# Vulnerabilities published in 2026 - [MAL-2026-17383](https://insights.sbomify.com/MAL-2026-17383/): Malicious code in @xatancchii/velycxbail (npm) (malicious package) - [MAL-2026-17382](https://insights.sbomify.com/MAL-2026-17382/): Malicious code in @wenzyx1/bails (npm) (malicious package) - [MAL-2026-17381](https://insights.sbomify.com/MAL-2026-17381/): Malicious code in @wanzlonely/bails4u (npm) (malicious package) - [MAL-2026-17380](https://insights.sbomify.com/MAL-2026-17380/): Malicious code in @teamolduser/baileys (npm) (malicious package) - [MAL-2026-1738](https://insights.sbomify.com/MAL-2026-1738/): Malicious code in fe-prop-types (npm) (malicious package) - [MAL-2026-17379](https://insights.sbomify.com/MAL-2026-17379/): Malicious code in @sakataoffc/baileys (npm) (malicious package) - [MAL-2026-17378](https://insights.sbomify.com/MAL-2026-17378/): Malicious code in @sairidev/baileys-new (npm) (malicious package) - [MAL-2026-17377](https://insights.sbomify.com/MAL-2026-17377/): Malicious code in @saazkira/baileys (npm) (malicious package) - [MAL-2026-17376](https://insights.sbomify.com/MAL-2026-17376/): Malicious code in @revizahoshii/hoshino (npm) (malicious package) - [MAL-2026-17375](https://insights.sbomify.com/MAL-2026-17375/): Malicious code in @revizahoshii/baileys (npm) (malicious package) - [MAL-2026-17374](https://insights.sbomify.com/MAL-2026-17374/): Malicious code in @rennnpm/baileys (npm) (malicious package) - [MAL-2026-17373](https://insights.sbomify.com/MAL-2026-17373/): Malicious code in @queenanya/baileys (npm) (malicious package) - [MAL-2026-17372](https://insights.sbomify.com/MAL-2026-17372/): Malicious code in @ostyado/baileys (npm) (malicious package) - [MAL-2026-17371](https://insights.sbomify.com/MAL-2026-17371/): Malicious code in @nyzzpediaa/baileys-new (npm) (malicious package) - [MAL-2026-17370](https://insights.sbomify.com/MAL-2026-17370/): Malicious code in @nyzzpedia/baileys-new (npm) (malicious package) - [MAL-2026-1737](https://insights.sbomify.com/MAL-2026-1737/): Malicious code in fe-lib-theme (npm) (malicious package) - [MAL-2026-17369](https://insights.sbomify.com/MAL-2026-17369/): Malicious code in @noxleyss/baileys (npm) (malicious package) - [MAL-2026-17368](https://insights.sbomify.com/MAL-2026-17368/): Malicious code in @mivesensei/baileys (npm) (malicious package) - [MAL-2026-17367](https://insights.sbomify.com/MAL-2026-17367/): Malicious code in @mikudeveloper/grace (npm) (malicious package) - [MAL-2026-17366](https://insights.sbomify.com/MAL-2026-17366/): Malicious code in @levvicode/baileys (npm) (malicious package) - [MAL-2026-17365](https://insights.sbomify.com/MAL-2026-17365/): Malicious code in @lendxntaa/baileys (npm) (malicious package) - [MAL-2026-17364](https://insights.sbomify.com/MAL-2026-17364/): Malicious code in @lendkzn/xntaabail (npm) (malicious package) - [MAL-2026-17363](https://insights.sbomify.com/MAL-2026-17363/): Malicious code in @kxa/xbails (npm) (malicious package) - [MAL-2026-17362](https://insights.sbomify.com/MAL-2026-17362/): Malicious code in @kelvdra/baileys (npm) (malicious package) - [MAL-2026-17361](https://insights.sbomify.com/MAL-2026-17361/): Malicious code in @kanaraa/baileys (npm) (malicious package) - [MAL-2026-17360](https://insights.sbomify.com/MAL-2026-17360/): Malicious code in @jojoxyz/condemnedforce-baileys (npm) (malicious package) - [MAL-2026-1736](https://insights.sbomify.com/MAL-2026-1736/): Malicious code in fe-lib-singleton (npm) (malicious package) - [MAL-2026-17359](https://insights.sbomify.com/MAL-2026-17359/): Malicious code in @japofc/baileys (npm) (malicious package) - [MAL-2026-17358](https://insights.sbomify.com/MAL-2026-17358/): Malicious code in @ikyyjee/ikyysingle (npm) (malicious package) - [MAL-2026-17357](https://insights.sbomify.com/MAL-2026-17357/): Malicious code in @ikyyjee/ikyysinggle (npm) (malicious package) - [MAL-2026-17356](https://insights.sbomify.com/MAL-2026-17356/): Malicious code in @ikyyjee/ikkysingle (npm) (malicious package) - [MAL-2026-17355](https://insights.sbomify.com/MAL-2026-17355/): Malicious code in @ikanngeming/ikannbail (npm) (malicious package) - [MAL-2026-17354](https://insights.sbomify.com/MAL-2026-17354/): Malicious code in @hanzofc/baileys (npm) (malicious package) - [MAL-2026-17353](https://insights.sbomify.com/MAL-2026-17353/): Malicious code in @fhkryxv/baileys-new (npm) (malicious package) - [MAL-2026-17352](https://insights.sbomify.com/MAL-2026-17352/): Malicious code in @fhkryxv/baileys (npm) (malicious package) - [MAL-2026-17351](https://insights.sbomify.com/MAL-2026-17351/): Malicious code in @bottino/baileys (npm) (malicious package) - [MAL-2026-17350](https://insights.sbomify.com/MAL-2026-17350/): Malicious code in @bellaxchuu/xtrxbails (npm) (malicious package) - [MAL-2026-1735](https://insights.sbomify.com/MAL-2026-1735/): Malicious code in fe-lib-sequences (npm) (malicious package) - [MAL-2026-17349](https://insights.sbomify.com/MAL-2026-17349/): Malicious code in @bellaxchuu/velvetry (npm) (malicious package) - [MAL-2026-17348](https://insights.sbomify.com/MAL-2026-17348/): Malicious code in @bellaxchuu/teambails (npm) (malicious package) - [MAL-2026-17347](https://insights.sbomify.com/MAL-2026-17347/): Malicious code in @bellaxchuu/skyblue (npm) (malicious package) - [MAL-2026-17346](https://insights.sbomify.com/MAL-2026-17346/): Malicious code in @bellaxchuu/privatebails (npm) (malicious package) - [MAL-2026-17345](https://insights.sbomify.com/MAL-2026-17345/): Malicious code in @bellaxchuu/flowblue (npm) (malicious package) - [MAL-2026-17344](https://insights.sbomify.com/MAL-2026-17344/): Malicious code in @bellaxchuu/familyxtrx (npm) (malicious package) - [MAL-2026-17343](https://insights.sbomify.com/MAL-2026-17343/): Malicious code in @bellaxchuu/crystalred (npm) (malicious package) - [MAL-2026-17342](https://insights.sbomify.com/MAL-2026-17342/): Malicious code in @bellaxchuu/belbails (npm) (malicious package) - [MAL-2026-17341](https://insights.sbomify.com/MAL-2026-17341/): Malicious code in @badzz88/baileys (npm) (malicious package) - [MAL-2026-17340](https://insights.sbomify.com/MAL-2026-17340/): Malicious code in @astracode/byles-new (npm) (malicious package) - [MAL-2026-1734](https://insights.sbomify.com/MAL-2026-1734/): Malicious code in fdir3 (npm) (malicious package) - [MAL-2026-17339](https://insights.sbomify.com/MAL-2026-17339/): Malicious code in reactjs-risk (npm) (malicious package) - [MAL-2026-17338](https://insights.sbomify.com/MAL-2026-17338/): Malicious code in link-status-page (npm) (malicious package) - [MAL-2026-17337](https://insights.sbomify.com/MAL-2026-17337/): Malicious code in link-age-great (npm) (malicious package) - [MAL-2026-17336](https://insights.sbomify.com/MAL-2026-17336/): Malicious code in @redman89405/my-module (npm) (malicious package) - [MAL-2026-17335](https://insights.sbomify.com/MAL-2026-17335/): Malicious code in @firelordzuka/pulse-poc (npm) (malicious package) - [MAL-2026-17334](https://insights.sbomify.com/MAL-2026-17334/): Malicious code in @cat-gen/material (npm) (malicious package) - [MAL-2026-17333](https://insights.sbomify.com/MAL-2026-17333/): Malicious code in @cat-gen/materia (npm) (malicious package) - [MAL-2026-17332](https://insights.sbomify.com/MAL-2026-17332/): Malicious code in runhelper (npm) (malicious package) - [MAL-2026-17331](https://insights.sbomify.com/MAL-2026-17331/): Malicious code in iban-validator-js (npm) (malicious package) - [MAL-2026-17330](https://insights.sbomify.com/MAL-2026-17330/): Malicious code in imgbundle (npm) (malicious package) - [MAL-2026-1733](https://insights.sbomify.com/MAL-2026-1733/): Malicious code in express-security-suite-2024 (npm) (malicious package) - [MAL-2026-17329](https://insights.sbomify.com/MAL-2026-17329/): Malicious code in focaleys (npm) (malicious package) - [MAL-2026-17328](https://insights.sbomify.com/MAL-2026-17328/): Malicious code in fca-raihan (npm) (malicious package) - [MAL-2026-17327](https://insights.sbomify.com/MAL-2026-17327/): Malicious code in exiouss (npm) (malicious package) - [MAL-2026-17326](https://insights.sbomify.com/MAL-2026-17326/): Malicious code in @zeronexcode/baileys (npm) (malicious package) - [MAL-2026-17325](https://insights.sbomify.com/MAL-2026-17325/): Malicious code in cleanup-string (PyPI) (malicious package) - [MAL-2026-17324](https://insights.sbomify.com/MAL-2026-17324/): Malicious code in dotenv-preflight (npm) (malicious package) - [MAL-2026-17323](https://insights.sbomify.com/MAL-2026-17323/): Malicious code in cortana-md-engine (npm) (malicious package) - [MAL-2026-17322](https://insights.sbomify.com/MAL-2026-17322/): Malicious code in contoso-login-sim-loader (npm) (malicious package) - [MAL-2026-17321](https://insights.sbomify.com/MAL-2026-17321/): Malicious code in chaienv (npm) (malicious package) - [MAL-2026-17320](https://insights.sbomify.com/MAL-2026-17320/): Malicious code in cdn-img-fetch (npm) (malicious package) - [MAL-2026-1732](https://insights.sbomify.com/MAL-2026-1732/): Malicious code in express-ranges (npm) (malicious package) - [MAL-2026-17319](https://insights.sbomify.com/MAL-2026-17319/): Malicious code in bfox-build-utils (PyPI) (malicious package) - [MAL-2026-17318](https://insights.sbomify.com/MAL-2026-17318/): Malicious code in developmentstelemetry (npm) (malicious package) - [MAL-2026-17317](https://insights.sbomify.com/MAL-2026-17317/): Malicious code in booking-tasks (npm) (malicious package) - [MAL-2026-17316](https://insights.sbomify.com/MAL-2026-17316/): Malicious code in booking-eligibility (npm) (malicious package) - [MAL-2026-17315](https://insights.sbomify.com/MAL-2026-17315/): Malicious code in godsplan (npm) (malicious package) - [MAL-2026-17314](https://insights.sbomify.com/MAL-2026-17314/): Malicious code in test-supply-npm-lib-4 (npm) (malicious package) - [MAL-2026-17313](https://insights.sbomify.com/MAL-2026-17313/): Malicious code in pixsvg (npm) (malicious package) - [MAL-2026-17312](https://insights.sbomify.com/MAL-2026-17312/): Malicious code in json-bigint-rs (npm) (malicious package) - [MAL-2026-17311](https://insights.sbomify.com/MAL-2026-17311/): Malicious code in itsmeeaizat-bailey (npm) (malicious package) - [MAL-2026-17310](https://insights.sbomify.com/MAL-2026-17310/): Malicious code in tailwind-forms-kit (npm) (malicious package) - [MAL-2026-1731](https://insights.sbomify.com/MAL-2026-1731/): Malicious code in express-http-validator (npm) (malicious package) - [MAL-2026-17309](https://insights.sbomify.com/MAL-2026-17309/): Malicious code in stestenv (npm) (malicious package) - [MAL-2026-17308](https://insights.sbomify.com/MAL-2026-17308/): Malicious code in mfahelper (npm) (malicious package) - [MAL-2026-17307](https://insights.sbomify.com/MAL-2026-17307/): Malicious code in fabric-mod-utils (npm) (malicious package) - [MAL-2026-17306](https://insights.sbomify.com/MAL-2026-17306/): Malicious code in fabric-loader-core (npm) (malicious package) - [MAL-2026-17305](https://insights.sbomify.com/MAL-2026-17305/): Malicious code in esm-dotenv (npm) (malicious package) - [MAL-2026-17304](https://insights.sbomify.com/MAL-2026-17304/): Malicious code in dotenv-precheck (npm) (malicious package) - [MAL-2026-17303](https://insights.sbomify.com/MAL-2026-17303/): Malicious code in web-vitals-polyfill-core-v1 (npm) (malicious package) - [MAL-2026-17302](https://insights.sbomify.com/MAL-2026-17302/): Malicious code in solidity-lock (npm) (malicious package) - [MAL-2026-17301](https://insights.sbomify.com/MAL-2026-17301/): Malicious code in fs-commons (npm) (malicious package) - [MAL-2026-17300](https://insights.sbomify.com/MAL-2026-17300/): Malicious code in common-fs (npm) (malicious package) - [MAL-2026-1730](https://insights.sbomify.com/MAL-2026-1730/): Malicious code in express-configers (npm) (malicious package) - [MAL-2026-173](https://insights.sbomify.com/MAL-2026-173/): Malicious code in cng-web-lib (npm) (malicious package) - [MAL-2026-17299](https://insights.sbomify.com/MAL-2026-17299/): Malicious code in testosu8887 (npm) (malicious package) - [MAL-2026-17298](https://insights.sbomify.com/MAL-2026-17298/): Malicious code in testosu888 (npm) (malicious package) - [MAL-2026-17297](https://insights.sbomify.com/MAL-2026-17297/): Malicious code in test-agency-assignment-02 (npm) (malicious package) - [MAL-2026-17296](https://insights.sbomify.com/MAL-2026-17296/): Malicious code in test-agency-assignment-01 (npm) (malicious package) - [MAL-2026-17295](https://insights.sbomify.com/MAL-2026-17295/): Malicious code in test-agency-assign (npm) (malicious package) - [MAL-2026-17294](https://insights.sbomify.com/MAL-2026-17294/): Malicious code in react-nodejs (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2026/page/110/