# Vulnerabilities published in 2024


- [MAL-2024-11549](https://insights.sbomify.com/MAL-2024-11549/): Malicious code in byteqs (PyPI) (malicious package)
- [MAL-2024-11548](https://insights.sbomify.com/MAL-2024-11548/): Malicious code in bytepps (PyPI) (malicious package)
- [MAL-2024-11547](https://insights.sbomify.com/MAL-2024-11547/): Malicious code in byteff (PyPI) (malicious package)
- [MAL-2024-11546](https://insights.sbomify.com/MAL-2024-11546/): Malicious code in bytedsp (PyPI) (malicious package)
- [MAL-2024-11545](https://insights.sbomify.com/MAL-2024-11545/): Malicious code in byted-flux (PyPI) (malicious package)
- [MAL-2024-11544](https://insights.sbomify.com/MAL-2024-11544/): Malicious code in byted-flex (PyPI) (malicious package)
- [MAL-2024-11543](https://insights.sbomify.com/MAL-2024-11543/): Malicious code in bytebs (PyPI) (malicious package)
- [MAL-2024-11542](https://insights.sbomify.com/MAL-2024-11542/): Malicious code in byte-flux-3822a6dd00d6414daba3ae0de3930a5a (PyPI) (malicious package)
- [MAL-2024-11541](https://insights.sbomify.com/MAL-2024-11541/): Malicious code in bugbounty (PyPI) (malicious package)
- [MAL-2024-11540](https://insights.sbomify.com/MAL-2024-11540/): Malicious code in botoceor (PyPI) (malicious package)
- [MAL-2024-1154](https://insights.sbomify.com/MAL-2024-1154/): Malicious code in @fin-php/npms (npm) (malicious package)
- [MAL-2024-11539](https://insights.sbomify.com/MAL-2024-11539/): Malicious code in botnetv2 (PyPI) (malicious package)
- [MAL-2024-11538](https://insights.sbomify.com/MAL-2024-11538/): Malicious code in bo3to (PyPI) (malicious package)
- [MAL-2024-11537](https://insights.sbomify.com/MAL-2024-11537/): Malicious code in blackamerxs (PyPI) (malicious package)
- [MAL-2024-11536](https://insights.sbomify.com/MAL-2024-11536/): Malicious code in bitforger (PyPI) (malicious package)
- [MAL-2024-11535](https://insights.sbomify.com/MAL-2024-11535/): Malicious code in bibit (PyPI) (malicious package)
- [MAL-2024-11534](https://insights.sbomify.com/MAL-2024-11534/): Malicious code in backwwi (PyPI) (malicious package)
- [MAL-2024-11533](https://insights.sbomify.com/MAL-2024-11533/): Malicious code in asyncmodules (PyPI) (malicious package)
- [MAL-2024-11532](https://insights.sbomify.com/MAL-2024-11532/): Malicious code in assulthimars (PyPI) (malicious package)
- [MAL-2024-11531](https://insights.sbomify.com/MAL-2024-11531/): Malicious code in assaulthimars (PyPI) (malicious package)
- [MAL-2024-11530](https://insights.sbomify.com/MAL-2024-11530/): Malicious code in asn1tool (PyPI) (malicious package)
- [MAL-2024-1153](https://insights.sbomify.com/MAL-2024-1153/): Malicious code in gatsby-theme-deriv (npm) (malicious package)
- [MAL-2024-11529](https://insights.sbomify.com/MAL-2024-11529/): Malicious code in aslmutetion (PyPI) (malicious package)
- [MAL-2024-11528](https://insights.sbomify.com/MAL-2024-11528/): Malicious code in artifact-lab-3-package-f9dafccc (PyPI) (malicious package)
- [MAL-2024-11527](https://insights.sbomify.com/MAL-2024-11527/): Malicious code in artifact-lab-3-package-b1ec2b9f (PyPI) (malicious package)
- [MAL-2024-11526](https://insights.sbomify.com/MAL-2024-11526/): Malicious code in artifact-lab-3-package-0c8bce1c (PyPI) (malicious package)
- [MAL-2024-11525](https://insights.sbomify.com/MAL-2024-11525/): Malicious code in arnold-toolbox (PyPI) (malicious package)
- [MAL-2024-11524](https://insights.sbomify.com/MAL-2024-11524/): Malicious code in arielbogo (PyPI) (malicious package)
- [MAL-2024-11523](https://insights.sbomify.com/MAL-2024-11523/): Malicious code in appsec-script-py (PyPI) (malicious package)
- [MAL-2024-11522](https://insights.sbomify.com/MAL-2024-11522/): Malicious code in alfooou (PyPI) (malicious package)
- [MAL-2024-11521](https://insights.sbomify.com/MAL-2024-11521/): Malicious code in akobo (PyPI) (malicious package)
- [MAL-2024-11520](https://insights.sbomify.com/MAL-2024-11520/): Malicious code in akh-py (PyPI) (malicious package)
- [MAL-2024-1152](https://insights.sbomify.com/MAL-2024-1152/): Malicious code in discorddevsimple (npm) (malicious package)
- [MAL-2024-11519](https://insights.sbomify.com/MAL-2024-11519/): Malicious code in aiopbotocore (PyPI) (malicious package)
- [MAL-2024-11518](https://insights.sbomify.com/MAL-2024-11518/): Malicious code in aiocpa (PyPI) (malicious package)
- [MAL-2024-11517](https://insights.sbomify.com/MAL-2024-11517/): Malicious code in agent-user-generate (PyPI) (malicious package)
- [MAL-2024-11516](https://insights.sbomify.com/MAL-2024-11516/): Malicious code in afritonpy (PyPI) (malicious package)
- [MAL-2024-11515](https://insights.sbomify.com/MAL-2024-11515/): Malicious code in afriton-py (PyPI) (malicious package)
- [MAL-2024-11514](https://insights.sbomify.com/MAL-2024-11514/): Malicious code in afriton (PyPI) (malicious package)
- [MAL-2024-11513](https://insights.sbomify.com/MAL-2024-11513/): Malicious code in afrit-name (PyPI) (malicious package)
- [MAL-2024-11512](https://insights.sbomify.com/MAL-2024-11512/): Malicious code in 48484efej8id (PyPI) (malicious package)
- [MAL-2024-11511](https://insights.sbomify.com/MAL-2024-11511/): Malicious code in Modernzel.UI.WinForms (NuGet) (malicious package)
- [MAL-2024-11510](https://insights.sbomify.com/MAL-2024-11510/): Malicious code in Modernial.UI.WinForms (NuGet) (malicious package)
- [MAL-2024-1151](https://insights.sbomify.com/MAL-2024-1151/): Malicious code in win-regi (npm) (malicious package)
- [MAL-2024-11509](https://insights.sbomify.com/MAL-2024-11509/): Malicious code in Modernial.UI.WinForm (NuGet) (malicious package)
- [MAL-2024-11508](https://insights.sbomify.com/MAL-2024-11508/): Malicious code in Gunа.Forms.Net (NuGet) (malicious package)
- [MAL-2024-11507](https://insights.sbomify.com/MAL-2024-11507/): Malicious code in DiscordNetApi (NuGet) (malicious package)
- [MAL-2024-11506](https://insights.sbomify.com/MAL-2024-11506/): Malicious code in Discord_Rpc.Net (NuGet) (malicious package)
- [MAL-2024-11505](https://insights.sbomify.com/MAL-2024-11505/): Malicious code in Bunifu.Form (NuGet) (malicious package)
- [MAL-2024-11504](https://insights.sbomify.com/MAL-2024-11504/): Malicious code in xigplayer (npm) (malicious package)
- [MAL-2024-11503](https://insights.sbomify.com/MAL-2024-11503/): Malicious code in wynn-and-encore (npm) (malicious package)
- [MAL-2024-11502](https://insights.sbomify.com/MAL-2024-11502/): Malicious code in wp-zuny (npm) (malicious package)
- [MAL-2024-11501](https://insights.sbomify.com/MAL-2024-11501/): Malicious code in wordpress-components-slotfill (npm) (malicious package)
- [MAL-2024-11500](https://insights.sbomify.com/MAL-2024-11500/): Malicious code in woocommerce-grow-jsdoc (npm) (malicious package)
- [MAL-2024-1150](https://insights.sbomify.com/MAL-2024-1150/): Malicious code in trujillocheck (npm) (malicious package)
- [MAL-2024-115](https://insights.sbomify.com/MAL-2024-115/): Malicious code in discord-selfbot-v13 (npm) (malicious package)
- [MAL-2024-11499](https://insights.sbomify.com/MAL-2024-11499/): Malicious code in winupdate (npm) (malicious package)
- [MAL-2024-11498](https://insights.sbomify.com/MAL-2024-11498/): Malicious code in windowsversionupdate (npm) (malicious package)
- [MAL-2024-11497](https://insights.sbomify.com/MAL-2024-11497/): Malicious code in windowsversioncheck (npm) (malicious package)
- [MAL-2024-11496](https://insights.sbomify.com/MAL-2024-11496/): Malicious code in widget-session-sample (npm) (malicious package)
- [MAL-2024-11495](https://insights.sbomify.com/MAL-2024-11495/): Malicious code in webpacks-dev-servers (npm) (malicious package)
- [MAL-2024-11494](https://insights.sbomify.com/MAL-2024-11494/): Malicious code in webpacks-bundles-analyzer (npm) (malicious package)
- [MAL-2024-11493](https://insights.sbomify.com/MAL-2024-11493/): Malicious code in webpacks-bundle-analyze (npm) (malicious package)
- [MAL-2024-11492](https://insights.sbomify.com/MAL-2024-11492/): Malicious code in web3-austt (npm) (malicious package)
- [MAL-2024-11491](https://insights.sbomify.com/MAL-2024-11491/): Malicious code in waveapiv2 (npm) (malicious package)
- [MAL-2024-11490](https://insights.sbomify.com/MAL-2024-11490/): Malicious code in vulnerabledriver (npm) (malicious package)
- [MAL-2024-1149](https://insights.sbomify.com/MAL-2024-1149/): Malicious code in hessskinchecker (npm) (malicious package)
- [MAL-2024-11489](https://insights.sbomify.com/MAL-2024-11489/): Malicious code in vue3-tiktok (npm) (malicious package)
- [MAL-2024-11488](https://insights.sbomify.com/MAL-2024-11488/): Malicious code in vue2-tiktok (npm) (malicious package)
- [MAL-2024-11487](https://insights.sbomify.com/MAL-2024-11487/): Malicious code in vue-nect (npm) (malicious package)
- [MAL-2024-11486](https://insights.sbomify.com/MAL-2024-11486/): Malicious code in vue-cli-plugin-changelog (npm) (malicious package)
- [MAL-2024-11485](https://insights.sbomify.com/MAL-2024-11485/): Malicious code in vscode-dotnet-runtime (npm) (malicious package)
- [MAL-2024-11484](https://insights.sbomify.com/MAL-2024-11484/): Malicious code in velos-lp-ui (npm) (malicious package)
- [MAL-2024-11483](https://insights.sbomify.com/MAL-2024-11483/): Malicious code in varmor (npm) (malicious package)
- [MAL-2024-11482](https://insights.sbomify.com/MAL-2024-11482/): Malicious code in updkernels (npm) (malicious package)
- [MAL-2024-11481](https://insights.sbomify.com/MAL-2024-11481/): Malicious code in updatescan (npm) (malicious package)
- [MAL-2024-11480](https://insights.sbomify.com/MAL-2024-11480/): Malicious code in update-button-module (npm) (malicious package)
- [MAL-2024-1148](https://insights.sbomify.com/MAL-2024-1148/): Malicious code in gkldjdkljgdklfgj (npm) (malicious package)
- [MAL-2024-11479](https://insights.sbomify.com/MAL-2024-11479/): Malicious code in unlock-wave (npm) (malicious package)
- [MAL-2024-11478](https://insights.sbomify.com/MAL-2024-11478/): Malicious code in unity-react-resolver (npm) (malicious package)
- [MAL-2024-11477](https://insights.sbomify.com/MAL-2024-11477/): Malicious code in ui-cluster-driver-civo (npm) (malicious package)
- [MAL-2024-11476](https://insights.sbomify.com/MAL-2024-11476/): Malicious code in typedoc-gen (npm) (malicious package)
- [MAL-2024-11475](https://insights.sbomify.com/MAL-2024-11475/): Malicious code in tsclient.engage.aperture (npm) (malicious package)
- [MAL-2024-11474](https://insights.sbomify.com/MAL-2024-11474/): Malicious code in travix-addon (npm) (malicious package)
- [MAL-2024-11473](https://insights.sbomify.com/MAL-2024-11473/): Malicious code in todmsmsdsd (npm) (malicious package)
- [MAL-2024-11472](https://insights.sbomify.com/MAL-2024-11472/): Malicious code in thd-localizer (npm) (malicious package)
- [MAL-2024-11471](https://insights.sbomify.com/MAL-2024-11471/): Malicious code in testsupplierapp (npm) (malicious package)
- [MAL-2024-11470](https://insights.sbomify.com/MAL-2024-11470/): Malicious code in test-23456 (npm) (malicious package)
- [MAL-2024-1147](https://insights.sbomify.com/MAL-2024-1147/): Malicious code in francoadvisor (npm) (malicious package)
- [MAL-2024-11469](https://insights.sbomify.com/MAL-2024-11469/): Malicious code in template-vue-js (npm) (malicious package)
- [MAL-2024-11468](https://insights.sbomify.com/MAL-2024-11468/): Malicious code in template-vanilla-ts (npm) (malicious package)
- [MAL-2024-11467](https://insights.sbomify.com/MAL-2024-11467/): Malicious code in tebex_checkout_api (npm) (malicious package)
- [MAL-2024-11466](https://insights.sbomify.com/MAL-2024-11466/): Malicious code in tatatata (npm) (malicious package)
- [MAL-2024-11465](https://insights.sbomify.com/MAL-2024-11465/): Malicious code in take4-hello-world (npm) (malicious package)
- [MAL-2024-11464](https://insights.sbomify.com/MAL-2024-11464/): Malicious code in sysscan (npm) (malicious package)
- [MAL-2024-11463](https://insights.sbomify.com/MAL-2024-11463/): Malicious code in string-utility-assistant (npm) (malicious package)
- [MAL-2024-11462](https://insights.sbomify.com/MAL-2024-11462/): Malicious code in solhint-plugin-yearn (npm) (malicious package)
- [MAL-2024-11461](https://insights.sbomify.com/MAL-2024-11461/): Malicious code in solaramatcher (npm) (malicious package)
- [MAL-2024-11460](https://insights.sbomify.com/MAL-2024-11460/): Malicious code in solarainstaller (npm) (malicious package)
- [MAL-2024-1146](https://insights.sbomify.com/MAL-2024-1146/): Malicious code in btcbip-39 (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/113/