# Vulnerabilities published in 2024


- [MAL-2024-12179](https://insights.sbomify.com/MAL-2024-12179/): Malicious code in @dz-lib/icon (npm) (malicious package)
- [MAL-2024-12178](https://insights.sbomify.com/MAL-2024-12178/): Malicious code in @dz-lib/dz-cli (npm) (malicious package)
- [MAL-2024-12177](https://insights.sbomify.com/MAL-2024-12177/): Malicious code in babel-preset-app (npm) (malicious package)
- [MAL-2024-12176](https://insights.sbomify.com/MAL-2024-12176/): Malicious code in valid-package (npm) (malicious package)
- [MAL-2024-12175](https://insights.sbomify.com/MAL-2024-12175/): Malicious code in fider (npm) (malicious package)
- [MAL-2024-12174](https://insights.sbomify.com/MAL-2024-12174/): Malicious code in xeno.dll (npm) (malicious package)
- [MAL-2024-12173](https://insights.sbomify.com/MAL-2024-12173/): Malicious code in solaraexecutor (npm) (malicious package)
- [MAL-2024-12172](https://insights.sbomify.com/MAL-2024-12172/): Malicious code in officebrowserfeedback (npm) (malicious package)
- [MAL-2024-12171](https://insights.sbomify.com/MAL-2024-12171/): Malicious code in mx-exchange-docs (npm) (malicious package)
- [MAL-2024-12170](https://insights.sbomify.com/MAL-2024-12170/): Malicious code in bcoin-full (npm) (malicious package)
- [MAL-2024-1217](https://insights.sbomify.com/MAL-2024-1217/): Malicious code in @lbnqduy11805/expert-waddle (npm) (malicious package)
- [MAL-2024-12169](https://insights.sbomify.com/MAL-2024-12169/): Malicious code in faucet-microservice (npm) (malicious package)
- [MAL-2024-12168](https://insights.sbomify.com/MAL-2024-12168/): Malicious code in @swiggy-private/js-utils (npm) (malicious package)
- [MAL-2024-12167](https://insights.sbomify.com/MAL-2024-12167/): Malicious code in @swiggy-private/dls-web-core (npm) (malicious package)
- [MAL-2024-12166](https://insights.sbomify.com/MAL-2024-12166/): Malicious code in @swiggy-private/analytics (npm) (malicious package)
- [MAL-2024-12165](https://insights.sbomify.com/MAL-2024-12165/): Malicious code in @swiggy-private/aatm-nirbhar-ui (npm) (malicious package)
- [MAL-2024-12164](https://insights.sbomify.com/MAL-2024-12164/): Malicious code in @swiggy-private/aatm-nirbhar-build (npm) (malicious package)
- [MAL-2024-12163](https://insights.sbomify.com/MAL-2024-12163/): Malicious code in @swiggy-private/aatm-nirbhar-bharat-ui (npm) (malicious package)
- [MAL-2024-12162](https://insights.sbomify.com/MAL-2024-12162/): Malicious code in v2-foundry (npm) (malicious package)
- [MAL-2024-12161](https://insights.sbomify.com/MAL-2024-12161/): Malicious code in crypto-buddies (npm) (malicious package)
- [MAL-2024-12160](https://insights.sbomify.com/MAL-2024-12160/): Malicious code in unisocks (npm) (malicious package)
- [MAL-2024-1216](https://insights.sbomify.com/MAL-2024-1216/): Malicious code in @lbnqduy11805/congenial-octo-guide (npm) (malicious package)
- [MAL-2024-12159](https://insights.sbomify.com/MAL-2024-12159/): Malicious code in types-node (npm) (malicious package)
- [MAL-2024-12158](https://insights.sbomify.com/MAL-2024-12158/): Malicious code in tokenize-lib (npm) (malicious package)
- [MAL-2024-12157](https://insights.sbomify.com/MAL-2024-12157/): Malicious code in staticdocs-starter (npm) (malicious package)
- [MAL-2024-12156](https://insights.sbomify.com/MAL-2024-12156/): Malicious code in sovryn (npm) (malicious package)
- [MAL-2024-12155](https://insights.sbomify.com/MAL-2024-12155/): Malicious code in solc-bin (npm) (malicious package)
- [MAL-2024-12154](https://insights.sbomify.com/MAL-2024-12154/): Malicious code in onyx-monorepo (npm) (malicious package)
- [MAL-2024-12153](https://insights.sbomify.com/MAL-2024-12153/): Malicious code in lido-on-ethereum (npm) (malicious package)
- [MAL-2024-12152](https://insights.sbomify.com/MAL-2024-12152/): Malicious code in lfs-au-website-build (npm) (malicious package)
- [MAL-2024-12151](https://insights.sbomify.com/MAL-2024-12151/): Malicious code in launchpad6-dev-ops (npm) (malicious package)
- [MAL-2024-12150](https://insights.sbomify.com/MAL-2024-12150/): Malicious code in kubehook (npm) (malicious package)
- [MAL-2024-1215](https://insights.sbomify.com/MAL-2024-1215/): Malicious code in @lbnqduy11805/congenial-dollop (npm) (malicious package)
- [MAL-2024-12149](https://insights.sbomify.com/MAL-2024-12149/): Malicious code in js-dos-template (npm) (malicious package)
- [MAL-2024-12148](https://insights.sbomify.com/MAL-2024-12148/): Malicious code in jekyll-doxy (npm) (malicious package)
- [MAL-2024-12147](https://insights.sbomify.com/MAL-2024-12147/): Malicious code in idkit-monorepo (npm) (malicious package)
- [MAL-2024-12146](https://insights.sbomify.com/MAL-2024-12146/): Malicious code in docu-scripts (npm) (malicious package)
- [MAL-2024-12145](https://insights.sbomify.com/MAL-2024-12145/): Malicious code in do-not-install-this-plz (npm) (malicious package)
- [MAL-2024-12144](https://insights.sbomify.com/MAL-2024-12144/): Malicious code in devnet-deploy (npm) (malicious package)
- [MAL-2024-12143](https://insights.sbomify.com/MAL-2024-12143/): Malicious code in data-strategy (npm) (malicious package)
- [MAL-2024-12142](https://insights.sbomify.com/MAL-2024-12142/): Malicious code in core-registry-dashboardx (npm) (malicious package)
- [MAL-2024-12141](https://insights.sbomify.com/MAL-2024-12141/): Malicious code in comparison-interface (npm) (malicious package)
- [MAL-2024-12140](https://insights.sbomify.com/MAL-2024-12140/): Malicious code in centers-of-excellence (npm) (malicious package)
- [MAL-2024-1214](https://insights.sbomify.com/MAL-2024-1214/): Malicious code in @lbnqduy11805/cautious-octo-rotary-phone (npm) (malicious package)
- [MAL-2024-12139](https://insights.sbomify.com/MAL-2024-12139/): Malicious code in casino-luzern-easter-fronten (npm) (malicious package)
- [MAL-2024-12138](https://insights.sbomify.com/MAL-2024-12138/): Malicious code in binance-toolbox-nodejs (npm) (malicious package)
- [MAL-2024-12137](https://insights.sbomify.com/MAL-2024-12137/): Malicious code in proton-parking-page (npm) (malicious package)
- [MAL-2024-12136](https://insights.sbomify.com/MAL-2024-12136/): Malicious code in plugin-sitemap-coveo (npm) (malicious package)
- [MAL-2024-12135](https://insights.sbomify.com/MAL-2024-12135/): Malicious code in vesu_changelog (npm) (malicious package)
- [MAL-2024-12134](https://insights.sbomify.com/MAL-2024-12134/): Malicious code in dev-journey-app (npm) (malicious package)
- [MAL-2024-12133](https://insights.sbomify.com/MAL-2024-12133/): Malicious code in aem-react-spa (npm) (malicious package)
- [MAL-2024-12132](https://insights.sbomify.com/MAL-2024-12132/): Malicious code in zoomapps-texteditor-vuejs (npm) (malicious package)
- [MAL-2024-12131](https://insights.sbomify.com/MAL-2024-12131/): Malicious code in contentsdk-node (npm) (malicious package)
- [MAL-2024-12130](https://insights.sbomify.com/MAL-2024-12130/): Malicious code in nativescript-gainsight-px (npm) (malicious package)
- [MAL-2024-1213](https://insights.sbomify.com/MAL-2024-1213/): Malicious code in @lbnqduy11805/bookish-sniffle (npm) (malicious package)
- [MAL-2024-12129](https://insights.sbomify.com/MAL-2024-12129/): Malicious code in aws-iot-samples-util (npm) (malicious package)
- [MAL-2024-12128](https://insights.sbomify.com/MAL-2024-12128/): Malicious code in vscode-dotnet-sdk (npm) (malicious package)
- [MAL-2024-12127](https://insights.sbomify.com/MAL-2024-12127/): Malicious code in v2raya (npm) (malicious package)
- [MAL-2024-12126](https://insights.sbomify.com/MAL-2024-12126/): Malicious code in @awan_7715/model-viewer-space-opera (npm) (malicious package)
- [MAL-2024-12125](https://insights.sbomify.com/MAL-2024-12125/): Malicious code in chaos-mesh-dashboard (npm) (malicious package)
- [MAL-2024-12124](https://insights.sbomify.com/MAL-2024-12124/): Malicious code in twilio-voice-react-native-reference-server (npm) (malicious package)
- [MAL-2024-12123](https://insights.sbomify.com/MAL-2024-12123/): Malicious code in mattermost-developer-documentation (npm) (malicious package)
- [MAL-2024-12122](https://insights.sbomify.com/MAL-2024-12122/): Malicious code in dvd-for-aipc-rag (npm) (malicious package)
- [MAL-2024-12121](https://insights.sbomify.com/MAL-2024-12121/): Malicious code in solidity-ibc (npm) (malicious package)
- [MAL-2024-12120](https://insights.sbomify.com/MAL-2024-12120/): Malicious code in browseui (npm) (malicious package)
- [MAL-2024-1212](https://insights.sbomify.com/MAL-2024-1212/): Malicious code in @lbnqduy11805/animated-doodle (npm) (malicious package)
- [MAL-2024-12119](https://insights.sbomify.com/MAL-2024-12119/): Malicious code in stablecoin-aptos (npm) (malicious package)
- [MAL-2024-12118](https://insights.sbomify.com/MAL-2024-12118/): Malicious code in gravity-bridge-site (npm) (malicious package)
- [MAL-2024-12117](https://insights.sbomify.com/MAL-2024-12117/): Malicious code in react-release-manager (npm) (malicious package)
- [MAL-2024-12116](https://insights.sbomify.com/MAL-2024-12116/): Malicious code in old-celo-identity (npm) (malicious package)
- [MAL-2024-12115](https://insights.sbomify.com/MAL-2024-12115/): Malicious code in distylai (npm) (malicious package)
- [MAL-2024-12114](https://insights.sbomify.com/MAL-2024-12114/): Malicious code in react-spring-latest (npm) (malicious package)
- [MAL-2024-12113](https://insights.sbomify.com/MAL-2024-12113/): Malicious code in testforyt7hb (npm) (malicious package)
- [MAL-2024-12112](https://insights.sbomify.com/MAL-2024-12112/): Malicious code in tree-sitter-dockerfile (npm) (malicious package)
- [MAL-2024-12111](https://insights.sbomify.com/MAL-2024-12111/): Malicious code in cloudinary-ct-run-sub (npm) (malicious package)
- [MAL-2024-12110](https://insights.sbomify.com/MAL-2024-12110/): Malicious code in precompiled-wasabi100 (npm) (malicious package)
- [MAL-2024-1211](https://insights.sbomify.com/MAL-2024-1211/): Malicious code in tokenaddress (npm) (malicious package)
- [MAL-2024-12109](https://insights.sbomify.com/MAL-2024-12109/): Malicious code in rsk-transaction-helper (npm) (malicious package)
- [MAL-2024-12108](https://insights.sbomify.com/MAL-2024-12108/): Malicious code in wdio-common (npm) (malicious package)
- [MAL-2024-12107](https://insights.sbomify.com/MAL-2024-12107/): Malicious code in bridge-transaction-parser-hop400 (npm) (malicious package)
- [MAL-2024-12106](https://insights.sbomify.com/MAL-2024-12106/): Malicious code in powpeg (npm) (malicious package)
- [MAL-2024-12105](https://insights.sbomify.com/MAL-2024-12105/): Malicious code in wp-crontrol (npm) (malicious package)
- [MAL-2024-12104](https://insights.sbomify.com/MAL-2024-12104/): Malicious code in oauth2-jwt-bearer (npm) (malicious package)
- [MAL-2024-12103](https://insights.sbomify.com/MAL-2024-12103/): Malicious code in ing-lib-lease-calculator (npm) (malicious package)
- [MAL-2024-12102](https://insights.sbomify.com/MAL-2024-12102/): Malicious code in ing-feat-business-lending-financieringscheck (npm) (malicious package)
- [MAL-2024-12101](https://insights.sbomify.com/MAL-2024-12101/): Malicious code in ing-feat-business-intermediary-lease-calculator (npm) (malicious package)
- [MAL-2024-12100](https://insights.sbomify.com/MAL-2024-12100/): Malicious code in tree-sitter-r (npm) (malicious package)
- [MAL-2024-1210](https://insights.sbomify.com/MAL-2024-1210/): Malicious code in recxn-logs (npm) (malicious package)
- [MAL-2024-121](https://insights.sbomify.com/MAL-2024-121/): Malicious code in discord.js-selfbot-dmallfriends-v13 (npm) (malicious package)
- [MAL-2024-12099](https://insights.sbomify.com/MAL-2024-12099/): Malicious code in opsgeniewebhook (npm) (malicious package)
- [MAL-2024-12098](https://insights.sbomify.com/MAL-2024-12098/): Malicious code in widgets-mainappointments (npm) (malicious package)
- [MAL-2024-12097](https://insights.sbomify.com/MAL-2024-12097/): Malicious code in openai-extension (npm) (malicious package)
- [MAL-2024-12096](https://insights.sbomify.com/MAL-2024-12096/): Malicious code in lib-wallet-store (npm) (malicious package)
- [MAL-2024-12095](https://insights.sbomify.com/MAL-2024-12095/): Malicious code in id-assert-authz-grant-client (npm) (malicious package)
- [MAL-2024-12094](https://insights.sbomify.com/MAL-2024-12094/): Malicious code in ui-forms-embed-components-reporting (npm) (malicious package)
- [MAL-2024-12093](https://insights.sbomify.com/MAL-2024-12093/): Malicious code in conversations-embed (npm) (malicious package)
- [MAL-2024-12092](https://insights.sbomify.com/MAL-2024-12092/): Malicious code in parliament-ui-components (npm) (malicious package)
- [MAL-2024-12091](https://insights.sbomify.com/MAL-2024-12091/): Malicious code in app-settings-template (npm) (malicious package)
- [MAL-2024-12090](https://insights.sbomify.com/MAL-2024-12090/): Malicious code in goji-js-org (npm) (malicious package)
- [MAL-2024-1209](https://insights.sbomify.com/MAL-2024-1209/): Malicious code in recxn-backup (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/106/