# Vulnerabilities published in 2022


- [MAL-2022-5450](https://insights.sbomify.com/MAL-2022-5450/): Malicious code in preply-riddle-online-status (npm) (malicious package)
- [MAL-2022-545](https://insights.sbomify.com/MAL-2022-545/): Malicious code in @qw-app/index (npm) (malicious package)
- [MAL-2022-5449](https://insights.sbomify.com/MAL-2022-5449/): Malicious code in prepaid-paypal (npm) (malicious package)
- [MAL-2022-5448](https://insights.sbomify.com/MAL-2022-5448/): Malicious code in preorder (npm) (malicious package)
- [MAL-2022-5447](https://insights.sbomify.com/MAL-2022-5447/): Malicious code in preloadsmartablejs (npm) (malicious package)
- [MAL-2022-5446](https://insights.sbomify.com/MAL-2022-5446/): Malicious code in preinstallv5 (npm) (malicious package)
- [MAL-2022-5445](https://insights.sbomify.com/MAL-2022-5445/): Malicious code in prefetchalyzer (npm) (malicious package)
- [MAL-2022-5444](https://insights.sbomify.com/MAL-2022-5444/): Malicious code in predictions (npm) (malicious package)
- [MAL-2022-5443](https://insights.sbomify.com/MAL-2022-5443/): Malicious code in pratikyadavsm1 (npm) (malicious package)
- [MAL-2022-5442](https://insights.sbomify.com/MAL-2022-5442/): Malicious code in pratikyadavsm (npm) (malicious package)
- [MAL-2022-5441](https://insights.sbomify.com/MAL-2022-5441/): Malicious code in pratikyadavh1 (npm) (malicious package)
- [MAL-2022-5440](https://insights.sbomify.com/MAL-2022-5440/): Malicious code in pqnlgmtdifawekzu (npm) (malicious package)
- [MAL-2022-544](https://insights.sbomify.com/MAL-2022-544/): Malicious code in @qw-app/images (npm) (malicious package)
- [MAL-2022-5439](https://insights.sbomify.com/MAL-2022-5439/): Malicious code in ppreact-lib (npm) (malicious package)
- [MAL-2022-5438](https://insights.sbomify.com/MAL-2022-5438/): Malicious code in ppp-types (npm) (malicious package)
- [MAL-2022-5437](https://insights.sbomify.com/MAL-2022-5437/): Malicious code in pplogger-paypal (npm) (malicious package)
- [MAL-2022-5436](https://insights.sbomify.com/MAL-2022-5436/): Malicious code in pplitu2 (npm) (malicious package)
- [MAL-2022-5435](https://insights.sbomify.com/MAL-2022-5435/): Malicious code in pp-vx (npm) (malicious package)
- [MAL-2022-5434](https://insights.sbomify.com/MAL-2022-5434/): Malicious code in pp-react-buttons (npm) (malicious package)
- [MAL-2022-5433](https://insights.sbomify.com/MAL-2022-5433/): Malicious code in pp-mp-connected-path (npm) (malicious package)
- [MAL-2022-5432](https://insights.sbomify.com/MAL-2022-5432/): Malicious code in pp-amount-field (npm) (malicious package)
- [MAL-2022-5431](https://insights.sbomify.com/MAL-2022-5431/): Malicious code in pottcs (npm) (malicious package)
- [MAL-2022-5430](https://insights.sbomify.com/MAL-2022-5430/): Malicious code in postman-echo-nock (npm) (malicious package)
- [MAL-2022-543](https://insights.sbomify.com/MAL-2022-543/): Malicious code in @qw-app/fonts (npm) (malicious package)
- [MAL-2022-5429](https://insights.sbomify.com/MAL-2022-5429/): Malicious code in postinstall-dummy (npm) (malicious package)
- [MAL-2022-5428](https://insights.sbomify.com/MAL-2022-5428/): Malicious code in postcsssafeparsear (npm) (malicious package)
- [MAL-2022-5427](https://insights.sbomify.com/MAL-2022-5427/): Malicious code in postcssmipot (npm) (malicious package)
- [MAL-2022-5426](https://insights.sbomify.com/MAL-2022-5426/): Malicious code in postcssfvlgexugsfixes (npm) (malicious package)
- [MAL-2022-5425](https://insights.sbomify.com/MAL-2022-5425/): Malicious code in postcsscksnext (npm) (malicious package)
- [MAL-2022-5424](https://insights.sbomify.com/MAL-2022-5424/): Malicious code in postcss-lazy-rules (npm) (malicious package)
- [MAL-2022-5423](https://insights.sbomify.com/MAL-2022-5423/): Malicious code in postcss-fleexbugs-fixs (npm) (malicious package)
- [MAL-2022-5422](https://insights.sbomify.com/MAL-2022-5422/): Malicious code in possnested (npm) (malicious package)
- [MAL-2022-5421](https://insights.sbomify.com/MAL-2022-5421/): Malicious code in poseshield (npm) (malicious package)
- [MAL-2022-5420](https://insights.sbomify.com/MAL-2022-5420/): Malicious code in poscssloader (npm) (malicious package)
- [MAL-2022-542](https://insights.sbomify.com/MAL-2022-542/): Malicious code in @qualtrics-translations/qualtricsdesignsystemui (npm) (malicious package)
- [MAL-2022-5419](https://insights.sbomify.com/MAL-2022-5419/): Malicious code in portal-web (npm) (malicious package)
- [MAL-2022-5418](https://insights.sbomify.com/MAL-2022-5418/): Malicious code in portail-web (npm) (malicious package)
- [MAL-2022-5417](https://insights.sbomify.com/MAL-2022-5417/): Malicious code in por-indexer-adapter (npm) (malicious package)
- [MAL-2022-5416](https://insights.sbomify.com/MAL-2022-5416/): Malicious code in poppejs (npm) (malicious package)
- [MAL-2022-5415](https://insights.sbomify.com/MAL-2022-5415/): Malicious code in popover2 (npm) (malicious package)
- [MAL-2022-5414](https://insights.sbomify.com/MAL-2022-5414/): Malicious code in pop9erwjs (npm) (malicious package)
- [MAL-2022-5413](https://insights.sbomify.com/MAL-2022-5413/): Malicious code in poostcss-imort (npm) (malicious package)
- [MAL-2022-5412](https://insights.sbomify.com/MAL-2022-5412/): Malicious code in polyxqkizwcbvjkm (npm) (malicious package)
- [MAL-2022-5411](https://insights.sbomify.com/MAL-2022-5411/): Malicious code in polymesh-scripts (npm) (malicious package)
- [MAL-2022-5410](https://insights.sbomify.com/MAL-2022-5410/): Malicious code in polymesh-docs (npm) (malicious package)
- [MAL-2022-541](https://insights.sbomify.com/MAL-2022-541/): Malicious code in @qcsfe/venus-token (npm) (malicious package)
- [MAL-2022-5409](https://insights.sbomify.com/MAL-2022-5409/): Malicious code in polymesh-cli (npm) (malicious package)
- [MAL-2022-5408](https://insights.sbomify.com/MAL-2022-5408/): Malicious code in polygon-adapter (npm) (malicious package)
- [MAL-2022-5407](https://insights.sbomify.com/MAL-2022-5407/): Malicious code in poll-add-in (npm) (malicious package)
- [MAL-2022-5406](https://insights.sbomify.com/MAL-2022-5406/): Malicious code in polkadot-staking-dashboard (npm) (malicious package)
- [MAL-2022-5405](https://insights.sbomify.com/MAL-2022-5405/): Malicious code in policy-bot (npm) (malicious package)
- [MAL-2022-5404](https://insights.sbomify.com/MAL-2022-5404/): Malicious code in polarloft-discord (npm) (malicious package)
- [MAL-2022-5403](https://insights.sbomify.com/MAL-2022-5403/): Malicious code in polaris-shopify-com (npm) (malicious package)
- [MAL-2022-5402](https://insights.sbomify.com/MAL-2022-5402/): Malicious code in polaris-rails (npm) (malicious package)
- [MAL-2022-5401](https://insights.sbomify.com/MAL-2022-5401/): Malicious code in polaris-next (npm) (malicious package)
- [MAL-2022-5400](https://insights.sbomify.com/MAL-2022-5400/): Malicious code in polaris-for-vscode (npm) (malicious package)
- [MAL-2022-540](https://insights.sbomify.com/MAL-2022-540/): Malicious code in @qcsfe/qnode (npm) (malicious package)
- [MAL-2022-54](https://insights.sbomify.com/MAL-2022-54/): Malicious code in @8x8/oxygen-constants (npm) (malicious package)
- [MAL-2022-5399](https://insights.sbomify.com/MAL-2022-5399/): Malicious code in polaris-for-figma (npm) (malicious package)
- [MAL-2022-5398](https://insights.sbomify.com/MAL-2022-5398/): Malicious code in polaris-example-webpack (npm) (malicious package)
- [MAL-2022-5397](https://insights.sbomify.com/MAL-2022-5397/): Malicious code in polaris-example-nextjs (npm) (malicious package)
- [MAL-2022-5396](https://insights.sbomify.com/MAL-2022-5396/): Malicious code in polaris-example-create-react-app (npm) (malicious package)
- [MAL-2022-5395](https://insights.sbomify.com/MAL-2022-5395/): Malicious code in pokemon-go-promo-codes-app-apk (npm) (malicious package)
- [MAL-2022-5394](https://insights.sbomify.com/MAL-2022-5394/): Malicious code in pokemon-go-generator-2022-new-pogo-coins (npm) (malicious package)
- [MAL-2022-5393](https://insights.sbomify.com/MAL-2022-5393/): Malicious code in pofrtiuqdnbvzkwx (npm) (malicious package)
- [MAL-2022-5392](https://insights.sbomify.com/MAL-2022-5392/): Malicious code in pod-smartphone-api (npm) (malicious package)
- [MAL-2022-5391](https://insights.sbomify.com/MAL-2022-5391/): Malicious code in pod-publishing-test (npm) (malicious package)
- [MAL-2022-5390](https://insights.sbomify.com/MAL-2022-5390/): Malicious code in pod-api-client (npm) (malicious package)
- [MAL-2022-539](https://insights.sbomify.com/MAL-2022-539/): Malicious code in @qcsfe/common-progressbar (npm) (malicious package)
- [MAL-2022-5389](https://insights.sbomify.com/MAL-2022-5389/): Malicious code in pocjenkircetest (npm) (malicious package)
- [MAL-2022-5388](https://insights.sbomify.com/MAL-2022-5388/): Malicious code in poc-globalleakage (npm) (malicious package)
- [MAL-2022-5387](https://insights.sbomify.com/MAL-2022-5387/): Malicious code in poa-adapter (npm) (malicious package)
- [MAL-2022-5386](https://insights.sbomify.com/MAL-2022-5386/): Malicious code in pntovlwumqkzryai (npm) (malicious package)
- [MAL-2022-5385](https://insights.sbomify.com/MAL-2022-5385/): Malicious code in pnpwebackplugin (npm) (malicious package)
- [MAL-2022-5384](https://insights.sbomify.com/MAL-2022-5384/): Malicious code in pnpm-local-install (npm) (malicious package)
- [MAL-2022-5383](https://insights.sbomify.com/MAL-2022-5383/): Malicious code in pndjuobrqtvlasgz (npm) (malicious package)
- [MAL-2022-5382](https://insights.sbomify.com/MAL-2022-5382/): Malicious code in pndchbzqorulakxe (npm) (malicious package)
- [MAL-2022-5381](https://insights.sbomify.com/MAL-2022-5381/): Malicious code in pmohswjydfextqai (npm) (malicious package)
- [MAL-2022-5380](https://insights.sbomify.com/MAL-2022-5380/): Malicious code in pm-web-mapp-shared (npm) (malicious package)
- [MAL-2022-538](https://insights.sbomify.com/MAL-2022-538/): Malicious code in @qcsfe/common-lmap (npm) (malicious package)
- [MAL-2022-5379](https://insights.sbomify.com/MAL-2022-5379/): Malicious code in pm-manager (npm) (malicious package)
- [MAL-2022-5378](https://insights.sbomify.com/MAL-2022-5378/): Malicious code in pm-conf (npm) (malicious package)
- [MAL-2022-5377](https://insights.sbomify.com/MAL-2022-5377/): Malicious code in plywood-clickhouse-requester (npm) (malicious package)
- [MAL-2022-5376](https://insights.sbomify.com/MAL-2022-5376/): Malicious code in plugin-welcome (npm) (malicious package)
- [MAL-2022-5375](https://insights.sbomify.com/MAL-2022-5375/): Malicious code in plugin-typings (npm) (malicious package)
- [MAL-2022-5374](https://insights.sbomify.com/MAL-2022-5374/): Malicious code in plugin-transform-typeof-symbol (npm) (malicious package)
- [MAL-2022-5373](https://insights.sbomify.com/MAL-2022-5373/): Malicious code in plugin-transform-react-jsx (npm) (malicious package)
- [MAL-2022-5372](https://insights.sbomify.com/MAL-2022-5372/): Malicious code in plugin-syntax-flow (npm) (malicious package)
- [MAL-2022-5371](https://insights.sbomify.com/MAL-2022-5371/): Malicious code in plugin-svgo (npm) (malicious package)
- [MAL-2022-5370](https://insights.sbomify.com/MAL-2022-5370/): Malicious code in plugin-proposal-export-default-from (npm) (malicious package)
- [MAL-2022-537](https://insights.sbomify.com/MAL-2022-537/): Malicious code in @puresec/addressparser-malicious (npm) (malicious package)
- [MAL-2022-5369](https://insights.sbomify.com/MAL-2022-5369/): Malicious code in plugin-plugins (npm) (malicious package)
- [MAL-2022-5368](https://insights.sbomify.com/MAL-2022-5368/): Malicious code in plugin-gd-page-builder-react (npm) (malicious package)
- [MAL-2022-5367](https://insights.sbomify.com/MAL-2022-5367/): Malicious code in plugin-bugfix-v8-spread-parameters-in-optional-chaining (npm) (malicious package)
- [MAL-2022-5366](https://insights.sbomify.com/MAL-2022-5366/): Malicious code in pluarlizse (npm) (malicious package)
- [MAL-2022-5365](https://insights.sbomify.com/MAL-2022-5365/): Malicious code in plnreqzvyfbhkwxk (npm) (malicious package)
- [MAL-2022-5364](https://insights.sbomify.com/MAL-2022-5364/): Malicious code in plis (npm) (malicious package)
- [MAL-2022-5363](https://insights.sbomify.com/MAL-2022-5363/): Malicious code in plhqjs (npm) (malicious package)
- [MAL-2022-5362](https://insights.sbomify.com/MAL-2022-5362/): Malicious code in plginerro (npm) (malicious package)
- [MAL-2022-5361](https://insights.sbomify.com/MAL-2022-5361/): Malicious code in plfkweujctyqhdzb (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/34/