# Vulnerabilities published in 2025


- [MAL-2025-31387](https://insights.sbomify.com/MAL-2025-31387/): Malicious code in quinoa-carrot-9ft6 (npm) (malicious package)
- [MAL-2025-31386](https://insights.sbomify.com/MAL-2025-31386/): Malicious code in quince-zulu-india-iqpjc (npm) (malicious package)
- [MAL-2025-31385](https://insights.sbomify.com/MAL-2025-31385/): Malicious code in quince-zucchini-cqvx (npm) (malicious package)
- [MAL-2025-31384](https://insights.sbomify.com/MAL-2025-31384/): Malicious code in quince-yam-rkef (npm) (malicious package)
- [MAL-2025-31383](https://insights.sbomify.com/MAL-2025-31383/): Malicious code in quince-xigua-romeo-elmco (npm) (malicious package)
- [MAL-2025-31382](https://insights.sbomify.com/MAL-2025-31382/): Malicious code in quince-whiskey-ggow (npm) (malicious package)
- [MAL-2025-31381](https://insights.sbomify.com/MAL-2025-31381/): Malicious code in quince-watermelon-yankee-bcsvi (npm) (malicious package)
- [MAL-2025-31380](https://insights.sbomify.com/MAL-2025-31380/): Malicious code in quince-vanilla-nectarine-haodk (npm) (malicious package)
- [MAL-2025-3138](https://insights.sbomify.com/MAL-2025-3138/): Malicious code in angular2-tesla-common (npm) (malicious package)
- [MAL-2025-31379](https://insights.sbomify.com/MAL-2025-31379/): Malicious code in quince-uniform-dyra (npm) (malicious package)
- [MAL-2025-31378](https://insights.sbomify.com/MAL-2025-31378/): Malicious code in quince-ugli-mqyg (npm) (malicious package)
- [MAL-2025-31377](https://insights.sbomify.com/MAL-2025-31377/): Malicious code in quince-tn9-project (npm) (malicious package)
- [MAL-2025-31376](https://insights.sbomify.com/MAL-2025-31376/): Malicious code in quince-tango-yaqg (npm) (malicious package)
- [MAL-2025-31375](https://insights.sbomify.com/MAL-2025-31375/): Malicious code in quince-tangerine-hotel-gmxhr (npm) (malicious package)
- [MAL-2025-31374](https://insights.sbomify.com/MAL-2025-31374/): Malicious code in quince-t4d-project (npm) (malicious package)
- [MAL-2025-31373](https://insights.sbomify.com/MAL-2025-31373/): Malicious code in quince-smt-project (npm) (malicious package)
- [MAL-2025-31372](https://insights.sbomify.com/MAL-2025-31372/): Malicious code in quince-sierra-aedw (npm) (malicious package)
- [MAL-2025-31371](https://insights.sbomify.com/MAL-2025-31371/): Malicious code in quince-romeo-jjfl (npm) (malicious package)
- [MAL-2025-31370](https://insights.sbomify.com/MAL-2025-31370/): Malicious code in quince-raspberry-rijd (npm) (malicious package)
- [MAL-2025-3137](https://insights.sbomify.com/MAL-2025-3137/): Malicious code in rlusd (npm) (malicious package)
- [MAL-2025-31369](https://insights.sbomify.com/MAL-2025-31369/): Malicious code in quince-quebec-dggk (npm) (malicious package)
- [MAL-2025-31368](https://insights.sbomify.com/MAL-2025-31368/): Malicious code in quince-oscar-fnab (npm) (malicious package)
- [MAL-2025-31367](https://insights.sbomify.com/MAL-2025-31367/): Malicious code in quince-november-baza (npm) (malicious package)
- [MAL-2025-31366](https://insights.sbomify.com/MAL-2025-31366/): Malicious code in quince-nectarine-vngj (npm) (malicious package)
- [MAL-2025-31365](https://insights.sbomify.com/MAL-2025-31365/): Malicious code in quince-mike-kxog (npm) (malicious package)
- [MAL-2025-31364](https://insights.sbomify.com/MAL-2025-31364/): Malicious code in quince-lemon-apple-ejjoo (npm) (malicious package)
- [MAL-2025-31363](https://insights.sbomify.com/MAL-2025-31363/): Malicious code in quince-ktu-project (npm) (malicious package)
- [MAL-2025-31362](https://insights.sbomify.com/MAL-2025-31362/): Malicious code in quince-kio-project (npm) (malicious package)
- [MAL-2025-31361](https://insights.sbomify.com/MAL-2025-31361/): Malicious code in quince-jyw-project (npm) (malicious package)
- [MAL-2025-31360](https://insights.sbomify.com/MAL-2025-31360/): Malicious code in quince-india-hotel-fntdz (npm) (malicious package)
- [MAL-2025-3136](https://insights.sbomify.com/MAL-2025-3136/): Malicious code in clarunit (npm) (malicious package)
- [MAL-2025-31359](https://insights.sbomify.com/MAL-2025-31359/): Malicious code in quince-golf-papaya-xokog (npm) (malicious package)
- [MAL-2025-31358](https://insights.sbomify.com/MAL-2025-31358/): Malicious code in quince-foxtrot-auta (npm) (malicious package)
- [MAL-2025-31357](https://insights.sbomify.com/MAL-2025-31357/): Malicious code in quince-fig-quebec-wxxmb (npm) (malicious package)
- [MAL-2025-31356](https://insights.sbomify.com/MAL-2025-31356/): Malicious code in quince-fig-hhqf (npm) (malicious package)
- [MAL-2025-31355](https://insights.sbomify.com/MAL-2025-31355/): Malicious code in quince-ferry-bst0 (npm) (malicious package)
- [MAL-2025-31354](https://insights.sbomify.com/MAL-2025-31354/): Malicious code in quince-ei5-project (npm) (malicious package)
- [MAL-2025-31353](https://insights.sbomify.com/MAL-2025-31353/): Malicious code in quince-cherry-xbwk (npm) (malicious package)
- [MAL-2025-31352](https://insights.sbomify.com/MAL-2025-31352/): Malicious code in quince-cherry-copw (npm) (malicious package)
- [MAL-2025-31351](https://insights.sbomify.com/MAL-2025-31351/): Malicious code in quince-bravo-ydhd (npm) (malicious package)
- [MAL-2025-31350](https://insights.sbomify.com/MAL-2025-31350/): Malicious code in quince-bnu-project (npm) (malicious package)
- [MAL-2025-3135](https://insights.sbomify.com/MAL-2025-3135/): Malicious code in @weave-mui/divider (npm) (malicious package)
- [MAL-2025-31349](https://insights.sbomify.com/MAL-2025-31349/): Malicious code in quince-bfh-project (npm) (malicious package)
- [MAL-2025-31348](https://insights.sbomify.com/MAL-2025-31348/): Malicious code in quince-banana-teym (npm) (malicious package)
- [MAL-2025-31347](https://insights.sbomify.com/MAL-2025-31347/): Malicious code in quince-azy-project (npm) (malicious package)
- [MAL-2025-31346](https://insights.sbomify.com/MAL-2025-31346/): Malicious code in quince-apple-dtzy (npm) (malicious package)
- [MAL-2025-31345](https://insights.sbomify.com/MAL-2025-31345/): Malicious code in quince-8zb-project (npm) (malicious package)
- [MAL-2025-31344](https://insights.sbomify.com/MAL-2025-31344/): Malicious code in quince-8me-project (npm) (malicious package)
- [MAL-2025-31343](https://insights.sbomify.com/MAL-2025-31343/): Malicious code in quince-7mv-project (npm) (malicious package)
- [MAL-2025-31342](https://insights.sbomify.com/MAL-2025-31342/): Malicious code in quince-34j-project (npm) (malicious package)
- [MAL-2025-31341](https://insights.sbomify.com/MAL-2025-31341/): Malicious code in quince-0yc-project (npm) (malicious package)
- [MAL-2025-31340](https://insights.sbomify.com/MAL-2025-31340/): Malicious code in quince-0c2-project (npm) (malicious package)
- [MAL-2025-3134](https://insights.sbomify.com/MAL-2025-3134/): Malicious code in valid-ip-scope (npm) (malicious package)
- [MAL-2025-31339](https://insights.sbomify.com/MAL-2025-31339/): Malicious code in quilt_rails (npm) (malicious package)
- [MAL-2025-31338](https://insights.sbomify.com/MAL-2025-31338/): Malicious code in quilt-spruce-aym670-project (npm) (malicious package)
- [MAL-2025-31337](https://insights.sbomify.com/MAL-2025-31337/): Malicious code in quilt-piano-alk860-project (npm) (malicious package)
- [MAL-2025-31336](https://insights.sbomify.com/MAL-2025-31336/): Malicious code in quilt-opal-wmj960-project (npm) (malicious package)
- [MAL-2025-31335](https://insights.sbomify.com/MAL-2025-31335/): Malicious code in quilt-opal-ols664-project (npm) (malicious package)
- [MAL-2025-31334](https://insights.sbomify.com/MAL-2025-31334/): Malicious code in quilt-octopus-kbt814-project (npm) (malicious package)
- [MAL-2025-31333](https://insights.sbomify.com/MAL-2025-31333/): Malicious code in quilt-fern-hec792-project (npm) (malicious package)
- [MAL-2025-31332](https://insights.sbomify.com/MAL-2025-31332/): Malicious code in quilt-everglow-vyn346-project (npm) (malicious package)
- [MAL-2025-31331](https://insights.sbomify.com/MAL-2025-31331/): Malicious code in quill-zebra-hpc995-project (npm) (malicious package)
- [MAL-2025-31330](https://insights.sbomify.com/MAL-2025-31330/): Malicious code in quill-z70bv-wqfqu-moonstone-project (npm) (malicious package)
- [MAL-2025-3133](https://insights.sbomify.com/MAL-2025-3133/): Malicious code in valid-ip-ban (npm) (malicious package)
- [MAL-2025-31329](https://insights.sbomify.com/MAL-2025-31329/): Malicious code in quill-yawn-uoy557-project (npm) (malicious package)
- [MAL-2025-31328](https://insights.sbomify.com/MAL-2025-31328/): Malicious code in quill-ta218-uc1re-night-project (npm) (malicious package)
- [MAL-2025-31327](https://insights.sbomify.com/MAL-2025-31327/): Malicious code in quill-star-mgi381-project (npm) (malicious package)
- [MAL-2025-31326](https://insights.sbomify.com/MAL-2025-31326/): Malicious code in quill-quasar-jgd162-project (npm) (malicious package)
- [MAL-2025-31325](https://insights.sbomify.com/MAL-2025-31325/): Malicious code in quill-quasar-dzw393-project (npm) (malicious package)
- [MAL-2025-31324](https://insights.sbomify.com/MAL-2025-31324/): Malicious code in quill-pinnacle-oxq146-project (npm) (malicious package)
- [MAL-2025-31323](https://insights.sbomify.com/MAL-2025-31323/): Malicious code in quill-orangutan-yno075-project (npm) (malicious package)
- [MAL-2025-31322](https://insights.sbomify.com/MAL-2025-31322/): Malicious code in quill-neq2a-pz4fq-fern-project (npm) (malicious package)
- [MAL-2025-31321](https://insights.sbomify.com/MAL-2025-31321/): Malicious code in quill-meadow-xks435-project (npm) (malicious package)
- [MAL-2025-31320](https://insights.sbomify.com/MAL-2025-31320/): Malicious code in quill-ldf9z-ko694-yonder-project (npm) (malicious package)
- [MAL-2025-3132](https://insights.sbomify.com/MAL-2025-3132/): Malicious code in internal-utils-bronxi (npm) (malicious package)
- [MAL-2025-31319](https://insights.sbomify.com/MAL-2025-31319/): Malicious code in quill-kiwi-yoc154-project (npm) (malicious package)
- [MAL-2025-31318](https://insights.sbomify.com/MAL-2025-31318/): Malicious code in quill-js7hm-qketz-flame-project (npm) (malicious package)
- [MAL-2025-31317](https://insights.sbomify.com/MAL-2025-31317/): Malicious code in quill-jacket-qzh852-project (npm) (malicious package)
- [MAL-2025-31316](https://insights.sbomify.com/MAL-2025-31316/): Malicious code in quill-jacket-mkd652-project (npm) (malicious package)
- [MAL-2025-31315](https://insights.sbomify.com/MAL-2025-31315/): Malicious code in quill-fjord-pri082-project (npm) (malicious package)
- [MAL-2025-31314](https://insights.sbomify.com/MAL-2025-31314/): Malicious code in quill-f8h86-j8tvw-dynamo-project (npm) (malicious package)
- [MAL-2025-31313](https://insights.sbomify.com/MAL-2025-31313/): Malicious code in quill-dandelion-ged596-project (npm) (malicious package)
- [MAL-2025-31312](https://insights.sbomify.com/MAL-2025-31312/): Malicious code in quill-bays6-gsrul-violet-project (npm) (malicious package)
- [MAL-2025-31311](https://insights.sbomify.com/MAL-2025-31311/): Malicious code in quill-baddk-22lbk-yarrow-project (npm) (malicious package)
- [MAL-2025-31310](https://insights.sbomify.com/MAL-2025-31310/): Malicious code in quill-amber-sef146-project (npm) (malicious package)
- [MAL-2025-3131](https://insights.sbomify.com/MAL-2025-3131/): Malicious code in dave-common (npm) (malicious package)
- [MAL-2025-31309](https://insights.sbomify.com/MAL-2025-31309/): Malicious code in quill-aabek-x41jv-zephyr-project (npm) (malicious package)
- [MAL-2025-31308](https://insights.sbomify.com/MAL-2025-31308/): Malicious code in quill-9aaa6-trbiq-zephyr-project (npm) (malicious package)
- [MAL-2025-31307](https://insights.sbomify.com/MAL-2025-31307/): Malicious code in quickyfit (npm) (malicious package)
- [MAL-2025-31306](https://insights.sbomify.com/MAL-2025-31306/): Malicious code in quicktune (npm) (malicious package)
- [MAL-2025-31305](https://insights.sbomify.com/MAL-2025-31305/): Malicious code in quicktun (npm) (malicious package)
- [MAL-2025-31304](https://insights.sbomify.com/MAL-2025-31304/): Malicious code in quickstart-mobile-server (npm) (malicious package)
- [MAL-2025-31303](https://insights.sbomify.com/MAL-2025-31303/): Malicious code in quicksilver_9t114_rphhy_honey (npm) (malicious package)
- [MAL-2025-31302](https://insights.sbomify.com/MAL-2025-31302/): Malicious code in quicksilver_68c7s_7oj7d_zenith (npm) (malicious package)
- [MAL-2025-31301](https://insights.sbomify.com/MAL-2025-31301/): Malicious code in quicksilver-mapbl-yosmr-bison-project (npm) (malicious package)
- [MAL-2025-31300](https://insights.sbomify.com/MAL-2025-31300/): Malicious code in quicksilver-lsmzm-hmnfc-ember-project (npm) (malicious package)
- [MAL-2025-3130](https://insights.sbomify.com/MAL-2025-3130/): Malicious code in @oldzeppelin/contract (npm) (malicious package)
- [MAL-2025-313](https://insights.sbomify.com/MAL-2025-313/): Malicious code in social-previews (npm) (malicious package)
- [MAL-2025-31299](https://insights.sbomify.com/MAL-2025-31299/): Malicious code in quicks (npm) (malicious package)
- [MAL-2025-31298](https://insights.sbomify.com/MAL-2025-31298/): Malicious code in quickmud (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/765/