# Vulnerabilities published in 2023


- [MAL-2023-1506](https://insights.sbomify.com/MAL-2023-1506/): Malicious code in securitytxt-worker (npm) (malicious package)
- [MAL-2023-1505](https://insights.sbomify.com/MAL-2023-1505/): Malicious code in owncloud-js-dev (npm) (malicious package)
- [MAL-2023-1504](https://insights.sbomify.com/MAL-2023-1504/): Malicious code in z-foundation (npm) (malicious package)
- [MAL-2023-1503](https://insights.sbomify.com/MAL-2023-1503/): Malicious code in web-dev-for-beginners (npm) (malicious package)
- [MAL-2023-1502](https://insights.sbomify.com/MAL-2023-1502/): Malicious code in jscrambler-permission-utils (npm) (malicious package)
- [MAL-2023-1501](https://insights.sbomify.com/MAL-2023-1501/): Malicious code in wpi-xmldom (npm) (malicious package)
- [MAL-2023-1500](https://insights.sbomify.com/MAL-2023-1500/): Malicious code in wpi-rules-valid-events (npm) (malicious package)
- [MAL-2023-150](https://insights.sbomify.com/MAL-2023-150/): Malicious code in bykea_node_boilerplate (npm) (malicious package)
- [MAL-2023-15](https://insights.sbomify.com/MAL-2023-15/): Malicious code in 123rf_contributor_web (npm) (malicious package)
- [MAL-2023-1499](https://insights.sbomify.com/MAL-2023-1499/): Malicious code in jscrambler-dashboard-components (npm) (malicious package)
- [MAL-2023-1498](https://insights.sbomify.com/MAL-2023-1498/): Malicious code in jscrambler-cookies (npm) (malicious package)
- [MAL-2023-1497](https://insights.sbomify.com/MAL-2023-1497/): Malicious code in code-debug-codes (npm) (malicious package)
- [MAL-2023-1496](https://insights.sbomify.com/MAL-2023-1496/): Malicious code in sankson (npm) (malicious package)
- [MAL-2023-1495](https://insights.sbomify.com/MAL-2023-1495/): Malicious code in hackonex (npm) (malicious package)
- [MAL-2023-1494](https://insights.sbomify.com/MAL-2023-1494/): Malicious code in kasms (npm) (malicious package)
- [MAL-2023-1493](https://insights.sbomify.com/MAL-2023-1493/): Malicious code in postman-zendesk-support-theme (npm) (malicious package)
- [MAL-2023-1492](https://insights.sbomify.com/MAL-2023-1492/): Malicious code in github-deployment-action (npm) (malicious package)
- [MAL-2023-1491](https://insights.sbomify.com/MAL-2023-1491/): Malicious code in f0-data-constructor (npm) (malicious package)
- [MAL-2023-1490](https://insights.sbomify.com/MAL-2023-1490/): Malicious code in bugsnotfound (npm) (malicious package)
- [MAL-2023-149](https://insights.sbomify.com/MAL-2023-149/): Malicious code in burningskyme (npm) (malicious package)
- [MAL-2023-1489](https://insights.sbomify.com/MAL-2023-1489/): Malicious code in marvelmaniac-devvit-rce (npm) (malicious package)
- [MAL-2023-1488](https://insights.sbomify.com/MAL-2023-1488/): Malicious code in gkuis (npm) (malicious package)
- [MAL-2023-1487](https://insights.sbomify.com/MAL-2023-1487/): Malicious code in stormapps (npm) (malicious package)
- [MAL-2023-1486](https://insights.sbomify.com/MAL-2023-1486/): Malicious code in inf-build-module (npm) (malicious package)
- [MAL-2023-1485](https://insights.sbomify.com/MAL-2023-1485/): Malicious code in top-gun-maverick (npm) (malicious package)
- [MAL-2023-1484](https://insights.sbomify.com/MAL-2023-1484/): Malicious code in youse-frontend (npm) (malicious package)
- [MAL-2023-1483](https://insights.sbomify.com/MAL-2023-1483/): Malicious code in spark-math (npm) (malicious package)
- [MAL-2023-1482](https://insights.sbomify.com/MAL-2023-1482/): Malicious code in skills-strategy-client (npm) (malicious package)
- [MAL-2023-1481](https://insights.sbomify.com/MAL-2023-1481/): Malicious code in nayan-te (npm) (malicious package)
- [MAL-2023-1480](https://insights.sbomify.com/MAL-2023-1480/): Malicious code in nayan-remake-tr (npm) (malicious package)
- [MAL-2023-148](https://insights.sbomify.com/MAL-2023-148/): Malicious code in buffer-ex (npm) (malicious package)
- [MAL-2023-1479](https://insights.sbomify.com/MAL-2023-1479/): Malicious code in nayan-remake-h (npm) (malicious package)
- [MAL-2023-1478](https://insights.sbomify.com/MAL-2023-1478/): Malicious code in nayan-remake-api (npm) (malicious package)
- [MAL-2023-1477](https://insights.sbomify.com/MAL-2023-1477/): Malicious code in miro-api-clients (npm) (malicious package)
- [MAL-2023-1476](https://insights.sbomify.com/MAL-2023-1476/): Malicious code in irviewer (npm) (malicious package)
- [MAL-2023-1475](https://insights.sbomify.com/MAL-2023-1475/): Malicious code in initial-app (npm) (malicious package)
- [MAL-2023-1474](https://insights.sbomify.com/MAL-2023-1474/): Malicious code in infima-website (npm) (malicious package)
- [MAL-2023-1473](https://insights.sbomify.com/MAL-2023-1473/): Malicious code in hardhat-croned (npm) (malicious package)
- [MAL-2023-1472](https://insights.sbomify.com/MAL-2023-1472/): Malicious code in micro-module-test (npm) (malicious package)
- [MAL-2023-1471](https://insights.sbomify.com/MAL-2023-1471/): Malicious code in leostorm (npm) (malicious package)
- [MAL-2023-1470](https://insights.sbomify.com/MAL-2023-1470/): Malicious code in snapchat-test-package (npm) (malicious package)
- [MAL-2023-147](https://insights.sbomify.com/MAL-2023-147/): Malicious code in bucko (npm) (malicious package)
- [MAL-2023-1469](https://insights.sbomify.com/MAL-2023-1469/): Malicious code in flowtorch (npm) (malicious package)
- [MAL-2023-1468](https://insights.sbomify.com/MAL-2023-1468/): Malicious code in ynf-dx-webpack-plugins (npm) (malicious package)
- [MAL-2023-1467](https://insights.sbomify.com/MAL-2023-1467/): Malicious code in ynf-dx-scripts (npm) (malicious package)
- [MAL-2023-1466](https://insights.sbomify.com/MAL-2023-1466/): Malicious code in ynf-core-renderer (npm) (malicious package)
- [MAL-2023-1465](https://insights.sbomify.com/MAL-2023-1465/): Malicious code in ynf-core-loader (npm) (malicious package)
- [MAL-2023-1464](https://insights.sbomify.com/MAL-2023-1464/): Malicious code in tianfengqwe (npm) (malicious package)
- [MAL-2023-1463](https://insights.sbomify.com/MAL-2023-1463/): Malicious code in srm-front-util (npm) (malicious package)
- [MAL-2023-1462](https://insights.sbomify.com/MAL-2023-1462/): Malicious code in square-apple-package (npm) (malicious package)
- [MAL-2023-1461](https://insights.sbomify.com/MAL-2023-1461/): Malicious code in progress-player (npm) (malicious package)
- [MAL-2023-1460](https://insights.sbomify.com/MAL-2023-1460/): Malicious code in pingan-vue-floating (npm) (malicious package)
- [MAL-2023-146](https://insights.sbomify.com/MAL-2023-146/): Malicious code in btc-web3 (npm) (malicious package)
- [MAL-2023-1459](https://insights.sbomify.com/MAL-2023-1459/): Malicious code in marketplace-ibm (npm) (malicious package)
- [MAL-2023-1458](https://insights.sbomify.com/MAL-2023-1458/): Malicious code in dependency-exploit-corraldev (npm) (malicious package)
- [MAL-2023-1457](https://insights.sbomify.com/MAL-2023-1457/): Malicious code in cloud-room-video (npm) (malicious package)
- [MAL-2023-1456](https://insights.sbomify.com/MAL-2023-1456/): Malicious code in 1ds-cli (npm) (malicious package)
- [MAL-2023-1455](https://insights.sbomify.com/MAL-2023-1455/): Malicious code in bugvsme (npm) (malicious package)
- [MAL-2023-1454](https://insights.sbomify.com/MAL-2023-1454/): Malicious code in false-positive-reddit-rce (npm) (malicious package)
- [MAL-2023-1453](https://insights.sbomify.com/MAL-2023-1453/): Malicious code in marvelmaniac-reddit-rce (npm) (malicious package)
- [MAL-2023-1452](https://insights.sbomify.com/MAL-2023-1452/): Malicious code in syns-knox-xss-allwhere (PyPI) (malicious package)
- [MAL-2023-1451](https://insights.sbomify.com/MAL-2023-1451/): Malicious code in express-opentelemetry (npm) (malicious package)
- [MAL-2023-1450](https://insights.sbomify.com/MAL-2023-1450/): Malicious code in blockly-mirror-demo (npm) (malicious package)
- [MAL-2023-145](https://insights.sbomify.com/MAL-2023-145/): Malicious code in bsd-ui-utils (npm) (malicious package)
- [MAL-2023-1449](https://insights.sbomify.com/MAL-2023-1449/): Malicious code in zustand-rc.1 (npm) (malicious package)
- [MAL-2023-1448](https://insights.sbomify.com/MAL-2023-1448/): Malicious code in bobikssf (PyPI) (malicious package)
- [MAL-2023-1447](https://insights.sbomify.com/MAL-2023-1447/): Malicious code in hsqwe (npm) (malicious package)
- [MAL-2023-1446](https://insights.sbomify.com/MAL-2023-1446/): Malicious code in horaw (npm) (malicious package)
- [MAL-2023-1445](https://insights.sbomify.com/MAL-2023-1445/): Malicious code in fiji-core-pal (npm) (malicious package)
- [MAL-2023-1444](https://insights.sbomify.com/MAL-2023-1444/): Malicious code in @ratecenter/shared (npm) (malicious package)
- [MAL-2023-1443](https://insights.sbomify.com/MAL-2023-1443/): Malicious code in tra-arifvauchat-api (npm) (malicious package)
- [MAL-2023-1442](https://insights.sbomify.com/MAL-2023-1442/): Malicious code in tra-arifchat-api (npm) (malicious package)
- [MAL-2023-1441](https://insights.sbomify.com/MAL-2023-1441/): Malicious code in react-native-transparent-video (npm) (malicious package)
- [MAL-2023-1440](https://insights.sbomify.com/MAL-2023-1440/): Malicious code in react-dropzone-legacy (npm) (malicious package)
- [MAL-2023-144](https://insights.sbomify.com/MAL-2023-144/): Malicious code in brightening (npm) (malicious package)
- [MAL-2023-1439](https://insights.sbomify.com/MAL-2023-1439/): Malicious code in fca-jordan-amiir (npm) (malicious package)
- [MAL-2023-1438](https://insights.sbomify.com/MAL-2023-1438/): Malicious code in exp-core-style (npm) (malicious package)
- [MAL-2023-1437](https://insights.sbomify.com/MAL-2023-1437/): Malicious code in eslint-plugin-ironfish (npm) (malicious package)
- [MAL-2023-1436](https://insights.sbomify.com/MAL-2023-1436/): Malicious code in puppet-module-posix-system-r3.2 (RubyGems) (malicious package)
- [MAL-2023-1435](https://insights.sbomify.com/MAL-2023-1435/): Malicious code in notsogood (PyPI) (malicious package)
- [MAL-2023-1434](https://insights.sbomify.com/MAL-2023-1434/): Malicious code in systemd-daemon (RubyGems) (malicious package)
- [MAL-2023-1433](https://insights.sbomify.com/MAL-2023-1433/): Malicious code in puppet-module-posix-system-r (RubyGems) (malicious package)
- [MAL-2023-1432](https://insights.sbomify.com/MAL-2023-1432/): Malicious code in ptrsec_rce (RubyGems) (malicious package)
- [MAL-2023-1431](https://insights.sbomify.com/MAL-2023-1431/): Malicious code in naveengem (RubyGems) (malicious package)
- [MAL-2023-1430](https://insights.sbomify.com/MAL-2023-1430/): Malicious code in naveen4gem (RubyGems) (malicious package)
- [MAL-2023-143](https://insights.sbomify.com/MAL-2023-143/): --- _-= Per source details. (malicious package)
- [MAL-2023-1429](https://insights.sbomify.com/MAL-2023-1429/): Malicious code in modified_bayes (RubyGems) (malicious package)
- [MAL-2023-1428](https://insights.sbomify.com/MAL-2023-1428/): Malicious code in mandrill-api-ruby (RubyGems) (malicious package)
- [MAL-2023-1427](https://insights.sbomify.com/MAL-2023-1427/): Malicious code in i18n_sonder (RubyGems) (malicious package)
- [MAL-2023-1426](https://insights.sbomify.com/MAL-2023-1426/): Malicious code in google-apis-androidpublisher_v2 (RubyGems) (malicious package)
- [MAL-2023-1425](https://insights.sbomify.com/MAL-2023-1425/): Malicious code in gitlab-glfm-markdown (RubyGems) (malicious package)
- [MAL-2023-1424](https://insights.sbomify.com/MAL-2023-1424/): Malicious code in fluent-plugin-enhance-k8s-metadata (RubyGems) (malicious package)
- [MAL-2023-1423](https://insights.sbomify.com/MAL-2023-1423/): Malicious code in att-codekit (RubyGems) (malicious package)
- [MAL-2023-1422](https://insights.sbomify.com/MAL-2023-1422/): Malicious code in yc-as-client (PyPI) (malicious package)
- [MAL-2023-1421](https://insights.sbomify.com/MAL-2023-1421/): Malicious code in tucan-x (PyPI) (malicious package)
- [MAL-2023-1420](https://insights.sbomify.com/MAL-2023-1420/): Malicious code in this-is-malware (PyPI) (malicious package)
- [MAL-2023-142](https://insights.sbomify.com/MAL-2023-142/): Malicious code in brbrbr (npm) (malicious package)
- [MAL-2023-1419](https://insights.sbomify.com/MAL-2023-1419/): Malicious code in test-test-test-leys-check (PyPI) (malicious package)
- [MAL-2023-1418](https://insights.sbomify.com/MAL-2023-1418/): Malicious code in taxi-etl (PyPI) (malicious package)
- [MAL-2023-1417](https://insights.sbomify.com/MAL-2023-1417/): Malicious code in sys-selenium (PyPI) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/91/