# Vulnerabilities published in 2024


- [MAL-2024-2876](https://insights.sbomify.com/MAL-2024-2876/): Malicious code in plugins-bot (npm) (malicious package)
- [MAL-2024-2875](https://insights.sbomify.com/MAL-2024-2875/): Malicious code in plugin-react-hooks (npm) (malicious package)
- [MAL-2024-2874](https://insights.sbomify.com/MAL-2024-2874/): Malicious code in @expue/plugin-express (npm) (malicious package)
- [MAL-2024-2873](https://insights.sbomify.com/MAL-2024-2873/): Malicious code in platformdirs (npm) (malicious package)
- [MAL-2024-2872](https://insights.sbomify.com/MAL-2024-2872/): Malicious code in pkg-with-peer-deps (npm) (malicious package)
- [MAL-2024-2871](https://insights.sbomify.com/MAL-2024-2871/): Malicious code in pino-deploy (npm) (malicious package)
- [MAL-2024-2870](https://insights.sbomify.com/MAL-2024-2870/): Malicious code in pilvarctf (npm) (malicious package)
- [MAL-2024-287](https://insights.sbomify.com/MAL-2024-287/): Malicious code in wlwz-2312-1300 (npm) (malicious package)
- [MAL-2024-2869](https://insights.sbomify.com/MAL-2024-2869/): Malicious code in piercing-library (npm) (malicious package)
- [MAL-2024-2868](https://insights.sbomify.com/MAL-2024-2868/): Malicious code in picket-fe-bundler (npm) (malicious package)
- [MAL-2024-2867](https://insights.sbomify.com/MAL-2024-2867/): Malicious code in pickby (npm) (malicious package)
- [MAL-2024-2866](https://insights.sbomify.com/MAL-2024-2866/): Malicious code in pichincha (npm) (malicious package)
- [MAL-2024-2865](https://insights.sbomify.com/MAL-2024-2865/): Malicious code in pgrokd (npm) (malicious package)
- [MAL-2024-2864](https://insights.sbomify.com/MAL-2024-2864/): Malicious code in pelisplus-ver-scream-6-2023-peliculas-online-hd (npm) (malicious package)
- [MAL-2024-2863](https://insights.sbomify.com/MAL-2024-2863/): Malicious code in pelisplus-repelis-ver-tu-jhoothi-main-makkaar-peliculas-completa-en-espanol (npm) (malicious package)
- [MAL-2024-2862](https://insights.sbomify.com/MAL-2024-2862/): Malicious code in pelisplus-repelis-ver-night-train-peliculas-completa-en-espanol (npm) (malicious package)
- [MAL-2024-2861](https://insights.sbomify.com/MAL-2024-2861/): Malicious code in pelisplus-repelis-ver-house-party-peliculas-completa-en-espanol (npm) (malicious package)
- [MAL-2024-2860](https://insights.sbomify.com/MAL-2024-2860/): Malicious code in pelisplus-repelis-ver-detective-knight-independence-peliculas-completa-en-espanol (npm) (malicious package)
- [MAL-2024-286](https://insights.sbomify.com/MAL-2024-286/): Malicious code in wlwz-2312-1208 (npm) (malicious package)
- [MAL-2024-2859](https://insights.sbomify.com/MAL-2024-2859/): Malicious code in pelisplus-repelis-ver-creed-3-peliculas-completa-en-espanol-01 (npm) (malicious package)
- [MAL-2024-2858](https://insights.sbomify.com/MAL-2024-2858/): Malicious code in pelisplus-repelis-ver-a-man-called-otto-peliculas-completa-en-espanol (npm) (malicious package)
- [MAL-2024-2857](https://insights.sbomify.com/MAL-2024-2857/): Malicious code in pelicula-completa-john-wick-4-ver-pelicula-completa-johnn-wick-4-4k (npm) (malicious package)
- [MAL-2024-2856](https://insights.sbomify.com/MAL-2024-2856/): Malicious code in pelicula-completa-john-wick-4-ver-pelicula-completa-john-wick-0-4k (npm) (malicious package)
- [MAL-2024-2855](https://insights.sbomify.com/MAL-2024-2855/): Malicious code in pdfjs2 (npm) (malicious package)
- [MAL-2024-2854](https://insights.sbomify.com/MAL-2024-2854/): Malicious code in pcstudybible5free_better__hdns (npm) (malicious package)
- [MAL-2024-2853](https://insights.sbomify.com/MAL-2024-2853/): Malicious code in pco-apigw-common-layer (npm) (malicious package)
- [MAL-2024-2852](https://insights.sbomify.com/MAL-2024-2852/): Malicious code in pb-styles-v1 (npm) (malicious package)
- [MAL-2024-2851](https://insights.sbomify.com/MAL-2024-2851/): Malicious code in paysecuretest (npm) (malicious package)
- [MAL-2024-2850](https://insights.sbomify.com/MAL-2024-2850/): Malicious code in paysecure (npm) (malicious package)
- [MAL-2024-285](https://insights.sbomify.com/MAL-2024-285/): Malicious code in wlwz-2312-1207 (npm) (malicious package)
- [MAL-2024-2849](https://insights.sbomify.com/MAL-2024-2849/): Malicious code in paypalscriptprovider (npm) (malicious package)
- [MAL-2024-2848](https://insights.sbomify.com/MAL-2024-2848/): Malicious code in @realty-front/payment-cards (npm) (malicious package)
- [MAL-2024-2847](https://insights.sbomify.com/MAL-2024-2847/): Malicious code in payload_package123 (npm) (malicious package)
- [MAL-2024-2846](https://insights.sbomify.com/MAL-2024-2846/): Malicious code in payload_package1 (npm) (malicious package)
- [MAL-2024-2845](https://insights.sbomify.com/MAL-2024-2845/): Malicious code in pattern.json (npm) (malicious package)
- [MAL-2024-2844](https://insights.sbomify.com/MAL-2024-2844/): Malicious code in @doccledev/pattern-library (npm) (malicious package)
- [MAL-2024-2843](https://insights.sbomify.com/MAL-2024-2843/): Malicious code in passport-ui-component (npm) (malicious package)
- [MAL-2024-2842](https://insights.sbomify.com/MAL-2024-2842/): Malicious code in partnerapp (npm) (malicious package)
- [MAL-2024-2841](https://insights.sbomify.com/MAL-2024-2841/): Malicious code in @xbox-web/partner-onboarding (npm) (malicious package)
- [MAL-2024-2840](https://insights.sbomify.com/MAL-2024-2840/): Malicious code in parsing-utils (npm) (malicious package)
- [MAL-2024-284](https://insights.sbomify.com/MAL-2024-284/): Malicious code in wlwz-2312-1206 (npm) (malicious package)
- [MAL-2024-2839](https://insights.sbomify.com/MAL-2024-2839/): Malicious code in papaya_mango_corrupt (npm) (malicious package)
- [MAL-2024-2838](https://insights.sbomify.com/MAL-2024-2838/): Malicious code in papaya_banana_evil (npm) (malicious package)
- [MAL-2024-2837](https://insights.sbomify.com/MAL-2024-2837/): Malicious code in papapaapapapapapapaappaapaaaaad (npm) (malicious package)
- [MAL-2024-2836](https://insights.sbomify.com/MAL-2024-2836/): Malicious code in papapaapapapapapapaappaapaaaaa (npm) (malicious package)
- [MAL-2024-2835](https://insights.sbomify.com/MAL-2024-2835/): Malicious code in pap-events (npm) (malicious package)
- [MAL-2024-2834](https://insights.sbomify.com/MAL-2024-2834/): Malicious code in pap-client (npm) (malicious package)
- [MAL-2024-2833](https://insights.sbomify.com/MAL-2024-2833/): Malicious code in pako-1 (npm) (malicious package)
- [MAL-2024-2832](https://insights.sbomify.com/MAL-2024-2832/): Malicious code in @locallife/page (npm) (malicious package)
- [MAL-2024-2831](https://insights.sbomify.com/MAL-2024-2831/): Malicious code in pagbank-for-woocommerce (npm) (malicious package)
- [MAL-2024-2830](https://insights.sbomify.com/MAL-2024-2830/): Malicious code in packs-a (npm) (malicious package)
- [MAL-2024-283](https://insights.sbomify.com/MAL-2024-283/): Malicious code in wlwz-2312-1205 (npm) (malicious package)
- [MAL-2024-2829](https://insights.sbomify.com/MAL-2024-2829/): Malicious code in packageast-tedfh-sdgf-gg (npm) (malicious package)
- [MAL-2024-2828](https://insights.sbomify.com/MAL-2024-2828/): Malicious code in package-shopify-tester (npm) (malicious package)
- [MAL-2024-2827](https://insights.sbomify.com/MAL-2024-2827/): Malicious code in package-pkf-dfghj-ss (npm) (malicious package)
- [MAL-2024-2826](https://insights.sbomify.com/MAL-2024-2826/): Malicious code in package-inherit (npm) (malicious package)
- [MAL-2024-2825](https://insights.sbomify.com/MAL-2024-2825/): Malicious code in package-egsdg-gdsfg-nn (npm) (malicious package)
- [MAL-2024-2824](https://insights.sbomify.com/MAL-2024-2824/): Malicious code in package-apso-dfpgdo-uu (npm) (malicious package)
- [MAL-2024-2823](https://insights.sbomify.com/MAL-2024-2823/): Malicious code in paala (npm) (malicious package)
- [MAL-2024-2822](https://insights.sbomify.com/MAL-2024-2822/): Malicious code in pa-mojs (npm) (malicious package)
- [MAL-2024-2821](https://insights.sbomify.com/MAL-2024-2821/): Malicious code in pa-mjxjs (npm) (malicious package)
- [MAL-2024-2820](https://insights.sbomify.com/MAL-2024-2820/): Malicious code in @ozon-shared-deps/ozon-maps__map-sdk (npm) (malicious package)
- [MAL-2024-282](https://insights.sbomify.com/MAL-2024-282/): Malicious code in wlwz-2312-1204 (npm) (malicious package)
- [MAL-2024-2819](https://insights.sbomify.com/MAL-2024-2819/): Malicious code in @ozon-shared-deps/ozon-fe__media-player-super-lite (npm) (malicious package)
- [MAL-2024-2818](https://insights.sbomify.com/MAL-2024-2818/): Malicious code in @ozon-shared-deps/ozon-fe__media-player-standard (npm) (malicious package)
- [MAL-2024-2817](https://insights.sbomify.com/MAL-2024-2817/): Malicious code in @mosfe/owl-config (npm) (malicious package)
- [MAL-2024-2816](https://insights.sbomify.com/MAL-2024-2816/): Malicious code in owasp-zap-extension (npm) (malicious package)
- [MAL-2024-2815](https://insights.sbomify.com/MAL-2024-2815/): Malicious code in owasp-aasvs (npm) (malicious package)
- [MAL-2024-2814](https://insights.sbomify.com/MAL-2024-2814/): Malicious code in overstock-logger (npm) (malicious package)
- [MAL-2024-2813](https://insights.sbomify.com/MAL-2024-2813/): Malicious code in our-status (npm) (malicious package)
- [MAL-2024-2812](https://insights.sbomify.com/MAL-2024-2812/): Malicious code in orko-types (npm) (malicious package)
- [MAL-2024-2811](https://insights.sbomify.com/MAL-2024-2811/): Malicious code in orko-logger (npm) (malicious package)
- [MAL-2024-2810](https://insights.sbomify.com/MAL-2024-2810/): Malicious code in ordinia-lib (npm) (malicious package)
- [MAL-2024-281](https://insights.sbomify.com/MAL-2024-281/): Malicious code in wlwz-2312-1203 (npm) (malicious package)
- [MAL-2024-2809](https://insights.sbomify.com/MAL-2024-2809/): Malicious code in orbit-landing (npm) (malicious package)
- [MAL-2024-2808](https://insights.sbomify.com/MAL-2024-2808/): Malicious code in oranges_gs_locals (npm) (malicious package)
- [MAL-2024-2807](https://insights.sbomify.com/MAL-2024-2807/): Malicious code in orange_gs_locals (npm) (malicious package)
- [MAL-2024-2806](https://insights.sbomify.com/MAL-2024-2806/): Malicious code in orange_gs_local (npm) (malicious package)
- [MAL-2024-2805](https://insights.sbomify.com/MAL-2024-2805/): Malicious code in opux (npm) (malicious package)
- [MAL-2024-2804](https://insights.sbomify.com/MAL-2024-2804/): Malicious code in option_label (npm) (malicious package)
- [MAL-2024-2803](https://insights.sbomify.com/MAL-2024-2803/): Malicious code in operaextensions.js (npm) (malicious package)
- [MAL-2024-2802](https://insights.sbomify.com/MAL-2024-2802/): Malicious code in opensource-website (npm) (malicious package)
- [MAL-2024-2801](https://insights.sbomify.com/MAL-2024-2801/): Malicious code in opencagegeocode (npm) (malicious package)
- [MAL-2024-2800](https://insights.sbomify.com/MAL-2024-2800/): Malicious code in openapi-to-graphql-root (npm) (malicious package)
- [MAL-2024-280](https://insights.sbomify.com/MAL-2024-280/): Malicious code in wlwz-2312-1202 (npm) (malicious package)
- [MAL-2024-28](https://insights.sbomify.com/MAL-2024-28/): Malicious code in page-configs (npm) (malicious package)
- [MAL-2024-2799](https://insights.sbomify.com/MAL-2024-2799/): Malicious code in ooredoo-cms (npm) (malicious package)
- [MAL-2024-2798](https://insights.sbomify.com/MAL-2024-2798/): Malicious code in ontology-starter-react-app (npm) (malicious package)
- [MAL-2024-2797](https://insights.sbomify.com/MAL-2024-2797/): Malicious code in online-creed-3-watch-fullmovies-free-hdshomes (npm) (malicious package)
- [MAL-2024-2796](https://insights.sbomify.com/MAL-2024-2796/): Malicious code in online-creed-3-watch-full-movies-free-hd-from-home (npm) (malicious package)
- [MAL-2024-2795](https://insights.sbomify.com/MAL-2024-2795/): Malicious code in online-creed-3-watch-full-movies-free-hd (npm) (malicious package)
- [MAL-2024-2794](https://insights.sbomify.com/MAL-2024-2794/): Malicious code in onewelcome-react-native-sdk (npm) (malicious package)
- [MAL-2024-2793](https://insights.sbomify.com/MAL-2024-2793/): Malicious code in onenote-meetings (npm) (malicious package)
- [MAL-2024-2792](https://insights.sbomify.com/MAL-2024-2792/): Malicious code in one-amex-wrapper (npm) (malicious package)
- [MAL-2024-2791](https://insights.sbomify.com/MAL-2024-2791/): Malicious code in onboarding-appcues (npm) (malicious package)
- [MAL-2024-2790](https://insights.sbomify.com/MAL-2024-2790/): Malicious code in on-ver-john-wick-4-cuevana3-pelicula-completa-en-espanol-latino (npm) (malicious package)
- [MAL-2024-279](https://insights.sbomify.com/MAL-2024-279/): Malicious code in wlwz-2312-1201 (npm) (malicious package)
- [MAL-2024-2789](https://insights.sbomify.com/MAL-2024-2789/): Malicious code in old-identity-sdk (npm) (malicious package)
- [MAL-2024-2788](https://insights.sbomify.com/MAL-2024-2788/): Malicious code in @ks-radar/olap-auth (npm) (malicious package)
- [MAL-2024-2787](https://insights.sbomify.com/MAL-2024-2787/): Malicious code in @colabsoftware/okami (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/86/
