# Vulnerabilities published in 2024


- [MAL-2024-9644](https://insights.sbomify.com/MAL-2024-9644/): Malicious code in glimmerer (npm) (malicious package)
- [MAL-2024-9643](https://insights.sbomify.com/MAL-2024-9643/): Malicious code in github-loader (npm) (malicious package)
- [MAL-2024-9642](https://insights.sbomify.com/MAL-2024-9642/): Malicious code in gioenduek (npm) (malicious package)
- [MAL-2024-9641](https://insights.sbomify.com/MAL-2024-9641/): Malicious code in get-hydrated-cms-data (npm) (malicious package)
- [MAL-2024-9640](https://insights.sbomify.com/MAL-2024-9640/): Malicious code in genuine-azure-swordtail (npm) (malicious package)
- [MAL-2024-964](https://insights.sbomify.com/MAL-2024-964/): Malicious code in ngpd-merceros-dynamic-forms-fe-components (npm) (malicious package)
- [MAL-2024-9639](https://insights.sbomify.com/MAL-2024-9639/): Malicious code in generalytics (npm) (malicious package)
- [MAL-2024-9638](https://insights.sbomify.com/MAL-2024-9638/): Malicious code in gcptestpackagepoc (npm) (malicious package)
- [MAL-2024-9637](https://insights.sbomify.com/MAL-2024-9637/): Malicious code in full-crimson-shark (npm) (malicious package)
- [MAL-2024-9636](https://insights.sbomify.com/MAL-2024-9636/): Malicious code in fs-read-file (npm) (malicious package)
- [MAL-2024-9635](https://insights.sbomify.com/MAL-2024-9635/): Malicious code in frozen-violet-sailfish (npm) (malicious package)
- [MAL-2024-9634](https://insights.sbomify.com/MAL-2024-9634/): Malicious code in freebsd-x64 (npm) (malicious package)
- [MAL-2024-9633](https://insights.sbomify.com/MAL-2024-9633/): Malicious code in flormar-global (npm) (malicious package)
- [MAL-2024-9632](https://insights.sbomify.com/MAL-2024-9632/): Malicious code in flarer (npm) (malicious package)
- [MAL-2024-9631](https://insights.sbomify.com/MAL-2024-9631/): Malicious code in flaky-coffee-wren (npm) (malicious package)
- [MAL-2024-9630](https://insights.sbomify.com/MAL-2024-9630/): Malicious code in feature-targeting (npm) (malicious package)
- [MAL-2024-963](https://insights.sbomify.com/MAL-2024-963/): Malicious code in nan-win (npm) (malicious package)
- [MAL-2024-9629](https://insights.sbomify.com/MAL-2024-9629/): Malicious code in fb-group (npm) (malicious package)
- [MAL-2024-9628](https://insights.sbomify.com/MAL-2024-9628/): Malicious code in fatest-distube (npm) (malicious package)
- [MAL-2024-9627](https://insights.sbomify.com/MAL-2024-9627/): Malicious code in far-teal-platypus (npm) (malicious package)
- [MAL-2024-9626](https://insights.sbomify.com/MAL-2024-9626/): Malicious code in far-gray-pike (npm) (malicious package)
- [MAL-2024-9625](https://insights.sbomify.com/MAL-2024-9625/): Malicious code in extension-paragraph (npm) (malicious package)
- [MAL-2024-9624](https://insights.sbomify.com/MAL-2024-9624/): Malicious code in extension-image (npm) (malicious package)
- [MAL-2024-9623](https://insights.sbomify.com/MAL-2024-9623/): Malicious code in extension-horizontal-rule (npm) (malicious package)
- [MAL-2024-9622](https://insights.sbomify.com/MAL-2024-9622/): Malicious code in extension-heading (npm) (malicious package)
- [MAL-2024-9621](https://insights.sbomify.com/MAL-2024-9621/): Malicious code in extension-hard-break (npm) (malicious package)
- [MAL-2024-9620](https://insights.sbomify.com/MAL-2024-9620/): Malicious code in extension-gapcursor (npm) (malicious package)
- [MAL-2024-962](https://insights.sbomify.com/MAL-2024-962/): Malicious code in health-gbm-common (npm) (malicious package)
- [MAL-2024-9619](https://insights.sbomify.com/MAL-2024-9619/): Malicious code in extension-floating-menu (npm) (malicious package)
- [MAL-2024-9618](https://insights.sbomify.com/MAL-2024-9618/): Malicious code in extension-dropcursor (npm) (malicious package)
- [MAL-2024-9617](https://insights.sbomify.com/MAL-2024-9617/): Malicious code in extension-document (npm) (malicious package)
- [MAL-2024-9616](https://insights.sbomify.com/MAL-2024-9616/): Malicious code in extension-bullet-list (npm) (malicious package)
- [MAL-2024-9615](https://insights.sbomify.com/MAL-2024-9615/): Malicious code in extension-bubble-menu (npm) (malicious package)
- [MAL-2024-9614](https://insights.sbomify.com/MAL-2024-9614/): Malicious code in extension-bold (npm) (malicious package)
- [MAL-2024-9613](https://insights.sbomify.com/MAL-2024-9613/): Malicious code in extension-blockquote (npm) (malicious package)
- [MAL-2024-9612](https://insights.sbomify.com/MAL-2024-9612/): Malicious code in exporter-trace-otlp-proto (npm) (malicious package)
- [MAL-2024-9611](https://insights.sbomify.com/MAL-2024-9611/): Malicious code in exporter-trace-otlp-http (npm) (malicious package)
- [MAL-2024-9610](https://insights.sbomify.com/MAL-2024-9610/): Malicious code in export-gltf (npm) (malicious package)
- [MAL-2024-961](https://insights.sbomify.com/MAL-2024-961/): Malicious code in cifuzz (npm) (malicious package)
- [MAL-2024-9609](https://insights.sbomify.com/MAL-2024-9609/): Malicious code in experimental-purple-walrus (npm) (malicious package)
- [MAL-2024-9608](https://insights.sbomify.com/MAL-2024-9608/): Malicious code in executor-http (npm) (malicious package)
- [MAL-2024-9607](https://insights.sbomify.com/MAL-2024-9607/): Malicious code in example-gtm (npm) (malicious package)
- [MAL-2024-9606](https://insights.sbomify.com/MAL-2024-9606/): Malicious code in ewueirit (npm) (malicious package)
- [MAL-2024-9605](https://insights.sbomify.com/MAL-2024-9605/): Malicious code in eventstream-serde-universal (npm) (malicious package)
- [MAL-2024-9604](https://insights.sbomify.com/MAL-2024-9604/): Malicious code in eventstream-serde-config-resolver (npm) (malicious package)
- [MAL-2024-9603](https://insights.sbomify.com/MAL-2024-9603/): Malicious code in eventstream-serde-browser (npm) (malicious package)
- [MAL-2024-9602](https://insights.sbomify.com/MAL-2024-9602/): Malicious code in eventstream-codec (npm) (malicious package)
- [MAL-2024-9601](https://insights.sbomify.com/MAL-2024-9601/): Malicious code in eum-veritatis-placeat (npm) (malicious package)
- [MAL-2024-9600](https://insights.sbomify.com/MAL-2024-9600/): Malicious code in ethnic-purple-iguana (npm) (malicious package)
- [MAL-2024-960](https://insights.sbomify.com/MAL-2024-960/): Malicious code in node-production (npm) (malicious package)
- [MAL-2024-96](https://insights.sbomify.com/MAL-2024-96/): Malicious code in wdpr-node-http-error-handler (npm) (malicious package)
- [MAL-2024-9599](https://insights.sbomify.com/MAL-2024-9599/): Malicious code in esse-praesentium-eligendi (npm) (malicious package)
- [MAL-2024-9598](https://insights.sbomify.com/MAL-2024-9598/): Malicious code in eslint-v7 (npm) (malicious package)
- [MAL-2024-9597](https://insights.sbomify.com/MAL-2024-9597/): Malicious code in esbuild-plugin-global-externals (npm) (malicious package)
- [MAL-2024-9596](https://insights.sbomify.com/MAL-2024-9596/): Malicious code in env-debug-logger (npm) (malicious package)
- [MAL-2024-9595](https://insights.sbomify.com/MAL-2024-9595/): Malicious code in elements-homefeeds (npm) (malicious package)
- [MAL-2024-9594](https://insights.sbomify.com/MAL-2024-9594/): Malicious code in elastic-otel-node (npm) (malicious package)
- [MAL-2024-9593](https://insights.sbomify.com/MAL-2024-9593/): Malicious code in eighster (npm) (malicious package)
- [MAL-2024-9592](https://insights.sbomify.com/MAL-2024-9592/): Malicious code in dying-beige-gazelle (npm) (malicious package)
- [MAL-2024-9591](https://insights.sbomify.com/MAL-2024-9591/): Malicious code in dwoeoer (npm) (malicious package)
- [MAL-2024-9590](https://insights.sbomify.com/MAL-2024-9590/): Malicious code in dt-app112 (npm) (malicious package)
- [MAL-2024-959](https://insights.sbomify.com/MAL-2024-959/): Malicious code in node-fetch-full (npm) (malicious package)
- [MAL-2024-9589](https://insights.sbomify.com/MAL-2024-9589/): Malicious code in dp-bpsc-tiktok-music (npm) (malicious package)
- [MAL-2024-9588](https://insights.sbomify.com/MAL-2024-9588/): Malicious code in dominant-sapphire-dolphin (npm) (malicious package)
- [MAL-2024-9587](https://insights.sbomify.com/MAL-2024-9587/): Malicious code in do-not-install-ecb1029ca (npm) (malicious package)
- [MAL-2024-9586](https://insights.sbomify.com/MAL-2024-9586/): Malicious code in djs14-logger (npm) (malicious package)
- [MAL-2024-9585](https://insights.sbomify.com/MAL-2024-9585/): Malicious code in directlinetoactionsongooglelib (npm) (malicious package)
- [MAL-2024-9584](https://insights.sbomify.com/MAL-2024-9584/): Malicious code in dhoeiwoe (npm) (malicious package)
- [MAL-2024-9583](https://insights.sbomify.com/MAL-2024-9583/): Malicious code in dfx-api (npm) (malicious package)
- [MAL-2024-9582](https://insights.sbomify.com/MAL-2024-9582/): Malicious code in dependent-maroon-bovid (npm) (malicious package)
- [MAL-2024-9581](https://insights.sbomify.com/MAL-2024-9581/): Malicious code in dep_malc (npm) (malicious package)
- [MAL-2024-9580](https://insights.sbomify.com/MAL-2024-9580/): Malicious code in deeperscan-nft (npm) (malicious package)
- [MAL-2024-958](https://insights.sbomify.com/MAL-2024-958/): Malicious code in hardhat-gas-optimizer (npm) (malicious package)
- [MAL-2024-9579](https://insights.sbomify.com/MAL-2024-9579/): Malicious code in decisive-salmon-worm (npm) (malicious package)
- [MAL-2024-9578](https://insights.sbomify.com/MAL-2024-9578/): Malicious code in cwoeuor (npm) (malicious package)
- [MAL-2024-9577](https://insights.sbomify.com/MAL-2024-9577/): Malicious code in css-tokenizer (npm) (malicious package)
- [MAL-2024-9576](https://insights.sbomify.com/MAL-2024-9576/): Malicious code in crowdin-cli-website (npm) (malicious package)
- [MAL-2024-9575](https://insights.sbomify.com/MAL-2024-9575/): Malicious code in crispler (npm) (malicious package)
- [MAL-2024-9574](https://insights.sbomify.com/MAL-2024-9574/): Malicious code in crisping (npm) (malicious package)
- [MAL-2024-9573](https://insights.sbomify.com/MAL-2024-9573/): Malicious code in credential-provider-http (npm) (malicious package)
- [MAL-2024-9572](https://insights.sbomify.com/MAL-2024-9572/): Malicious code in corporate-pro (npm) (malicious package)
- [MAL-2024-9571](https://insights.sbomify.com/MAL-2024-9571/): Malicious code in core-linux-x64-musl (npm) (malicious package)
- [MAL-2024-9570](https://insights.sbomify.com/MAL-2024-9570/): Malicious code in context-async-hooks (npm) (malicious package)
- [MAL-2024-957](https://insights.sbomify.com/MAL-2024-957/): Malicious code in ccl-modal (npm) (malicious package)
- [MAL-2024-9569](https://insights.sbomify.com/MAL-2024-9569/): Malicious code in conservation-pink-armadillo (npm) (malicious package)
- [MAL-2024-9568](https://insights.sbomify.com/MAL-2024-9568/): Malicious code in confluence-search-ui (npm) (malicious package)
- [MAL-2024-9567](https://insights.sbomify.com/MAL-2024-9567/): Malicious code in confluence-frontend (npm) (malicious package)
- [MAL-2024-9566](https://insights.sbomify.com/MAL-2024-9566/): Malicious code in config.env-replace (npm) (malicious package)
- [MAL-2024-9565](https://insights.sbomify.com/MAL-2024-9565/): Malicious code in config-conventional (npm) (malicious package)
- [MAL-2024-9564](https://insights.sbomify.com/MAL-2024-9564/): Malicious code in compulsory-harlequin-ant (npm) (malicious package)
- [MAL-2024-9563](https://insights.sbomify.com/MAL-2024-9563/): Malicious code in competent-violet-dolphin (npm) (malicious package)
- [MAL-2024-9562](https://insights.sbomify.com/MAL-2024-9562/): Malicious code in comparable-scarlet-perch (npm) (malicious package)
- [MAL-2024-9561](https://insights.sbomify.com/MAL-2024-9561/): Malicious code in com.microsoft.mrtk.graphicstools.unity (npm) (malicious package)
- [MAL-2024-9560](https://insights.sbomify.com/MAL-2024-9560/): Malicious code in coinbase-smart-wallet-documentation (npm) (malicious package)
- [MAL-2024-956](https://insights.sbomify.com/MAL-2024-956/): Malicious code in hub-blockly (npm) (malicious package)
- [MAL-2024-9559](https://insights.sbomify.com/MAL-2024-9559/): Malicious code in code-file-loader (npm) (malicious package)
- [MAL-2024-9558](https://insights.sbomify.com/MAL-2024-9558/): Malicious code in clumsy-olive-goldfish (npm) (malicious package)
- [MAL-2024-9557](https://insights.sbomify.com/MAL-2024-9557/): Malicious code in closed-salmon-harrier (npm) (malicious package)
- [MAL-2024-9556](https://insights.sbomify.com/MAL-2024-9556/): Malicious code in cliwoerr (npm) (malicious package)
- [MAL-2024-9555](https://insights.sbomify.com/MAL-2024-9555/): Malicious code in client-sns (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/11/
