# Vulnerabilities published in 2026 - [MAL-2026-9893](https://insights.sbomify.com/MAL-2026-9893/): Malicious code in zwpdfg10266 (RubyGems) (malicious package) - [MAL-2026-9892](https://insights.sbomify.com/MAL-2026-9892/): Malicious code in zwmeet017694 (RubyGems) (malicious package) - [MAL-2026-9891](https://insights.sbomify.com/MAL-2026-9891/): Malicious code in zwkopt9 (RubyGems) (malicious package) - [MAL-2026-9890](https://insights.sbomify.com/MAL-2026-9890/): Malicious code in zwkopt8 (RubyGems) (malicious package) - [MAL-2026-989](https://insights.sbomify.com/MAL-2026-989/): Malicious code in vl-ui-alert (npm) (malicious package) - [MAL-2026-9889](https://insights.sbomify.com/MAL-2026-9889/): Malicious code in zwkopt7 (RubyGems) (malicious package) - [MAL-2026-9888](https://insights.sbomify.com/MAL-2026-9888/): Malicious code in zwkopt6 (RubyGems) (malicious package) - [MAL-2026-9887](https://insights.sbomify.com/MAL-2026-9887/): Malicious code in zwkopt5 (RubyGems) (malicious package) - [MAL-2026-9886](https://insights.sbomify.com/MAL-2026-9886/): Malicious code in zwkopt4 (RubyGems) (malicious package) - [MAL-2026-9885](https://insights.sbomify.com/MAL-2026-9885/): Malicious code in zwkopt3 (RubyGems) (malicious package) - [MAL-2026-9884](https://insights.sbomify.com/MAL-2026-9884/): Malicious code in zwkopt20 (RubyGems) (malicious package) - [MAL-2026-9883](https://insights.sbomify.com/MAL-2026-9883/): Malicious code in zwkopt2 (RubyGems) (malicious package) - [MAL-2026-9882](https://insights.sbomify.com/MAL-2026-9882/): Malicious code in zwkopt19 (RubyGems) (malicious package) - [MAL-2026-9881](https://insights.sbomify.com/MAL-2026-9881/): Malicious code in zwkopt18 (RubyGems) (malicious package) - [MAL-2026-9880](https://insights.sbomify.com/MAL-2026-9880/): Malicious code in zwkopt17 (RubyGems) (malicious package) - [MAL-2026-988](https://insights.sbomify.com/MAL-2026-988/): Malicious code in vl-ui-action-group (npm) (malicious package) - [MAL-2026-9879](https://insights.sbomify.com/MAL-2026-9879/): Malicious code in zwkopt16 (RubyGems) (malicious package) - [MAL-2026-9878](https://insights.sbomify.com/MAL-2026-9878/): Malicious code in zwkopt15 (RubyGems) (malicious package) - [MAL-2026-9877](https://insights.sbomify.com/MAL-2026-9877/): Malicious code in zwkopt14 (RubyGems) (malicious package) - [MAL-2026-9876](https://insights.sbomify.com/MAL-2026-9876/): Malicious code in zwkopt13 (RubyGems) (malicious package) - [MAL-2026-9875](https://insights.sbomify.com/MAL-2026-9875/): Malicious code in zwkopt12 (RubyGems) (malicious package) - [MAL-2026-9874](https://insights.sbomify.com/MAL-2026-9874/): Malicious code in zwkopt11 (RubyGems) (malicious package) - [MAL-2026-9873](https://insights.sbomify.com/MAL-2026-9873/): Malicious code in zwkopt10 (RubyGems) (malicious package) - [MAL-2026-9872](https://insights.sbomify.com/MAL-2026-9872/): Malicious code in zwkopt1 (RubyGems) (malicious package) - [MAL-2026-9871](https://insights.sbomify.com/MAL-2026-9871/): Malicious code in zwkopt0 (RubyGems) (malicious package) - [MAL-2026-9870](https://insights.sbomify.com/MAL-2026-9870/): Malicious code in zwknum7 (RubyGems) (malicious package) - [MAL-2026-987](https://insights.sbomify.com/MAL-2026-987/): Malicious code in vl-ui-accessibility (npm) (malicious package) - [MAL-2026-9869](https://insights.sbomify.com/MAL-2026-9869/): Malicious code in zwknum6 (RubyGems) (malicious package) - [MAL-2026-9868](https://insights.sbomify.com/MAL-2026-9868/): Malicious code in zwknum5 (RubyGems) (malicious package) - [MAL-2026-9867](https://insights.sbomify.com/MAL-2026-9867/): Malicious code in zwknum4 (RubyGems) (malicious package) - [MAL-2026-9866](https://insights.sbomify.com/MAL-2026-9866/): Malicious code in zwknum3 (RubyGems) (malicious package) - [MAL-2026-9865](https://insights.sbomify.com/MAL-2026-9865/): Malicious code in zwknum2 (RubyGems) (malicious package) - [MAL-2026-9864](https://insights.sbomify.com/MAL-2026-9864/): Malicious code in zwknum1 (RubyGems) (malicious package) - [MAL-2026-9863](https://insights.sbomify.com/MAL-2026-9863/): Malicious code in zwknum0 (RubyGems) (malicious package) - [MAL-2026-9862](https://insights.sbomify.com/MAL-2026-9862/): Malicious code in zwkact8 (RubyGems) (malicious package) - [MAL-2026-9861](https://insights.sbomify.com/MAL-2026-9861/): Malicious code in zwkact7 (RubyGems) (malicious package) - [MAL-2026-9860](https://insights.sbomify.com/MAL-2026-9860/): Malicious code in zwkact6 (RubyGems) (malicious package) - [MAL-2026-986](https://insights.sbomify.com/MAL-2026-986/): Malicious code in en-thrift-internal (npm) (malicious package) - [MAL-2026-9859](https://insights.sbomify.com/MAL-2026-9859/): Malicious code in zwkact5 (RubyGems) (malicious package) - [MAL-2026-9858](https://insights.sbomify.com/MAL-2026-9858/): Malicious code in zwkact4 (RubyGems) (malicious package) - [MAL-2026-9857](https://insights.sbomify.com/MAL-2026-9857/): Malicious code in zwkact3 (RubyGems) (malicious package) - [MAL-2026-9856](https://insights.sbomify.com/MAL-2026-9856/): Malicious code in zwkact2 (RubyGems) (malicious package) - [MAL-2026-9855](https://insights.sbomify.com/MAL-2026-9855/): Malicious code in zwkact1 (RubyGems) (malicious package) - [MAL-2026-9854](https://insights.sbomify.com/MAL-2026-9854/): Malicious code in zwday2711778553470 (RubyGems) (malicious package) - [MAL-2026-9853](https://insights.sbomify.com/MAL-2026-9853/): Malicious code in zwday26 (RubyGems) (malicious package) - [MAL-2026-9852](https://insights.sbomify.com/MAL-2026-9852/): Malicious code in zwcalx9 (RubyGems) (malicious package) - [MAL-2026-9851](https://insights.sbomify.com/MAL-2026-9851/): Malicious code in zwcalx8 (RubyGems) (malicious package) - [MAL-2026-9850](https://insights.sbomify.com/MAL-2026-9850/): Malicious code in zwcalx7 (RubyGems) (malicious package) - [MAL-2026-985](https://insights.sbomify.com/MAL-2026-985/): Malicious code in conduit-utils (npm) (malicious package) - [MAL-2026-9849](https://insights.sbomify.com/MAL-2026-9849/): Malicious code in zwcalx6 (RubyGems) (malicious package) - [MAL-2026-9848](https://insights.sbomify.com/MAL-2026-9848/): Malicious code in zwcalx5 (RubyGems) (malicious package) - [MAL-2026-9847](https://insights.sbomify.com/MAL-2026-9847/): Malicious code in zwcalx4 (RubyGems) (malicious package) - [MAL-2026-9846](https://insights.sbomify.com/MAL-2026-9846/): Malicious code in zwcalx3 (RubyGems) (malicious package) - [MAL-2026-9845](https://insights.sbomify.com/MAL-2026-9845/): Malicious code in zwcalx2 (RubyGems) (malicious package) - [MAL-2026-9844](https://insights.sbomify.com/MAL-2026-9844/): Malicious code in zwcalx13 (RubyGems) (malicious package) - [MAL-2026-9843](https://insights.sbomify.com/MAL-2026-9843/): Malicious code in zwcalx12 (RubyGems) (malicious package) - [MAL-2026-9842](https://insights.sbomify.com/MAL-2026-9842/): Malicious code in zwcalx11 (RubyGems) (malicious package) - [MAL-2026-9841](https://insights.sbomify.com/MAL-2026-9841/): Malicious code in zwcalx10 (RubyGems) (malicious package) - [MAL-2026-9840](https://insights.sbomify.com/MAL-2026-9840/): Malicious code in zwcalx1 (RubyGems) (malicious package) - [MAL-2026-984](https://insights.sbomify.com/MAL-2026-984/): Malicious code in myasicapi (PyPI) (malicious package) - [MAL-2026-9839](https://insights.sbomify.com/MAL-2026-9839/): Malicious code in zwcalx0 (RubyGems) (malicious package) - [MAL-2026-9838](https://insights.sbomify.com/MAL-2026-9838/): Malicious code in zwan_cal_jana (RubyGems) (malicious package) - [MAL-2026-9837](https://insights.sbomify.com/MAL-2026-9837/): Malicious code in zwan_cal_jan1 (RubyGems) (malicious package) - [MAL-2026-9836](https://insights.sbomify.com/MAL-2026-9836/): Malicious code in zwan_cal_https (RubyGems) (malicious package) - [MAL-2026-9835](https://insights.sbomify.com/MAL-2026-9835/): Malicious code in zwagweek (RubyGems) (malicious package) - [MAL-2026-9834](https://insights.sbomify.com/MAL-2026-9834/): Malicious code in zwagq (RubyGems) (malicious package) - [MAL-2026-9833](https://insights.sbomify.com/MAL-2026-9833/): Malicious code in zwagfrag (RubyGems) (malicious package) - [MAL-2026-9832](https://insights.sbomify.com/MAL-2026-9832/): Malicious code in zwagbdr (RubyGems) (malicious package) - [MAL-2026-9831](https://insights.sbomify.com/MAL-2026-9831/): Malicious code in zwagback2 (RubyGems) (malicious package) - [MAL-2026-9830](https://insights.sbomify.com/MAL-2026-9830/): Malicious code in zwagback (RubyGems) (malicious package) - [MAL-2026-983](https://insights.sbomify.com/MAL-2026-983/): Malicious code in tensorflow-opt (PyPI) (malicious package) - [MAL-2026-9829](https://insights.sbomify.com/MAL-2026-9829/): Malicious code in zwag26 (RubyGems) (malicious package) - [MAL-2026-9828](https://insights.sbomify.com/MAL-2026-9828/): Malicious code in zw_nobdr_week3 (RubyGems) (malicious package) - [MAL-2026-9827](https://insights.sbomify.com/MAL-2026-9827/): Malicious code in zw_nobdr_week2 (RubyGems) (malicious package) - [MAL-2026-9826](https://insights.sbomify.com/MAL-2026-9826/): Malicious code in zw_nobdr_week (RubyGems) (malicious package) - [MAL-2026-9825](https://insights.sbomify.com/MAL-2026-9825/): Malicious code in zw_nobdr_events2 (RubyGems) (malicious package) - [MAL-2026-9824](https://insights.sbomify.com/MAL-2026-9824/): Malicious code in zw_nobdr_events (RubyGems) (malicious package) - [MAL-2026-9823](https://insights.sbomify.com/MAL-2026-9823/): Malicious code in zw_nobdr_day3 (RubyGems) (malicious package) - [MAL-2026-9822](https://insights.sbomify.com/MAL-2026-9822/): Malicious code in zw_nobdr_day2 (RubyGems) (malicious package) - [MAL-2026-9821](https://insights.sbomify.com/MAL-2026-9821/): Malicious code in zw_nobdr_day (RubyGems) (malicious package) - [MAL-2026-9820](https://insights.sbomify.com/MAL-2026-9820/): Malicious code in zw_downloadops (RubyGems) (malicious package) - [MAL-2026-982](https://insights.sbomify.com/MAL-2026-982/): Malicious code in trunket-dev-driver (PyPI) (malicious package) - [MAL-2026-9819](https://insights.sbomify.com/MAL-2026-9819/): Malicious code in zw_dl_ics2 (RubyGems) (malicious package) - [MAL-2026-9818](https://insights.sbomify.com/MAL-2026-9818/): Malicious code in zw_dl_ics (RubyGems) (malicious package) - [MAL-2026-9817](https://insights.sbomify.com/MAL-2026-9817/): Malicious code in zw_cal_more (RubyGems) (malicious package) - [MAL-2026-9816](https://insights.sbomify.com/MAL-2026-9816/): Malicious code in zvsvnxolbmd1sc9 (RubyGems) (malicious package) - [MAL-2026-9815](https://insights.sbomify.com/MAL-2026-9815/): Malicious code in zvgit7iym3nqhe5 (RubyGems) (malicious package) - [MAL-2026-9814](https://insights.sbomify.com/MAL-2026-9814/): Malicious code in zvfossilc41xzth215 (RubyGems) (malicious package) - [MAL-2026-9813](https://insights.sbomify.com/MAL-2026-9813/): Malicious code in zvbzr0rygmzwp45 (RubyGems) (malicious package) - [MAL-2026-9812](https://insights.sbomify.com/MAL-2026-9812/): Malicious code in ztrivial001 (RubyGems) (malicious package) - [MAL-2026-9811](https://insights.sbomify.com/MAL-2026-9811/): Malicious code in ztestmeta001 (RubyGems) (malicious package) - [MAL-2026-9810](https://insights.sbomify.com/MAL-2026-9810/): Malicious code in ztestlamb01 (RubyGems) (malicious package) - [MAL-2026-981](https://insights.sbomify.com/MAL-2026-981/): Malicious code in dt-fe-t2d-marketplace (npm) (malicious package) - [MAL-2026-9809](https://insights.sbomify.com/MAL-2026-9809/): Malicious code in ztargetpdfs1 (RubyGems) (malicious package) - [MAL-2026-9808](https://insights.sbomify.com/MAL-2026-9808/): Malicious code in ztargetpdfg1 (RubyGems) (malicious package) - [MAL-2026-9807](https://insights.sbomify.com/MAL-2026-9807/): Malicious code in ztargetpdfb1 (RubyGems) (malicious package) - [MAL-2026-9806](https://insights.sbomify.com/MAL-2026-9806/): Malicious code in ztargetpdf1 (RubyGems) (malicious package) - [MAL-2026-9805](https://insights.sbomify.com/MAL-2026-9805/): Malicious code in zswsn1 (RubyGems) (malicious package) - [MAL-2026-9804](https://insights.sbomify.com/MAL-2026-9804/): Malicious code in zswmin111123 (RubyGems) (malicious package) - [MAL-2026-9803](https://insights.sbomify.com/MAL-2026-9803/): Malicious code in zswmeetxml28208 (RubyGems) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2026/page/11/