# Vulnerabilities published in 2024


- [MAL-2024-10919](https://insights.sbomify.com/MAL-2024-10919/): Malicious code in clement-malicious-npm-package-1 (npm) (malicious package)
- [MAL-2024-10918](https://insights.sbomify.com/MAL-2024-10918/): Malicious code in bigumner-js (npm) (malicious package)
- [MAL-2024-10917](https://insights.sbomify.com/MAL-2024-10917/): Malicious code in bignum.js (npm) (malicious package)
- [MAL-2024-10916](https://insights.sbomify.com/MAL-2024-10916/): Malicious code in bcoi (npm) (malicious package)
- [MAL-2024-10915](https://insights.sbomify.com/MAL-2024-10915/): Malicious code in alif-media-downloader (npm) (malicious package)
- [MAL-2024-10914](https://insights.sbomify.com/MAL-2024-10914/): Malicious code in veworld-mock (npm) (malicious package)
- [MAL-2024-10913](https://insights.sbomify.com/MAL-2024-10913/): Malicious code in symphony-markdown (npm) (malicious package)
- [MAL-2024-10912](https://insights.sbomify.com/MAL-2024-10912/): Malicious code in quorumnetworktester (npm) (malicious package)
- [MAL-2024-10911](https://insights.sbomify.com/MAL-2024-10911/): Malicious code in plaid-tiny-quickstart (npm) (malicious package)
- [MAL-2024-10910](https://insights.sbomify.com/MAL-2024-10910/): Malicious code in node-commerce-web (npm) (malicious package)
- [MAL-2024-1091](https://insights.sbomify.com/MAL-2024-1091/): Malicious code in udp-components (npm) (malicious package)
- [MAL-2024-10909](https://insights.sbomify.com/MAL-2024-10909/): Malicious code in lunar-root (npm) (malicious package)
- [MAL-2024-10908](https://insights.sbomify.com/MAL-2024-10908/): Malicious code in jigasi-haproxy-agent (npm) (malicious package)
- [MAL-2024-10907](https://insights.sbomify.com/MAL-2024-10907/): Malicious code in generate-release-description (npm) (malicious package)
- [MAL-2024-10906](https://insights.sbomify.com/MAL-2024-10906/): Malicious code in eth-based-p2p-e2e-latency (npm) (malicious package)
- [MAL-2024-10905](https://insights.sbomify.com/MAL-2024-10905/): Malicious code in dashlane-vscode (npm) (malicious package)
- [MAL-2024-10904](https://insights.sbomify.com/MAL-2024-10904/): Malicious code in d1-northwind (npm) (malicious package)
- [MAL-2024-10903](https://insights.sbomify.com/MAL-2024-10903/): Malicious code in clarity-vs-code-web-client (npm) (malicious package)
- [MAL-2024-10902](https://insights.sbomify.com/MAL-2024-10902/): Malicious code in clarity-lsp (npm) (malicious package)
- [MAL-2024-10901](https://insights.sbomify.com/MAL-2024-10901/): Malicious code in aries-bifold-root (npm) (malicious package)
- [MAL-2024-10900](https://insights.sbomify.com/MAL-2024-10900/): Malicious code in rc-network (npm) (malicious package)
- [MAL-2024-1090](https://insights.sbomify.com/MAL-2024-1090/): Malicious code in starknet4 (npm) (malicious package)
- [MAL-2024-109](https://insights.sbomify.com/MAL-2024-109/): Malicious code in sync-axios (npm) (malicious package)
- [MAL-2024-10899](https://insights.sbomify.com/MAL-2024-10899/): Malicious code in cloud-functions-schedule-instance (npm) (malicious package)
- [MAL-2024-10898](https://insights.sbomify.com/MAL-2024-10898/): Malicious code in canvaskit-local (npm) (malicious package)
- [MAL-2024-10897](https://insights.sbomify.com/MAL-2024-10897/): Malicious code in nylas-private-sounds (npm) (malicious package)
- [MAL-2024-10896](https://insights.sbomify.com/MAL-2024-10896/): Malicious code in nylas-private-fonts (npm) (malicious package)
- [MAL-2024-10895](https://insights.sbomify.com/MAL-2024-10895/): Malicious code in some-random-package-33 (PyPI) (malicious package)
- [MAL-2024-10894](https://insights.sbomify.com/MAL-2024-10894/): Malicious code in certain-common-library (npm) (malicious package)
- [MAL-2024-10893](https://insights.sbomify.com/MAL-2024-10893/): Malicious code in kiosk-cli (npm) (malicious package)
- [MAL-2024-10892](https://insights.sbomify.com/MAL-2024-10892/): Malicious code in hackbron (npm) (malicious package)
- [MAL-2024-10891](https://insights.sbomify.com/MAL-2024-10891/): Malicious code in graph-studio-billing-contracts (npm) (malicious package)
- [MAL-2024-10890](https://insights.sbomify.com/MAL-2024-10890/): Malicious code in webpack-svg-spirit-import (npm) (malicious package)
- [MAL-2024-1089](https://insights.sbomify.com/MAL-2024-1089/): Malicious code in shereyas (npm) (malicious package)
- [MAL-2024-10889](https://insights.sbomify.com/MAL-2024-10889/): Malicious code in webpack-support-multi-domain-plugin (npm) (malicious package)
- [MAL-2024-10888](https://insights.sbomify.com/MAL-2024-10888/): Malicious code in webpack-insert-sentry-plugin (npm) (malicious package)
- [MAL-2024-10887](https://insights.sbomify.com/MAL-2024-10887/): Malicious code in web_enhance_sap-latest (npm) (malicious package)
- [MAL-2024-10886](https://insights.sbomify.com/MAL-2024-10886/): Malicious code in web-chat-portal (npm) (malicious package)
- [MAL-2024-10885](https://insights.sbomify.com/MAL-2024-10885/): Malicious code in @framgia/test (npm) (malicious package)
- [MAL-2024-10884](https://insights.sbomify.com/MAL-2024-10884/): Malicious code in ens-app-v2 (npm) (malicious package)
- [MAL-2024-10883](https://insights.sbomify.com/MAL-2024-10883/): Malicious code in codeql-extractor-iac-action (npm) (malicious package)
- [MAL-2024-10882](https://insights.sbomify.com/MAL-2024-10882/): Malicious code in codeql-sarif-security-standard-annotator (npm) (malicious package)
- [MAL-2024-10881](https://insights.sbomify.com/MAL-2024-10881/): Malicious code in security-alert-watcher (npm) (malicious package)
- [MAL-2024-10880](https://insights.sbomify.com/MAL-2024-10880/): Malicious code in maven-dependency-submission-action (npm) (malicious package)
- [MAL-2024-1088](https://insights.sbomify.com/MAL-2024-1088/): Malicious code in salesforce-service-cloud (npm) (malicious package)
- [MAL-2024-10879](https://insights.sbomify.com/MAL-2024-10879/): Malicious code in ap-components-react (npm) (malicious package)
- [MAL-2024-10878](https://insights.sbomify.com/MAL-2024-10878/): Malicious code in @ba-ui-toolkit/ba-graphics (npm) (malicious package)
- [MAL-2024-10877](https://insights.sbomify.com/MAL-2024-10877/): Malicious code in newpipv3 (PyPI) (malicious package)
- [MAL-2024-10876](https://insights.sbomify.com/MAL-2024-10876/): Malicious code in viz_schema (npm) (malicious package)
- [MAL-2024-10875](https://insights.sbomify.com/MAL-2024-10875/): Malicious code in vite-plugin-unus-api-register (npm) (malicious package)
- [MAL-2024-10874](https://insights.sbomify.com/MAL-2024-10874/): Malicious code in viewercontext (npm) (malicious package)
- [MAL-2024-10873](https://insights.sbomify.com/MAL-2024-10873/): Malicious code in uuid-latest (npm) (malicious package)
- [MAL-2024-10872](https://insights.sbomify.com/MAL-2024-10872/): Malicious code in uss-vod-js-sdk (npm) (malicious package)
- [MAL-2024-10871](https://insights.sbomify.com/MAL-2024-10871/): Malicious code in upload-to-shopee-cdn (npm) (malicious package)
- [MAL-2024-10870](https://insights.sbomify.com/MAL-2024-10870/): Malicious code in ts-diagnosis (npm) (malicious package)
- [MAL-2024-1087](https://insights.sbomify.com/MAL-2024-1087/): Malicious code in rat-patrol (npm) (malicious package)
- [MAL-2024-10869](https://insights.sbomify.com/MAL-2024-10869/): Malicious code in storage-atom (npm) (malicious package)
- [MAL-2024-10868](https://insights.sbomify.com/MAL-2024-10868/): Malicious code in ssc-upload-react (npm) (malicious package)
- [MAL-2024-10867](https://insights.sbomify.com/MAL-2024-10867/): Malicious code in ssc-ui-react-next (npm) (malicious package)
- [MAL-2024-10866](https://insights.sbomify.com/MAL-2024-10866/): Malicious code in ssc-ui-react (npm) (malicious package)
- [MAL-2024-10865](https://insights.sbomify.com/MAL-2024-10865/): Malicious code in ssc-org-vue (npm) (malicious package)
- [MAL-2024-10864](https://insights.sbomify.com/MAL-2024-10864/): Malicious code in spid-sharing-panel (npm) (malicious package)
- [MAL-2024-10863](https://insights.sbomify.com/MAL-2024-10863/): Malicious code in spid-gc-ui-leaderboard (npm) (malicious package)
- [MAL-2024-10862](https://insights.sbomify.com/MAL-2024-10862/): Malicious code in spex-node-client (npm) (malicious package)
- [MAL-2024-10861](https://insights.sbomify.com/MAL-2024-10861/): Malicious code in spex-dts (npm) (malicious package)
- [MAL-2024-10860](https://insights.sbomify.com/MAL-2024-10860/): Malicious code in short-link-sharer (npm) (malicious package)
- [MAL-2024-1086](https://insights.sbomify.com/MAL-2024-1086/): Malicious code in pod-consumer-backend (npm) (malicious package)
- [MAL-2024-10859](https://insights.sbomify.com/MAL-2024-10859/): Malicious code in shopee-ui (npm) (malicious package)
- [MAL-2024-10858](https://insights.sbomify.com/MAL-2024-10858/): Malicious code in shopee-form-ui (npm) (malicious package)
- [MAL-2024-10857](https://insights.sbomify.com/MAL-2024-10857/): Malicious code in s-page-legacy (npm) (malicious package)
- [MAL-2024-10856](https://insights.sbomify.com/MAL-2024-10856/): Malicious code in react-fatigue-dev (npm) (malicious package)
- [MAL-2024-10855](https://insights.sbomify.com/MAL-2024-10855/): Malicious code in node-elm-stdio (npm) (malicious package)
- [MAL-2024-10854](https://insights.sbomify.com/MAL-2024-10854/): Malicious code in mangadex-archive-torrent-processor (npm) (malicious package)
- [MAL-2024-10853](https://insights.sbomify.com/MAL-2024-10853/): Malicious code in filter-engine-ui (npm) (malicious package)
- [MAL-2024-10852](https://insights.sbomify.com/MAL-2024-10852/): Malicious code in electron-request (npm) (malicious package)
- [MAL-2024-10851](https://insights.sbomify.com/MAL-2024-10851/): Malicious code in dapp-test-runner (npm) (malicious package)
- [MAL-2024-10850](https://insights.sbomify.com/MAL-2024-10850/): Malicious code in cljs-dopeloop (npm) (malicious package)
- [MAL-2024-1085](https://insights.sbomify.com/MAL-2024-1085/): Malicious code in npm_macos (npm) (malicious package)
- [MAL-2024-10849](https://insights.sbomify.com/MAL-2024-10849/): Malicious code in my-wallet-backupt-decryption-tool (npm) (malicious package)
- [MAL-2024-10848](https://insights.sbomify.com/MAL-2024-10848/): Malicious code in npm-cli-release-please (npm) (malicious package)
- [MAL-2024-10847](https://insights.sbomify.com/MAL-2024-10847/): Malicious code in eslint-tools (npm) (malicious package)
- [MAL-2024-10846](https://insights.sbomify.com/MAL-2024-10846/): Malicious code in river-build (npm) (malicious package)
- [MAL-2024-10845](https://insights.sbomify.com/MAL-2024-10845/): Malicious code in galileo_staking (npm) (malicious package)
- [MAL-2024-10844](https://insights.sbomify.com/MAL-2024-10844/): Malicious code in camera-kit-react-native-example (npm) (malicious package)
- [MAL-2024-10843](https://insights.sbomify.com/MAL-2024-10843/): Malicious code in import-path-rewrite (npm) (malicious package)
- [MAL-2024-10842](https://insights.sbomify.com/MAL-2024-10842/): Malicious code in mona-service (npm) (malicious package)
- [MAL-2024-10841](https://insights.sbomify.com/MAL-2024-10841/): Malicious code in mona-runtime (npm) (malicious package)
- [MAL-2024-10840](https://insights.sbomify.com/MAL-2024-10840/): Malicious code in mona-client-mini (npm) (malicious package)
- [MAL-2024-1084](https://insights.sbomify.com/MAL-2024-1084/): Malicious code in mastercard-postman-encryption-lib (npm) (malicious package)
- [MAL-2024-10839](https://insights.sbomify.com/MAL-2024-10839/): Malicious code in vtvqa (PyPI) (malicious package)
- [MAL-2024-10838](https://insights.sbomify.com/MAL-2024-10838/): Malicious code in service-affinity-scheduling (PyPI) (malicious package)
- [MAL-2024-10837](https://insights.sbomify.com/MAL-2024-10837/): Malicious code in portrait-mode-video (PyPI) (malicious package)
- [MAL-2024-10836](https://insights.sbomify.com/MAL-2024-10836/): Malicious code in offline-rl-congestion-control (PyPI) (malicious package)
- [MAL-2024-10835](https://insights.sbomify.com/MAL-2024-10835/): Malicious code in netobs (PyPI) (malicious package)
- [MAL-2024-10834](https://insights.sbomify.com/MAL-2024-10834/): Malicious code in fc-clip (PyPI) (malicious package)
- [MAL-2024-10833](https://insights.sbomify.com/MAL-2024-10833/): Malicious code in deadiff (PyPI) (malicious package)
- [MAL-2024-10832](https://insights.sbomify.com/MAL-2024-10832/): Malicious code in affinequant (PyPI) (malicious package)
- [MAL-2024-10831](https://insights.sbomify.com/MAL-2024-10831/): Malicious code in x-portrait (PyPI) (malicious package)
- [MAL-2024-10830](https://insights.sbomify.com/MAL-2024-10830/): Malicious code in textharmony (PyPI) (malicious package)
- [MAL-2024-1083](https://insights.sbomify.com/MAL-2024-1083/): Malicious code in liquity (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/120/