# Vulnerabilities published in 2023


- [MAL-2023-8438](https://insights.sbomify.com/MAL-2023-8438/): Malicious code in jotform-webhook-test (npm) (malicious package)
- [MAL-2023-8437](https://insights.sbomify.com/MAL-2023-8437/): Malicious code in ch-frontend-assignment (npm) (malicious package)
- [MAL-2023-8436](https://insights.sbomify.com/MAL-2023-8436/): Malicious code in onsurity-onboarding (npm) (malicious package)
- [MAL-2023-8435](https://insights.sbomify.com/MAL-2023-8435/): Malicious code in tvaultuiv2 (npm) (malicious package)
- [MAL-2023-8434](https://insights.sbomify.com/MAL-2023-8434/): Malicious code in symphony-vega (npm) (malicious package)
- [MAL-2023-8433](https://insights.sbomify.com/MAL-2023-8433/): Malicious code in stripe-terminal-react-native-dev-app (npm) (malicious package)
- [MAL-2023-8432](https://insights.sbomify.com/MAL-2023-8432/): Malicious code in qlkube-client (npm) (malicious package)
- [MAL-2023-8431](https://insights.sbomify.com/MAL-2023-8431/): Malicious code in gatsby-starter-gitlab (npm) (malicious package)
- [MAL-2023-8430](https://insights.sbomify.com/MAL-2023-8430/): Malicious code in symphony-list (npm) (malicious package)
- [MAL-2023-843](https://insights.sbomify.com/MAL-2023-843/): Malicious code in tdv2-applet-userintent (npm) (malicious package)
- [MAL-2023-8429](https://insights.sbomify.com/MAL-2023-8429/): Malicious code in littest (crates.io) (malicious package)
- [MAL-2023-8428](https://insights.sbomify.com/MAL-2023-8428/): Malicious code in sfdc-pie-chart (npm) (malicious package)
- [MAL-2023-8427](https://insights.sbomify.com/MAL-2023-8427/): Malicious code in oathkeeper (npm) (malicious package)
- [MAL-2023-8426](https://insights.sbomify.com/MAL-2023-8426/): Malicious code in discordstreams (npm) (malicious package)
- [MAL-2023-8425](https://insights.sbomify.com/MAL-2023-8425/): Malicious code in discordstreamings (npm) (malicious package)
- [MAL-2023-8424](https://insights.sbomify.com/MAL-2023-8424/): Malicious code in atmos-design-system (npm) (malicious package)
- [MAL-2023-8423](https://insights.sbomify.com/MAL-2023-8423/): Malicious code in @olxui/core (npm) (malicious package)
- [MAL-2023-8422](https://insights.sbomify.com/MAL-2023-8422/): Malicious code in bistrosk (npm) (malicious package)
- [MAL-2023-8421](https://insights.sbomify.com/MAL-2023-8421/): Malicious code in counterstake-bridge (npm) (malicious package)
- [MAL-2023-8420](https://insights.sbomify.com/MAL-2023-8420/): Malicious code in astar-portal (npm) (malicious package)
- [MAL-2023-842](https://insights.sbomify.com/MAL-2023-842/): Malicious code in tdv2-applet-uh (npm) (malicious package)
- [MAL-2023-8419](https://insights.sbomify.com/MAL-2023-8419/): Malicious code in ironfish-rust-nodejs (npm) (malicious package)
- [MAL-2023-8418](https://insights.sbomify.com/MAL-2023-8418/): Malicious code in demo-saas (npm) (malicious package)
- [MAL-2023-8417](https://insights.sbomify.com/MAL-2023-8417/): Malicious code in transaction-decoder (npm) (malicious package)
- [MAL-2023-8416](https://insights.sbomify.com/MAL-2023-8416/): Malicious code in idme (npm) (malicious package)
- [MAL-2023-8415](https://insights.sbomify.com/MAL-2023-8415/): Malicious code in bonded-stablecoin (npm) (malicious package)
- [MAL-2023-8414](https://insights.sbomify.com/MAL-2023-8414/): Malicious code in test262-runner (npm) (malicious package)
- [MAL-2023-8413](https://insights.sbomify.com/MAL-2023-8413/): Malicious code in xterm-addon-unicode-graphemes (npm) (malicious package)
- [MAL-2023-8412](https://insights.sbomify.com/MAL-2023-8412/): Malicious code in shithandlers (npm) (malicious package)
- [MAL-2023-8411](https://insights.sbomify.com/MAL-2023-8411/): Malicious code in djsmusiccc (npm) (malicious package)
- [MAL-2023-8410](https://insights.sbomify.com/MAL-2023-8410/): Malicious code in discordstream (npm) (malicious package)
- [MAL-2023-841](https://insights.sbomify.com/MAL-2023-841/): Malicious code in tdv2-applet-stream-her (npm) (malicious package)
- [MAL-2023-8409](https://insights.sbomify.com/MAL-2023-8409/): Malicious code in fadam-com-test-1 (npm) (malicious package)
- [MAL-2023-8408](https://insights.sbomify.com/MAL-2023-8408/): Malicious code in kraken-frontend (npm) (malicious package)
- [MAL-2023-8407](https://insights.sbomify.com/MAL-2023-8407/): Malicious code in hydradx-ui (npm) (malicious package)
- [MAL-2023-8406](https://insights.sbomify.com/MAL-2023-8406/): Malicious code in fadam-frontend (npm) (malicious package)
- [MAL-2023-8405](https://insights.sbomify.com/MAL-2023-8405/): Malicious code in discordwebutils1 (npm) (malicious package)
- [MAL-2023-8404](https://insights.sbomify.com/MAL-2023-8404/): Malicious code in eslint-plugin-blade (npm) (malicious package)
- [MAL-2023-8403](https://insights.sbomify.com/MAL-2023-8403/): Malicious code in sparkonto-plus-external-web-app (npm) (malicious package)
- [MAL-2023-8402](https://insights.sbomify.com/MAL-2023-8402/): Malicious code in fuzzer-gui (npm) (malicious package)
- [MAL-2023-8401](https://insights.sbomify.com/MAL-2023-8401/): Malicious code in envision-config (npm) (malicious package)
- [MAL-2023-8400](https://insights.sbomify.com/MAL-2023-8400/): Malicious code in envi-conf (npm) (malicious package)
- [MAL-2023-840](https://insights.sbomify.com/MAL-2023-840/): Malicious code in tdv2-applet-stream (npm) (malicious package)
- [MAL-2023-84](https://insights.sbomify.com/MAL-2023-84/): Malicious code in agicap (npm) (malicious package)
- [MAL-2023-8399](https://insights.sbomify.com/MAL-2023-8399/): Malicious code in fbdebug (PyPI) (malicious package)
- [MAL-2023-8398](https://insights.sbomify.com/MAL-2023-8398/): Malicious code in @tpci/i18next-ext (npm) (malicious package)
- [MAL-2023-8397](https://insights.sbomify.com/MAL-2023-8397/): Malicious code in i18next-ext (npm) (malicious package)
- [MAL-2023-8396](https://insights.sbomify.com/MAL-2023-8396/): Malicious code in fec-sdk (npm) (malicious package)
- [MAL-2023-8395](https://insights.sbomify.com/MAL-2023-8395/): Malicious code in billing.api (npm) (malicious package)
- [MAL-2023-8394](https://insights.sbomify.com/MAL-2023-8394/): Malicious code in npm-research-enum (npm) (malicious package)
- [MAL-2023-8393](https://insights.sbomify.com/MAL-2023-8393/): Malicious code in z-dsm (npm) (malicious package)
- [MAL-2023-8392](https://insights.sbomify.com/MAL-2023-8392/): Malicious code in ux-website (npm) (malicious package)
- [MAL-2023-8391](https://insights.sbomify.com/MAL-2023-8391/): Malicious code in @banana-cake-pop/data (npm) (malicious package)
- [MAL-2023-8390](https://insights.sbomify.com/MAL-2023-8390/): Malicious code in @syska/aca-gui (npm) (malicious package)
- [MAL-2023-839](https://insights.sbomify.com/MAL-2023-839/): Malicious code in tdv2-applet-sports-media (npm) (malicious package)
- [MAL-2023-8389](https://insights.sbomify.com/MAL-2023-8389/): Malicious code in @rappiinc/partner-core (npm) (malicious package)
- [MAL-2023-8388](https://insights.sbomify.com/MAL-2023-8388/): Malicious code in very-bad-npm_uwu (npm) (malicious package)
- [MAL-2023-8387](https://insights.sbomify.com/MAL-2023-8387/): Malicious code in very-bad-npm-package2 (npm) (malicious package)
- [MAL-2023-8386](https://insights.sbomify.com/MAL-2023-8386/): Malicious code in very-bad-npm-package (npm) (malicious package)
- [MAL-2023-8385](https://insights.sbomify.com/MAL-2023-8385/): Malicious code in very-bad-npm (npm) (malicious package)
- [MAL-2023-8384](https://insights.sbomify.com/MAL-2023-8384/): Malicious code in kempremium-dev (npm) (malicious package)
- [MAL-2023-8383](https://insights.sbomify.com/MAL-2023-8383/): Malicious code in fca-kemdino (npm) (malicious package)
- [MAL-2023-8382](https://insights.sbomify.com/MAL-2023-8382/): Malicious code in fca-kemdev (npm) (malicious package)
- [MAL-2023-8381](https://insights.sbomify.com/MAL-2023-8381/): Malicious code in data-kempremium (npm) (malicious package)
- [MAL-2023-8380](https://insights.sbomify.com/MAL-2023-8380/): Malicious code in xsolla-login-js-sdk (npm) (malicious package)
- [MAL-2023-838](https://insights.sbomify.com/MAL-2023-838/): Malicious code in tdv2-applet-search-input (npm) (malicious package)
- [MAL-2023-8379](https://insights.sbomify.com/MAL-2023-8379/): Malicious code in xsolla-paystation-widget (npm) (malicious package)
- [MAL-2023-8378](https://insights.sbomify.com/MAL-2023-8378/): Malicious code in detoo (npm) (malicious package)
- [MAL-2023-8377](https://insights.sbomify.com/MAL-2023-8377/): Malicious code in @momo-miniapp/apix (npm) (malicious package)
- [MAL-2023-8376](https://insights.sbomify.com/MAL-2023-8376/): Malicious code in @momo-miniapp/api (npm) (malicious package)
- [MAL-2023-8375](https://insights.sbomify.com/MAL-2023-8375/): Malicious code in @homelte_dev/frontend (npm) (malicious package)
- [MAL-2023-8374](https://insights.sbomify.com/MAL-2023-8374/): Malicious code in by-helpers (npm) (malicious package)
- [MAL-2023-8373](https://insights.sbomify.com/MAL-2023-8373/): Malicious code in @bitsoex/react-design-system (npm) (malicious package)
- [MAL-2023-8372](https://insights.sbomify.com/MAL-2023-8372/): Malicious code in tfb-cip-app (npm) (malicious package)
- [MAL-2023-8371](https://insights.sbomify.com/MAL-2023-8371/): Malicious code in tencentcloud-python-sdk (PyPI) (malicious package)
- [MAL-2023-8370](https://insights.sbomify.com/MAL-2023-8370/): Malicious code in tencent-cloud-python-sdk (PyPI) (malicious package)
- [MAL-2023-837](https://insights.sbomify.com/MAL-2023-837/): Malicious code in tdv2-applet-navrail (npm) (malicious package)
- [MAL-2023-8369](https://insights.sbomify.com/MAL-2023-8369/): Malicious code in telethon2 (PyPI) (malicious package)
- [MAL-2023-8368](https://insights.sbomify.com/MAL-2023-8368/): Malicious code in python-cos-sdk-v5 (PyPI) (malicious package)
- [MAL-2023-8367](https://insights.sbomify.com/MAL-2023-8367/): Malicious code in python-aliyun-sdk-rds (PyPI) (malicious package)
- [MAL-2023-8366](https://insights.sbomify.com/MAL-2023-8366/): Malicious code in python-aliyun-sdk-kms (PyPI) (malicious package)
- [MAL-2023-8365](https://insights.sbomify.com/MAL-2023-8365/): Malicious code in python-aliyun-sdk-ecs (PyPI) (malicious package)
- [MAL-2023-8364](https://insights.sbomify.com/MAL-2023-8364/): Malicious code in python-aliyun-sdk-core (PyPI) (malicious package)
- [MAL-2023-8363](https://insights.sbomify.com/MAL-2023-8363/): Malicious code in python-alibabacloud-tea-openapi (PyPI) (malicious package)
- [MAL-2023-8362](https://insights.sbomify.com/MAL-2023-8362/): Malicious code in python-alibabacloud-sdk-core (PyPI) (malicious package)
- [MAL-2023-8361](https://insights.sbomify.com/MAL-2023-8361/): Malicious code in enumerate-iam-aws (PyPI) (malicious package)
- [MAL-2023-8360](https://insights.sbomify.com/MAL-2023-8360/): Malicious code in enumerate-iam (PyPI) (malicious package)
- [MAL-2023-836](https://insights.sbomify.com/MAL-2023-836/): Malicious code in tdv2-applet-monalixa.store (npm) (malicious package)
- [MAL-2023-8359](https://insights.sbomify.com/MAL-2023-8359/): Malicious code in aws-enumerate-iam (PyPI) (malicious package)
- [MAL-2023-8358](https://insights.sbomify.com/MAL-2023-8358/): Malicious code in aws-consoler2 (PyPI) (malicious package)
- [MAL-2023-8357](https://insights.sbomify.com/MAL-2023-8357/): Malicious code in arangodba (PyPI) (malicious package)
- [MAL-2023-8356](https://insights.sbomify.com/MAL-2023-8356/): Malicious code in aliyun-oss2 (PyPI) (malicious package)
- [MAL-2023-8355](https://insights.sbomify.com/MAL-2023-8355/): Malicious code in alisdkcore (PyPI) (malicious package)
- [MAL-2023-8354](https://insights.sbomify.com/MAL-2023-8354/): Malicious code in alibabacloud-vpc20180317 (PyPI) (malicious package)
- [MAL-2023-8353](https://insights.sbomify.com/MAL-2023-8353/): Malicious code in alibabacloud-oss2 (PyPI) (malicious package)
- [MAL-2023-8352](https://insights.sbomify.com/MAL-2023-8352/): Malicious code in alibabacloud-ecs20180317 (PyPI) (malicious package)
- [MAL-2023-8351](https://insights.sbomify.com/MAL-2023-8351/): Malicious code in aliababcloud-tea-openapi (PyPI) (malicious package)
- [MAL-2023-8350](https://insights.sbomify.com/MAL-2023-8350/): Malicious code in so-loader-helper (npm) (malicious package)
- [MAL-2023-835](https://insights.sbomify.com/MAL-2023-835/): Malicious code in tdv2-applet-featurebar (npm) (malicious package)
- [MAL-2023-8349](https://insights.sbomify.com/MAL-2023-8349/): Malicious code in slot-qris-situs-slot-mudah-maxwin-24-jam-online-terpercaya (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/14/