# Vulnerabilities published in 2024


- [MAL-2024-9554](https://insights.sbomify.com/MAL-2024-9554/): Malicious code in client-sfn (npm) (malicious package)
- [MAL-2024-9553](https://insights.sbomify.com/MAL-2024-9553/): Malicious code in client-ses (npm) (malicious package)
- [MAL-2024-9552](https://insights.sbomify.com/MAL-2024-9552/): Malicious code in client-s3 (npm) (malicious package)
- [MAL-2024-9551](https://insights.sbomify.com/MAL-2024-9551/): Malicious code in client-lambda (npm) (malicious package)
- [MAL-2024-9550](https://insights.sbomify.com/MAL-2024-9550/): Malicious code in client-iam (npm) (malicious package)
- [MAL-2024-955](https://insights.sbomify.com/MAL-2024-955/): Malicious code in @time-loop/electron-panel-window (npm) (malicious package)
- [MAL-2024-9549](https://insights.sbomify.com/MAL-2024-9549/): Malicious code in client-eventbridge (npm) (malicious package)
- [MAL-2024-9548](https://insights.sbomify.com/MAL-2024-9548/): Malicious code in client-dynamodb (npm) (malicious package)
- [MAL-2024-9547](https://insights.sbomify.com/MAL-2024-9547/): Malicious code in client-cognito-identity-provider (npm) (malicious package)
- [MAL-2024-9546](https://insights.sbomify.com/MAL-2024-9546/): Malicious code in client-cloudwatch-logs (npm) (malicious package)
- [MAL-2024-9545](https://insights.sbomify.com/MAL-2024-9545/): Malicious code in cli-linux-x64 (npm) (malicious package)
- [MAL-2024-9544](https://insights.sbomify.com/MAL-2024-9544/): Malicious code in cli-doctor (npm) (malicious package)
- [MAL-2024-9543](https://insights.sbomify.com/MAL-2024-9543/): Malicious code in cli-ctor (npm) (malicious package)
- [MAL-2024-9542](https://insights.sbomify.com/MAL-2024-9542/): Malicious code in claticles (npm) (malicious package)
- [MAL-2024-9541](https://insights.sbomify.com/MAL-2024-9541/): Malicious code in ckeditor5-table (npm) (malicious package)
- [MAL-2024-9540](https://insights.sbomify.com/MAL-2024-9540/): Malicious code in ckeditor5-cloud-services (npm) (malicious package)
- [MAL-2024-954](https://insights.sbomify.com/MAL-2024-954/): Malicious code in usaa-drag-drop (npm) (malicious package)
- [MAL-2024-9539](https://insights.sbomify.com/MAL-2024-9539/): Malicious code in ckeditor5-block-quote (npm) (malicious package)
- [MAL-2024-9538](https://insights.sbomify.com/MAL-2024-9538/): Malicious code in ckeditor5-alignment (npm) (malicious package)
- [MAL-2024-9537](https://insights.sbomify.com/MAL-2024-9537/): Malicious code in ciomiojui (npm) (malicious package)
- [MAL-2024-9536](https://insights.sbomify.com/MAL-2024-9536/): Malicious code in chunked-blob-reader-native (npm) (malicious package)
- [MAL-2024-9535](https://insights.sbomify.com/MAL-2024-9535/): Malicious code in cheerful-emerald-pig (npm) (malicious package)
- [MAL-2024-9534](https://insights.sbomify.com/MAL-2024-9534/): Malicious code in censhare-web (npm) (malicious package)
- [MAL-2024-9533](https://insights.sbomify.com/MAL-2024-9533/): Malicious code in careful-scarlet-cattle (npm) (malicious package)
- [MAL-2024-9532](https://insights.sbomify.com/MAL-2024-9532/): Malicious code in bundled-angular-compiler (npm) (malicious package)
- [MAL-2024-9531](https://insights.sbomify.com/MAL-2024-9531/): Malicious code in builder-vite (npm) (malicious package)
- [MAL-2024-9530](https://insights.sbomify.com/MAL-2024-9530/): Malicious code in builder-manager (npm) (malicious package)
- [MAL-2024-953](https://insights.sbomify.com/MAL-2024-953/): Malicious code in fdistube-config (npm) (malicious package)
- [MAL-2024-9529](https://insights.sbomify.com/MAL-2024-9529/): Malicious code in bsuwoeuo (npm) (malicious package)
- [MAL-2024-9528](https://insights.sbomify.com/MAL-2024-9528/): Malicious code in bsowuier (npm) (malicious package)
- [MAL-2024-9527](https://insights.sbomify.com/MAL-2024-9527/): Malicious code in bsjueior (npm) (malicious package)
- [MAL-2024-9526](https://insights.sbomify.com/MAL-2024-9526/): Malicious code in bruteforcesettings (npm) (malicious package)
- [MAL-2024-9525](https://insights.sbomify.com/MAL-2024-9525/): Malicious code in boring-amethyst-sheep (npm) (malicious package)
- [MAL-2024-9524](https://insights.sbomify.com/MAL-2024-9524/): Malicious code in boolean-point-in-polygon (npm) (malicious package)
- [MAL-2024-9523](https://insights.sbomify.com/MAL-2024-9523/): Malicious code in bnppf-font-icons (npm) (malicious package)
- [MAL-2024-9522](https://insights.sbomify.com/MAL-2024-9522/): Malicious code in bkdevportal (npm) (malicious package)
- [MAL-2024-9521](https://insights.sbomify.com/MAL-2024-9521/): Malicious code in biwjhsue (npm) (malicious package)
- [MAL-2024-9520](https://insights.sbomify.com/MAL-2024-9520/): Malicious code in biutyiops (npm) (malicious package)
- [MAL-2024-952](https://insights.sbomify.com/MAL-2024-952/): Malicious code in distube-f (npm) (malicious package)
- [MAL-2024-9519](https://insights.sbomify.com/MAL-2024-9519/): Malicious code in binding-rose-ox (npm) (malicious package)
- [MAL-2024-9518](https://insights.sbomify.com/MAL-2024-9518/): Malicious code in big-blush-anglerfish (npm) (malicious package)
- [MAL-2024-9517](https://insights.sbomify.com/MAL-2024-9517/): Malicious code in awueord (npm) (malicious package)
- [MAL-2024-9516](https://insights.sbomify.com/MAL-2024-9516/): Malicious code in aws-crypto (npm) (malicious package)
- [MAL-2024-9515](https://insights.sbomify.com/MAL-2024-9515/): Malicious code in available-coral-possum (npm) (malicious package)
- [MAL-2024-9514](https://insights.sbomify.com/MAL-2024-9514/): Malicious code in autogen_studio (npm) (malicious package)
- [MAL-2024-9513](https://insights.sbomify.com/MAL-2024-9513/): Malicious code in auto-instrumentations-node (npm) (malicious package)
- [MAL-2024-9512](https://insights.sbomify.com/MAL-2024-9512/): Malicious code in auth0-lock-browserify (npm) (malicious package)
- [MAL-2024-9511](https://insights.sbomify.com/MAL-2024-9511/): Malicious code in auth-oauth-device (npm) (malicious package)
- [MAL-2024-9510](https://insights.sbomify.com/MAL-2024-9510/): Malicious code in atlassian-static-assets-url-plugin (npm) (malicious package)
- [MAL-2024-951](https://insights.sbomify.com/MAL-2024-951/): Malicious code in discord-cache (npm) (malicious package)
- [MAL-2024-9509](https://insights.sbomify.com/MAL-2024-9509/): Malicious code in atlassian-oauth2-plugin (npm) (malicious package)
- [MAL-2024-9508](https://insights.sbomify.com/MAL-2024-9508/): Malicious code in aswieos (npm) (malicious package)
- [MAL-2024-9507](https://insights.sbomify.com/MAL-2024-9507/): Malicious code in assets-registry (npm) (malicious package)
- [MAL-2024-9506](https://insights.sbomify.com/MAL-2024-9506/): Malicious code in assetiq-kudu-node (npm) (malicious package)
- [MAL-2024-9505](https://insights.sbomify.com/MAL-2024-9505/): Malicious code in aspernatur-pariatur-occaecati (npm) (malicious package)
- [MAL-2024-9504](https://insights.sbomify.com/MAL-2024-9504/): Malicious code in apidevtools (npm) (malicious package)
- [MAL-2024-9503](https://insights.sbomify.com/MAL-2024-9503/): Malicious code in api-extractor-model (npm) (malicious package)
- [MAL-2024-9502](https://insights.sbomify.com/MAL-2024-9502/): Malicious code in android-x64 (npm) (malicious package)
- [MAL-2024-9501](https://insights.sbomify.com/MAL-2024-9501/): Malicious code in android-arm64 (npm) (malicious package)
- [MAL-2024-9500](https://insights.sbomify.com/MAL-2024-9500/): Malicious code in android-arm (npm) (malicious package)
- [MAL-2024-950](https://insights.sbomify.com/MAL-2024-950/): Malicious code in diil-selfservice-components (npm) (malicious package)
- [MAL-2024-95](https://insights.sbomify.com/MAL-2024-95/): Malicious code in wdpr-node-conversation (npm) (malicious package)
- [MAL-2024-9499](https://insights.sbomify.com/MAL-2024-9499/): Malicious code in alloy-icons (npm) (malicious package)
- [MAL-2024-9498](https://insights.sbomify.com/MAL-2024-9498/): Malicious code in alexablueprintswizard (npm) (malicious package)
- [MAL-2024-9497](https://insights.sbomify.com/MAL-2024-9497/): Malicious code in aix-ppc64 (npm) (malicious package)
- [MAL-2024-9496](https://insights.sbomify.com/MAL-2024-9496/): Malicious code in ahmedwael00 (npm) (malicious package)
- [MAL-2024-9495](https://insights.sbomify.com/MAL-2024-9495/): Malicious code in agora-rtc-web (npm) (malicious package)
- [MAL-2024-9494](https://insights.sbomify.com/MAL-2024-9494/): Malicious code in aggregate-rose-booby (npm) (malicious package)
- [MAL-2024-9493](https://insights.sbomify.com/MAL-2024-9493/): Malicious code in acceptable-purple-sheep (npm) (malicious package)
- [MAL-2024-9492](https://insights.sbomify.com/MAL-2024-9492/): Malicious code in acceptable-emerald-ladybug (npm) (malicious package)
- [MAL-2024-9491](https://insights.sbomify.com/MAL-2024-9491/): Malicious code in able-lime-albatross (npm) (malicious package)
- [MAL-2024-9490](https://insights.sbomify.com/MAL-2024-9490/): Malicious code in @zva/web (npm) (malicious package)
- [MAL-2024-949](https://insights.sbomify.com/MAL-2024-949/): Malicious code in diil-front (npm) (malicious package)
- [MAL-2024-9489](https://insights.sbomify.com/MAL-2024-9489/): Malicious code in @zhiend989/asdfqwer (npm) (malicious package)
- [MAL-2024-9488](https://insights.sbomify.com/MAL-2024-9488/): Malicious code in @vertiv-co/voidray-sdk-addon-media-recorder (npm) (malicious package)
- [MAL-2024-9487](https://insights.sbomify.com/MAL-2024-9487/): Malicious code in @vertiv-co/voidray-sdk-addon-map-file (npm) (malicious package)
- [MAL-2024-9486](https://insights.sbomify.com/MAL-2024-9486/): Malicious code in @vertiv-co/voidray-sdk-addon-disk-image-write (npm) (malicious package)
- [MAL-2024-9485](https://insights.sbomify.com/MAL-2024-9485/): Malicious code in @vertiv-co/voidray-sdk-addon-disk-image-browse (npm) (malicious package)
- [MAL-2024-9484](https://insights.sbomify.com/MAL-2024-9484/): Malicious code in @vertiv-co/voidray-sdk-addon-audio (npm) (malicious package)
- [MAL-2024-9483](https://insights.sbomify.com/MAL-2024-9483/): Malicious code in @vertiv-co/voidray-sdk (npm) (malicious package)
- [MAL-2024-9482](https://insights.sbomify.com/MAL-2024-9482/): Malicious code in @vertiv-co/asdfqwer (npm) (malicious package)
- [MAL-2024-9481](https://insights.sbomify.com/MAL-2024-9481/): Malicious code in @vertiv-co/adx-jetstream-util (npm) (malicious package)
- [MAL-2024-9480](https://insights.sbomify.com/MAL-2024-9480/): Malicious code in @usaa-grp-inf-presentation/usaa-tw-base (npm) (malicious package)
- [MAL-2024-948](https://insights.sbomify.com/MAL-2024-948/): Malicious code in identity-auth (npm) (malicious package)
- [MAL-2024-9479](https://insights.sbomify.com/MAL-2024-9479/): Malicious code in @usaa-grp-inf-presentation/usaa-tw-apps (npm) (malicious package)
- [MAL-2024-9478](https://insights.sbomify.com/MAL-2024-9478/): Malicious code in @usaa-grp-inf-presentation/browserslist-config-usaa (npm) (malicious package)
- [MAL-2024-9477](https://insights.sbomify.com/MAL-2024-9477/): Malicious code in @taxify/trippricingopt (npm) (malicious package)
- [MAL-2024-9476](https://insights.sbomify.com/MAL-2024-9476/): Malicious code in @taxify/taxify-code-utils (npm) (malicious package)
- [MAL-2024-9475](https://insights.sbomify.com/MAL-2024-9475/): Malicious code in @taxify/redux-session (npm) (malicious package)
- [MAL-2024-9474](https://insights.sbomify.com/MAL-2024-9474/): Malicious code in @taxify/price-estimate-helper-models (npm) (malicious package)
- [MAL-2024-9473](https://insights.sbomify.com/MAL-2024-9473/): Malicious code in @taxify/nodejs-common (npm) (malicious package)
- [MAL-2024-9472](https://insights.sbomify.com/MAL-2024-9472/): Malicious code in @snapchat-web-calling/app (npm) (malicious package)
- [MAL-2024-9471](https://insights.sbomify.com/MAL-2024-9471/): Malicious code in @shwetkhushi/field-group (npm) (malicious package)
- [MAL-2024-9470](https://insights.sbomify.com/MAL-2024-9470/): Malicious code in @pcid/client-request-builder (npm) (malicious package)
- [MAL-2024-947](https://insights.sbomify.com/MAL-2024-947/): Malicious code in moblig-npm (npm) (malicious package)
- [MAL-2024-9469](https://insights.sbomify.com/MAL-2024-9469/): Malicious code in @no1xsalman/dompubsub (npm) (malicious package)
- [MAL-2024-9468](https://insights.sbomify.com/MAL-2024-9468/): Malicious code in @mwrc/a (npm) (malicious package)
- [MAL-2024-9467](https://insights.sbomify.com/MAL-2024-9467/): Malicious code in @msaaqcom/masaqtest (npm) (malicious package)
- [MAL-2024-9466](https://insights.sbomify.com/MAL-2024-9466/): Malicious code in @iceberg-react/test-package (npm) (malicious package)
- [MAL-2024-9465](https://insights.sbomify.com/MAL-2024-9465/): Malicious code in @galaxy-joy/loy.api.core (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/12/