# Vulnerabilities published in 2024


- [MAL-2024-12089](https://insights.sbomify.com/MAL-2024-12089/): Malicious code in react-native-simpl (npm) (malicious package)
- [MAL-2024-12088](https://insights.sbomify.com/MAL-2024-12088/): Malicious code in cosmos-hub-docs-site (npm) (malicious package)
- [MAL-2024-12087](https://insights.sbomify.com/MAL-2024-12087/): Malicious code in owncloud-customgroups-dev (npm) (malicious package)
- [MAL-2024-12086](https://insights.sbomify.com/MAL-2024-12086/): Malicious code in dynamodb-data-mapper-js (npm) (malicious package)
- [MAL-2024-12085](https://insights.sbomify.com/MAL-2024-12085/): Malicious code in mono-faucet (npm) (malicious package)
- [MAL-2024-12084](https://insights.sbomify.com/MAL-2024-12084/): Malicious code in @shahwarhello/l2geth (npm) (malicious package)
- [MAL-2024-12083](https://insights.sbomify.com/MAL-2024-12083/): Malicious code in lerna-monorepo2 (npm) (malicious package)
- [MAL-2024-12082](https://insights.sbomify.com/MAL-2024-12082/): Malicious code in testbyakash2310xxxxxxxnowaympasti (npm) (malicious package)
- [MAL-2024-12081](https://insights.sbomify.com/MAL-2024-12081/): Malicious code in testbyakash2310please (npm) (malicious package)
- [MAL-2024-12080](https://insights.sbomify.com/MAL-2024-12080/): Malicious code in security-admin (npm) (malicious package)
- [MAL-2024-1208](https://insights.sbomify.com/MAL-2024-1208/): Malicious code in payable-js-ipg-sdk-suba (npm) (malicious package)
- [MAL-2024-12079](https://insights.sbomify.com/MAL-2024-12079/): Malicious code in phonepe-payment-capacitor (npm) (malicious package)
- [MAL-2024-12078](https://insights.sbomify.com/MAL-2024-12078/): Malicious code in kubernetes-jobs-javascript (npm) (malicious package)
- [MAL-2024-12077](https://insights.sbomify.com/MAL-2024-12077/): Malicious code in layerzero-v2 (npm) (malicious package)
- [MAL-2024-12076](https://insights.sbomify.com/MAL-2024-12076/): Malicious code in api-demo-sample-lib1 (npm) (malicious package)
- [MAL-2024-12075](https://insights.sbomify.com/MAL-2024-12075/): Malicious code in grafana-report-panel (npm) (malicious package)
- [MAL-2024-12074](https://insights.sbomify.com/MAL-2024-12074/): Malicious code in @rrvis/code-mapper (npm) (malicious package)
- [MAL-2024-12073](https://insights.sbomify.com/MAL-2024-12073/): Malicious code in shahwar-demo (npm) (malicious package)
- [MAL-2024-12072](https://insights.sbomify.com/MAL-2024-12072/): Malicious code in @rrvis/dialog (npm) (malicious package)
- [MAL-2024-12071](https://insights.sbomify.com/MAL-2024-12071/): Malicious code in mindmeld-ui (npm) (malicious package)
- [MAL-2024-12070](https://insights.sbomify.com/MAL-2024-12070/): Malicious code in yb2bacceleratorstorefront-web (npm) (malicious package)
- [MAL-2024-1207](https://insights.sbomify.com/MAL-2024-1207/): Malicious code in payable-js-ipg-sdk (npm) (malicious package)
- [MAL-2024-12069](https://insights.sbomify.com/MAL-2024-12069/): Malicious code in squirreldisk-tauri (npm) (malicious package)
- [MAL-2024-12068](https://insights.sbomify.com/MAL-2024-12068/): Malicious code in nuget.shouldly (npm) (malicious package)
- [MAL-2024-12067](https://insights.sbomify.com/MAL-2024-12067/): Malicious code in aauto-assign-team-action (npm) (malicious package)
- [MAL-2024-12066](https://insights.sbomify.com/MAL-2024-12066/): Malicious code in zarf-ui (npm) (malicious package)
- [MAL-2024-12065](https://insights.sbomify.com/MAL-2024-12065/): Malicious code in zap_contracts (npm) (malicious package)
- [MAL-2024-12064](https://insights.sbomify.com/MAL-2024-12064/): Malicious code in yb-animations (npm) (malicious package)
- [MAL-2024-12063](https://insights.sbomify.com/MAL-2024-12063/): Malicious code in yapi-to-dts (npm) (malicious package)
- [MAL-2024-12062](https://insights.sbomify.com/MAL-2024-12062/): Malicious code in xrp_set_dest_tag (npm) (malicious package)
- [MAL-2024-12061](https://insights.sbomify.com/MAL-2024-12061/): Malicious code in xeno-api (npm) (malicious package)
- [MAL-2024-12060](https://insights.sbomify.com/MAL-2024-12060/): Malicious code in woodpecker-ci (npm) (malicious package)
- [MAL-2024-1206](https://insights.sbomify.com/MAL-2024-1206/): Malicious code in f3ngtest12345677 (npm) (malicious package)
- [MAL-2024-12059](https://insights.sbomify.com/MAL-2024-12059/): Malicious code in vintage-poc (npm) (malicious package)
- [MAL-2024-12058](https://insights.sbomify.com/MAL-2024-12058/): Malicious code in upload-artifact (npm) (malicious package)
- [MAL-2024-12057](https://insights.sbomify.com/MAL-2024-12057/): Malicious code in upgrade-solara (npm) (malicious package)
- [MAL-2024-12056](https://insights.sbomify.com/MAL-2024-12056/): Malicious code in uiqweyruhen (npm) (malicious package)
- [MAL-2024-12055](https://insights.sbomify.com/MAL-2024-12055/): Malicious code in uieyruhen (npm) (malicious package)
- [MAL-2024-12054](https://insights.sbomify.com/MAL-2024-12054/): Malicious code in uid-2-test-ts (npm) (malicious package)
- [MAL-2024-12053](https://insights.sbomify.com/MAL-2024-12053/): Malicious code in uflexreward-utils (npm) (malicious package)
- [MAL-2024-12052](https://insights.sbomify.com/MAL-2024-12052/): Malicious code in uflexreward-test (npm) (malicious package)
- [MAL-2024-12051](https://insights.sbomify.com/MAL-2024-12051/): Malicious code in uflexreward-core (npm) (malicious package)
- [MAL-2024-12050](https://insights.sbomify.com/MAL-2024-12050/): Malicious code in uflexreward-api (npm) (malicious package)
- [MAL-2024-1205](https://insights.sbomify.com/MAL-2024-1205/): Malicious code in djs-colora (npm) (malicious package)
- [MAL-2024-12049](https://insights.sbomify.com/MAL-2024-12049/): Malicious code in uflexreward (npm) (malicious package)
- [MAL-2024-12048](https://insights.sbomify.com/MAL-2024-12048/): Malicious code in tournament_service (npm) (malicious package)
- [MAL-2024-12047](https://insights.sbomify.com/MAL-2024-12047/): Malicious code in tools_platform (npm) (malicious package)
- [MAL-2024-12046](https://insights.sbomify.com/MAL-2024-12046/): Malicious code in tiktok_embed_v2 (npm) (malicious package)
- [MAL-2024-12045](https://insights.sbomify.com/MAL-2024-12045/): Malicious code in tiktok-ui (npm) (malicious package)
- [MAL-2024-12044](https://insights.sbomify.com/MAL-2024-12044/): Malicious code in template-fullstack (npm) (malicious package)
- [MAL-2024-12043](https://insights.sbomify.com/MAL-2024-12043/): Malicious code in ssk (npm) (malicious package)
- [MAL-2024-12042](https://insights.sbomify.com/MAL-2024-12042/): Malicious code in spinal-env-viewer-plugin-documentation-service (npm) (malicious package)
- [MAL-2024-12041](https://insights.sbomify.com/MAL-2024-12041/): Malicious code in spid-csvautofilljs (npm) (malicious package)
- [MAL-2024-12040](https://insights.sbomify.com/MAL-2024-12040/): Malicious code in slack-sns (npm) (malicious package)
- [MAL-2024-1204](https://insights.sbomify.com/MAL-2024-1204/): Malicious code in discord-logs-v14 (npm) (malicious package)
- [MAL-2024-12039](https://insights.sbomify.com/MAL-2024-12039/): Malicious code in setup-node (npm) (malicious package)
- [MAL-2024-12038](https://insights.sbomify.com/MAL-2024-12038/): Malicious code in serum-dex-ui (npm) (malicious package)
- [MAL-2024-12037](https://insights.sbomify.com/MAL-2024-12037/): Malicious code in self-qualification-dialog-sdk (npm) (malicious package)
- [MAL-2024-12036](https://insights.sbomify.com/MAL-2024-12036/): Malicious code in secret-scanning-custom-notifications (npm) (malicious package)
- [MAL-2024-12035](https://insights.sbomify.com/MAL-2024-12035/): Malicious code in scalavex (npm) (malicious package)
- [MAL-2024-12034](https://insights.sbomify.com/MAL-2024-12034/): Malicious code in rodas (npm) (malicious package)
- [MAL-2024-12033](https://insights.sbomify.com/MAL-2024-12033/): Malicious code in reftest-helper-for-ae1x (npm) (malicious package)
- [MAL-2024-12032](https://insights.sbomify.com/MAL-2024-12032/): Malicious code in reftest-helper (npm) (malicious package)
- [MAL-2024-12031](https://insights.sbomify.com/MAL-2024-12031/): Malicious code in react-multer (npm) (malicious package)
- [MAL-2024-12030](https://insights.sbomify.com/MAL-2024-12030/): Malicious code in rdjjfjooirpp.js (npm) (malicious package)
- [MAL-2024-1203](https://insights.sbomify.com/MAL-2024-1203/): Malicious code in nespresso-bi (npm) (malicious package)
- [MAL-2024-12029](https://insights.sbomify.com/MAL-2024-12029/): Malicious code in rafarafa_package (npm) (malicious package)
- [MAL-2024-12028](https://insights.sbomify.com/MAL-2024-12028/): Malicious code in quintoandar-logger (npm) (malicious package)
- [MAL-2024-12027](https://insights.sbomify.com/MAL-2024-12027/): Malicious code in pzh (npm) (malicious package)
- [MAL-2024-12026](https://insights.sbomify.com/MAL-2024-12026/): Malicious code in pushservicejs (npm) (malicious package)
- [MAL-2024-12025](https://insights.sbomify.com/MAL-2024-12025/): Malicious code in private-bug-bounty-secret (npm) (malicious package)
- [MAL-2024-12024](https://insights.sbomify.com/MAL-2024-12024/): Malicious code in private-bug-bounty (npm) (malicious package)
- [MAL-2024-12023](https://insights.sbomify.com/MAL-2024-12023/): Malicious code in ppw (npm) (malicious package)
- [MAL-2024-12022](https://insights.sbomify.com/MAL-2024-12022/): Malicious code in pnpm-run (npm) (malicious package)
- [MAL-2024-12021](https://insights.sbomify.com/MAL-2024-12021/): Malicious code in playwright-1.48 (npm) (malicious package)
- [MAL-2024-12020](https://insights.sbomify.com/MAL-2024-12020/): Malicious code in payment-tx-params-api (npm) (malicious package)
- [MAL-2024-1202](https://insights.sbomify.com/MAL-2024-1202/): Malicious code in lyft-core (PyPI) (malicious package)
- [MAL-2024-12019](https://insights.sbomify.com/MAL-2024-12019/): Malicious code in owc-gravityforms-zaaksysteem (npm) (malicious package)
- [MAL-2024-12018](https://insights.sbomify.com/MAL-2024-12018/): Malicious code in otc-echo (npm) (malicious package)
- [MAL-2024-12017](https://insights.sbomify.com/MAL-2024-12017/): Malicious code in oj-odcs-selector-common (npm) (malicious package)
- [MAL-2024-12016](https://insights.sbomify.com/MAL-2024-12016/): Malicious code in oj-odcs-product-selector (npm) (malicious package)
- [MAL-2024-12015](https://insights.sbomify.com/MAL-2024-12015/): Malicious code in oj-odcs-linked-text (npm) (malicious package)
- [MAL-2024-12014](https://insights.sbomify.com/MAL-2024-12014/): Malicious code in oj-odcs-fontawesome (npm) (malicious package)
- [MAL-2024-12013](https://insights.sbomify.com/MAL-2024-12013/): Malicious code in oj-odcs-category-selector (npm) (malicious package)
- [MAL-2024-12012](https://insights.sbomify.com/MAL-2024-12012/): Malicious code in o-share (npm) (malicious package)
- [MAL-2024-12011](https://insights.sbomify.com/MAL-2024-12011/): Malicious code in nimiq-rewards-calculator (npm) (malicious package)
- [MAL-2024-12010](https://insights.sbomify.com/MAL-2024-12010/): Malicious code in nextjs-app-router (npm) (malicious package)
- [MAL-2024-1201](https://insights.sbomify.com/MAL-2024-1201/): Malicious code in lodash-electron (npm) (malicious package)
- [MAL-2024-12009](https://insights.sbomify.com/MAL-2024-12009/): Malicious code in network-test-poc (npm) (malicious package)
- [MAL-2024-12008](https://insights.sbomify.com/MAL-2024-12008/): Malicious code in nerd4node (npm) (malicious package)
- [MAL-2024-12007](https://insights.sbomify.com/MAL-2024-12007/): Malicious code in my-app-name (npm) (malicious package)
- [MAL-2024-12006](https://insights.sbomify.com/MAL-2024-12006/): Malicious code in mryayaa (npm) (malicious package)
- [MAL-2024-12005](https://insights.sbomify.com/MAL-2024-12005/): Malicious code in mockapie (npm) (malicious package)
- [MAL-2024-12004](https://insights.sbomify.com/MAL-2024-12004/): Malicious code in mina-bridge (npm) (malicious package)
- [MAL-2024-12003](https://insights.sbomify.com/MAL-2024-12003/): Malicious code in meu-script (npm) (malicious package)
- [MAL-2024-12002](https://insights.sbomify.com/MAL-2024-12002/): Malicious code in metamodel-editor (npm) (malicious package)
- [MAL-2024-12001](https://insights.sbomify.com/MAL-2024-12001/): Malicious code in mediafragment (npm) (malicious package)
- [MAL-2024-12000](https://insights.sbomify.com/MAL-2024-12000/): Malicious code in maplibre (npm) (malicious package)
- [MAL-2024-1200](https://insights.sbomify.com/MAL-2024-1200/): Malicious code in context-hydrating (npm) (malicious package)
- [MAL-2024-120](https://insights.sbomify.com/MAL-2024-120/): Malicious code in discord.js-selfbot-dmall-v13 (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/107/