# Vulnerabilities published in 2026 - [MAL-2026-16932](https://insights.sbomify.com/MAL-2026-16932/): Malicious code in bundlear (RubyGems) (malicious package) - [MAL-2026-16931](https://insights.sbomify.com/MAL-2026-16931/): Malicious code in bundleaf (RubyGems) (malicious package) - [MAL-2026-16930](https://insights.sbomify.com/MAL-2026-16930/): Malicious code in bundlea (RubyGems) (malicious package) - [MAL-2026-1693](https://insights.sbomify.com/MAL-2026-1693/): Malicious code in coinbase-desktop-sdk (npm) (malicious package) - [MAL-2026-16929](https://insights.sbomify.com/MAL-2026-16929/): Malicious code in bundldr (RubyGems) (malicious package) - [MAL-2026-16928](https://insights.sbomify.com/MAL-2026-16928/): Malicious code in bundldf (RubyGems) (malicious package) - [MAL-2026-16927](https://insights.sbomify.com/MAL-2026-16927/): Malicious code in bundlar (RubyGems) (malicious package) - [MAL-2026-16926](https://insights.sbomify.com/MAL-2026-16926/): Malicious code in bundlaf (RubyGems) (malicious package) - [MAL-2026-16925](https://insights.sbomify.com/MAL-2026-16925/): Malicious code in bundlaer (RubyGems) (malicious package) - [MAL-2026-16924](https://insights.sbomify.com/MAL-2026-16924/): Malicious code in bundlaef (RubyGems) (malicious package) - [MAL-2026-16923](https://insights.sbomify.com/MAL-2026-16923/): Malicious code in bundker (RubyGems) (malicious package) - [MAL-2026-16922](https://insights.sbomify.com/MAL-2026-16922/): Malicious code in bundkef (RubyGems) (malicious package) - [MAL-2026-16921](https://insights.sbomify.com/MAL-2026-16921/): Malicious code in bundiler (RubyGems) (malicious package) - [MAL-2026-16920](https://insights.sbomify.com/MAL-2026-16920/): Malicious code in bundilef (RubyGems) (malicious package) - [MAL-2026-1692](https://insights.sbomify.com/MAL-2026-1692/): Malicious code in circuit-playground (npm) (malicious package) - [MAL-2026-16919](https://insights.sbomify.com/MAL-2026-16919/): Malicious code in bundier (RubyGems) (malicious package) - [MAL-2026-16918](https://insights.sbomify.com/MAL-2026-16918/): Malicious code in bundief (RubyGems) (malicious package) - [MAL-2026-16917](https://insights.sbomify.com/MAL-2026-16917/): Malicious code in bunder (RubyGems) (malicious package) - [MAL-2026-16916](https://insights.sbomify.com/MAL-2026-16916/): Malicious code in bundelr (RubyGems) (malicious package) - [MAL-2026-16915](https://insights.sbomify.com/MAL-2026-16915/): Malicious code in bundelf (RubyGems) (malicious package) - [MAL-2026-16914](https://insights.sbomify.com/MAL-2026-16914/): Malicious code in bundeler (RubyGems) (malicious package) - [MAL-2026-16913](https://insights.sbomify.com/MAL-2026-16913/): Malicious code in bundelef (RubyGems) (malicious package) - [MAL-2026-16912](https://insights.sbomify.com/MAL-2026-16912/): Malicious code in bundef (RubyGems) (malicious package) - [MAL-2026-16911](https://insights.sbomify.com/MAL-2026-16911/): Malicious code in bundeer (RubyGems) (malicious package) - [MAL-2026-16910](https://insights.sbomify.com/MAL-2026-16910/): Malicious code in bundeef (RubyGems) (malicious package) - [MAL-2026-1691](https://insights.sbomify.com/MAL-2026-1691/): Malicious code in chromecast-receiver (npm) (malicious package) - [MAL-2026-16909](https://insights.sbomify.com/MAL-2026-16909/): Malicious code in bunddler (RubyGems) (malicious package) - [MAL-2026-16908](https://insights.sbomify.com/MAL-2026-16908/): Malicious code in bunddlef (RubyGems) (malicious package) - [MAL-2026-16907](https://insights.sbomify.com/MAL-2026-16907/): Malicious code in bundaler (RubyGems) (malicious package) - [MAL-2026-16906](https://insights.sbomify.com/MAL-2026-16906/): Malicious code in bundalef (RubyGems) (malicious package) - [MAL-2026-16905](https://insights.sbomify.com/MAL-2026-16905/): Malicious code in bundaer (RubyGems) (malicious package) - [MAL-2026-16904](https://insights.sbomify.com/MAL-2026-16904/): Malicious code in bundaef (RubyGems) (malicious package) - [MAL-2026-16903](https://insights.sbomify.com/MAL-2026-16903/): Malicious code in buncler (RubyGems) (malicious package) - [MAL-2026-16902](https://insights.sbomify.com/MAL-2026-16902/): Malicious code in bunclef (RubyGems) (malicious package) - [MAL-2026-16901](https://insights.sbomify.com/MAL-2026-16901/): Malicious code in bunaler (RubyGems) (malicious package) - [MAL-2026-16900](https://insights.sbomify.com/MAL-2026-16900/): Malicious code in bunalef (RubyGems) (malicious package) - [MAL-2026-1690](https://insights.sbomify.com/MAL-2026-1690/): Malicious code in chain-promised-cli (npm) (malicious package) - [MAL-2026-16899](https://insights.sbomify.com/MAL-2026-16899/): Malicious code in bunalder (RubyGems) (malicious package) - [MAL-2026-16898](https://insights.sbomify.com/MAL-2026-16898/): Malicious code in bunadler (RubyGems) (malicious package) - [MAL-2026-16897](https://insights.sbomify.com/MAL-2026-16897/): Malicious code in bunadlef (RubyGems) (malicious package) - [MAL-2026-16896](https://insights.sbomify.com/MAL-2026-16896/): Malicious code in bunader (RubyGems) (malicious package) - [MAL-2026-16895](https://insights.sbomify.com/MAL-2026-16895/): Malicious code in bumxler (RubyGems) (malicious package) - [MAL-2026-16894](https://insights.sbomify.com/MAL-2026-16894/): Malicious code in bumuler (RubyGems) (malicious package) - [MAL-2026-16893](https://insights.sbomify.com/MAL-2026-16893/): Malicious code in bumsler (RubyGems) (malicious package) - [MAL-2026-16892](https://insights.sbomify.com/MAL-2026-16892/): Malicious code in bumsdler (RubyGems) (malicious package) - [MAL-2026-16891](https://insights.sbomify.com/MAL-2026-16891/): Malicious code in bumrler (RubyGems) (malicious package) - [MAL-2026-16890](https://insights.sbomify.com/MAL-2026-16890/): Malicious code in bumrdler (RubyGems) (malicious package) - [MAL-2026-1689](https://insights.sbomify.com/MAL-2026-1689/): Malicious code in chain-promised-async (npm) (malicious package) - [MAL-2026-16889](https://insights.sbomify.com/MAL-2026-16889/): Malicious code in bumoler (RubyGems) (malicious package) - [MAL-2026-16888](https://insights.sbomify.com/MAL-2026-16888/): Malicious code in bumodler (RubyGems) (malicious package) - [MAL-2026-16887](https://insights.sbomify.com/MAL-2026-16887/): Malicious code in bumndler (RubyGems) (malicious package) - [MAL-2026-16886](https://insights.sbomify.com/MAL-2026-16886/): Malicious code in bummdler (RubyGems) (malicious package) - [MAL-2026-16885](https://insights.sbomify.com/MAL-2026-16885/): Malicious code in bumler (RubyGems) (malicious package) - [MAL-2026-16884](https://insights.sbomify.com/MAL-2026-16884/): Malicious code in bumldler (RubyGems) (malicious package) - [MAL-2026-16883](https://insights.sbomify.com/MAL-2026-16883/): Malicious code in bumlder (RubyGems) (malicious package) - [MAL-2026-16882](https://insights.sbomify.com/MAL-2026-16882/): Malicious code in bumiler (RubyGems) (malicious package) - [MAL-2026-16881](https://insights.sbomify.com/MAL-2026-16881/): Malicious code in bumidler (RubyGems) (malicious package) - [MAL-2026-16880](https://insights.sbomify.com/MAL-2026-16880/): Malicious code in bumfler (RubyGems) (malicious package) - [MAL-2026-1688](https://insights.sbomify.com/MAL-2026-1688/): Malicious code in chain-promised (npm) (malicious package) - [MAL-2026-16879](https://insights.sbomify.com/MAL-2026-16879/): Malicious code in bumeler (RubyGems) (malicious package) - [MAL-2026-16878](https://insights.sbomify.com/MAL-2026-16878/): Malicious code in bumedler (RubyGems) (malicious package) - [MAL-2026-16877](https://insights.sbomify.com/MAL-2026-16877/): Malicious code in bumduer (RubyGems) (malicious package) - [MAL-2026-16876](https://insights.sbomify.com/MAL-2026-16876/): Malicious code in bumdsler (RubyGems) (malicious package) - [MAL-2026-16875](https://insights.sbomify.com/MAL-2026-16875/): Malicious code in bumdrler (RubyGems) (malicious package) - [MAL-2026-16874](https://insights.sbomify.com/MAL-2026-16874/): Malicious code in bumdper (RubyGems) (malicious package) - [MAL-2026-16873](https://insights.sbomify.com/MAL-2026-16873/): Malicious code in bumdoler (RubyGems) (malicious package) - [MAL-2026-16872](https://insights.sbomify.com/MAL-2026-16872/): Malicious code in bumdoer (RubyGems) (malicious package) - [MAL-2026-16871](https://insights.sbomify.com/MAL-2026-16871/): Malicious code in bumdnler (RubyGems) (malicious package) - [MAL-2026-16870](https://insights.sbomify.com/MAL-2026-16870/): Malicious code in bumdlwr (RubyGems) (malicious package) - [MAL-2026-1687](https://insights.sbomify.com/MAL-2026-1687/): Malicious code in chain-cli-promised (npm) (malicious package) - [MAL-2026-16869](https://insights.sbomify.com/MAL-2026-16869/): Malicious code in bumdlur (RubyGems) (malicious package) - [MAL-2026-16868](https://insights.sbomify.com/MAL-2026-16868/): Malicious code in bumdlsr (RubyGems) (malicious package) - [MAL-2026-16867](https://insights.sbomify.com/MAL-2026-16867/): Malicious code in bumdlser (RubyGems) (malicious package) - [MAL-2026-16866](https://insights.sbomify.com/MAL-2026-16866/): Malicious code in bumdlrr (RubyGems) (malicious package) - [MAL-2026-16865](https://insights.sbomify.com/MAL-2026-16865/): Malicious code in bumdlrer (RubyGems) (malicious package) - [MAL-2026-16864](https://insights.sbomify.com/MAL-2026-16864/): Malicious code in bumdlre (RubyGems) (malicious package) - [MAL-2026-16863](https://insights.sbomify.com/MAL-2026-16863/): Malicious code in bumdlr (RubyGems) (malicious package) - [MAL-2026-16862](https://insights.sbomify.com/MAL-2026-16862/): Malicious code in bumdlor (RubyGems) (malicious package) - [MAL-2026-16861](https://insights.sbomify.com/MAL-2026-16861/): Malicious code in bumdloer (RubyGems) (malicious package) - [MAL-2026-16860](https://insights.sbomify.com/MAL-2026-16860/): Malicious code in bumdlner (RubyGems) (malicious package) - [MAL-2026-1686](https://insights.sbomify.com/MAL-2026-1686/): Malicious code in chain-argon (npm) (malicious package) - [MAL-2026-16859](https://insights.sbomify.com/MAL-2026-16859/): Malicious code in bumdller (RubyGems) (malicious package) - [MAL-2026-16858](https://insights.sbomify.com/MAL-2026-16858/): Malicious code in bumdlir (RubyGems) (malicious package) - [MAL-2026-16857](https://insights.sbomify.com/MAL-2026-16857/): Malicious code in bumdlier (RubyGems) (malicious package) - [MAL-2026-16856](https://insights.sbomify.com/MAL-2026-16856/): Malicious code in bumdleu (RubyGems) (malicious package) - [MAL-2026-16855](https://insights.sbomify.com/MAL-2026-16855/): Malicious code in bumdlet (RubyGems) (malicious package) - [MAL-2026-16854](https://insights.sbomify.com/MAL-2026-16854/): Malicious code in bumdlesr (RubyGems) (malicious package) - [MAL-2026-16853](https://insights.sbomify.com/MAL-2026-16853/): Malicious code in bumdlers (RubyGems) (malicious package) - [MAL-2026-16852](https://insights.sbomify.com/MAL-2026-16852/): Malicious code in bumdlerr (RubyGems) (malicious package) - [MAL-2026-16851](https://insights.sbomify.com/MAL-2026-16851/): Malicious code in bumdlero (RubyGems) (malicious package) - [MAL-2026-16850](https://insights.sbomify.com/MAL-2026-16850/): Malicious code in bumdlern (RubyGems) (malicious package) - [MAL-2026-1685](https://insights.sbomify.com/MAL-2026-1685/): Malicious code in chai-types (npm) (malicious package) - [MAL-2026-16849](https://insights.sbomify.com/MAL-2026-16849/): Malicious code in bumdlerl (RubyGems) (malicious package) - [MAL-2026-16848](https://insights.sbomify.com/MAL-2026-16848/): Malicious code in bumdleri (RubyGems) (malicious package) - [MAL-2026-16847](https://insights.sbomify.com/MAL-2026-16847/): Malicious code in bumdlere (RubyGems) (malicious package) - [MAL-2026-16846](https://insights.sbomify.com/MAL-2026-16846/): Malicious code in bumdlera (RubyGems) (malicious package) - [MAL-2026-16845](https://insights.sbomify.com/MAL-2026-16845/): Malicious code in bumdler-ruby (RubyGems) (malicious package) - [MAL-2026-16844](https://insights.sbomify.com/MAL-2026-16844/): Malicious code in bumdler-rb (RubyGems) (malicious package) - [MAL-2026-16843](https://insights.sbomify.com/MAL-2026-16843/): Malicious code in bumdler-lib (RubyGems) (malicious package) - [MAL-2026-16842](https://insights.sbomify.com/MAL-2026-16842/): Malicious code in bumdler-gem (RubyGems) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2026/page/115/