# Vulnerabilities published in 2022


- [MAL-2022-6891](https://insights.sbomify.com/MAL-2022-6891/): Malicious code in vault-updater (npm) (malicious package)
- [MAL-2022-6890](https://insights.sbomify.com/MAL-2022-6890/): Malicious code in vanillaforums (npm) (malicious package)
- [MAL-2022-689](https://insights.sbomify.com/MAL-2022-689/): Malicious code in @umpirsky/country-list (npm) (malicious package)
- [MAL-2022-6889](https://insights.sbomify.com/MAL-2022-6889/): Malicious code in validate-order (npm) (malicious package)
- [MAL-2022-6888](https://insights.sbomify.com/MAL-2022-6888/): Malicious code in validaqr (npm) (malicious package)
- [MAL-2022-6887](https://insights.sbomify.com/MAL-2022-6887/): Malicious code in vagrant-s3-cdk (npm) (malicious package)
- [MAL-2022-6886](https://insights.sbomify.com/MAL-2022-6886/): Malicious code in vaccineforbharat (npm) (malicious package)
- [MAL-2022-6885](https://insights.sbomify.com/MAL-2022-6885/): Malicious code in v3-monorepo (npm) (malicious package)
- [MAL-2022-6884](https://insights.sbomify.com/MAL-2022-6884/): Malicious code in v12-discord.js (npm) (malicious package)
- [MAL-2022-6883](https://insights.sbomify.com/MAL-2022-6883/): Malicious code in uxpin-merge-ms-fabric (npm) (malicious package)
- [MAL-2022-6882](https://insights.sbomify.com/MAL-2022-6882/): Malicious code in uxp-documentation (npm) (malicious package)
- [MAL-2022-6881](https://insights.sbomify.com/MAL-2022-6881/): Malicious code in ux-tread-dotcom-utils (npm) (malicious package)
- [MAL-2022-6880](https://insights.sbomify.com/MAL-2022-6880/): Malicious code in ux-tread-crc-code (npm) (malicious package)
- [MAL-2022-688](https://insights.sbomify.com/MAL-2022-688/): Malicious code in @ucs-private/rollup-plugin-dts-bundle (npm) (malicious package)
- [MAL-2022-6879](https://insights.sbomify.com/MAL-2022-6879/): Malicious code in ux-gulp-theming (npm) (malicious package)
- [MAL-2022-6878](https://insights.sbomify.com/MAL-2022-6878/): Malicious code in uwrnng (npm) (malicious package)
- [MAL-2022-6877](https://insights.sbomify.com/MAL-2022-6877/): Malicious code in uwrljoin (npm) (malicious package)
- [MAL-2022-6876](https://insights.sbomify.com/MAL-2022-6876/): Malicious code in uwjoekgxmlhrzsaq (npm) (malicious package)
- [MAL-2022-6875](https://insights.sbomify.com/MAL-2022-6875/): Malicious code in uw-tools (npm) (malicious package)
- [MAL-2022-6874](https://insights.sbomify.com/MAL-2022-6874/): Malicious code in uw-demo-jest (npm) (malicious package)
- [MAL-2022-6873](https://insights.sbomify.com/MAL-2022-6873/): Malicious code in uv-dlopen (npm) (malicious package)
- [MAL-2022-6872](https://insights.sbomify.com/MAL-2022-6872/): Malicious code in utxo-selection (npm) (malicious package)
- [MAL-2022-6871](https://insights.sbomify.com/MAL-2022-6871/): Malicious code in util-raml-code-generator (npm) (malicious package)
- [MAL-2022-6870](https://insights.sbomify.com/MAL-2022-6870/): Malicious code in util-bus (npm) (malicious package)
- [MAL-2022-687](https://insights.sbomify.com/MAL-2022-687/): Malicious code in @ucs-private/kiosk-core (npm) (malicious package)
- [MAL-2022-6869](https://insights.sbomify.com/MAL-2022-6869/): Malicious code in utia (npm) (malicious package)
- [MAL-2022-6868](https://insights.sbomify.com/MAL-2022-6868/): Malicious code in ushqiwbcxlevakrd (npm) (malicious package)
- [MAL-2022-6867](https://insights.sbomify.com/MAL-2022-6867/): Malicious code in usersnap-frontend (npm) (malicious package)
- [MAL-2022-6866](https://insights.sbomify.com/MAL-2022-6866/): Malicious code in userhme (npm) (malicious package)
- [MAL-2022-6865](https://insights.sbomify.com/MAL-2022-6865/): Malicious code in useragent-corev2 (npm) (malicious package)
- [MAL-2022-6864](https://insights.sbomify.com/MAL-2022-6864/): Malicious code in user-interface-kit (npm) (malicious package)
- [MAL-2022-6863](https://insights.sbomify.com/MAL-2022-6863/): Malicious code in useevil (npm) (malicious package)
- [MAL-2022-6862](https://insights.sbomify.com/MAL-2022-6862/): Malicious code in uscpi-one-adapter (npm) (malicious package)
- [MAL-2022-6861](https://insights.sbomify.com/MAL-2022-6861/): Malicious code in usakiedqpgbhyonj (npm) (malicious package)
- [MAL-2022-6860](https://insights.sbomify.com/MAL-2022-6860/): Malicious code in usage-tracker-core (npm) (malicious package)
- [MAL-2022-686](https://insights.sbomify.com/MAL-2022-686/): Malicious code in @uc-maps/tile-layers.react (npm) (malicious package)
- [MAL-2022-6859](https://insights.sbomify.com/MAL-2022-6859/): Malicious code in usage-metrics (npm) (malicious package)
- [MAL-2022-6858](https://insights.sbomify.com/MAL-2022-6858/): Malicious code in usabilla_live (npm) (malicious package)
- [MAL-2022-6857](https://insights.sbomify.com/MAL-2022-6857/): Malicious code in usaa-wcm-utils (npm) (malicious package)
- [MAL-2022-6856](https://insights.sbomify.com/MAL-2022-6856/): Malicious code in usaa-url-manager (npm) (malicious package)
- [MAL-2022-6855](https://insights.sbomify.com/MAL-2022-6855/): Malicious code in usaa-typography (npm) (malicious package)
- [MAL-2022-6854](https://insights.sbomify.com/MAL-2022-6854/): Malicious code in usaa-templates (npm) (malicious package)
- [MAL-2022-6853](https://insights.sbomify.com/MAL-2022-6853/): Malicious code in usaa-template-mocks-aggregate (npm) (malicious package)
- [MAL-2022-6852](https://insights.sbomify.com/MAL-2022-6852/): Malicious code in usaa-storage (npm) (malicious package)
- [MAL-2022-6851](https://insights.sbomify.com/MAL-2022-6851/): Malicious code in usaa-scroll (npm) (malicious package)
- [MAL-2022-6850](https://insights.sbomify.com/MAL-2022-6850/): Malicious code in usaa-performance (npm) (malicious package)
- [MAL-2022-685](https://insights.sbomify.com/MAL-2022-685/): Malicious code in @uc-maps/test1 (npm) (malicious package)
- [MAL-2022-6849](https://insights.sbomify.com/MAL-2022-6849/): Malicious code in usaa-oauth (npm) (malicious package)
- [MAL-2022-6848](https://insights.sbomify.com/MAL-2022-6848/): Malicious code in usaa-nw-build-tools (npm) (malicious package)
- [MAL-2022-6847](https://insights.sbomify.com/MAL-2022-6847/): Malicious code in usaa-modals (npm) (malicious package)
- [MAL-2022-6846](https://insights.sbomify.com/MAL-2022-6846/): Malicious code in usaa-mocks-proxy (npm) (malicious package)
- [MAL-2022-6845](https://insights.sbomify.com/MAL-2022-6845/): Malicious code in usaa-messaging (npm) (malicious package)
- [MAL-2022-6844](https://insights.sbomify.com/MAL-2022-6844/): Malicious code in usaa-logger (npm) (malicious package)
- [MAL-2022-6843](https://insights.sbomify.com/MAL-2022-6843/): Malicious code in usaa-icons (npm) (malicious package)
- [MAL-2022-6842](https://insights.sbomify.com/MAL-2022-6842/): Malicious code in usaa-form (npm) (malicious package)
- [MAL-2022-6841](https://insights.sbomify.com/MAL-2022-6841/): Malicious code in usaa-fake-package-test (npm) (malicious package)
- [MAL-2022-6840](https://insights.sbomify.com/MAL-2022-6840/): Malicious code in usaa-expand-collapse (npm) (malicious package)
- [MAL-2022-684](https://insights.sbomify.com/MAL-2022-684/): Malicious code in @uc-maps/test (npm) (malicious package)
- [MAL-2022-6839](https://insights.sbomify.com/MAL-2022-6839/): Malicious code in usaa-element-resize-event (npm) (malicious package)
- [MAL-2022-6838](https://insights.sbomify.com/MAL-2022-6838/): Malicious code in usaa-drilldown (npm) (malicious package)
- [MAL-2022-6837](https://insights.sbomify.com/MAL-2022-6837/): Malicious code in usaa-dls-build-utils (npm) (malicious package)
- [MAL-2022-6836](https://insights.sbomify.com/MAL-2022-6836/): Malicious code in usaa-datepicker (npm) (malicious package)
- [MAL-2022-6835](https://insights.sbomify.com/MAL-2022-6835/): Malicious code in usaa-css-grids (npm) (malicious package)
- [MAL-2022-6834](https://insights.sbomify.com/MAL-2022-6834/): Malicious code in usaa-colors (npm) (malicious package)
- [MAL-2022-6833](https://insights.sbomify.com/MAL-2022-6833/): Malicious code in usaa-changelog (npm) (malicious package)
- [MAL-2022-6832](https://insights.sbomify.com/MAL-2022-6832/): Malicious code in usaa-buttons (npm) (malicious package)
- [MAL-2022-6831](https://insights.sbomify.com/MAL-2022-6831/): Malicious code in usaa-build-app (npm) (malicious package)
- [MAL-2022-6830](https://insights.sbomify.com/MAL-2022-6830/): Malicious code in usaa-banner (npm) (malicious package)
- [MAL-2022-683](https://insights.sbomify.com/MAL-2022-683/): Malicious code in @uc-maps/provider-google.react (npm) (malicious package)
- [MAL-2022-6829](https://insights.sbomify.com/MAL-2022-6829/): Malicious code in usaa-axios-factory (npm) (malicious package)
- [MAL-2022-6828](https://insights.sbomify.com/MAL-2022-6828/): Malicious code in usaa-authentication (npm) (malicious package)
- [MAL-2022-6827](https://insights.sbomify.com/MAL-2022-6827/): Malicious code in usaa-analytics (npm) (malicious package)
- [MAL-2022-6826](https://insights.sbomify.com/MAL-2022-6826/): Malicious code in usaa-accessible-text (npm) (malicious package)
- [MAL-2022-6825](https://insights.sbomify.com/MAL-2022-6825/): Malicious code in urlopener (npm) (malicious package)
- [MAL-2022-6824](https://insights.sbomify.com/MAL-2022-6824/): Malicious code in urlinator (npm) (malicious package)
- [MAL-2022-6823](https://insights.sbomify.com/MAL-2022-6823/): Malicious code in url-w.parse (npm) (malicious package)
- [MAL-2022-6822](https://insights.sbomify.com/MAL-2022-6822/): Malicious code in url-parser-native (npm) (malicious package)
- [MAL-2022-6821](https://insights.sbomify.com/MAL-2022-6821/): Malicious code in url-pafes (npm) (malicious package)
- [MAL-2022-6820](https://insights.sbomify.com/MAL-2022-6820/): Malicious code in url-multi (npm) (malicious package)
- [MAL-2022-682](https://insights.sbomify.com/MAL-2022-682/): Malicious code in @uc-maps/parcel-shapes (npm) (malicious package)
- [MAL-2022-6819](https://insights.sbomify.com/MAL-2022-6819/): Malicious code in uraib (npm) (malicious package)
- [MAL-2022-6818](https://insights.sbomify.com/MAL-2022-6818/): Malicious code in uqngboakhrfmwxvl (npm) (malicious package)
- [MAL-2022-6817](https://insights.sbomify.com/MAL-2022-6817/): Malicious code in upwork-atlas-datasource (npm) (malicious package)
- [MAL-2022-6816](https://insights.sbomify.com/MAL-2022-6816/): Malicious code in upvest-adapter (npm) (malicious package)
- [MAL-2022-6815](https://insights.sbomify.com/MAL-2022-6815/): Malicious code in ups_node (npm) (malicious package)
- [MAL-2022-6814](https://insights.sbomify.com/MAL-2022-6814/): Malicious code in upload-dsyms-github-action (npm) (malicious package)
- [MAL-2022-6813](https://insights.sbomify.com/MAL-2022-6813/): Malicious code in uplex-child-process (npm) (malicious package)
- [MAL-2022-6812](https://insights.sbomify.com/MAL-2022-6812/): Malicious code in upholdsdk (npm) (malicious package)
- [MAL-2022-6811](https://insights.sbomify.com/MAL-2022-6811/): Malicious code in uphold-transaction-sample (npm) (malicious package)
- [MAL-2022-6810](https://insights.sbomify.com/MAL-2022-6810/): Malicious code in uphold-transaction (npm) (malicious package)
- [MAL-2022-681](https://insights.sbomify.com/MAL-2022-681/): Malicious code in @uc-maps/maps.react (npm) (malicious package)
- [MAL-2022-6809](https://insights.sbomify.com/MAL-2022-6809/): Malicious code in uphold-pat-sample (npm) (malicious package)
- [MAL-2022-6808](https://insights.sbomify.com/MAL-2022-6808/): Malicious code in uphold-pat (npm) (malicious package)
- [MAL-2022-6807](https://insights.sbomify.com/MAL-2022-6807/): Malicious code in uphold-client-credentials-oauth-sample (npm) (malicious package)
- [MAL-2022-6806](https://insights.sbomify.com/MAL-2022-6806/): Malicious code in uphold-client-credentials-oauth (npm) (malicious package)
- [MAL-2022-6805](https://insights.sbomify.com/MAL-2022-6805/): Malicious code in uphold-authorization-code-oauth-sample (npm) (malicious package)
- [MAL-2022-6804](https://insights.sbomify.com/MAL-2022-6804/): Malicious code in uphold-authorization-code-oauth (npm) (malicious package)
- [MAL-2022-6803](https://insights.sbomify.com/MAL-2022-6803/): Malicious code in upgrade-challenge (npm) (malicious package)
- [MAL-2022-6802](https://insights.sbomify.com/MAL-2022-6802/): Malicious code in updated-object-diff (npm) (malicious package)
- [MAL-2022-6801](https://insights.sbomify.com/MAL-2022-6801/): Malicious code in update-themes (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/18/