# Vulnerabilities published in 2026 - [MAL-2026-16841](https://insights.sbomify.com/MAL-2026-16841/): Malicious code in bumdler (RubyGems) (malicious package) - [MAL-2026-16840](https://insights.sbomify.com/MAL-2026-16840/): Malicious code in bumdleor (RubyGems) (malicious package) - [MAL-2026-1684](https://insights.sbomify.com/MAL-2026-1684/): Malicious code in chai-proxy (npm) (malicious package) - [MAL-2026-16839](https://insights.sbomify.com/MAL-2026-16839/): Malicious code in bumdleo (RubyGems) (malicious package) - [MAL-2026-16838](https://insights.sbomify.com/MAL-2026-16838/): Malicious code in bumdlenr (RubyGems) (malicious package) - [MAL-2026-16837](https://insights.sbomify.com/MAL-2026-16837/): Malicious code in bumdlelr (RubyGems) (malicious package) - [MAL-2026-16836](https://insights.sbomify.com/MAL-2026-16836/): Malicious code in bumdleir (RubyGems) (malicious package) - [MAL-2026-16835](https://insights.sbomify.com/MAL-2026-16835/): Malicious code in bumdlei (RubyGems) (malicious package) - [MAL-2026-16834](https://insights.sbomify.com/MAL-2026-16834/): Malicious code in bumdlef (RubyGems) (malicious package) - [MAL-2026-16833](https://insights.sbomify.com/MAL-2026-16833/): Malicious code in bumdleer (RubyGems) (malicious package) - [MAL-2026-16832](https://insights.sbomify.com/MAL-2026-16832/): Malicious code in bumdlee (RubyGems) (malicious package) - [MAL-2026-16831](https://insights.sbomify.com/MAL-2026-16831/): Malicious code in bumdled (RubyGems) (malicious package) - [MAL-2026-16830](https://insights.sbomify.com/MAL-2026-16830/): Malicious code in bumdlear (RubyGems) (malicious package) - [MAL-2026-1683](https://insights.sbomify.com/MAL-2026-1683/): Malicious code in chai-promised-tools (npm) (malicious package) - [MAL-2026-16829](https://insights.sbomify.com/MAL-2026-16829/): Malicious code in bumdlea (RubyGems) (malicious package) - [MAL-2026-16828](https://insights.sbomify.com/MAL-2026-16828/): Malicious code in bumdle (RubyGems) (malicious package) - [MAL-2026-16827](https://insights.sbomify.com/MAL-2026-16827/): Malicious code in bumdldr (RubyGems) (malicious package) - [MAL-2026-16826](https://insights.sbomify.com/MAL-2026-16826/): Malicious code in bumdlar (RubyGems) (malicious package) - [MAL-2026-16825](https://insights.sbomify.com/MAL-2026-16825/): Malicious code in bumdlaer (RubyGems) (malicious package) - [MAL-2026-16824](https://insights.sbomify.com/MAL-2026-16824/): Malicious code in bumdker (RubyGems) (malicious package) - [MAL-2026-16823](https://insights.sbomify.com/MAL-2026-16823/): Malicious code in bumdiler (RubyGems) (malicious package) - [MAL-2026-16822](https://insights.sbomify.com/MAL-2026-16822/): Malicious code in bumdier (RubyGems) (malicious package) - [MAL-2026-16821](https://insights.sbomify.com/MAL-2026-16821/): Malicious code in bumder (RubyGems) (malicious package) - [MAL-2026-16820](https://insights.sbomify.com/MAL-2026-16820/): Malicious code in bumdelr (RubyGems) (malicious package) - [MAL-2026-1682](https://insights.sbomify.com/MAL-2026-1682/): Malicious code in chai-promised-plugin (npm) (malicious package) - [MAL-2026-16819](https://insights.sbomify.com/MAL-2026-16819/): Malicious code in bumdeler (RubyGems) (malicious package) - [MAL-2026-16818](https://insights.sbomify.com/MAL-2026-16818/): Malicious code in bumdeer (RubyGems) (malicious package) - [MAL-2026-16817](https://insights.sbomify.com/MAL-2026-16817/): Malicious code in bumddler (RubyGems) (malicious package) - [MAL-2026-16816](https://insights.sbomify.com/MAL-2026-16816/): Malicious code in bumdaler (RubyGems) (malicious package) - [MAL-2026-16815](https://insights.sbomify.com/MAL-2026-16815/): Malicious code in bumdaer (RubyGems) (malicious package) - [MAL-2026-16814](https://insights.sbomify.com/MAL-2026-16814/): Malicious code in bumcler (RubyGems) (malicious package) - [MAL-2026-16813](https://insights.sbomify.com/MAL-2026-16813/): Malicious code in bumaler (RubyGems) (malicious package) - [MAL-2026-16812](https://insights.sbomify.com/MAL-2026-16812/): Malicious code in bumadler (RubyGems) (malicious package) - [MAL-2026-16811](https://insights.sbomify.com/MAL-2026-16811/): Malicious code in bulsndler (RubyGems) (malicious package) - [MAL-2026-16810](https://insights.sbomify.com/MAL-2026-16810/): Malicious code in bulnlder (RubyGems) (malicious package) - [MAL-2026-1681](https://insights.sbomify.com/MAL-2026-1681/): Malicious code in chai-promised-cli (npm) (malicious package) - [MAL-2026-16809](https://insights.sbomify.com/MAL-2026-16809/): Malicious code in bulndler (RubyGems) (malicious package) - [MAL-2026-16808](https://insights.sbomify.com/MAL-2026-16808/): Malicious code in bulndlef (RubyGems) (malicious package) - [MAL-2026-16807](https://insights.sbomify.com/MAL-2026-16807/): Malicious code in bulnder (RubyGems) (malicious package) - [MAL-2026-16806](https://insights.sbomify.com/MAL-2026-16806/): Malicious code in bulmdler (RubyGems) (malicious package) - [MAL-2026-16805](https://insights.sbomify.com/MAL-2026-16805/): Malicious code in bulder (RubyGems) (malicious package) - [MAL-2026-16804](https://insights.sbomify.com/MAL-2026-16804/): Malicious code in bukdler (RubyGems) (malicious package) - [MAL-2026-16803](https://insights.sbomify.com/MAL-2026-16803/): Malicious code in bujlder (RubyGems) (malicious package) - [MAL-2026-16802](https://insights.sbomify.com/MAL-2026-16802/): Malicious code in bujdler (RubyGems) (malicious package) - [MAL-2026-16801](https://insights.sbomify.com/MAL-2026-16801/): Malicious code in bujdlef (RubyGems) (malicious package) - [MAL-2026-16800](https://insights.sbomify.com/MAL-2026-16800/): Malicious code in buisndler (RubyGems) (malicious package) - [MAL-2026-1680](https://insights.sbomify.com/MAL-2026-1680/): Malicious code in chai-promised-await (npm) (malicious package) - [MAL-2026-168](https://insights.sbomify.com/MAL-2026-168/): Malicious code in @zuora-marketing/linting (npm) (malicious package) - [MAL-2026-16799](https://insights.sbomify.com/MAL-2026-16799/): Malicious code in buinxler (RubyGems) (malicious package) - [MAL-2026-16798](https://insights.sbomify.com/MAL-2026-16798/): Malicious code in buinlder (RubyGems) (malicious package) - [MAL-2026-16797](https://insights.sbomify.com/MAL-2026-16797/): Malicious code in buindler (RubyGems) (malicious package) - [MAL-2026-16796](https://insights.sbomify.com/MAL-2026-16796/): Malicious code in buindlef (RubyGems) (malicious package) - [MAL-2026-16795](https://insights.sbomify.com/MAL-2026-16795/): Malicious code in buimdler (RubyGems) (malicious package) - [MAL-2026-16794](https://insights.sbomify.com/MAL-2026-16794/): Malicious code in buidler (RubyGems) (malicious package) - [MAL-2026-16793](https://insights.sbomify.com/MAL-2026-16793/): Malicious code in buidlef (RubyGems) (malicious package) - [MAL-2026-16792](https://insights.sbomify.com/MAL-2026-16792/): Malicious code in buhlder (RubyGems) (malicious package) - [MAL-2026-16791](https://insights.sbomify.com/MAL-2026-16791/): Malicious code in buhdler (RubyGems) (malicious package) - [MAL-2026-16790](https://insights.sbomify.com/MAL-2026-16790/): Malicious code in buhdlef (RubyGems) (malicious package) - [MAL-2026-1679](https://insights.sbomify.com/MAL-2026-1679/): Malicious code in chai-promised-async (npm) (malicious package) - [MAL-2026-16789](https://insights.sbomify.com/MAL-2026-16789/): Malicious code in buesndler (RubyGems) (malicious package) - [MAL-2026-16788](https://insights.sbomify.com/MAL-2026-16788/): Malicious code in buenlder (RubyGems) (malicious package) - [MAL-2026-16787](https://insights.sbomify.com/MAL-2026-16787/): Malicious code in buendler (RubyGems) (malicious package) - [MAL-2026-16786](https://insights.sbomify.com/MAL-2026-16786/): Malicious code in buendlef (RubyGems) (malicious package) - [MAL-2026-16785](https://insights.sbomify.com/MAL-2026-16785/): Malicious code in buemdler (RubyGems) (malicious package) - [MAL-2026-16784](https://insights.sbomify.com/MAL-2026-16784/): Malicious code in buelder (RubyGems) (malicious package) - [MAL-2026-16783](https://insights.sbomify.com/MAL-2026-16783/): Malicious code in buedler (RubyGems) (malicious package) - [MAL-2026-16782](https://insights.sbomify.com/MAL-2026-16782/): Malicious code in buedlef (RubyGems) (malicious package) - [MAL-2026-16781](https://insights.sbomify.com/MAL-2026-16781/): Malicious code in budnler (RubyGems) (malicious package) - [MAL-2026-16780](https://insights.sbomify.com/MAL-2026-16780/): Malicious code in budnlef (RubyGems) (malicious package) - [MAL-2026-1678](https://insights.sbomify.com/MAL-2026-1678/): Malicious code in chai-conf (npm) (malicious package) - [MAL-2026-16779](https://insights.sbomify.com/MAL-2026-16779/): Malicious code in budndler (RubyGems) (malicious package) - [MAL-2026-16778](https://insights.sbomify.com/MAL-2026-16778/): Malicious code in budmler (RubyGems) (malicious package) - [MAL-2026-16777](https://insights.sbomify.com/MAL-2026-16777/): Malicious code in budler (RubyGems) (malicious package) - [MAL-2026-16776](https://insights.sbomify.com/MAL-2026-16776/): Malicious code in budlef (RubyGems) (malicious package) - [MAL-2026-16775](https://insights.sbomify.com/MAL-2026-16775/): Malicious code in bublder (RubyGems) (malicious package) - [MAL-2026-16774](https://insights.sbomify.com/MAL-2026-16774/): Malicious code in bubdler (RubyGems) (malicious package) - [MAL-2026-16773](https://insights.sbomify.com/MAL-2026-16773/): Malicious code in bubdlef (RubyGems) (malicious package) - [MAL-2026-16772](https://insights.sbomify.com/MAL-2026-16772/): Malicious code in buasndler (RubyGems) (malicious package) - [MAL-2026-16771](https://insights.sbomify.com/MAL-2026-16771/): Malicious code in buanlder (RubyGems) (malicious package) - [MAL-2026-16770](https://insights.sbomify.com/MAL-2026-16770/): Malicious code in buandler (RubyGems) (malicious package) - [MAL-2026-1677](https://insights.sbomify.com/MAL-2026-1677/): Malicious code in chai-cli-async (npm) (malicious package) - [MAL-2026-16769](https://insights.sbomify.com/MAL-2026-16769/): Malicious code in buandlef (RubyGems) (malicious package) - [MAL-2026-16768](https://insights.sbomify.com/MAL-2026-16768/): Malicious code in buamdler (RubyGems) (malicious package) - [MAL-2026-16767](https://insights.sbomify.com/MAL-2026-16767/): Malicious code in bualder (RubyGems) (malicious package) - [MAL-2026-16766](https://insights.sbomify.com/MAL-2026-16766/): Malicious code in buadler (RubyGems) (malicious package) - [MAL-2026-16765](https://insights.sbomify.com/MAL-2026-16765/): Malicious code in buadlef (RubyGems) (malicious package) - [MAL-2026-16764](https://insights.sbomify.com/MAL-2026-16764/): Malicious code in bsusndler (RubyGems) (malicious package) - [MAL-2026-16763](https://insights.sbomify.com/MAL-2026-16763/): Malicious code in bsunlder (RubyGems) (malicious package) - [MAL-2026-16762](https://insights.sbomify.com/MAL-2026-16762/): Malicious code in bsundler (RubyGems) (malicious package) - [MAL-2026-16761](https://insights.sbomify.com/MAL-2026-16761/): Malicious code in bsundlef (RubyGems) (malicious package) - [MAL-2026-16760](https://insights.sbomify.com/MAL-2026-16760/): Malicious code in bsumdler (RubyGems) (malicious package) - [MAL-2026-1676](https://insights.sbomify.com/MAL-2026-1676/): Malicious code in chai-chai-chain-promised (npm) (malicious package) - [MAL-2026-16759](https://insights.sbomify.com/MAL-2026-16759/): Malicious code in bsndler (RubyGems) (malicious package) - [MAL-2026-16758](https://insights.sbomify.com/MAL-2026-16758/): Malicious code in bsiundler (RubyGems) (malicious package) - [MAL-2026-16757](https://insights.sbomify.com/MAL-2026-16757/): Malicious code in brusndler (RubyGems) (malicious package) - [MAL-2026-16756](https://insights.sbomify.com/MAL-2026-16756/): Malicious code in brunlder (RubyGems) (malicious package) - [MAL-2026-16755](https://insights.sbomify.com/MAL-2026-16755/): Malicious code in brundler (RubyGems) (malicious package) - [MAL-2026-16754](https://insights.sbomify.com/MAL-2026-16754/): Malicious code in brundlef (RubyGems) (malicious package) - [MAL-2026-16753](https://insights.sbomify.com/MAL-2026-16753/): Malicious code in briundler (RubyGems) (malicious package) - [MAL-2026-16752](https://insights.sbomify.com/MAL-2026-16752/): Malicious code in bousndler (RubyGems) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2026/page/116/