# Vulnerabilities published in 2024


- [MAL-2024-10379](https://insights.sbomify.com/MAL-2024-10379/): Malicious code in @common-pattern/components (npm) (malicious package)
- [MAL-2024-10378](https://insights.sbomify.com/MAL-2024-10378/): Malicious code in emtoolsjs (npm) (malicious package)
- [MAL-2024-10377](https://insights.sbomify.com/MAL-2024-10377/): Malicious code in osm-legal-speed (npm) (malicious package)
- [MAL-2024-10376](https://insights.sbomify.com/MAL-2024-10376/): Malicious code in team-plain (npm) (malicious package)
- [MAL-2024-10375](https://insights.sbomify.com/MAL-2024-10375/): Malicious code in @maps-bc/i18n (npm) (malicious package)
- [MAL-2024-10374](https://insights.sbomify.com/MAL-2024-10374/): Malicious code in @maps-bc/runtime (npm) (malicious package)
- [MAL-2024-10373](https://insights.sbomify.com/MAL-2024-10373/): Malicious code in nurst (PyPI) (malicious package)
- [MAL-2024-10372](https://insights.sbomify.com/MAL-2024-10372/): Malicious code in nuest (PyPI) (malicious package)
- [MAL-2024-10371](https://insights.sbomify.com/MAL-2024-10371/): Malicious code in nuerst (PyPI) (malicious package)
- [MAL-2024-10370](https://insights.sbomify.com/MAL-2024-10370/): Malicious code in nerst (PyPI) (malicious package)
- [MAL-2024-1037](https://insights.sbomify.com/MAL-2024-1037/): Malicious code in virtuoso-ui-common (npm) (malicious package)
- [MAL-2024-10369](https://insights.sbomify.com/MAL-2024-10369/): Malicious code in bytesip (PyPI) (malicious package)
- [MAL-2024-10368](https://insights.sbomify.com/MAL-2024-10368/): Malicious code in byteseep (PyPI) (malicious package)
- [MAL-2024-10367](https://insights.sbomify.com/MAL-2024-10367/): Malicious code in bytesap (PyPI) (malicious package)
- [MAL-2024-10366](https://insights.sbomify.com/MAL-2024-10366/): Malicious code in bebitmf (PyPI) (malicious package)
- [MAL-2024-10365](https://insights.sbomify.com/MAL-2024-10365/): Malicious code in baibitmf (PyPI) (malicious package)
- [MAL-2024-10364](https://insights.sbomify.com/MAL-2024-10364/): Malicious code in babetmf (PyPI) (malicious package)
- [MAL-2024-10363](https://insights.sbomify.com/MAL-2024-10363/): Malicious code in x2vml-gml (PyPI) (malicious package)
- [MAL-2024-10362](https://insights.sbomify.com/MAL-2024-10362/): Malicious code in v2xlm-gml (PyPI) (malicious package)
- [MAL-2024-10361](https://insights.sbomify.com/MAL-2024-10361/): Malicious code in v2mlx-gml (PyPI) (malicious package)
- [MAL-2024-10360](https://insights.sbomify.com/MAL-2024-10360/): Malicious code in lightsequ (PyPI) (malicious package)
- [MAL-2024-1036](https://insights.sbomify.com/MAL-2024-1036/): Malicious code in djanggo (PyPI) (malicious package)
- [MAL-2024-10359](https://insights.sbomify.com/MAL-2024-10359/): Malicious code in lightseqe (PyPI) (malicious package)
- [MAL-2024-10358](https://insights.sbomify.com/MAL-2024-10358/): Malicious code in lightseeq (PyPI) (malicious package)
- [MAL-2024-10357](https://insights.sbomify.com/MAL-2024-10357/): Malicious code in bytekafka-0-15 (PyPI) (malicious package)
- [MAL-2024-10356](https://insights.sbomify.com/MAL-2024-10356/): Malicious code in bytekafka-0-0-15 (PyPI) (malicious package)
- [MAL-2024-10355](https://insights.sbomify.com/MAL-2024-10355/): Malicious code in bytekafka (PyPI) (malicious package)
- [MAL-2024-10354](https://insights.sbomify.com/MAL-2024-10354/): Malicious code in semi-design (npm) (malicious package)
- [MAL-2024-10353](https://insights.sbomify.com/MAL-2024-10353/): Malicious code in semi-d2c (npm) (malicious package)
- [MAL-2024-10352](https://insights.sbomify.com/MAL-2024-10352/): Malicious code in cml-tt-sets (npm) (malicious package)
- [MAL-2024-10351](https://insights.sbomify.com/MAL-2024-10351/): Malicious code in cml-cloudbase (npm) (malicious package)
- [MAL-2024-10350](https://insights.sbomify.com/MAL-2024-10350/): Malicious code in chameleon-sdk-android (npm) (malicious package)
- [MAL-2024-1035](https://insights.sbomify.com/MAL-2024-1035/): Malicious code in uikit-dark-mode (npm) (malicious package)
- [MAL-2024-10349](https://insights.sbomify.com/MAL-2024-10349/): Malicious code in @douinfe/semi-ui (npm) (malicious package)
- [MAL-2024-10348](https://insights.sbomify.com/MAL-2024-10348/): Malicious code in puppeteerrecordr (npm) (malicious package)
- [MAL-2024-10347](https://insights.sbomify.com/MAL-2024-10347/): Malicious code in puppeteerpluginstealth (npm) (malicious package)
- [MAL-2024-10346](https://insights.sbomify.com/MAL-2024-10346/): Malicious code in puppeteercaptur (npm) (malicious package)
- [MAL-2024-10345](https://insights.sbomify.com/MAL-2024-10345/): Malicious code in puppeteer-screencorder (npm) (malicious package)
- [MAL-2024-10344](https://insights.sbomify.com/MAL-2024-10344/): Malicious code in puppeteer-req-interceptor (npm) (malicious package)
- [MAL-2024-10343](https://insights.sbomify.com/MAL-2024-10343/): Malicious code in puppeteer-html2pd (npm) (malicious package)
- [MAL-2024-10342](https://insights.sbomify.com/MAL-2024-10342/): Malicious code in puppeteer-firfox (npm) (malicious package)
- [MAL-2024-10341](https://insights.sbomify.com/MAL-2024-10341/): Malicious code in puppeteer-extra-stealth (npm) (malicious package)
- [MAL-2024-10340](https://insights.sbomify.com/MAL-2024-10340/): Malicious code in puppeteer-captre (npm) (malicious package)
- [MAL-2024-1034](https://insights.sbomify.com/MAL-2024-1034/): Malicious code in fekirinetest3 (npm) (malicious package)
- [MAL-2024-10339](https://insights.sbomify.com/MAL-2024-10339/): Malicious code in puppeteer-autoscroll (npm) (malicious package)
- [MAL-2024-10338](https://insights.sbomify.com/MAL-2024-10338/): Malicious code in pupeteerextra (npm) (malicious package)
- [MAL-2024-10337](https://insights.sbomify.com/MAL-2024-10337/): Malicious code in pupeteer-record (npm) (malicious package)
- [MAL-2024-10336](https://insights.sbomify.com/MAL-2024-10336/): Malicious code in pupeteer-proxy (npm) (malicious package)
- [MAL-2024-10335](https://insights.sbomify.com/MAL-2024-10335/): Malicious code in pupeteer-extra-plugin-adblocker (npm) (malicious package)
- [MAL-2024-10334](https://insights.sbomify.com/MAL-2024-10334/): Malicious code in pupeteeerproxy (npm) (malicious package)
- [MAL-2024-10333](https://insights.sbomify.com/MAL-2024-10333/): Malicious code in nuclei-action (npm) (malicious package)
- [MAL-2024-10332](https://insights.sbomify.com/MAL-2024-10332/): Malicious code in nodepaysafesdk (npm) (malicious package)
- [MAL-2024-10331](https://insights.sbomify.com/MAL-2024-10331/): Malicious code in mixpanelexpo (npm) (malicious package)
- [MAL-2024-10330](https://insights.sbomify.com/MAL-2024-10330/): Malicious code in wawawa123s12sd (npm) (malicious package)
- [MAL-2024-1033](https://insights.sbomify.com/MAL-2024-1033/): Malicious code in xo-page-components (npm) (malicious package)
- [MAL-2024-10329](https://insights.sbomify.com/MAL-2024-10329/): Malicious code in sc-pattern-library (npm) (malicious package)
- [MAL-2024-10328](https://insights.sbomify.com/MAL-2024-10328/): Malicious code in sc-meta-layer (npm) (malicious package)
- [MAL-2024-10327](https://insights.sbomify.com/MAL-2024-10327/): Malicious code in sc-libraries (npm) (malicious package)
- [MAL-2024-10326](https://insights.sbomify.com/MAL-2024-10326/): Malicious code in ksjdksdks (npm) (malicious package)
- [MAL-2024-10325](https://insights.sbomify.com/MAL-2024-10325/): Malicious code in kakakakka (npm) (malicious package)
- [MAL-2024-10324](https://insights.sbomify.com/MAL-2024-10324/): Malicious code in finsys-webcomponent (npm) (malicious package)
- [MAL-2024-10323](https://insights.sbomify.com/MAL-2024-10323/): Malicious code in bridgetrack (npm) (malicious package)
- [MAL-2024-10322](https://insights.sbomify.com/MAL-2024-10322/): Malicious code in appdynamics-zmq (npm) (malicious package)
- [MAL-2024-10321](https://insights.sbomify.com/MAL-2024-10321/): Malicious code in appdynamics-protobuf (npm) (malicious package)
- [MAL-2024-10320](https://insights.sbomify.com/MAL-2024-10320/): Malicious code in appdynamics-native (npm) (malicious package)
- [MAL-2024-1032](https://insights.sbomify.com/MAL-2024-1032/): Malicious code in testconfusiontestt (npm) (malicious package)
- [MAL-2024-10319](https://insights.sbomify.com/MAL-2024-10319/): Malicious code in appdynamics-libagent-napi (npm) (malicious package)
- [MAL-2024-10318](https://insights.sbomify.com/MAL-2024-10318/): Malicious code in abdef (npm) (malicious package)
- [MAL-2024-10317](https://insights.sbomify.com/MAL-2024-10317/): Malicious code in @gthwebdev/ui-tooltip (npm) (malicious package)
- [MAL-2024-10316](https://insights.sbomify.com/MAL-2024-10316/): Malicious code in mina-payout (npm) (malicious package)
- [MAL-2024-10315](https://insights.sbomify.com/MAL-2024-10315/): Malicious code in nvidia-clara-sim (PyPI) (malicious package)
- [MAL-2024-10314](https://insights.sbomify.com/MAL-2024-10314/): Malicious code in @toloka-tb/core (npm) (malicious package)
- [MAL-2024-10313](https://insights.sbomify.com/MAL-2024-10313/): Malicious code in evernote-thrift (npm) (malicious package)
- [MAL-2024-10312](https://insights.sbomify.com/MAL-2024-10312/): Malicious code in @captivateiq/random (npm) (malicious package)
- [MAL-2024-10311](https://insights.sbomify.com/MAL-2024-10311/): Malicious code in @captivateiq/handsontable-ciq (npm) (malicious package)
- [MAL-2024-10310](https://insights.sbomify.com/MAL-2024-10310/): Malicious code in @captivateiq/events (npm) (malicious package)
- [MAL-2024-1031](https://insights.sbomify.com/MAL-2024-1031/): Malicious code in scytheetest (npm) (malicious package)
- [MAL-2024-10309](https://insights.sbomify.com/MAL-2024-10309/): Malicious code in rentez-docs (npm) (malicious package)
- [MAL-2024-10308](https://insights.sbomify.com/MAL-2024-10308/): Malicious code in vpsnet-website (npm) (malicious package)
- [MAL-2024-10307](https://insights.sbomify.com/MAL-2024-10307/): Malicious code in @wf-wfria/pioneer-core (npm) (malicious package)
- [MAL-2024-10306](https://insights.sbomify.com/MAL-2024-10306/): Malicious code in creative_design_client (npm) (malicious package)
- [MAL-2024-10305](https://insights.sbomify.com/MAL-2024-10305/): Malicious code in byted_service_env (npm) (malicious package)
- [MAL-2024-10304](https://insights.sbomify.com/MAL-2024-10304/): Malicious code in byted-uploader (npm) (malicious package)
- [MAL-2024-10303](https://insights.sbomify.com/MAL-2024-10303/): Malicious code in gyaani (npm) (malicious package)
- [MAL-2024-10302](https://insights.sbomify.com/MAL-2024-10302/): Malicious code in freshchange (npm) (malicious package)
- [MAL-2024-10301](https://insights.sbomify.com/MAL-2024-10301/): Malicious code in @lottiefiles/lottie-player (npm) (malicious package)
- [MAL-2024-10300](https://insights.sbomify.com/MAL-2024-10300/): Malicious code in allocations-ui (npm) (malicious package)
- [MAL-2024-1030](https://insights.sbomify.com/MAL-2024-1030/): Malicious code in node-red-contrib-object-to-array (npm) (malicious package)
- [MAL-2024-103](https://insights.sbomify.com/MAL-2024-103/): Malicious code in apiv2-fetcher (npm) (malicious package)
- [MAL-2024-10299](https://insights.sbomify.com/MAL-2024-10299/): Malicious code in @amagioss/js-timecode (npm) (malicious package)
- [MAL-2024-10298](https://insights.sbomify.com/MAL-2024-10298/): Malicious code in blossom-flex-ui (npm) (malicious package)
- [MAL-2024-10297](https://insights.sbomify.com/MAL-2024-10297/): Malicious code in upgrade-roblox (npm) (malicious package)
- [MAL-2024-10296](https://insights.sbomify.com/MAL-2024-10296/): Malicious code in testinbro (npm) (malicious package)
- [MAL-2024-10295](https://insights.sbomify.com/MAL-2024-10295/): Malicious code in solaraupdater (npm) (malicious package)
- [MAL-2024-10294](https://insights.sbomify.com/MAL-2024-10294/): Malicious code in robloxbootstrapper (npm) (malicious package)
- [MAL-2024-10293](https://insights.sbomify.com/MAL-2024-10293/): Malicious code in ro.dll (npm) (malicious package)
- [MAL-2024-10292](https://insights.sbomify.com/MAL-2024-10292/): Malicious code in opdistube (npm) (malicious package)
- [MAL-2024-10291](https://insights.sbomify.com/MAL-2024-10291/): Malicious code in nodelogic (npm) (malicious package)
- [MAL-2024-10290](https://insights.sbomify.com/MAL-2024-10290/): Malicious code in nodelement (npm) (malicious package)
- [MAL-2024-1029](https://insights.sbomify.com/MAL-2024-1029/): Malicious code in ember-power-calendar-dayjs (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/126/