# Vulnerabilities published in 2024


- [MAL-2024-11369](https://insights.sbomify.com/MAL-2024-11369/): Malicious code in iherb-react-environment (npm) (malicious package)
- [MAL-2024-11368](https://insights.sbomify.com/MAL-2024-11368/): Malicious code in iconpark (npm) (malicious package)
- [MAL-2024-11367](https://insights.sbomify.com/MAL-2024-11367/): Malicious code in i18-utils (npm) (malicious package)
- [MAL-2024-11366](https://insights.sbomify.com/MAL-2024-11366/): Malicious code in hwidrefresh (npm) (malicious package)
- [MAL-2024-11365](https://insights.sbomify.com/MAL-2024-11365/): Malicious code in hosted-buttons (npm) (malicious package)
- [MAL-2024-11364](https://insights.sbomify.com/MAL-2024-11364/): Malicious code in gradio-ui (npm) (malicious package)
- [MAL-2024-11363](https://insights.sbomify.com/MAL-2024-11363/): Malicious code in get-matcha (npm) (malicious package)
- [MAL-2024-11362](https://insights.sbomify.com/MAL-2024-11362/): Malicious code in ganash (npm) (malicious package)
- [MAL-2024-11361](https://insights.sbomify.com/MAL-2024-11361/): Malicious code in frontpfr (npm) (malicious package)
- [MAL-2024-11360](https://insights.sbomify.com/MAL-2024-11360/): Malicious code in fisch (npm) (malicious package)
- [MAL-2024-1136](https://insights.sbomify.com/MAL-2024-1136/): Malicious code in region-selector-content (npm) (malicious package)
- [MAL-2024-11359](https://insights.sbomify.com/MAL-2024-11359/): Malicious code in finaustt (npm) (malicious package)
- [MAL-2024-11358](https://insights.sbomify.com/MAL-2024-11358/): Malicious code in facet-mmleditor (npm) (malicious package)
- [MAL-2024-11357](https://insights.sbomify.com/MAL-2024-11357/): Malicious code in evocateur_libnpmpublisher (npm) (malicious package)
- [MAL-2024-11356](https://insights.sbomify.com/MAL-2024-11356/): Malicious code in evocateur_libnpmpublisheing (npm) (malicious package)
- [MAL-2024-11355](https://insights.sbomify.com/MAL-2024-11355/): Malicious code in evocateur_libnpmpublic (npm) (malicious package)
- [MAL-2024-11354](https://insights.sbomify.com/MAL-2024-11354/): Malicious code in evocateur-libnpmpublish (npm) (malicious package)
- [MAL-2024-11353](https://insights.sbomify.com/MAL-2024-11353/): Malicious code in evocater_libpnpmpublic (npm) (malicious package)
- [MAL-2024-11352](https://insights.sbomify.com/MAL-2024-11352/): Malicious code in evocater_libnpmpublish (npm) (malicious package)
- [MAL-2024-11351](https://insights.sbomify.com/MAL-2024-11351/): Malicious code in eth-austt (npm) (malicious package)
- [MAL-2024-11350](https://insights.sbomify.com/MAL-2024-11350/): Malicious code in eslint-plugin-woocommerce (npm) (malicious package)
- [MAL-2024-1135](https://insights.sbomify.com/MAL-2024-1135/): Malicious code in super-social-sdk (npm) (malicious package)
- [MAL-2024-11349](https://insights.sbomify.com/MAL-2024-11349/): Malicious code in eslint-config-ui-core-base (npm) (malicious package)
- [MAL-2024-11348](https://insights.sbomify.com/MAL-2024-11348/): Malicious code in eslint-config-onyx-ui-base (npm) (malicious package)
- [MAL-2024-11347](https://insights.sbomify.com/MAL-2024-11347/): Malicious code in eslint-config-goldeneye (npm) (malicious package)
- [MAL-2024-11346](https://insights.sbomify.com/MAL-2024-11346/): Malicious code in ens-austt (npm) (malicious package)
- [MAL-2024-11345](https://insights.sbomify.com/MAL-2024-11345/): Malicious code in elkeid (npm) (malicious package)
- [MAL-2024-11344](https://insights.sbomify.com/MAL-2024-11344/): Malicious code in electron_npm_deps (npm) (malicious package)
- [MAL-2024-11343](https://insights.sbomify.com/MAL-2024-11343/): Malicious code in eff-minifeapp (npm) (malicious package)
- [MAL-2024-11342](https://insights.sbomify.com/MAL-2024-11342/): Malicious code in docs-ux (npm) (malicious package)
- [MAL-2024-11341](https://insights.sbomify.com/MAL-2024-11341/): Malicious code in discord-clone (npm) (malicious package)
- [MAL-2024-11340](https://insights.sbomify.com/MAL-2024-11340/): Malicious code in dependency-confusion-poc777 (npm) (malicious package)
- [MAL-2024-1134](https://insights.sbomify.com/MAL-2024-1134/): Malicious code in raydium-connect (npm) (malicious package)
- [MAL-2024-11339](https://insights.sbomify.com/MAL-2024-11339/): Malicious code in danum (npm) (malicious package)
- [MAL-2024-11338](https://insights.sbomify.com/MAL-2024-11338/): Malicious code in cyepoc (npm) (malicious package)
- [MAL-2024-11337](https://insights.sbomify.com/MAL-2024-11337/): Malicious code in crypto-latest (npm) (malicious package)
- [MAL-2024-11336](https://insights.sbomify.com/MAL-2024-11336/): Malicious code in create-semi-d2c-plugin (npm) (malicious package)
- [MAL-2024-11335](https://insights.sbomify.com/MAL-2024-11335/): Malicious code in composed-react-app (npm) (malicious package)
- [MAL-2024-11334](https://insights.sbomify.com/MAL-2024-11334/): Malicious code in complire (npm) (malicious package)
- [MAL-2024-11333](https://insights.sbomify.com/MAL-2024-11333/): Malicious code in complier (npm) (malicious package)
- [MAL-2024-11332](https://insights.sbomify.com/MAL-2024-11332/): Malicious code in compilre (npm) (malicious package)
- [MAL-2024-11331](https://insights.sbomify.com/MAL-2024-11331/): Malicious code in com.nethereum.unity (npm) (malicious package)
- [MAL-2024-11330](https://insights.sbomify.com/MAL-2024-11330/): Malicious code in chime-ui (npm) (malicious package)
- [MAL-2024-1133](https://insights.sbomify.com/MAL-2024-1133/): Malicious code in @testorgggg/pkg3 (npm) (malicious package)
- [MAL-2024-11329](https://insights.sbomify.com/MAL-2024-11329/): Malicious code in check-deps-version-consistency (npm) (malicious package)
- [MAL-2024-11328](https://insights.sbomify.com/MAL-2024-11328/): Malicious code in check-deps-ver-consistency (npm) (malicious package)
- [MAL-2024-11327](https://insights.sbomify.com/MAL-2024-11327/): Malicious code in check-dependency-ver-consistency (npm) (malicious package)
- [MAL-2024-11326](https://insights.sbomify.com/MAL-2024-11326/): Malicious code in ccs-react-lib (npm) (malicious package)
- [MAL-2024-11325](https://insights.sbomify.com/MAL-2024-11325/): Malicious code in ccb-app-ui-service (npm) (malicious package)
- [MAL-2024-11324](https://insights.sbomify.com/MAL-2024-11324/): Malicious code in cap1-modules (npm) (malicious package)
- [MAL-2024-11323](https://insights.sbomify.com/MAL-2024-11323/): Malicious code in c1f212x412haxer (npm) (malicious package)
- [MAL-2024-11322](https://insights.sbomify.com/MAL-2024-11322/): Malicious code in c0re-jss (npm) (malicious package)
- [MAL-2024-11321](https://insights.sbomify.com/MAL-2024-11321/): Malicious code in byteir (npm) (malicious package)
- [MAL-2024-11320](https://insights.sbomify.com/MAL-2024-11320/): Malicious code in bytedance-i18n-hooks (npm) (malicious package)
- [MAL-2024-1132](https://insights.sbomify.com/MAL-2024-1132/): Malicious code in caas-static (npm) (malicious package)
- [MAL-2024-11319](https://insights.sbomify.com/MAL-2024-11319/): Malicious code in bytedance-i18n-ghook (npm) (malicious package)
- [MAL-2024-11318](https://insights.sbomify.com/MAL-2024-11318/): Malicious code in byted-guides (npm) (malicious package)
- [MAL-2024-11317](https://insights.sbomify.com/MAL-2024-11317/): Malicious code in byted-guide (npm) (malicious package)
- [MAL-2024-11316](https://insights.sbomify.com/MAL-2024-11316/): Malicious code in byte-guides (npm) (malicious package)
- [MAL-2024-11315](https://insights.sbomify.com/MAL-2024-11315/): Malicious code in bloxbootstrap (npm) (malicious package)
- [MAL-2024-11314](https://insights.sbomify.com/MAL-2024-11314/): Malicious code in bitdefender-sitemap-creator (npm) (malicious package)
- [MAL-2024-11313](https://insights.sbomify.com/MAL-2024-11313/): Malicious code in bioma (npm) (malicious package)
- [MAL-2024-11312](https://insights.sbomify.com/MAL-2024-11312/): Malicious code in bigcommerce-monit (npm) (malicious package)
- [MAL-2024-11311](https://insights.sbomify.com/MAL-2024-11311/): Malicious code in bc-loading (npm) (malicious package)
- [MAL-2024-11310](https://insights.sbomify.com/MAL-2024-11310/): Malicious code in bababababa (npm) (malicious package)
- [MAL-2024-1131](https://insights.sbomify.com/MAL-2024-1131/): Malicious code in u-workflow.module.common.webapp (npm) (malicious package)
- [MAL-2024-11309](https://insights.sbomify.com/MAL-2024-11309/): Malicious code in b2bneo (npm) (malicious package)
- [MAL-2024-11308](https://insights.sbomify.com/MAL-2024-11308/): Malicious code in awf-styles (npm) (malicious package)
- [MAL-2024-11307](https://insights.sbomify.com/MAL-2024-11307/): Malicious code in autoball (npm) (malicious package)
- [MAL-2024-11306](https://insights.sbomify.com/MAL-2024-11306/): Malicious code in asdasssd-hello-world (npm) (malicious package)
- [MAL-2024-11305](https://insights.sbomify.com/MAL-2024-11305/): Malicious code in asdassd-hello-world (npm) (malicious package)
- [MAL-2024-11304](https://insights.sbomify.com/MAL-2024-11304/): Malicious code in asdasd-hello-world (npm) (malicious package)
- [MAL-2024-11303](https://insights.sbomify.com/MAL-2024-11303/): Malicious code in asanablog (npm) (malicious package)
- [MAL-2024-11302](https://insights.sbomify.com/MAL-2024-11302/): Malicious code in arkangel-ai (npm) (malicious package)
- [MAL-2024-11301](https://insights.sbomify.com/MAL-2024-11301/): Malicious code in apply-brand-color (npm) (malicious package)
- [MAL-2024-11300](https://insights.sbomify.com/MAL-2024-11300/): Malicious code in app-webbridge (npm) (malicious package)
- [MAL-2024-1130](https://insights.sbomify.com/MAL-2024-1130/): Malicious code in pulsate (npm) (malicious package)
- [MAL-2024-113](https://insights.sbomify.com/MAL-2024-113/): Malicious code in child-proces (npm) (malicious package)
- [MAL-2024-11299](https://insights.sbomify.com/MAL-2024-11299/): Malicious code in apc-publish (npm) (malicious package)
- [MAL-2024-11298](https://insights.sbomify.com/MAL-2024-11298/): Malicious code in apc-admin-utils (npm) (malicious package)
- [MAL-2024-11297](https://insights.sbomify.com/MAL-2024-11297/): Malicious code in antibyfron (npm) (malicious package)
- [MAL-2024-11296](https://insights.sbomify.com/MAL-2024-11296/): Malicious code in another-query-parser (npm) (malicious package)
- [MAL-2024-11295](https://insights.sbomify.com/MAL-2024-11295/): Malicious code in aiglife.episerver.web (npm) (malicious package)
- [MAL-2024-11294](https://insights.sbomify.com/MAL-2024-11294/): Malicious code in agilent.pl29.voldemort.frontend (npm) (malicious package)
- [MAL-2024-11293](https://insights.sbomify.com/MAL-2024-11293/): Malicious code in admin-upload-common (npm) (malicious package)
- [MAL-2024-11292](https://insights.sbomify.com/MAL-2024-11292/): Malicious code in active-win1 (npm) (malicious package)
- [MAL-2024-11291](https://insights.sbomify.com/MAL-2024-11291/): Malicious code in acribus-core (npm) (malicious package)
- [MAL-2024-11290](https://insights.sbomify.com/MAL-2024-11290/): Malicious code in acp-docs (npm) (malicious package)
- [MAL-2024-1129](https://insights.sbomify.com/MAL-2024-1129/): Malicious code in espn-react-oneid (npm) (malicious package)
- [MAL-2024-11289](https://insights.sbomify.com/MAL-2024-11289/): Malicious code in acces-react (npm) (malicious package)
- [MAL-2024-11288](https://insights.sbomify.com/MAL-2024-11288/): Malicious code in ac-analytics (npm) (malicious package)
- [MAL-2024-11287](https://insights.sbomify.com/MAL-2024-11287/): Malicious code in a39a85e7 (npm) (malicious package)
- [MAL-2024-11286](https://insights.sbomify.com/MAL-2024-11286/): Malicious code in a111y-cloud (npm) (malicious package)
- [MAL-2024-11285](https://insights.sbomify.com/MAL-2024-11285/): Malicious code in @wf-wfmfe/sdk (npm) (malicious package)
- [MAL-2024-11284](https://insights.sbomify.com/MAL-2024-11284/): Malicious code in @volcenjine/tos-sdk (npm) (malicious package)
- [MAL-2024-11283](https://insights.sbomify.com/MAL-2024-11283/): Malicious code in @volcenjine/rtc (npm) (malicious package)
- [MAL-2024-11282](https://insights.sbomify.com/MAL-2024-11282/): Malicious code in @volcenjine/openapi (npm) (malicious package)
- [MAL-2024-11281](https://insights.sbomify.com/MAL-2024-11281/): Malicious code in @thd-eux/theme-mui (npm) (malicious package)
- [MAL-2024-11280](https://insights.sbomify.com/MAL-2024-11280/): Malicious code in @service-and-repairs/awpintegrationlib (npm) (malicious package)
- [MAL-2024-1128](https://insights.sbomify.com/MAL-2024-1128/): Malicious code in abcotv-story-parser (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/115/