# Vulnerabilities published in 2025 - [MAL-2025-31026](https://insights.sbomify.com/MAL-2025-31026/): Malicious code in qoards (npm) (malicious package) - [MAL-2025-31025](https://insights.sbomify.com/MAL-2025-31025/): Malicious code in qnhvtowlbxdmsger (npm) (malicious package) - [MAL-2025-31024](https://insights.sbomify.com/MAL-2025-31024/): Malicious code in qmzdvsenuaxcoijf (npm) (malicious package) - [MAL-2025-31023](https://insights.sbomify.com/MAL-2025-31023/): Malicious code in qmycrap (npm) (malicious package) - [MAL-2025-31022](https://insights.sbomify.com/MAL-2025-31022/): Malicious code in qmplot (npm) (malicious package) - [MAL-2025-31021](https://insights.sbomify.com/MAL-2025-31021/): Malicious code in qmcoder (npm) (malicious package) - [MAL-2025-31020](https://insights.sbomify.com/MAL-2025-31020/): Malicious code in qmanga (npm) (malicious package) - [MAL-2025-3102](https://insights.sbomify.com/MAL-2025-3102/): Malicious code in invoicelifecycle-paypal (npm) (malicious package) - [MAL-2025-31019](https://insights.sbomify.com/MAL-2025-31019/): Malicious code in qloud-api (npm) (malicious package) - [MAL-2025-31018](https://insights.sbomify.com/MAL-2025-31018/): Malicious code in qlogin (npm) (malicious package) - [MAL-2025-31017](https://insights.sbomify.com/MAL-2025-31017/): Malicious code in qlocate (npm) (malicious package) - [MAL-2025-31016](https://insights.sbomify.com/MAL-2025-31016/): Malicious code in qlik-cloud-embedded-analytics-workshop (npm) (malicious package) - [MAL-2025-31015](https://insights.sbomify.com/MAL-2025-31015/): Malicious code in qkhprysiwoeazgxc (npm) (malicious package) - [MAL-2025-31014](https://insights.sbomify.com/MAL-2025-31014/): Malicious code in qkhlmzsgfiuywkov (npm) (malicious package) - [MAL-2025-31013](https://insights.sbomify.com/MAL-2025-31013/): Malicious code in qiyexin (npm) (malicious package) - [MAL-2025-31012](https://insights.sbomify.com/MAL-2025-31012/): Malicious code in qinjunhui (npm) (malicious package) - [MAL-2025-31011](https://insights.sbomify.com/MAL-2025-31011/): Malicious code in qingting (npm) (malicious package) - [MAL-2025-31010](https://insights.sbomify.com/MAL-2025-31010/): Malicious code in qidunhu (npm) (malicious package) - [MAL-2025-3101](https://insights.sbomify.com/MAL-2025-3101/): Malicious code in internallib_v284 (npm) (malicious package) - [MAL-2025-31009](https://insights.sbomify.com/MAL-2025-31009/): Malicious code in qictest (npm) (malicious package) - [MAL-2025-31008](https://insights.sbomify.com/MAL-2025-31008/): Malicious code in qianxue (npm) (malicious package) - [MAL-2025-31007](https://insights.sbomify.com/MAL-2025-31007/): Malicious code in qhxpkctaumyksfol (npm) (malicious package) - [MAL-2025-31006](https://insights.sbomify.com/MAL-2025-31006/): Malicious code in qgrfsawkothjivyx (npm) (malicious package) - [MAL-2025-31005](https://insights.sbomify.com/MAL-2025-31005/): Malicious code in qgdlmyptbojsaucr (npm) (malicious package) - [MAL-2025-31004](https://insights.sbomify.com/MAL-2025-31004/): Malicious code in qfractals (npm) (malicious package) - [MAL-2025-31003](https://insights.sbomify.com/MAL-2025-31003/): Malicious code in qfkaeixcdbmjusyp (npm) (malicious package) - [MAL-2025-31002](https://insights.sbomify.com/MAL-2025-31002/): Malicious code in qferdbosugcvwaik (npm) (malicious package) - [MAL-2025-31001](https://insights.sbomify.com/MAL-2025-31001/): Malicious code in qfaungktekyiblhx (npm) (malicious package) - [MAL-2025-31000](https://insights.sbomify.com/MAL-2025-31000/): Malicious code in qekmsupkzwcfovbj (npm) (malicious package) - [MAL-2025-3100](https://insights.sbomify.com/MAL-2025-3100/): Malicious code in hide-console-api (npm) (malicious package) - [MAL-2025-310](https://insights.sbomify.com/MAL-2025-310/): Malicious code in sdk-coin-bsv (npm) (malicious package) - [MAL-2025-31](https://insights.sbomify.com/MAL-2025-31/): Malicious code in innocent-package (npm) (malicious package) - [MAL-2025-30999](https://insights.sbomify.com/MAL-2025-30999/): Malicious code in qdrant-node-js-basic-example (npm) (malicious package) - [MAL-2025-30998](https://insights.sbomify.com/MAL-2025-30998/): Malicious code in qdnackkmxysezgpl (npm) (malicious package) - [MAL-2025-30997](https://insights.sbomify.com/MAL-2025-30997/): Malicious code in qdlfxnguzpkjwbce (npm) (malicious package) - [MAL-2025-30996](https://insights.sbomify.com/MAL-2025-30996/): Malicious code in qdigest (npm) (malicious package) - [MAL-2025-30995](https://insights.sbomify.com/MAL-2025-30995/): Malicious code in qdgkitmswhjlxyoc (npm) (malicious package) - [MAL-2025-30994](https://insights.sbomify.com/MAL-2025-30994/): Malicious code in qcipbatwzhosxrdf (npm) (malicious package) - [MAL-2025-30993](https://insights.sbomify.com/MAL-2025-30993/): Malicious code in qcdn (npm) (malicious package) - [MAL-2025-30992](https://insights.sbomify.com/MAL-2025-30992/): Malicious code in qbkyehxkluovdfmp (npm) (malicious package) - [MAL-2025-30991](https://insights.sbomify.com/MAL-2025-30991/): Malicious code in qbirc-parser (npm) (malicious package) - [MAL-2025-30990](https://insights.sbomify.com/MAL-2025-30990/): Malicious code in qbirc (npm) (malicious package) - [MAL-2025-3099](https://insights.sbomify.com/MAL-2025-3099/): Malicious code in fivethirtyeight (npm) (malicious package) - [MAL-2025-30989](https://insights.sbomify.com/MAL-2025-30989/): Malicious code in qasocial (npm) (malicious package) - [MAL-2025-30988](https://insights.sbomify.com/MAL-2025-30988/): Malicious code in qartod (npm) (malicious package) - [MAL-2025-30987](https://insights.sbomify.com/MAL-2025-30987/): Malicious code in qapp (npm) (malicious package) - [MAL-2025-30986](https://insights.sbomify.com/MAL-2025-30986/): Malicious code in qanreoytksjkwxch (npm) (malicious package) - [MAL-2025-30985](https://insights.sbomify.com/MAL-2025-30985/): Malicious code in qaceozkygxufhwin (npm) (malicious package) - [MAL-2025-30984](https://insights.sbomify.com/MAL-2025-30984/): Malicious code in qaccel (npm) (malicious package) - [MAL-2025-30983](https://insights.sbomify.com/MAL-2025-30983/): Malicious code in qabdtkezrxshfwmk (npm) (malicious package) - [MAL-2025-30982](https://insights.sbomify.com/MAL-2025-30982/): Malicious code in q6zurtxfqrja6rzdzlogdgef8khb3mqm (npm) (malicious package) - [MAL-2025-30981](https://insights.sbomify.com/MAL-2025-30981/): Malicious code in q2-platform (npm) (malicious package) - [MAL-2025-30980](https://insights.sbomify.com/MAL-2025-30980/): Malicious code in q-ctrl (npm) (malicious package) - [MAL-2025-3098](https://insights.sbomify.com/MAL-2025-3098/): Malicious code in fastly-ip-sync (npm) (malicious package) - [MAL-2025-30979](https://insights.sbomify.com/MAL-2025-30979/): Malicious code in pztkdsowqrbyivnf (npm) (malicious package) - [MAL-2025-30978](https://insights.sbomify.com/MAL-2025-30978/): Malicious code in pzgrcvyiowtsknhx (npm) (malicious package) - [MAL-2025-30977](https://insights.sbomify.com/MAL-2025-30977/): Malicious code in pyxis-geomorphology-equinox-quantumfoam (npm) (malicious package) - [MAL-2025-30976](https://insights.sbomify.com/MAL-2025-30976/): Malicious code in pyxis-charon-darkmatter-orogeny (npm) (malicious package) - [MAL-2025-30975](https://insights.sbomify.com/MAL-2025-30975/): Malicious code in pyxis-antimatter-dotenv-parse-variables-xenos (npm) (malicious package) - [MAL-2025-30974](https://insights.sbomify.com/MAL-2025-30974/): Malicious code in pyxdlorsvzbfumek (npm) (malicious package) - [MAL-2025-30973](https://insights.sbomify.com/MAL-2025-30973/): Malicious code in pywinusb (npm) (malicious package) - [MAL-2025-30972](https://insights.sbomify.com/MAL-2025-30972/): Malicious code in pywebqq (npm) (malicious package) - [MAL-2025-30971](https://insights.sbomify.com/MAL-2025-30971/): Malicious code in pywebmoc (npm) (malicious package) - [MAL-2025-30970](https://insights.sbomify.com/MAL-2025-30970/): Malicious code in pywdboirngkuljch (npm) (malicious package) - [MAL-2025-3097](https://insights.sbomify.com/MAL-2025-3097/): Malicious code in exoscale-order-party-backend (npm) (malicious package) - [MAL-2025-30969](https://insights.sbomify.com/MAL-2025-30969/): Malicious code in pywalley (npm) (malicious package) - [MAL-2025-30968](https://insights.sbomify.com/MAL-2025-30968/): Malicious code in pytris (npm) (malicious package) - [MAL-2025-30967](https://insights.sbomify.com/MAL-2025-30967/): Malicious code in pytrec (npm) (malicious package) - [MAL-2025-30966](https://insights.sbomify.com/MAL-2025-30966/): Malicious code in pytrakt (npm) (malicious package) - [MAL-2025-30965](https://insights.sbomify.com/MAL-2025-30965/): Malicious code in pytmux (npm) (malicious package) - [MAL-2025-30964](https://insights.sbomify.com/MAL-2025-30964/): Malicious code in pythoneze (npm) (malicious package) - [MAL-2025-30963](https://insights.sbomify.com/MAL-2025-30963/): Malicious code in python-shuju-keshihua-xuexi-shouce (npm) (malicious package) - [MAL-2025-30962](https://insights.sbomify.com/MAL-2025-30962/): Malicious code in python-shuju-keshihua-miji (npm) (malicious package) - [MAL-2025-30961](https://insights.sbomify.com/MAL-2025-30961/): Malicious code in pytave (npm) (malicious package) - [MAL-2025-30960](https://insights.sbomify.com/MAL-2025-30960/): Malicious code in pystil (npm) (malicious package) - [MAL-2025-3096](https://insights.sbomify.com/MAL-2025-3096/): Malicious code in disputeapiserv-paypal (npm) (malicious package) - [MAL-2025-30959](https://insights.sbomify.com/MAL-2025-30959/): Malicious code in pysnot (npm) (malicious package) - [MAL-2025-30958](https://insights.sbomify.com/MAL-2025-30958/): Malicious code in pysiogame (npm) (malicious package) - [MAL-2025-30957](https://insights.sbomify.com/MAL-2025-30957/): Malicious code in pyshared (npm) (malicious package) - [MAL-2025-30956](https://insights.sbomify.com/MAL-2025-30956/): Malicious code in pyscop (npm) (malicious package) - [MAL-2025-30955](https://insights.sbomify.com/MAL-2025-30955/): Malicious code in pyschema (npm) (malicious package) - [MAL-2025-30954](https://insights.sbomify.com/MAL-2025-30954/): Malicious code in pyrosx (npm) (malicious package) - [MAL-2025-30953](https://insights.sbomify.com/MAL-2025-30953/): Malicious code in pyrock (npm) (malicious package) - [MAL-2025-30952](https://insights.sbomify.com/MAL-2025-30952/): Malicious code in pyrlong (npm) (malicious package) - [MAL-2025-30951](https://insights.sbomify.com/MAL-2025-30951/): Malicious code in pyritecli (npm) (malicious package) - [MAL-2025-30950](https://insights.sbomify.com/MAL-2025-30950/): Malicious code in pyremote (npm) (malicious package) - [MAL-2025-3095](https://insights.sbomify.com/MAL-2025-3095/): Malicious code in debug11 (npm) (malicious package) - [MAL-2025-30949](https://insights.sbomify.com/MAL-2025-30949/): Malicious code in pyregui (npm) (malicious package) - [MAL-2025-30948](https://insights.sbomify.com/MAL-2025-30948/): Malicious code in pyqver (npm) (malicious package) - [MAL-2025-30947](https://insights.sbomify.com/MAL-2025-30947/): Malicious code in pypuppet (npm) (malicious package) - [MAL-2025-30946](https://insights.sbomify.com/MAL-2025-30946/): Malicious code in pypacman (npm) (malicious package) - [MAL-2025-30945](https://insights.sbomify.com/MAL-2025-30945/): Malicious code in pyorbit (npm) (malicious package) - [MAL-2025-30944](https://insights.sbomify.com/MAL-2025-30944/): Malicious code in pyontdd (npm) (malicious package) - [MAL-2025-30943](https://insights.sbomify.com/MAL-2025-30943/): Malicious code in pyobot (npm) (malicious package) - [MAL-2025-30942](https://insights.sbomify.com/MAL-2025-30942/): Malicious code in pynoise (npm) (malicious package) - [MAL-2025-30941](https://insights.sbomify.com/MAL-2025-30941/): Malicious code in pymocket (npm) (malicious package) - [MAL-2025-30940](https://insights.sbomify.com/MAL-2025-30940/): Malicious code in pymite (npm) (malicious package) - [MAL-2025-3094](https://insights.sbomify.com/MAL-2025-3094/): Malicious code in com.henryhoffman.unlockprotocol (npm) (malicious package) - [MAL-2025-30939](https://insights.sbomify.com/MAL-2025-30939/): Malicious code in pymemory (npm) (malicious package) - [MAL-2025-30938](https://insights.sbomify.com/MAL-2025-30938/): Malicious code in pymangal (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/769/