# Vulnerabilities published in 2024


- [MAL-2024-1313](https://insights.sbomify.com/MAL-2024-1313/): Malicious code in not-exist-lykos-poc2 (npm) (malicious package)
- [MAL-2024-1312](https://insights.sbomify.com/MAL-2024-1312/): Malicious code in actions-next-bundle-analyzer (npm) (malicious package)
- [MAL-2024-1311](https://insights.sbomify.com/MAL-2024-1311/): Malicious code in vue2-amis-custom-widget-kk (npm) (malicious package)
- [MAL-2024-1310](https://insights.sbomify.com/MAL-2024-1310/): Malicious code in vue2-amis-custom-widget-k (npm) (malicious package)
- [MAL-2024-131](https://insights.sbomify.com/MAL-2024-131/): Malicious code in pd-ui-kit (npm) (malicious package)
- [MAL-2024-1309](https://insights.sbomify.com/MAL-2024-1309/): Malicious code in npm-package-shirley (npm) (malicious package)
- [MAL-2024-1308](https://insights.sbomify.com/MAL-2024-1308/): Malicious code in not-exist-lykos-poc (npm) (malicious package)
- [MAL-2024-1307](https://insights.sbomify.com/MAL-2024-1307/): Malicious code in ethutility (npm) (malicious package)
- [MAL-2024-1306](https://insights.sbomify.com/MAL-2024-1306/): Malicious code in ethers-transactions (npm) (malicious package)
- [MAL-2024-1305](https://insights.sbomify.com/MAL-2024-1305/): Malicious code in discord.js-red (npm) (malicious package)
- [MAL-2024-1304](https://insights.sbomify.com/MAL-2024-1304/): Malicious code in minecraft-net-core-services (npm) (malicious package)
- [MAL-2024-1303](https://insights.sbomify.com/MAL-2024-1303/): Malicious code in rollremainsweet (npm) (malicious package)
- [MAL-2024-1302](https://insights.sbomify.com/MAL-2024-1302/): Malicious code in relinquishsecurecontinuous (npm) (malicious package)
- [MAL-2024-1301](https://insights.sbomify.com/MAL-2024-1301/): Malicious code in pleadappointmentat (npm) (malicious package)
- [MAL-2024-1300](https://insights.sbomify.com/MAL-2024-1300/): Malicious code in pardonbeefconfession (npm) (malicious package)
- [MAL-2024-130](https://insights.sbomify.com/MAL-2024-130/): Malicious code in noblox.js-proxy-server (npm) (malicious package)
- [MAL-2024-13](https://insights.sbomify.com/MAL-2024-13/): Malicious code in @serenity-web/common-helpers (npm) (malicious package)
- [MAL-2024-1299](https://insights.sbomify.com/MAL-2024-1299/): Malicious code in driftdegreerubbish (npm) (malicious package)
- [MAL-2024-1298](https://insights.sbomify.com/MAL-2024-1298/): Malicious code in dev-ansi-terminal (npm) (malicious package)
- [MAL-2024-1297](https://insights.sbomify.com/MAL-2024-1297/): Malicious code in colors-main (npm) (malicious package)
- [MAL-2024-1296](https://insights.sbomify.com/MAL-2024-1296/): Malicious code in waveapi (npm) (malicious package)
- [MAL-2024-1295](https://insights.sbomify.com/MAL-2024-1295/): Malicious code in teleport-app-example-node (npm) (malicious package)
- [MAL-2024-1294](https://insights.sbomify.com/MAL-2024-1294/): Malicious code in tari-explorer (npm) (malicious package)
- [MAL-2024-1293](https://insights.sbomify.com/MAL-2024-1293/): Malicious code in swift-docc-rendeeeeeer (npm) (malicious package)
- [MAL-2024-1292](https://insights.sbomify.com/MAL-2024-1292/): Malicious code in sid-client-manager (npm) (malicious package)
- [MAL-2024-1291](https://insights.sbomify.com/MAL-2024-1291/): Malicious code in shard-packages (npm) (malicious package)
- [MAL-2024-1290](https://insights.sbomify.com/MAL-2024-1290/): Malicious code in samplenodejsservice (npm) (malicious package)
- [MAL-2024-129](https://insights.sbomify.com/MAL-2024-129/): Malicious code in uptime-bot (npm) (malicious package)
- [MAL-2024-1289](https://insights.sbomify.com/MAL-2024-1289/): Malicious code in monitoring-coverage (npm) (malicious package)
- [MAL-2024-1288](https://insights.sbomify.com/MAL-2024-1288/): Malicious code in lambda-iss-location (npm) (malicious package)
- [MAL-2024-1287](https://insights.sbomify.com/MAL-2024-1287/): Malicious code in ecs-cdk (npm) (malicious package)
- [MAL-2024-1286](https://insights.sbomify.com/MAL-2024-1286/): Malicious code in djs-status (npm) (malicious package)
- [MAL-2024-1285](https://insights.sbomify.com/MAL-2024-1285/): Malicious code in djs-embeds-v2 (npm) (malicious package)
- [MAL-2024-1284](https://insights.sbomify.com/MAL-2024-1284/): Malicious code in discord-caches (npm) (malicious package)
- [MAL-2024-1283](https://insights.sbomify.com/MAL-2024-1283/): Malicious code in cuckoo-3-web-ui-tooling (npm) (malicious package)
- [MAL-2024-1282](https://insights.sbomify.com/MAL-2024-1282/): Malicious code in blockchain-explorer-api (npm) (malicious package)
- [MAL-2024-1281](https://insights.sbomify.com/MAL-2024-1281/): Malicious code in arkime (npm) (malicious package)
- [MAL-2024-1280](https://insights.sbomify.com/MAL-2024-1280/): Malicious code in @symplr-ux/alloy-icons (npm) (malicious package)
- [MAL-2024-128](https://insights.sbomify.com/MAL-2024-128/): Malicious code in uhqsniper (npm) (malicious package)
- [MAL-2024-1279](https://insights.sbomify.com/MAL-2024-1279/): Malicious code in djs-log (npm) (malicious package)
- [MAL-2024-1278](https://insights.sbomify.com/MAL-2024-1278/): Malicious code in somepackage-marksl (npm) (malicious package)
- [MAL-2024-1277](https://insights.sbomify.com/MAL-2024-1277/): Malicious code in malpac (npm) (malicious package)
- [MAL-2024-1276](https://insights.sbomify.com/MAL-2024-1276/): Malicious code in cz-ifood-conventional-changelog (npm) (malicious package)
- [MAL-2024-1275](https://insights.sbomify.com/MAL-2024-1275/): Malicious code in @portal-packages/utils (npm) (malicious package)
- [MAL-2024-1274](https://insights.sbomify.com/MAL-2024-1274/): Malicious code in ui-common-components-angular (npm) (malicious package)
- [MAL-2024-1273](https://insights.sbomify.com/MAL-2024-1273/): Malicious code in metrics-balancer (npm) (malicious package)
- [MAL-2024-1272](https://insights.sbomify.com/MAL-2024-1272/): Malicious code in @portal-packages/core (npm) (malicious package)
- [MAL-2024-1271](https://insights.sbomify.com/MAL-2024-1271/): Malicious code in web-ar-player (npm) (malicious package)
- [MAL-2024-1270](https://insights.sbomify.com/MAL-2024-1270/): Malicious code in snap-orca (npm) (malicious package)
- [MAL-2024-127](https://insights.sbomify.com/MAL-2024-127/): Malicious code in noleakdmall (npm) (malicious package)
- [MAL-2024-1269](https://insights.sbomify.com/MAL-2024-1269/): Malicious code in hosted-lenses-ui (npm) (malicious package)
- [MAL-2024-1268](https://insights.sbomify.com/MAL-2024-1268/): Malicious code in bluepurellwalker (npm) (malicious package)
- [MAL-2024-1267](https://insights.sbomify.com/MAL-2024-1267/): Malicious code in commitlint-config-ifood (npm) (malicious package)
- [MAL-2024-1266](https://insights.sbomify.com/MAL-2024-1266/): Malicious code in wt-fe-buz-utilities-collection (npm) (malicious package)
- [MAL-2024-1265](https://insights.sbomify.com/MAL-2024-1265/): Malicious code in viiiivek (npm) (malicious package)
- [MAL-2024-1264](https://insights.sbomify.com/MAL-2024-1264/): Malicious code in trip-component-platform-online-usp (npm) (malicious package)
- [MAL-2024-1263](https://insights.sbomify.com/MAL-2024-1263/): Malicious code in trip-component-platform-online-prepermission-popup (npm) (malicious package)
- [MAL-2024-1262](https://insights.sbomify.com/MAL-2024-1262/): Malicious code in trip-component-platform-online-header (npm) (malicious package)
- [MAL-2024-1261](https://insights.sbomify.com/MAL-2024-1261/): Malicious code in trip-component-platform-online-goto (npm) (malicious package)
- [MAL-2024-1260](https://insights.sbomify.com/MAL-2024-1260/): Malicious code in trip-component-platform-online-footer (npm) (malicious package)
- [MAL-2024-126](https://insights.sbomify.com/MAL-2024-126/): Malicious code in naoi.js (npm) (malicious package)
- [MAL-2024-1259](https://insights.sbomify.com/MAL-2024-1259/): Malicious code in trip-component-platform-online-cookie-banner (npm) (malicious package)
- [MAL-2024-1258](https://insights.sbomify.com/MAL-2024-1258/): Malicious code in heroicons1 (npm) (malicious package)
- [MAL-2024-1257](https://insights.sbomify.com/MAL-2024-1257/): Malicious code in discourse-markdown-it (npm) (malicious package)
- [MAL-2024-1256](https://insights.sbomify.com/MAL-2024-1256/): Malicious code in discourse-i18n (npm) (malicious package)
- [MAL-2024-1255](https://insights.sbomify.com/MAL-2024-1255/): Malicious code in deprecation-silencer (npm) (malicious package)
- [MAL-2024-1254](https://insights.sbomify.com/MAL-2024-1254/): Malicious code in reqargs (PyPI) (malicious package)
- [MAL-2024-1253](https://insights.sbomify.com/MAL-2024-1253/): Malicious code in stake-api (npm) (malicious package)
- [MAL-2024-1252](https://insights.sbomify.com/MAL-2024-1252/): Malicious code in test-npm-lifecycle (npm) (malicious package)
- [MAL-2024-1251](https://insights.sbomify.com/MAL-2024-1251/): Malicious code in shuaishuaiqiang (npm) (malicious package)
- [MAL-2024-1250](https://insights.sbomify.com/MAL-2024-1250/): Malicious code in shuaishuai (npm) (malicious package)
- [MAL-2024-125](https://insights.sbomify.com/MAL-2024-125/): Malicious code in dmalldiscordfriends (npm) (malicious package)
- [MAL-2024-1249](https://insights.sbomify.com/MAL-2024-1249/): Malicious code in shuaiqiang (npm) (malicious package)
- [MAL-2024-1248](https://insights.sbomify.com/MAL-2024-1248/): Malicious code in benjimain (npm) (malicious package)
- [MAL-2024-1247](https://insights.sbomify.com/MAL-2024-1247/): Malicious code in @sber-site/sbercraft-nova-kit (npm) (malicious package)
- [MAL-2024-1246](https://insights.sbomify.com/MAL-2024-1246/): Malicious code in @sber-sd/assistant-web-sdk (npm) (malicious package)
- [MAL-2024-1245](https://insights.sbomify.com/MAL-2024-1245/): Malicious code in @lbnqduy11805/verbose-pancake (npm) (malicious package)
- [MAL-2024-1244](https://insights.sbomify.com/MAL-2024-1244/): Malicious code in @lbnqduy11805/urban-octo-adventure (npm) (malicious package)
- [MAL-2024-1243](https://insights.sbomify.com/MAL-2024-1243/): Malicious code in @lbnqduy11805/turbo-octo-memory (npm) (malicious package)
- [MAL-2024-1242](https://insights.sbomify.com/MAL-2024-1242/): Malicious code in @lbnqduy11805/super-duper-train (npm) (malicious package)
- [MAL-2024-1241](https://insights.sbomify.com/MAL-2024-1241/): Malicious code in @lbnqduy11805/sturdy-waddle (npm) (malicious package)
- [MAL-2024-1240](https://insights.sbomify.com/MAL-2024-1240/): Malicious code in @lbnqduy11805/sturdy-chainsaw (npm) (malicious package)
- [MAL-2024-124](https://insights.sbomify.com/MAL-2024-124/): Malicious code in discordjs-selfbot-v33 (npm) (malicious package)
- [MAL-2024-1239](https://insights.sbomify.com/MAL-2024-1239/): Malicious code in @lbnqduy11805/stunning-octo-parakeet (npm) (malicious package)
- [MAL-2024-1238](https://insights.sbomify.com/MAL-2024-1238/): Malicious code in @lbnqduy11805/stunning-fishstick (npm) (malicious package)
- [MAL-2024-12372](https://insights.sbomify.com/MAL-2024-12372/): Malicious code in zip-me (PyPI) (malicious package)
- [MAL-2024-12371](https://insights.sbomify.com/MAL-2024-12371/): Malicious code in yt-yson-bindings (PyPI) (malicious package)
- [MAL-2024-12370](https://insights.sbomify.com/MAL-2024-12370/): Malicious code in whoisbuild (PyPI) (malicious package)
- [MAL-2024-1237](https://insights.sbomify.com/MAL-2024-1237/): Malicious code in @lbnqduy11805/studious-octo-waddle (npm) (malicious package)
- [MAL-2024-12369](https://insights.sbomify.com/MAL-2024-12369/): Malicious code in wehaveatogether (PyPI) (malicious package)
- [MAL-2024-12368](https://insights.sbomify.com/MAL-2024-12368/): Malicious code in wave-opensdk (PyPI) (malicious package)
- [MAL-2024-12367](https://insights.sbomify.com/MAL-2024-12367/): Malicious code in ttat-api-test (PyPI) (malicious package)
- [MAL-2024-12366](https://insights.sbomify.com/MAL-2024-12366/): Malicious code in ttat-api (PyPI) (malicious package)
- [MAL-2024-12365](https://insights.sbomify.com/MAL-2024-12365/): Malicious code in transformars (PyPI) (malicious package)
- [MAL-2024-12364](https://insights.sbomify.com/MAL-2024-12364/): Malicious code in tiktok-session-lite-sdk (PyPI) (malicious package)
- [MAL-2024-12363](https://insights.sbomify.com/MAL-2024-12363/): Malicious code in threading-assistant (PyPI) (malicious package)
- [MAL-2024-12362](https://insights.sbomify.com/MAL-2024-12362/): Malicious code in thethreadingassistant (PyPI) (malicious package)
- [MAL-2024-12361](https://insights.sbomify.com/MAL-2024-12361/): Malicious code in test-tool-devdevrl-hackerone (PyPI) (malicious package)
- [MAL-2024-12360](https://insights.sbomify.com/MAL-2024-12360/): Malicious code in test-packages2 (PyPI) (malicious package)
- [MAL-2024-1236](https://insights.sbomify.com/MAL-2024-1236/): Malicious code in @lbnqduy11805/studious-memory (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/103/
