# Vulnerabilities published in 2026 - [MAL-2026-17474](https://insights.sbomify.com/MAL-2026-17474/): Malicious code in core-js-gnz (npm) (malicious package) - [MAL-2026-17473](https://insights.sbomify.com/MAL-2026-17473/): Malicious code in chai-as-testmode (npm) (malicious package) - [MAL-2026-17472](https://insights.sbomify.com/MAL-2026-17472/): Malicious code in anthropic-sdk (PyPI) (malicious package) - [MAL-2026-17471](https://insights.sbomify.com/MAL-2026-17471/): Malicious code in caoxiltts (PyPI) (malicious package) - [MAL-2026-17470](https://insights.sbomify.com/MAL-2026-17470/): Malicious code in voxcpmruntime (PyPI) (malicious package) - [MAL-2026-1747](https://insights.sbomify.com/MAL-2026-1747/): Malicious code in iconicwp-website (npm) (malicious package) - [MAL-2026-17469](https://insights.sbomify.com/MAL-2026-17469/): Malicious code in infrabench (PyPI) (malicious package) - [MAL-2026-17468](https://insights.sbomify.com/MAL-2026-17468/): Malicious code in voxcpmintel (PyPI) (malicious package) - [MAL-2026-17467](https://insights.sbomify.com/MAL-2026-17467/): Malicious code in voxcpmui4 (PyPI) (malicious package) - [MAL-2026-17466](https://insights.sbomify.com/MAL-2026-17466/): Malicious code in voxcpmkit (PyPI) (malicious package) - [MAL-2026-17465](https://insights.sbomify.com/MAL-2026-17465/): Malicious code in voxcpmeval (PyPI) (malicious package) - [MAL-2026-17464](https://insights.sbomify.com/MAL-2026-17464/): Malicious code in voxcpmui3 (PyPI) (malicious package) - [MAL-2026-17463](https://insights.sbomify.com/MAL-2026-17463/): Malicious code in voxcpmtts3 (PyPI) (malicious package) - [MAL-2026-17462](https://insights.sbomify.com/MAL-2026-17462/): Malicious code in echogen (PyPI) (malicious package) - [MAL-2026-17461](https://insights.sbomify.com/MAL-2026-17461/): Malicious code in voxel-tts (PyPI) (malicious package) - [MAL-2026-17460](https://insights.sbomify.com/MAL-2026-17460/): Malicious code in ui.dist.min.js (npm) (malicious package) - [MAL-2026-1746](https://insights.sbomify.com/MAL-2026-1746/): Malicious code in hydra-node-consent-sdk (npm) (malicious package) - [MAL-2026-17459](https://insights.sbomify.com/MAL-2026-17459/): Malicious code in ui-base-colors (npm) (malicious package) - [MAL-2026-17458](https://insights.sbomify.com/MAL-2026-17458/): Malicious code in translate-base-font (npm) (malicious package) - [MAL-2026-17457](https://insights.sbomify.com/MAL-2026-17457/): Malicious code in voxeval (PyPI) (malicious package) - [MAL-2026-17456](https://insights.sbomify.com/MAL-2026-17456/): Malicious code in @smwebserver/static (npm) (malicious package) - [MAL-2026-17455](https://insights.sbomify.com/MAL-2026-17455/): Malicious code in dedh-devops-automation (PyPI) (malicious package) - [MAL-2026-17454](https://insights.sbomify.com/MAL-2026-17454/): Malicious code in gogets.dev/btreex (Go) (malicious package) - [MAL-2026-17453](https://insights.sbomify.com/MAL-2026-17453/): Malicious code in gocommunity.io/orderedbtree (Go) (malicious package) - [MAL-2026-17452](https://insights.sbomify.com/MAL-2026-17452/): Malicious code in xcvrenzcompany (npm) (malicious package) - [MAL-2026-17451](https://insights.sbomify.com/MAL-2026-17451/): Malicious code in wailib (npm) (malicious package) - [MAL-2026-17450](https://insights.sbomify.com/MAL-2026-17450/): Malicious code in rubbydev-crash-baileys (npm) (malicious package) - [MAL-2026-1745](https://insights.sbomify.com/MAL-2026-1745/): Malicious code in hydra-consent-sdk (npm) (malicious package) - [MAL-2026-17449](https://insights.sbomify.com/MAL-2026-17449/): Malicious code in prastzyy (npm) (malicious package) - [MAL-2026-17448](https://insights.sbomify.com/MAL-2026-17448/): Malicious code in prastzy (npm) (malicious package) - [MAL-2026-17447](https://insights.sbomify.com/MAL-2026-17447/): Malicious code in mikuhostt-baileys (npm) (malicious package) - [MAL-2026-17446](https://insights.sbomify.com/MAL-2026-17446/): Malicious code in luoxy-baileys (npm) (malicious package) - [MAL-2026-17445](https://insights.sbomify.com/MAL-2026-17445/): Malicious code in ichigo-baileys (npm) (malicious package) - [MAL-2026-17444](https://insights.sbomify.com/MAL-2026-17444/): Malicious code in danz-bails (npm) (malicious package) - [MAL-2026-17443](https://insights.sbomify.com/MAL-2026-17443/): Malicious code in @zanta/baileys (npm) (malicious package) - [MAL-2026-17442](https://insights.sbomify.com/MAL-2026-17442/): Malicious code in @smart-dev-wa/baileys (npm) (malicious package) - [MAL-2026-17441](https://insights.sbomify.com/MAL-2026-17441/): Malicious code in @fazzcodestudio/wa-web (npm) (malicious package) - [MAL-2026-17440](https://insights.sbomify.com/MAL-2026-17440/): Malicious code in @erlanzz/baileys (npm) (malicious package) - [MAL-2026-1744](https://insights.sbomify.com/MAL-2026-1744/): Malicious code in house-click (npm) (malicious package) - [MAL-2026-17439](https://insights.sbomify.com/MAL-2026-17439/): Malicious code in @developmentyora/baileyss (npm) (malicious package) - [MAL-2026-17438](https://insights.sbomify.com/MAL-2026-17438/): Malicious code in @celestial-community/baileys (npm) (malicious package) - [MAL-2026-17437](https://insights.sbomify.com/MAL-2026-17437/): Malicious code in @bluewin/utils (npm) (malicious package) - [MAL-2026-17436](https://insights.sbomify.com/MAL-2026-17436/): Malicious code in okra-cloud-cdk (npm) (malicious package) - [MAL-2026-17435](https://insights.sbomify.com/MAL-2026-17435/): Malicious code in niksinnkatalapp (npm) (malicious package) - [MAL-2026-17434](https://insights.sbomify.com/MAL-2026-17434/): Malicious code in live-detection-dashboard (npm) (malicious package) - [MAL-2026-17433](https://insights.sbomify.com/MAL-2026-17433/): Malicious code in figma-to-apl (npm) (malicious package) - [MAL-2026-17432](https://insights.sbomify.com/MAL-2026-17432/): Malicious code in brioche-apl-dev-env (npm) (malicious package) - [MAL-2026-17431](https://insights.sbomify.com/MAL-2026-17431/): Malicious code in apl-rive-renderer (npm) (malicious package) - [MAL-2026-17430](https://insights.sbomify.com/MAL-2026-17430/): Malicious code in alexa-cybertron-team-code-review-agent (npm) (malicious package) - [MAL-2026-1743](https://insights.sbomify.com/MAL-2026-1743/): Malicious code in haodesk-ui (npm) (malicious package) - [MAL-2026-17429](https://insights.sbomify.com/MAL-2026-17429/): Malicious code in ai-workshop-radio-lambda (npm) (malicious package) - [MAL-2026-17428](https://insights.sbomify.com/MAL-2026-17428/): Malicious code in ai-workshop-radio-app (npm) (malicious package) - [MAL-2026-17427](https://insights.sbomify.com/MAL-2026-17427/): Malicious code in ai-workshop-maa15-radio (npm) (malicious package) - [MAL-2026-17426](https://insights.sbomify.com/MAL-2026-17426/): Malicious code in kartykgithub-ph-f (npm) (malicious package) - [MAL-2026-17425](https://insights.sbomify.com/MAL-2026-17425/): Malicious code in kartykgithub-ph-e (npm) (malicious package) - [MAL-2026-17424](https://insights.sbomify.com/MAL-2026-17424/): Malicious code in kartykgithub-ph-b (npm) (malicious package) - [MAL-2026-17423](https://insights.sbomify.com/MAL-2026-17423/): Malicious code in illusion-datalab (npm) (malicious package) - [MAL-2026-17422](https://insights.sbomify.com/MAL-2026-17422/): Malicious code in shortneer (PyPI) (malicious package) - [MAL-2026-17421](https://insights.sbomify.com/MAL-2026-17421/): Malicious code in spo365-graph (PyPI) (malicious package) - [MAL-2026-17420](https://insights.sbomify.com/MAL-2026-17420/): Malicious code in online-header (npm) (malicious package) - [MAL-2026-1742](https://insights.sbomify.com/MAL-2026-1742/): Malicious code in google-audit-tool (npm) (malicious package) - [MAL-2026-17419](https://insights.sbomify.com/MAL-2026-17419/): Malicious code in friendly-tools (PyPI) (malicious package) - [MAL-2026-17418](https://insights.sbomify.com/MAL-2026-17418/): Malicious code in future-scripts (npm) (malicious package) - [MAL-2026-17417](https://insights.sbomify.com/MAL-2026-17417/): Malicious code in beautifytext (PyPI) (malicious package) - [MAL-2026-17416](https://insights.sbomify.com/MAL-2026-17416/): Malicious code in friendly-greeting-tools (PyPI) (malicious package) - [MAL-2026-17415](https://insights.sbomify.com/MAL-2026-17415/): Malicious code in com.epi.e2e_test (npm) (malicious package) - [MAL-2026-17414](https://insights.sbomify.com/MAL-2026-17414/): Malicious code in yonzofficial (npm) (malicious package) - [MAL-2026-17413](https://insights.sbomify.com/MAL-2026-17413/): Malicious code in yonzoffic-baileys (npm) (malicious package) - [MAL-2026-17412](https://insights.sbomify.com/MAL-2026-17412/): Malicious code in xzvexpzcbailey (npm) (malicious package) - [MAL-2026-17411](https://insights.sbomify.com/MAL-2026-17411/): Malicious code in xzvbails (npm) (malicious package) - [MAL-2026-17410](https://insights.sbomify.com/MAL-2026-17410/): Malicious code in xzbails (npm) (malicious package) - [MAL-2026-1741](https://insights.sbomify.com/MAL-2026-1741/): Malicious code in frontastic (npm) (malicious package) - [MAL-2026-17409](https://insights.sbomify.com/MAL-2026-17409/): Malicious code in xvinleys (npm) (malicious package) - [MAL-2026-17407](https://insights.sbomify.com/MAL-2026-17407/): Malicious code in syncxbails (npm) (malicious package) - [MAL-2026-17406](https://insights.sbomify.com/MAL-2026-17406/): Malicious code in spencer-baileys (npm) (malicious package) - [MAL-2026-17405](https://insights.sbomify.com/MAL-2026-17405/): Malicious code in shadowmd (npm) (malicious package) - [MAL-2026-17404](https://insights.sbomify.com/MAL-2026-17404/): Malicious code in saturn-baileys (npm) (malicious package) - [MAL-2026-17403](https://insights.sbomify.com/MAL-2026-17403/): Malicious code in noxxleys (npm) (malicious package) - [MAL-2026-17402](https://insights.sbomify.com/MAL-2026-17402/): Malicious code in noxleyss (npm) (malicious package) - [MAL-2026-17401](https://insights.sbomify.com/MAL-2026-17401/): Malicious code in noverojs (npm) (malicious package) - [MAL-2026-17400](https://insights.sbomify.com/MAL-2026-17400/): Malicious code in my-baileys (npm) (malicious package) - [MAL-2026-1740](https://insights.sbomify.com/MAL-2026-1740/): Malicious code in fixerpabo_jkbts (npm) (malicious package) - [MAL-2026-174](https://insights.sbomify.com/MAL-2026-174/): Malicious code in dotenv-intended (npm) (malicious package) - [MAL-2026-17399](https://insights.sbomify.com/MAL-2026-17399/): Malicious code in monte-md-baileys (npm) (malicious package) - [MAL-2026-17398](https://insights.sbomify.com/MAL-2026-17398/): Malicious code in lilys-baileys (npm) (malicious package) - [MAL-2026-17397](https://insights.sbomify.com/MAL-2026-17397/): Malicious code in levvleys (npm) (malicious package) - [MAL-2026-17396](https://insights.sbomify.com/MAL-2026-17396/): Malicious code in kiyoramarkets (npm) (malicious package) - [MAL-2026-17395](https://insights.sbomify.com/MAL-2026-17395/): Malicious code in keithbaileys (npm) (malicious package) - [MAL-2026-17394](https://insights.sbomify.com/MAL-2026-17394/): Malicious code in kasabaileys (npm) (malicious package) - [MAL-2026-17393](https://insights.sbomify.com/MAL-2026-17393/): Malicious code in ishumdz-bail (npm) (malicious package) - [MAL-2026-17392](https://insights.sbomify.com/MAL-2026-17392/): Malicious code in focashi (npm) (malicious package) - [MAL-2026-17391](https://insights.sbomify.com/MAL-2026-17391/): Malicious code in eliteprotech-baileys (npm) (malicious package) - [MAL-2026-17390](https://insights.sbomify.com/MAL-2026-17390/): Malicious code in cantarella-baileys (npm) (malicious package) - [MAL-2026-1739](https://insights.sbomify.com/MAL-2026-1739/): Malicious code in fhgfhgfhfghhffhfgh (npm) (malicious package) - [MAL-2026-17389](https://insights.sbomify.com/MAL-2026-17389/): Malicious code in bungoma (npm) (malicious package) - [MAL-2026-17388](https://insights.sbomify.com/MAL-2026-17388/): Malicious code in baileys-xbats (npm) (malicious package) - [MAL-2026-17387](https://insights.sbomify.com/MAL-2026-17387/): Malicious code in arsya-baileys (npm) (malicious package) - [MAL-2026-17386](https://insights.sbomify.com/MAL-2026-17386/): Malicious code in anuaja (npm) (malicious package) - [MAL-2026-17385](https://insights.sbomify.com/MAL-2026-17385/): Malicious code in albert-anitabaileys (npm) (malicious package) - [MAL-2026-17384](https://insights.sbomify.com/MAL-2026-17384/): Malicious code in @xayz/baileys (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2026/page/109/