# Vulnerabilities published in 2024


- [MAL-2024-11909](https://insights.sbomify.com/MAL-2024-11909/): Malicious code in tsanjint (npm) (malicious package)
- [MAL-2024-11908](https://insights.sbomify.com/MAL-2024-11908/): Malicious code in windows-version-check (npm) (malicious package)
- [MAL-2024-11907](https://insights.sbomify.com/MAL-2024-11907/): Malicious code in windows-confirm (npm) (malicious package)
- [MAL-2024-11906](https://insights.sbomify.com/MAL-2024-11906/): Malicious code in supply-chain-planner (npm) (malicious package)
- [MAL-2024-11905](https://insights.sbomify.com/MAL-2024-11905/): Malicious code in solara-config (npm) (malicious package)
- [MAL-2024-11904](https://insights.sbomify.com/MAL-2024-11904/): Malicious code in majidalfuttaim11 (npm) (malicious package)
- [MAL-2024-11903](https://insights.sbomify.com/MAL-2024-11903/): Malicious code in hackbro (npm) (malicious package)
- [MAL-2024-11902](https://insights.sbomify.com/MAL-2024-11902/): Malicious code in downloadsolara (npm) (malicious package)
- [MAL-2024-11901](https://insights.sbomify.com/MAL-2024-11901/): Malicious code in dex12212 (npm) (malicious package)
- [MAL-2024-11900](https://insights.sbomify.com/MAL-2024-11900/): Malicious code in alifx-media-downloader (npm) (malicious package)
- [MAL-2024-1190](https://insights.sbomify.com/MAL-2024-1190/): Malicious code in hydrogen-sfdgspsdmq-test1 (npm) (malicious package)
- [MAL-2024-119](https://insights.sbomify.com/MAL-2024-119/): Malicious code in discord.js-seifbot-v13 (npm) (malicious package)
- [MAL-2024-11899](https://insights.sbomify.com/MAL-2024-11899/): Malicious code in anargha-manu2324 (npm) (malicious package)
- [MAL-2024-11898](https://insights.sbomify.com/MAL-2024-11898/): Malicious code in onchain-commerce-template (npm) (malicious package)
- [MAL-2024-11897](https://insights.sbomify.com/MAL-2024-11897/): Malicious code in yir-image-gen (npm) (malicious package)
- [MAL-2024-11896](https://insights.sbomify.com/MAL-2024-11896/): Malicious code in haefgerasgrae (RubyGems) (malicious package)
- [MAL-2024-11895](https://insights.sbomify.com/MAL-2024-11895/): Malicious code in pai-web-components (npm) (malicious package)
- [MAL-2024-11894](https://insights.sbomify.com/MAL-2024-11894/): Malicious code in @poclabs/exo-phanto (npm) (malicious package)
- [MAL-2024-11893](https://insights.sbomify.com/MAL-2024-11893/): Malicious code in vue-cli-plugin-lint-staged (npm) (malicious package)
- [MAL-2024-11892](https://insights.sbomify.com/MAL-2024-11892/): Malicious code in vercel-repros (npm) (malicious package)
- [MAL-2024-11891](https://insights.sbomify.com/MAL-2024-11891/): Malicious code in @saferpay/react-library (npm) (malicious package)
- [MAL-2024-11890](https://insights.sbomify.com/MAL-2024-11890/): Malicious code in @saferpay/logging (npm) (malicious package)
- [MAL-2024-1189](https://insights.sbomify.com/MAL-2024-1189/): Malicious code in u-workflow.module.common.visibility (npm) (malicious package)
- [MAL-2024-11889](https://insights.sbomify.com/MAL-2024-11889/): Malicious code in @saferpay/eslint-config-react (npm) (malicious package)
- [MAL-2024-11888](https://insights.sbomify.com/MAL-2024-11888/): Malicious code in @saferpay/eslint-config-base (npm) (malicious package)
- [MAL-2024-11887](https://insights.sbomify.com/MAL-2024-11887/): Malicious code in @saferpay/components (npm) (malicious package)
- [MAL-2024-11886](https://insights.sbomify.com/MAL-2024-11886/): Malicious code in @monkey-tilt/ui (npm) (malicious package)
- [MAL-2024-11885](https://insights.sbomify.com/MAL-2024-11885/): Malicious code in brodocs (npm) (malicious package)
- [MAL-2024-11884](https://insights.sbomify.com/MAL-2024-11884/): Malicious code in start-decent (npm) (malicious package)
- [MAL-2024-11883](https://insights.sbomify.com/MAL-2024-11883/): Malicious code in microsoft.applicationinsights.windowsapps (npm) (malicious package)
- [MAL-2024-11882](https://insights.sbomify.com/MAL-2024-11882/): Malicious code in microsoft.applicationinsights.persistencechannel (npm) (malicious package)
- [MAL-2024-11881](https://insights.sbomify.com/MAL-2024-11881/): Malicious code in pokedex-vue3 (npm) (malicious package)
- [MAL-2024-11880](https://insights.sbomify.com/MAL-2024-11880/): Malicious code in shoaib-demo (npm) (malicious package)
- [MAL-2024-1188](https://insights.sbomify.com/MAL-2024-1188/): Malicious code in u-workflow.module.common.tech (npm) (malicious package)
- [MAL-2024-11879](https://insights.sbomify.com/MAL-2024-11879/): Malicious code in ifood-github-io (npm) (malicious package)
- [MAL-2024-11878](https://insights.sbomify.com/MAL-2024-11878/): Malicious code in spacexstats (npm) (malicious package)
- [MAL-2024-11877](https://insights.sbomify.com/MAL-2024-11877/): Malicious code in label-merge-conflicts-action (npm) (malicious package)
- [MAL-2024-11876](https://insights.sbomify.com/MAL-2024-11876/): Malicious code in web3-docs (npm) (malicious package)
- [MAL-2024-11875](https://insights.sbomify.com/MAL-2024-11875/): Malicious code in asymmetric-key-generator (npm) (malicious package)
- [MAL-2024-11874](https://insights.sbomify.com/MAL-2024-11874/): Malicious code in react-vis-website (npm) (malicious package)
- [MAL-2024-11873](https://insights.sbomify.com/MAL-2024-11873/): Malicious code in ui_next (npm) (malicious package)
- [MAL-2024-11872](https://insights.sbomify.com/MAL-2024-11872/): Malicious code in casino-luzern-easter-frontend (npm) (malicious package)
- [MAL-2024-11871](https://insights.sbomify.com/MAL-2024-11871/): Malicious code in nrql-tutorial (npm) (malicious package)
- [MAL-2024-11870](https://insights.sbomify.com/MAL-2024-11870/): Malicious code in bsc-genesis-contract (npm) (malicious package)
- [MAL-2024-1187](https://insights.sbomify.com/MAL-2024-1187/): Malicious code in u-workflow.auth (npm) (malicious package)
- [MAL-2024-11869](https://insights.sbomify.com/MAL-2024-11869/): Malicious code in questdb-console (npm) (malicious package)
- [MAL-2024-11868](https://insights.sbomify.com/MAL-2024-11868/): Malicious code in 32red-database (npm) (malicious package)
- [MAL-2024-11867](https://insights.sbomify.com/MAL-2024-11867/): Malicious code in 32red-connect (npm) (malicious package)
- [MAL-2024-11866](https://insights.sbomify.com/MAL-2024-11866/): Malicious code in 32red-cloud (npm) (malicious package)
- [MAL-2024-11865](https://insights.sbomify.com/MAL-2024-11865/): Malicious code in 32red-checkout (npm) (malicious package)
- [MAL-2024-11864](https://insights.sbomify.com/MAL-2024-11864/): Malicious code in 32red-cache (npm) (malicious package)
- [MAL-2024-11863](https://insights.sbomify.com/MAL-2024-11863/): Malicious code in 32red-auth (npm) (malicious package)
- [MAL-2024-11862](https://insights.sbomify.com/MAL-2024-11862/): Malicious code in 32red-api-client (npm) (malicious package)
- [MAL-2024-11861](https://insights.sbomify.com/MAL-2024-11861/): Malicious code in 32red-api (npm) (malicious package)
- [MAL-2024-11860](https://insights.sbomify.com/MAL-2024-11860/): Malicious code in 32red-analytics (npm) (malicious package)
- [MAL-2024-1186](https://insights.sbomify.com/MAL-2024-1186/): Malicious code in types-for-adobe (PyPI) (malicious package)
- [MAL-2024-11859](https://insights.sbomify.com/MAL-2024-11859/): Malicious code in 32red-admin (npm) (malicious package)
- [MAL-2024-11858](https://insights.sbomify.com/MAL-2024-11858/): Malicious code in orderly-web (npm) (malicious package)
- [MAL-2024-11857](https://insights.sbomify.com/MAL-2024-11857/): Malicious code in 000webhost-database (npm) (malicious package)
- [MAL-2024-11856](https://insights.sbomify.com/MAL-2024-11856/): Malicious code in 000webhost-connect (npm) (malicious package)
- [MAL-2024-11855](https://insights.sbomify.com/MAL-2024-11855/): Malicious code in 000webhost-cloud (npm) (malicious package)
- [MAL-2024-11854](https://insights.sbomify.com/MAL-2024-11854/): Malicious code in 000webhost-checkout (npm) (malicious package)
- [MAL-2024-11853](https://insights.sbomify.com/MAL-2024-11853/): Malicious code in 000webhost-cache (npm) (malicious package)
- [MAL-2024-11852](https://insights.sbomify.com/MAL-2024-11852/): Malicious code in 000webhost-auth (npm) (malicious package)
- [MAL-2024-11851](https://insights.sbomify.com/MAL-2024-11851/): Malicious code in 000webhost-api-client (npm) (malicious package)
- [MAL-2024-11850](https://insights.sbomify.com/MAL-2024-11850/): Malicious code in 000webhost-api (npm) (malicious package)
- [MAL-2024-1185](https://insights.sbomify.com/MAL-2024-1185/): Malicious code in sparklog (PyPI) (malicious package)
- [MAL-2024-11849](https://insights.sbomify.com/MAL-2024-11849/): Malicious code in 000webhost-analytics (npm) (malicious package)
- [MAL-2024-11848](https://insights.sbomify.com/MAL-2024-11848/): Malicious code in 000webhost-admin (npm) (malicious package)
- [MAL-2024-11847](https://insights.sbomify.com/MAL-2024-11847/): Malicious code in support-conversations (npm) (malicious package)
- [MAL-2024-11846](https://insights.sbomify.com/MAL-2024-11846/): Malicious code in stripe-internal (npm) (malicious package)
- [MAL-2024-11845](https://insights.sbomify.com/MAL-2024-11845/): Malicious code in ml-interactive-data-augmentation (npm) (malicious package)
- [MAL-2024-11844](https://insights.sbomify.com/MAL-2024-11844/): Malicious code in bounty123ay (npm) (malicious package)
- [MAL-2024-11843](https://insights.sbomify.com/MAL-2024-11843/): Malicious code in solhint-plugin-openzeppelin (npm) (malicious package)
- [MAL-2024-11842](https://insights.sbomify.com/MAL-2024-11842/): Malicious code in uchiwa-web (npm) (malicious package)
- [MAL-2024-11841](https://insights.sbomify.com/MAL-2024-11841/): Malicious code in graphql.vscode-graphql-syntax (npm) (malicious package)
- [MAL-2024-11840](https://insights.sbomify.com/MAL-2024-11840/): Malicious code in resultstore-search-client (npm) (malicious package)
- [MAL-2024-1184](https://insights.sbomify.com/MAL-2024-1184/): Malicious code in wm-search-deployables (npm) (malicious package)
- [MAL-2024-11839](https://insights.sbomify.com/MAL-2024-11839/): Malicious code in rsd-monorepo (npm) (malicious package)
- [MAL-2024-11838](https://insights.sbomify.com/MAL-2024-11838/): Malicious code in openai-realtime-console (npm) (malicious package)
- [MAL-2024-11837](https://insights.sbomify.com/MAL-2024-11837/): Malicious code in flame-monorepo (npm) (malicious package)
- [MAL-2024-11836](https://insights.sbomify.com/MAL-2024-11836/): Malicious code in action-mattermost-notify (npm) (malicious package)
- [MAL-2024-11835](https://insights.sbomify.com/MAL-2024-11835/): Malicious code in mattermost-cloudnative-bootstrapper (npm) (malicious package)
- [MAL-2024-11834](https://insights.sbomify.com/MAL-2024-11834/): Malicious code in imran-spotifydl (npm) (malicious package)
- [MAL-2024-11833](https://insights.sbomify.com/MAL-2024-11833/): Malicious code in imran-servar (npm) (malicious package)
- [MAL-2024-11832](https://insights.sbomify.com/MAL-2024-11832/): Malicious code in imran-downloader-servar (npm) (malicious package)
- [MAL-2024-11831](https://insights.sbomify.com/MAL-2024-11831/): Malicious code in imran-downloader (npm) (malicious package)
- [MAL-2024-11830](https://insights.sbomify.com/MAL-2024-11830/): Malicious code in imran-dlmedia (npm) (malicious package)
- [MAL-2024-1183](https://insights.sbomify.com/MAL-2024-1183/): Malicious code in teslamotors-server (npm) (malicious package)
- [MAL-2024-11829](https://insights.sbomify.com/MAL-2024-11829/): Malicious code in imgur-uploader-api (npm) (malicious package)
- [MAL-2024-11828](https://insights.sbomify.com/MAL-2024-11828/): Malicious code in free-fire-api (npm) (malicious package)
- [MAL-2024-11827](https://insights.sbomify.com/MAL-2024-11827/): Malicious code in font-style-api (npm) (malicious package)
- [MAL-2024-11826](https://insights.sbomify.com/MAL-2024-11826/): Malicious code in fca-imran-api (npm) (malicious package)
- [MAL-2024-11825](https://insights.sbomify.com/MAL-2024-11825/): Malicious code in rarible-program-library (npm) (malicious package)
- [MAL-2024-11824](https://insights.sbomify.com/MAL-2024-11824/): Malicious code in pobreiaia33 (npm) (malicious package)
- [MAL-2024-11823](https://insights.sbomify.com/MAL-2024-11823/): Malicious code in simulation_service (npm) (malicious package)
- [MAL-2024-11822](https://insights.sbomify.com/MAL-2024-11822/): Malicious code in pobreiaia22 (npm) (malicious package)
- [MAL-2024-11821](https://insights.sbomify.com/MAL-2024-11821/): Malicious code in pipedream-curl (npm) (malicious package)
- [MAL-2024-11820](https://insights.sbomify.com/MAL-2024-11820/): Malicious code in orizuru (npm) (malicious package)
- [MAL-2024-1182](https://insights.sbomify.com/MAL-2024-1182/): Malicious code in soundcloud-songs (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/109/
