac-async-helpers (npm) (malicious package)
- [MAL-2025-314](https://insights.sbomify.com/MAL-2025-314/): Malicious code in tour-kit (npm) (malicious package)
- [MAL-2025-31399](https://insights.sbomify.com/MAL-2025-31399/): Malicious code in quintessence_j08na_nagct_kismet (npm) (malicious package)
- [MAL-2025-31398](https://insights.sbomify.com/MAL-2025-31398/): Malicious code in quintessence_fv9lh_gotxm_wave (npm) (malicious package)
- [MAL-2025-31397](https://insights.sbomify.com/MAL-2025-31397/): Malicious code in quintessence_5cdlo_hydef_raven (npm) (malicious package)
- [MAL-2025-31396](https://insights.sbomify.com/MAL-2025-31396/): Malicious code in quintessence_0ujrr_z26vy_topaz (npm) (malicious package)
- [MAL-2025-31395](https://insights.sbomify.com/MAL-2025-31395/): Malicious code in quinoa-ziggurat-3b71 (npm) (malicious package)
- [MAL-2025-31394](https://insights.sbomify.com/MAL-2025-31394/): Malicious code in quinoa-yearling-iem3 (npm) (malicious package)
- [MAL-2025-31393](https://insights.sbomify.com/MAL-2025-31393/): Malicious code in quinoa-teak-uygu (npm) (malicious package)
- [MAL-2025-31392](https://insights.sbomify.com/MAL-2025-31392/): Malicious code in quinoa-quokka-bwuy (npm) (malicious package)
- [MAL-2025-31391](https://insights.sbomify.com/MAL-2025-31391/): Malicious code in quinoa-pier-vqjb (npm) (malicious package)
- [MAL-2025-31390](https://insights.sbomify.com/MAL-2025-31390/): Malicious code in quinoa-nutmeg-dc52 (npm) (malicious package)
- [MAL-2025-3139](https://insights.sbomify.com/MAL-2025-3139/): Malicious code in modeldb-vis (npm) (malicious package)
- [MAL-2025-31389](https://insights.sbomify.com/MAL-2025-31389/): Malicious code in quinoa-november-xrp6 (npm) (malicious package)
- [MAL-2025-31388](https://insights.sbomify.com/MAL-2025-31388/): Malicious code in quinoa-galaxy-c35b (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/764/