# Vulnerabilities published in 2023


- [MAL-2023-1146](https://insights.sbomify.com/MAL-2023-1146/): Malicious code in coveo-101-commerce (npm) (malicious package)
- [MAL-2023-1145](https://insights.sbomify.com/MAL-2023-1145/): Malicious code in confuseddeps (npm) (malicious package)
- [MAL-2023-1144](https://insights.sbomify.com/MAL-2023-1144/): Malicious code in confusedatma (npm) (malicious package)
- [MAL-2023-1143](https://insights.sbomify.com/MAL-2023-1143/): Malicious code in compositionupdate (npm) (malicious package)
- [MAL-2023-1142](https://insights.sbomify.com/MAL-2023-1142/): Malicious code in commentrating (npm) (malicious package)
- [MAL-2023-1141](https://insights.sbomify.com/MAL-2023-1141/): Malicious code in com.unity.xrtools.spatial-hash (npm) (malicious package)
- [MAL-2023-1140](https://insights.sbomify.com/MAL-2023-1140/): Malicious code in com.unity.test-runner-manual-tests (npm) (malicious package)
- [MAL-2023-114](https://insights.sbomify.com/MAL-2023-114/): Malicious code in auth-test-backend (npm) (malicious package)
- [MAL-2023-1139](https://insights.sbomify.com/MAL-2023-1139/): Malicious code in com.unity.meshopt.decompress (npm) (malicious package)
- [MAL-2023-1138](https://insights.sbomify.com/MAL-2023-1138/): Malicious code in codeql (npm) (malicious package)
- [MAL-2023-1137](https://insights.sbomify.com/MAL-2023-1137/): Malicious code in cloudsplaining (npm) (malicious package)
- [MAL-2023-1136](https://insights.sbomify.com/MAL-2023-1136/): Malicious code in client-ws-app (npm) (malicious package)
- [MAL-2023-1135](https://insights.sbomify.com/MAL-2023-1135/): Malicious code in chegg-contentful (npm) (malicious package)
- [MAL-2023-1134](https://insights.sbomify.com/MAL-2023-1134/): Malicious code in chain00xtest3 (npm) (malicious package)
- [MAL-2023-1133](https://insights.sbomify.com/MAL-2023-1133/): Malicious code in chain00xtest2 (npm) (malicious package)
- [MAL-2023-1132](https://insights.sbomify.com/MAL-2023-1132/): Malicious code in chain00x_tsrc (npm) (malicious package)
- [MAL-2023-1131](https://insights.sbomify.com/MAL-2023-1131/): Malicious code in chain00x_rce1 (npm) (malicious package)
- [MAL-2023-1130](https://insights.sbomify.com/MAL-2023-1130/): Malicious code in cdp-ops--ts-accesslog (npm) (malicious package)
- [MAL-2023-113](https://insights.sbomify.com/MAL-2023-113/): Malicious code in audit-vue (npm) (malicious package)
- [MAL-2023-1129](https://insights.sbomify.com/MAL-2023-1129/): Malicious code in capacity-planning-projection (npm) (malicious package)
- [MAL-2023-1128](https://insights.sbomify.com/MAL-2023-1128/): Malicious code in calfirebof.web (npm) (malicious package)
- [MAL-2023-1127](https://insights.sbomify.com/MAL-2023-1127/): Malicious code in bootstrap-without-jquery (npm) (malicious package)
- [MAL-2023-1126](https://insights.sbomify.com/MAL-2023-1126/): Malicious code in blablablabla (npm) (malicious package)
- [MAL-2023-1125](https://insights.sbomify.com/MAL-2023-1125/): Malicious code in bjss-atp-web (npm) (malicious package)
- [MAL-2023-1124](https://insights.sbomify.com/MAL-2023-1124/): Malicious code in bitshares-ui-style-guide (npm) (malicious package)
- [MAL-2023-1123](https://insights.sbomify.com/MAL-2023-1123/): Malicious code in bespin_server (npm) (malicious package)
- [MAL-2023-1122](https://insights.sbomify.com/MAL-2023-1122/): Malicious code in bernie-plugin-ads-loader-script (npm) (malicious package)
- [MAL-2023-1121](https://insights.sbomify.com/MAL-2023-1121/): Malicious code in ban-notifier4 (npm) (malicious package)
- [MAL-2023-1120](https://insights.sbomify.com/MAL-2023-1120/): Malicious code in back-alley (npm) (malicious package)
- [MAL-2023-112](https://insights.sbomify.com/MAL-2023-112/): Malicious code in audit-ejs (npm) (malicious package)
- [MAL-2023-1119](https://insights.sbomify.com/MAL-2023-1119/): Malicious code in azuretestpackage (npm) (malicious package)
- [MAL-2023-1118](https://insights.sbomify.com/MAL-2023-1118/): Malicious code in aws-sdk-js-v3 (npm) (malicious package)
- [MAL-2023-1117](https://insights.sbomify.com/MAL-2023-1117/): Malicious code in auto-assign-team-action (npm) (malicious package)
- [MAL-2023-1116](https://insights.sbomify.com/MAL-2023-1116/): Malicious code in application-delivery-tool-preload-expo (npm) (malicious package)
- [MAL-2023-1115](https://insights.sbomify.com/MAL-2023-1115/): Malicious code in api-code-capture-chrome-extension (npm) (malicious package)
- [MAL-2023-1114](https://insights.sbomify.com/MAL-2023-1114/): Malicious code in apache2 (npm) (malicious package)
- [MAL-2023-1113](https://insights.sbomify.com/MAL-2023-1113/): Malicious code in another-dev-dependency3 (npm) (malicious package)
- [MAL-2023-1112](https://insights.sbomify.com/MAL-2023-1112/): Malicious code in angular-mep (npm) (malicious package)
- [MAL-2023-1111](https://insights.sbomify.com/MAL-2023-1111/): Malicious code in afterpay-sdk-example-server (npm) (malicious package)
- [MAL-2023-1110](https://insights.sbomify.com/MAL-2023-1110/): Malicious code in adityan-pwdd-test (npm) (malicious package)
- [MAL-2023-111](https://insights.sbomify.com/MAL-2023-111/): Malicious code in attribution-project (npm) (malicious package)
- [MAL-2023-1109](https://insights.sbomify.com/MAL-2023-1109/): Malicious code in a2b_hex (npm) (malicious package)
- [MAL-2023-1108](https://insights.sbomify.com/MAL-2023-1108/): Malicious code in @yuga-labs/web3-react (npm) (malicious package)
- [MAL-2023-1107](https://insights.sbomify.com/MAL-2023-1107/): Malicious code in @tendable/ui-kit (npm) (malicious package)
- [MAL-2023-1106](https://insights.sbomify.com/MAL-2023-1106/): Malicious code in @shennong/web-logger (npm) (malicious package)
- [MAL-2023-1105](https://insights.sbomify.com/MAL-2023-1105/): Malicious code in @satsuitesdk/score-choice-policy (npm) (malicious package)
- [MAL-2023-1104](https://insights.sbomify.com/MAL-2023-1104/): Malicious code in @rustore-web/config (npm) (malicious package)
- [MAL-2023-1103](https://insights.sbomify.com/MAL-2023-1103/): Malicious code in @region-lib/helper (npm) (malicious package)
- [MAL-2023-1102](https://insights.sbomify.com/MAL-2023-1102/): Malicious code in @region-lib/env (npm) (malicious package)
- [MAL-2023-1101](https://insights.sbomify.com/MAL-2023-1101/): Malicious code in @recordedfuture/rf-native (npm) (malicious package)
- [MAL-2023-1100](https://insights.sbomify.com/MAL-2023-1100/): Malicious code in @productiv/compass (npm) (malicious package)
- [MAL-2023-110](https://insights.sbomify.com/MAL-2023-110/): Malicious code in attacker_present_helloworld (npm) (malicious package)
- [MAL-2023-11](https://insights.sbomify.com/MAL-2023-11/): Malicious code in microsoft_kiota_http (RubyGems) (malicious package)
- [MAL-2023-1099](https://insights.sbomify.com/MAL-2023-1099/): Malicious code in @paystackhq/stack-ui (npm) (malicious package)
- [MAL-2023-1098](https://insights.sbomify.com/MAL-2023-1098/): Malicious code in @pagseguro/pagseguro-utils-test (npm) (malicious package)
- [MAL-2023-1097](https://insights.sbomify.com/MAL-2023-1097/): Malicious code in @optalp/test-package (npm) (malicious package)
- [MAL-2023-1096](https://insights.sbomify.com/MAL-2023-1096/): Malicious code in @okcoin-dev/blade (npm) (malicious package)
- [MAL-2023-1095](https://insights.sbomify.com/MAL-2023-1095/): Malicious code in @obg/ngx.global (npm) (malicious package)
- [MAL-2023-1094](https://insights.sbomify.com/MAL-2023-1094/): Malicious code in @obg/gtm.types (npm) (malicious package)
- [MAL-2023-1093](https://insights.sbomify.com/MAL-2023-1093/): Malicious code in @nursefly/tokens (npm) (malicious package)
- [MAL-2023-1092](https://insights.sbomify.com/MAL-2023-1092/): Malicious code in @n9xcnr5test/n9xcnr5 (npm) (malicious package)
- [MAL-2023-1091](https://insights.sbomify.com/MAL-2023-1091/): Malicious code in @ms-atlas-module/datastudio-datafactory (npm) (malicious package)
- [MAL-2023-1090](https://insights.sbomify.com/MAL-2023-1090/): Malicious code in @ms-atlas/datastudio-diagnostics (npm) (malicious package)
- [MAL-2023-109](https://insights.sbomify.com/MAL-2023-109/): Malicious code in athulkrishnan_test_package (npm) (malicious package)
- [MAL-2023-1089](https://insights.sbomify.com/MAL-2023-1089/): Malicious code in @ms-atlas/datastudio (npm) (malicious package)
- [MAL-2023-1088](https://insights.sbomify.com/MAL-2023-1088/): Malicious code in @metronetinc/react-component-library-next-plugin (npm) (malicious package)
- [MAL-2023-1087](https://insights.sbomify.com/MAL-2023-1087/): Malicious code in @metronetinc/react-component-library (npm) (malicious package)
- [MAL-2023-1086](https://insights.sbomify.com/MAL-2023-1086/): Malicious code in @mendeley-internal/react-ui (npm) (malicious package)
- [MAL-2023-1085](https://insights.sbomify.com/MAL-2023-1085/): Malicious code in @mddsfmsdflm/itemselector (npm) (malicious package)
- [MAL-2023-1084](https://insights.sbomify.com/MAL-2023-1084/): Malicious code in @marcomayo.com/firefly-shared-js (npm) (malicious package)
- [MAL-2023-1083](https://insights.sbomify.com/MAL-2023-1083/): Malicious code in @infinitebrahmanuniverse/nolb-cys (npm) (malicious package)
- [MAL-2023-1082](https://insights.sbomify.com/MAL-2023-1082/): Malicious code in @ikea-aoa/component-price-module (npm) (malicious package)
- [MAL-2023-1081](https://insights.sbomify.com/MAL-2023-1081/): Malicious code in @hubportal/sdk (npm) (malicious package)
- [MAL-2023-1080](https://insights.sbomify.com/MAL-2023-1080/): Malicious code in @hihihehehaha/vgujsonfrankfurtola (npm) (malicious package)
- [MAL-2023-108](https://insights.sbomify.com/MAL-2023-108/): Malicious code in assets-table (npm) (malicious package)
- [MAL-2023-1079](https://insights.sbomify.com/MAL-2023-1079/): Malicious code in @expressions/excel-functions (npm) (malicious package)
- [MAL-2023-1078](https://insights.sbomify.com/MAL-2023-1078/): Malicious code in @clearing/noway (npm) (malicious package)
- [MAL-2023-1077](https://insights.sbomify.com/MAL-2023-1077/): Malicious code in 1password-postman-integration (npm) (malicious package)
- [MAL-2023-1076](https://insights.sbomify.com/MAL-2023-1076/): Malicious code in wasabi-nodejs (npm) (malicious package)
- [MAL-2023-1075](https://insights.sbomify.com/MAL-2023-1075/): Malicious code in email-helper (npm) (malicious package)
- [MAL-2023-1074](https://insights.sbomify.com/MAL-2023-1074/): Malicious code in deptrailoitaiai (npm) (malicious package)
- [MAL-2023-1073](https://insights.sbomify.com/MAL-2023-1073/): Malicious code in blackberry (npm) (malicious package)
- [MAL-2023-1072](https://insights.sbomify.com/MAL-2023-1072/): Malicious code in apple-fallen-package (npm) (malicious package)
- [MAL-2023-1071](https://insights.sbomify.com/MAL-2023-1071/): Malicious code in @zplayer/core (npm) (malicious package)
- [MAL-2023-1070](https://insights.sbomify.com/MAL-2023-1070/): Malicious code in @freestarcapital/collector-pipeline (npm) (malicious package)
- [MAL-2023-107](https://insights.sbomify.com/MAL-2023-107/): Malicious code in assets-graph (npm) (malicious package)
- [MAL-2023-1069](https://insights.sbomify.com/MAL-2023-1069/): Malicious code in web3tool.js (npm) (malicious package)
- [MAL-2023-1068](https://insights.sbomify.com/MAL-2023-1068/): Malicious code in web3tool-utils (npm) (malicious package)
- [MAL-2023-1067](https://insights.sbomify.com/MAL-2023-1067/): Malicious code in web3tool-rpc-methods (npm) (malicious package)
- [MAL-2023-1066](https://insights.sbomify.com/MAL-2023-1066/): Malicious code in web3tool-providers-ipc (npm) (malicious package)
- [MAL-2023-1065](https://insights.sbomify.com/MAL-2023-1065/): Malicious code in web3tool-net (npm) (malicious package)
- [MAL-2023-1064](https://insights.sbomify.com/MAL-2023-1064/): Malicious code in web3tool-eth-iban (npm) (malicious package)
- [MAL-2023-1063](https://insights.sbomify.com/MAL-2023-1063/): Malicious code in web3tool-eth-contract (npm) (malicious package)
- [MAL-2023-1062](https://insights.sbomify.com/MAL-2023-1062/): Malicious code in web3tool-eth-abi (npm) (malicious package)
- [MAL-2023-1061](https://insights.sbomify.com/MAL-2023-1061/): Malicious code in web3tool-errors (npm) (malicious package)
- [MAL-2023-1060](https://insights.sbomify.com/MAL-2023-1060/): Malicious code in web3tool (npm) (malicious package)
- [MAL-2023-106](https://insights.sbomify.com/MAL-2023-106/): Malicious code in asdtestaaa (npm) (malicious package)
- [MAL-2023-1059](https://insights.sbomify.com/MAL-2023-1059/): Malicious code in my-fallen-fallen-web (npm) (malicious package)
- [MAL-2023-1058](https://insights.sbomify.com/MAL-2023-1058/): Malicious code in infocaster-frontend-bootstrap-4-starter (npm) (malicious package)
- [MAL-2023-1057](https://insights.sbomify.com/MAL-2023-1057/): Malicious code in ethereum-cryptographyyy (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/95/
