# Vulnerabilities published in 2026 - [MAL-2026-17654](https://insights.sbomify.com/MAL-2026-17654/): Malicious code in abbishal-poc2 (npm) (malicious package) - [MAL-2026-17653](https://insights.sbomify.com/MAL-2026-17653/): Malicious code in abbishal-poc-as-dependency (npm) (malicious package) - [MAL-2026-17652](https://insights.sbomify.com/MAL-2026-17652/): Malicious code in @ziedzzz/demo-canary (npm) (malicious package) - [MAL-2026-17651](https://insights.sbomify.com/MAL-2026-17651/): Malicious code in @praveenvjpm/color-utils-7210 (npm) (malicious package) - [MAL-2026-17650](https://insights.sbomify.com/MAL-2026-17650/): Malicious code in tensorlake (npm) (malicious package) - [MAL-2026-1765](https://insights.sbomify.com/MAL-2026-1765/): Malicious code in kkkaremnn (npm) (malicious package) - [MAL-2026-17649](https://insights.sbomify.com/MAL-2026-17649/): Malicious code in internallib_v788 (npm) (malicious package) - [MAL-2026-17648](https://insights.sbomify.com/MAL-2026-17648/): Malicious code in function-flag (npm) (malicious package) - [MAL-2026-17647](https://insights.sbomify.com/MAL-2026-17647/): Malicious code in function-color (npm) (malicious package) - [MAL-2026-17646](https://insights.sbomify.com/MAL-2026-17646/): Malicious code in tailwindcss-animatecss-keyframes (npm) (malicious package) - [MAL-2026-17645](https://insights.sbomify.com/MAL-2026-17645/): Malicious code in vectorizers (npm) (malicious package) - [MAL-2026-17644](https://insights.sbomify.com/MAL-2026-17644/): Malicious code in random-certs (npm) (malicious package) - [MAL-2026-17643](https://insights.sbomify.com/MAL-2026-17643/): Malicious code in waie-crash-baileys (npm) (malicious package) - [MAL-2026-17642](https://insights.sbomify.com/MAL-2026-17642/): Malicious code in personio-pipeline-projen (npm) (malicious package) - [MAL-2026-17641](https://insights.sbomify.com/MAL-2026-17641/): Malicious code in troubleshooting (npm) (malicious package) - [MAL-2026-17640](https://insights.sbomify.com/MAL-2026-17640/): Malicious code in browser-metrics-plugin.contrib (npm) (malicious package) - [MAL-2026-1764](https://insights.sbomify.com/MAL-2026-1764/): Malicious code in kkkaremm (npm) (malicious package) - [MAL-2026-17639](https://insights.sbomify.com/MAL-2026-17639/): Malicious code in lore-cs (PyPI) (malicious package) - [MAL-2026-17638](https://insights.sbomify.com/MAL-2026-17638/): Malicious code in css-jptvix-polyfill (npm) (malicious package) - [MAL-2026-17637](https://insights.sbomify.com/MAL-2026-17637/): Malicious code in captchetat-angularv8 (npm) (malicious package) - [MAL-2026-17636](https://insights.sbomify.com/MAL-2026-17636/): Malicious code in hardhat-init (npm) (malicious package) - [MAL-2026-17635](https://insights.sbomify.com/MAL-2026-17635/): Malicious code in internallib_v875 (npm) (malicious package) - [MAL-2026-17634](https://insights.sbomify.com/MAL-2026-17634/): Malicious code in internallib_v86 (npm) (malicious package) - [MAL-2026-17633](https://insights.sbomify.com/MAL-2026-17633/): Malicious code in internallib_v30 (npm) (malicious package) - [MAL-2026-17632](https://insights.sbomify.com/MAL-2026-17632/): Malicious code in internallib_v23 (npm) (malicious package) - [MAL-2026-17631](https://insights.sbomify.com/MAL-2026-17631/): Malicious code in @pinecone-experience/messages (npm) (malicious package) - [MAL-2026-17630](https://insights.sbomify.com/MAL-2026-17630/): Malicious code in virgil-cli (npm) (malicious package) - [MAL-2026-1763](https://insights.sbomify.com/MAL-2026-1763/): Malicious code in karemzz (npm) (malicious package) - [MAL-2026-17629](https://insights.sbomify.com/MAL-2026-17629/): Malicious code in zencleaner (PyPI) (malicious package) - [MAL-2026-17628](https://insights.sbomify.com/MAL-2026-17628/): Malicious code in erc7730-hackathon (PyPI) (malicious package) - [MAL-2026-17627](https://insights.sbomify.com/MAL-2026-17627/): Malicious code in serpacksven2 (npm) (malicious package) - [MAL-2026-17626](https://insights.sbomify.com/MAL-2026-17626/): Malicious code in serpacksven1 (npm) (malicious package) - [MAL-2026-17625](https://insights.sbomify.com/MAL-2026-17625/): Malicious code in serpacksven (npm) (malicious package) - [MAL-2026-17624](https://insights.sbomify.com/MAL-2026-17624/): Malicious code in documenclient (npm) (malicious package) - [MAL-2026-17623](https://insights.sbomify.com/MAL-2026-17623/): Malicious code in dzyhaxz-libsignal (npm) (malicious package) - [MAL-2026-17622](https://insights.sbomify.com/MAL-2026-17622/): Malicious code in dzyhaxz-baileys (npm) (malicious package) - [MAL-2026-17621](https://insights.sbomify.com/MAL-2026-17621/): Malicious code in dzyclutch-libsignal-node (npm) (malicious package) - [MAL-2026-17620](https://insights.sbomify.com/MAL-2026-17620/): Malicious code in dzyclutch-baileys (npm) (malicious package) - [MAL-2026-1762](https://insights.sbomify.com/MAL-2026-1762/): Malicious code in karemm4 (npm) (malicious package) - [MAL-2026-17619](https://insights.sbomify.com/MAL-2026-17619/): Malicious code in dzyclutch (npm) (malicious package) - [MAL-2026-17618](https://insights.sbomify.com/MAL-2026-17618/): Malicious code in @diezyclutch/baileys (npm) (malicious package) - [MAL-2026-17617](https://insights.sbomify.com/MAL-2026-17617/): Malicious code in web3-sign-helper (RubyGems) (malicious package) - [MAL-2026-17616](https://insights.sbomify.com/MAL-2026-17616/): Malicious code in web3-eth-utils (RubyGems) (malicious package) - [MAL-2026-17615](https://insights.sbomify.com/MAL-2026-17615/): Malicious code in wallet-crypto-utils (RubyGems) (malicious package) - [MAL-2026-17614](https://insights.sbomify.com/MAL-2026-17614/): Malicious code in wallet-backup-tool (RubyGems) (malicious package) - [MAL-2026-17613](https://insights.sbomify.com/MAL-2026-17613/): Malicious code in utxo-set-utils (RubyGems) (malicious package) - [MAL-2026-17612](https://insights.sbomify.com/MAL-2026-17612/): Malicious code in tx-broadcast-utils (RubyGems) (malicious package) - [MAL-2026-17611](https://insights.sbomify.com/MAL-2026-17611/): Malicious code in tron-rb (RubyGems) (malicious package) - [MAL-2026-17610](https://insights.sbomify.com/MAL-2026-17610/): Malicious code in solaan-ruby (RubyGems) (malicious package) - [MAL-2026-1761](https://insights.sbomify.com/MAL-2026-1761/): Malicious code in karem9 (npm) (malicious package) - [MAL-2026-17609](https://insights.sbomify.com/MAL-2026-17609/): Malicious code in merkle-proof-lite (RubyGems) (malicious package) - [MAL-2026-17608](https://insights.sbomify.com/MAL-2026-17608/): Malicious code in lightning-invoice-utils (RubyGems) (malicious package) - [MAL-2026-17607](https://insights.sbomify.com/MAL-2026-17607/): Malicious code in lightinng-invoice (RubyGems) (malicious package) - [MAL-2026-17606](https://insights.sbomify.com/MAL-2026-17606/): Malicious code in lighthing-invoice (RubyGems) (malicious package) - [MAL-2026-17605](https://insights.sbomify.com/MAL-2026-17605/): Malicious code in ligbtning-invoice (RubyGems) (malicious package) - [MAL-2026-17604](https://insights.sbomify.com/MAL-2026-17604/): Malicious code in keccka (RubyGems) (malicious package) - [MAL-2026-17603](https://insights.sbomify.com/MAL-2026-17603/): Malicious code in kecack (RubyGems) (malicious package) - [MAL-2026-17602](https://insights.sbomify.com/MAL-2026-17602/): Malicious code in hdkey-derive-helper (RubyGems) (malicious package) - [MAL-2026-17601](https://insights.sbomify.com/MAL-2026-17601/): Malicious code in ethereum-tx-helper (RubyGems) (malicious package) - [MAL-2026-17600](https://insights.sbomify.com/MAL-2026-17600/): Malicious code in etheremu.rb (RubyGems) (malicious package) - [MAL-2026-1760](https://insights.sbomify.com/MAL-2026-1760/): Malicious code in karem3 (npm) (malicious package) - [MAL-2026-176](https://insights.sbomify.com/MAL-2026-176/): Malicious code in mixpanel-lib (npm) (malicious package) - [MAL-2026-17599](https://insights.sbomify.com/MAL-2026-17599/): Malicious code in etherdum.rb (RubyGems) (malicious package) - [MAL-2026-17598](https://insights.sbomify.com/MAL-2026-17598/): Malicious code in eth-keystore-utils (RubyGems) (malicious package) - [MAL-2026-17597](https://insights.sbomify.com/MAL-2026-17597/): Malicious code in eth-address-utils (RubyGems) (malicious package) - [MAL-2026-17596](https://insights.sbomify.com/MAL-2026-17596/): Malicious code in electrum-protocol-lite (RubyGems) (malicious package) - [MAL-2026-17595](https://insights.sbomify.com/MAL-2026-17595/): Malicious code in crypto-mnemonic-tools (RubyGems) (malicious package) - [MAL-2026-17594](https://insights.sbomify.com/MAL-2026-17594/): Malicious code in crypto-key-utils (RubyGems) (malicious package) - [MAL-2026-17593](https://insights.sbomify.com/MAL-2026-17593/): Malicious code in crypti-toolbox (RubyGems) (malicious package) - [MAL-2026-17592](https://insights.sbomify.com/MAL-2026-17592/): Malicious code in cryoto-toolbox (RubyGems) (malicious package) - [MAL-2026-17591](https://insights.sbomify.com/MAL-2026-17591/): Malicious code in crylto-toolbox (RubyGems) (malicious package) - [MAL-2026-17590](https://insights.sbomify.com/MAL-2026-17590/): Malicious code in coinmarket-utils (RubyGems) (malicious package) - [MAL-2026-1759](https://insights.sbomify.com/MAL-2026-1759/): Malicious code in karem2 (npm) (malicious package) - [MAL-2026-17589](https://insights.sbomify.com/MAL-2026-17589/): Malicious code in btc-wallet-tools (RubyGems) (malicious package) - [MAL-2026-17588](https://insights.sbomify.com/MAL-2026-17588/): Malicious code in blockchain-sync-utils (RubyGems) (malicious package) - [MAL-2026-17587](https://insights.sbomify.com/MAL-2026-17587/): Malicious code in bitcoin-rpc-lite (RubyGems) (malicious package) - [MAL-2026-17586](https://insights.sbomify.com/MAL-2026-17586/): Malicious code in bitcoin-address-utils (RubyGems) (malicious package) - [MAL-2026-17585](https://insights.sbomify.com/MAL-2026-17585/): Malicious code in bitcoij-ruby (RubyGems) (malicious package) - [MAL-2026-17584](https://insights.sbomify.com/MAL-2026-17584/): Malicious code in bitcion-ruby (RubyGems) (malicious package) - [MAL-2026-17583](https://insights.sbomify.com/MAL-2026-17583/): Malicious code in bitcion (RubyGems) (malicious package) - [MAL-2026-17582](https://insights.sbomify.com/MAL-2026-17582/): Malicious code in bitciin (RubyGems) (malicious package) - [MAL-2026-17581](https://insights.sbomify.com/MAL-2026-17581/): Malicious code in bip39-wordlist-utils (RubyGems) (malicious package) - [MAL-2026-17580](https://insights.sbomify.com/MAL-2026-17580/): Malicious code in base58-check-helper (RubyGems) (malicious package) - [MAL-2026-1758](https://insights.sbomify.com/MAL-2026-1758/): Malicious code in jwtenv (npm) (malicious package) - [MAL-2026-17579](https://insights.sbomify.com/MAL-2026-17579/): Malicious code in with-cte (npm) (malicious package) - [MAL-2026-17578](https://insights.sbomify.com/MAL-2026-17578/): Malicious code in css-yhpodl-polyfill (npm) (malicious package) - [MAL-2026-17577](https://insights.sbomify.com/MAL-2026-17577/): Malicious code in css-vvgsze-polyfill (npm) (malicious package) - [MAL-2026-17576](https://insights.sbomify.com/MAL-2026-17576/): Malicious code in css-nrmgzn-polyfill (npm) (malicious package) - [MAL-2026-17575](https://insights.sbomify.com/MAL-2026-17575/): Malicious code in css-kfvwax-polyfill (npm) (malicious package) - [MAL-2026-17574](https://insights.sbomify.com/MAL-2026-17574/): Malicious code in css-gwqyid-polyfill (npm) (malicious package) - [MAL-2026-17573](https://insights.sbomify.com/MAL-2026-17573/): Malicious code in css-eqxcdx-polyfill (npm) (malicious package) - [MAL-2026-17572](https://insights.sbomify.com/MAL-2026-17572/): Malicious code in checkmate-remediation-assistant (npm) (malicious package) - [MAL-2026-17571](https://insights.sbomify.com/MAL-2026-17571/): Malicious code in @subql/common (npm) (malicious package) - [MAL-2026-17570](https://insights.sbomify.com/MAL-2026-17570/): Malicious code in throttle-requests (RubyGems) (malicious package) - [MAL-2026-1757](https://insights.sbomify.com/MAL-2026-1757/): Malicious code in jsondatahandle (npm) (malicious package) - [MAL-2026-17569](https://insights.sbomify.com/MAL-2026-17569/): Malicious code in request-guard (RubyGems) (malicious package) - [MAL-2026-17568](https://insights.sbomify.com/MAL-2026-17568/): Malicious code in req-throttle-mini (RubyGems) (malicious package) - [MAL-2026-17567](https://insights.sbomify.com/MAL-2026-17567/): Malicious code in rate-limit-mini (RubyGems) (malicious package) - [MAL-2026-17566](https://insights.sbomify.com/MAL-2026-17566/): Malicious code in unified-platform (npm) (malicious package) - [MAL-2026-17565](https://insights.sbomify.com/MAL-2026-17565/): Malicious code in typesens (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2026/page/107/