# Vulnerabilities published in 2026 - [MAL-2026-17022](https://insights.sbomify.com/MAL-2026-17022/): Malicious code in bunedlef (RubyGems) (malicious package) - [MAL-2026-17021](https://insights.sbomify.com/MAL-2026-17021/): Malicious code in buneder (RubyGems) (malicious package) - [MAL-2026-17020](https://insights.sbomify.com/MAL-2026-17020/): Malicious code in bunduer (RubyGems) (malicious package) - [MAL-2026-1702](https://insights.sbomify.com/MAL-2026-1702/): Malicious code in d4sp (npm) (malicious package) - [MAL-2026-17019](https://insights.sbomify.com/MAL-2026-17019/): Malicious code in bunduef (RubyGems) (malicious package) - [MAL-2026-17018](https://insights.sbomify.com/MAL-2026-17018/): Malicious code in bundsler (RubyGems) (malicious package) - [MAL-2026-17017](https://insights.sbomify.com/MAL-2026-17017/): Malicious code in bundslef (RubyGems) (malicious package) - [MAL-2026-17016](https://insights.sbomify.com/MAL-2026-17016/): Malicious code in bundrler (RubyGems) (malicious package) - [MAL-2026-17015](https://insights.sbomify.com/MAL-2026-17015/): Malicious code in bundrlef (RubyGems) (malicious package) - [MAL-2026-17014](https://insights.sbomify.com/MAL-2026-17014/): Malicious code in bundper (RubyGems) (malicious package) - [MAL-2026-17013](https://insights.sbomify.com/MAL-2026-17013/): Malicious code in bundpef (RubyGems) (malicious package) - [MAL-2026-17012](https://insights.sbomify.com/MAL-2026-17012/): Malicious code in bundoler (RubyGems) (malicious package) - [MAL-2026-17011](https://insights.sbomify.com/MAL-2026-17011/): Malicious code in bundolef (RubyGems) (malicious package) - [MAL-2026-17010](https://insights.sbomify.com/MAL-2026-17010/): Malicious code in bundoer (RubyGems) (malicious package) - [MAL-2026-1701](https://insights.sbomify.com/MAL-2026-1701/): Malicious code in corp-sign-core-js (npm) (malicious package) - [MAL-2026-17009](https://insights.sbomify.com/MAL-2026-17009/): Malicious code in bundoef (RubyGems) (malicious package) - [MAL-2026-17008](https://insights.sbomify.com/MAL-2026-17008/): Malicious code in bundnler (RubyGems) (malicious package) - [MAL-2026-17007](https://insights.sbomify.com/MAL-2026-17007/): Malicious code in bundnlef (RubyGems) (malicious package) - [MAL-2026-17006](https://insights.sbomify.com/MAL-2026-17006/): Malicious code in bundlwr (RubyGems) (malicious package) - [MAL-2026-17005](https://insights.sbomify.com/MAL-2026-17005/): Malicious code in bundlwf (RubyGems) (malicious package) - [MAL-2026-17004](https://insights.sbomify.com/MAL-2026-17004/): Malicious code in bundlur (RubyGems) (malicious package) - [MAL-2026-17003](https://insights.sbomify.com/MAL-2026-17003/): Malicious code in bundluf (RubyGems) (malicious package) - [MAL-2026-17002](https://insights.sbomify.com/MAL-2026-17002/): Malicious code in bundlsr (RubyGems) (malicious package) - [MAL-2026-17001](https://insights.sbomify.com/MAL-2026-17001/): Malicious code in bundlsf (RubyGems) (malicious package) - [MAL-2026-17000](https://insights.sbomify.com/MAL-2026-17000/): Malicious code in bundlser (RubyGems) (malicious package) - [MAL-2026-1700](https://insights.sbomify.com/MAL-2026-1700/): Malicious code in corp-internal-logger (npm) (malicious package) - [MAL-2026-17](https://insights.sbomify.com/MAL-2026-17/): Malicious code in identity-emitter (npm) (malicious package) - [MAL-2026-16999](https://insights.sbomify.com/MAL-2026-16999/): Malicious code in bundlsef (RubyGems) (malicious package) - [MAL-2026-16998](https://insights.sbomify.com/MAL-2026-16998/): Malicious code in bundlrr (RubyGems) (malicious package) - [MAL-2026-16997](https://insights.sbomify.com/MAL-2026-16997/): Malicious code in bundlrf (RubyGems) (malicious package) - [MAL-2026-16996](https://insights.sbomify.com/MAL-2026-16996/): Malicious code in bundlrer (RubyGems) (malicious package) - [MAL-2026-16995](https://insights.sbomify.com/MAL-2026-16995/): Malicious code in bundlref (RubyGems) (malicious package) - [MAL-2026-16994](https://insights.sbomify.com/MAL-2026-16994/): Malicious code in bundlre (RubyGems) (malicious package) - [MAL-2026-16993](https://insights.sbomify.com/MAL-2026-16993/): Malicious code in bundlor (RubyGems) (malicious package) - [MAL-2026-16992](https://insights.sbomify.com/MAL-2026-16992/): Malicious code in bundlof (RubyGems) (malicious package) - [MAL-2026-16991](https://insights.sbomify.com/MAL-2026-16991/): Malicious code in bundloer (RubyGems) (malicious package) - [MAL-2026-16990](https://insights.sbomify.com/MAL-2026-16990/): Malicious code in bundloef (RubyGems) (malicious package) - [MAL-2026-1699](https://insights.sbomify.com/MAL-2026-1699/): Malicious code in constant-values (npm) (malicious package) - [MAL-2026-16989](https://insights.sbomify.com/MAL-2026-16989/): Malicious code in bundlner (RubyGems) (malicious package) - [MAL-2026-16988](https://insights.sbomify.com/MAL-2026-16988/): Malicious code in bundlnef (RubyGems) (malicious package) - [MAL-2026-16987](https://insights.sbomify.com/MAL-2026-16987/): Malicious code in bundller (RubyGems) (malicious package) - [MAL-2026-16986](https://insights.sbomify.com/MAL-2026-16986/): Malicious code in bundllef (RubyGems) (malicious package) - [MAL-2026-16985](https://insights.sbomify.com/MAL-2026-16985/): Malicious code in bundlir (RubyGems) (malicious package) - [MAL-2026-16984](https://insights.sbomify.com/MAL-2026-16984/): Malicious code in bundlif (RubyGems) (malicious package) - [MAL-2026-16983](https://insights.sbomify.com/MAL-2026-16983/): Malicious code in bundlier (RubyGems) (malicious package) - [MAL-2026-16982](https://insights.sbomify.com/MAL-2026-16982/): Malicious code in bundlief (RubyGems) (malicious package) - [MAL-2026-16981](https://insights.sbomify.com/MAL-2026-16981/): Malicious code in bundlfe (RubyGems) (malicious package) - [MAL-2026-16980](https://insights.sbomify.com/MAL-2026-16980/): Malicious code in bundlf (RubyGems) (malicious package) - [MAL-2026-1698](https://insights.sbomify.com/MAL-2026-1698/): Malicious code in connect-me-icon (npm) (malicious package) - [MAL-2026-16979](https://insights.sbomify.com/MAL-2026-16979/): Malicious code in bundlev (RubyGems) (malicious package) - [MAL-2026-16978](https://insights.sbomify.com/MAL-2026-16978/): Malicious code in bundleu (RubyGems) (malicious package) - [MAL-2026-16977](https://insights.sbomify.com/MAL-2026-16977/): Malicious code in bundlet (RubyGems) (malicious package) - [MAL-2026-16976](https://insights.sbomify.com/MAL-2026-16976/): Malicious code in bundlesr (RubyGems) (malicious package) - [MAL-2026-16975](https://insights.sbomify.com/MAL-2026-16975/): Malicious code in bundlesf (RubyGems) (malicious package) - [MAL-2026-16974](https://insights.sbomify.com/MAL-2026-16974/): Malicious code in bundlers (RubyGems) (malicious package) - [MAL-2026-16973](https://insights.sbomify.com/MAL-2026-16973/): Malicious code in bundlerr (RubyGems) (malicious package) - [MAL-2026-16972](https://insights.sbomify.com/MAL-2026-16972/): Malicious code in bundlero (RubyGems) (malicious package) - [MAL-2026-16971](https://insights.sbomify.com/MAL-2026-16971/): Malicious code in bundlern (RubyGems) (malicious package) - [MAL-2026-16970](https://insights.sbomify.com/MAL-2026-16970/): Malicious code in bundlerl (RubyGems) (malicious package) - [MAL-2026-1697](https://insights.sbomify.com/MAL-2026-1697/): Malicious code in conduit-core (npm) (malicious package) - [MAL-2026-16969](https://insights.sbomify.com/MAL-2026-16969/): Malicious code in bundleri (RubyGems) (malicious package) - [MAL-2026-16968](https://insights.sbomify.com/MAL-2026-16968/): Malicious code in bundlerf (RubyGems) (malicious package) - [MAL-2026-16967](https://insights.sbomify.com/MAL-2026-16967/): Malicious code in bundlere (RubyGems) (malicious package) - [MAL-2026-16966](https://insights.sbomify.com/MAL-2026-16966/): Malicious code in bundlera (RubyGems) (malicious package) - [MAL-2026-16965](https://insights.sbomify.com/MAL-2026-16965/): Malicious code in bundler-ruby (RubyGems) (malicious package) - [MAL-2026-16964](https://insights.sbomify.com/MAL-2026-16964/): Malicious code in bundler-rb (RubyGems) (malicious package) - [MAL-2026-16963](https://insights.sbomify.com/MAL-2026-16963/): Malicious code in bundler-lib (RubyGems) (malicious package) - [MAL-2026-16962](https://insights.sbomify.com/MAL-2026-16962/): Malicious code in bundleor (RubyGems) (malicious package) - [MAL-2026-16961](https://insights.sbomify.com/MAL-2026-16961/): Malicious code in bundleof (RubyGems) (malicious package) - [MAL-2026-16960](https://insights.sbomify.com/MAL-2026-16960/): Malicious code in bundleo (RubyGems) (malicious package) - [MAL-2026-1696](https://insights.sbomify.com/MAL-2026-1696/): Malicious code in components-design-system (npm) (malicious package) - [MAL-2026-16959](https://insights.sbomify.com/MAL-2026-16959/): Malicious code in bundlenr (RubyGems) (malicious package) - [MAL-2026-16958](https://insights.sbomify.com/MAL-2026-16958/): Malicious code in bundlenf (RubyGems) (malicious package) - [MAL-2026-16957](https://insights.sbomify.com/MAL-2026-16957/): Malicious code in bundlelr (RubyGems) (malicious package) - [MAL-2026-16956](https://insights.sbomify.com/MAL-2026-16956/): Malicious code in bundlelf (RubyGems) (malicious package) - [MAL-2026-16955](https://insights.sbomify.com/MAL-2026-16955/): Malicious code in bundleir (RubyGems) (malicious package) - [MAL-2026-16954](https://insights.sbomify.com/MAL-2026-16954/): Malicious code in bundleif (RubyGems) (malicious package) - [MAL-2026-16953](https://insights.sbomify.com/MAL-2026-16953/): Malicious code in bundlei (RubyGems) (malicious package) - [MAL-2026-16952](https://insights.sbomify.com/MAL-2026-16952/): Malicious code in bundleg (RubyGems) (malicious package) - [MAL-2026-16951](https://insights.sbomify.com/MAL-2026-16951/): Malicious code in bundlefs (RubyGems) (malicious package) - [MAL-2026-16950](https://insights.sbomify.com/MAL-2026-16950/): Malicious code in bundlefr (RubyGems) (malicious package) - [MAL-2026-1695](https://insights.sbomify.com/MAL-2026-1695/): Malicious code in company-billing-sdk-bugbounty (npm) (malicious package) - [MAL-2026-16949](https://insights.sbomify.com/MAL-2026-16949/): Malicious code in bundlefo (RubyGems) (malicious package) - [MAL-2026-16948](https://insights.sbomify.com/MAL-2026-16948/): Malicious code in bundlefn (RubyGems) (malicious package) - [MAL-2026-16947](https://insights.sbomify.com/MAL-2026-16947/): Malicious code in bundlefl (RubyGems) (malicious package) - [MAL-2026-16946](https://insights.sbomify.com/MAL-2026-16946/): Malicious code in bundlefi (RubyGems) (malicious package) - [MAL-2026-16945](https://insights.sbomify.com/MAL-2026-16945/): Malicious code in bundleff (RubyGems) (malicious package) - [MAL-2026-16944](https://insights.sbomify.com/MAL-2026-16944/): Malicious code in bundlefe (RubyGems) (malicious package) - [MAL-2026-16943](https://insights.sbomify.com/MAL-2026-16943/): Malicious code in bundlefa (RubyGems) (malicious package) - [MAL-2026-16942](https://insights.sbomify.com/MAL-2026-16942/): Malicious code in bundlef-ruby (RubyGems) (malicious package) - [MAL-2026-16941](https://insights.sbomify.com/MAL-2026-16941/): Malicious code in bundlef-rb (RubyGems) (malicious package) - [MAL-2026-16940](https://insights.sbomify.com/MAL-2026-16940/): Malicious code in bundlef-lib (RubyGems) (malicious package) - [MAL-2026-1694](https://insights.sbomify.com/MAL-2026-1694/): Malicious code in collabs-merchants (npm) (malicious package) - [MAL-2026-16939](https://insights.sbomify.com/MAL-2026-16939/): Malicious code in bundlef-gem (RubyGems) (malicious package) - [MAL-2026-16938](https://insights.sbomify.com/MAL-2026-16938/): Malicious code in bundlef (RubyGems) (malicious package) - [MAL-2026-16937](https://insights.sbomify.com/MAL-2026-16937/): Malicious code in bundleer (RubyGems) (malicious package) - [MAL-2026-16936](https://insights.sbomify.com/MAL-2026-16936/): Malicious code in bundleef (RubyGems) (malicious package) - [MAL-2026-16935](https://insights.sbomify.com/MAL-2026-16935/): Malicious code in bundlee (RubyGems) (malicious package) - [MAL-2026-16934](https://insights.sbomify.com/MAL-2026-16934/): Malicious code in bundled (RubyGems) (malicious package) - [MAL-2026-16933](https://insights.sbomify.com/MAL-2026-16933/): Malicious code in bundlec (RubyGems) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2026/page/114/