# Vulnerabilities published in 2024


- [MAL-2024-11819](https://insights.sbomify.com/MAL-2024-11819/): Malicious code in lana-ws (npm) (malicious package)
- [MAL-2024-11818](https://insights.sbomify.com/MAL-2024-11818/): Malicious code in auth0-lock-webpack (npm) (malicious package)
- [MAL-2024-11817](https://insights.sbomify.com/MAL-2024-11817/): Malicious code in planweb-core-ui (npm) (malicious package)
- [MAL-2024-11816](https://insights.sbomify.com/MAL-2024-11816/): Malicious code in test-wasim (npm) (malicious package)
- [MAL-2024-11815](https://insights.sbomify.com/MAL-2024-11815/): Malicious code in fidentity-website (npm) (malicious package)
- [MAL-2024-11814](https://insights.sbomify.com/MAL-2024-11814/): Malicious code in @tradm/my_package_legit (npm) (malicious package)
- [MAL-2024-11813](https://insights.sbomify.com/MAL-2024-11813/): Malicious code in @flutteruki-gaming/test-eslint-config-flutteruki-gaming (npm) (malicious package)
- [MAL-2024-11812](https://insights.sbomify.com/MAL-2024-11812/): Malicious code in @flutteruki-gaming/eslint-config-flutteruki-gaming (npm) (malicious package)
- [MAL-2024-11811](https://insights.sbomify.com/MAL-2024-11811/): Malicious code in qwertytrtyu (npm) (malicious package)
- [MAL-2024-11810](https://insights.sbomify.com/MAL-2024-11810/): Malicious code in nextcloud1 (npm) (malicious package)
- [MAL-2024-1181](https://insights.sbomify.com/MAL-2024-1181/): Malicious code in shelllib (npm) (malicious package)
- [MAL-2024-11809](https://insights.sbomify.com/MAL-2024-11809/): Malicious code in nayan-video-downloader (npm) (malicious package)
- [MAL-2024-11808](https://insights.sbomify.com/MAL-2024-11808/): Malicious code in nayan-imgur-upload-api (npm) (malicious package)
- [MAL-2024-11807](https://insights.sbomify.com/MAL-2024-11807/): Malicious code in nayan-api-server (npm) (malicious package)
- [MAL-2024-11806](https://insights.sbomify.com/MAL-2024-11806/): Malicious code in internal-website (npm) (malicious package)
- [MAL-2024-11805](https://insights.sbomify.com/MAL-2024-11805/): Malicious code in fake-yaml (npm) (malicious package)
- [MAL-2024-11804](https://insights.sbomify.com/MAL-2024-11804/): Malicious code in fake-emitter (npm) (malicious package)
- [MAL-2024-11803](https://insights.sbomify.com/MAL-2024-11803/): Malicious code in discord-json-scaller (npm) (malicious package)
- [MAL-2024-11802](https://insights.sbomify.com/MAL-2024-11802/): Malicious code in azuredatastudio (npm) (malicious package)
- [MAL-2024-11801](https://insights.sbomify.com/MAL-2024-11801/): Malicious code in vscode-reh-rce (npm) (malicious package)
- [MAL-2024-11800](https://insights.sbomify.com/MAL-2024-11800/): Malicious code in yir-image-gen-asana-rce (npm) (malicious package)
- [MAL-2024-1180](https://insights.sbomify.com/MAL-2024-1180/): Malicious code in secrets-management (npm) (malicious package)
- [MAL-2024-118](https://insights.sbomify.com/MAL-2024-118/): Malicious code in discord.js-sb-v13 (npm) (malicious package)
- [MAL-2024-11799](https://insights.sbomify.com/MAL-2024-11799/): Malicious code in test-rce3 (npm) (malicious package)
- [MAL-2024-11798](https://insights.sbomify.com/MAL-2024-11798/): Malicious code in testing-example-amnu (npm) (malicious package)
- [MAL-2024-11797](https://insights.sbomify.com/MAL-2024-11797/): Malicious code in testin-elengos (npm) (malicious package)
- [MAL-2024-11796](https://insights.sbomify.com/MAL-2024-11796/): Malicious code in testin-elengo (npm) (malicious package)
- [MAL-2024-11795](https://insights.sbomify.com/MAL-2024-11795/): Malicious code in pacbot-spa (npm) (malicious package)
- [MAL-2024-11794](https://insights.sbomify.com/MAL-2024-11794/): Malicious code in bug-bounttest (npm) (malicious package)
- [MAL-2024-11793](https://insights.sbomify.com/MAL-2024-11793/): Malicious code in dextester123 (npm) (malicious package)
- [MAL-2024-11792](https://insights.sbomify.com/MAL-2024-11792/): Malicious code in @infoserver/gov-shared-ui (npm) (malicious package)
- [MAL-2024-11791](https://insights.sbomify.com/MAL-2024-11791/): Malicious code in raptor-library (npm) (malicious package)
- [MAL-2024-11790](https://insights.sbomify.com/MAL-2024-11790/): Malicious code in letstryout (npm) (malicious package)
- [MAL-2024-1179](https://insights.sbomify.com/MAL-2024-1179/): Malicious code in region-optimizer (npm) (malicious package)
- [MAL-2024-11789](https://insights.sbomify.com/MAL-2024-11789/): Malicious code in majidalfuttaim (npm) (malicious package)
- [MAL-2024-11788](https://insights.sbomify.com/MAL-2024-11788/): Malicious code in web-app-search (npm) (malicious package)
- [MAL-2024-11787](https://insights.sbomify.com/MAL-2024-11787/): Malicious code in anumanu2324 (npm) (malicious package)
- [MAL-2024-11786](https://insights.sbomify.com/MAL-2024-11786/): Malicious code in paypal-js-root (npm) (malicious package)
- [MAL-2024-11785](https://insights.sbomify.com/MAL-2024-11785/): Malicious code in snap-kit-react-native (npm) (malicious package)
- [MAL-2024-11784](https://insights.sbomify.com/MAL-2024-11784/): Malicious code in shyftportal (npm) (malicious package)
- [MAL-2024-11783](https://insights.sbomify.com/MAL-2024-11783/): Malicious code in goworker (npm) (malicious package)
- [MAL-2024-11782](https://insights.sbomify.com/MAL-2024-11782/): Malicious code in @fandom-frontend/react-common (npm) (malicious package)
- [MAL-2024-11781](https://insights.sbomify.com/MAL-2024-11781/): Malicious code in @aoflmkt/is-desktop (npm) (malicious package)
- [MAL-2024-11780](https://insights.sbomify.com/MAL-2024-11780/): Malicious code in @aoflmkt/app-call (npm) (malicious package)
- [MAL-2024-1178](https://insights.sbomify.com/MAL-2024-1178/): Malicious code in programmablesearchengine (npm) (malicious package)
- [MAL-2024-11779](https://insights.sbomify.com/MAL-2024-11779/): Malicious code in blacky-sheppoing (npm) (malicious package)
- [MAL-2024-11778](https://insights.sbomify.com/MAL-2024-11778/): Malicious code in weekendfe (npm) (malicious package)
- [MAL-2024-11777](https://insights.sbomify.com/MAL-2024-11777/): Malicious code in themes-vendor (npm) (malicious package)
- [MAL-2024-11776](https://insights.sbomify.com/MAL-2024-11776/): Malicious code in spot-admin (npm) (malicious package)
- [MAL-2024-11775](https://insights.sbomify.com/MAL-2024-11775/): Malicious code in plugin-e2e-tests (npm) (malicious package)
- [MAL-2024-11774](https://insights.sbomify.com/MAL-2024-11774/): Malicious code in playwright-1.47 (npm) (malicious package)
- [MAL-2024-11773](https://insights.sbomify.com/MAL-2024-11773/): Malicious code in playwright-1.46 (npm) (malicious package)
- [MAL-2024-11772](https://insights.sbomify.com/MAL-2024-11772/): Malicious code in playwright-1.45 (npm) (malicious package)
- [MAL-2024-11771](https://insights.sbomify.com/MAL-2024-11771/): Malicious code in orbit-playroom (npm) (malicious package)
- [MAL-2024-11770](https://insights.sbomify.com/MAL-2024-11770/): Malicious code in keycloak-server (npm) (malicious package)
- [MAL-2024-1177](https://insights.sbomify.com/MAL-2024-1177/): Malicious code in poptoken-builder-node (npm) (malicious package)
- [MAL-2024-11769](https://insights.sbomify.com/MAL-2024-11769/): Malicious code in dhp-logging-lib (npm) (malicious package)
- [MAL-2024-11768](https://insights.sbomify.com/MAL-2024-11768/): Malicious code in com.unity.entities (npm) (malicious package)
- [MAL-2024-11767](https://insights.sbomify.com/MAL-2024-11767/): Malicious code in com.unity.collections (npm) (malicious package)
- [MAL-2024-11766](https://insights.sbomify.com/MAL-2024-11766/): Malicious code in @wf-ceo/utilities (npm) (malicious package)
- [MAL-2024-11765](https://insights.sbomify.com/MAL-2024-11765/): Malicious code in @wf-ceo/react-test-helpers (npm) (malicious package)
- [MAL-2024-11764](https://insights.sbomify.com/MAL-2024-11764/): Malicious code in plugin-proposal-json-strings (npm) (malicious package)
- [MAL-2024-11763](https://insights.sbomify.com/MAL-2024-11763/): Malicious code in keypair-layout-utils (npm) (malicious package)
- [MAL-2024-11762](https://insights.sbomify.com/MAL-2024-11762/): Malicious code in okxweb3 (npm) (malicious package)
- [MAL-2024-11761](https://insights.sbomify.com/MAL-2024-11761/): Malicious code in @opentelemetrya/api (npm) (malicious package)
- [MAL-2024-11760](https://insights.sbomify.com/MAL-2024-11760/): Malicious code in ico-maker (npm) (malicious package)
- [MAL-2024-1176](https://insights.sbomify.com/MAL-2024-1176/): Malicious code in optus-sport-ctv (npm) (malicious package)
- [MAL-2024-11759](https://insights.sbomify.com/MAL-2024-11759/): Malicious code in detection-rules-explorer (npm) (malicious package)
- [MAL-2024-11758](https://insights.sbomify.com/MAL-2024-11758/): Malicious code in error-stack-parsersasasa (npm) (malicious package)
- [MAL-2024-11757](https://insights.sbomify.com/MAL-2024-11757/): Malicious code in dexter123 (npm) (malicious package)
- [MAL-2024-11756](https://insights.sbomify.com/MAL-2024-11756/): Malicious code in passport-openpass-example (npm) (malicious package)
- [MAL-2024-11755](https://insights.sbomify.com/MAL-2024-11755/): Malicious code in @neo-ds/neo-utils (npm) (malicious package)
- [MAL-2024-11754](https://insights.sbomify.com/MAL-2024-11754/): Malicious code in web-live-sdk (npm) (malicious package)
- [MAL-2024-11753](https://insights.sbomify.com/MAL-2024-11753/): Malicious code in promisified-resource-pool123 (npm) (malicious package)
- [MAL-2024-11752](https://insights.sbomify.com/MAL-2024-11752/): Malicious code in zero123 (PyPI) (malicious package)
- [MAL-2024-11751](https://insights.sbomify.com/MAL-2024-11751/): Malicious code in zebo (PyPI) (malicious package)
- [MAL-2024-11750](https://insights.sbomify.com/MAL-2024-11750/): Malicious code in xsilyxd (PyPI) (malicious package)
- [MAL-2024-1175](https://insights.sbomify.com/MAL-2024-1175/): Malicious code in mytmobile (npm) (malicious package)
- [MAL-2024-11749](https://insights.sbomify.com/MAL-2024-11749/): Malicious code in websend (PyPI) (malicious package)
- [MAL-2024-11748](https://insights.sbomify.com/MAL-2024-11748/): Malicious code in vsc-config (PyPI) (malicious package)
- [MAL-2024-11747](https://insights.sbomify.com/MAL-2024-11747/): Malicious code in vsc-accountpage-clients (PyPI) (malicious package)
- [MAL-2024-11746](https://insights.sbomify.com/MAL-2024-11746/): Malicious code in voto3 (PyPI) (malicious package)
- [MAL-2024-11745](https://insights.sbomify.com/MAL-2024-11745/): Malicious code in vizplotlib (PyPI) (malicious package)
- [MAL-2024-11744](https://insights.sbomify.com/MAL-2024-11744/): Malicious code in viplotlib (PyPI) (malicious package)
- [MAL-2024-11743](https://insights.sbomify.com/MAL-2024-11743/): Malicious code in uuss (PyPI) (malicious package)
- [MAL-2024-11742](https://insights.sbomify.com/MAL-2024-11742/): Malicious code in uus (PyPI) (malicious package)
- [MAL-2024-11741](https://insights.sbomify.com/MAL-2024-11741/): Malicious code in useregent-generator (PyPI) (malicious package)
- [MAL-2024-11740](https://insights.sbomify.com/MAL-2024-11740/): Malicious code in user-random-agent-user (PyPI) (malicious package)
- [MAL-2024-1174](https://insights.sbomify.com/MAL-2024-1174/): Malicious code in iotnet (npm) (malicious package)
- [MAL-2024-11739](https://insights.sbomify.com/MAL-2024-11739/): Malicious code in user-rand-agnt-user (PyPI) (malicious package)
- [MAL-2024-11738](https://insights.sbomify.com/MAL-2024-11738/): Malicious code in user-gen-agent-random (PyPI) (malicious package)
- [MAL-2024-11737](https://insights.sbomify.com/MAL-2024-11737/): Malicious code in urlcon (PyPI) (malicious package)
- [MAL-2024-11736](https://insights.sbomify.com/MAL-2024-11736/): Malicious code in upllib (PyPI) (malicious package)
- [MAL-2024-11735](https://insights.sbomify.com/MAL-2024-11735/): Malicious code in unzipxz (PyPI) (malicious package)
- [MAL-2024-11734](https://insights.sbomify.com/MAL-2024-11734/): Malicious code in ua-agent-generator (PyPI) (malicious package)
- [MAL-2024-11733](https://insights.sbomify.com/MAL-2024-11733/): Malicious code in treadtools (PyPI) (malicious package)
- [MAL-2024-11732](https://insights.sbomify.com/MAL-2024-11732/): Malicious code in torhc (PyPI) (malicious package)
- [MAL-2024-11731](https://insights.sbomify.com/MAL-2024-11731/): Malicious code in torchvisions (PyPI) (malicious package)
- [MAL-2024-11730](https://insights.sbomify.com/MAL-2024-11730/): Malicious code in torchs-visions (PyPI) (malicious package)
- [MAL-2024-1173](https://insights.sbomify.com/MAL-2024-1173/): Malicious code in google-requests (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/110/