# Vulnerabilities published in 2024


- [MAL-2024-1675](https://insights.sbomify.com/MAL-2024-1675/): Malicious code in near-linkdrop-contract (npm) (malicious package)
- [MAL-2024-1674](https://insights.sbomify.com/MAL-2024-1674/): Malicious code in mwp-localtunnel-client (npm) (malicious package)
- [MAL-2024-1673](https://insights.sbomify.com/MAL-2024-1673/): Malicious code in gradient-tiny (npm) (malicious package)
- [MAL-2024-1672](https://insights.sbomify.com/MAL-2024-1672/): Malicious code in colors-flag (npm) (malicious package)
- [MAL-2024-1671](https://insights.sbomify.com/MAL-2024-1671/): Malicious code in @cloee/fetchs (npm) (malicious package)
- [MAL-2024-1670](https://insights.sbomify.com/MAL-2024-1670/): Malicious code in elitebots-prevnames-discord (npm) (malicious package)
- [MAL-2024-167](https://insights.sbomify.com/MAL-2024-167/): Malicious code in wlwz-2311-0100 (npm) (malicious package)
- [MAL-2024-1669](https://insights.sbomify.com/MAL-2024-1669/): Malicious code in elitebots-prevnames (npm) (malicious package)
- [MAL-2024-1668](https://insights.sbomify.com/MAL-2024-1668/): Malicious code in @wdp-gov/catalog-serialization-engine (npm) (malicious package)
- [MAL-2024-1667](https://insights.sbomify.com/MAL-2024-1667/): Malicious code in @wdp-gov/lineage-component (npm) (malicious package)
- [MAL-2024-1666](https://insights.sbomify.com/MAL-2024-1666/): Malicious code in internal-udfc-pkg (npm) (malicious package)
- [MAL-2024-1665](https://insights.sbomify.com/MAL-2024-1665/): Malicious code in fing-react-components (npm) (malicious package)
- [MAL-2024-1664](https://insights.sbomify.com/MAL-2024-1664/): Malicious code in @elza/keepalive (npm) (malicious package)
- [MAL-2024-1663](https://insights.sbomify.com/MAL-2024-1663/): Malicious code in @elza/auto-route-plugin (npm) (malicious package)
- [MAL-2024-1662](https://insights.sbomify.com/MAL-2024-1662/): Malicious code in kami-richtext (npm) (malicious package)
- [MAL-2024-1661](https://insights.sbomify.com/MAL-2024-1661/): Malicious code in govgen-governance (npm) (malicious package)
- [MAL-2024-1660](https://insights.sbomify.com/MAL-2024-1660/): Malicious code in @amops/fetch (npm) (malicious package)
- [MAL-2024-166](https://insights.sbomify.com/MAL-2024-166/): Malicious code in fdistube (npm) (malicious package)
- [MAL-2024-1659](https://insights.sbomify.com/MAL-2024-1659/): Malicious code in openstad-component-forms (npm) (malicious package)
- [MAL-2024-1658](https://insights.sbomify.com/MAL-2024-1658/): Malicious code in nt4padyp (npm) (malicious package)
- [MAL-2024-1657](https://insights.sbomify.com/MAL-2024-1657/): Malicious code in nodem0m (npm) (malicious package)
- [MAL-2024-1656](https://insights.sbomify.com/MAL-2024-1656/): Malicious code in logoo (npm) (malicious package)
- [MAL-2024-1655](https://insights.sbomify.com/MAL-2024-1655/): Malicious code in imageg (npm) (malicious package)
- [MAL-2024-1654](https://insights.sbomify.com/MAL-2024-1654/): Malicious code in dsain (npm) (malicious package)
- [MAL-2024-1653](https://insights.sbomify.com/MAL-2024-1653/): Malicious code in desainnew (npm) (malicious package)
- [MAL-2024-1652](https://insights.sbomify.com/MAL-2024-1652/): Malicious code in desain (npm) (malicious package)
- [MAL-2024-1651](https://insights.sbomify.com/MAL-2024-1651/): Malicious code in webquickauth (PyPI) (malicious package)
- [MAL-2024-1650](https://insights.sbomify.com/MAL-2024-1650/): Malicious code in trip-component-platform-online-region-selector (npm) (malicious package)
- [MAL-2024-165](https://insights.sbomify.com/MAL-2024-165/): Malicious code in distube-config (npm) (malicious package)
- [MAL-2024-1649](https://insights.sbomify.com/MAL-2024-1649/): Malicious code in melichat-component-library (npm) (malicious package)
- [MAL-2024-1648](https://insights.sbomify.com/MAL-2024-1648/): Malicious code in wordpress-theme-core (npm) (malicious package)
- [MAL-2024-1647](https://insights.sbomify.com/MAL-2024-1647/): Malicious code in tyk-developer-portal (npm) (malicious package)
- [MAL-2024-1646](https://insights.sbomify.com/MAL-2024-1646/): Malicious code in storefront-h5-sdk (npm) (malicious package)
- [MAL-2024-1645](https://insights.sbomify.com/MAL-2024-1645/): Malicious code in comet-chat-react-ui-kit (npm) (malicious package)
- [MAL-2024-1644](https://insights.sbomify.com/MAL-2024-1644/): Malicious code in pwi-cfa-components (npm) (malicious package)
- [MAL-2024-1643](https://insights.sbomify.com/MAL-2024-1643/): Malicious code in quickwebbasicauth (PyPI) (malicious package)
- [MAL-2024-1642](https://insights.sbomify.com/MAL-2024-1642/): Malicious code in test-package-random-name-for-test (npm) (malicious package)
- [MAL-2024-1641](https://insights.sbomify.com/MAL-2024-1641/): Malicious code in @wdpx/themes (npm) (malicious package)
- [MAL-2024-1640](https://insights.sbomify.com/MAL-2024-1640/): Malicious code in vivid_framework (npm) (malicious package)
- [MAL-2024-164](https://insights.sbomify.com/MAL-2024-164/): Malicious code in discord.js-sounds (npm) (malicious package)
- [MAL-2024-1639](https://insights.sbomify.com/MAL-2024-1639/): Malicious code in stylee-logo (npm) (malicious package)
- [MAL-2024-1638](https://insights.sbomify.com/MAL-2024-1638/): Malicious code in rb-fare-breakup (npm) (malicious package)
- [MAL-2024-1637](https://insights.sbomify.com/MAL-2024-1637/): Malicious code in mediaa (npm) (malicious package)
- [MAL-2024-1636](https://insights.sbomify.com/MAL-2024-1636/): Malicious code in logooo (npm) (malicious package)
- [MAL-2024-1635](https://insights.sbomify.com/MAL-2024-1635/): Malicious code in logo-stylee (npm) (malicious package)
- [MAL-2024-1634](https://insights.sbomify.com/MAL-2024-1634/): Malicious code in imagezz (npm) (malicious package)
- [MAL-2024-1633](https://insights.sbomify.com/MAL-2024-1633/): Malicious code in detailimg (npm) (malicious package)
- [MAL-2024-1632](https://insights.sbomify.com/MAL-2024-1632/): Malicious code in desainlgo (npm) (malicious package)
- [MAL-2024-1631](https://insights.sbomify.com/MAL-2024-1631/): Malicious code in draconianspeed (npm) (malicious package)
- [MAL-2024-1630](https://insights.sbomify.com/MAL-2024-1630/): Malicious code in mvp-website-html (npm) (malicious package)
- [MAL-2024-163](https://insights.sbomify.com/MAL-2024-163/): Malicious code in discord.js-sound (npm) (malicious package)
- [MAL-2024-1629](https://insights.sbomify.com/MAL-2024-1629/): Malicious code in resolve-uri-latest (npm) (malicious package)
- [MAL-2024-1628](https://insights.sbomify.com/MAL-2024-1628/): Malicious code in rb-info-banner (npm) (malicious package)
- [MAL-2024-1627](https://insights.sbomify.com/MAL-2024-1627/): Malicious code in rb-accordion (npm) (malicious package)
- [MAL-2024-1626](https://insights.sbomify.com/MAL-2024-1626/): Malicious code in rb-payment-input (npm) (malicious package)
- [MAL-2024-1625](https://insights.sbomify.com/MAL-2024-1625/): Malicious code in nt4padyp3 (PyPI) (malicious package)
- [MAL-2024-1624](https://insights.sbomify.com/MAL-2024-1624/): Malicious code in importlib-metadate (PyPI) (malicious package)
- [MAL-2024-1623](https://insights.sbomify.com/MAL-2024-1623/): Malicious code in corraldev-activationsvc (npm) (malicious package)
- [MAL-2024-1622](https://insights.sbomify.com/MAL-2024-1622/): Malicious code in @corraldev/cli (npm) (malicious package)
- [MAL-2024-1621](https://insights.sbomify.com/MAL-2024-1621/): Malicious code in delta0231 (npm) (malicious package)
- [MAL-2024-1620](https://insights.sbomify.com/MAL-2024-1620/): Malicious code in commando333333 (npm) (malicious package)
- [MAL-2024-162](https://insights.sbomify.com/MAL-2024-162/): Malicious code in gothics-api (npm) (malicious package)
- [MAL-2024-1619](https://insights.sbomify.com/MAL-2024-1619/): Malicious code in dc-test1-asdf (npm) (malicious package)
- [MAL-2024-1618](https://insights.sbomify.com/MAL-2024-1618/): Malicious code in trip-component-platform-online-subscribe-checkbox (npm) (malicious package)
- [MAL-2024-1617](https://insights.sbomify.com/MAL-2024-1617/): Malicious code in test-pkg-blabla (npm) (malicious package)
- [MAL-2024-1616](https://insights.sbomify.com/MAL-2024-1616/): Malicious code in colors-styles (npm) (malicious package)
- [MAL-2024-1615](https://insights.sbomify.com/MAL-2024-1615/): Malicious code in braintree-utilities (npm) (malicious package)
- [MAL-2024-1614](https://insights.sbomify.com/MAL-2024-1614/): Malicious code in braintree-rpc (npm) (malicious package)
- [MAL-2024-1613](https://insights.sbomify.com/MAL-2024-1613/): Malicious code in airbnb-o2 (npm) (malicious package)
- [MAL-2024-1612](https://insights.sbomify.com/MAL-2024-1612/): Malicious code in @yoimiiya/fetchs (npm) (malicious package)
- [MAL-2024-1611](https://insights.sbomify.com/MAL-2024-1611/): Malicious code in employee-schedule (npm) (malicious package)
- [MAL-2024-1610](https://insights.sbomify.com/MAL-2024-1610/): Malicious code in uxcamreactexample (npm) (malicious package)
- [MAL-2024-161](https://insights.sbomify.com/MAL-2024-161/): Malicious code in gothic-token (npm) (malicious package)
- [MAL-2024-1609](https://insights.sbomify.com/MAL-2024-1609/): Malicious code in @cart-ui/core-i18n (npm) (malicious package)
- [MAL-2024-1608](https://insights.sbomify.com/MAL-2024-1608/): Malicious code in legacyreact-aws-s3-typescript (npm) (malicious package)
- [MAL-2024-1607](https://insights.sbomify.com/MAL-2024-1607/): Malicious code in elasticsearch-client-specification (npm) (malicious package)
- [MAL-2024-1606](https://insights.sbomify.com/MAL-2024-1606/): Malicious code in djangosnippets.org (npm) (malicious package)
- [MAL-2024-1605](https://insights.sbomify.com/MAL-2024-1605/): Malicious code in dependences (npm) (malicious package)
- [MAL-2024-1604](https://insights.sbomify.com/MAL-2024-1604/): Malicious code in @yashorg/frontend-logger (npm) (malicious package)
- [MAL-2024-1603](https://insights.sbomify.com/MAL-2024-1603/): Malicious code in icon-reactjs (npm) (malicious package)
- [MAL-2024-1602](https://insights.sbomify.com/MAL-2024-1602/): Malicious code in zwork (npm) (malicious package)
- [MAL-2024-1601](https://insights.sbomify.com/MAL-2024-1601/): Malicious code in virtuoso-web-chat (npm) (malicious package)
- [MAL-2024-1600](https://insights.sbomify.com/MAL-2024-1600/): Malicious code in v2-core (npm) (malicious package)
- [MAL-2024-160](https://insights.sbomify.com/MAL-2024-160/): Malicious code in epsilonprotect (npm) (malicious package)
- [MAL-2024-16](https://insights.sbomify.com/MAL-2024-16/): Malicious code in get_name_of_token (npm) (malicious package)
- [MAL-2024-1599](https://insights.sbomify.com/MAL-2024-1599/): Malicious code in ozonid (npm) (malicious package)
- [MAL-2024-1598](https://insights.sbomify.com/MAL-2024-1598/): Malicious code in ozon-js (npm) (malicious package)
- [MAL-2024-1597](https://insights.sbomify.com/MAL-2024-1597/): Malicious code in exel-js (npm) (malicious package)
- [MAL-2024-1596](https://insights.sbomify.com/MAL-2024-1596/): Malicious code in core-webpack (npm) (malicious package)
- [MAL-2024-1595](https://insights.sbomify.com/MAL-2024-1595/): Malicious code in blueprint-org-planning-app-adp-wrapper (npm) (malicious package)
- [MAL-2024-1594](https://insights.sbomify.com/MAL-2024-1594/): Malicious code in atoz-attendance-app (npm) (malicious package)
- [MAL-2024-1593](https://insights.sbomify.com/MAL-2024-1593/): Malicious code in ato-z-web-identity-components-app-cdk-adp-wrapper (npm) (malicious package)
- [MAL-2024-1592](https://insights.sbomify.com/MAL-2024-1592/): Malicious code in ing-feat-lu-luxtrust-token-authentication (npm) (malicious package)
- [MAL-2024-1591](https://insights.sbomify.com/MAL-2024-1591/): Malicious code in ing-feat-lu-luxtrust-stick-authentication (npm) (malicious package)
- [MAL-2024-1590](https://insights.sbomify.com/MAL-2024-1590/): Malicious code in ing-feat-lu-luxtrust-smartcard-authentication (npm) (malicious package)
- [MAL-2024-159](https://insights.sbomify.com/MAL-2024-159/): Malicious code in epsilonapi (npm) (malicious package)
- [MAL-2024-1589](https://insights.sbomify.com/MAL-2024-1589/): Malicious code in ing-feat-lu-luxtrust-scan-authentication (npm) (malicious package)
- [MAL-2024-1588](https://insights.sbomify.com/MAL-2024-1588/): Malicious code in leocare-new (npm) (malicious package)
- [MAL-2024-1587](https://insights.sbomify.com/MAL-2024-1587/): Malicious code in ing-feat-grants-granting (npm) (malicious package)
- [MAL-2024-1586](https://insights.sbomify.com/MAL-2024-1586/): Malicious code in addthis-wordpress-plugin (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/99/