# Vulnerabilities published in 2025


- [MAL-2025-31297](https://insights.sbomify.com/MAL-2025-31297/): Malicious code in quick-start_onnxruntime-node (npm) (malicious package)
- [MAL-2025-31296](https://insights.sbomify.com/MAL-2025-31296/): Malicious code in quick-start (npm) (malicious package)
- [MAL-2025-31295](https://insights.sbomify.com/MAL-2025-31295/): Malicious code in quick-old-grep-virtualize-xml (npm) (malicious package)
- [MAL-2025-31294](https://insights.sbomify.com/MAL-2025-31294/): Malicious code in quick-code-balance-spy-java (npm) (malicious package)
- [MAL-2025-31293](https://insights.sbomify.com/MAL-2025-31293/): Malicious code in quicbooks (npm) (malicious package)
- [MAL-2025-31292](https://insights.sbomify.com/MAL-2025-31292/): Malicious code in qui-theme-builder (npm) (malicious package)
- [MAL-2025-31291](https://insights.sbomify.com/MAL-2025-31291/): Malicious code in queue-firebase (npm) (malicious package)
- [MAL-2025-31290](https://insights.sbomify.com/MAL-2025-31290/): Malicious code in queue-consumer-cg (npm) (malicious package)
- [MAL-2025-3129](https://insights.sbomify.com/MAL-2025-3129/): Malicious code in scrt-www (npm) (malicious package)
- [MAL-2025-31289](https://insights.sbomify.com/MAL-2025-31289/): Malicious code in querynews (npm) (malicious package)
- [MAL-2025-31288](https://insights.sbomify.com/MAL-2025-31288/): Malicious code in query_response-active_record (npm) (malicious package)
- [MAL-2025-31287](https://insights.sbomify.com/MAL-2025-31287/): Malicious code in query_response (npm) (malicious package)
- [MAL-2025-31286](https://insights.sbomify.com/MAL-2025-31286/): Malicious code in query_layer-active_record (npm) (malicious package)
- [MAL-2025-31285](https://insights.sbomify.com/MAL-2025-31285/): Malicious code in query-sudo-web-yaml-iota (npm) (malicious package)
- [MAL-2025-31284](https://insights.sbomify.com/MAL-2025-31284/): Malicious code in query-simple-hot-sanitize-balance (npm) (malicious package)
- [MAL-2025-31283](https://insights.sbomify.com/MAL-2025-31283/): Malicious code in query-repository-ora-magellan (npm) (malicious package)
- [MAL-2025-31282](https://insights.sbomify.com/MAL-2025-31282/): Malicious code in query-kuiperbelt-blitz-eslint-plugin (npm) (malicious package)
- [MAL-2025-31281](https://insights.sbomify.com/MAL-2025-31281/): Malicious code in query-iota-import-double-sed (npm) (malicious package)
- [MAL-2025-31280](https://insights.sbomify.com/MAL-2025-31280/): Malicious code in query-hydra-postcss-loader-config (npm) (malicious package)
- [MAL-2025-3128](https://insights.sbomify.com/MAL-2025-3128/): Malicious code in @fraudprevention/device-intelligence (npm) (malicious package)
- [MAL-2025-31279](https://insights.sbomify.com/MAL-2025-31279/): Malicious code in query-emulate-stack-unix-phi (npm) (malicious package)
- [MAL-2025-31278](https://insights.sbomify.com/MAL-2025-31278/): Malicious code in querona (npm) (malicious package)
- [MAL-2025-31277](https://insights.sbomify.com/MAL-2025-31277/): Malicious code in quercus-xenon-elz3 (npm) (malicious package)
- [MAL-2025-31276](https://insights.sbomify.com/MAL-2025-31276/): Malicious code in quercus-uniform-ryu5 (npm) (malicious package)
- [MAL-2025-31275](https://insights.sbomify.com/MAL-2025-31275/): Malicious code in quercus-raspberry-qpdd (npm) (malicious package)
- [MAL-2025-31274](https://insights.sbomify.com/MAL-2025-31274/): Malicious code in quercus-ginkgo-reeq (npm) (malicious package)
- [MAL-2025-31273](https://insights.sbomify.com/MAL-2025-31273/): Malicious code in queensu (npm) (malicious package)
- [MAL-2025-31272](https://insights.sbomify.com/MAL-2025-31272/): Malicious code in quebec-zzn-project (npm) (malicious package)
- [MAL-2025-31271](https://insights.sbomify.com/MAL-2025-31271/): Malicious code in quebec-zulu-jsje (npm) (malicious package)
- [MAL-2025-31270](https://insights.sbomify.com/MAL-2025-31270/): Malicious code in quebec-zulu-cherry-zjmnf (npm) (malicious package)
- [MAL-2025-3127](https://insights.sbomify.com/MAL-2025-3127/): Malicious code in windowsreveal (npm) (malicious package)
- [MAL-2025-31269](https://insights.sbomify.com/MAL-2025-31269/): Malicious code in quebec-zucchini-zczj (npm) (malicious package)
- [MAL-2025-31268](https://insights.sbomify.com/MAL-2025-31268/): Malicious code in quebec-yam-watermelon-hdrth (npm) (malicious package)
- [MAL-2025-31267](https://insights.sbomify.com/MAL-2025-31267/): Malicious code in quebec-xray-golf-kupou (npm) (malicious package)
- [MAL-2025-31266](https://insights.sbomify.com/MAL-2025-31266/): Malicious code in quebec-xigua-yam-gvssv (npm) (malicious package)
- [MAL-2025-31265](https://insights.sbomify.com/MAL-2025-31265/): Malicious code in quebec-whiskey-nssb (npm) (malicious package)
- [MAL-2025-31264](https://insights.sbomify.com/MAL-2025-31264/): Malicious code in quebec-whiskey-fig-yjeyc (npm) (malicious package)
- [MAL-2025-31263](https://insights.sbomify.com/MAL-2025-31263/): Malicious code in quebec-wbf-project (npm) (malicious package)
- [MAL-2025-31262](https://insights.sbomify.com/MAL-2025-31262/): Malicious code in quebec-victor-grape-zmatj (npm) (malicious package)
- [MAL-2025-31261](https://insights.sbomify.com/MAL-2025-31261/): Malicious code in quebec-vgq-project (npm) (malicious package)
- [MAL-2025-31260](https://insights.sbomify.com/MAL-2025-31260/): Malicious code in quebec-vanilla-drmi (npm) (malicious package)
- [MAL-2025-3126](https://insights.sbomify.com/MAL-2025-3126/): Malicious code in whatwg-node-fetch-polyfill (npm) (malicious package)
- [MAL-2025-31259](https://insights.sbomify.com/MAL-2025-31259/): Malicious code in quebec-uniform-vanilla-tpsel (npm) (malicious package)
- [MAL-2025-31258](https://insights.sbomify.com/MAL-2025-31258/): Malicious code in quebec-uniform-strawberry-ttgap (npm) (malicious package)
- [MAL-2025-31257](https://insights.sbomify.com/MAL-2025-31257/): Malicious code in quebec-ukf-project (npm) (malicious package)
- [MAL-2025-31256](https://insights.sbomify.com/MAL-2025-31256/): Malicious code in quebec-turnip-4vqj (npm) (malicious package)
- [MAL-2025-31255](https://insights.sbomify.com/MAL-2025-31255/): Malicious code in quebec-temple-r573 (npm) (malicious package)
- [MAL-2025-31254](https://insights.sbomify.com/MAL-2025-31254/): Malicious code in quebec-tangerine-ytjy (npm) (malicious package)
- [MAL-2025-31253](https://insights.sbomify.com/MAL-2025-31253/): Malicious code in quebec-tangerine-ydkp (npm) (malicious package)
- [MAL-2025-31252](https://insights.sbomify.com/MAL-2025-31252/): Malicious code in quebec-strawberry-lima-zihpp (npm) (malicious package)
- [MAL-2025-31251](https://insights.sbomify.com/MAL-2025-31251/): Malicious code in quebec-romeo-echo-sgsnh (npm) (malicious package)
- [MAL-2025-31250](https://insights.sbomify.com/MAL-2025-31250/): Malicious code in quebec-raspberry-lemon-vlrqb (npm) (malicious package)
- [MAL-2025-3125](https://insights.sbomify.com/MAL-2025-3125/): Malicious code in vue-device-momo (npm) (malicious package)
- [MAL-2025-31249](https://insights.sbomify.com/MAL-2025-31249/): Malicious code in quebec-ra9-project (npm) (malicious package)
- [MAL-2025-31248](https://insights.sbomify.com/MAL-2025-31248/): Malicious code in quebec-qj3-project (npm) (malicious package)
- [MAL-2025-31247](https://insights.sbomify.com/MAL-2025-31247/): Malicious code in quebec-november-lemon-vjqjp (npm) (malicious package)
- [MAL-2025-31246](https://insights.sbomify.com/MAL-2025-31246/): Malicious code in quebec-mike-ugli-wlnxq (npm) (malicious package)
- [MAL-2025-31245](https://insights.sbomify.com/MAL-2025-31245/): Malicious code in quebec-mike-krjw (npm) (malicious package)
- [MAL-2025-31244](https://insights.sbomify.com/MAL-2025-31244/): Malicious code in quebec-lemon-bbuu (npm) (malicious package)
- [MAL-2025-31243](https://insights.sbomify.com/MAL-2025-31243/): Malicious code in quebec-kiwi-wujt (npm) (malicious package)
- [MAL-2025-31242](https://insights.sbomify.com/MAL-2025-31242/): Malicious code in quebec-kiwi-alle (npm) (malicious package)
- [MAL-2025-31241](https://insights.sbomify.com/MAL-2025-31241/): Malicious code in quebec-k27-project (npm) (malicious package)
- [MAL-2025-31240](https://insights.sbomify.com/MAL-2025-31240/): Malicious code in quebec-juliet-zciy (npm) (malicious package)
- [MAL-2025-3124](https://insights.sbomify.com/MAL-2025-3124/): Malicious code in twc-app-example-vue (npm) (malicious package)
- [MAL-2025-31239](https://insights.sbomify.com/MAL-2025-31239/): Malicious code in quebec-india-cherry-flwtl (npm) (malicious package)
- [MAL-2025-31238](https://insights.sbomify.com/MAL-2025-31238/): Malicious code in quebec-i2u-project (npm) (malicious package)
- [MAL-2025-31237](https://insights.sbomify.com/MAL-2025-31237/): Malicious code in quebec-hotel-ugli-jyjpb (npm) (malicious package)
- [MAL-2025-31236](https://insights.sbomify.com/MAL-2025-31236/): Malicious code in quebec-hotel-fqdg (npm) (malicious package)
- [MAL-2025-31235](https://insights.sbomify.com/MAL-2025-31235/): Malicious code in quebec-hotel-banana-eehld (npm) (malicious package)
- [MAL-2025-31234](https://insights.sbomify.com/MAL-2025-31234/): Malicious code in quebec-honeydew-iqzb (npm) (malicious package)
- [MAL-2025-31233](https://insights.sbomify.com/MAL-2025-31233/): Malicious code in quebec-hdi-project (npm) (malicious package)
- [MAL-2025-31232](https://insights.sbomify.com/MAL-2025-31232/): Malicious code in quebec-golf-rdpm (npm) (malicious package)
- [MAL-2025-31231](https://insights.sbomify.com/MAL-2025-31231/): Malicious code in quebec-golf-papa-sdohw (npm) (malicious package)
- [MAL-2025-31230](https://insights.sbomify.com/MAL-2025-31230/): Malicious code in quebec-foxtrot-vanilla-gtfnb (npm) (malicious package)
- [MAL-2025-3123](https://insights.sbomify.com/MAL-2025-3123/): Malicious code in trrx (npm) (malicious package)
- [MAL-2025-31229](https://insights.sbomify.com/MAL-2025-31229/): Malicious code in quebec-foxtrot-nwra (npm) (malicious package)
- [MAL-2025-31228](https://insights.sbomify.com/MAL-2025-31228/): Malicious code in quebec-fig-watermelon-xlykd (npm) (malicious package)
- [MAL-2025-31227](https://insights.sbomify.com/MAL-2025-31227/): Malicious code in quebec-ehn-project (npm) (malicious package)
- [MAL-2025-31226](https://insights.sbomify.com/MAL-2025-31226/): Malicious code in quebec-delta-gome (npm) (malicious package)
- [MAL-2025-31225](https://insights.sbomify.com/MAL-2025-31225/): Malicious code in quebec-date-qvyd (npm) (malicious package)
- [MAL-2025-31224](https://insights.sbomify.com/MAL-2025-31224/): Malicious code in quebec-cherry-orange-kjngy (npm) (malicious package)
- [MAL-2025-31223](https://insights.sbomify.com/MAL-2025-31223/): Malicious code in quebec-charlie-zvel (npm) (malicious package)
- [MAL-2025-31222](https://insights.sbomify.com/MAL-2025-31222/): Malicious code in quebec-cbb-project (npm) (malicious package)
- [MAL-2025-31221](https://insights.sbomify.com/MAL-2025-31221/): Malicious code in quebec-bravo-vvxu (npm) (malicious package)
- [MAL-2025-31220](https://insights.sbomify.com/MAL-2025-31220/): Malicious code in quebec-bravo-alpha-pfoee (npm) (malicious package)
- [MAL-2025-3122](https://insights.sbomify.com/MAL-2025-3122/): Malicious code in tiktok_4d_webapp (npm) (malicious package)
- [MAL-2025-31219](https://insights.sbomify.com/MAL-2025-31219/): Malicious code in quebec-banana-mango-mlfgl (npm) (malicious package)
- [MAL-2025-31218](https://insights.sbomify.com/MAL-2025-31218/): Malicious code in quebec-9br-project (npm) (malicious package)
- [MAL-2025-31217](https://insights.sbomify.com/MAL-2025-31217/): Malicious code in quebec-5c4-project (npm) (malicious package)
- [MAL-2025-31216](https://insights.sbomify.com/MAL-2025-31216/): Malicious code in quebec-2q2-project (npm) (malicious package)
- [MAL-2025-31215](https://insights.sbomify.com/MAL-2025-31215/): Malicious code in quebec-1qu-project (npm) (malicious package)
- [MAL-2025-31214](https://insights.sbomify.com/MAL-2025-31214/): Malicious code in quasarjet-mechatronics-stratosphere-abiogenesis (npm) (malicious package)
- [MAL-2025-31213](https://insights.sbomify.com/MAL-2025-31213/): Malicious code in quasarjet-capella-dione-europa (npm) (malicious package)
- [MAL-2025-31212](https://insights.sbomify.com/MAL-2025-31212/): Malicious code in quasar_th3hh_l1o3f_molecule (npm) (malicious package)
- [MAL-2025-31211](https://insights.sbomify.com/MAL-2025-31211/): Malicious code in quasar_s27fy_a67dm_harmony (npm) (malicious package)
- [MAL-2025-31210](https://insights.sbomify.com/MAL-2025-31210/): Malicious code in quasar_r8oku_v6cfo_pulse (npm) (malicious package)
- [MAL-2025-3121](https://insights.sbomify.com/MAL-2025-3121/): Malicious code in telegram-client (npm) (malicious package)
- [MAL-2025-31209](https://insights.sbomify.com/MAL-2025-31209/): Malicious code in quasar_m1qc1_l65qn_coral (npm) (malicious package)
- [MAL-2025-31208](https://insights.sbomify.com/MAL-2025-31208/): Malicious code in quasar_l4g76_ouhpm_grove (npm) (malicious package)
- [MAL-2025-31207](https://insights.sbomify.com/MAL-2025-31207/): Malicious code in quasar_hmpao_0rejm_honey (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/766/