# Vulnerabilities published in 2026


- [MAL-2026-17744](https://insights.sbomify.com/MAL-2026-17744/): Malicious code in kmf-vendor-pack (npm) (malicious package)
- [MAL-2026-17743](https://insights.sbomify.com/MAL-2026-17743/): Malicious code in tailwind-animatecss-form (npm) (malicious package)
- [MAL-2026-17742](https://insights.sbomify.com/MAL-2026-17742/): Malicious code in razamodsxasepxyz (npm) (malicious package)
- [MAL-2026-17741](https://insights.sbomify.com/MAL-2026-17741/): Malicious code in pahinuy (npm) (malicious package)
- [MAL-2026-17740](https://insights.sbomify.com/MAL-2026-17740/): Malicious code in hanncap (npm) (malicious package)
- [MAL-2026-1774](https://insights.sbomify.com/MAL-2026-1774/): Malicious code in libxmljs2-1 (npm) (malicious package)
- [MAL-2026-17739](https://insights.sbomify.com/MAL-2026-17739/): Malicious code in asepxyzz (npm) (malicious package)
- [MAL-2026-17738](https://insights.sbomify.com/MAL-2026-17738/): Malicious code in asepxyzxrazamodsnew-baileys (npm) (malicious package)
- [MAL-2026-17737](https://insights.sbomify.com/MAL-2026-17737/): Malicious code in asepxyznew (npm) (malicious package)
- [MAL-2026-17736](https://insights.sbomify.com/MAL-2026-17736/): Malicious code in asepxyz12 (npm) (malicious package)
- [MAL-2026-17735](https://insights.sbomify.com/MAL-2026-17735/): Malicious code in asepxyz-signal (npm) (malicious package)
- [MAL-2026-17734](https://insights.sbomify.com/MAL-2026-17734/): Malicious code in asepxyz-eslint-config (npm) (malicious package)
- [MAL-2026-17733](https://insights.sbomify.com/MAL-2026-17733/): Malicious code in asepxyz-baileys (npm) (malicious package)
- [MAL-2026-17732](https://insights.sbomify.com/MAL-2026-17732/): Malicious code in asepxyz (npm) (malicious package)
- [MAL-2026-17731](https://insights.sbomify.com/MAL-2026-17731/): Malicious code in @aseppxyzz12/baileys (npm) (malicious package)
- [MAL-2026-17730](https://insights.sbomify.com/MAL-2026-17730/): Malicious code in @galicia-toolkit-nestjs-20-lite/paas (npm) (malicious package)
- [MAL-2026-1773](https://insights.sbomify.com/MAL-2026-1773/): Malicious code in libxmljs13 (npm) (malicious package)
- [MAL-2026-17729](https://insights.sbomify.com/MAL-2026-17729/): Malicious code in @galicia-toolkit-nestjs-20-lite/commons (npm) (malicious package)
- [MAL-2026-17728](https://insights.sbomify.com/MAL-2026-17728/): Malicious code in @galicia-toolkit-nestjs-20-lite/archetype (npm) (malicious package)
- [MAL-2026-17727](https://insights.sbomify.com/MAL-2026-17727/): Malicious code in @galicia-toolkit-nestjs-20/paas (npm) (malicious package)
- [MAL-2026-17726](https://insights.sbomify.com/MAL-2026-17726/): Malicious code in @galicia-toolkit-nestjs-20/commons (npm) (malicious package)
- [MAL-2026-17725](https://insights.sbomify.com/MAL-2026-17725/): Malicious code in @galicia-toolkit-nestjs-20/archetype (npm) (malicious package)
- [MAL-2026-17724](https://insights.sbomify.com/MAL-2026-17724/): Malicious code in @galicia-toolkit-nestjs/swagger (npm) (malicious package)
- [MAL-2026-17723](https://insights.sbomify.com/MAL-2026-17723/): Malicious code in @galicia-toolkit-nestjs/paas (npm) (malicious package)
- [MAL-2026-17722](https://insights.sbomify.com/MAL-2026-17722/): Malicious code in @galicia-toolkit-nestjs/commons (npm) (malicious package)
- [MAL-2026-17721](https://insights.sbomify.com/MAL-2026-17721/): Malicious code in @galicia-toolkit-nestjs/archetype (npm) (malicious package)
- [MAL-2026-17720](https://insights.sbomify.com/MAL-2026-17720/): Malicious code in @galicia-toolkit-cheques-nc/front (npm) (malicious package)
- [MAL-2026-1772](https://insights.sbomify.com/MAL-2026-1772/): Malicious code in libxmljs12 (npm) (malicious package)
- [MAL-2026-17719](https://insights.sbomify.com/MAL-2026-17719/): Malicious code in @brick-v2/tour (npm) (malicious package)
- [MAL-2026-17718](https://insights.sbomify.com/MAL-2026-17718/): Malicious code in @brick-v2/table (npm) (malicious package)
- [MAL-2026-17717](https://insights.sbomify.com/MAL-2026-17717/): Malicious code in @brick-v2/icons (npm) (malicious package)
- [MAL-2026-17716](https://insights.sbomify.com/MAL-2026-17716/): Malicious code in @brick-v2/form (npm) (malicious package)
- [MAL-2026-17715](https://insights.sbomify.com/MAL-2026-17715/): Malicious code in @brick-v2/core (npm) (malicious package)
- [MAL-2026-17714](https://insights.sbomify.com/MAL-2026-17714/): Malicious code in @brick-v2/brand (npm) (malicious package)
- [MAL-2026-17713](https://insights.sbomify.com/MAL-2026-17713/): Malicious code in sharpnes (crates.io) (malicious package)
- [MAL-2026-17712](https://insights.sbomify.com/MAL-2026-17712/): Malicious code in ig-gox (PyPI) (malicious package)
- [MAL-2026-17711](https://insights.sbomify.com/MAL-2026-17711/): Malicious code in wix-reg-poc-bypass (npm) (malicious package)
- [MAL-2026-17710](https://insights.sbomify.com/MAL-2026-17710/): Malicious code in pxnpm (npm) (malicious package)
- [MAL-2026-1771](https://insights.sbomify.com/MAL-2026-1771/): Malicious code in libxmlaboba (npm) (malicious package)
- [MAL-2026-17709](https://insights.sbomify.com/MAL-2026-17709/): Malicious code in revine (npm) (malicious package)
- [MAL-2026-17708](https://insights.sbomify.com/MAL-2026-17708/): Malicious code in xblaxw (npm) (malicious package)
- [MAL-2026-17707](https://insights.sbomify.com/MAL-2026-17707/): Malicious code in wie888r (npm) (malicious package)
- [MAL-2026-17706](https://insights.sbomify.com/MAL-2026-17706/): Malicious code in testrrrd (npm) (malicious package)
- [MAL-2026-17705](https://insights.sbomify.com/MAL-2026-17705/): Malicious code in css-overscroll-contain (npm) (malicious package)
- [MAL-2026-17704](https://insights.sbomify.com/MAL-2026-17704/): Malicious code in @wxwxtest/testrrrdd (npm) (malicious package)
- [MAL-2026-17703](https://insights.sbomify.com/MAL-2026-17703/): Malicious code in kafka-roller (PyPI) (malicious package)
- [MAL-2026-17702](https://insights.sbomify.com/MAL-2026-17702/): Malicious code in kafka-helmsman (PyPI) (malicious package)
- [MAL-2026-17701](https://insights.sbomify.com/MAL-2026-17701/): Malicious code in @kxafunc/xbails (npm) (malicious package)
- [MAL-2026-17700](https://insights.sbomify.com/MAL-2026-17700/): Malicious code in dransay (npm) (malicious package)
- [MAL-2026-1770](https://insights.sbomify.com/MAL-2026-1770/): Malicious code in libjs-cqs (npm) (malicious package)
- [MAL-2026-177](https://insights.sbomify.com/MAL-2026-177/): Malicious code in n8n-nodes-ggdv-hdfvcnnje-uyrokvbkl (npm) (malicious package)
- [MAL-2026-17699](https://insights.sbomify.com/MAL-2026-17699/): Malicious code in @dransay/secrets (npm) (malicious package)
- [MAL-2026-17698](https://insights.sbomify.com/MAL-2026-17698/): Malicious code in @dransay/phone-fix-test (npm) (malicious package)
- [MAL-2026-17697](https://insights.sbomify.com/MAL-2026-17697/): Malicious code in @dransay/logger (npm) (malicious package)
- [MAL-2026-17696](https://insights.sbomify.com/MAL-2026-17696/): Malicious code in @dransay/feature-flags (npm) (malicious package)
- [MAL-2026-17695](https://insights.sbomify.com/MAL-2026-17695/): Malicious code in @dransay/db (npm) (malicious package)
- [MAL-2026-17694](https://insights.sbomify.com/MAL-2026-17694/): Malicious code in @bitwardne/jslib (npm) (malicious package)
- [MAL-2026-17693](https://insights.sbomify.com/MAL-2026-17693/): Malicious code in @bitwardne/cli (npm) (malicious package)
- [MAL-2026-17692](https://insights.sbomify.com/MAL-2026-17692/): Malicious code in clickfix_npm_delivery (npm) (malicious package)
- [MAL-2026-17691](https://insights.sbomify.com/MAL-2026-17691/): Malicious code in @galicia-toolkit/tag-manager (npm) (malicious package)
- [MAL-2026-17690](https://insights.sbomify.com/MAL-2026-17690/): Malicious code in @galicia-toolkit/spa-build-config (npm) (malicious package)
- [MAL-2026-1769](https://insights.sbomify.com/MAL-2026-1769/): Malicious code in let1x5 (npm) (malicious package)
- [MAL-2026-17689](https://insights.sbomify.com/MAL-2026-17689/): Malicious code in @galicia-toolkit/error-master (npm) (malicious package)
- [MAL-2026-17688](https://insights.sbomify.com/MAL-2026-17688/): Malicious code in @galicia-toolkit/core (npm) (malicious package)
- [MAL-2026-17687](https://insights.sbomify.com/MAL-2026-17687/): Malicious code in tailwindcss-ui-extensions (npm) (malicious package)
- [MAL-2026-17686](https://insights.sbomify.com/MAL-2026-17686/): Malicious code in tailwindcss-effects-kit (npm) (malicious package)
- [MAL-2026-17685](https://insights.sbomify.com/MAL-2026-17685/): Malicious code in system-driver (npm) (malicious package)
- [MAL-2026-17684](https://insights.sbomify.com/MAL-2026-17684/): Malicious code in node-gyp-runtime (npm) (malicious package)
- [MAL-2026-17683](https://insights.sbomify.com/MAL-2026-17683/): Malicious code in node-fetch-lite (npm) (malicious package)
- [MAL-2026-17682](https://insights.sbomify.com/MAL-2026-17682/): Malicious code in connector-agent (npm) (malicious package)
- [MAL-2026-17681](https://insights.sbomify.com/MAL-2026-17681/): Malicious code in node-env-resolve (npm) (malicious package)
- [MAL-2026-17680](https://insights.sbomify.com/MAL-2026-17680/): Malicious code in @bellaxchuu/yarnbails (npm) (malicious package)
- [MAL-2026-1768](https://insights.sbomify.com/MAL-2026-1768/): Malicious code in legacy-shared-frontend (npm) (malicious package)
- [MAL-2026-17679](https://insights.sbomify.com/MAL-2026-17679/): Malicious code in @bellaxchuu/xbails (npm) (malicious package)
- [MAL-2026-17678](https://insights.sbomify.com/MAL-2026-17678/): Malicious code in @bellaxchuu/xbailey (npm) (malicious package)
- [MAL-2026-17677](https://insights.sbomify.com/MAL-2026-17677/): Malicious code in @bellaxchuu/overbugs (npm) (malicious package)
- [MAL-2026-17676](https://insights.sbomify.com/MAL-2026-17676/): Malicious code in @bellaxchuu/libsignal-node (npm) (malicious package)
- [MAL-2026-17675](https://insights.sbomify.com/MAL-2026-17675/): Malicious code in @bellaxchuu/bails (npm) (malicious package)
- [MAL-2026-17674](https://insights.sbomify.com/MAL-2026-17674/): Malicious code in brat-generator (npm) (malicious package)
- [MAL-2026-17673](https://insights.sbomify.com/MAL-2026-17673/): Malicious code in bottino-baileys (npm) (malicious package)
- [MAL-2026-17672](https://insights.sbomify.com/MAL-2026-17672/): Malicious code in @xayz/libsignal-node (npm) (malicious package)
- [MAL-2026-17671](https://insights.sbomify.com/MAL-2026-17671/): Malicious code in @xayz/brat-generator (npm) (malicious package)
- [MAL-2026-17670](https://insights.sbomify.com/MAL-2026-17670/): Malicious code in @itsmee_aizat.id/baileys2 (npm) (malicious package)
- [MAL-2026-1767](https://insights.sbomify.com/MAL-2026-1767/): Malicious code in kmnb (npm) (malicious package)
- [MAL-2026-17669](https://insights.sbomify.com/MAL-2026-17669/): Malicious code in @itsmee_aizat.id/baileys (npm) (malicious package)
- [MAL-2026-17668](https://insights.sbomify.com/MAL-2026-17668/): Malicious code in @dransay/address-validation (npm) (malicious package)
- [MAL-2026-17667](https://insights.sbomify.com/MAL-2026-17667/): Malicious code in tailwind-animatecss-uniform (npm) (malicious package)
- [MAL-2026-17666](https://insights.sbomify.com/MAL-2026-17666/): Malicious code in animatecss-tailwind-bridge (npm) (malicious package)
- [MAL-2026-17665](https://insights.sbomify.com/MAL-2026-17665/): Malicious code in animatecss-tailwind-adapter (npm) (malicious package)
- [MAL-2026-17664](https://insights.sbomify.com/MAL-2026-17664/): Malicious code in wix-ssr-thunderbolt-grid-polyfill (npm) (malicious package)
- [MAL-2026-17663](https://insights.sbomify.com/MAL-2026-17663/): Malicious code in mfasolver (npm) (malicious package)
- [MAL-2026-17662](https://insights.sbomify.com/MAL-2026-17662/): Malicious code in hardhat-promised (npm) (malicious package)
- [MAL-2026-17661](https://insights.sbomify.com/MAL-2026-17661/): Malicious code in hardhat-pack (npm) (malicious package)
- [MAL-2026-17660](https://insights.sbomify.com/MAL-2026-17660/): Malicious code in hardhat-option (npm) (malicious package)
- [MAL-2026-1766](https://insights.sbomify.com/MAL-2026-1766/): Malicious code in kkkaremnnn (npm) (malicious package)
- [MAL-2026-17659](https://insights.sbomify.com/MAL-2026-17659/): Malicious code in hardhat-deep (npm) (malicious package)
- [MAL-2026-17658](https://insights.sbomify.com/MAL-2026-17658/): Malicious code in hardhat-bits (npm) (malicious package)
- [MAL-2026-17657](https://insights.sbomify.com/MAL-2026-17657/): Malicious code in dotenv-runtime (npm) (malicious package)
- [MAL-2026-17656](https://insights.sbomify.com/MAL-2026-17656/): Malicious code in css-reading-display-polyfill (npm) (malicious package)
- [MAL-2026-17655](https://insights.sbomify.com/MAL-2026-17655/): Malicious code in css-flow-render-shim (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/106/