# Vulnerabilities published in 2024


- [MAL-2024-9374](https://insights.sbomify.com/MAL-2024-9374/): Malicious code in kald0a (npm) (malicious package)
- [MAL-2024-9373](https://insights.sbomify.com/MAL-2024-9373/): Malicious code in hpkofi (npm) (malicious package)
- [MAL-2024-9372](https://insights.sbomify.com/MAL-2024-9372/): Malicious code in gwqhnw (npm) (malicious package)
- [MAL-2024-9371](https://insights.sbomify.com/MAL-2024-9371/): Malicious code in gvjtly (npm) (malicious package)
- [MAL-2024-9370](https://insights.sbomify.com/MAL-2024-9370/): Malicious code in gozbq0 (npm) (malicious package)
- [MAL-2024-937](https://insights.sbomify.com/MAL-2024-937/): Malicious code in myoimanshhu (npm) (malicious package)
- [MAL-2024-9369](https://insights.sbomify.com/MAL-2024-9369/): Malicious code in fzscqi (npm) (malicious package)
- [MAL-2024-9368](https://insights.sbomify.com/MAL-2024-9368/): Malicious code in fuh0qz (npm) (malicious package)
- [MAL-2024-9367](https://insights.sbomify.com/MAL-2024-9367/): Malicious code in file-alb-um-zip-new-mp3-516808-dirt-femme-opjhu-pollak (npm) (malicious package)
- [MAL-2024-9366](https://insights.sbomify.com/MAL-2024-9366/): Malicious code in file-alb-um-zip-new-mp3-36289-laru-beya-zk5v7-mtjfsf (npm) (malicious package)
- [MAL-2024-9365](https://insights.sbomify.com/MAL-2024-9365/): Malicious code in file-alb-um-zip-new-mp3-126009-bitter-sweet-dz7i2-hidryu (npm) (malicious package)
- [MAL-2024-9364](https://insights.sbomify.com/MAL-2024-9364/): Malicious code in elk1yf (npm) (malicious package)
- [MAL-2024-9363](https://insights.sbomify.com/MAL-2024-9363/): Malicious code in down-load-available-zip-now-6092-expensive-shit-dzpv2-hzbnea (npm) (malicious package)
- [MAL-2024-9362](https://insights.sbomify.com/MAL-2024-9362/): Malicious code in down-load-available-zip-now-365509-chew-the-scenery-ymqd7-xaqqmu (npm) (malicious package)
- [MAL-2024-9361](https://insights.sbomify.com/MAL-2024-9361/): Malicious code in down-load-available-zip-now-35816-laughter-lust-jih3q-fajkvi (npm) (malicious package)
- [MAL-2024-9360](https://insights.sbomify.com/MAL-2024-9360/): Malicious code in down-load-available-zip-now-23630-non-stop-je-te-plie-en-deux-6jxm0-xjqkwj (npm) (malicious package)
- [MAL-2024-936](https://insights.sbomify.com/MAL-2024-936/): Malicious code in jewishapi (npm) (malicious package)
- [MAL-2024-9359](https://insights.sbomify.com/MAL-2024-9359/): Malicious code in down-lo-ad-now-zip-mp3-the-whole-love-f2ts8-cblkgz (npm) (malicious package)
- [MAL-2024-9358](https://insights.sbomify.com/MAL-2024-9358/): Malicious code in down-lo-ad-now-zip-mp3-sonic-nurse-a1wgm-jqylaq (npm) (malicious package)
- [MAL-2024-9357](https://insights.sbomify.com/MAL-2024-9357/): Malicious code in down-lo-ad-now-zip-mp3-93-million-miles-psw9n-wbuosp (npm) (malicious package)
- [MAL-2024-9356](https://insights.sbomify.com/MAL-2024-9356/): Malicious code in down-lo-ad-now-zip-mp3-7514-tapestry-fqgk2-jvvwtn (npm) (malicious package)
- [MAL-2024-9355](https://insights.sbomify.com/MAL-2024-9355/): Malicious code in down-lo-ad-now-zip-mp3-6766-the-empyrean-bn3pu-tdpbau (npm) (malicious package)
- [MAL-2024-9354](https://insights.sbomify.com/MAL-2024-9354/): Malicious code in down-lo-ad-now-zip-mp3-61269-billy-mann-9mfek-wlvmjv (npm) (malicious package)
- [MAL-2024-9353](https://insights.sbomify.com/MAL-2024-9353/): Malicious code in down-lo-ad-now-zip-mp3-18275-skelliconnection-taeie-mgpquk (npm) (malicious package)
- [MAL-2024-9352](https://insights.sbomify.com/MAL-2024-9352/): Malicious code in down-lo-ad-now-zip-mp3-149132-the-soft-cavalry-vhx8d-iuyuef (npm) (malicious package)
- [MAL-2024-9351](https://insights.sbomify.com/MAL-2024-9351/): Malicious code in do-wnload-available-88507-inheaven-dfkvm-eunrso (npm) (malicious package)
- [MAL-2024-9350](https://insights.sbomify.com/MAL-2024-9350/): Malicious code in do-wnload-available-67250-from-gardens-where-we-feel-secure-1-zuhte-cbguim (npm) (malicious package)
- [MAL-2024-935](https://insights.sbomify.com/MAL-2024-935/): Malicious code in iifl_serialize (npm) (malicious package)
- [MAL-2024-9349](https://insights.sbomify.com/MAL-2024-9349/): Malicious code in do-wnload-available-6472-sign-o-the-times-1-epmqe-uhykdr (npm) (malicious package)
- [MAL-2024-9348](https://insights.sbomify.com/MAL-2024-9348/): Malicious code in do-wnload-available-5935-dear-9fef6-bjowel (npm) (malicious package)
- [MAL-2024-9347](https://insights.sbomify.com/MAL-2024-9347/): Malicious code in do-wnload-available-2014-20032-happiness-is-happening-2iby6-rsrcqq (npm) (malicious package)
- [MAL-2024-9346](https://insights.sbomify.com/MAL-2024-9346/): Malicious code in dhwmfs (npm) (malicious package)
- [MAL-2024-9345](https://insights.sbomify.com/MAL-2024-9345/): --- _-= Per source details. (malicious package)
- [MAL-2024-9344](https://insights.sbomify.com/MAL-2024-9344/): Malicious code in availab-le-alb-um-zip-25931-the-life-aquatic-studio-sessions-mocn6-tnmvnd (npm) (malicious package)
- [MAL-2024-9343](https://insights.sbomify.com/MAL-2024-9343/): Malicious code in avail-able-albu-m-down-load-37035-boom-chicka-boom-bk3mq-llyzsk (npm) (malicious package)
- [MAL-2024-9342](https://insights.sbomify.com/MAL-2024-9342/): Malicious code in avail-able-albu-m-down-load-2014-19330-ultimate-painting-yx7k2-dkxzow (npm) (malicious package)
- [MAL-2024-9341](https://insights.sbomify.com/MAL-2024-9341/): Malicious code in avail-able-albu-m-down-load-15496-morning-view-pbn51-tjmcxv (npm) (malicious package)
- [MAL-2024-9340](https://insights.sbomify.com/MAL-2024-9340/): Malicious code in avail-able-albu-m-down-load-11788-death-rattle-boogie-ekyyh-uwjkro (npm) (malicious package)
- [MAL-2024-934](https://insights.sbomify.com/MAL-2024-934/): Malicious code in iifl_ios_app (npm) (malicious package)
- [MAL-2024-9339](https://insights.sbomify.com/MAL-2024-9339/): Malicious code in avail-able-albu-m-down-load-114925-rainier-fog-nuh7o-acneyh (npm) (malicious package)
- [MAL-2024-9338](https://insights.sbomify.com/MAL-2024-9338/): Malicious code in ava-ilable-down-load-mp3-today-illuminated-people-pwjfd-buzpyr (npm) (malicious package)
- [MAL-2024-9337](https://insights.sbomify.com/MAL-2024-9337/): Malicious code in ava-ilable-down-load-mp3-today-50529-lets-change-the-world-with-music-cx2zi-xhskuv (npm) (malicious package)
- [MAL-2024-9336](https://insights.sbomify.com/MAL-2024-9336/): Malicious code in ava-ilable-down-load-mp3-today-270969-hey-clockface-5qct6-gknhcu (npm) (malicious package)
- [MAL-2024-9335](https://insights.sbomify.com/MAL-2024-9335/): Malicious code in ava-ilable-down-load-mp3-today-2017-64747-near-to-the-wild-heart-of-life-n5sic-lqeaui (npm) (malicious package)
- [MAL-2024-9334](https://insights.sbomify.com/MAL-2024-9334/): Malicious code in ava-ilable-down-load-mp3-today-2013-10071-pure-heroine-vldvc-oyqobe (npm) (malicious package)
- [MAL-2024-9333](https://insights.sbomify.com/MAL-2024-9333/): Malicious code in aria-web-telemetry (npm) (malicious package)
- [MAL-2024-9332](https://insights.sbomify.com/MAL-2024-9332/): Malicious code in alb-um-availa-ble-zip-mp3-file-a-river-aint-too-much-to-love-0u85h-vysnxq (npm) (malicious package)
- [MAL-2024-9331](https://insights.sbomify.com/MAL-2024-9331/): Malicious code in alb-um-availa-ble-zip-mp3-file-85058-bright-phoebus-dboqy-oraqvx (npm) (malicious package)
- [MAL-2024-9330](https://insights.sbomify.com/MAL-2024-9330/): Malicious code in alb-um-availa-ble-zip-mp3-file-46046-radical-connector-m2ydd-nirtvy (npm) (malicious package)
- [MAL-2024-933](https://insights.sbomify.com/MAL-2024-933/): Malicious code in iifl_express_middleware (npm) (malicious package)
- [MAL-2024-9329](https://insights.sbomify.com/MAL-2024-9329/): Malicious code in alb-um-availa-ble-zip-mp3-file-38068-its-all-about-to-change-rnonb-pzjjbh (npm) (malicious package)
- [MAL-2024-9328](https://insights.sbomify.com/MAL-2024-9328/): Malicious code in alb-um-availa-ble-zip-mp3-file-30506-i-feel-alright-898re-atdkuh (npm) (malicious package)
- [MAL-2024-9327](https://insights.sbomify.com/MAL-2024-9327/): Malicious code in alb-um-availa-ble-zip-mp3-file-20395-ive-been-expecting-you-m3mwh-apmisl (npm) (malicious package)
- [MAL-2024-9326](https://insights.sbomify.com/MAL-2024-9326/): Malicious code in agl9v7 (npm) (malicious package)
- [MAL-2024-9325](https://insights.sbomify.com/MAL-2024-9325/): Malicious code in a43eoq (npm) (malicious package)
- [MAL-2024-9324](https://insights.sbomify.com/MAL-2024-9324/): Malicious code in a-vailable-al-bum-file-476579-blood-karaok-fs2b7-phmwby (npm) (malicious package)
- [MAL-2024-9323](https://insights.sbomify.com/MAL-2024-9323/): Malicious code in a-vailable-al-bum-file-23119-street-dad-ag8vh-ijreit (npm) (malicious package)
- [MAL-2024-9322](https://insights.sbomify.com/MAL-2024-9322/): Malicious code in a-lbum-do-wnload-avai-lable-file-volta-j48ol-zfpbbc (npm) (malicious package)
- [MAL-2024-9321](https://insights.sbomify.com/MAL-2024-9321/): Malicious code in a-lbum-do-wnload-avai-lable-file-6460-vauxhall-and-i-tc5nk-jqhvlk (npm) (malicious package)
- [MAL-2024-9320](https://insights.sbomify.com/MAL-2024-9320/): Malicious code in a-lbum-do-wnload-avai-lable-file-261573-generations-do7io-mdogom (npm) (malicious package)
- [MAL-2024-932](https://insights.sbomify.com/MAL-2024-932/): Malicious code in iifl_cloud (npm) (malicious package)
- [MAL-2024-9319](https://insights.sbomify.com/MAL-2024-9319/): Malicious code in a-lbum-do-wnload-avai-lable-file-2016-44588-my-wild-west-fzmj0-gpjzue (npm) (malicious package)
- [MAL-2024-9318](https://insights.sbomify.com/MAL-2024-9318/): Malicious code in 9s10yo (npm) (malicious package)
- [MAL-2024-9317](https://insights.sbomify.com/MAL-2024-9317/): Malicious code in 8ng20w (npm) (malicious package)
- [MAL-2024-9316](https://insights.sbomify.com/MAL-2024-9316/): Malicious code in 844b5t (npm) (malicious package)
- [MAL-2024-9315](https://insights.sbomify.com/MAL-2024-9315/): Malicious code in 7qt8hl (npm) (malicious package)
- [MAL-2024-9314](https://insights.sbomify.com/MAL-2024-9314/): Malicious code in 7phpfm (npm) (malicious package)
- [MAL-2024-9313](https://insights.sbomify.com/MAL-2024-9313/): Malicious code in 5pjh9i (npm) (malicious package)
- [MAL-2024-9312](https://insights.sbomify.com/MAL-2024-9312/): Malicious code in 52qr42 (npm) (malicious package)
- [MAL-2024-9311](https://insights.sbomify.com/MAL-2024-9311/): Malicious code in 4xrkhv (npm) (malicious package)
- [MAL-2024-9310](https://insights.sbomify.com/MAL-2024-9310/): Malicious code in 4tj82n (npm) (malicious package)
- [MAL-2024-931](https://insights.sbomify.com/MAL-2024-931/): Malicious code in iifl_api (npm) (malicious package)
- [MAL-2024-9309](https://insights.sbomify.com/MAL-2024-9309/): Malicious code in 4i0g5z (npm) (malicious package)
- [MAL-2024-9308](https://insights.sbomify.com/MAL-2024-9308/): Malicious code in 2pozw6 (npm) (malicious package)
- [MAL-2024-9307](https://insights.sbomify.com/MAL-2024-9307/): Malicious code in 2mul1k (npm) (malicious package)
- [MAL-2024-9306](https://insights.sbomify.com/MAL-2024-9306/): Malicious code in iufgbewroibgfowiebc (PyPI) (malicious package)
- [MAL-2024-9305](https://insights.sbomify.com/MAL-2024-9305/): Malicious code in ts-calling-test-app (npm) (malicious package)
- [MAL-2024-9304](https://insights.sbomify.com/MAL-2024-9304/): Malicious code in nuxtjs_dotenv (npm) (malicious package)
- [MAL-2024-9303](https://insights.sbomify.com/MAL-2024-9303/): Malicious code in nuxtjs_axios (npm) (malicious package)
- [MAL-2024-9302](https://insights.sbomify.com/MAL-2024-9302/): Malicious code in ship_sleepnpm-tool (npm) (malicious package)
- [MAL-2024-9301](https://insights.sbomify.com/MAL-2024-9301/): Malicious code in shenyuan (npm) (malicious package)
- [MAL-2024-9300](https://insights.sbomify.com/MAL-2024-9300/): Malicious code in aspera-ui (npm) (malicious package)
- [MAL-2024-930](https://insights.sbomify.com/MAL-2024-930/): Malicious code in iifl_android_app (npm) (malicious package)
- [MAL-2024-93](https://insights.sbomify.com/MAL-2024-93/): Malicious code in wdpr-geolocation (npm) (malicious package)
- [MAL-2024-9299](https://insights.sbomify.com/MAL-2024-9299/): Malicious code in tomorrowland (npm) (malicious package)
- [MAL-2024-9298](https://insights.sbomify.com/MAL-2024-9298/): Malicious code in @coyo/ui (npm) (malicious package)
- [MAL-2024-9297](https://insights.sbomify.com/MAL-2024-9297/): Malicious code in viajemos (npm) (malicious package)
- [MAL-2024-9296](https://insights.sbomify.com/MAL-2024-9296/): Malicious code in shmam-mw-test-3-test-package-3 (npm) (malicious package)
- [MAL-2024-9295](https://insights.sbomify.com/MAL-2024-9295/): Malicious code in redis-oracle (npm) (malicious package)
- [MAL-2024-9294](https://insights.sbomify.com/MAL-2024-9294/): Malicious code in module-grab (npm) (malicious package)
- [MAL-2024-9293](https://insights.sbomify.com/MAL-2024-9293/): Malicious code in dmall (npm) (malicious package)
- [MAL-2024-9292](https://insights.sbomify.com/MAL-2024-9292/): Malicious code in discord.jselfbot-v13 (npm) (malicious package)
- [MAL-2024-9291](https://insights.sbomify.com/MAL-2024-9291/): Malicious code in discord.js-dmall (npm) (malicious package)
- [MAL-2024-9290](https://insights.sbomify.com/MAL-2024-9290/): Malicious code in @client-innovation/librct (npm) (malicious package)
- [MAL-2024-929](https://insights.sbomify.com/MAL-2024-929/): Malicious code in dsc-fetcher (npm) (malicious package)
- [MAL-2024-9289](https://insights.sbomify.com/MAL-2024-9289/): Malicious code in snowday (npm) (malicious package)
- [MAL-2024-9288](https://insights.sbomify.com/MAL-2024-9288/): Malicious code in blank-fe (npm) (malicious package)
- [MAL-2024-9287](https://insights.sbomify.com/MAL-2024-9287/): Malicious code in eslint-plugin-rossum (npm) (malicious package)
- [MAL-2024-9286](https://insights.sbomify.com/MAL-2024-9286/): Malicious code in hdhh.hiijack (npm) (malicious package)
- [MAL-2024-9285](https://insights.sbomify.com/MAL-2024-9285/): Malicious code in splunk-docs (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/14/
