# Vulnerabilities published in 2024


- [MAL-2024-9284](https://insights.sbomify.com/MAL-2024-9284/): Malicious code in timeline-airtable (npm) (malicious package)
- [MAL-2024-9283](https://insights.sbomify.com/MAL-2024-9283/): Malicious code in mmpp (npm) (malicious package)
- [MAL-2024-9282](https://insights.sbomify.com/MAL-2024-9282/): Malicious code in huggingface-vscode (npm) (malicious package)
- [MAL-2024-9281](https://insights.sbomify.com/MAL-2024-9281/): Malicious code in test-automation-testing (npm) (malicious package)
- [MAL-2024-9280](https://insights.sbomify.com/MAL-2024-9280/): Malicious code in native-module2 (npm) (malicious package)
- [MAL-2024-928](https://insights.sbomify.com/MAL-2024-928/): Malicious code in discord.js-dmall-v11 (npm) (malicious package)
- [MAL-2024-9279](https://insights.sbomify.com/MAL-2024-9279/): Malicious code in firebase-rc-monitor (npm) (malicious package)
- [MAL-2024-9278](https://insights.sbomify.com/MAL-2024-9278/): Malicious code in ts-jest-starter-kit (npm) (malicious package)
- [MAL-2024-9277](https://insights.sbomify.com/MAL-2024-9277/): Malicious code in opti-distube (npm) (malicious package)
- [MAL-2024-9276](https://insights.sbomify.com/MAL-2024-9276/): Malicious code in o-typography (npm) (malicious package)
- [MAL-2024-9275](https://insights.sbomify.com/MAL-2024-9275/): Malicious code in mallutrojan1002 (npm) (malicious package)
- [MAL-2024-9274](https://insights.sbomify.com/MAL-2024-9274/): Malicious code in gcp-monitor-prod (npm) (malicious package)
- [MAL-2024-9273](https://insights.sbomify.com/MAL-2024-9273/): Malicious code in cbdev2024test (npm) (malicious package)
- [MAL-2024-9272](https://insights.sbomify.com/MAL-2024-9272/): Malicious code in rei-browser-shim (npm) (malicious package)
- [MAL-2024-9271](https://insights.sbomify.com/MAL-2024-9271/): Malicious code in lab-3-package-438d82fc (PyPI) (malicious package)
- [MAL-2024-9270](https://insights.sbomify.com/MAL-2024-9270/): Malicious code in ptsecurity (PyPI) (malicious package)
- [MAL-2024-927](https://insights.sbomify.com/MAL-2024-927/): Malicious code in arduino-ide-extension (npm) (malicious package)
- [MAL-2024-9269](https://insights.sbomify.com/MAL-2024-9269/): Malicious code in posi (PyPI) (malicious package)
- [MAL-2024-9268](https://insights.sbomify.com/MAL-2024-9268/): Malicious code in maxpatrol (PyPI) (malicious package)
- [MAL-2024-9267](https://insights.sbomify.com/MAL-2024-9267/): Malicious code in innostage-group (PyPI) (malicious package)
- [MAL-2024-9266](https://insights.sbomify.com/MAL-2024-9266/): Malicious code in innostage (PyPI) (malicious package)
- [MAL-2024-9265](https://insights.sbomify.com/MAL-2024-9265/): Malicious code in cyberart (PyPI) (malicious package)
- [MAL-2024-9264](https://insights.sbomify.com/MAL-2024-9264/): Malicious code in crustyhttp (PyPI) (malicious package)
- [MAL-2024-9263](https://insights.sbomify.com/MAL-2024-9263/): Malicious code in @copilot-web-widgets/ai-writer (npm) (malicious package)
- [MAL-2024-9262](https://insights.sbomify.com/MAL-2024-9262/): Malicious code in xs2aframe (npm) (malicious package)
- [MAL-2024-9261](https://insights.sbomify.com/MAL-2024-9261/): Malicious code in ws-api-typescript-websocket-hooks (npm) (malicious package)
- [MAL-2024-9260](https://insights.sbomify.com/MAL-2024-9260/): Malicious code in ws-api-typescript-infra (npm) (malicious package)
- [MAL-2024-926](https://insights.sbomify.com/MAL-2024-926/): Malicious code in scrape-proxy (npm) (malicious package)
- [MAL-2024-9259](https://insights.sbomify.com/MAL-2024-9259/): Malicious code in weekopendays (npm) (malicious package)
- [MAL-2024-9258](https://insights.sbomify.com/MAL-2024-9258/): Malicious code in wassup-shiva (npm) (malicious package)
- [MAL-2024-9257](https://insights.sbomify.com/MAL-2024-9257/): Malicious code in vtadmin (npm) (malicious package)
- [MAL-2024-9256](https://insights.sbomify.com/MAL-2024-9256/): Malicious code in typescript-error-reporter-action (npm) (malicious package)
- [MAL-2024-9255](https://insights.sbomify.com/MAL-2024-9255/): Malicious code in todomvc-app-css-alt (npm) (malicious package)
- [MAL-2024-9254](https://insights.sbomify.com/MAL-2024-9254/): Malicious code in sukuna-panel (npm) (malicious package)
- [MAL-2024-9253](https://insights.sbomify.com/MAL-2024-9253/): Malicious code in sendbird_chat_sdk (npm) (malicious package)
- [MAL-2024-9252](https://insights.sbomify.com/MAL-2024-9252/): Malicious code in sendbird-uikit-integration (npm) (malicious package)
- [MAL-2024-9251](https://insights.sbomify.com/MAL-2024-9251/): Malicious code in sendbird-hubs (npm) (malicious package)
- [MAL-2024-9250](https://insights.sbomify.com/MAL-2024-9250/): Malicious code in request-ip-validator (npm) (malicious package)
- [MAL-2024-925](https://insights.sbomify.com/MAL-2024-925/): Malicious code in browser-spoof (npm) (malicious package)
- [MAL-2024-9249](https://insights.sbomify.com/MAL-2024-9249/): Malicious code in request-ip-check (npm) (malicious package)
- [MAL-2024-9248](https://insights.sbomify.com/MAL-2024-9248/): Malicious code in redux-init (npm) (malicious package)
- [MAL-2024-9247](https://insights.sbomify.com/MAL-2024-9247/): Malicious code in rdservices (npm) (malicious package)
- [MAL-2024-9246](https://insights.sbomify.com/MAL-2024-9246/): Malicious code in quantum-visualization (npm) (malicious package)
- [MAL-2024-9245](https://insights.sbomify.com/MAL-2024-9245/): Malicious code in pt-validate (npm) (malicious package)
- [MAL-2024-9244](https://insights.sbomify.com/MAL-2024-9244/): Malicious code in prismjs-editor-v2 (npm) (malicious package)
- [MAL-2024-9243](https://insights.sbomify.com/MAL-2024-9243/): Malicious code in numeral-light (npm) (malicious package)
- [MAL-2024-9242](https://insights.sbomify.com/MAL-2024-9242/): Malicious code in node-red-contrib-lowwercase (npm) (malicious package)
- [MAL-2024-9241](https://insights.sbomify.com/MAL-2024-9241/): Malicious code in multiply-proxy-actions-contracts (npm) (malicious package)
- [MAL-2024-9240](https://insights.sbomify.com/MAL-2024-9240/): Malicious code in mohamedsaqib (npm) (malicious package)
- [MAL-2024-924](https://insights.sbomify.com/MAL-2024-924/): Malicious code in samsungads-publisher-portal-authorizer (npm) (malicious package)
- [MAL-2024-9239](https://insights.sbomify.com/MAL-2024-9239/): Malicious code in jacoco-report (npm) (malicious package)
- [MAL-2024-9238](https://insights.sbomify.com/MAL-2024-9238/): Malicious code in ig-release-aws (npm) (malicious package)
- [MAL-2024-9237](https://insights.sbomify.com/MAL-2024-9237/): Malicious code in hubs-bot (npm) (malicious package)
- [MAL-2024-9236](https://insights.sbomify.com/MAL-2024-9236/): Malicious code in hubs-admin (npm) (malicious package)
- [MAL-2024-9235](https://insights.sbomify.com/MAL-2024-9235/): Malicious code in helri-shiv (npm) (malicious package)
- [MAL-2024-9234](https://insights.sbomify.com/MAL-2024-9234/): Malicious code in getsafe-interview (npm) (malicious package)
- [MAL-2024-9233](https://insights.sbomify.com/MAL-2024-9233/): Malicious code in foldl (npm) (malicious package)
- [MAL-2024-9232](https://insights.sbomify.com/MAL-2024-9232/): Malicious code in ens-metadata-service (npm) (malicious package)
- [MAL-2024-9231](https://insights.sbomify.com/MAL-2024-9231/): Malicious code in dynsegmentationserv (npm) (malicious package)
- [MAL-2024-9230](https://insights.sbomify.com/MAL-2024-9230/): Malicious code in duckc2-v5.3.6 (npm) (malicious package)
- [MAL-2024-923](https://insights.sbomify.com/MAL-2024-923/): Malicious code in npm_package_dependencies_core_js (npm) (malicious package)
- [MAL-2024-9229](https://insights.sbomify.com/MAL-2024-9229/): Malicious code in duckc2-v5.3.5 (npm) (malicious package)
- [MAL-2024-9228](https://insights.sbomify.com/MAL-2024-9228/): Malicious code in duckc2-v5.3.3 (npm) (malicious package)
- [MAL-2024-9227](https://insights.sbomify.com/MAL-2024-9227/): Malicious code in duckc2-v5.2.3 (npm) (malicious package)
- [MAL-2024-9226](https://insights.sbomify.com/MAL-2024-9226/): Malicious code in duckc2-v5.2 (npm) (malicious package)
- [MAL-2024-9225](https://insights.sbomify.com/MAL-2024-9225/): Malicious code in duckc2-moons (npm) (malicious package)
- [MAL-2024-9224](https://insights.sbomify.com/MAL-2024-9224/): Malicious code in duckc2-apis (npm) (malicious package)
- [MAL-2024-9223](https://insights.sbomify.com/MAL-2024-9223/): Malicious code in duckc2-api (npm) (malicious package)
- [MAL-2024-9222](https://insights.sbomify.com/MAL-2024-9222/): Malicious code in duckc2 (npm) (malicious package)
- [MAL-2024-9221](https://insights.sbomify.com/MAL-2024-9221/): Malicious code in descriptiongenerator-typescript-runtime (npm) (malicious package)
- [MAL-2024-9220](https://insights.sbomify.com/MAL-2024-9220/): Malicious code in com.sendbird.calls (npm) (malicious package)
- [MAL-2024-922](https://insights.sbomify.com/MAL-2024-922/): Malicious code in npm_package_dependencies_regenerator_runtime (npm) (malicious package)
- [MAL-2024-9219](https://insights.sbomify.com/MAL-2024-9219/): Malicious code in cli-command-with-alias (npm) (malicious package)
- [MAL-2024-9218](https://insights.sbomify.com/MAL-2024-9218/): Malicious code in briefer (npm) (malicious package)
- [MAL-2024-9217](https://insights.sbomify.com/MAL-2024-9217/): Malicious code in botframework-webchat-cldr-data-downloader (npm) (malicious package)
- [MAL-2024-9216](https://insights.sbomify.com/MAL-2024-9216/): Malicious code in blockpi (npm) (malicious package)
- [MAL-2024-9215](https://insights.sbomify.com/MAL-2024-9215/): Malicious code in ads-api-report-fetcher (npm) (malicious package)
- [MAL-2024-9214](https://insights.sbomify.com/MAL-2024-9214/): Malicious code in 1-2-customization-basic-format (npm) (malicious package)
- [MAL-2024-9213](https://insights.sbomify.com/MAL-2024-9213/): Malicious code in @erc6900/reference-implementation (npm) (malicious package)
- [MAL-2024-9212](https://insights.sbomify.com/MAL-2024-9212/): Malicious code in @copilot-web-widgets/common-core-sdk (npm) (malicious package)
- [MAL-2024-9211](https://insights.sbomify.com/MAL-2024-9211/): Malicious code in manoj-app-css-alt (npm) (malicious package)
- [MAL-2024-9210](https://insights.sbomify.com/MAL-2024-9210/): Malicious code in yayt09 (npm) (malicious package)
- [MAL-2024-921](https://insights.sbomify.com/MAL-2024-921/): Malicious code in npm_package_dependencies_promise_polyfill (npm) (malicious package)
- [MAL-2024-9209](https://insights.sbomify.com/MAL-2024-9209/): Malicious code in y4wcqg (npm) (malicious package)
- [MAL-2024-9208](https://insights.sbomify.com/MAL-2024-9208/): Malicious code in xkpnm0 (npm) (malicious package)
- [MAL-2024-9207](https://insights.sbomify.com/MAL-2024-9207/): Malicious code in working-today--soft-aim-fortnite-down-lo-ad-pc-esp-aimbot-undetected-2023-41etdn (npm) (malicious package)
- [MAL-2024-9206](https://insights.sbomify.com/MAL-2024-9206/): Malicious code in working-today--roblox-rise-of-nations-script-8ayh1b (npm) (malicious package)
- [MAL-2024-9205](https://insights.sbomify.com/MAL-2024-9205/): Malicious code in working-today--find-the-simpsons-171-script-roblox-4zlhl1 (npm) (malicious package)
- [MAL-2024-9204](https://insights.sbomify.com/MAL-2024-9204/): Malicious code in working-today--1-blocks-every-second-script-n9qfzq (npm) (malicious package)
- [MAL-2024-9203](https://insights.sbomify.com/MAL-2024-9203/): Malicious code in videojs-sneakpeek (npm) (malicious package)
- [MAL-2024-9202](https://insights.sbomify.com/MAL-2024-9202/): Malicious code in v81arj (npm) (malicious package)
- [MAL-2024-9201](https://insights.sbomify.com/MAL-2024-9201/): Malicious code in uploadcare-ckeditor (npm) (malicious package)
- [MAL-2024-9200](https://insights.sbomify.com/MAL-2024-9200/): --- _-= Per source details. (malicious package)
- [MAL-2024-920](https://insights.sbomify.com/MAL-2024-920/): Malicious code in npm_package_dependencies_linkify_it (npm) (malicious package)
- [MAL-2024-92](https://insights.sbomify.com/MAL-2024-92/): Malicious code in wdpr-device-detection (npm) (malicious package)
- [MAL-2024-9199](https://insights.sbomify.com/MAL-2024-9199/): Malicious code in updated-today-gen-apex-legends-h-a-c-ks-f-r-e-e-glow-and-aimb-ot-safe-to-use-2023-ms0sfd (npm) (malicious package)
- [MAL-2024-9198](https://insights.sbomify.com/MAL-2024-9198/): Malicious code in updated-script-roblox-muscle-legends-script-e3lrsz (npm) (malicious package)
- [MAL-2024-9197](https://insights.sbomify.com/MAL-2024-9197/): Malicious code in updated-script-retail-tycoon-2-script-h-a-c-k-9u9pw3 (npm) (malicious package)
- [MAL-2024-9196](https://insights.sbomify.com/MAL-2024-9196/): Malicious code in updated-script-restaurant-tycoon-2-script-instant-cook-4dz6cj (npm) (malicious package)
- [MAL-2024-9195](https://insights.sbomify.com/MAL-2024-9195/): Malicious code in updated-script-rainbow-six-siege-renown-method-unlimited-undetected-updated-2023-aaseax (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/15/