# Vulnerabilities published in 2026 - [MAL-2026-9983](https://insights.sbomify.com/MAL-2026-9983/): Malicious code in zztest4098 (RubyGems) (malicious package) - [MAL-2026-9982](https://insights.sbomify.com/MAL-2026-9982/): Malicious code in zztest17785553805 (RubyGems) (malicious package) - [MAL-2026-9981](https://insights.sbomify.com/MAL-2026-9981/): Malicious code in zztest17785553774 (RubyGems) (malicious package) - [MAL-2026-9980](https://insights.sbomify.com/MAL-2026-9980/): Malicious code in zztest17785553733 (RubyGems) (malicious package) - [MAL-2026-998](https://insights.sbomify.com/MAL-2026-998/): Malicious code in rbxm-tools (npm) (malicious package) - [MAL-2026-9979](https://insights.sbomify.com/MAL-2026-9979/): Malicious code in zztest17785553702 (RubyGems) (malicious package) - [MAL-2026-9978](https://insights.sbomify.com/MAL-2026-9978/): Malicious code in zztest17785553661 (RubyGems) (malicious package) - [MAL-2026-9977](https://insights.sbomify.com/MAL-2026-9977/): Malicious code in zztest1778552006 (RubyGems) (malicious package) - [MAL-2026-9976](https://insights.sbomify.com/MAL-2026-9976/): Malicious code in zztemp-ssf-2605 (RubyGems) (malicious package) - [MAL-2026-9975](https://insights.sbomify.com/MAL-2026-9975/): Malicious code in zztargettest18587 (RubyGems) (malicious package) - [MAL-2026-9974](https://insights.sbomify.com/MAL-2026-9974/): Malicious code in zzsouthhack252269 (RubyGems) (malicious package) - [MAL-2026-9973](https://insights.sbomify.com/MAL-2026-9973/): Malicious code in zzproxyoaiabc431848 (RubyGems) (malicious package) - [MAL-2026-9972](https://insights.sbomify.com/MAL-2026-9972/): Malicious code in zzpdfvar15 (RubyGems) (malicious package) - [MAL-2026-9971](https://insights.sbomify.com/MAL-2026-9971/): Malicious code in zzpdfvar14 (RubyGems) (malicious package) - [MAL-2026-9970](https://insights.sbomify.com/MAL-2026-9970/): Malicious code in zzpdfvar13 (RubyGems) (malicious package) - [MAL-2026-997](https://insights.sbomify.com/MAL-2026-997/): Malicious code in npm-security-testing (npm) (malicious package) - [MAL-2026-9969](https://insights.sbomify.com/MAL-2026-9969/): Malicious code in zzpdfvar12 (RubyGems) (malicious package) - [MAL-2026-9968](https://insights.sbomify.com/MAL-2026-9968/): Malicious code in zzpdfvar11 (RubyGems) (malicious package) - [MAL-2026-9967](https://insights.sbomify.com/MAL-2026-9967/): Malicious code in zzpdfvar10 (RubyGems) (malicious package) - [MAL-2026-9966](https://insights.sbomify.com/MAL-2026-9966/): Malicious code in zzpdfvar09 (RubyGems) (malicious package) - [MAL-2026-9965](https://insights.sbomify.com/MAL-2026-9965/): Malicious code in zzpdfvar08 (RubyGems) (malicious package) - [MAL-2026-9964](https://insights.sbomify.com/MAL-2026-9964/): Malicious code in zzpdfvar07 (RubyGems) (malicious package) - [MAL-2026-9963](https://insights.sbomify.com/MAL-2026-9963/): Malicious code in zzpdfvar06 (RubyGems) (malicious package) - [MAL-2026-9962](https://insights.sbomify.com/MAL-2026-9962/): Malicious code in zzpdfvar05 (RubyGems) (malicious package) - [MAL-2026-9961](https://insights.sbomify.com/MAL-2026-9961/): Malicious code in zzpdfvar04 (RubyGems) (malicious package) - [MAL-2026-9960](https://insights.sbomify.com/MAL-2026-9960/): Malicious code in zzpdfvar03 (RubyGems) (malicious package) - [MAL-2026-996](https://insights.sbomify.com/MAL-2026-996/): Malicious code in rubocop-vintedmetrics (RubyGems) (malicious package) - [MAL-2026-9959](https://insights.sbomify.com/MAL-2026-9959/): Malicious code in zzpdfvar02 (RubyGems) (malicious package) - [MAL-2026-9958](https://insights.sbomify.com/MAL-2026-9958/): Malicious code in zzpdfvar01 (RubyGems) (malicious package) - [MAL-2026-9957](https://insights.sbomify.com/MAL-2026-9957/): Malicious code in zzpdfvar00 (RubyGems) (malicious package) - [MAL-2026-9956](https://insights.sbomify.com/MAL-2026-9956/): Malicious code in zzlambtestf295 (RubyGems) (malicious package) - [MAL-2026-9955](https://insights.sbomify.com/MAL-2026-9955/): Malicious code in zzlambcalx1778552149 (RubyGems) (malicious package) - [MAL-2026-9954](https://insights.sbomify.com/MAL-2026-9954/): Malicious code in zzjinavcssvn (RubyGems) (malicious package) - [MAL-2026-9953](https://insights.sbomify.com/MAL-2026-9953/): Malicious code in zzjinavcshg (RubyGems) (malicious package) - [MAL-2026-9952](https://insights.sbomify.com/MAL-2026-9952/): Malicious code in zzjinavcsgit (RubyGems) (malicious package) - [MAL-2026-9951](https://insights.sbomify.com/MAL-2026-9951/): Malicious code in zzjinavcsfossil (RubyGems) (malicious package) - [MAL-2026-9950](https://insights.sbomify.com/MAL-2026-9950/): Malicious code in zzjinavcsbzr (RubyGems) (malicious package) - [MAL-2026-995](https://insights.sbomify.com/MAL-2026-995/): Malicious code in vl-ui-contact-card (npm) (malicious package) - [MAL-2026-9949](https://insights.sbomify.com/MAL-2026-9949/): Malicious code in zzfadgivar13 (RubyGems) (malicious package) - [MAL-2026-9948](https://insights.sbomify.com/MAL-2026-9948/): Malicious code in zzfadgivar12 (RubyGems) (malicious package) - [MAL-2026-9947](https://insights.sbomify.com/MAL-2026-9947/): Malicious code in zzfadgivar11 (RubyGems) (malicious package) - [MAL-2026-9946](https://insights.sbomify.com/MAL-2026-9946/): Malicious code in zzfadgivar10 (RubyGems) (malicious package) - [MAL-2026-9945](https://insights.sbomify.com/MAL-2026-9945/): Malicious code in zzfadgivar09 (RubyGems) (malicious package) - [MAL-2026-9944](https://insights.sbomify.com/MAL-2026-9944/): Malicious code in zzfadgivar08 (RubyGems) (malicious package) - [MAL-2026-9943](https://insights.sbomify.com/MAL-2026-9943/): Malicious code in zzfadgivar07 (RubyGems) (malicious package) - [MAL-2026-9942](https://insights.sbomify.com/MAL-2026-9942/): Malicious code in zzfadgivar06 (RubyGems) (malicious package) - [MAL-2026-9941](https://insights.sbomify.com/MAL-2026-9941/): Malicious code in zzfadgivar05 (RubyGems) (malicious package) - [MAL-2026-9940](https://insights.sbomify.com/MAL-2026-9940/): Malicious code in zzfadgivar04 (RubyGems) (malicious package) - [MAL-2026-994](https://insights.sbomify.com/MAL-2026-994/): Malicious code in vl-ui-code-preview (npm) (malicious package) - [MAL-2026-9939](https://insights.sbomify.com/MAL-2026-9939/): Malicious code in zzfadgivar03 (RubyGems) (malicious package) - [MAL-2026-9938](https://insights.sbomify.com/MAL-2026-9938/): Malicious code in zzfadgivar02 (RubyGems) (malicious package) - [MAL-2026-9937](https://insights.sbomify.com/MAL-2026-9937/): Malicious code in zzfadgivar01 (RubyGems) (malicious package) - [MAL-2026-9936](https://insights.sbomify.com/MAL-2026-9936/): Malicious code in zzfadgivar00 (RubyGems) (malicious package) - [MAL-2026-9935](https://insights.sbomify.com/MAL-2026-9935/): Malicious code in zzdelay2119 (RubyGems) (malicious package) - [MAL-2026-9934](https://insights.sbomify.com/MAL-2026-9934/): Malicious code in zz_arcdata (RubyGems) (malicious package) - [MAL-2026-9933](https://insights.sbomify.com/MAL-2026-9933/): Malicious code in zz-oai-test12 (RubyGems) (malicious package) - [MAL-2026-9932](https://insights.sbomify.com/MAL-2026-9932/): Malicious code in zwxbcstan (RubyGems) (malicious package) - [MAL-2026-9931](https://insights.sbomify.com/MAL-2026-9931/): Malicious code in zwxbcsacre (RubyGems) (malicious package) - [MAL-2026-9930](https://insights.sbomify.com/MAL-2026-9930/): Malicious code in zwxbclic (RubyGems) (malicious package) - [MAL-2026-993](https://insights.sbomify.com/MAL-2026-993/): Malicious code in vl-ui-checkbox (npm) (malicious package) - [MAL-2026-9929](https://insights.sbomify.com/MAL-2026-9929/): Malicious code in zwxbcgrant (RubyGems) (malicious package) - [MAL-2026-9928](https://insights.sbomify.com/MAL-2026-9928/): Malicious code in zwxbccali (RubyGems) (malicious package) - [MAL-2026-9927](https://insights.sbomify.com/MAL-2026-9927/): Malicious code in zwxbccalag (RubyGems) (malicious package) - [MAL-2026-9926](https://insights.sbomify.com/MAL-2026-9926/): Malicious code in zwxbccaba (RubyGems) (malicious package) - [MAL-2026-9925](https://insights.sbomify.com/MAL-2026-9925/): Malicious code in zwxbccab (RubyGems) (malicious package) - [MAL-2026-9924](https://insights.sbomify.com/MAL-2026-9924/): Malicious code in zwwmin44268 (RubyGems) (malicious package) - [MAL-2026-9923](https://insights.sbomify.com/MAL-2026-9923/): Malicious code in zwwmin34639 (RubyGems) (malicious package) - [MAL-2026-9922](https://insights.sbomify.com/MAL-2026-9922/): Malicious code in zwwmin231650 (RubyGems) (malicious package) - [MAL-2026-9921](https://insights.sbomify.com/MAL-2026-9921/): Malicious code in zwwmin115707 (RubyGems) (malicious package) - [MAL-2026-9920](https://insights.sbomify.com/MAL-2026-9920/): Malicious code in zwwactb3703 (RubyGems) (malicious package) - [MAL-2026-992](https://insights.sbomify.com/MAL-2026-992/): Malicious code in vl-ui-button (npm) (malicious package) - [MAL-2026-9919](https://insights.sbomify.com/MAL-2026-9919/): Malicious code in zwwacta5072 (RubyGems) (malicious package) - [MAL-2026-9918](https://insights.sbomify.com/MAL-2026-9918/): Malicious code in zwttestdoc (RubyGems) (malicious package) - [MAL-2026-9917](https://insights.sbomify.com/MAL-2026-9917/): Malicious code in zwtlist (RubyGems) (malicious package) - [MAL-2026-9916](https://insights.sbomify.com/MAL-2026-9916/): Malicious code in zwtgld (RubyGems) (malicious package) - [MAL-2026-9915](https://insights.sbomify.com/MAL-2026-9915/): Malicious code in zwtgl (RubyGems) (malicious package) - [MAL-2026-9914](https://insights.sbomify.com/MAL-2026-9914/): Malicious code in zwtestxabc (RubyGems) (malicious package) - [MAL-2026-9913](https://insights.sbomify.com/MAL-2026-9913/): Malicious code in zwtestabc4 (RubyGems) (malicious package) - [MAL-2026-9912](https://insights.sbomify.com/MAL-2026-9912/): Malicious code in zwtestabc3 (RubyGems) (malicious package) - [MAL-2026-9911](https://insights.sbomify.com/MAL-2026-9911/): Malicious code in zwtestabc2 (RubyGems) (malicious package) - [MAL-2026-9910](https://insights.sbomify.com/MAL-2026-9910/): Malicious code in zwtestabc1 (RubyGems) (malicious package) - [MAL-2026-991](https://insights.sbomify.com/MAL-2026-991/): Malicious code in vl-ui-breadcrumb (npm) (malicious package) - [MAL-2026-9909](https://insights.sbomify.com/MAL-2026-9909/): Malicious code in zwtenc4 (RubyGems) (malicious package) - [MAL-2026-9908](https://insights.sbomify.com/MAL-2026-9908/): Malicious code in zwtenc3 (RubyGems) (malicious package) - [MAL-2026-9907](https://insights.sbomify.com/MAL-2026-9907/): Malicious code in zwtenc2 (RubyGems) (malicious package) - [MAL-2026-9906](https://insights.sbomify.com/MAL-2026-9906/): Malicious code in zwtenc1 (RubyGems) (malicious package) - [MAL-2026-9905](https://insights.sbomify.com/MAL-2026-9905/): Malicious code in zwtenc0 (RubyGems) (malicious package) - [MAL-2026-9904](https://insights.sbomify.com/MAL-2026-9904/): Malicious code in zwtd104 (RubyGems) (malicious package) - [MAL-2026-9903](https://insights.sbomify.com/MAL-2026-9903/): Malicious code in zwtd103 (RubyGems) (malicious package) - [MAL-2026-9902](https://insights.sbomify.com/MAL-2026-9902/): Malicious code in zwtd102 (RubyGems) (malicious package) - [MAL-2026-9901](https://insights.sbomify.com/MAL-2026-9901/): Malicious code in zwtd101 (RubyGems) (malicious package) - [MAL-2026-9900](https://insights.sbomify.com/MAL-2026-9900/): Malicious code in zwtcookie (RubyGems) (malicious package) - [MAL-2026-990](https://insights.sbomify.com/MAL-2026-990/): Malicious code in vl-ui-body (npm) (malicious package) - [MAL-2026-99](https://insights.sbomify.com/MAL-2026-99/): Malicious code in testingpy (PyPI) (malicious package) - [MAL-2026-9899](https://insights.sbomify.com/MAL-2026-9899/): Malicious code in zwtcook2 (RubyGems) (malicious package) - [MAL-2026-9898](https://insights.sbomify.com/MAL-2026-9898/): Malicious code in zwtcheck3 (RubyGems) (malicious package) - [MAL-2026-9897](https://insights.sbomify.com/MAL-2026-9897/): Malicious code in zwta6000 (RubyGems) (malicious package) - [MAL-2026-9896](https://insights.sbomify.com/MAL-2026-9896/): Malicious code in zwsearch (RubyGems) (malicious package) - [MAL-2026-9895](https://insights.sbomify.com/MAL-2026-9895/): Malicious code in zwpdfg10266b (RubyGems) (malicious package) - [MAL-2026-9894](https://insights.sbomify.com/MAL-2026-9894/): Malicious code in zwpdfg10266a (RubyGems) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2026/page/10/