# Vulnerabilities published in 2024


- [MAL-2024-1861](https://insights.sbomify.com/MAL-2024-1861/): Malicious code in cardcompile (npm) (malicious package)
- [MAL-2024-186](https://insights.sbomify.com/MAL-2024-186/): Malicious code in wlwz-2312-0108 (npm) (malicious package)
- [MAL-2024-1859](https://insights.sbomify.com/MAL-2024-1859/): Malicious code in @capdesk/camo (npm) (malicious package)
- [MAL-2024-1858](https://insights.sbomify.com/MAL-2024-1858/): Malicious code in cameo-react-native-share-story (npm) (malicious package)
- [MAL-2024-1857](https://insights.sbomify.com/MAL-2024-1857/): Malicious code in cagov-template-v5.5 (npm) (malicious package)
- [MAL-2024-1856](https://insights.sbomify.com/MAL-2024-1856/): Malicious code in @caesars-digital/caesars-ui (npm) (malicious package)
- [MAL-2024-1855](https://insights.sbomify.com/MAL-2024-1855/): Malicious code in bykea (npm) (malicious package)
- [MAL-2024-1854](https://insights.sbomify.com/MAL-2024-1854/): Malicious code in by-storage (npm) (malicious package)
- [MAL-2024-1853](https://insights.sbomify.com/MAL-2024-1853/): Malicious code in by-skynet (npm) (malicious package)
- [MAL-2024-1852](https://insights.sbomify.com/MAL-2024-1852/): Malicious code in by-network (npm) (malicious package)
- [MAL-2024-1851](https://insights.sbomify.com/MAL-2024-1851/): Malicious code in by-gtm (npm) (malicious package)
- [MAL-2024-1850](https://insights.sbomify.com/MAL-2024-1850/): Malicious code in bxone-test-flowflowts (npm) (malicious package)
- [MAL-2024-185](https://insights.sbomify.com/MAL-2024-185/): Malicious code in wlwz-2312-0107 (npm) (malicious package)
- [MAL-2024-1849](https://insights.sbomify.com/MAL-2024-1849/): Malicious code in @ozon-shared-deps/bx-fe__video-player (npm) (malicious package)
- [MAL-2024-1848](https://insights.sbomify.com/MAL-2024-1848/): Malicious code in bww-united-app (npm) (malicious package)
- [MAL-2024-1847](https://insights.sbomify.com/MAL-2024-1847/): Malicious code in business-kpi-manager (npm) (malicious package)
- [MAL-2024-1846](https://insights.sbomify.com/MAL-2024-1846/): Malicious code in bunker-avatar (npm) (malicious package)
- [MAL-2024-1845](https://insights.sbomify.com/MAL-2024-1845/): Malicious code in bullshittss (npm) (malicious package)
- [MAL-2024-1844](https://insights.sbomify.com/MAL-2024-1844/): Malicious code in buildin (npm) (malicious package)
- [MAL-2024-1843](https://insights.sbomify.com/MAL-2024-1843/): Malicious code in @expue/builder (npm) (malicious package)
- [MAL-2024-1842](https://insights.sbomify.com/MAL-2024-1842/): Malicious code in browserstack-docker-example (npm) (malicious package)
- [MAL-2024-1841](https://insights.sbomify.com/MAL-2024-1841/): Malicious code in brkr-lib-components-react (npm) (malicious package)
- [MAL-2024-1840](https://insights.sbomify.com/MAL-2024-1840/): Malicious code in braze-content-cards-inbox (npm) (malicious package)
- [MAL-2024-184](https://insights.sbomify.com/MAL-2024-184/): Malicious code in wlwz-2312-0106 (npm) (malicious package)
- [MAL-2024-1839](https://insights.sbomify.com/MAL-2024-1839/): Malicious code in brand-positioning-block (npm) (malicious package)
- [MAL-2024-1838](https://insights.sbomify.com/MAL-2024-1838/): Malicious code in branch-to-cmsg (npm) (malicious package)
- [MAL-2024-1837](https://insights.sbomify.com/MAL-2024-1837/): Malicious code in bpa-trello-dashboard (npm) (malicious package)
- [MAL-2024-1836](https://insights.sbomify.com/MAL-2024-1836/): Malicious code in boxscorerepository (npm) (malicious package)
- [MAL-2024-1835](https://insights.sbomify.com/MAL-2024-1835/): Malicious code in bouncycastle (npm) (malicious package)
- [MAL-2024-1834](https://insights.sbomify.com/MAL-2024-1834/): Malicious code in borschik-webp-internal (npm) (malicious package)
- [MAL-2024-1832](https://insights.sbomify.com/MAL-2024-1832/): Malicious code in bootstrap-sass-official (npm) (malicious package)
- [MAL-2024-1831](https://insights.sbomify.com/MAL-2024-1831/): Malicious code in booking-react-slick (npm) (malicious package)
- [MAL-2024-1830](https://insights.sbomify.com/MAL-2024-1830/): Malicious code in bonito-core (npm) (malicious package)
- [MAL-2024-183](https://insights.sbomify.com/MAL-2024-183/): Malicious code in wlwz-2312-0105 (npm) (malicious package)
- [MAL-2024-1829](https://insights.sbomify.com/MAL-2024-1829/): Malicious code in bolt-repo (npm) (malicious package)
- [MAL-2024-1828](https://insights.sbomify.com/MAL-2024-1828/): Malicious code in bmw.dealers.web (npm) (malicious package)
- [MAL-2024-1827](https://insights.sbomify.com/MAL-2024-1827/): Malicious code in bloggerprem (npm) (malicious package)
- [MAL-2024-1826](https://insights.sbomify.com/MAL-2024-1826/): Malicious code in blog_2021 (npm) (malicious package)
- [MAL-2024-1825](https://insights.sbomify.com/MAL-2024-1825/): Malicious code in bk-redux-client-middleware (npm) (malicious package)
- [MAL-2024-1824](https://insights.sbomify.com/MAL-2024-1824/): Malicious code in @bitkub-moonshot/bitkubx-wallet (npm) (malicious package)
- [MAL-2024-1823](https://insights.sbomify.com/MAL-2024-1823/): Malicious code in bitcoin-inscript (npm) (malicious package)
- [MAL-2024-1822](https://insights.sbomify.com/MAL-2024-1822/): Malicious code in biputility (npm) (malicious package)
- [MAL-2024-1821](https://insights.sbomify.com/MAL-2024-1821/): Malicious code in bifrost-calculator (npm) (malicious package)
- [MAL-2024-1820](https://insights.sbomify.com/MAL-2024-1820/): Malicious code in bem-mvc-direct (npm) (malicious package)
- [MAL-2024-182](https://insights.sbomify.com/MAL-2024-182/): Malicious code in wlwz-2312-0104 (npm) (malicious package)
- [MAL-2024-1819](https://insights.sbomify.com/MAL-2024-1819/): Malicious code in @mosfe/beam-plugin-s3plus (npm) (malicious package)
- [MAL-2024-1818](https://insights.sbomify.com/MAL-2024-1818/): Malicious code in @mosfe/beam-lint-config (npm) (malicious package)
- [MAL-2024-1817](https://insights.sbomify.com/MAL-2024-1817/): Malicious code in @mosfe/beam-git-util (npm) (malicious package)
- [MAL-2024-1816](https://insights.sbomify.com/MAL-2024-1816/): Malicious code in @mosfe/beam (npm) (malicious package)
- [MAL-2024-1815](https://insights.sbomify.com/MAL-2024-1815/): Malicious code in bc-baseline (npm) (malicious package)
- [MAL-2024-1814](https://insights.sbomify.com/MAL-2024-1814/): Malicious code in basencrypt (npm) (malicious package)
- [MAL-2024-1813](https://insights.sbomify.com/MAL-2024-1813/): Malicious code in basecrypt (npm) (malicious package)
- [MAL-2024-1812](https://insights.sbomify.com/MAL-2024-1812/): Malicious code in barrio_sass (npm) (malicious package)
- [MAL-2024-1811](https://insights.sbomify.com/MAL-2024-1811/): Malicious code in @hotcookies/bar (npm) (malicious package)
- [MAL-2024-181](https://insights.sbomify.com/MAL-2024-181/): Malicious code in wlwz-2312-0103 (npm) (malicious package)
- [MAL-2024-1809](https://insights.sbomify.com/MAL-2024-1809/): Malicious code in ban-notifier6 (npm) (malicious package)
- [MAL-2024-1808](https://insights.sbomify.com/MAL-2024-1808/): Malicious code in ballerina-grammar (npm) (malicious package)
- [MAL-2024-1807](https://insights.sbomify.com/MAL-2024-1807/): Malicious code in @harrysforge-ui/badge (npm) (malicious package)
- [MAL-2024-1806](https://insights.sbomify.com/MAL-2024-1806/): Malicious code in @b2bgeo/backend-api-types (npm) (malicious package)
- [MAL-2024-1805](https://insights.sbomify.com/MAL-2024-1805/): Malicious code in backbone.picky (npm) (malicious package)
- [MAL-2024-1804](https://insights.sbomify.com/MAL-2024-1804/): Malicious code in backbone-input-view (npm) (malicious package)
- [MAL-2024-1803](https://insights.sbomify.com/MAL-2024-1803/): Malicious code in @golden-stack/babel-web (npm) (malicious package)
- [MAL-2024-1802](https://insights.sbomify.com/MAL-2024-1802/): Malicious code in babel-transformer (npm) (malicious package)
- [MAL-2024-1801](https://insights.sbomify.com/MAL-2024-1801/): Malicious code in @plangrid-private/babel-preset-react-app (npm) (malicious package)
- [MAL-2024-1800](https://insights.sbomify.com/MAL-2024-1800/): Malicious code in baas-admin-sdk (npm) (malicious package)
- [MAL-2024-180](https://insights.sbomify.com/MAL-2024-180/): Malicious code in wlwz-2312-0102 (npm) (malicious package)
- [MAL-2024-18](https://insights.sbomify.com/MAL-2024-18/): Malicious code in matomo-looker-studio-connector (npm) (malicious package)
- [MAL-2024-1799](https://insights.sbomify.com/MAL-2024-1799/): Malicious code in azure-rest-api-specs-tests (npm) (malicious package)
- [MAL-2024-1798](https://insights.sbomify.com/MAL-2024-1798/): Malicious code in azure-rest-api-specs-eng-tools (npm) (malicious package)
- [MAL-2024-1797](https://insights.sbomify.com/MAL-2024-1797/): Malicious code in @ozon-ob/azkaban (npm) (malicious package)
- [MAL-2024-1796](https://insights.sbomify.com/MAL-2024-1796/): Malicious code in ayp-tool (npm) (malicious package)
- [MAL-2024-1795](https://insights.sbomify.com/MAL-2024-1795/): Malicious code in axp-api-middleware (npm) (malicious package)
- [MAL-2024-1794](https://insights.sbomify.com/MAL-2024-1794/): Malicious code in axle-react-native-common-dependencies (npm) (malicious package)
- [MAL-2024-1793](https://insights.sbomify.com/MAL-2024-1793/): Malicious code in axle-react-native-app-sync-client (npm) (malicious package)
- [MAL-2024-1792](https://insights.sbomify.com/MAL-2024-1792/): Malicious code in @terraform-aws-github-runner/aws-powertools-util (npm) (malicious package)
- [MAL-2024-1791](https://insights.sbomify.com/MAL-2024-1791/): Malicious code in aws-ecs-devops-using-aws-cdk (npm) (malicious package)
- [MAL-2024-1790](https://insights.sbomify.com/MAL-2024-1790/): Malicious code in avx-web-core (npm) (malicious package)
- [MAL-2024-179](https://insights.sbomify.com/MAL-2024-179/): Malicious code in wlwz-2312-0101 (npm) (malicious package)
- [MAL-2024-1789](https://insights.sbomify.com/MAL-2024-1789/): Malicious code in avx-web-build (npm) (malicious package)
- [MAL-2024-1788](https://insights.sbomify.com/MAL-2024-1788/): Malicious code in avx-javascript-testing (npm) (malicious package)
- [MAL-2024-1787](https://insights.sbomify.com/MAL-2024-1787/): Malicious code in avro-to-typescript (npm) (malicious package)
- [MAL-2024-1786](https://insights.sbomify.com/MAL-2024-1786/): Malicious code in avidan_vs_taylor (npm) (malicious package)
- [MAL-2024-1785](https://insights.sbomify.com/MAL-2024-1785/): Malicious code in avalanche_compass_scoped (npm) (malicious package)
- [MAL-2024-1784](https://insights.sbomify.com/MAL-2024-1784/): Malicious code in avalanche_compass_scope (npm) (malicious package)
- [MAL-2024-1783](https://insights.sbomify.com/MAL-2024-1783/): Malicious code in auth0.net (npm) (malicious package)
- [MAL-2024-1782](https://insights.sbomify.com/MAL-2024-1782/): Malicious code in audio-only-web (npm) (malicious package)
- [MAL-2024-1781](https://insights.sbomify.com/MAL-2024-1781/): Malicious code in atsconsole.controller (npm) (malicious package)
- [MAL-2024-1780](https://insights.sbomify.com/MAL-2024-1780/): Malicious code in atlas-ng (npm) (malicious package)
- [MAL-2024-178](https://insights.sbomify.com/MAL-2024-178/): Malicious code in wlwz-2312-0100 (npm) (malicious package)
- [MAL-2024-1779](https://insights.sbomify.com/MAL-2024-1779/): Malicious code in aspnet-webapi-auth (npm) (malicious package)
- [MAL-2024-1778](https://insights.sbomify.com/MAL-2024-1778/): Malicious code in asiox.js (npm) (malicious package)
- [MAL-2024-1777](https://insights.sbomify.com/MAL-2024-1777/): Malicious code in asgiref (npm) (malicious package)
- [MAL-2024-1776](https://insights.sbomify.com/MAL-2024-1776/): Malicious code in asc-deps (npm) (malicious package)
- [MAL-2024-1775](https://insights.sbomify.com/MAL-2024-1775/): Malicious code in asap-test-keys (npm) (malicious package)
- [MAL-2024-1774](https://insights.sbomify.com/MAL-2024-1774/): Malicious code in arriva-ui-lib (npm) (malicious package)
- [MAL-2024-1773](https://insights.sbomify.com/MAL-2024-1773/): Malicious code in areyoustillindexing3 (npm) (malicious package)
- [MAL-2024-1772](https://insights.sbomify.com/MAL-2024-1772/): Malicious code in areyoustillindexing2 (npm) (malicious package)
- [MAL-2024-1771](https://insights.sbomify.com/MAL-2024-1771/): Malicious code in areyoustillindexing (npm) (malicious package)
- [MAL-2024-1770](https://insights.sbomify.com/MAL-2024-1770/): Malicious code in @mosfe/arender-vue (npm) (malicious package)
- [MAL-2024-177](https://insights.sbomify.com/MAL-2024-177/): Malicious code in wlwz-2312 (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/97/