# Vulnerabilities published in 2024


- [MAL-2024-11279](https://insights.sbomify.com/MAL-2024-11279/): Malicious code in @saleswhale/barnacle (npm) (malicious package)
- [MAL-2024-11278](https://insights.sbomify.com/MAL-2024-11278/): Malicious code in @rambler-help/shared (npm) (malicious package)
- [MAL-2024-11277](https://insights.sbomify.com/MAL-2024-11277/): Malicious code in @platform-ui-kit/components-library-react (npm) (malicious package)
- [MAL-2024-11276](https://insights.sbomify.com/MAL-2024-11276/): Malicious code in @mysas/shared (npm) (malicious package)
- [MAL-2024-11275](https://insights.sbomify.com/MAL-2024-11275/): Malicious code in @marfeel/eslint-config-js (npm) (malicious package)
- [MAL-2024-11274](https://insights.sbomify.com/MAL-2024-11274/): Malicious code in @linx-ui/payatu (npm) (malicious package)
- [MAL-2024-11273](https://insights.sbomify.com/MAL-2024-11273/): Malicious code in @leseo/book-viewer (npm) (malicious package)
- [MAL-2024-11272](https://insights.sbomify.com/MAL-2024-11272/): Malicious code in @isfe-common/image-minimizer (npm) (malicious package)
- [MAL-2024-11271](https://insights.sbomify.com/MAL-2024-11271/): Malicious code in @im-dims/baileys (npm) (malicious package)
- [MAL-2024-11270](https://insights.sbomify.com/MAL-2024-11270/): Malicious code in @iherb-react-environment/config (npm) (malicious package)
- [MAL-2024-1127](https://insights.sbomify.com/MAL-2024-1127/): Malicious code in tslint-slick (npm) (malicious package)
- [MAL-2024-11269](https://insights.sbomify.com/MAL-2024-11269/): Malicious code in @iherb-payment/pages (npm) (malicious package)
- [MAL-2024-11268](https://insights.sbomify.com/MAL-2024-11268/): Malicious code in @facetca/facet-ruler (npm) (malicious package)
- [MAL-2024-11267](https://insights.sbomify.com/MAL-2024-11267/): Malicious code in @facetca/calculator (npm) (malicious package)
- [MAL-2024-11266](https://insights.sbomify.com/MAL-2024-11266/): Malicious code in @douinfe/semi-animation-react (npm) (malicious package)
- [MAL-2024-11265](https://insights.sbomify.com/MAL-2024-11265/): Malicious code in @douinfe/semi-adimation (npm) (malicious package)
- [MAL-2024-11264](https://insights.sbomify.com/MAL-2024-11264/): Malicious code in @douinfe/create-semi-d2c-plugin (npm) (malicious package)
- [MAL-2024-11263](https://insights.sbomify.com/MAL-2024-11263/): Malicious code in @conundra/components-frontend (npm) (malicious package)
- [MAL-2024-11262](https://insights.sbomify.com/MAL-2024-11262/): Malicious code in @cdh-data-portal-theme/build (npm) (malicious package)
- [MAL-2024-11261](https://insights.sbomify.com/MAL-2024-11261/): Malicious code in @cawraytestorg/packagetest (npm) (malicious package)
- [MAL-2024-11260](https://insights.sbomify.com/MAL-2024-11260/): Malicious code in @bytedanc-ad/market-ui-vue2 (npm) (malicious package)
- [MAL-2024-1126](https://insights.sbomify.com/MAL-2024-1126/): Malicious code in tsconfig-slick (npm) (malicious package)
- [MAL-2024-11259](https://insights.sbomify.com/MAL-2024-11259/): Malicious code in @bytedanc/mona-max (npm) (malicious package)
- [MAL-2024-11258](https://insights.sbomify.com/MAL-2024-11258/): Malicious code in @bytedanc/mona-client-web (npm) (malicious package)
- [MAL-2024-11257](https://insights.sbomify.com/MAL-2024-11257/): Malicious code in @aws-sdk-examples/libs (npm) (malicious package)
- [MAL-2024-11256](https://insights.sbomify.com/MAL-2024-11256/): Malicious code in @arkangel-ai/arkangel-ai (npm) (malicious package)
- [MAL-2024-11255](https://insights.sbomify.com/MAL-2024-11255/): Malicious code in @agilent/web-icons (npm) (malicious package)
- [MAL-2024-11254](https://insights.sbomify.com/MAL-2024-11254/): Malicious code in @agilent/awf-wc (npm) (malicious package)
- [MAL-2024-11253](https://insights.sbomify.com/MAL-2024-11253/): Malicious code in @agilent/awf-styles (npm) (malicious package)
- [MAL-2024-11252](https://insights.sbomify.com/MAL-2024-11252/): Malicious code in @afound/common (npm) (malicious package)
- [MAL-2024-11251](https://insights.sbomify.com/MAL-2024-11251/): Malicious code in @neo-ds/components (npm) (malicious package)
- [MAL-2024-11250](https://insights.sbomify.com/MAL-2024-11250/): Malicious code in v5_2 (npm) (malicious package)
- [MAL-2024-1125](https://insights.sbomify.com/MAL-2024-1125/): Malicious code in sqltest6 (npm) (malicious package)
- [MAL-2024-11249](https://insights.sbomify.com/MAL-2024-11249/): Malicious code in privy-frames-drop (npm) (malicious package)
- [MAL-2024-11248](https://insights.sbomify.com/MAL-2024-11248/): Malicious code in gwinpy (PyPI) (malicious package)
- [MAL-2024-11247](https://insights.sbomify.com/MAL-2024-11247/): Malicious code in fake-emitter-no-schema (npm) (malicious package)
- [MAL-2024-11246](https://insights.sbomify.com/MAL-2024-11246/): Malicious code in chronos-web-ui (npm) (malicious package)
- [MAL-2024-11245](https://insights.sbomify.com/MAL-2024-11245/): Malicious code in tripadvisor-npm (npm) (malicious package)
- [MAL-2024-11244](https://insights.sbomify.com/MAL-2024-11244/): Malicious code in nextcloud2 (npm) (malicious package)
- [MAL-2024-11243](https://insights.sbomify.com/MAL-2024-11243/): Malicious code in nextcloud123 (npm) (malicious package)
- [MAL-2024-11242](https://insights.sbomify.com/MAL-2024-11242/): Malicious code in yelp-lib (npm) (malicious package)
- [MAL-2024-11241](https://insights.sbomify.com/MAL-2024-11241/): Malicious code in bbbx (npm) (malicious package)
- [MAL-2024-11240](https://insights.sbomify.com/MAL-2024-11240/): Malicious code in @chia-networrk/api (npm) (malicious package)
- [MAL-2024-1124](https://insights.sbomify.com/MAL-2024-1124/): Malicious code in soundcloud-scrape (npm) (malicious package)
- [MAL-2024-11239](https://insights.sbomify.com/MAL-2024-11239/): Malicious code in bbb-logging (npm) (malicious package)
- [MAL-2024-11238](https://insights.sbomify.com/MAL-2024-11238/): Malicious code in less-rhino (npm) (malicious package)
- [MAL-2024-11237](https://insights.sbomify.com/MAL-2024-11237/): Malicious code in jquery.slideviewer (npm) (malicious package)
- [MAL-2024-11236](https://insights.sbomify.com/MAL-2024-11236/): Malicious code in auto-plugin-appetize-cleanup (npm) (malicious package)
- [MAL-2024-11235](https://insights.sbomify.com/MAL-2024-11235/): Malicious code in appetize-cli (npm) (malicious package)
- [MAL-2024-11234](https://insights.sbomify.com/MAL-2024-11234/): Malicious code in adminconsole (npm) (malicious package)
- [MAL-2024-11233](https://insights.sbomify.com/MAL-2024-11233/): Malicious code in yelp-logging (npm) (malicious package)
- [MAL-2024-11232](https://insights.sbomify.com/MAL-2024-11232/): Malicious code in zkonmina (npm) (malicious package)
- [MAL-2024-11231](https://insights.sbomify.com/MAL-2024-11231/): Malicious code in react-pillbox (npm) (malicious package)
- [MAL-2024-11230](https://insights.sbomify.com/MAL-2024-11230/): Malicious code in testing-bounty123 (npm) (malicious package)
- [MAL-2024-1123](https://insights.sbomify.com/MAL-2024-1123/): Malicious code in rancho-extensions-app (npm) (malicious package)
- [MAL-2024-11229](https://insights.sbomify.com/MAL-2024-11229/): Malicious code in calendervue (npm) (malicious package)
- [MAL-2024-11228](https://insights.sbomify.com/MAL-2024-11228/): Malicious code in qwilr-examples-create-page (npm) (malicious package)
- [MAL-2024-11227](https://insights.sbomify.com/MAL-2024-11227/): Malicious code in editor-devel (npm) (malicious package)
- [MAL-2024-11226](https://insights.sbomify.com/MAL-2024-11226/): Malicious code in remix-kl-c646 (npm) (malicious package)
- [MAL-2024-11225](https://insights.sbomify.com/MAL-2024-11225/): Malicious code in normal-dep (npm) (malicious package)
- [MAL-2024-11224](https://insights.sbomify.com/MAL-2024-11224/): Malicious code in file-dep-a (npm) (malicious package)
- [MAL-2024-11223](https://insights.sbomify.com/MAL-2024-11223/): Malicious code in usdc.js (npm) (malicious package)
- [MAL-2024-11222](https://insights.sbomify.com/MAL-2024-11222/): Malicious code in prettier-v3-for-testing (npm) (malicious package)
- [MAL-2024-11221](https://insights.sbomify.com/MAL-2024-11221/): Malicious code in debugger-local (npm) (malicious package)
- [MAL-2024-11220](https://insights.sbomify.com/MAL-2024-11220/): Malicious code in ripple-blobvault (npm) (malicious package)
- [MAL-2024-1122](https://insights.sbomify.com/MAL-2024-1122/): Malicious code in polaris-resource-list-examples (npm) (malicious package)
- [MAL-2024-11219](https://insights.sbomify.com/MAL-2024-11219/): Malicious code in asuuuuu (npm) (malicious package)
- [MAL-2024-11218](https://insights.sbomify.com/MAL-2024-11218/): Malicious code in openpass-sample-sites-client-js-sdk (npm) (malicious package)
- [MAL-2024-11217](https://insights.sbomify.com/MAL-2024-11217/): Malicious code in keccak-crypto (npm) (malicious package)
- [MAL-2024-11216](https://insights.sbomify.com/MAL-2024-11216/): Malicious code in jsonwebtoken-js (npm) (malicious package)
- [MAL-2024-11215](https://insights.sbomify.com/MAL-2024-11215/): Malicious code in crypto-chalk (npm) (malicious package)
- [MAL-2024-11214](https://insights.sbomify.com/MAL-2024-11214/): Malicious code in openpass-sample-sites-piano-io (npm) (malicious package)
- [MAL-2024-11213](https://insights.sbomify.com/MAL-2024-11213/): Malicious code in vareapi (npm) (malicious package)
- [MAL-2024-11212](https://insights.sbomify.com/MAL-2024-11212/): Malicious code in pentest-helper (npm) (malicious package)
- [MAL-2024-11211](https://insights.sbomify.com/MAL-2024-11211/): Malicious code in pantheon-documentation (npm) (malicious package)
- [MAL-2024-11210](https://insights.sbomify.com/MAL-2024-11210/): Malicious code in ndbench-ui (npm) (malicious package)
- [MAL-2024-1121](https://insights.sbomify.com/MAL-2024-1121/): Malicious code in packagerandomattackertest (npm) (malicious package)
- [MAL-2024-11209](https://insights.sbomify.com/MAL-2024-11209/): Malicious code in kubernetes-agent-nfs-watchdog (npm) (malicious package)
- [MAL-2024-11208](https://insights.sbomify.com/MAL-2024-11208/): Malicious code in ic-master-wordpress (npm) (malicious package)
- [MAL-2024-11207](https://insights.sbomify.com/MAL-2024-11207/): Malicious code in crypto-layout-utils (npm) (malicious package)
- [MAL-2024-11206](https://insights.sbomify.com/MAL-2024-11206/): Malicious code in ba-graphics (npm) (malicious package)
- [MAL-2024-11205](https://insights.sbomify.com/MAL-2024-11205/): Malicious code in @wix-platform/velo-multilingual-helper-backend (npm) (malicious package)
- [MAL-2024-11204](https://insights.sbomify.com/MAL-2024-11204/): Malicious code in cdp-agentkit-core (npm) (malicious package)
- [MAL-2024-11203](https://insights.sbomify.com/MAL-2024-11203/): Malicious code in finn-pulse-init (npm) (malicious package)
- [MAL-2024-11202](https://insights.sbomify.com/MAL-2024-11202/): Malicious code in buoyant-utils (npm) (malicious package)
- [MAL-2024-11201](https://insights.sbomify.com/MAL-2024-11201/): Malicious code in coldbox (npm) (malicious package)
- [MAL-2024-11200](https://insights.sbomify.com/MAL-2024-11200/): Malicious code in quintoandar-jwt (npm) (malicious package)
- [MAL-2024-1120](https://insights.sbomify.com/MAL-2024-1120/): Malicious code in functions-workshop (npm) (malicious package)
- [MAL-2024-112](https://insights.sbomify.com/MAL-2024-112/): Malicious code in djs-selfbot-v14 (npm) (malicious package)
- [MAL-2024-11199](https://insights.sbomify.com/MAL-2024-11199/): Malicious code in wrapped-tokens (npm) (malicious package)
- [MAL-2024-11198](https://insights.sbomify.com/MAL-2024-11198/): Malicious code in web3-executor (npm) (malicious package)
- [MAL-2024-11197](https://insights.sbomify.com/MAL-2024-11197/): Malicious code in stacks-blockchain-dist-tool (npm) (malicious package)
- [MAL-2024-11196](https://insights.sbomify.com/MAL-2024-11196/): Malicious code in set-pr-description-action (npm) (malicious package)
- [MAL-2024-11195](https://insights.sbomify.com/MAL-2024-11195/): Malicious code in fastify-tfb (npm) (malicious package)
- [MAL-2024-11194](https://insights.sbomify.com/MAL-2024-11194/): Malicious code in com.immutable.marketplace (npm) (malicious package)
- [MAL-2024-11193](https://insights.sbomify.com/MAL-2024-11193/): Malicious code in codat-docs (npm) (malicious package)
- [MAL-2024-11192](https://insights.sbomify.com/MAL-2024-11192/): Malicious code in basic-preset-minting (npm) (malicious package)
- [MAL-2024-11191](https://insights.sbomify.com/MAL-2024-11191/): Malicious code in auto-cancel-redundant-job (npm) (malicious package)
- [MAL-2024-11190](https://insights.sbomify.com/MAL-2024-11190/): Malicious code in vue-midata (npm) (malicious package)
- [MAL-2024-1119](https://insights.sbomify.com/MAL-2024-1119/): Malicious code in flow-code-examples (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/116/