# Vulnerabilities published in 2024


- [MAL-2024-1404](https://insights.sbomify.com/MAL-2024-1404/): Malicious code in @juiggitea/alias-excepturi-quod-aut (npm) (malicious package)
- [MAL-2024-1403](https://insights.sbomify.com/MAL-2024-1403/): Malicious code in @juiggitea/a-laboriosam-omnis-praesentium (npm) (malicious package)
- [MAL-2024-1402](https://insights.sbomify.com/MAL-2024-1402/): Malicious code in wdio-api-client (npm) (malicious package)
- [MAL-2024-1401](https://insights.sbomify.com/MAL-2024-1401/): Malicious code in mcft_client (npm) (malicious package)
- [MAL-2024-1400](https://insights.sbomify.com/MAL-2024-1400/): Malicious code in xloportailcfn (npm) (malicious package)
- [MAL-2024-140](https://insights.sbomify.com/MAL-2024-140/): Malicious code in @shenmue_dsc/shenmue.js-stream (npm) (malicious package)
- [MAL-2024-14](https://insights.sbomify.com/MAL-2024-14/): Malicious code in @serenity-web/components-base (npm) (malicious package)
- [MAL-2024-1399](https://insights.sbomify.com/MAL-2024-1399/): Malicious code in stablecoin-evm (npm) (malicious package)
- [MAL-2024-1397](https://insights.sbomify.com/MAL-2024-1397/): Malicious code in reqwestss (PyPI) (malicious package)
- [MAL-2024-1396](https://insights.sbomify.com/MAL-2024-1396/): Malicious code in numberpy (PyPI) (malicious package)
- [MAL-2024-1395](https://insights.sbomify.com/MAL-2024-1395/): Malicious code in pinyin-pra (npm) (malicious package)
- [MAL-2024-1394](https://insights.sbomify.com/MAL-2024-1394/): Malicious code in cedar-snippet (npm) (malicious package)
- [MAL-2024-1393](https://insights.sbomify.com/MAL-2024-1393/): Malicious code in nespresso-design-system (npm) (malicious package)
- [MAL-2024-1392](https://insights.sbomify.com/MAL-2024-1392/): Malicious code in test-pen-testers (npm) (malicious package)
- [MAL-2024-1391](https://insights.sbomify.com/MAL-2024-1391/): Malicious code in flexfone-reseller (npm) (malicious package)
- [MAL-2024-1390](https://insights.sbomify.com/MAL-2024-1390/): Malicious code in hello-1st-anni (npm) (malicious package)
- [MAL-2024-139](https://insights.sbomify.com/MAL-2024-139/): Malicious code in @shenmue_dsc/fluent-ffmpeg-multistream-ts (npm) (malicious package)
- [MAL-2024-1389](https://insights.sbomify.com/MAL-2024-1389/): Malicious code in seller-journey (npm) (malicious package)
- [MAL-2024-1388](https://insights.sbomify.com/MAL-2024-1388/): Malicious code in controlbundler (npm) (malicious package)
- [MAL-2024-1387](https://insights.sbomify.com/MAL-2024-1387/): Malicious code in sanar-website-v3 (npm) (malicious package)
- [MAL-2024-1386](https://insights.sbomify.com/MAL-2024-1386/): Malicious code in tec-docs (npm) (malicious package)
- [MAL-2024-1385](https://insights.sbomify.com/MAL-2024-1385/): Malicious code in taxes-experience-malicious (npm) (malicious package)
- [MAL-2024-1384](https://insights.sbomify.com/MAL-2024-1384/): Malicious code in protonme (npm) (malicious package)
- [MAL-2024-1383](https://insights.sbomify.com/MAL-2024-1383/): Malicious code in rich-relevance (npm) (malicious package)
- [MAL-2024-1382](https://insights.sbomify.com/MAL-2024-1382/): Malicious code in cst-web-chat (npm) (malicious package)
- [MAL-2024-1381](https://insights.sbomify.com/MAL-2024-1381/): Malicious code in hydra-player-sdk (npm) (malicious package)
- [MAL-2024-1380](https://insights.sbomify.com/MAL-2024-1380/): Malicious code in tcm-app-migration-miles-react (npm) (malicious package)
- [MAL-2024-138](https://insights.sbomify.com/MAL-2024-138/): Malicious code in cagov-template-v5 (npm) (malicious package)
- [MAL-2024-1379](https://insights.sbomify.com/MAL-2024-1379/): Malicious code in fetch-datas (npm) (malicious package)
- [MAL-2024-1378](https://insights.sbomify.com/MAL-2024-1378/): Malicious code in test_dependency_confusion12 (npm) (malicious package)
- [MAL-2024-1377](https://insights.sbomify.com/MAL-2024-1377/): Malicious code in cors-parser (npm) (malicious package)
- [MAL-2024-1376](https://insights.sbomify.com/MAL-2024-1376/): Malicious code in cors-app (npm) (malicious package)
- [MAL-2024-1375](https://insights.sbomify.com/MAL-2024-1375/): Malicious code in @westpac-components-web/hooks (npm) (malicious package)
- [MAL-2024-1374](https://insights.sbomify.com/MAL-2024-1374/): Malicious code in @ozon-ob-toolbox/format-date (npm) (malicious package)
- [MAL-2024-1373](https://insights.sbomify.com/MAL-2024-1373/): Malicious code in @ozon-ob-foundation/tracker (npm) (malicious package)
- [MAL-2024-1372](https://insights.sbomify.com/MAL-2024-1372/): Malicious code in @ozon-ob-foundation/event-bus (npm) (malicious package)
- [MAL-2024-1371](https://insights.sbomify.com/MAL-2024-1371/): Malicious code in @ozon-ob-foundation/communication (npm) (malicious package)
- [MAL-2024-1370](https://insights.sbomify.com/MAL-2024-1370/): Malicious code in @ozon-fe/media-player (npm) (malicious package)
- [MAL-2024-137](https://insights.sbomify.com/MAL-2024-137/): Malicious code in froxlor (npm) (malicious package)
- [MAL-2024-1369](https://insights.sbomify.com/MAL-2024-1369/): Malicious code in mixtral-llm (npm) (malicious package)
- [MAL-2024-1368](https://insights.sbomify.com/MAL-2024-1368/): Malicious code in brand-adidas-design-tokens (npm) (malicious package)
- [MAL-2024-1367](https://insights.sbomify.com/MAL-2024-1367/): Malicious code in brand-adidas-asset-fonts (npm) (malicious package)
- [MAL-2024-1366](https://insights.sbomify.com/MAL-2024-1366/): Malicious code in sigoner (npm) (malicious package)
- [MAL-2024-1365](https://insights.sbomify.com/MAL-2024-1365/): Malicious code in testpkg3322 (PyPI) (malicious package)
- [MAL-2024-1364](https://insights.sbomify.com/MAL-2024-1364/): Malicious code in qaqazzaaa (npm) (malicious package)
- [MAL-2024-1363](https://insights.sbomify.com/MAL-2024-1363/): Malicious code in input-fns (npm) (malicious package)
- [MAL-2024-1362](https://insights.sbomify.com/MAL-2024-1362/): Malicious code in encodelen (npm) (malicious package)
- [MAL-2024-1361](https://insights.sbomify.com/MAL-2024-1361/): Malicious code in discord-datas (npm) (malicious package)
- [MAL-2024-1360](https://insights.sbomify.com/MAL-2024-1360/): Malicious code in by-logger (npm) (malicious package)
- [MAL-2024-136](https://insights.sbomify.com/MAL-2024-136/): Malicious code in librct (npm) (malicious package)
- [MAL-2024-1359](https://insights.sbomify.com/MAL-2024-1359/): Malicious code in by-dynamic-domain (npm) (malicious package)
- [MAL-2024-1358](https://insights.sbomify.com/MAL-2024-1358/): Malicious code in @asdfvr/qaqazzaaa (npm) (malicious package)
- [MAL-2024-1357](https://insights.sbomify.com/MAL-2024-1357/): Malicious code in by-fetch (npm) (malicious package)
- [MAL-2024-1356](https://insights.sbomify.com/MAL-2024-1356/): Malicious code in fadam-module (npm) (malicious package)
- [MAL-2024-1355](https://insights.sbomify.com/MAL-2024-1355/): Malicious code in @content-platform/shared (npm) (malicious package)
- [MAL-2024-1354](https://insights.sbomify.com/MAL-2024-1354/): Malicious code in @content-platform/fadam-module (npm) (malicious package)
- [MAL-2024-1353](https://insights.sbomify.com/MAL-2024-1353/): Malicious code in discord-fetchers (npm) (malicious package)
- [MAL-2024-1352](https://insights.sbomify.com/MAL-2024-1352/): Malicious code in @aluffyz/discord-botjs (npm) (malicious package)
- [MAL-2024-1351](https://insights.sbomify.com/MAL-2024-1351/): Malicious code in sc-chimerra (npm) (malicious package)
- [MAL-2024-1350](https://insights.sbomify.com/MAL-2024-1350/): Malicious code in sc-chimeraa (npm) (malicious package)
- [MAL-2024-135](https://insights.sbomify.com/MAL-2024-135/): Malicious code in siif_components (npm) (malicious package)
- [MAL-2024-1349](https://insights.sbomify.com/MAL-2024-1349/): Malicious code in sc-chimer (npm) (malicious package)
- [MAL-2024-1348](https://insights.sbomify.com/MAL-2024-1348/): Malicious code in reduction-ping (npm) (malicious package)
- [MAL-2024-1347](https://insights.sbomify.com/MAL-2024-1347/): Malicious code in ping-bot-reduction (npm) (malicious package)
- [MAL-2024-1346](https://insights.sbomify.com/MAL-2024-1346/): Malicious code in jhsdfgghsdfjhds (npm) (malicious package)
- [MAL-2024-1345](https://insights.sbomify.com/MAL-2024-1345/): Malicious code in generic-synthetic-nodejs (npm) (malicious package)
- [MAL-2024-1344](https://insights.sbomify.com/MAL-2024-1344/): Malicious code in discord-bot-3 (npm) (malicious package)
- [MAL-2024-1343](https://insights.sbomify.com/MAL-2024-1343/): Malicious code in bot-login-plugins (npm) (malicious package)
- [MAL-2024-1342](https://insights.sbomify.com/MAL-2024-1342/): Malicious code in @assistedtax/demo (npm) (malicious package)
- [MAL-2024-1341](https://insights.sbomify.com/MAL-2024-1341/): Malicious code in dependency_confusion123 (RubyGems) (malicious package)
- [MAL-2024-1340](https://insights.sbomify.com/MAL-2024-1340/): Malicious code in test-poc3 (npm) (malicious package)
- [MAL-2024-134](https://insights.sbomify.com/MAL-2024-134/): Malicious code in oscompatible (npm) (malicious package)
- [MAL-2024-1339](https://insights.sbomify.com/MAL-2024-1339/): Malicious code in test-poc2 (npm) (malicious package)
- [MAL-2024-1338](https://insights.sbomify.com/MAL-2024-1338/): Malicious code in eslint-config1 (npm) (malicious package)
- [MAL-2024-1337](https://insights.sbomify.com/MAL-2024-1337/): Malicious code in @sxmp/logging (npm) (malicious package)
- [MAL-2024-1336](https://insights.sbomify.com/MAL-2024-1336/): Malicious code in @sxmp/detector (npm) (malicious package)
- [MAL-2024-1335](https://insights.sbomify.com/MAL-2024-1335/): Malicious code in @ssr-frontend/test-poc3 (npm) (malicious package)
- [MAL-2024-1334](https://insights.sbomify.com/MAL-2024-1334/): Malicious code in multiconnections (PyPI) (malicious package)
- [MAL-2024-1333](https://insights.sbomify.com/MAL-2024-1333/): Malicious code in threadxpools (PyPI) (malicious package)
- [MAL-2024-1332](https://insights.sbomify.com/MAL-2024-1332/): Malicious code in uidm-react-lib (npm) (malicious package)
- [MAL-2024-1331](https://insights.sbomify.com/MAL-2024-1331/): Malicious code in roblox.lua (npm) (malicious package)
- [MAL-2024-1330](https://insights.sbomify.com/MAL-2024-1330/): Malicious code in elk-uikit (npm) (malicious package)
- [MAL-2024-133](https://insights.sbomify.com/MAL-2024-133/): Malicious code in analyticstracker (npm) (malicious package)
- [MAL-2024-1329](https://insights.sbomify.com/MAL-2024-1329/): Malicious code in discords-logs (npm) (malicious package)
- [MAL-2024-1328](https://insights.sbomify.com/MAL-2024-1328/): Malicious code in discord.js-hex (npm) (malicious package)
- [MAL-2024-1327](https://insights.sbomify.com/MAL-2024-1327/): Malicious code in discord-color (npm) (malicious package)
- [MAL-2024-1326](https://insights.sbomify.com/MAL-2024-1326/): Malicious code in zxcvbnmmmmmmkjhgfdssss (npm) (malicious package)
- [MAL-2024-1325](https://insights.sbomify.com/MAL-2024-1325/): Malicious code in @assurantlabs/home-device-inventory (npm) (malicious package)
- [MAL-2024-1324](https://insights.sbomify.com/MAL-2024-1324/): Malicious code in ing-feat-grants-management (npm) (malicious package)
- [MAL-2024-1323](https://insights.sbomify.com/MAL-2024-1323/): Malicious code in @socialdeal/uikit-whitelabel (npm) (malicious package)
- [MAL-2024-1322](https://insights.sbomify.com/MAL-2024-1322/): Malicious code in lamia471 (npm) (malicious package)
- [MAL-2024-1321](https://insights.sbomify.com/MAL-2024-1321/): Malicious code in hw-transition-animation (npm) (malicious package)
- [MAL-2024-1320](https://insights.sbomify.com/MAL-2024-1320/): Malicious code in grylls (npm) (malicious package)
- [MAL-2024-132](https://insights.sbomify.com/MAL-2024-132/): Malicious code in storefront_h5_sdk (npm) (malicious package)
- [MAL-2024-1319](https://insights.sbomify.com/MAL-2024-1319/): Malicious code in clistsy-node (npm) (malicious package)
- [MAL-2024-1318](https://insights.sbomify.com/MAL-2024-1318/): Malicious code in agencyportal-web (npm) (malicious package)
- [MAL-2024-1317](https://insights.sbomify.com/MAL-2024-1317/): Malicious code in epc-primer-ui-tags (npm) (malicious package)
- [MAL-2024-1316](https://insights.sbomify.com/MAL-2024-1316/): Malicious code in epc-notification-setting-web (npm) (malicious package)
- [MAL-2024-1315](https://insights.sbomify.com/MAL-2024-1315/): Malicious code in scundev-pkg (npm) (malicious package)
- [MAL-2024-1314](https://insights.sbomify.com/MAL-2024-1314/): Malicious code in viseshthemed (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/102/
