# Vulnerabilities published in 2024


- [MAL-2024-12](https://insights.sbomify.com/MAL-2024-12/): Malicious code in @serenity-web/common-assets (npm) (malicious package)
- [MAL-2024-11999](https://insights.sbomify.com/MAL-2024-11999/): Malicious code in manajemenservice (npm) (malicious package)
- [MAL-2024-11998](https://insights.sbomify.com/MAL-2024-11998/): Malicious code in linecorp (npm) (malicious package)
- [MAL-2024-11997](https://insights.sbomify.com/MAL-2024-11997/): Malicious code in internallib_v871 (npm) (malicious package)
- [MAL-2024-11996](https://insights.sbomify.com/MAL-2024-11996/): Malicious code in internallib_v693 (npm) (malicious package)
- [MAL-2024-11995](https://insights.sbomify.com/MAL-2024-11995/): Malicious code in internallib_v420 (npm) (malicious package)
- [MAL-2024-11994](https://insights.sbomify.com/MAL-2024-11994/): Malicious code in internallib_v15 (npm) (malicious package)
- [MAL-2024-11993](https://insights.sbomify.com/MAL-2024-11993/): Malicious code in iabgpp (npm) (malicious package)
- [MAL-2024-11992](https://insights.sbomify.com/MAL-2024-11992/): Malicious code in hyperion-react-testapp (npm) (malicious package)
- [MAL-2024-11991](https://insights.sbomify.com/MAL-2024-11991/): Malicious code in host-exploit (npm) (malicious package)
- [MAL-2024-11990](https://insights.sbomify.com/MAL-2024-11990/): Malicious code in healenium (npm) (malicious package)
- [MAL-2024-1199](https://insights.sbomify.com/MAL-2024-1199/): Malicious code in bugsnagmw (npm) (malicious package)
- [MAL-2024-11989](https://insights.sbomify.com/MAL-2024-11989/): Malicious code in grid-context (npm) (malicious package)
- [MAL-2024-11988](https://insights.sbomify.com/MAL-2024-11988/): Malicious code in gps-gateway-client (npm) (malicious package)
- [MAL-2024-11987](https://insights.sbomify.com/MAL-2024-11987/): Malicious code in go-dependency-submission (npm) (malicious package)
- [MAL-2024-11986](https://insights.sbomify.com/MAL-2024-11986/): Malicious code in github-webhook-ip-validator (npm) (malicious package)
- [MAL-2024-11985](https://insights.sbomify.com/MAL-2024-11985/): Malicious code in github-account-switcher (npm) (malicious package)
- [MAL-2024-11984](https://insights.sbomify.com/MAL-2024-11984/): Malicious code in gft-view-helpers (npm) (malicious package)
- [MAL-2024-11983](https://insights.sbomify.com/MAL-2024-11983/): Malicious code in gft-sam-connector (npm) (malicious package)
- [MAL-2024-11982](https://insights.sbomify.com/MAL-2024-11982/): Malicious code in gft-model-utils (npm) (malicious package)
- [MAL-2024-11981](https://insights.sbomify.com/MAL-2024-11981/): Malicious code in gatsby-plugin-guru-export (npm) (malicious package)
- [MAL-2024-11980](https://insights.sbomify.com/MAL-2024-11980/): Malicious code in fluid-renderer (npm) (malicious package)
- [MAL-2024-1198](https://insights.sbomify.com/MAL-2024-1198/): Malicious code in locus-website (npm) (malicious package)
- [MAL-2024-11979](https://insights.sbomify.com/MAL-2024-11979/): Malicious code in firebase-simple-login (npm) (malicious package)
- [MAL-2024-11978](https://insights.sbomify.com/MAL-2024-11978/): Malicious code in evil-package-for-test2 (npm) (malicious package)
- [MAL-2024-11977](https://insights.sbomify.com/MAL-2024-11977/): Malicious code in eslint-config-extraterm (npm) (malicious package)
- [MAL-2024-11976](https://insights.sbomify.com/MAL-2024-11976/): Malicious code in eritiopitop (npm) (malicious package)
- [MAL-2024-11975](https://insights.sbomify.com/MAL-2024-11975/): Malicious code in eip-681-qr-generator (npm) (malicious package)
- [MAL-2024-11974](https://insights.sbomify.com/MAL-2024-11974/): Malicious code in ecpfs-react-data-driven-components (npm) (malicious package)
- [MAL-2024-11973](https://insights.sbomify.com/MAL-2024-11973/): Malicious code in ecpfs-react-build-scripts (npm) (malicious package)
- [MAL-2024-11972](https://insights.sbomify.com/MAL-2024-11972/): Malicious code in ecpfs-authority (npm) (malicious package)
- [MAL-2024-11971](https://insights.sbomify.com/MAL-2024-11971/): Malicious code in eb-docs (npm) (malicious package)
- [MAL-2024-11970](https://insights.sbomify.com/MAL-2024-11970/): Malicious code in easytint (npm) (malicious package)
- [MAL-2024-1197](https://insights.sbomify.com/MAL-2024-1197/): Malicious code in tme-finance (npm) (malicious package)
- [MAL-2024-11969](https://insights.sbomify.com/MAL-2024-11969/): Malicious code in docusaurus-extensions (npm) (malicious package)
- [MAL-2024-11968](https://insights.sbomify.com/MAL-2024-11968/): Malicious code in dhp-http-lib (npm) (malicious package)
- [MAL-2024-11967](https://insights.sbomify.com/MAL-2024-11967/): Malicious code in df-npm-placeholder (npm) (malicious package)
- [MAL-2024-11966](https://insights.sbomify.com/MAL-2024-11966/): Malicious code in deploy-pages (npm) (malicious package)
- [MAL-2024-11965](https://insights.sbomify.com/MAL-2024-11965/): Malicious code in dependency-review-action (npm) (malicious package)
- [MAL-2024-11964](https://insights.sbomify.com/MAL-2024-11964/): Malicious code in dep-confusion-tester (npm) (malicious package)
- [MAL-2024-11963](https://insights.sbomify.com/MAL-2024-11963/): Malicious code in deathball (npm) (malicious package)
- [MAL-2024-11962](https://insights.sbomify.com/MAL-2024-11962/): Malicious code in csp-react (npm) (malicious package)
- [MAL-2024-11961](https://insights.sbomify.com/MAL-2024-11961/): Malicious code in core-builder (npm) (malicious package)
- [MAL-2024-11960](https://insights.sbomify.com/MAL-2024-11960/): Malicious code in container-toolkit-template (npm) (malicious package)
- [MAL-2024-1196](https://insights.sbomify.com/MAL-2024-1196/): Malicious code in shopify-app-session-storage-prisma (npm) (malicious package)
- [MAL-2024-11959](https://insights.sbomify.com/MAL-2024-11959/): Malicious code in configure-pages (npm) (malicious package)
- [MAL-2024-11958](https://insights.sbomify.com/MAL-2024-11958/): Malicious code in confidential-package-nam (npm) (malicious package)
- [MAL-2024-11957](https://insights.sbomify.com/MAL-2024-11957/): Malicious code in component-detection-action (npm) (malicious package)
- [MAL-2024-11956](https://insights.sbomify.com/MAL-2024-11956/): Malicious code in cokie-secret (npm) (malicious package)
- [MAL-2024-11955](https://insights.sbomify.com/MAL-2024-11955/): Malicious code in client-mpa (npm) (malicious package)
- [MAL-2024-11954](https://insights.sbomify.com/MAL-2024-11954/): Malicious code in client-data (npm) (malicious package)
- [MAL-2024-11953](https://insights.sbomify.com/MAL-2024-11953/): Malicious code in client-consent (npm) (malicious package)
- [MAL-2024-11952](https://insights.sbomify.com/MAL-2024-11952/): Malicious code in client-cloud-phone (npm) (malicious package)
- [MAL-2024-11951](https://insights.sbomify.com/MAL-2024-11951/): Malicious code in client-analysis (npm) (malicious package)
- [MAL-2024-11950](https://insights.sbomify.com/MAL-2024-11950/): Malicious code in client-admin (npm) (malicious package)
- [MAL-2024-1195](https://insights.sbomify.com/MAL-2024-1195/): Malicious code in shopify-app-session-storage-drizzle (npm) (malicious package)
- [MAL-2024-11949](https://insights.sbomify.com/MAL-2024-11949/): Malicious code in cdp-wallet-manager (npm) (malicious package)
- [MAL-2024-11948](https://insights.sbomify.com/MAL-2024-11948/): Malicious code in cdp-agentkit-monorepo (npm) (malicious package)
- [MAL-2024-11947](https://insights.sbomify.com/MAL-2024-11947/): Malicious code in byted-gulu-ms-logger (npm) (malicious package)
- [MAL-2024-11946](https://insights.sbomify.com/MAL-2024-11946/): Malicious code in byted-example (npm) (malicious package)
- [MAL-2024-11945](https://insights.sbomify.com/MAL-2024-11945/): Malicious code in build-onchain-apps (npm) (malicious package)
- [MAL-2024-11944](https://insights.sbomify.com/MAL-2024-11944/): Malicious code in bitcoinjs-lib-v6 (npm) (malicious package)
- [MAL-2024-11943](https://insights.sbomify.com/MAL-2024-11943/): Malicious code in azure-sdk-for-java-codegen (npm) (malicious package)
- [MAL-2024-11942](https://insights.sbomify.com/MAL-2024-11942/): Malicious code in atlantis-api (npm) (malicious package)
- [MAL-2024-11941](https://insights.sbomify.com/MAL-2024-11941/): Malicious code in apache-airflow-ui (npm) (malicious package)
- [MAL-2024-11940](https://insights.sbomify.com/MAL-2024-11940/): Malicious code in actions-languageservices (npm) (malicious package)
- [MAL-2024-1194](https://insights.sbomify.com/MAL-2024-1194/): Malicious code in shopify-app-js (npm) (malicious package)
- [MAL-2024-11939](https://insights.sbomify.com/MAL-2024-11939/): Malicious code in action-testtttt (npm) (malicious package)
- [MAL-2024-11938](https://insights.sbomify.com/MAL-2024-11938/): Malicious code in abacus-frontend (npm) (malicious package)
- [MAL-2024-11937](https://insights.sbomify.com/MAL-2024-11937/): Malicious code in @metrics-service/mf-client (npm) (malicious package)
- [MAL-2024-11936](https://insights.sbomify.com/MAL-2024-11936/): Malicious code in @add-wallet-exchange/type-api-data (npm) (malicious package)
- [MAL-2024-11935](https://insights.sbomify.com/MAL-2024-11935/): Malicious code in @add-wallet-exchange/set-imported-csv-message (npm) (malicious package)
- [MAL-2024-11934](https://insights.sbomify.com/MAL-2024-11934/): Malicious code in @add-wallet-exchange/reset (npm) (malicious package)
- [MAL-2024-11933](https://insights.sbomify.com/MAL-2024-11933/): Malicious code in @add-wallet-exchange/import-type (npm) (malicious package)
- [MAL-2024-11932](https://insights.sbomify.com/MAL-2024-11932/): Malicious code in bs-auto-dark-mode (npm) (malicious package)
- [MAL-2024-11931](https://insights.sbomify.com/MAL-2024-11931/): Malicious code in @rrvis/vehicle (npm) (malicious package)
- [MAL-2024-11930](https://insights.sbomify.com/MAL-2024-11930/): Malicious code in @rrvis/util (npm) (malicious package)
- [MAL-2024-1193](https://insights.sbomify.com/MAL-2024-1193/): Malicious code in package-dfgpd-dfgdfg-24h (npm) (malicious package)
- [MAL-2024-11929](https://insights.sbomify.com/MAL-2024-11929/): Malicious code in @rrvis/ui (npm) (malicious package)
- [MAL-2024-11928](https://insights.sbomify.com/MAL-2024-11928/): Malicious code in @rrvis/logger (npm) (malicious package)
- [MAL-2024-11927](https://insights.sbomify.com/MAL-2024-11927/): Malicious code in @rrvis/epaas (npm) (malicious package)
- [MAL-2024-11926](https://insights.sbomify.com/MAL-2024-11926/): Malicious code in tracking-protection-experiment (npm) (malicious package)
- [MAL-2024-11925](https://insights.sbomify.com/MAL-2024-11925/): Malicious code in com.unity.assetgraph (npm) (malicious package)
- [MAL-2024-11924](https://insights.sbomify.com/MAL-2024-11924/): Malicious code in editions-dev-workshop (npm) (malicious package)
- [MAL-2024-11923](https://insights.sbomify.com/MAL-2024-11923/): Malicious code in non-existing-dependency (npm) (malicious package)
- [MAL-2024-11922](https://insights.sbomify.com/MAL-2024-11922/): Malicious code in blz-internal-pkg_update (npm) (malicious package)
- [MAL-2024-11921](https://insights.sbomify.com/MAL-2024-11921/): Malicious code in pornhub (npm) (malicious package)
- [MAL-2024-11920](https://insights.sbomify.com/MAL-2024-11920/): Malicious code in redux-form-v5 (npm) (malicious package)
- [MAL-2024-1192](https://insights.sbomify.com/MAL-2024-1192/): Malicious code in package-ddgjhd-weagd-24h (npm) (malicious package)
- [MAL-2024-11919](https://insights.sbomify.com/MAL-2024-11919/): Malicious code in yandex-pandora-docs (npm) (malicious package)
- [MAL-2024-11918](https://insights.sbomify.com/MAL-2024-11918/): Malicious code in auto-assign-team-actionn (npm) (malicious package)
- [MAL-2024-11917](https://insights.sbomify.com/MAL-2024-11917/): Malicious code in @goldenfront/core (npm) (malicious package)
- [MAL-2024-11916](https://insights.sbomify.com/MAL-2024-11916/): Malicious code in bitmex-node-fetch (npm) (malicious package)
- [MAL-2024-11915](https://insights.sbomify.com/MAL-2024-11915/): Malicious code in ifood2-github-io (npm) (malicious package)
- [MAL-2024-11914](https://insights.sbomify.com/MAL-2024-11914/): Malicious code in orderly.network (npm) (malicious package)
- [MAL-2024-11913](https://insights.sbomify.com/MAL-2024-11913/): Malicious code in hardhat-deploy-others (npm) (malicious package)
- [MAL-2024-11912](https://insights.sbomify.com/MAL-2024-11912/): Malicious code in focal-examples (npm) (malicious package)
- [MAL-2024-11911](https://insights.sbomify.com/MAL-2024-11911/): Malicious code in baby-loris (npm) (malicious package)
- [MAL-2024-11910](https://insights.sbomify.com/MAL-2024-11910/): Malicious code in @bh-ui/theme (npm) (malicious package)
- [MAL-2024-1191](https://insights.sbomify.com/MAL-2024-1191/): Malicious code in metacord (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/108/