# Vulnerabilities published in 2023


- [MAL-2023-9](https://insights.sbomify.com/MAL-2023-9/): Malicious code in sagemakertransformers (PyPI) (malicious package)
- [MAL-2023-899](https://insights.sbomify.com/MAL-2023-899/): Malicious code in tpk-fca (npm) (malicious package)
- [MAL-2023-898](https://insights.sbomify.com/MAL-2023-898/): Malicious code in tools-fbs (npm) (malicious package)
- [MAL-2023-897](https://insights.sbomify.com/MAL-2023-897/): Malicious code in tools-fb (npm) (malicious package)
- [MAL-2023-896](https://insights.sbomify.com/MAL-2023-896/): Malicious code in tools-access-lego (npm) (malicious package)
- [MAL-2023-895](https://insights.sbomify.com/MAL-2023-895/): Malicious code in toolbox-bem-bundle (npm) (malicious package)
- [MAL-2023-894](https://insights.sbomify.com/MAL-2023-894/): Malicious code in tokenlon-v5-subgraph (npm) (malicious package)
- [MAL-2023-893](https://insights.sbomify.com/MAL-2023-893/): Malicious code in tohe-update (npm) (malicious package)
- [MAL-2023-892](https://insights.sbomify.com/MAL-2023-892/): Malicious code in tohe-doc-resources (npm) (malicious package)
- [MAL-2023-891](https://insights.sbomify.com/MAL-2023-891/): Malicious code in toh-doc-files (npm) (malicious package)
- [MAL-2023-890](https://insights.sbomify.com/MAL-2023-890/): Malicious code in ticket-parser2-py3 (npm) (malicious package)
- [MAL-2023-89](https://insights.sbomify.com/MAL-2023-89/): Malicious code in american-street-by-ibi-zoboi-on-kindle-full-pages- (npm) (malicious package)
- [MAL-2023-889](https://insights.sbomify.com/MAL-2023-889/): Malicious code in ticket-parser2 (npm) (malicious package)
- [MAL-2023-888](https://insights.sbomify.com/MAL-2023-888/): Malicious code in tiaa-web-ui-core (npm) (malicious package)
- [MAL-2023-887](https://insights.sbomify.com/MAL-2023-887/): Malicious code in this-is-war-travis--viola-1-checkmate-duet-1-by-kennedy-fox-on-audible-full-edition- (npm) (malicious package)
- [MAL-2023-886](https://insights.sbomify.com/MAL-2023-886/): Malicious code in this-is-how-it-always-is-by-laurie-frankel-on-mac-new-volumes- (npm) (malicious package)
- [MAL-2023-885](https://insights.sbomify.com/MAL-2023-885/): Malicious code in thewise (npm) (malicious package)
- [MAL-2023-884](https://insights.sbomify.com/MAL-2023-884/): Malicious code in thenamk3zg (npm) (malicious package)
- [MAL-2023-883](https://insights.sbomify.com/MAL-2023-883/): Malicious code in thenamk3z (npm) (malicious package)
- [MAL-2023-882](https://insights.sbomify.com/MAL-2023-882/): Malicious code in thenamk3 (npm) (malicious package)
- [MAL-2023-881](https://insights.sbomify.com/MAL-2023-881/): Malicious code in theme-next (npm) (malicious package)
- [MAL-2023-880](https://insights.sbomify.com/MAL-2023-880/): Malicious code in theft-by-finding-diaries-1977-2002-by-david-sedaris-on-kindle-new-pages- (npm) (malicious package)
- [MAL-2023-88](https://insights.sbomify.com/MAL-2023-88/): Malicious code in allianz-icons (npm) (malicious package)
- [MAL-2023-879](https://insights.sbomify.com/MAL-2023-879/): Malicious code in the-viscount-who-loved-me-bridgertons-2-by-julia-quinn-on-textbook-full-version- (npm) (malicious package)
- [MAL-2023-878](https://insights.sbomify.com/MAL-2023-878/): Malicious code in the-universe-has-your-back-transform-fear-to-faith-by-gabrielle-bernstein-on-iphone-full-pages- (npm) (malicious package)
- [MAL-2023-8777](https://insights.sbomify.com/MAL-2023-8777/): Malicious code in sparxy (npm) (malicious package)
- [MAL-2023-8776](https://insights.sbomify.com/MAL-2023-8776/): Malicious code in discord.js-self-v22 (npm) (malicious package)
- [MAL-2023-8775](https://insights.sbomify.com/MAL-2023-8775/): Malicious code in ngx-ndbx (npm) (malicious package)
- [MAL-2023-8774](https://insights.sbomify.com/MAL-2023-8774/): Malicious code in unit-testing-controllers (npm) (malicious package)
- [MAL-2023-8773](https://insights.sbomify.com/MAL-2023-8773/): Malicious code in holland (npm) (malicious package)
- [MAL-2023-8772](https://insights.sbomify.com/MAL-2023-8772/): Malicious code in chain00x (npm) (malicious package)
- [MAL-2023-8771](https://insights.sbomify.com/MAL-2023-8771/): Malicious code in @chainxxx/act-utils (npm) (malicious package)
- [MAL-2023-8770](https://insights.sbomify.com/MAL-2023-8770/): Malicious code in vibrant (PyPI) (malicious package)
- [MAL-2023-877](https://insights.sbomify.com/MAL-2023-877/): --- _-= Per source details. (malicious package)
- [MAL-2023-8769](https://insights.sbomify.com/MAL-2023-8769/): Malicious code in richcolor (PyPI) (malicious package)
- [MAL-2023-8768](https://insights.sbomify.com/MAL-2023-8768/): Malicious code in newpackagetest2028 (PyPI) (malicious package)
- [MAL-2023-8767](https://insights.sbomify.com/MAL-2023-8767/): Malicious code in newpackagetest2027 (PyPI) (malicious package)
- [MAL-2023-8766](https://insights.sbomify.com/MAL-2023-8766/): Malicious code in newpackagetest2026 (PyPI) (malicious package)
- [MAL-2023-8765](https://insights.sbomify.com/MAL-2023-8765/): Malicious code in multicolored (PyPI) (malicious package)
- [MAL-2023-8764](https://insights.sbomify.com/MAL-2023-8764/): Malicious code in excaliburx (PyPI) (malicious package)
- [MAL-2023-8763](https://insights.sbomify.com/MAL-2023-8763/): Malicious code in enchantv (PyPI) (malicious package)
- [MAL-2023-8762](https://insights.sbomify.com/MAL-2023-8762/): Malicious code in tsrcrcetest1 (npm) (malicious package)
- [MAL-2023-8761](https://insights.sbomify.com/MAL-2023-8761/): Malicious code in rcetest (npm) (malicious package)
- [MAL-2023-8760](https://insights.sbomify.com/MAL-2023-8760/): Malicious code in chain00x_rce (npm) (malicious package)
- [MAL-2023-876](https://insights.sbomify.com/MAL-2023-876/): --- _-= Per source details. (malicious package)
- [MAL-2023-8759](https://insights.sbomify.com/MAL-2023-8759/): Malicious code in spectrum-utils (npm) (malicious package)
- [MAL-2023-8758](https://insights.sbomify.com/MAL-2023-8758/): Malicious code in sd-v13.js (npm) (malicious package)
- [MAL-2023-8757](https://insights.sbomify.com/MAL-2023-8757/): Malicious code in lockself (npm) (malicious package)
- [MAL-2023-8756](https://insights.sbomify.com/MAL-2023-8756/): Malicious code in discord.js-v13-selbots (npm) (malicious package)
- [MAL-2023-8755](https://insights.sbomify.com/MAL-2023-8755/): Malicious code in discord.js-selfbots-v13 (npm) (malicious package)
- [MAL-2023-8754](https://insights.sbomify.com/MAL-2023-8754/): Malicious code in discord.js-selfbot-dmallfriend-v13 (npm) (malicious package)
- [MAL-2023-8753](https://insights.sbomify.com/MAL-2023-8753/): Malicious code in discord.js-self2 (npm) (malicious package)
- [MAL-2023-8752](https://insights.sbomify.com/MAL-2023-8752/): Malicious code in discord.js-self-v21 (npm) (malicious package)
- [MAL-2023-8751](https://insights.sbomify.com/MAL-2023-8751/): Malicious code in discord.js-selbotderank (npm) (malicious package)
- [MAL-2023-8750](https://insights.sbomify.com/MAL-2023-8750/): Malicious code in biscits (npm) (malicious package)
- [MAL-2023-875](https://insights.sbomify.com/MAL-2023-875/): Malicious code in the-seven-husbands-of-evelyn-hugo-by-taylor-jenkins-reid-on-kindle-full-format- (npm) (malicious package)
- [MAL-2023-8749](https://insights.sbomify.com/MAL-2023-8749/): Malicious code in axio-https (npm) (malicious package)
- [MAL-2023-8748](https://insights.sbomify.com/MAL-2023-8748/): Malicious code in discord.js-selfbot-v23 (npm) (malicious package)
- [MAL-2023-8747](https://insights.sbomify.com/MAL-2023-8747/): Malicious code in mux-leverage-protocol (npm) (malicious package)
- [MAL-2023-8746](https://insights.sbomify.com/MAL-2023-8746/): Malicious code in @push-web/tinkoff-push-web (npm) (malicious package)
- [MAL-2023-8745](https://insights.sbomify.com/MAL-2023-8745/): Malicious code in @pkg-m/m (npm) (malicious package)
- [MAL-2023-8744](https://insights.sbomify.com/MAL-2023-8744/): Malicious code in formated (npm) (malicious package)
- [MAL-2023-8743](https://insights.sbomify.com/MAL-2023-8743/): Malicious code in finalact (npm) (malicious package)
- [MAL-2023-8742](https://insights.sbomify.com/MAL-2023-8742/): Malicious code in myservice.web (npm) (malicious package)
- [MAL-2023-8741](https://insights.sbomify.com/MAL-2023-8741/): Malicious code in release-management-slack (npm) (malicious package)
- [MAL-2023-8740](https://insights.sbomify.com/MAL-2023-8740/): Malicious code in jupyter_matlab_labextension (npm) (malicious package)
- [MAL-2023-874](https://insights.sbomify.com/MAL-2023-874/): Malicious code in the-seven-husbands-of-evelyn-hugo-by-taylor-jenkins-reid-on-iphone-new-chapters- (npm) (malicious package)
- [MAL-2023-8739](https://insights.sbomify.com/MAL-2023-8739/): Malicious code in hackathon-web (npm) (malicious package)
- [MAL-2023-8738](https://insights.sbomify.com/MAL-2023-8738/): Malicious code in element-block-starter (npm) (malicious package)
- [MAL-2023-8737](https://insights.sbomify.com/MAL-2023-8737/): Malicious code in riskex (npm) (malicious package)
- [MAL-2023-8736](https://insights.sbomify.com/MAL-2023-8736/): Malicious code in tata-play-web (npm) (malicious package)
- [MAL-2023-8735](https://insights.sbomify.com/MAL-2023-8735/): Malicious code in fe-commons (npm) (malicious package)
- [MAL-2023-8734](https://insights.sbomify.com/MAL-2023-8734/): Malicious code in next-id-doc (npm) (malicious package)
- [MAL-2023-8733](https://insights.sbomify.com/MAL-2023-8733/): Malicious code in run-matlab-command (npm) (malicious package)
- [MAL-2023-8732](https://insights.sbomify.com/MAL-2023-8732/): Malicious code in flow-session-guard (npm) (malicious package)
- [MAL-2023-8731](https://insights.sbomify.com/MAL-2023-8731/): Malicious code in @unilin/dlw.scbase.staticsite (npm) (malicious package)
- [MAL-2023-8730](https://insights.sbomify.com/MAL-2023-8730/): Malicious code in reduced-ui-pack (npm) (malicious package)
- [MAL-2023-873](https://insights.sbomify.com/MAL-2023-873/): --- _-= Per source details. (malicious package)
- [MAL-2023-8729](https://insights.sbomify.com/MAL-2023-8729/): Malicious code in dsc-sb-v13 (npm) (malicious package)
- [MAL-2023-8728](https://insights.sbomify.com/MAL-2023-8728/): Malicious code in djs-sb-v13 (npm) (malicious package)
- [MAL-2023-8727](https://insights.sbomify.com/MAL-2023-8727/): Malicious code in discord-selfbot-v13.js (npm) (malicious package)
- [MAL-2023-8726](https://insights.sbomify.com/MAL-2023-8726/): Malicious code in discord-sb-v13 (npm) (malicious package)
- [MAL-2023-8725](https://insights.sbomify.com/MAL-2023-8725/): Malicious code in users-lookup (npm) (malicious package)
- [MAL-2023-8724](https://insights.sbomify.com/MAL-2023-8724/): Malicious code in techouvot (npm) (malicious package)
- [MAL-2023-8723](https://insights.sbomify.com/MAL-2023-8723/): Malicious code in nice-dag-kernel (npm) (malicious package)
- [MAL-2023-8722](https://insights.sbomify.com/MAL-2023-8722/): Malicious code in ngx-xtra-schematics (npm) (malicious package)
- [MAL-2023-8721](https://insights.sbomify.com/MAL-2023-8721/): Malicious code in jupyter-notebook-deps (npm) (malicious package)
- [MAL-2023-8720](https://insights.sbomify.com/MAL-2023-8720/): Malicious code in hpulse (npm) (malicious package)
- [MAL-2023-872](https://insights.sbomify.com/MAL-2023-872/): Malicious code in the-idea-of-you-by-robinne-lee-on-audiobook-full-volumes- (npm) (malicious package)
- [MAL-2023-8719](https://insights.sbomify.com/MAL-2023-8719/): Malicious code in figma-include-accessibility-annotations (npm) (malicious package)
- [MAL-2023-8718](https://insights.sbomify.com/MAL-2023-8718/): Malicious code in fgrav (npm) (malicious package)
- [MAL-2023-8717](https://insights.sbomify.com/MAL-2023-8717/): Malicious code in crossdomain-xhr (npm) (malicious package)
- [MAL-2023-8716](https://insights.sbomify.com/MAL-2023-8716/): Malicious code in bv-commons (npm) (malicious package)
- [MAL-2023-8715](https://insights.sbomify.com/MAL-2023-8715/): Malicious code in allianz (npm) (malicious package)
- [MAL-2023-8714](https://insights.sbomify.com/MAL-2023-8714/): Malicious code in unilin (npm) (malicious package)
- [MAL-2023-8713](https://insights.sbomify.com/MAL-2023-8713/): Malicious code in @diil-front/chip (npm) (malicious package)
- [MAL-2023-8712](https://insights.sbomify.com/MAL-2023-8712/): Malicious code in create-codecpetjs-bdd-tests (npm) (malicious package)
- [MAL-2023-8711](https://insights.sbomify.com/MAL-2023-8711/): Malicious code in test-codecpetjs-bdd-tests (npm) (malicious package)
- [MAL-2023-8710](https://insights.sbomify.com/MAL-2023-8710/): Malicious code in biobot (npm) (malicious package)
- [MAL-2023-871](https://insights.sbomify.com/MAL-2023-871/): Malicious code in the-hate-u-give-the-hate-u-give-1-by-angie-thomas-on-audiobook-full-chapters- (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/10/