# Vulnerabilities published in 2024


- [MAL-2024-9464](https://insights.sbomify.com/MAL-2024-9464/): Malicious code in @frontend-performance/image-lazy-loading (npm) (malicious package)
- [MAL-2024-9463](https://insights.sbomify.com/MAL-2024-9463/): Malicious code in @daimler-rcms/api-client (npm) (malicious package)
- [MAL-2024-9462](https://insights.sbomify.com/MAL-2024-9462/): Malicious code in owasp-aasvs-to-readthedocs (npm) (malicious package)
- [MAL-2024-9461](https://insights.sbomify.com/MAL-2024-9461/): Malicious code in git-commit-message-convention (npm) (malicious package)
- [MAL-2024-9460](https://insights.sbomify.com/MAL-2024-9460/): Malicious code in sling-sdk (npm) (malicious package)
- [MAL-2024-946](https://insights.sbomify.com/MAL-2024-946/): Malicious code in dragon7-dc-vulntest (npm) (malicious package)
- [MAL-2024-9459](https://insights.sbomify.com/MAL-2024-9459/): Malicious code in semantic-release-commit-rules (npm) (malicious package)
- [MAL-2024-9458](https://insights.sbomify.com/MAL-2024-9458/): Malicious code in monday-react-quickstart-app (npm) (malicious package)
- [MAL-2024-9457](https://insights.sbomify.com/MAL-2024-9457/): Malicious code in module-with-node-gyp (npm) (malicious package)
- [MAL-2024-9456](https://insights.sbomify.com/MAL-2024-9456/): Malicious code in eslint-plugin-no-unsafe (npm) (malicious package)
- [MAL-2024-9455](https://insights.sbomify.com/MAL-2024-9455/): Malicious code in csm-docs (npm) (malicious package)
- [MAL-2024-9454](https://insights.sbomify.com/MAL-2024-9454/): Malicious code in ohcm-polymerase (npm) (malicious package)
- [MAL-2024-9453](https://insights.sbomify.com/MAL-2024-9453/): Malicious code in mybasicauth (npm) (malicious package)
- [MAL-2024-9452](https://insights.sbomify.com/MAL-2024-9452/): Malicious code in pwn2day-shell (npm) (malicious package)
- [MAL-2024-9451](https://insights.sbomify.com/MAL-2024-9451/): Malicious code in artifact-lab-3-package-24ddbc49 (PyPI) (malicious package)
- [MAL-2024-9450](https://insights.sbomify.com/MAL-2024-9450/): Malicious code in @wf-wfmfe/pxp (npm) (malicious package)
- [MAL-2024-945](https://insights.sbomify.com/MAL-2024-945/): Malicious code in wlwz-2312-2nd (npm) (malicious package)
- [MAL-2024-9449](https://insights.sbomify.com/MAL-2024-9449/): Malicious code in xcampaigntracker (npm) (malicious package)
- [MAL-2024-9448](https://insights.sbomify.com/MAL-2024-9448/): Malicious code in mcroutingservice (npm) (malicious package)
- [MAL-2024-9447](https://insights.sbomify.com/MAL-2024-9447/): Malicious code in nuance-mix (npm) (malicious package)
- [MAL-2024-9446](https://insights.sbomify.com/MAL-2024-9446/): Malicious code in flag-leak-r (PyPI) (malicious package)
- [MAL-2024-9445](https://insights.sbomify.com/MAL-2024-9445/): Malicious code in reqstus (npm) (malicious package)
- [MAL-2024-9444](https://insights.sbomify.com/MAL-2024-9444/): Malicious code in google-drive-integration (npm) (malicious package)
- [MAL-2024-9443](https://insights.sbomify.com/MAL-2024-9443/): Malicious code in sn-flow-client (npm) (malicious package)
- [MAL-2024-9442](https://insights.sbomify.com/MAL-2024-9442/): Malicious code in @ng-cat/common (npm) (malicious package)
- [MAL-2024-9441](https://insights.sbomify.com/MAL-2024-9441/): Malicious code in unity-xlsx (npm) (malicious package)
- [MAL-2024-9440](https://insights.sbomify.com/MAL-2024-9440/): Malicious code in unity-components (npm) (malicious package)
- [MAL-2024-944](https://insights.sbomify.com/MAL-2024-944/): Malicious code in web-ai-51pwn (npm) (malicious package)
- [MAL-2024-9439](https://insights.sbomify.com/MAL-2024-9439/): Malicious code in @ttspc/open_center_qf_detail (npm) (malicious package)
- [MAL-2024-9438](https://insights.sbomify.com/MAL-2024-9438/): Malicious code in capi-param-builder (npm) (malicious package)
- [MAL-2024-9437](https://insights.sbomify.com/MAL-2024-9437/): Malicious code in eslint-config-bc (npm) (malicious package)
- [MAL-2024-9436](https://insights.sbomify.com/MAL-2024-9436/): Malicious code in nf-gestures (npm) (malicious package)
- [MAL-2024-9435](https://insights.sbomify.com/MAL-2024-9435/): Malicious code in wagmi-toolkits (npm) (malicious package)
- [MAL-2024-9434](https://insights.sbomify.com/MAL-2024-9434/): Malicious code in wagmi-connectors (npm) (malicious package)
- [MAL-2024-9433](https://insights.sbomify.com/MAL-2024-9433/): Malicious code in jungle-db (npm) (malicious package)
- [MAL-2024-9432](https://insights.sbomify.com/MAL-2024-9432/): Malicious code in atg-superagent-retry-delay (npm) (malicious package)
- [MAL-2024-9431](https://insights.sbomify.com/MAL-2024-9431/): Malicious code in roblox-creator-docs (npm) (malicious package)
- [MAL-2024-9430](https://insights.sbomify.com/MAL-2024-9430/): Malicious code in projetmobile (npm) (malicious package)
- [MAL-2024-943](https://insights.sbomify.com/MAL-2024-943/): Malicious code in take-cam (npm) (malicious package)
- [MAL-2024-9429](https://insights.sbomify.com/MAL-2024-9429/): Malicious code in unity-uikit (npm) (malicious package)
- [MAL-2024-9428](https://insights.sbomify.com/MAL-2024-9428/): Malicious code in emburse (npm) (malicious package)
- [MAL-2024-9427](https://insights.sbomify.com/MAL-2024-9427/): Malicious code in omise-example (npm) (malicious package)
- [MAL-2024-9426](https://insights.sbomify.com/MAL-2024-9426/): Malicious code in jifa-frontend (npm) (malicious package)
- [MAL-2024-9425](https://insights.sbomify.com/MAL-2024-9425/): Malicious code in ethers-web3 (npm) (malicious package)
- [MAL-2024-9424](https://insights.sbomify.com/MAL-2024-9424/): Malicious code in ethers-mew (npm) (malicious package)
- [MAL-2024-9423](https://insights.sbomify.com/MAL-2024-9423/): Malicious code in ethers-eth (npm) (malicious package)
- [MAL-2024-9422](https://insights.sbomify.com/MAL-2024-9422/): Malicious code in ethers-aaa (npm) (malicious package)
- [MAL-2024-9421](https://insights.sbomify.com/MAL-2024-9421/): Malicious code in ethers-6 (npm) (malicious package)
- [MAL-2024-9420](https://insights.sbomify.com/MAL-2024-9420/): Malicious code in @ciam-expressjs-vanilla-samples/shared (npm) (malicious package)
- [MAL-2024-942](https://insights.sbomify.com/MAL-2024-942/): Malicious code in russiapi (npm) (malicious package)
- [MAL-2024-9419](https://insights.sbomify.com/MAL-2024-9419/): Malicious code in relativity-design-system (npm) (malicious package)
- [MAL-2024-9418](https://insights.sbomify.com/MAL-2024-9418/): Malicious code in kitsunet (npm) (malicious package)
- [MAL-2024-9417](https://insights.sbomify.com/MAL-2024-9417/): Malicious code in yogergerherhme (npm) (malicious package)
- [MAL-2024-9416](https://insights.sbomify.com/MAL-2024-9416/): Malicious code in webpack4types (npm) (malicious package)
- [MAL-2024-9415](https://insights.sbomify.com/MAL-2024-9415/): Malicious code in webpack-i18n-tools (npm) (malicious package)
- [MAL-2024-9414](https://insights.sbomify.com/MAL-2024-9414/): Malicious code in tapable1types (npm) (malicious package)
- [MAL-2024-9413](https://insights.sbomify.com/MAL-2024-9413/): Malicious code in nimiq-validators-score (npm) (malicious package)
- [MAL-2024-9412](https://insights.sbomify.com/MAL-2024-9412/): Malicious code in gerhtregefddfsr (npm) (malicious package)
- [MAL-2024-9411](https://insights.sbomify.com/MAL-2024-9411/): Malicious code in gerhtregefdsr (npm) (malicious package)
- [MAL-2024-9410](https://insights.sbomify.com/MAL-2024-9410/): Malicious code in @wame/blue-oval-theme (npm) (malicious package)
- [MAL-2024-941](https://insights.sbomify.com/MAL-2024-941/): Malicious code in o2-ionic-image-loader-v7 (npm) (malicious package)
- [MAL-2024-9409](https://insights.sbomify.com/MAL-2024-9409/): Malicious code in j5gnpfweguiwerbngpiutbgn0iutb0pfwbdfsfef (PyPI) (malicious package)
- [MAL-2024-9408](https://insights.sbomify.com/MAL-2024-9408/): Malicious code in j5gerggnpuiwerbngpiutbgn0iutb0p (PyPI) (malicious package)
- [MAL-2024-9407](https://insights.sbomify.com/MAL-2024-9407/): Malicious code in j5gnpuiwerbngpiutbgn0iutb0p (PyPI) (malicious package)
- [MAL-2024-9406](https://insights.sbomify.com/MAL-2024-9406/): Malicious code in @safecorp/one-ui (npm) (malicious package)
- [MAL-2024-9405](https://insights.sbomify.com/MAL-2024-9405/): Malicious code in module-with-prebuild (npm) (malicious package)
- [MAL-2024-9404](https://insights.sbomify.com/MAL-2024-9404/): Malicious code in direct_access_theme (npm) (malicious package)
- [MAL-2024-9403](https://insights.sbomify.com/MAL-2024-9403/): Malicious code in toolspacks (npm) (malicious package)
- [MAL-2024-9402](https://insights.sbomify.com/MAL-2024-9402/): Malicious code in zxlaq2 (npm) (malicious package)
- [MAL-2024-9401](https://insights.sbomify.com/MAL-2024-9401/): Malicious code in zip-mp3-a-lbum-do-wnload-new-in-the-future-vrf78-daqfza (npm) (malicious package)
- [MAL-2024-9400](https://insights.sbomify.com/MAL-2024-9400/): Malicious code in zip-mp3-a-lbum-do-wnload-new-gift-of-screws-q2h3s-xswcix (npm) (malicious package)
- [MAL-2024-940](https://insights.sbomify.com/MAL-2024-940/): Malicious code in o2-ionic-image-loader (npm) (malicious package)
- [MAL-2024-94](https://insights.sbomify.com/MAL-2024-94/): Malicious code in wdpr-node-cdn (npm) (malicious package)
- [MAL-2024-9399](https://insights.sbomify.com/MAL-2024-9399/): Malicious code in zip-mp3-a-lbum-do-wnload-new-coexist-l4rjg-vsisft (npm) (malicious package)
- [MAL-2024-9398](https://insights.sbomify.com/MAL-2024-9398/): Malicious code in y7s8cl (npm) (malicious package)
- [MAL-2024-9397](https://insights.sbomify.com/MAL-2024-9397/): Malicious code in wi82py (npm) (malicious package)
- [MAL-2024-9396](https://insights.sbomify.com/MAL-2024-9396/): Malicious code in wh2wlc (npm) (malicious package)
- [MAL-2024-9395](https://insights.sbomify.com/MAL-2024-9395/): Malicious code in w3jp6x (npm) (malicious package)
- [MAL-2024-9394](https://insights.sbomify.com/MAL-2024-9394/): Malicious code in t8h4q4 (npm) (malicious package)
- [MAL-2024-9393](https://insights.sbomify.com/MAL-2024-9393/): Malicious code in ssp5z6 (npm) (malicious package)
- [MAL-2024-9392](https://insights.sbomify.com/MAL-2024-9392/): Malicious code in ohxnve (npm) (malicious package)
- [MAL-2024-9391](https://insights.sbomify.com/MAL-2024-9391/): Malicious code in new-al-bum-av-ailable-broken-social-scene-8of7p-zaeaqb (npm) (malicious package)
- [MAL-2024-9390](https://insights.sbomify.com/MAL-2024-9390/): Malicious code in new-al-bum-av-ailable-467736-headful-of-sugar-tu33k-ptkkpd (npm) (malicious package)
- [MAL-2024-939](https://insights.sbomify.com/MAL-2024-939/): Malicious code in myonlife1 (npm) (malicious package)
- [MAL-2024-9389](https://insights.sbomify.com/MAL-2024-9389/): Malicious code in new-al-bum-av-ailable-35600-lived-to-tell-bt7g4-oftaau (npm) (malicious package)
- [MAL-2024-9388](https://insights.sbomify.com/MAL-2024-9388/): Malicious code in new-al-bum-av-ailable-21031-its-a-big-daddy-thing-funka-zsdlac (npm) (malicious package)
- [MAL-2024-9387](https://insights.sbomify.com/MAL-2024-9387/): Malicious code in new-al-bum-av-ailable-2014-15374-tourniquets-hacksaws-and-graves-53p3g-eabxqr (npm) (malicious package)
- [MAL-2024-9386](https://insights.sbomify.com/MAL-2024-9386/): Malicious code in mp3-file-zip-d-ownload-welcome-to-mali-ntp96-jgcurk (npm) (malicious package)
- [MAL-2024-9385](https://insights.sbomify.com/MAL-2024-9385/): Malicious code in mp3-file-zip-d-ownload-push-the-sky-away-m86s1-rigirm (npm) (malicious package)
- [MAL-2024-9384](https://insights.sbomify.com/MAL-2024-9384/): Malicious code in mp3-file-zip-d-ownload-7678-new-york-dolls-7j7ir-rschdh (npm) (malicious package)
- [MAL-2024-9383](https://insights.sbomify.com/MAL-2024-9383/): Malicious code in mp3-file-zip-d-ownload-7517-goodbye-yellow-brick-road-h63vl-tpdnhx (npm) (malicious package)
- [MAL-2024-9382](https://insights.sbomify.com/MAL-2024-9382/): Malicious code in mp3-file-zip-d-ownload-33971-the-imagination-stage-ar0bb-cvzjxl (npm) (malicious package)
- [MAL-2024-9381](https://insights.sbomify.com/MAL-2024-9381/): Malicious code in mp3-do-wnload-file-to-day-5794-street-hassle-pf8jn-wucrqe (npm) (malicious package)
- [MAL-2024-9380](https://insights.sbomify.com/MAL-2024-9380/): Malicious code in mp3-do-wnload-file-to-day-47472-adjagas-e6r7u-jlkfci (npm) (malicious package)
- [MAL-2024-938](https://insights.sbomify.com/MAL-2024-938/): Malicious code in myonlife (npm) (malicious package)
- [MAL-2024-9379](https://insights.sbomify.com/MAL-2024-9379/): Malicious code in mp3-do-wnload-file-to-day-46223-waltz-of-a-ghetto-fly-i2glp-eayvqc (npm) (malicious package)
- [MAL-2024-9378](https://insights.sbomify.com/MAL-2024-9378/): Malicious code in mp3-do-wnload-file-to-day-32025-moss-side-story-zcimi-mvspdd (npm) (malicious package)
- [MAL-2024-9377](https://insights.sbomify.com/MAL-2024-9377/): Malicious code in mp3-do-wnload-file-to-day-273202-shadow-of-fear-t2vwz-niymvj (npm) (malicious package)
- [MAL-2024-9376](https://insights.sbomify.com/MAL-2024-9376/): Malicious code in lyt2tn (npm) (malicious package)
- [MAL-2024-9375](https://insights.sbomify.com/MAL-2024-9375/): Malicious code in l12n85 (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/13/