# Vulnerabilities published in 2024


- [MAL-2024-11099](https://insights.sbomify.com/MAL-2024-11099/): Malicious code in spid-gc-config (npm) (malicious package)
- [MAL-2024-11098](https://insights.sbomify.com/MAL-2024-11098/): Malicious code in soybean-admin-tab (npm) (malicious package)
- [MAL-2024-11097](https://insights.sbomify.com/MAL-2024-11097/): Malicious code in soybean-admin-layout (npm) (malicious package)
- [MAL-2024-11096](https://insights.sbomify.com/MAL-2024-11096/): Malicious code in solarafixer (npm) (malicious package)
- [MAL-2024-11095](https://insights.sbomify.com/MAL-2024-11095/): Malicious code in simplified-jsbridge (npm) (malicious package)
- [MAL-2024-11094](https://insights.sbomify.com/MAL-2024-11094/): Malicious code in shopee-ui-automatic-import-loader (npm) (malicious package)
- [MAL-2024-11093](https://insights.sbomify.com/MAL-2024-11093/): Malicious code in shopee-rich-editor (npm) (malicious package)
- [MAL-2024-11092](https://insights.sbomify.com/MAL-2024-11092/): Malicious code in shopee-pcs-ui (npm) (malicious package)
- [MAL-2024-11091](https://insights.sbomify.com/MAL-2024-11091/): Malicious code in shopee-loading-report-sdk (npm) (malicious package)
- [MAL-2024-11090](https://insights.sbomify.com/MAL-2024-11090/): Malicious code in shopee-guide (npm) (malicious package)
- [MAL-2024-1109](https://insights.sbomify.com/MAL-2024-1109/): Malicious code in cert-orchestration-adapter (PyPI) (malicious package)
- [MAL-2024-11089](https://insights.sbomify.com/MAL-2024-11089/): Malicious code in shop-market-uss (npm) (malicious package)
- [MAL-2024-11088](https://insights.sbomify.com/MAL-2024-11088/): Malicious code in seller-webchat-service (npm) (malicious package)
- [MAL-2024-11087](https://insights.sbomify.com/MAL-2024-11087/): Malicious code in seller-webchat-build-sdk (npm) (malicious package)
- [MAL-2024-11086](https://insights.sbomify.com/MAL-2024-11086/): Malicious code in seller-payment-common (npm) (malicious package)
- [MAL-2024-11085](https://insights.sbomify.com/MAL-2024-11085/): Malicious code in seller-base-common (npm) (malicious package)
- [MAL-2024-11084](https://insights.sbomify.com/MAL-2024-11084/): Malicious code in secure-fetch-utils-stable (npm) (malicious package)
- [MAL-2024-11083](https://insights.sbomify.com/MAL-2024-11083/): Malicious code in ruby-lsp (npm) (malicious package)
- [MAL-2024-11082](https://insights.sbomify.com/MAL-2024-11082/): Malicious code in rtn-centered-text (npm) (malicious package)
- [MAL-2024-11081](https://insights.sbomify.com/MAL-2024-11081/): Malicious code in rollup-plugin-hotreload (npm) (malicious package)
- [MAL-2024-11080](https://insights.sbomify.com/MAL-2024-11080/): Malicious code in rnt-demo-text (npm) (malicious package)
- [MAL-2024-1108](https://insights.sbomify.com/MAL-2024-1108/): Malicious code in mle-py-connector (PyPI) (malicious package)
- [MAL-2024-11079](https://insights.sbomify.com/MAL-2024-11079/): Malicious code in rlending-protocol (npm) (malicious package)
- [MAL-2024-11078](https://insights.sbomify.com/MAL-2024-11078/): Malicious code in repository-dispatch1 (npm) (malicious package)
- [MAL-2024-11077](https://insights.sbomify.com/MAL-2024-11077/): Malicious code in repository-dispatch (npm) (malicious package)
- [MAL-2024-11076](https://insights.sbomify.com/MAL-2024-11076/): Malicious code in release-platform-utils (npm) (malicious package)
- [MAL-2024-11075](https://insights.sbomify.com/MAL-2024-11075/): Malicious code in release-notice (npm) (malicious package)
- [MAL-2024-11074](https://insights.sbomify.com/MAL-2024-11074/): Malicious code in react-is-17 (npm) (malicious package)
- [MAL-2024-11073](https://insights.sbomify.com/MAL-2024-11073/): Malicious code in react-domain-components (npm) (malicious package)
- [MAL-2024-11072](https://insights.sbomify.com/MAL-2024-11072/): Malicious code in react-dnd11-html5-backend (npm) (malicious package)
- [MAL-2024-11071](https://insights.sbomify.com/MAL-2024-11071/): Malicious code in react-common-lib (npm) (malicious package)
- [MAL-2024-11070](https://insights.sbomify.com/MAL-2024-11070/): Malicious code in react-big-calendar2 (npm) (malicious package)
- [MAL-2024-1107](https://insights.sbomify.com/MAL-2024-1107/): Malicious code in formvalidationtestauth (npm) (malicious package)
- [MAL-2024-11069](https://insights.sbomify.com/MAL-2024-11069/): Malicious code in proton-vpn-browser-extension (npm) (malicious package)
- [MAL-2024-11068](https://insights.sbomify.com/MAL-2024-11068/): Malicious code in protobufjs-shopee (npm) (malicious package)
- [MAL-2024-11067](https://insights.sbomify.com/MAL-2024-11067/): Malicious code in pfms-feedback (npm) (malicious package)
- [MAL-2024-11066](https://insights.sbomify.com/MAL-2024-11066/): Malicious code in people-intv-common (npm) (malicious package)
- [MAL-2024-11065](https://insights.sbomify.com/MAL-2024-11065/): Malicious code in pb-ts-gen (npm) (malicious package)
- [MAL-2024-11064](https://insights.sbomify.com/MAL-2024-11064/): Malicious code in parimiko (npm) (malicious package)
- [MAL-2024-11063](https://insights.sbomify.com/MAL-2024-11063/): Malicious code in parcel-plugin-lighterhtm (npm) (malicious package)
- [MAL-2024-11062](https://insights.sbomify.com/MAL-2024-11062/): Malicious code in pap-sdk (npm) (malicious package)
- [MAL-2024-11061](https://insights.sbomify.com/MAL-2024-11061/): Malicious code in operation-server-sdk (npm) (malicious package)
- [MAL-2024-11060](https://insights.sbomify.com/MAL-2024-11060/): Malicious code in opendevin-frontend (npm) (malicious package)
- [MAL-2024-1106](https://insights.sbomify.com/MAL-2024-1106/): Malicious code in lyft-stats (PyPI) (malicious package)
- [MAL-2024-11059](https://insights.sbomify.com/MAL-2024-11059/): Malicious code in npmrunnall (npm) (malicious package)
- [MAL-2024-11058](https://insights.sbomify.com/MAL-2024-11058/): Malicious code in nodejs-prom-reporter (npm) (malicious package)
- [MAL-2024-11057](https://insights.sbomify.com/MAL-2024-11057/): Malicious code in node-pyt (npm) (malicious package)
- [MAL-2024-11056](https://insights.sbomify.com/MAL-2024-11056/): Malicious code in nlhybridfixer (npm) (malicious package)
- [MAL-2024-11055](https://insights.sbomify.com/MAL-2024-11055/): Malicious code in nikmodzp (npm) (malicious package)
- [MAL-2024-11054](https://insights.sbomify.com/MAL-2024-11054/): Malicious code in nft-dapp-starter-kit (npm) (malicious package)
- [MAL-2024-11053](https://insights.sbomify.com/MAL-2024-11053/): Malicious code in mystock-ui (npm) (malicious package)
- [MAL-2024-11052](https://insights.sbomify.com/MAL-2024-11052/): Malicious code in mssr (npm) (malicious package)
- [MAL-2024-11051](https://insights.sbomify.com/MAL-2024-11051/): Malicious code in ls-upload-cmpt (npm) (malicious package)
- [MAL-2024-11050](https://insights.sbomify.com/MAL-2024-11050/): Malicious code in listing-reporter (npm) (malicious package)
- [MAL-2024-1105](https://insights.sbomify.com/MAL-2024-1105/): Malicious code in lyft-settings (PyPI) (malicious package)
- [MAL-2024-11049](https://insights.sbomify.com/MAL-2024-11049/): Malicious code in linencloth (npm) (malicious package)
- [MAL-2024-11048](https://insights.sbomify.com/MAL-2024-11048/): Malicious code in k8s-apps-wordpress (npm) (malicious package)
- [MAL-2024-11047](https://insights.sbomify.com/MAL-2024-11047/): Malicious code in json-schema-editor-visual-yapi (npm) (malicious package)
- [MAL-2024-11046](https://insights.sbomify.com/MAL-2024-11046/): Malicious code in journey-client-reactor (npm) (malicious package)
- [MAL-2024-11045](https://insights.sbomify.com/MAL-2024-11045/): Malicious code in item-sold-count (npm) (malicious package)
- [MAL-2024-11044](https://insights.sbomify.com/MAL-2024-11044/): Malicious code in item-card-sdk (npm) (malicious package)
- [MAL-2024-11043](https://insights.sbomify.com/MAL-2024-11043/): Malicious code in github-script (npm) (malicious package)
- [MAL-2024-11042](https://insights.sbomify.com/MAL-2024-11042/): Malicious code in gapi-ts (npm) (malicious package)
- [MAL-2024-11041](https://insights.sbomify.com/MAL-2024-11041/): Malicious code in gaming_token (npm) (malicious package)
- [MAL-2024-11040](https://insights.sbomify.com/MAL-2024-11040/): Malicious code in fulfillment-common (npm) (malicious package)
- [MAL-2024-1104](https://insights.sbomify.com/MAL-2024-1104/): Malicious code in lyft-exceptions (PyPI) (malicious package)
- [MAL-2024-11039](https://insights.sbomify.com/MAL-2024-11039/): Malicious code in fixexec (npm) (malicious package)
- [MAL-2024-11038](https://insights.sbomify.com/MAL-2024-11038/): Malicious code in fe-prometheus-report (npm) (malicious package)
- [MAL-2024-11037](https://insights.sbomify.com/MAL-2024-11037/): Malicious code in eslint-plugin-sls-fe-lint (npm) (malicious package)
- [MAL-2024-11036](https://insights.sbomify.com/MAL-2024-11036/): Malicious code in eslint-plugin-mkt-bff (npm) (malicious package)
- [MAL-2024-11035](https://insights.sbomify.com/MAL-2024-11035/): Malicious code in eslint-formatter-richhtml (npm) (malicious package)
- [MAL-2024-11034](https://insights.sbomify.com/MAL-2024-11034/): Malicious code in eacfix (npm) (malicious package)
- [MAL-2024-11033](https://insights.sbomify.com/MAL-2024-11033/): Malicious code in dogwiftools (npm) (malicious package)
- [MAL-2024-11032](https://insights.sbomify.com/MAL-2024-11032/): Malicious code in chokader (npm) (malicious package)
- [MAL-2024-11031](https://insights.sbomify.com/MAL-2024-11031/): Malicious code in bruteforcetool (npm) (malicious package)
- [MAL-2024-11030](https://insights.sbomify.com/MAL-2024-11030/): Malicious code in bll-cerberus (npm) (malicious package)
- [MAL-2024-1103](https://insights.sbomify.com/MAL-2024-1103/): Malicious code in lyft-requests (PyPI) (malicious package)
- [MAL-2024-11029](https://insights.sbomify.com/MAL-2024-11029/): Malicious code in babelcl (npm) (malicious package)
- [MAL-2024-11028](https://insights.sbomify.com/MAL-2024-11028/): Malicious code in assetmantle (npm) (malicious package)
- [MAL-2024-11027](https://insights.sbomify.com/MAL-2024-11027/): Malicious code in ads-common-components (npm) (malicious package)
- [MAL-2024-11026](https://insights.sbomify.com/MAL-2024-11026/): Malicious code in action-deploy (npm) (malicious package)
- [MAL-2024-11025](https://insights.sbomify.com/MAL-2024-11025/): Malicious code in aa-bundler (npm) (malicious package)
- [MAL-2024-11024](https://insights.sbomify.com/MAL-2024-11024/): Malicious code in uid2-publisher (npm) (malicious package)
- [MAL-2024-11023](https://insights.sbomify.com/MAL-2024-11023/): Malicious code in tc-portal (npm) (malicious package)
- [MAL-2024-11022](https://insights.sbomify.com/MAL-2024-11022/): Malicious code in @hmp/casepaper (npm) (malicious package)
- [MAL-2024-11021](https://insights.sbomify.com/MAL-2024-11021/): Malicious code in yapi-plugin-games-google-login (npm) (malicious package)
- [MAL-2024-11020](https://insights.sbomify.com/MAL-2024-11020/): Malicious code in xenoupdater (npm) (malicious package)
- [MAL-2024-1102](https://insights.sbomify.com/MAL-2024-1102/): Malicious code in r101-css (npm) (malicious package)
- [MAL-2024-11019](https://insights.sbomify.com/MAL-2024-11019/): Malicious code in wms-printer (npm) (malicious package)
- [MAL-2024-11018](https://insights.sbomify.com/MAL-2024-11018/): Malicious code in web_enhance_sap-stable (npm) (malicious package)
- [MAL-2024-11017](https://insights.sbomify.com/MAL-2024-11017/): Malicious code in web-framework-addons (npm) (malicious package)
- [MAL-2024-11016](https://insights.sbomify.com/MAL-2024-11016/): Malicious code in updsolara (npm) (malicious package)
- [MAL-2024-11015](https://insights.sbomify.com/MAL-2024-11015/): Malicious code in updasolara (npm) (malicious package)
- [MAL-2024-11014](https://insights.sbomify.com/MAL-2024-11014/): Malicious code in undc (npm) (malicious package)
- [MAL-2024-11013](https://insights.sbomify.com/MAL-2024-11013/): Malicious code in tracking-wtf (npm) (malicious package)
- [MAL-2024-11012](https://insights.sbomify.com/MAL-2024-11012/): Malicious code in testing-react-jsme (npm) (malicious package)
- [MAL-2024-11011](https://insights.sbomify.com/MAL-2024-11011/): Malicious code in test-generator-plugin (npm) (malicious package)
- [MAL-2024-11010](https://insights.sbomify.com/MAL-2024-11010/): Malicious code in string-process-mate (npm) (malicious package)
- [MAL-2024-1101](https://insights.sbomify.com/MAL-2024-1101/): Malicious code in test12323123 (npm) (malicious package)
- [MAL-2024-11009](https://insights.sbomify.com/MAL-2024-11009/): Malicious code in ssc-user-guide-pro (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/118/