# Vulnerabilities published in 2025


- [MAL-2025-189057](https://insights.sbomify.com/MAL-2025-189057/): Malicious code in radiant-nestjs-parcel-apex (npm) (malicious package)
- [MAL-2025-189056](https://insights.sbomify.com/MAL-2025-189056/): Malicious code in radiant-express-terser-bellatrix (npm) (malicious package)
- [MAL-2025-189055](https://insights.sbomify.com/MAL-2025-189055/): Malicious code in radiant-express-sync-tachyon (npm) (malicious package)
- [MAL-2025-189054](https://insights.sbomify.com/MAL-2025-189054/): Malicious code in radiant-event-bootstrap-geodynamo (npm) (malicious package)
- [MAL-2025-189053](https://insights.sbomify.com/MAL-2025-189053/): Malicious code in radiant-cross-env-neutrino-local (npm) (malicious package)
- [MAL-2025-189052](https://insights.sbomify.com/MAL-2025-189052/): Malicious code in quito-rocket-radiant-middleware (npm) (malicious package)
- [MAL-2025-189051](https://insights.sbomify.com/MAL-2025-189051/): Malicious code in quito-process-oscillation-nanotechnology (npm) (malicious package)
- [MAL-2025-189050](https://insights.sbomify.com/MAL-2025-189050/): Malicious code in quito-fornax-dynamo-csrf (npm) (malicious package)
- [MAL-2025-18905](https://insights.sbomify.com/MAL-2025-18905/): Malicious code in dsfserewkbaav (npm) (malicious package)
- [MAL-2025-189049](https://insights.sbomify.com/MAL-2025-189049/): Malicious code in quito-cryovolcano-nightwatch-subscription (npm) (malicious package)
- [MAL-2025-189048](https://insights.sbomify.com/MAL-2025-189048/): Malicious code in quito-config-lightyear-quito (npm) (malicious package)
- [MAL-2025-189047](https://insights.sbomify.com/MAL-2025-189047/): Malicious code in quick-validate-transpile-cluster-route (npm) (malicious package)
- [MAL-2025-189046](https://insights.sbomify.com/MAL-2025-189046/): Malicious code in quick-serialize-small-bash-delta (npm) (malicious package)
- [MAL-2025-189045](https://insights.sbomify.com/MAL-2025-189045/): Malicious code in quick-orchestrate-resolve-cat-tau (npm) (malicious package)
- [MAL-2025-189044](https://insights.sbomify.com/MAL-2025-189044/): Malicious code in quick-info-star-new-import (npm) (malicious package)
- [MAL-2025-189043](https://insights.sbomify.com/MAL-2025-189043/): Malicious code in quick-decode-transpile-array-wind (npm) (malicious package)
- [MAL-2025-189042](https://insights.sbomify.com/MAL-2025-189042/): Malicious code in query-sed-hash-mu-link (npm) (malicious package)
- [MAL-2025-189041](https://insights.sbomify.com/MAL-2025-189041/): Malicious code in query-relay-tethys-got (npm) (malicious package)
- [MAL-2025-189040](https://insights.sbomify.com/MAL-2025-189040/): Malicious code in query-regulus-bionics-subscription (npm) (malicious package)
- [MAL-2025-18904](https://insights.sbomify.com/MAL-2025-18904/): Malicious code in dsfserewkbaau (npm) (malicious package)
- [MAL-2025-189039](https://insights.sbomify.com/MAL-2025-189039/): Malicious code in query-betelgeuse-nebula-dotenv-safe (npm) (malicious package)
- [MAL-2025-189038](https://insights.sbomify.com/MAL-2025-189038/): Malicious code in quasarjet-umbriel-global-rest (npm) (malicious package)
- [MAL-2025-189037](https://insights.sbomify.com/MAL-2025-189037/): Malicious code in quasarjet-prettier-plugin-markdown-supervisor-astrometry (npm) (malicious package)
- [MAL-2025-189036](https://insights.sbomify.com/MAL-2025-189036/): Malicious code in quasarjet-magellan-eslint-config-capella (npm) (malicious package)
- [MAL-2025-189035](https://insights.sbomify.com/MAL-2025-189035/): Malicious code in quasarjet-cluster-ionosphere-eslint (npm) (malicious package)
- [MAL-2025-189034](https://insights.sbomify.com/MAL-2025-189034/): Malicious code in quasar-robotics-soap-winston (npm) (malicious package)
- [MAL-2025-189033](https://insights.sbomify.com/MAL-2025-189033/): Malicious code in quasar-promise-kaus-quito (npm) (malicious package)
- [MAL-2025-189032](https://insights.sbomify.com/MAL-2025-189032/): Malicious code in quasar-oauth-perseus-prettier-plugin-markdown (npm) (malicious package)
- [MAL-2025-189031](https://insights.sbomify.com/MAL-2025-189031/): Malicious code in quasar-helmet-metabolomics-node-config (npm) (malicious package)
- [MAL-2025-189030](https://insights.sbomify.com/MAL-2025-189030/): Malicious code in quasar-element-ui-radioastronomy-ganymede (npm) (malicious package)
- [MAL-2025-18903](https://insights.sbomify.com/MAL-2025-18903/): Malicious code in dsfserewkbaat (npm) (malicious package)
- [MAL-2025-189029](https://insights.sbomify.com/MAL-2025-189029/): Malicious code in quasar-capella-bootstrap-kastra (npm) (malicious package)
- [MAL-2025-189028](https://insights.sbomify.com/MAL-2025-189028/): Malicious code in quasar-backend-altair-callback (npm) (malicious package)
- [MAL-2025-189027](https://insights.sbomify.com/MAL-2025-189027/): Malicious code in quasar-auth-spectron-thuban (npm) (malicious package)
- [MAL-2025-189026](https://insights.sbomify.com/MAL-2025-189026/): Malicious code in quasar-astrophysics-less-paleontology (npm) (malicious package)
- [MAL-2025-189025](https://insights.sbomify.com/MAL-2025-189025/): Malicious code in quark-postcss-soap-nova (npm) (malicious package)
- [MAL-2025-189024](https://insights.sbomify.com/MAL-2025-189024/): Malicious code in quark-photon-eris-speleology (npm) (malicious package)
- [MAL-2025-189023](https://insights.sbomify.com/MAL-2025-189023/): Malicious code in quark-perturbation-lyra-link (npm) (malicious package)
- [MAL-2025-189022](https://insights.sbomify.com/MAL-2025-189022/): Malicious code in quark-loopback-palynology-cypress (npm) (malicious package)
- [MAL-2025-189021](https://insights.sbomify.com/MAL-2025-189021/): Malicious code in quark-iota-paleoclimatology-enif (npm) (malicious package)
- [MAL-2025-189020](https://insights.sbomify.com/MAL-2025-189020/): Malicious code in quark-hugo-geckodriver-ionosphere (npm) (malicious package)
- [MAL-2025-18902](https://insights.sbomify.com/MAL-2025-18902/): Malicious code in dsfserewkbaas (npm) (malicious package)
- [MAL-2025-189019](https://insights.sbomify.com/MAL-2025-189019/): Malicious code in quark-eslint-config-materialize-css-loader (npm) (malicious package)
- [MAL-2025-189018](https://insights.sbomify.com/MAL-2025-189018/): Malicious code in quark-dotenv-safe-run-script-planckscale (npm) (malicious package)
- [MAL-2025-189017](https://insights.sbomify.com/MAL-2025-189017/): Malicious code in quark-dorado-ethology-loglevel (npm) (malicious package)
- [MAL-2025-189016](https://insights.sbomify.com/MAL-2025-189016/): Malicious code in quark-charon-hercules-lepton (npm) (malicious package)
- [MAL-2025-189015](https://insights.sbomify.com/MAL-2025-189015/): Malicious code in quark-aquarius-weywot-prettier-stylelint (npm) (malicious package)
- [MAL-2025-189014](https://insights.sbomify.com/MAL-2025-189014/): Malicious code in quantumfoam-zenobia-reveal-md-yaml (npm) (malicious package)
- [MAL-2025-189013](https://insights.sbomify.com/MAL-2025-189013/): Malicious code in quantumfoam-wavefunction-lacerta-singularity (npm) (malicious package)
- [MAL-2025-189012](https://insights.sbomify.com/MAL-2025-189012/): Malicious code in quantumfoam-run-script-troposphere-halley (npm) (malicious package)
- [MAL-2025-189011](https://insights.sbomify.com/MAL-2025-189011/): Malicious code in quantumfoam-rollup-xenobiology-csrf (npm) (malicious package)
- [MAL-2025-189010](https://insights.sbomify.com/MAL-2025-189010/): Malicious code in quantumfoam-dysonswarm-io-aquarius (npm) (malicious package)
- [MAL-2025-18901](https://insights.sbomify.com/MAL-2025-18901/): Malicious code in dsfserewkbaar (npm) (malicious package)
- [MAL-2025-189009](https://insights.sbomify.com/MAL-2025-189009/): Malicious code in quantumfoam-biomimicry-sedna-zenith (npm) (malicious package)
- [MAL-2025-189008](https://insights.sbomify.com/MAL-2025-189008/): Malicious code in quantum-uglify-js-acamar-hyperion (npm) (malicious package)
- [MAL-2025-189007](https://insights.sbomify.com/MAL-2025-189007/): Malicious code in quantum-sirius-spinner-sirius (npm) (malicious package)
- [MAL-2025-189006](https://insights.sbomify.com/MAL-2025-189006/): Malicious code in quantum-rollup-plugin-neuromorphic-janus (npm) (malicious package)
- [MAL-2025-189005](https://insights.sbomify.com/MAL-2025-189005/): Malicious code in quantum-pegasus-winston-blitz (npm) (malicious package)
- [MAL-2025-189004](https://insights.sbomify.com/MAL-2025-189004/): Malicious code in quantum-norma-canopus-dotenv-parse-variables (npm) (malicious package)
- [MAL-2025-189003](https://insights.sbomify.com/MAL-2025-189003/): Malicious code in quantum-node-config-quito-cosmos (npm) (malicious package)
- [MAL-2025-189002](https://insights.sbomify.com/MAL-2025-189002/): Malicious code in quantum-exosphere-vortex-adonis (npm) (malicious package)
- [MAL-2025-189001](https://insights.sbomify.com/MAL-2025-189001/): Malicious code in quantum-darkmatter-native-schema (npm) (malicious package)
- [MAL-2025-189000](https://insights.sbomify.com/MAL-2025-189000/): Malicious code in quantum-computing-technosignature-ablation-bulma (npm) (malicious package)
- [MAL-2025-18900](https://insights.sbomify.com/MAL-2025-18900/): Malicious code in dsfserewkbaaq (npm) (malicious package)
- [MAL-2025-1890](https://insights.sbomify.com/MAL-2025-1890/): Malicious code in meli-service (npm) (malicious package)
- [MAL-2025-189](https://insights.sbomify.com/MAL-2025-189/): Malicious code in flutter_inappwebview (npm) (malicious package)
- [MAL-2025-188999](https://insights.sbomify.com/MAL-2025-188999/): Malicious code in quantum-computing-server-phenomic-miranda (npm) (malicious package)
- [MAL-2025-188998](https://insights.sbomify.com/MAL-2025-188998/): Malicious code in quantum-computing-mira-volcanology-sublimation (npm) (malicious package)
- [MAL-2025-188997](https://insights.sbomify.com/MAL-2025-188997/): Malicious code in quantum-computing-less-loader-mensa-css-loader (npm) (malicious package)
- [MAL-2025-188996](https://insights.sbomify.com/MAL-2025-188996/): Malicious code in quantum-computing-frontend-halley-xml (npm) (malicious package)
- [MAL-2025-188995](https://insights.sbomify.com/MAL-2025-188995/): Malicious code in quantum-computing-eslint-plugin-zephyr-loopback (npm) (malicious package)
- [MAL-2025-188994](https://insights.sbomify.com/MAL-2025-188994/): Malicious code in quantum-computing-ceres-robotics-magellan (npm) (malicious package)
- [MAL-2025-188993](https://insights.sbomify.com/MAL-2025-188993/): Malicious code in quantum-child-process-vulcan-sagitta (npm) (malicious package)
- [MAL-2025-188992](https://insights.sbomify.com/MAL-2025-188992/): Malicious code in quantum-cache-nebula-radiant (npm) (malicious package)
- [MAL-2025-188991](https://insights.sbomify.com/MAL-2025-188991/): Malicious code in pyxis-sedna-nebula-sedna (npm) (malicious package)
- [MAL-2025-188990](https://insights.sbomify.com/MAL-2025-188990/): Malicious code in pyxis-hercules-scripts-request (npm) (malicious package)
- [MAL-2025-18899](https://insights.sbomify.com/MAL-2025-18899/): Malicious code in dsfserewkbaap (npm) (malicious package)
- [MAL-2025-188989](https://insights.sbomify.com/MAL-2025-188989/): Malicious code in pyxis-enif-wasat-borealis (npm) (malicious package)
- [MAL-2025-188988](https://insights.sbomify.com/MAL-2025-188988/): Malicious code in pyxis-blueshift-metalsmith-enceladus (npm) (malicious package)
- [MAL-2025-188987](https://insights.sbomify.com/MAL-2025-188987/): Malicious code in pyxis-asthenosphere-astro-server (npm) (malicious package)
- [MAL-2025-188986](https://insights.sbomify.com/MAL-2025-188986/): Malicious code in pyxis-alphard-event-html-webpack-plugin (npm) (malicious package)
- [MAL-2025-188985](https://insights.sbomify.com/MAL-2025-188985/): Malicious code in puppeteer-tailwindcss-karma-postcss (npm) (malicious package)
- [MAL-2025-188984](https://insights.sbomify.com/MAL-2025-188984/): Malicious code in puppeteer-rocket-bioinformatics-elektra (npm) (malicious package)
- [MAL-2025-188983](https://insights.sbomify.com/MAL-2025-188983/): Malicious code in puppeteer-prettier-stylelint-cluster-delphinus (npm) (malicious package)
- [MAL-2025-188982](https://insights.sbomify.com/MAL-2025-188982/): Malicious code in puppeteer-module-sails-nextjs (npm) (malicious package)
- [MAL-2025-188981](https://insights.sbomify.com/MAL-2025-188981/): Malicious code in puppeteer-meissa-prettier-plugin-markdown-sadr (npm) (malicious package)
- [MAL-2025-188980](https://insights.sbomify.com/MAL-2025-188980/): Malicious code in puppeteer-geckodriver-redshift-eslint-config (npm) (malicious package)
- [MAL-2025-18898](https://insights.sbomify.com/MAL-2025-18898/): Malicious code in dsfserewkbaao (npm) (malicious package)
- [MAL-2025-188979](https://insights.sbomify.com/MAL-2025-188979/): Malicious code in puppeteer-fornax-prettier-deneb (npm) (malicious package)
- [MAL-2025-188978](https://insights.sbomify.com/MAL-2025-188978/): Malicious code in puppeteer-exobiology-semantic-release-less (npm) (malicious package)
- [MAL-2025-188977](https://insights.sbomify.com/MAL-2025-188977/): Malicious code in pulsar-selenium-oortcloud-dorado (npm) (malicious package)
- [MAL-2025-188976](https://insights.sbomify.com/MAL-2025-188976/): Malicious code in pulsar-run-script-process-io (npm) (malicious package)
- [MAL-2025-188975](https://insights.sbomify.com/MAL-2025-188975/): Malicious code in pulsar-puppeteer-dagda-cosmology (npm) (malicious package)
- [MAL-2025-188974](https://insights.sbomify.com/MAL-2025-188974/): Malicious code in pulsar-phoebe-apex-iota (npm) (malicious package)
- [MAL-2025-188973](https://insights.sbomify.com/MAL-2025-188973/): Malicious code in pulsar-orogeny-heliophysics-morgan (npm) (malicious package)
- [MAL-2025-188972](https://insights.sbomify.com/MAL-2025-188972/): Malicious code in pulsar-mocha-saturnology-jupiter (npm) (malicious package)
- [MAL-2025-188971](https://insights.sbomify.com/MAL-2025-188971/): Malicious code in pulsar-interferometry-singularitarianism-husky (npm) (malicious package)
- [MAL-2025-188970](https://insights.sbomify.com/MAL-2025-188970/): Malicious code in pulsar-graviton-dotenv-safe-nuxtjs (npm) (malicious package)
- [MAL-2025-18897](https://insights.sbomify.com/MAL-2025-18897/): Malicious code in dsfserewkbaan (npm) (malicious package)
- [MAL-2025-188969](https://insights.sbomify.com/MAL-2025-188969/): Malicious code in pulsar-exoplanetology-archaeoastronomy-repository (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/943/
