# Vulnerabilities published in 2024


- [MAL-2024-2974](https://insights.sbomify.com/MAL-2024-2974/): Malicious code in ruamel.yaml.clib (npm) (malicious package)
- [MAL-2024-2973](https://insights.sbomify.com/MAL-2024-2973/): Malicious code in ruamel-yaml-clib (npm) (malicious package)
- [MAL-2024-2972](https://insights.sbomify.com/MAL-2024-2972/): Malicious code in ruamel-yaml (npm) (malicious package)
- [MAL-2024-2970](https://insights.sbomify.com/MAL-2024-2970/): Malicious code in route-converter (npm) (malicious package)
- [MAL-2024-297](https://insights.sbomify.com/MAL-2024-297/): Malicious code in wlwz-2312-1401 (npm) (malicious package)
- [MAL-2024-2969](https://insights.sbomify.com/MAL-2024-2969/): Malicious code in rootkidsholonote (npm) (malicious package)
- [MAL-2024-2968](https://insights.sbomify.com/MAL-2024-2968/): Malicious code in rocketmq-site (npm) (malicious package)
- [MAL-2024-2967](https://insights.sbomify.com/MAL-2024-2967/): Malicious code in robotodraft (npm) (malicious package)
- [MAL-2024-2966](https://insights.sbomify.com/MAL-2024-2966/): Malicious code in ro-executer (npm) (malicious package)
- [MAL-2024-2965](https://insights.sbomify.com/MAL-2024-2965/): Malicious code in rn-addons (npm) (malicious package)
- [MAL-2024-2964](https://insights.sbomify.com/MAL-2024-2964/): Malicious code in rippling-flux-sdk (npm) (malicious package)
- [MAL-2024-2963](https://insights.sbomify.com/MAL-2024-2963/): Malicious code in rippling-flux-dev-tools (npm) (malicious package)
- [MAL-2024-2962](https://insights.sbomify.com/MAL-2024-2962/): Malicious code in rippling-flux-dev (npm) (malicious package)
- [MAL-2024-2961](https://insights.sbomify.com/MAL-2024-2961/): Malicious code in resume-preview-component (npm) (malicious package)
- [MAL-2024-2960](https://insights.sbomify.com/MAL-2024-2960/): Malicious code in reset-api-success (npm) (malicious package)
- [MAL-2024-296](https://insights.sbomify.com/MAL-2024-296/): Malicious code in wlwz-2312-1400 (npm) (malicious package)
- [MAL-2024-2959](https://insights.sbomify.com/MAL-2024-2959/): Malicious code in report_name (npm) (malicious package)
- [MAL-2024-2958](https://insights.sbomify.com/MAL-2024-2958/): Malicious code in repelis-pelisplus-ver-la-ballena-2022-pelicula-completa-en-espanol (npm) (malicious package)
- [MAL-2024-2957](https://insights.sbomify.com/MAL-2024-2957/): Malicious code in remove-pr-labels (npm) (malicious package)
- [MAL-2024-2956](https://insights.sbomify.com/MAL-2024-2956/): Malicious code in remove-docker-tag (npm) (malicious package)
- [MAL-2024-2955](https://insights.sbomify.com/MAL-2024-2955/): Malicious code in relay-website (npm) (malicious package)
- [MAL-2024-2954](https://insights.sbomify.com/MAL-2024-2954/): Malicious code in relay-github-root (npm) (malicious package)
- [MAL-2024-2953](https://insights.sbomify.com/MAL-2024-2953/): Malicious code in relativity123rf (npm) (malicious package)
- [MAL-2024-2952](https://insights.sbomify.com/MAL-2024-2952/): Malicious code in register-uitspraken (npm) (malicious package)
- [MAL-2024-2951](https://insights.sbomify.com/MAL-2024-2951/): Malicious code in regily (npm) (malicious package)
- [MAL-2024-2950](https://insights.sbomify.com/MAL-2024-2950/): Malicious code in ref-indexer (npm) (malicious package)
- [MAL-2024-295](https://insights.sbomify.com/MAL-2024-295/): Malicious code in wlwz-2312-1308 (npm) (malicious package)
- [MAL-2024-2949](https://insights.sbomify.com/MAL-2024-2949/): Malicious code in redis-v4 (npm) (malicious package)
- [MAL-2024-2948](https://insights.sbomify.com/MAL-2024-2948/): Malicious code in recurly-integrations (npm) (malicious package)
- [MAL-2024-2947](https://insights.sbomify.com/MAL-2024-2947/): Malicious code in recovery-center-web-sdk (npm) (malicious package)
- [MAL-2024-2946](https://insights.sbomify.com/MAL-2024-2946/): Malicious code in recommendations-fe (npm) (malicious package)
- [MAL-2024-2944](https://insights.sbomify.com/MAL-2024-2944/): Malicious code in realtimeboard (npm) (malicious package)
- [MAL-2024-2943](https://insights.sbomify.com/MAL-2024-2943/): Malicious code in @hotwire/react-utilities (npm) (malicious package)
- [MAL-2024-2942](https://insights.sbomify.com/MAL-2024-2942/): Malicious code in react-spring-v7 (npm) (malicious package)
- [MAL-2024-2940](https://insights.sbomify.com/MAL-2024-2940/): Malicious code in react-select-custom-commit (npm) (malicious package)
- [MAL-2024-294](https://insights.sbomify.com/MAL-2024-294/): Malicious code in wlwz-2312-1307 (npm) (malicious package)
- [MAL-2024-2939](https://insights.sbomify.com/MAL-2024-2939/): Malicious code in @plangrid-private/react-scripts (npm) (malicious package)
- [MAL-2024-2938](https://insights.sbomify.com/MAL-2024-2938/): Malicious code in react-router-dom-v7 (npm) (malicious package)
- [MAL-2024-2937](https://insights.sbomify.com/MAL-2024-2937/): Malicious code in react-router-dom-v6 (npm) (malicious package)
- [MAL-2024-2935](https://insights.sbomify.com/MAL-2024-2935/): Malicious code in @hotwire/react-me (npm) (malicious package)
- [MAL-2024-2934](https://insights.sbomify.com/MAL-2024-2934/): Malicious code in react-influxdb (npm) (malicious package)
- [MAL-2024-2933](https://insights.sbomify.com/MAL-2024-2933/): Malicious code in react-hook-form-deprecated (npm) (malicious package)
- [MAL-2024-2932](https://insights.sbomify.com/MAL-2024-2932/): Malicious code in react-forms-middleware (npm) (malicious package)
- [MAL-2024-2931](https://insights.sbomify.com/MAL-2024-2931/): Malicious code in react-form-middleware (npm) (malicious package)
- [MAL-2024-2930](https://insights.sbomify.com/MAL-2024-2930/): Malicious code in react-circular-pick (npm) (malicious package)
- [MAL-2024-293](https://insights.sbomify.com/MAL-2024-293/): Malicious code in wlwz-2312-1306 (npm) (malicious package)
- [MAL-2024-2928](https://insights.sbomify.com/MAL-2024-2928/): Malicious code in rcepackage144 (npm) (malicious package)
- [MAL-2024-2927](https://insights.sbomify.com/MAL-2024-2927/): Malicious code in rcepackage111 (npm) (malicious package)
- [MAL-2024-2926](https://insights.sbomify.com/MAL-2024-2926/): Malicious code in rcepackage0 (npm) (malicious package)
- [MAL-2024-2925](https://insights.sbomify.com/MAL-2024-2925/): Malicious code in rcepackage (npm) (malicious package)
- [MAL-2024-2924](https://insights.sbomify.com/MAL-2024-2924/): Malicious code in rcal_api (npm) (malicious package)
- [MAL-2024-2923](https://insights.sbomify.com/MAL-2024-2923/): Malicious code in raushan (npm) (malicious package)
- [MAL-2024-2922](https://insights.sbomify.com/MAL-2024-2922/): Malicious code in rappitrap (npm) (malicious package)
- [MAL-2024-2921](https://insights.sbomify.com/MAL-2024-2921/): Malicious code in rappi-node (npm) (malicious package)
- [MAL-2024-2920](https://insights.sbomify.com/MAL-2024-2920/): Malicious code in random_hash_halisi (npm) (malicious package)
- [MAL-2024-292](https://insights.sbomify.com/MAL-2024-292/): Malicious code in wlwz-2312-1305 (npm) (malicious package)
- [MAL-2024-2919](https://insights.sbomify.com/MAL-2024-2919/): Malicious code in @ks-radar/radar-send-web-log-collect (npm) (malicious package)
- [MAL-2024-2918](https://insights.sbomify.com/MAL-2024-2918/): Malicious code in @ks-radar/radar-seed (npm) (malicious package)
- [MAL-2024-2916](https://insights.sbomify.com/MAL-2024-2916/): Malicious code in @ks-radar/radar-core-krn (npm) (malicious package)
- [MAL-2024-2915](https://insights.sbomify.com/MAL-2024-2915/): Malicious code in @ks-radar/radar-component-collect (npm) (malicious package)
- [MAL-2024-2914](https://insights.sbomify.com/MAL-2024-2914/): Malicious code in @ks-radar/radar-blood-lineage-collect (npm) (malicious package)
- [MAL-2024-2913](https://insights.sbomify.com/MAL-2024-2913/): Malicious code in @ks-radar/radar-api-collect (npm) (malicious package)
- [MAL-2024-2912](https://insights.sbomify.com/MAL-2024-2912/): Malicious code in query-string-cjs (npm) (malicious package)
- [MAL-2024-2911](https://insights.sbomify.com/MAL-2024-2911/): Malicious code in qubitsdk (npm) (malicious package)
- [MAL-2024-2910](https://insights.sbomify.com/MAL-2024-2910/): Malicious code in qubit-placement-callbacks (npm) (malicious package)
- [MAL-2024-291](https://insights.sbomify.com/MAL-2024-291/): Malicious code in wlwz-2312-1304 (npm) (malicious package)
- [MAL-2024-2909](https://insights.sbomify.com/MAL-2024-2909/): Malicious code in @ozon-shared-deps/qs (npm) (malicious package)
- [MAL-2024-2908](https://insights.sbomify.com/MAL-2024-2908/): Malicious code in @vipulsahu/qlik-sense (npm) (malicious package)
- [MAL-2024-2907](https://insights.sbomify.com/MAL-2024-2907/): Malicious code in qatar-digital-webkit (npm) (malicious package)
- [MAL-2024-2906](https://insights.sbomify.com/MAL-2024-2906/): Malicious code in @tabby.ai/qaseio-playwright-reporter (npm) (malicious package)
- [MAL-2024-2905](https://insights.sbomify.com/MAL-2024-2905/): Malicious code in pxs-map (npm) (malicious package)
- [MAL-2024-2903](https://insights.sbomify.com/MAL-2024-2903/): Malicious code in protect-and-track (npm) (malicious package)
- [MAL-2024-2902](https://insights.sbomify.com/MAL-2024-2902/): Malicious code in projectdiscovery (npm) (malicious package)
- [MAL-2024-2901](https://insights.sbomify.com/MAL-2024-2901/): Malicious code in profile-one-frontend (npm) (malicious package)
- [MAL-2024-290](https://insights.sbomify.com/MAL-2024-290/): Malicious code in wlwz-2312-1303 (npm) (malicious package)
- [MAL-2024-29](https://insights.sbomify.com/MAL-2024-29/): Malicious code in warbeast2000 (npm) (malicious package)
- [MAL-2024-2899](https://insights.sbomify.com/MAL-2024-2899/): Malicious code in prod-env-variables (npm) (malicious package)
- [MAL-2024-2898](https://insights.sbomify.com/MAL-2024-2898/): Malicious code in @procol-tech/pro-icons (npm) (malicious package)
- [MAL-2024-2897](https://insights.sbomify.com/MAL-2024-2897/): Malicious code in privaterepository (npm) (malicious package)
- [MAL-2024-2896](https://insights.sbomify.com/MAL-2024-2896/): Malicious code in primeng-iow (npm) (malicious package)
- [MAL-2024-2895](https://insights.sbomify.com/MAL-2024-2895/): Malicious code in @sber-sberx-prime/prime-ui-kit (npm) (malicious package)
- [MAL-2024-2894](https://insights.sbomify.com/MAL-2024-2894/): Malicious code in @bizone/prettier_config (npm) (malicious package)
- [MAL-2024-2893](https://insights.sbomify.com/MAL-2024-2893/): Malicious code in @bizone/prettier.config (npm) (malicious package)
- [MAL-2024-2892](https://insights.sbomify.com/MAL-2024-2892/): Malicious code in @bizone/prettier-config (npm) (malicious package)
- [MAL-2024-2891](https://insights.sbomify.com/MAL-2024-2891/): Malicious code in preset-react-app (npm) (malicious package)
- [MAL-2024-2890](https://insights.sbomify.com/MAL-2024-2890/): Malicious code in preply (npm) (malicious package)
- [MAL-2024-289](https://insights.sbomify.com/MAL-2024-289/): Malicious code in wlwz-2312-1302 (npm) (malicious package)
- [MAL-2024-2888](https://insights.sbomify.com/MAL-2024-2888/): Malicious code in powpeg-details (npm) (malicious package)
- [MAL-2024-2887](https://insights.sbomify.com/MAL-2024-2887/): Malicious code in power1 (npm) (malicious package)
- [MAL-2024-2886](https://insights.sbomify.com/MAL-2024-2886/): Malicious code in postman-labs-docs (npm) (malicious package)
- [MAL-2024-2885](https://insights.sbomify.com/MAL-2024-2885/): Malicious code in portm-agent (npm) (malicious package)
- [MAL-2024-2884](https://insights.sbomify.com/MAL-2024-2884/): Malicious code in @ozon-shared-deps/portal-vue (npm) (malicious package)
- [MAL-2024-2883](https://insights.sbomify.com/MAL-2024-2883/): Malicious code in @mosfe/portal-proxy (npm) (malicious package)
- [MAL-2024-2882](https://insights.sbomify.com/MAL-2024-2882/): Malicious code in portal-node-logger (npm) (malicious package)
- [MAL-2024-2881](https://insights.sbomify.com/MAL-2024-2881/): Malicious code in portal-frontend-public (npm) (malicious package)
- [MAL-2024-2880](https://insights.sbomify.com/MAL-2024-2880/): Malicious code in port-common (npm) (malicious package)
- [MAL-2024-288](https://insights.sbomify.com/MAL-2024-288/): Malicious code in wlwz-2312-1301 (npm) (malicious package)
- [MAL-2024-2879](https://insights.sbomify.com/MAL-2024-2879/): Malicious code in polaris-viz (npm) (malicious package)
- [MAL-2024-2878](https://insights.sbomify.com/MAL-2024-2878/): Malicious code in poc-test-package (npm) (malicious package)
- [MAL-2024-2877](https://insights.sbomify.com/MAL-2024-2877/): Malicious code in plumo-verifier-web (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/85/