# Vulnerabilities published in 2024


- [MAL-2024-10469](https://insights.sbomify.com/MAL-2024-10469/): Malicious code in daumu (npm) (malicious package)
- [MAL-2024-10468](https://insights.sbomify.com/MAL-2024-10468/): Malicious code in @bytedanc-ad/mui-wc (npm) (malicious package)
- [MAL-2024-10467](https://insights.sbomify.com/MAL-2024-10467/): Malicious code in @bytedanc-ad/mui-vue3 (npm) (malicious package)
- [MAL-2024-10466](https://insights.sbomify.com/MAL-2024-10466/): Malicious code in @bytedanc-ad/mui-vue2 (npm) (malicious package)
- [MAL-2024-10465](https://insights.sbomify.com/MAL-2024-10465/): Malicious code in @bytedanc-ad/mui-react (npm) (malicious package)
- [MAL-2024-10464](https://insights.sbomify.com/MAL-2024-10464/): Malicious code in tarsire (PyPI) (malicious package)
- [MAL-2024-10463](https://insights.sbomify.com/MAL-2024-10463/): Malicious code in tarsie (PyPI) (malicious package)
- [MAL-2024-10462](https://insights.sbomify.com/MAL-2024-10462/): Malicious code in tarseir (PyPI) (malicious package)
- [MAL-2024-10461](https://insights.sbomify.com/MAL-2024-10461/): Malicious code in shaiduwkv (PyPI) (malicious package)
- [MAL-2024-10460](https://insights.sbomify.com/MAL-2024-10460/): Malicious code in shadowkw (PyPI) (malicious package)
- [MAL-2024-1046](https://insights.sbomify.com/MAL-2024-1046/): Malicious code in tokenpairs (npm) (malicious package)
- [MAL-2024-10459](https://insights.sbomify.com/MAL-2024-10459/): Malicious code in shadokv (PyPI) (malicious package)
- [MAL-2024-10458](https://insights.sbomify.com/MAL-2024-10458/): Malicious code in salmonn (PyPI) (malicious package)
- [MAL-2024-10457](https://insights.sbomify.com/MAL-2024-10457/): Malicious code in pysisyphes (PyPI) (malicious package)
- [MAL-2024-10456](https://insights.sbomify.com/MAL-2024-10456/): Malicious code in pysisphus (PyPI) (malicious package)
- [MAL-2024-10455](https://insights.sbomify.com/MAL-2024-10455/): Malicious code in physisyphus (PyPI) (malicious package)
- [MAL-2024-10454](https://insights.sbomify.com/MAL-2024-10454/): Malicious code in mtvqa (PyPI) (malicious package)
- [MAL-2024-10453](https://insights.sbomify.com/MAL-2024-10453/): Malicious code in jaqmc (PyPI) (malicious package)
- [MAL-2024-10452](https://insights.sbomify.com/MAL-2024-10452/): Malicious code in hybrid-sd (PyPI) (malicious package)
- [MAL-2024-10451](https://insights.sbomify.com/MAL-2024-10451/): Malicious code in hllm (PyPI) (malicious package)
- [MAL-2024-10450](https://insights.sbomify.com/MAL-2024-10450/): Malicious code in emumonitor (PyPI) (malicious package)
- [MAL-2024-1045](https://insights.sbomify.com/MAL-2024-1045/): Malicious code in tokenpair (npm) (malicious package)
- [MAL-2024-10449](https://insights.sbomify.com/MAL-2024-10449/): Malicious code in e3po (PyPI) (malicious package)
- [MAL-2024-10448](https://insights.sbomify.com/MAL-2024-10448/): Malicious code in decompopt (PyPI) (malicious package)
- [MAL-2024-10447](https://insights.sbomify.com/MAL-2024-10447/): Malicious code in cryostar (PyPI) (malicious package)
- [MAL-2024-10446](https://insights.sbomify.com/MAL-2024-10446/): Malicious code in bytemlperf (PyPI) (malicious package)
- [MAL-2024-10445](https://insights.sbomify.com/MAL-2024-10445/): Malicious code in batchran (PyPI) (malicious package)
- [MAL-2024-10444](https://insights.sbomify.com/MAL-2024-10444/): Malicious code in web3-provdr (npm) (malicious package)
- [MAL-2024-10443](https://insights.sbomify.com/MAL-2024-10443/): Malicious code in web-providers (npm) (malicious package)
- [MAL-2024-10442](https://insights.sbomify.com/MAL-2024-10442/): Malicious code in web-eth (npm) (malicious package)
- [MAL-2024-10441](https://insights.sbomify.com/MAL-2024-10441/): Malicious code in wb3-eth (npm) (malicious package)
- [MAL-2024-10440](https://insights.sbomify.com/MAL-2024-10440/): Malicious code in wb-eth3 (npm) (malicious package)
- [MAL-2024-1044](https://insights.sbomify.com/MAL-2024-1044/): Malicious code in bubble-dev (npm) (malicious package)
- [MAL-2024-10439](https://insights.sbomify.com/MAL-2024-10439/): Malicious code in trufel (npm) (malicious package)
- [MAL-2024-10438](https://insights.sbomify.com/MAL-2024-10438/): Malicious code in solidty-coveage (npm) (malicious package)
- [MAL-2024-10437](https://insights.sbomify.com/MAL-2024-10437/): Malicious code in soliditycoverag (npm) (malicious package)
- [MAL-2024-10436](https://insights.sbomify.com/MAL-2024-10436/): Malicious code in puppeteerwweb (npm) (malicious package)
- [MAL-2024-10435](https://insights.sbomify.com/MAL-2024-10435/): Malicious code in openzepplin-solidity (npm) (malicious package)
- [MAL-2024-10434](https://insights.sbomify.com/MAL-2024-10434/): Malicious code in openzeppelinsolidty (npm) (malicious package)
- [MAL-2024-10433](https://insights.sbomify.com/MAL-2024-10433/): Malicious code in gnache-cli (npm) (malicious package)
- [MAL-2024-10432](https://insights.sbomify.com/MAL-2024-10432/): Malicious code in ganach-cli (npm) (malicious package)
- [MAL-2024-10431](https://insights.sbomify.com/MAL-2024-10431/): Malicious code in ethgass-reporter (npm) (malicious package)
- [MAL-2024-10430](https://insights.sbomify.com/MAL-2024-10430/): Malicious code in etherscaan-api (npm) (malicious package)
- [MAL-2024-1043](https://insights.sbomify.com/MAL-2024-1043/): Malicious code in ux1-ui-kit-theme (npm) (malicious package)
- [MAL-2024-10429](https://insights.sbomify.com/MAL-2024-10429/): Malicious code in eth-gas-report (npm) (malicious package)
- [MAL-2024-10428](https://insights.sbomify.com/MAL-2024-10428/): Malicious code in matitanium (npm) (malicious package)
- [MAL-2024-10427](https://insights.sbomify.com/MAL-2024-10427/): Malicious code in comcast.github.io (npm) (malicious package)
- [MAL-2024-10426](https://insights.sbomify.com/MAL-2024-10426/): Malicious code in bytepilot (PyPI) (malicious package)
- [MAL-2024-10425](https://insights.sbomify.com/MAL-2024-10425/): Malicious code in bytedplus-rec (PyPI) (malicious package)
- [MAL-2024-10424](https://insights.sbomify.com/MAL-2024-10424/): Malicious code in bytedplus (PyPI) (malicious package)
- [MAL-2024-10423](https://insights.sbomify.com/MAL-2024-10423/): Malicious code in bytepilot-0-0-15 (PyPI) (malicious package)
- [MAL-2024-10422](https://insights.sbomify.com/MAL-2024-10422/): Malicious code in tktoken (PyPI) (malicious package)
- [MAL-2024-10421](https://insights.sbomify.com/MAL-2024-10421/): Malicious code in tiketoken (PyPI) (malicious package)
- [MAL-2024-10420](https://insights.sbomify.com/MAL-2024-10420/): Malicious code in nurset (PyPI) (malicious package)
- [MAL-2024-1042](https://insights.sbomify.com/MAL-2024-1042/): Malicious code in frd-rsa-js (npm) (malicious package)
- [MAL-2024-10419](https://insights.sbomify.com/MAL-2024-10419/): Malicious code in macque (PyPI) (malicious package)
- [MAL-2024-10418](https://insights.sbomify.com/MAL-2024-10418/): Malicious code in machaque (PyPI) (malicious package)
- [MAL-2024-10417](https://insights.sbomify.com/MAL-2024-10417/): Malicious code in macaqua (PyPI) (malicious package)
- [MAL-2024-10416](https://insights.sbomify.com/MAL-2024-10416/): Malicious code in habitmf (PyPI) (malicious package)
- [MAL-2024-10415](https://insights.sbomify.com/MAL-2024-10415/): Malicious code in dtb-bytehouse (PyPI) (malicious package)
- [MAL-2024-10414](https://insights.sbomify.com/MAL-2024-10414/): Malicious code in dbt-byteshouse (PyPI) (malicious package)
- [MAL-2024-10413](https://insights.sbomify.com/MAL-2024-10413/): Malicious code in dbt-bytedhouse (PyPI) (malicious package)
- [MAL-2024-10412](https://insights.sbomify.com/MAL-2024-10412/): Malicious code in bytesp (PyPI) (malicious package)
- [MAL-2024-10411](https://insights.sbomify.com/MAL-2024-10411/): Malicious code in bytep (PyPI) (malicious package)
- [MAL-2024-10410](https://insights.sbomify.com/MAL-2024-10410/): Malicious code in bytedps (PyPI) (malicious package)
- [MAL-2024-1041](https://insights.sbomify.com/MAL-2024-1041/): Malicious code in ent-profile-logger (npm) (malicious package)
- [MAL-2024-10409](https://insights.sbomify.com/MAL-2024-10409/): Malicious code in x2vmlgml (PyPI) (malicious package)
- [MAL-2024-10408](https://insights.sbomify.com/MAL-2024-10408/): Malicious code in lightsuq (PyPI) (malicious package)
- [MAL-2024-10407](https://insights.sbomify.com/MAL-2024-10407/): Malicious code in laghtseq (PyPI) (malicious package)
- [MAL-2024-10406](https://insights.sbomify.com/MAL-2024-10406/): Malicious code in bytekafka0-0-15 (PyPI) (malicious package)
- [MAL-2024-10405](https://insights.sbomify.com/MAL-2024-10405/): Malicious code in asmutation (PyPI) (malicious package)
- [MAL-2024-10404](https://insights.sbomify.com/MAL-2024-10404/): Malicious code in @umreg/zxcvbn (npm) (malicious package)
- [MAL-2024-10403](https://insights.sbomify.com/MAL-2024-10403/): Malicious code in zalfausi8 (npm) (malicious package)
- [MAL-2024-10402](https://insights.sbomify.com/MAL-2024-10402/): Malicious code in zalf22ausi8 (npm) (malicious package)
- [MAL-2024-10401](https://insights.sbomify.com/MAL-2024-10401/): Malicious code in puppeteerrequestinterceptor (npm) (malicious package)
- [MAL-2024-10400](https://insights.sbomify.com/MAL-2024-10400/): Malicious code in puppeteerextraadblocker (npm) (malicious package)
- [MAL-2024-1040](https://insights.sbomify.com/MAL-2024-1040/): Malicious code in emilkylandertestnpmpackge (npm) (malicious package)
- [MAL-2024-104](https://insights.sbomify.com/MAL-2024-104/): Malicious code in chalk-color (npm) (malicious package)
- [MAL-2024-10399](https://insights.sbomify.com/MAL-2024-10399/): Malicious code in puppeteercluser (npm) (malicious package)
- [MAL-2024-10398](https://insights.sbomify.com/MAL-2024-10398/): Malicious code in puppeteer-harr (npm) (malicious package)
- [MAL-2024-10397](https://insights.sbomify.com/MAL-2024-10397/): Malicious code in puppeteer-extra-plugin-adblokcer (npm) (malicious package)
- [MAL-2024-10396](https://insights.sbomify.com/MAL-2024-10396/): Malicious code in pupetier (npm) (malicious package)
- [MAL-2024-10395](https://insights.sbomify.com/MAL-2024-10395/): Malicious code in pupeter (npm) (malicious package)
- [MAL-2024-10394](https://insights.sbomify.com/MAL-2024-10394/): Malicious code in pupeteerscreenrecordr (npm) (malicious package)
- [MAL-2024-10393](https://insights.sbomify.com/MAL-2024-10393/): Malicious code in pupeteerreqintercepter (npm) (malicious package)
- [MAL-2024-10392](https://insights.sbomify.com/MAL-2024-10392/): Malicious code in pupeteer-screen-recorder (npm) (malicious package)
- [MAL-2024-10391](https://insights.sbomify.com/MAL-2024-10391/): Malicious code in pupeteer-recorder (npm) (malicious package)
- [MAL-2024-10390](https://insights.sbomify.com/MAL-2024-10390/): Malicious code in pupeteer-page-proxy (npm) (malicious package)
- [MAL-2024-1039](https://insights.sbomify.com/MAL-2024-1039/): Malicious code in is24-desktop (npm) (malicious package)
- [MAL-2024-10389](https://insights.sbomify.com/MAL-2024-10389/): Malicious code in pupeteer-har (npm) (malicious package)
- [MAL-2024-10388](https://insights.sbomify.com/MAL-2024-10388/): Malicious code in pupeteer-cluster (npm) (malicious package)
- [MAL-2024-10387](https://insights.sbomify.com/MAL-2024-10387/): Malicious code in daun124wdsa8 (npm) (malicious package)
- [MAL-2024-10386](https://insights.sbomify.com/MAL-2024-10386/): Malicious code in tcms-malicious-package-test (npm) (malicious package)
- [MAL-2024-10385](https://insights.sbomify.com/MAL-2024-10385/): Malicious code in api-cache-worker (npm) (malicious package)
- [MAL-2024-10384](https://insights.sbomify.com/MAL-2024-10384/): Malicious code in apc-protobuf (npm) (malicious package)
- [MAL-2024-10383](https://insights.sbomify.com/MAL-2024-10383/): Malicious code in apc-official-icon (npm) (malicious package)
- [MAL-2024-10382](https://insights.sbomify.com/MAL-2024-10382/): Malicious code in apa-components (npm) (malicious package)
- [MAL-2024-10381](https://insights.sbomify.com/MAL-2024-10381/): Malicious code in @isfe-common/testing-utils (npm) (malicious package)
- [MAL-2024-10380](https://insights.sbomify.com/MAL-2024-10380/): Malicious code in @isfe-common/testing-constants (npm) (malicious package)
- [MAL-2024-1038](https://insights.sbomify.com/MAL-2024-1038/): Malicious code in nodejs-socket (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/125/