# Vulnerabilities published in 2024


- [MAL-2024-9013](https://insights.sbomify.com/MAL-2024-9013/): Malicious code in multiple-keys (npm) (malicious package)
- [MAL-2024-9012](https://insights.sbomify.com/MAL-2024-9012/): Malicious code in lodasher (npm) (malicious package)
- [MAL-2024-9011](https://insights.sbomify.com/MAL-2024-9011/): Malicious code in laodasher (npm) (malicious package)
- [MAL-2024-9010](https://insights.sbomify.com/MAL-2024-9010/): Malicious code in dexopener (npm) (malicious package)
- [MAL-2024-901](https://insights.sbomify.com/MAL-2024-901/): Malicious code in wlwz-2312-8102 (npm) (malicious package)
- [MAL-2024-9009](https://insights.sbomify.com/MAL-2024-9009/): Malicious code in autocomplete-monorepo (npm) (malicious package)
- [MAL-2024-9008](https://insights.sbomify.com/MAL-2024-9008/): Malicious code in apollo-client-error-template (npm) (malicious package)
- [MAL-2024-9007](https://insights.sbomify.com/MAL-2024-9007/): Malicious code in papercut-ui (npm) (malicious package)
- [MAL-2024-9006](https://insights.sbomify.com/MAL-2024-9006/): Malicious code in inclusive-ai-dao-website (npm) (malicious package)
- [MAL-2024-9005](https://insights.sbomify.com/MAL-2024-9005/): Malicious code in saywh222 (PyPI) (malicious package)
- [MAL-2024-9004](https://insights.sbomify.com/MAL-2024-9004/): Malicious code in meraki-react-router (npm) (malicious package)
- [MAL-2024-9003](https://insights.sbomify.com/MAL-2024-9003/): Malicious code in lean-coffee (npm) (malicious package)
- [MAL-2024-9002](https://insights.sbomify.com/MAL-2024-9002/): Malicious code in saywhu (PyPI) (malicious package)
- [MAL-2024-9001](https://insights.sbomify.com/MAL-2024-9001/): Malicious code in worldpay-raft-connect (npm) (malicious package)
- [MAL-2024-9000](https://insights.sbomify.com/MAL-2024-9000/): Malicious code in whatnot_seller_api_docs (npm) (malicious package)
- [MAL-2024-900](https://insights.sbomify.com/MAL-2024-900/): Malicious code in wlwz-2312-8101 (npm) (malicious package)
- [MAL-2024-90](https://insights.sbomify.com/MAL-2024-90/): Malicious code in synology-cft (npm) (malicious package)
- [MAL-2024-9](https://insights.sbomify.com/MAL-2024-9/): Malicious code in @msmg-money/get-current-env (npm) (malicious package)
- [MAL-2024-8999](https://insights.sbomify.com/MAL-2024-8999/): Malicious code in @helvetia-italia/ng-selly-lib-operator-dashboard (npm) (malicious package)
- [MAL-2024-8998](https://insights.sbomify.com/MAL-2024-8998/): Malicious code in node-jaws (npm) (malicious package)
- [MAL-2024-8997](https://insights.sbomify.com/MAL-2024-8997/): Malicious code in neuron-viewer (npm) (malicious package)
- [MAL-2024-8996](https://insights.sbomify.com/MAL-2024-8996/): Malicious code in @mallutrojan005/coveralls (npm) (malicious package)
- [MAL-2024-8995](https://insights.sbomify.com/MAL-2024-8995/): Malicious code in @helvetia-italia/ng-selly-components (npm) (malicious package)
- [MAL-2024-8994](https://insights.sbomify.com/MAL-2024-8994/): Malicious code in assistants-nextjs (npm) (malicious package)
- [MAL-2024-8993](https://insights.sbomify.com/MAL-2024-8993/): Malicious code in o-forms (npm) (malicious package)
- [MAL-2024-8992](https://insights.sbomify.com/MAL-2024-8992/): Malicious code in font-lato-2-subset (npm) (malicious package)
- [MAL-2024-8991](https://insights.sbomify.com/MAL-2024-8991/): Malicious code in routerpairs (npm) (malicious package)
- [MAL-2024-8990](https://insights.sbomify.com/MAL-2024-8990/): Malicious code in poolpairs (npm) (malicious package)
- [MAL-2024-899](https://insights.sbomify.com/MAL-2024-899/): Malicious code in wlwz-2312-8100 (npm) (malicious package)
- [MAL-2024-8989](https://insights.sbomify.com/MAL-2024-8989/): Malicious code in dx-shared-schema (npm) (malicious package)
- [MAL-2024-8988](https://insights.sbomify.com/MAL-2024-8988/): Malicious code in djangopeople (npm) (malicious package)
- [MAL-2024-8987](https://insights.sbomify.com/MAL-2024-8987/): Malicious code in fdx-mock-app (npm) (malicious package)
- [MAL-2024-8986](https://insights.sbomify.com/MAL-2024-8986/): Malicious code in case-result-reporter (npm) (malicious package)
- [MAL-2024-8985](https://insights.sbomify.com/MAL-2024-8985/): Malicious code in setup-specmatic (npm) (malicious package)
- [MAL-2024-8984](https://insights.sbomify.com/MAL-2024-8984/): Malicious code in spiffetest.io (npm) (malicious package)
- [MAL-2024-8983](https://insights.sbomify.com/MAL-2024-8983/): Malicious code in spiffe.io (npm) (malicious package)
- [MAL-2024-8982](https://insights.sbomify.com/MAL-2024-8982/): Malicious code in djangosnippets (npm) (malicious package)
- [MAL-2024-8981](https://insights.sbomify.com/MAL-2024-8981/): Malicious code in csm-installation-wizard (npm) (malicious package)
- [MAL-2024-8980](https://insights.sbomify.com/MAL-2024-8980/): Malicious code in defillama-apy-server (npm) (malicious package)
- [MAL-2024-898](https://insights.sbomify.com/MAL-2024-898/): Malicious code in wlwz-2312-8008 (npm) (malicious package)
- [MAL-2024-8979](https://insights.sbomify.com/MAL-2024-8979/): Malicious code in atomic-swap (npm) (malicious package)
- [MAL-2024-8978](https://insights.sbomify.com/MAL-2024-8978/): Malicious code in mobilistensampleapp (npm) (malicious package)
- [MAL-2024-8977](https://insights.sbomify.com/MAL-2024-8977/): Malicious code in collaborator-trigger05 (npm) (malicious package)
- [MAL-2024-8976](https://insights.sbomify.com/MAL-2024-8976/): Malicious code in uikit-app-promotions-sample (npm) (malicious package)
- [MAL-2024-8975](https://insights.sbomify.com/MAL-2024-8975/): Malicious code in test-object-model (npm) (malicious package)
- [MAL-2024-8974](https://insights.sbomify.com/MAL-2024-8974/): Malicious code in sendbird-uikit-gpt (npm) (malicious package)
- [MAL-2024-8973](https://insights.sbomify.com/MAL-2024-8973/): Malicious code in quickstart-calls-chat-integration (npm) (malicious package)
- [MAL-2024-8972](https://insights.sbomify.com/MAL-2024-8972/): Malicious code in internet-header (npm) (malicious package)
- [MAL-2024-8971](https://insights.sbomify.com/MAL-2024-8971/): Malicious code in design-system-migrations (npm) (malicious package)
- [MAL-2024-8970](https://insights.sbomify.com/MAL-2024-8970/): Malicious code in design-system-intranet-header-workspace (npm) (malicious package)
- [MAL-2024-897](https://insights.sbomify.com/MAL-2024-897/): Malicious code in wlwz-2312-8007 (npm) (malicious package)
- [MAL-2024-8969](https://insights.sbomify.com/MAL-2024-8969/): Malicious code in design-system-components-angular (npm) (malicious package)
- [MAL-2024-8968](https://insights.sbomify.com/MAL-2024-8968/): Malicious code in com.sendbird.chat (npm) (malicious package)
- [MAL-2024-8967](https://insights.sbomify.com/MAL-2024-8967/): Malicious code in cktool.target.nodejs (npm) (malicious package)
- [MAL-2024-8966](https://insights.sbomify.com/MAL-2024-8966/): Malicious code in cktool.database (npm) (malicious package)
- [MAL-2024-8965](https://insights.sbomify.com/MAL-2024-8965/): Malicious code in @dp-bpsc-tiktok/ogc-analytics (npm) (malicious package)
- [MAL-2024-8964](https://insights.sbomify.com/MAL-2024-8964/): Malicious code in b2b-buyer-portal (npm) (malicious package)
- [MAL-2024-8963](https://insights.sbomify.com/MAL-2024-8963/): Malicious code in common-icons (npm) (malicious package)
- [MAL-2024-8962](https://insights.sbomify.com/MAL-2024-8962/): Malicious code in visa-ui-angular (npm) (malicious package)
- [MAL-2024-8961](https://insights.sbomify.com/MAL-2024-8961/): Malicious code in k0m3g4-test (npm) (malicious package)
- [MAL-2024-8960](https://insights.sbomify.com/MAL-2024-8960/): Malicious code in wpdesigndev.wp.agoda.com (npm) (malicious package)
- [MAL-2024-896](https://insights.sbomify.com/MAL-2024-896/): Malicious code in wlwz-2312-8006 (npm) (malicious package)
- [MAL-2024-8959](https://insights.sbomify.com/MAL-2024-8959/): Malicious code in local-node-rig (npm) (malicious package)
- [MAL-2024-8958](https://insights.sbomify.com/MAL-2024-8958/): Malicious code in livingdesign-components (npm) (malicious package)
- [MAL-2024-8957](https://insights.sbomify.com/MAL-2024-8957/): Malicious code in govuk-frontend-v4 (npm) (malicious package)
- [MAL-2024-8956](https://insights.sbomify.com/MAL-2024-8956/): Malicious code in unguess-react (npm) (malicious package)
- [MAL-2024-8955](https://insights.sbomify.com/MAL-2024-8955/): Malicious code in storj-docs (npm) (malicious package)
- [MAL-2024-8954](https://insights.sbomify.com/MAL-2024-8954/): Malicious code in cgpt_burn_tracker_frontend (npm) (malicious package)
- [MAL-2024-8953](https://insights.sbomify.com/MAL-2024-8953/): Malicious code in meditek (npm) (malicious package)
- [MAL-2024-8952](https://insights.sbomify.com/MAL-2024-8952/): Malicious code in node-request-ip (npm) (malicious package)
- [MAL-2024-8951](https://insights.sbomify.com/MAL-2024-8951/): Malicious code in express-request-ip (npm) (malicious package)
- [MAL-2024-8950](https://insights.sbomify.com/MAL-2024-8950/): Malicious code in dotnet-runtime (npm) (malicious package)
- [MAL-2024-895](https://insights.sbomify.com/MAL-2024-895/): Malicious code in wlwz-2312-8005 (npm) (malicious package)
- [MAL-2024-8949](https://insights.sbomify.com/MAL-2024-8949/): Malicious code in tq-assignment-js (npm) (malicious package)
- [MAL-2024-8948](https://insights.sbomify.com/MAL-2024-8948/): Malicious code in missive-webhooks (npm) (malicious package)
- [MAL-2024-8947](https://insights.sbomify.com/MAL-2024-8947/): Malicious code in flow-multisig (npm) (malicious package)
- [MAL-2024-8946](https://insights.sbomify.com/MAL-2024-8946/): Malicious code in rcebymrx (PyPI) (malicious package)
- [MAL-2024-8945](https://insights.sbomify.com/MAL-2024-8945/): Malicious code in dcnm-core (npm) (malicious package)
- [MAL-2024-8944](https://insights.sbomify.com/MAL-2024-8944/): Malicious code in npm-evil-fish (npm) (malicious package)
- [MAL-2024-8943](https://insights.sbomify.com/MAL-2024-8943/): Malicious code in ml-translate-vis (npm) (malicious package)
- [MAL-2024-8942](https://insights.sbomify.com/MAL-2024-8942/): Malicious code in eslint-config-b2b (npm) (malicious package)
- [MAL-2024-8941](https://insights.sbomify.com/MAL-2024-8941/): Malicious code in confidential-package-name (npm) (malicious package)
- [MAL-2024-8940](https://insights.sbomify.com/MAL-2024-8940/): Malicious code in bce-service-bos-transport (npm) (malicious package)
- [MAL-2024-894](https://insights.sbomify.com/MAL-2024-894/): Malicious code in wlwz-2312-8004 (npm) (malicious package)
- [MAL-2024-8939](https://insights.sbomify.com/MAL-2024-8939/): Malicious code in bc-carousel (npm) (malicious package)
- [MAL-2024-8938](https://insights.sbomify.com/MAL-2024-8938/): Malicious code in @energysolutions/mylib (npm) (malicious package)
- [MAL-2024-8937](https://insights.sbomify.com/MAL-2024-8937/): Malicious code in labelv2 (npm) (malicious package)
- [MAL-2024-8936](https://insights.sbomify.com/MAL-2024-8936/): Malicious code in airwallex-platform-onboarding-sdk-demo-react (npm) (malicious package)
- [MAL-2024-8935](https://insights.sbomify.com/MAL-2024-8935/): Malicious code in tannucolingboys (npm) (malicious package)
- [MAL-2024-8934](https://insights.sbomify.com/MAL-2024-8934/): Malicious code in @the-df-company/commod (npm) (malicious package)
- [MAL-2024-8933](https://insights.sbomify.com/MAL-2024-8933/): Malicious code in minification (npm) (malicious package)
- [MAL-2024-8932](https://insights.sbomify.com/MAL-2024-8932/): Malicious code in @the-c-company/common-utils (npm) (malicious package)
- [MAL-2024-8931](https://insights.sbomify.com/MAL-2024-8931/): Malicious code in linear-airbyte-source (npm) (malicious package)
- [MAL-2024-8930](https://insights.sbomify.com/MAL-2024-8930/): Malicious code in @the-c-company/scope_packages (npm) (malicious package)
- [MAL-2024-893](https://insights.sbomify.com/MAL-2024-893/): Malicious code in wlwz-2312-8003 (npm) (malicious package)
- [MAL-2024-8929](https://insights.sbomify.com/MAL-2024-8929/): Malicious code in smp-imsc (npm) (malicious package)
- [MAL-2024-8928](https://insights.sbomify.com/MAL-2024-8928/): Malicious code in learning_npm1 (npm) (malicious package)
- [MAL-2024-8927](https://insights.sbomify.com/MAL-2024-8927/): Malicious code in artifact-lab-3-package-db7d716a (PyPI) (malicious package)
- [MAL-2024-8926](https://insights.sbomify.com/MAL-2024-8926/): Malicious code in pring-payment-demo-backend (npm) (malicious package)
- [MAL-2024-8925](https://insights.sbomify.com/MAL-2024-8925/): Malicious code in basecontext (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/18/