# Vulnerabilities published in 2026 - [MAL-2026-17202](https://insights.sbomify.com/MAL-2026-17202/): Malicious code in @consts/links (npm) (malicious package) - [MAL-2026-17201](https://insights.sbomify.com/MAL-2026-17201/): Malicious code in @bb1ptest23/test-paket (npm) (malicious package) - [MAL-2026-17200](https://insights.sbomify.com/MAL-2026-17200/): Malicious code in aseity (PyPI) (malicious package) - [MAL-2026-1720](https://insights.sbomify.com/MAL-2026-1720/): Malicious code in dubbo-web-example (npm) (malicious package) - [MAL-2026-172](https://insights.sbomify.com/MAL-2026-172/): Malicious code in chai-tests-async (npm) (malicious package) - [MAL-2026-17199](https://insights.sbomify.com/MAL-2026-17199/): Malicious code in scrapetools2 (PyPI) (malicious package) - [MAL-2026-17198](https://insights.sbomify.com/MAL-2026-17198/): Malicious code in caracas4check (PyPI) (malicious package) - [MAL-2026-17197](https://insights.sbomify.com/MAL-2026-17197/): Malicious code in coinscan (PyPI) (malicious package) - [MAL-2026-17196](https://insights.sbomify.com/MAL-2026-17196/): Malicious code in donutpromotion (PyPI) (malicious package) - [MAL-2026-17195](https://insights.sbomify.com/MAL-2026-17195/): Malicious code in claudedashbord (PyPI) (malicious package) - [MAL-2026-17194](https://insights.sbomify.com/MAL-2026-17194/): Malicious code in metrics-sdk (PyPI) (malicious package) - [MAL-2026-17193](https://insights.sbomify.com/MAL-2026-17193/): Malicious code in metrio (PyPI) (malicious package) - [MAL-2026-17192](https://insights.sbomify.com/MAL-2026-17192/): Malicious code in donutautosellsrc (PyPI) (malicious package) - [MAL-2026-17191](https://insights.sbomify.com/MAL-2026-17191/): Malicious code in requests-cache-utils (PyPI) (malicious package) - [MAL-2026-17190](https://insights.sbomify.com/MAL-2026-17190/): Malicious code in cma-self-hosted-sandbox-cf (npm) (malicious package) - [MAL-2026-1719](https://insights.sbomify.com/MAL-2026-1719/): Malicious code in dstny (npm) (malicious package) - [MAL-2026-17189](https://insights.sbomify.com/MAL-2026-17189/): Malicious code in chai-as-relay (npm) (malicious package) - [MAL-2026-17188](https://insights.sbomify.com/MAL-2026-17188/): Malicious code in sherpy (PyPI) (malicious package) - [MAL-2026-17187](https://insights.sbomify.com/MAL-2026-17187/): Malicious code in @digift/cli (npm) (malicious package) - [MAL-2026-17186](https://insights.sbomify.com/MAL-2026-17186/): Malicious code in @nubjs/types (npm) (malicious package) - [MAL-2026-17185](https://insights.sbomify.com/MAL-2026-17185/): Malicious code in shoplist-app (npm) (malicious package) - [MAL-2026-17184](https://insights.sbomify.com/MAL-2026-17184/): Malicious code in @airbnb-extended/typescript-config (npm) (malicious package) - [MAL-2026-17183](https://insights.sbomify.com/MAL-2026-17183/): Malicious code in tego-managed-agents-test (PyPI) (malicious package) - [MAL-2026-17182](https://insights.sbomify.com/MAL-2026-17182/): Malicious code in app-sca-info-banking (npm) (malicious package) - [MAL-2026-17181](https://insights.sbomify.com/MAL-2026-17181/): Malicious code in reqparser (PyPI) (malicious package) - [MAL-2026-17180](https://insights.sbomify.com/MAL-2026-17180/): Malicious code in my-private-pkg (PyPI) (malicious package) - [MAL-2026-1718](https://insights.sbomify.com/MAL-2026-1718/): Malicious code in dpc-sign (npm) (malicious package) - [MAL-2026-17179](https://insights.sbomify.com/MAL-2026-17179/): Malicious code in wallet-connect-adapter (npm) (malicious package) - [MAL-2026-17178](https://insights.sbomify.com/MAL-2026-17178/): Malicious code in secure-env3 (npm) (malicious package) - [MAL-2026-17177](https://insights.sbomify.com/MAL-2026-17177/): Malicious code in n8n-nodes-moonlet-utils (npm) (malicious package) - [MAL-2026-17176](https://insights.sbomify.com/MAL-2026-17176/): Malicious code in n8n-nodes-moonlet-helpers (npm) (malicious package) - [MAL-2026-17175](https://insights.sbomify.com/MAL-2026-17175/): Malicious code in n8n-nodes-flowstats (npm) (malicious package) - [MAL-2026-17174](https://insights.sbomify.com/MAL-2026-17174/): Malicious code in chromatitle-js (npm) (malicious package) - [MAL-2026-17173](https://insights.sbomify.com/MAL-2026-17173/): Malicious code in chromatitle (npm) (malicious package) - [MAL-2026-17172](https://insights.sbomify.com/MAL-2026-17172/): Malicious code in better-dotenv3 (npm) (malicious package) - [MAL-2026-17171](https://insights.sbomify.com/MAL-2026-17171/): Malicious code in agency-testts (npm) (malicious package) - [MAL-2026-17170](https://insights.sbomify.com/MAL-2026-17170/): Malicious code in agency-test-exercise (npm) (malicious package) - [MAL-2026-1717](https://insights.sbomify.com/MAL-2026-1717/): Malicious code in dotenvx-int (npm) (malicious package) - [MAL-2026-17169](https://insights.sbomify.com/MAL-2026-17169/): Malicious code in @alphaspace/core (npm) (malicious package) - [MAL-2026-17168](https://insights.sbomify.com/MAL-2026-17168/): Malicious code in vercel-runtime-python (PyPI) (malicious package) - [MAL-2026-17167](https://insights.sbomify.com/MAL-2026-17167/): Malicious code in prosocks (PyPI) (malicious package) - [MAL-2026-17166](https://insights.sbomify.com/MAL-2026-17166/): Malicious code in cache-swipper (npm) (malicious package) - [MAL-2026-17165](https://insights.sbomify.com/MAL-2026-17165/): Malicious code in c2-client (npm) (malicious package) - [MAL-2026-17164](https://insights.sbomify.com/MAL-2026-17164/): Malicious code in building-build (npm) (malicious package) - [MAL-2026-17163](https://insights.sbomify.com/MAL-2026-17163/): Malicious code in analytics-widget (npm) (malicious package) - [MAL-2026-17162](https://insights.sbomify.com/MAL-2026-17162/): Malicious code in simple-date-formatter-new-16 (npm) (malicious package) - [MAL-2026-17161](https://insights.sbomify.com/MAL-2026-17161/): Malicious code in simple-date-formatter-new-15 (npm) (malicious package) - [MAL-2026-17160](https://insights.sbomify.com/MAL-2026-17160/): Malicious code in simple-date-formatter-new-14 (npm) (malicious package) - [MAL-2026-1716](https://insights.sbomify.com/MAL-2026-1716/): Malicious code in dotenv-plugin (npm) (malicious package) - [MAL-2026-17159](https://insights.sbomify.com/MAL-2026-17159/): Malicious code in simple-date-formatter-new-13 (npm) (malicious package) - [MAL-2026-17158](https://insights.sbomify.com/MAL-2026-17158/): Malicious code in simple-date-formatter-new-11 (npm) (malicious package) - [MAL-2026-17157](https://insights.sbomify.com/MAL-2026-17157/): Malicious code in eslint-config-compact-base (npm) (malicious package) - [MAL-2026-17156](https://insights.sbomify.com/MAL-2026-17156/): Malicious code in aliftech-ui (npm) (malicious package) - [MAL-2026-17155](https://insights.sbomify.com/MAL-2026-17155/): Malicious code in @osl-design/react (npm) (malicious package) - [MAL-2026-17154](https://insights.sbomify.com/MAL-2026-17154/): Malicious code in @nf-addons/am-global-header (npm) (malicious package) - [MAL-2026-17153](https://insights.sbomify.com/MAL-2026-17153/): Malicious code in @birbalo/aliftech-ui (npm) (malicious package) - [MAL-2026-17152](https://insights.sbomify.com/MAL-2026-17152/): Malicious code in mega-clean-box (RubyGems) (malicious package) - [MAL-2026-17151](https://insights.sbomify.com/MAL-2026-17151/): Malicious code in burndler (RubyGems) (malicious package) - [MAL-2026-17150](https://insights.sbomify.com/MAL-2026-17150/): Malicious code in burndlef (RubyGems) (malicious package) - [MAL-2026-1715](https://insights.sbomify.com/MAL-2026-1715/): Malicious code in dotenv-nodejs (npm) (malicious package) - [MAL-2026-17149](https://insights.sbomify.com/MAL-2026-17149/): Malicious code in burmdler (RubyGems) (malicious package) - [MAL-2026-17148](https://insights.sbomify.com/MAL-2026-17148/): Malicious code in buosndler (RubyGems) (malicious package) - [MAL-2026-17147](https://insights.sbomify.com/MAL-2026-17147/): Malicious code in buonlder (RubyGems) (malicious package) - [MAL-2026-17146](https://insights.sbomify.com/MAL-2026-17146/): Malicious code in buondler (RubyGems) (malicious package) - [MAL-2026-17145](https://insights.sbomify.com/MAL-2026-17145/): Malicious code in buondlef (RubyGems) (malicious package) - [MAL-2026-17144](https://insights.sbomify.com/MAL-2026-17144/): Malicious code in buomdler (RubyGems) (malicious package) - [MAL-2026-17143](https://insights.sbomify.com/MAL-2026-17143/): Malicious code in buolder (RubyGems) (malicious package) - [MAL-2026-17142](https://insights.sbomify.com/MAL-2026-17142/): Malicious code in buodler (RubyGems) (malicious package) - [MAL-2026-17141](https://insights.sbomify.com/MAL-2026-17141/): Malicious code in buodlef (RubyGems) (malicious package) - [MAL-2026-17140](https://insights.sbomify.com/MAL-2026-17140/): Malicious code in bunxuer (RubyGems) (malicious package) - [MAL-2026-1714](https://insights.sbomify.com/MAL-2026-1714/): Malicious code in dotenv-node-promised (npm) (malicious package) - [MAL-2026-17139](https://insights.sbomify.com/MAL-2026-17139/): Malicious code in bunxlser (RubyGems) (malicious package) - [MAL-2026-17138](https://insights.sbomify.com/MAL-2026-17138/): Malicious code in bunxlre (RubyGems) (malicious package) - [MAL-2026-17137](https://insights.sbomify.com/MAL-2026-17137/): Malicious code in bunxloer (RubyGems) (malicious package) - [MAL-2026-17136](https://insights.sbomify.com/MAL-2026-17136/): Malicious code in bunxlner (RubyGems) (malicious package) - [MAL-2026-17135](https://insights.sbomify.com/MAL-2026-17135/): Malicious code in bunxlir (RubyGems) (malicious package) - [MAL-2026-17134](https://insights.sbomify.com/MAL-2026-17134/): Malicious code in bunxlers (RubyGems) (malicious package) - [MAL-2026-17133](https://insights.sbomify.com/MAL-2026-17133/): Malicious code in bunxlerr (RubyGems) (malicious package) - [MAL-2026-17132](https://insights.sbomify.com/MAL-2026-17132/): Malicious code in bunxlerl (RubyGems) (malicious package) - [MAL-2026-17131](https://insights.sbomify.com/MAL-2026-17131/): Malicious code in bunxler-rb (RubyGems) (malicious package) - [MAL-2026-17130](https://insights.sbomify.com/MAL-2026-17130/): Malicious code in bunxler (RubyGems) (malicious package) - [MAL-2026-1713](https://insights.sbomify.com/MAL-2026-1713/): Malicious code in dotenv-node-cli (npm) (malicious package) - [MAL-2026-17129](https://insights.sbomify.com/MAL-2026-17129/): Malicious code in bunxlenr (RubyGems) (malicious package) - [MAL-2026-17128](https://insights.sbomify.com/MAL-2026-17128/): Malicious code in bunxlef (RubyGems) (malicious package) - [MAL-2026-17127](https://insights.sbomify.com/MAL-2026-17127/): Malicious code in bunuler (RubyGems) (malicious package) - [MAL-2026-17126](https://insights.sbomify.com/MAL-2026-17126/): Malicious code in bunulef (RubyGems) (malicious package) - [MAL-2026-17125](https://insights.sbomify.com/MAL-2026-17125/): Malicious code in bunuder (RubyGems) (malicious package) - [MAL-2026-17124](https://insights.sbomify.com/MAL-2026-17124/): Malicious code in bunsndler (RubyGems) (malicious package) - [MAL-2026-17123](https://insights.sbomify.com/MAL-2026-17123/): Malicious code in bunsler (RubyGems) (malicious package) - [MAL-2026-17122](https://insights.sbomify.com/MAL-2026-17122/): Malicious code in bunslef (RubyGems) (malicious package) - [MAL-2026-17121](https://insights.sbomify.com/MAL-2026-17121/): Malicious code in bunslder (RubyGems) (malicious package) - [MAL-2026-17120](https://insights.sbomify.com/MAL-2026-17120/): Malicious code in bunsdler (RubyGems) (malicious package) - [MAL-2026-1712](https://insights.sbomify.com/MAL-2026-1712/): Malicious code in dotenv-mono-cli (npm) (malicious package) - [MAL-2026-17119](https://insights.sbomify.com/MAL-2026-17119/): Malicious code in bunsdlef (RubyGems) (malicious package) - [MAL-2026-17118](https://insights.sbomify.com/MAL-2026-17118/): Malicious code in bunrler (RubyGems) (malicious package) - [MAL-2026-17117](https://insights.sbomify.com/MAL-2026-17117/): Malicious code in bunrlef (RubyGems) (malicious package) - [MAL-2026-17116](https://insights.sbomify.com/MAL-2026-17116/): Malicious code in bunrlder (RubyGems) (malicious package) - [MAL-2026-17115](https://insights.sbomify.com/MAL-2026-17115/): Malicious code in bunrdler (RubyGems) (malicious package) - [MAL-2026-17114](https://insights.sbomify.com/MAL-2026-17114/): Malicious code in bunrdlef (RubyGems) (malicious package) - [MAL-2026-17113](https://insights.sbomify.com/MAL-2026-17113/): Malicious code in bunpder (RubyGems) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2026/page/112/