# Vulnerabilities published in 2023


- [MAL-2023-1056](https://insights.sbomify.com/MAL-2023-1056/): Malicious code in binarium-crm (npm) (malicious package)
- [MAL-2023-1055](https://insights.sbomify.com/MAL-2023-1055/): Malicious code in @jackshanyeshuzi/curvess (npm) (malicious package)
- [MAL-2023-1054](https://insights.sbomify.com/MAL-2023-1054/): Malicious code in saaaaaaaaaaaaaaaaaaaaaaa (npm) (malicious package)
- [MAL-2023-1053](https://insights.sbomify.com/MAL-2023-1053/): Malicious code in oy-cms-analytics (npm) (malicious package)
- [MAL-2023-1052](https://insights.sbomify.com/MAL-2023-1052/): Malicious code in my-fallen-web (npm) (malicious package)
- [MAL-2023-1051](https://insights.sbomify.com/MAL-2023-1051/): Malicious code in mecfront (npm) (malicious package)
- [MAL-2023-1050](https://insights.sbomify.com/MAL-2023-1050/): Malicious code in discorddd (npm) (malicious package)
- [MAL-2023-105](https://insights.sbomify.com/MAL-2023-105/): Malicious code in arkaos_nuvj_1_5_serial_number_xx4w9 (npm) (malicious package)
- [MAL-2023-1049](https://insights.sbomify.com/MAL-2023-1049/): Malicious code in discordd.jss (npm) (malicious package)
- [MAL-2023-1048](https://insights.sbomify.com/MAL-2023-1048/): Malicious code in discordd (npm) (malicious package)
- [MAL-2023-1047](https://insights.sbomify.com/MAL-2023-1047/): Malicious code in @oyshoweb/front (npm) (malicious package)
- [MAL-2023-1046](https://insights.sbomify.com/MAL-2023-1046/): Malicious code in json2stringfy (npm) (malicious package)
- [MAL-2023-1045](https://insights.sbomify.com/MAL-2023-1045/): Malicious code in json2double (npm) (malicious package)
- [MAL-2023-1044](https://insights.sbomify.com/MAL-2023-1044/): Malicious code in noblox.js-vps (npm) (malicious package)
- [MAL-2023-1043](https://insights.sbomify.com/MAL-2023-1043/): Malicious code in @kennylindahl/malicious-npm-package (npm) (malicious package)
- [MAL-2023-1042](https://insights.sbomify.com/MAL-2023-1042/): Malicious code in yatai-web-ui (npm) (malicious package)
- [MAL-2023-1041](https://insights.sbomify.com/MAL-2023-1041/): Malicious code in vue-router-vue3 (npm) (malicious package)
- [MAL-2023-1040](https://insights.sbomify.com/MAL-2023-1040/): Malicious code in testhacknowz (npm) (malicious package)
- [MAL-2023-104](https://insights.sbomify.com/MAL-2023-104/): Malicious code in apnic-ui (npm) (malicious package)
- [MAL-2023-1039](https://insights.sbomify.com/MAL-2023-1039/): Malicious code in storyblok-bridge (npm) (malicious package)
- [MAL-2023-1038](https://insights.sbomify.com/MAL-2023-1038/): Malicious code in sentrybrowser7 (npm) (malicious package)
- [MAL-2023-1037](https://insights.sbomify.com/MAL-2023-1037/): Malicious code in hsisu (npm) (malicious package)
- [MAL-2023-1036](https://insights.sbomify.com/MAL-2023-1036/): Malicious code in hackzvijay (npm) (malicious package)
- [MAL-2023-1035](https://insights.sbomify.com/MAL-2023-1035/): Malicious code in flot-axis (npm) (malicious package)
- [MAL-2023-1034](https://insights.sbomify.com/MAL-2023-1034/): Malicious code in fca-hrz-reup (npm) (malicious package)
- [MAL-2023-1033](https://insights.sbomify.com/MAL-2023-1033/): Malicious code in eslint-plugin-scp-custom-rules (npm) (malicious package)
- [MAL-2023-1032](https://insights.sbomify.com/MAL-2023-1032/): Malicious code in eslint-config-scp-custom-rules (npm) (malicious package)
- [MAL-2023-1031](https://insights.sbomify.com/MAL-2023-1031/): Malicious code in command-launcher (npm) (malicious package)
- [MAL-2023-1030](https://insights.sbomify.com/MAL-2023-1030/): Malicious code in coinbase-wallet-sdk (npm) (malicious package)
- [MAL-2023-103](https://insights.sbomify.com/MAL-2023-103/): Malicious code in apitelegram (npm) (malicious package)
- [MAL-2023-1029](https://insights.sbomify.com/MAL-2023-1029/): Malicious code in bluehost-wordpress-plugin (npm) (malicious package)
- [MAL-2023-1028](https://insights.sbomify.com/MAL-2023-1028/): Malicious code in aurora-config (npm) (malicious package)
- [MAL-2023-1027](https://insights.sbomify.com/MAL-2023-1027/): Malicious code in @ozon-maps/map-sdk (npm) (malicious package)
- [MAL-2023-1026](https://insights.sbomify.com/MAL-2023-1026/): Malicious code in fca-tpk05-v2 (npm) (malicious package)
- [MAL-2023-1025](https://insights.sbomify.com/MAL-2023-1025/): Malicious code in elastic-internal (npm) (malicious package)
- [MAL-2023-1024](https://insights.sbomify.com/MAL-2023-1024/): Malicious code in @ikea-aoa/component-text (npm) (malicious package)
- [MAL-2023-1023](https://insights.sbomify.com/MAL-2023-1023/): Malicious code in test-hacker-sharma (npm) (malicious package)
- [MAL-2023-1022](https://insights.sbomify.com/MAL-2023-1022/): Malicious code in stitch-fix-men (npm) (malicious package)
- [MAL-2023-1021](https://insights.sbomify.com/MAL-2023-1021/): Malicious code in trino-webui (npm) (malicious package)
- [MAL-2023-1020](https://insights.sbomify.com/MAL-2023-1020/): Malicious code in superset-cypress (npm) (malicious package)
- [MAL-2023-102](https://insights.sbomify.com/MAL-2023-102/): Malicious code in apitelegraf (npm) (malicious package)
- [MAL-2023-1019](https://insights.sbomify.com/MAL-2023-1019/): Malicious code in rhancis (npm) (malicious package)
- [MAL-2023-1018](https://insights.sbomify.com/MAL-2023-1018/): Malicious code in react-toolbox-docs (npm) (malicious package)
- [MAL-2023-1017](https://insights.sbomify.com/MAL-2023-1017/): Malicious code in ory-hydra-mock-oauth2-client (npm) (malicious package)
- [MAL-2023-1016](https://insights.sbomify.com/MAL-2023-1016/): Malicious code in fca-rhancis-pogi (npm) (malicious package)
- [MAL-2023-1015](https://insights.sbomify.com/MAL-2023-1015/): Malicious code in fca-rhancis (npm) (malicious package)
- [MAL-2023-1014](https://insights.sbomify.com/MAL-2023-1014/): Malicious code in fca-rbtd (npm) (malicious package)
- [MAL-2023-1013](https://insights.sbomify.com/MAL-2023-1013/): Malicious code in fca-pogi (npm) (malicious package)
- [MAL-2023-1012](https://insights.sbomify.com/MAL-2023-1012/): Malicious code in ebtd (npm) (malicious package)
- [MAL-2023-1011](https://insights.sbomify.com/MAL-2023-1011/): Malicious code in docusaurus-template (npm) (malicious package)
- [MAL-2023-1010](https://insights.sbomify.com/MAL-2023-1010/): Malicious code in docusaurus-plugin-matamo (npm) (malicious package)
- [MAL-2023-101](https://insights.sbomify.com/MAL-2023-101/): Malicious code in aonetecha (npm) (malicious package)
- [MAL-2023-1009](https://insights.sbomify.com/MAL-2023-1009/): Malicious code in zoomapps-customlayout-js (npm) (malicious package)
- [MAL-2023-1008](https://insights.sbomify.com/MAL-2023-1008/): Malicious code in zoomalexa (npm) (malicious package)
- [MAL-2023-1007](https://insights.sbomify.com/MAL-2023-1007/): Malicious code in zebilamouche (npm) (malicious package)
- [MAL-2023-1006](https://insights.sbomify.com/MAL-2023-1006/): Malicious code in zalando-tech-radar (npm) (malicious package)
- [MAL-2023-1005](https://insights.sbomify.com/MAL-2023-1005/): Malicious code in zach-remadee (npm) (malicious package)
- [MAL-2023-1004](https://insights.sbomify.com/MAL-2023-1004/): Malicious code in zach-remade (npm) (malicious package)
- [MAL-2023-1003](https://insights.sbomify.com/MAL-2023-1003/): Malicious code in ytreader (npm) (malicious package)
- [MAL-2023-1002](https://insights.sbomify.com/MAL-2023-1002/): Malicious code in you-are-the-placebo-making-your-mind-matter-by-joe-dispenza-on-mac-full-version- (npm) (malicious package)
- [MAL-2023-1001](https://insights.sbomify.com/MAL-2023-1001/): --- _-= Per source details. (malicious package)
- [MAL-2023-1000](https://insights.sbomify.com/MAL-2023-1000/): Malicious code in ynodejs_mod_log (npm) (malicious package)
- [MAL-2023-100](https://insights.sbomify.com/MAL-2023-100/): Malicious code in anjelo-pogi (npm) (malicious package)
- [MAL-2023-10](https://insights.sbomify.com/MAL-2023-10/): Malicious code in security-util-py (PyPI) (malicious package)
- [MAL-2023-1](https://insights.sbomify.com/MAL-2023-1/): Malicious code in @hyperion-util/cookies (npm) (malicious package)
- [GSD-2023-1002422](https://insights.sbomify.com/GSD-2023-1002422/): pinctrl: single: fix potential NULL dereference (not scored)
- [GSD-2023-1002421](https://insights.sbomify.com/GSD-2023-1002421/): net: USB: Fix wrong-direction WARNING in plusb.c (not scored)
- [GSD-2023-1002420](https://insights.sbomify.com/GSD-2023-1002420/): aio: fix mremap after fork null-deref (not scored)
- [GSD-2023-1002419](https://insights.sbomify.com/GSD-2023-1002419/): mmc: sdio: fix possible resource leaks in some error paths (not scored)
- [GSD-2023-1002418](https://insights.sbomify.com/GSD-2023-1002418/): net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (not scored)
- [GSD-2023-1002417](https://insights.sbomify.com/GSD-2023-1002417/): nilfs2: fix underflow in second superblock position calculations (not scored)
- [GSD-2023-1002416](https://insights.sbomify.com/GSD-2023-1002416/): IB/hfi1: Restore allocated resources on failed copyout (not scored)
- [GSD-2023-1002415](https://insights.sbomify.com/GSD-2023-1002415/): pinctrl: single: fix potential NULL dereference (not scored)
- [GSD-2023-1002414](https://insights.sbomify.com/GSD-2023-1002414/): net: USB: Fix wrong-direction WARNING in plusb.c (not scored)
- [GSD-2023-1002413](https://insights.sbomify.com/GSD-2023-1002413/): aio: fix mremap after fork null-deref (not scored)
- [GSD-2023-1002412](https://insights.sbomify.com/GSD-2023-1002412/): mmc: sdio: fix possible resource leaks in some error paths (not scored)
- [GSD-2023-1002411](https://insights.sbomify.com/GSD-2023-1002411/): net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (not scored)
- [GSD-2023-1002410](https://insights.sbomify.com/GSD-2023-1002410/): nilfs2: fix underflow in second superblock position calculations (not scored)
- [GSD-2023-1002409](https://insights.sbomify.com/GSD-2023-1002409/): IB/hfi1: Restore allocated resources on failed copyout (not scored)
- [GSD-2023-1002408](https://insights.sbomify.com/GSD-2023-1002408/): btrfs: zlib: zero-initialize zlib workspace (not scored)
- [GSD-2023-1002407](https://insights.sbomify.com/GSD-2023-1002407/): IB/IPoIB: Fix legacy IPoIB due to wrong number of queues (not scored)
- [GSD-2023-1002406](https://insights.sbomify.com/GSD-2023-1002406/): ice: Do not use WQ_MEM_RECLAIM flag for workqueue (not scored)
- [GSD-2023-1002405](https://insights.sbomify.com/GSD-2023-1002405/): pinctrl: single: fix potential NULL dereference (not scored)
- [GSD-2023-1002404](https://insights.sbomify.com/GSD-2023-1002404/): net: USB: Fix wrong-direction WARNING in plusb.c (not scored)
- [GSD-2023-1002403](https://insights.sbomify.com/GSD-2023-1002403/): net: sched: sch: Bounds check priority (not scored)
- [GSD-2023-1002402](https://insights.sbomify.com/GSD-2023-1002402/): aio: fix mremap after fork null-deref (not scored)
- [GSD-2023-1002401](https://insights.sbomify.com/GSD-2023-1002401/): s390/decompressor: specify __decompress() buf len to avoid overflow (not scored)
- [GSD-2023-1002400](https://insights.sbomify.com/GSD-2023-1002400/): mmc: sdio: fix possible resource leaks in some error paths (not scored)
- [GSD-2023-1002399](https://insights.sbomify.com/GSD-2023-1002399/): mmc: mmc_spi: fix error handling in mmc_spi_probe() (not scored)
- [GSD-2023-1002398](https://insights.sbomify.com/GSD-2023-1002398/): sched/psi: Fix use-after-free in ep_remove_wait_queue() (not scored)
- [GSD-2023-1002397](https://insights.sbomify.com/GSD-2023-1002397/): nilfs2: fix underflow in second superblock position calculations (not scored)
- [GSD-2023-1002396](https://insights.sbomify.com/GSD-2023-1002396/): net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (not scored)
- [GSD-2023-1002395](https://insights.sbomify.com/GSD-2023-1002395/): net: sched: sch: Fix off by one in htb_activate_prios() (not scored)
- [GSD-2023-1002394](https://insights.sbomify.com/GSD-2023-1002394/): ASoC: SOF: Intel: hda-dai: fix possible stream_tag leak (not scored)
- [GSD-2023-1002393](https://insights.sbomify.com/GSD-2023-1002393/): btrfs: zlib: zero-initialize zlib workspace (not scored)
- [GSD-2023-1002392](https://insights.sbomify.com/GSD-2023-1002392/): IB/hfi1: Restore allocated resources on failed copyout (not scored)
- [GSD-2023-1002391](https://insights.sbomify.com/GSD-2023-1002391/): xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr() (not scored)
- [GSD-2023-1002390](https://insights.sbomify.com/GSD-2023-1002390/): IB/IPoIB: Fix legacy IPoIB due to wrong number of queues (not scored)
- [GSD-2023-1002389](https://insights.sbomify.com/GSD-2023-1002389/): ice: Do not use WQ_MEM_RECLAIM flag for workqueue (not scored)
- [GSD-2023-1002388](https://insights.sbomify.com/GSD-2023-1002388/): pinctrl: single: fix potential NULL dereference (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/96/