# Vulnerabilities published in 2025


- [MAL-2025-31206](https://insights.sbomify.com/MAL-2025-31206/): Malicious code in quasar_gt7v8_jjjne_harmony (npm) (malicious package)
- [MAL-2025-31205](https://insights.sbomify.com/MAL-2025-31205/): Malicious code in quasar_ew1ku_1abrv_reef (npm) (malicious package)
- [MAL-2025-31204](https://insights.sbomify.com/MAL-2025-31204/): Malicious code in quasar_dukqk_kxets_glow (npm) (malicious package)
- [MAL-2025-31203](https://insights.sbomify.com/MAL-2025-31203/): Malicious code in quasar_bcmu2_biflg_reef (npm) (malicious package)
- [MAL-2025-31202](https://insights.sbomify.com/MAL-2025-31202/): Malicious code in quasar_b7ys3_eamjl_oasis (npm) (malicious package)
- [MAL-2025-31201](https://insights.sbomify.com/MAL-2025-31201/): Malicious code in quasar_1ddaa_2v4fy_zephyr (npm) (malicious package)
- [MAL-2025-31200](https://insights.sbomify.com/MAL-2025-31200/): Malicious code in quasar-zebra-cbt662-project (npm) (malicious package)
- [MAL-2025-3120](https://insights.sbomify.com/MAL-2025-3120/): Malicious code in start-state-machine (npm) (malicious package)
- [MAL-2025-312](https://insights.sbomify.com/MAL-2025-312/): Malicious code in site-picker (npm) (malicious package)
- [MAL-2025-31199](https://insights.sbomify.com/MAL-2025-31199/): Malicious code in quasar-yonder-wso590-project (npm) (malicious package)
- [MAL-2025-31198](https://insights.sbomify.com/MAL-2025-31198/): Malicious code in quasar-xreep-cvuv1-basil-project (npm) (malicious package)
- [MAL-2025-31197](https://insights.sbomify.com/MAL-2025-31197/): Malicious code in quasar-xoj74-gd6qr-yarn-project (npm) (malicious package)
- [MAL-2025-31196](https://insights.sbomify.com/MAL-2025-31196/): Malicious code in quasar-xkkql-bpsvj-valley-project (npm) (malicious package)
- [MAL-2025-31195](https://insights.sbomify.com/MAL-2025-31195/): Malicious code in quasar-windmill-hhsy (npm) (malicious package)
- [MAL-2025-31194](https://insights.sbomify.com/MAL-2025-31194/): Malicious code in quasar-waterfall-ovk937-project (npm) (malicious package)
- [MAL-2025-31193](https://insights.sbomify.com/MAL-2025-31193/): Malicious code in quasar-vulture-lwd423-project (npm) (malicious package)
- [MAL-2025-31192](https://insights.sbomify.com/MAL-2025-31192/): Malicious code in quasar-volcano-spn287-project (npm) (malicious package)
- [MAL-2025-31191](https://insights.sbomify.com/MAL-2025-31191/): Malicious code in quasar-undertow-vxo949-project (npm) (malicious package)
- [MAL-2025-31190](https://insights.sbomify.com/MAL-2025-31190/): Malicious code in quasar-ugli-o590 (npm) (malicious package)
- [MAL-2025-3119](https://insights.sbomify.com/MAL-2025-3119/): Malicious code in skills-validator (npm) (malicious package)
- [MAL-2025-31189](https://insights.sbomify.com/MAL-2025-31189/): Malicious code in quasar-tide-sia770-project (npm) (malicious package)
- [MAL-2025-31188](https://insights.sbomify.com/MAL-2025-31188/): Malicious code in quasar-tg7y2-6giyl-yellow-project (npm) (malicious package)
- [MAL-2025-31187](https://insights.sbomify.com/MAL-2025-31187/): Malicious code in quasar-tdb09-7hzwd-phoenix-project (npm) (malicious package)
- [MAL-2025-31186](https://insights.sbomify.com/MAL-2025-31186/): Malicious code in quasar-tangerine-7zve (npm) (malicious package)
- [MAL-2025-31185](https://insights.sbomify.com/MAL-2025-31185/): Malicious code in quasar-radish-m6x0 (npm) (malicious package)
- [MAL-2025-31184](https://insights.sbomify.com/MAL-2025-31184/): Malicious code in quasar-prairie-jdj525-project (npm) (malicious package)
- [MAL-2025-31183](https://insights.sbomify.com/MAL-2025-31183/): Malicious code in quasar-pne84-i95wj-yew-project (npm) (malicious package)
- [MAL-2025-31182](https://insights.sbomify.com/MAL-2025-31182/): Malicious code in quasar-pinnacle-hab515-project (npm) (malicious package)
- [MAL-2025-31181](https://insights.sbomify.com/MAL-2025-31181/): Malicious code in quasar-orchid-aur247-project (npm) (malicious package)
- [MAL-2025-31180](https://insights.sbomify.com/MAL-2025-31180/): Malicious code in quasar-orangutan-tnb666-project (npm) (malicious package)
- [MAL-2025-3118](https://insights.sbomify.com/MAL-2025-3118/): Malicious code in rzp-ionic3-example (npm) (malicious package)
- [MAL-2025-31179](https://insights.sbomify.com/MAL-2025-31179/): Malicious code in quasar-opal-glt532-project (npm) (malicious package)
- [MAL-2025-31178](https://insights.sbomify.com/MAL-2025-31178/): Malicious code in quasar-opal-bbr973-project (npm) (malicious package)
- [MAL-2025-31177](https://insights.sbomify.com/MAL-2025-31177/): Malicious code in quasar-nugget-fty727-project (npm) (malicious package)
- [MAL-2025-31176](https://insights.sbomify.com/MAL-2025-31176/): Malicious code in quasar-nugget-ccs227-project (npm) (malicious package)
- [MAL-2025-31175](https://insights.sbomify.com/MAL-2025-31175/): Malicious code in quasar-nova-fetch-glaciology (npm) (malicious package)
- [MAL-2025-31174](https://insights.sbomify.com/MAL-2025-31174/): Malicious code in quasar-nimbus-vtq227-project (npm) (malicious package)
- [MAL-2025-31173](https://insights.sbomify.com/MAL-2025-31173/): Malicious code in quasar-lilypad-hog125-project (npm) (malicious package)
- [MAL-2025-31172](https://insights.sbomify.com/MAL-2025-31172/): Malicious code in quasar-lilac-yik624-project (npm) (malicious package)
- [MAL-2025-31171](https://insights.sbomify.com/MAL-2025-31171/): Malicious code in quasar-lilac-cxp245-project (npm) (malicious package)
- [MAL-2025-31170](https://insights.sbomify.com/MAL-2025-31170/): Malicious code in quasar-leopard-yey583-project (npm) (malicious package)
- [MAL-2025-3117](https://insights.sbomify.com/MAL-2025-3117/): Malicious code in risklmtndecisionserv-paypal (npm) (malicious package)
- [MAL-2025-31169](https://insights.sbomify.com/MAL-2025-31169/): Malicious code in quasar-kinetic-bootstrap-auriga (npm) (malicious package)
- [MAL-2025-31168](https://insights.sbomify.com/MAL-2025-31168/): Malicious code in quasar-jasmine-kph827-project (npm) (malicious package)
- [MAL-2025-31167](https://insights.sbomify.com/MAL-2025-31167/): Malicious code in quasar-jade-ajk319-project (npm) (malicious package)
- [MAL-2025-31166](https://insights.sbomify.com/MAL-2025-31166/): Malicious code in quasar-iceberg-rmo731-project (npm) (malicious package)
- [MAL-2025-31165](https://insights.sbomify.com/MAL-2025-31165/): Malicious code in quasar-hih1u-vewqk-verdure-project (npm) (malicious package)
- [MAL-2025-31164](https://insights.sbomify.com/MAL-2025-31164/): Malicious code in quasar-heka-xanadu-janus (npm) (malicious package)
- [MAL-2025-31163](https://insights.sbomify.com/MAL-2025-31163/): Malicious code in quasar-gs6l3-zbot0-celestial-project (npm) (malicious package)
- [MAL-2025-31162](https://insights.sbomify.com/MAL-2025-31162/): Malicious code in quasar-gorilla-dzj243-project (npm) (malicious package)
- [MAL-2025-31161](https://insights.sbomify.com/MAL-2025-31161/): Malicious code in quasar-gorge-nln067-project (npm) (malicious package)
- [MAL-2025-31160](https://insights.sbomify.com/MAL-2025-31160/): Malicious code in quasar-glacier-vxx511-project (npm) (malicious package)
- [MAL-2025-3116](https://insights.sbomify.com/MAL-2025-3116/): Malicious code in rif-token-contracts (npm) (malicious package)
- [MAL-2025-31159](https://insights.sbomify.com/MAL-2025-31159/): Malicious code in quasar-fusion-eslint-meteor (npm) (malicious package)
- [MAL-2025-31158](https://insights.sbomify.com/MAL-2025-31158/): Malicious code in quasar-fig-0e1t (npm) (malicious package)
- [MAL-2025-31157](https://insights.sbomify.com/MAL-2025-31157/): Malicious code in quasar-everest-rzu055-project (npm) (malicious package)
- [MAL-2025-31156](https://insights.sbomify.com/MAL-2025-31156/): Malicious code in quasar-coral-igu489-project (npm) (malicious package)
- [MAL-2025-31155](https://insights.sbomify.com/MAL-2025-31155/): Malicious code in quasar-conifer-3qoz (npm) (malicious package)
- [MAL-2025-31154](https://insights.sbomify.com/MAL-2025-31154/): Malicious code in quasar-cherry-neqb (npm) (malicious package)
- [MAL-2025-31153](https://insights.sbomify.com/MAL-2025-31153/): Malicious code in quasar-caravan-gav527-project (npm) (malicious package)
- [MAL-2025-31152](https://insights.sbomify.com/MAL-2025-31152/): Malicious code in quasar-butterfly-naa713-project (npm) (malicious package)
- [MAL-2025-31151](https://insights.sbomify.com/MAL-2025-31151/): Malicious code in quasar-augmentedreality-australis-planckscale (npm) (malicious package)
- [MAL-2025-31150](https://insights.sbomify.com/MAL-2025-31150/): Malicious code in quasar-arcturus-ionosphere-astroinformatics (npm) (malicious package)
- [MAL-2025-3115](https://insights.sbomify.com/MAL-2025-3115/): Malicious code in rapyd-nodejs (npm) (malicious package)
- [MAL-2025-31149](https://insights.sbomify.com/MAL-2025-31149/): Malicious code in quasar-32pls-l1p4f-celestial-project (npm) (malicious package)
- [MAL-2025-31148](https://insights.sbomify.com/MAL-2025-31148/): Malicious code in quartzite-thrive-wtg935-project (npm) (malicious package)
- [MAL-2025-31147](https://insights.sbomify.com/MAL-2025-31147/): Malicious code in quartz_ugzq2_z8bop_whirlwind (npm) (malicious package)
- [MAL-2025-31146](https://insights.sbomify.com/MAL-2025-31146/): Malicious code in quartz_rdm1x_qa81t_dream (npm) (malicious package)
- [MAL-2025-31145](https://insights.sbomify.com/MAL-2025-31145/): Malicious code in quartz_ohv2g_jxc6u_snow (npm) (malicious package)
- [MAL-2025-31144](https://insights.sbomify.com/MAL-2025-31144/): Malicious code in quartz_lo8j0_0coys_quasar (npm) (malicious package)
- [MAL-2025-31143](https://insights.sbomify.com/MAL-2025-31143/): Malicious code in quartz_7kdp5_i3dp6_trill (npm) (malicious package)
- [MAL-2025-31142](https://insights.sbomify.com/MAL-2025-31142/): Malicious code in quartz_4g0cp_a4b9w_xylophone (npm) (malicious package)
- [MAL-2025-31141](https://insights.sbomify.com/MAL-2025-31141/): Malicious code in quartz_3cxue_1mxnh_pinnacle (npm) (malicious package)
- [MAL-2025-31140](https://insights.sbomify.com/MAL-2025-31140/): Malicious code in quartz_1ywjv_pb4a0_flare (npm) (malicious package)
- [MAL-2025-3114](https://insights.sbomify.com/MAL-2025-3114/): Malicious code in prettier-prod (npm) (malicious package)
- [MAL-2025-31139](https://insights.sbomify.com/MAL-2025-31139/): Malicious code in quartz-yucca-wjn945-project (npm) (malicious package)
- [MAL-2025-31138](https://insights.sbomify.com/MAL-2025-31138/): Malicious code in quartz-yard-vmy863-project (npm) (malicious package)
- [MAL-2025-31137](https://insights.sbomify.com/MAL-2025-31137/): Malicious code in quartz-wzheh-o9se6-juniper-project (npm) (malicious package)
- [MAL-2025-31136](https://insights.sbomify.com/MAL-2025-31136/): Malicious code in quartz-vu3j2-y3fc9-quill-project (npm) (malicious package)
- [MAL-2025-31135](https://insights.sbomify.com/MAL-2025-31135/): Malicious code in quartz-uc37l-yd3jo-nymph-project (npm) (malicious package)
- [MAL-2025-31134](https://insights.sbomify.com/MAL-2025-31134/): Malicious code in quartz-sunset-stc680-project (npm) (malicious package)
- [MAL-2025-31133](https://insights.sbomify.com/MAL-2025-31133/): Malicious code in quartz-ripple-ppl805-project (npm) (malicious package)
- [MAL-2025-31132](https://insights.sbomify.com/MAL-2025-31132/): Malicious code in quartz-pg44a-qyrlb-obsidian-project (npm) (malicious package)
- [MAL-2025-31131](https://insights.sbomify.com/MAL-2025-31131/): Malicious code in quartz-my1fp-c80xb-violet-project (npm) (malicious package)
- [MAL-2025-31130](https://insights.sbomify.com/MAL-2025-31130/): Malicious code in quartz-lw7p2-v581i-twilight-project (npm) (malicious package)
- [MAL-2025-3113](https://insights.sbomify.com/MAL-2025-3113/): Malicious code in phonepe-payment-capacitor-example (npm) (malicious package)
- [MAL-2025-31129](https://insights.sbomify.com/MAL-2025-31129/): Malicious code in quartz-lvzw5-nweoo-whisper-project (npm) (malicious package)
- [MAL-2025-31128](https://insights.sbomify.com/MAL-2025-31128/): Malicious code in quartz-jy8u8-p2ymw-night-project (npm) (malicious package)
- [MAL-2025-31127](https://insights.sbomify.com/MAL-2025-31127/): Malicious code in quartz-joy-now163-project (npm) (malicious package)
- [MAL-2025-31126](https://insights.sbomify.com/MAL-2025-31126/): Malicious code in quartz-izggw-8rp8r-raven-project (npm) (malicious package)
- [MAL-2025-31125](https://insights.sbomify.com/MAL-2025-31125/): Malicious code in quartz-i4bqm-c8775-sky-project (npm) (malicious package)
- [MAL-2025-31124](https://insights.sbomify.com/MAL-2025-31124/): Malicious code in quartz-h8s2k-o3qy1-mosaic-project (npm) (malicious package)
- [MAL-2025-31123](https://insights.sbomify.com/MAL-2025-31123/): Malicious code in quartz-fj316-yfshj-pearl-project (npm) (malicious package)
- [MAL-2025-31122](https://insights.sbomify.com/MAL-2025-31122/): Malicious code in quartz-fie5y-vbxm7-wander-project (npm) (malicious package)
- [MAL-2025-31121](https://insights.sbomify.com/MAL-2025-31121/): Malicious code in quartz-e7waz-61jwy-yellow-project (npm) (malicious package)
- [MAL-2025-31120](https://insights.sbomify.com/MAL-2025-31120/): Malicious code in quartz-cr7fr-dkury-hearth-project (npm) (malicious package)
- [MAL-2025-3112](https://insights.sbomify.com/MAL-2025-3112/): Malicious code in payoutsapiserv-paypal (npm) (malicious package)
- [MAL-2025-31119](https://insights.sbomify.com/MAL-2025-31119/): Malicious code in quartz-8paia-bhkp5-flame-project (npm) (malicious package)
- [MAL-2025-31118](https://insights.sbomify.com/MAL-2025-31118/): Malicious code in quartz-3oxwj-eoctu-frost-project (npm) (malicious package)
- [MAL-2025-31117](https://insights.sbomify.com/MAL-2025-31117/): Malicious code in quartz-34rcy-vpbf9-gale-project (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/767/