# Vulnerabilities published in 2026 - [MAL-2026-16210](https://insights.sbomify.com/MAL-2026-16210/): Malicious code in strapi-plugin-pencc-meeb (npm) (malicious package) - [MAL-2026-1621](https://insights.sbomify.com/MAL-2026-1621/): Malicious code in @f5rest/odata-v4-parser (npm) (malicious package) - [MAL-2026-16209](https://insights.sbomify.com/MAL-2026-16209/): Malicious code in strapi-plugin-ccsuc-meeb (npm) (malicious package) - [MAL-2026-16208](https://insights.sbomify.com/MAL-2026-16208/): Malicious code in otel-span-adapter (npm) (malicious package) - [MAL-2026-16207](https://insights.sbomify.com/MAL-2026-16207/): Malicious code in chai-as-agile (npm) (malicious package) - [MAL-2026-16206](https://insights.sbomify.com/MAL-2026-16206/): Malicious code in @prime0/pcomatch (npm) (malicious package) - [MAL-2026-16205](https://insights.sbomify.com/MAL-2026-16205/): Malicious code in @prime0/inimatch (npm) (malicious package) - [MAL-2026-16204](https://insights.sbomify.com/MAL-2026-16204/): Malicious code in @prime0/alanced-match (npm) (malicious package) - [MAL-2026-16203](https://insights.sbomify.com/MAL-2026-16203/): Malicious code in faiss-cpu-avx512 (PyPI) (malicious package) - [MAL-2026-16202](https://insights.sbomify.com/MAL-2026-16202/): Malicious code in webpackbootstrapscripts (npm) (malicious package) - [MAL-2026-16201](https://insights.sbomify.com/MAL-2026-16201/): Malicious code in webpackbootstrap5 (npm) (malicious package) - [MAL-2026-16200](https://insights.sbomify.com/MAL-2026-16200/): Malicious code in @zaka13/thing (npm) (malicious package) - [MAL-2026-1620](https://insights.sbomify.com/MAL-2026-1620/): Malicious code in @f5rest/odata-v4-metadata (npm) (malicious package) - [MAL-2026-162](https://insights.sbomify.com/MAL-2026-162/): Malicious code in btcli-security (PyPI) (malicious package) - [MAL-2026-16199](https://insights.sbomify.com/MAL-2026-16199/): Malicious code in plogme (npm) (malicious package) - [MAL-2026-16198](https://insights.sbomify.com/MAL-2026-16198/): Malicious code in kartykp-token-pkg (npm) (malicious package) - [MAL-2026-16197](https://insights.sbomify.com/MAL-2026-16197/): Malicious code in kartykp-prod-oidc-test-pkg (npm) (malicious package) - [MAL-2026-16196](https://insights.sbomify.com/MAL-2026-16196/): Malicious code in chai-as-crack (npm) (malicious package) - [MAL-2026-16195](https://insights.sbomify.com/MAL-2026-16195/): Malicious code in tailwind-forms-styles (npm) (malicious package) - [MAL-2026-16194](https://insights.sbomify.com/MAL-2026-16194/): Malicious code in strapi-plugin-yesccresh-meeb (npm) (malicious package) - [MAL-2026-16193](https://insights.sbomify.com/MAL-2026-16193/): Malicious code in strapi-plugin-yayccresh-meeb (npm) (malicious package) - [MAL-2026-16192](https://insights.sbomify.com/MAL-2026-16192/): Malicious code in strapi-plugin-weccresh-meeb (npm) (malicious package) - [MAL-2026-16191](https://insights.sbomify.com/MAL-2026-16191/): Malicious code in strapi-plugin-uicc-meeb (npm) (malicious package) - [MAL-2026-16190](https://insights.sbomify.com/MAL-2026-16190/): Malicious code in strapi-plugin-tryccresh-meeb (npm) (malicious package) - [MAL-2026-1619](https://insights.sbomify.com/MAL-2026-1619/): Malicious code in @f5rest/odata-v4-inmemory (npm) (malicious package) - [MAL-2026-16189](https://insights.sbomify.com/MAL-2026-16189/): Malicious code in strapi-plugin-sucresh-meeb (npm) (malicious package) - [MAL-2026-16188](https://insights.sbomify.com/MAL-2026-16188/): Malicious code in strapi-plugin-rs-meeb322k (npm) (malicious package) - [MAL-2026-16187](https://insights.sbomify.com/MAL-2026-16187/): Malicious code in strapi-plugin-revsh-meeb322k (npm) (malicious package) - [MAL-2026-16186](https://insights.sbomify.com/MAL-2026-16186/): Malicious code in strapi-plugin-revs02-meeb322k (npm) (malicious package) - [MAL-2026-16185](https://insights.sbomify.com/MAL-2026-16185/): Malicious code in strapi-plugin-revs01-meeb322k (npm) (malicious package) - [MAL-2026-16184](https://insights.sbomify.com/MAL-2026-16184/): Malicious code in strapi-plugin-revs-meeb322k (npm) (malicious package) - [MAL-2026-16183](https://insights.sbomify.com/MAL-2026-16183/): Malicious code in strapi-plugin-resh-meeb322k (npm) (malicious package) - [MAL-2026-16182](https://insights.sbomify.com/MAL-2026-16182/): Malicious code in strapi-plugin-proccresh-meeb (npm) (malicious package) - [MAL-2026-16181](https://insights.sbomify.com/MAL-2026-16181/): Malicious code in strapi-plugin-plsresh-meeb (npm) (malicious package) - [MAL-2026-16180](https://insights.sbomify.com/MAL-2026-16180/): Malicious code in strapi-plugin-ccresh-meeb (npm) (malicious package) - [MAL-2026-1618](https://insights.sbomify.com/MAL-2026-1618/): Malicious code in @f5rest/odata-lens (npm) (malicious package) - [MAL-2026-16179](https://insights.sbomify.com/MAL-2026-16179/): Malicious code in process-tailwind (npm) (malicious package) - [MAL-2026-16178](https://insights.sbomify.com/MAL-2026-16178/): Malicious code in process-lhpm (npm) (malicious package) - [MAL-2026-16177](https://insights.sbomify.com/MAL-2026-16177/): Malicious code in n8n-nodes-buildcheck (npm) (malicious package) - [MAL-2026-16176](https://insights.sbomify.com/MAL-2026-16176/): Malicious code in fulfillment-cuprum-auth-widget (npm) (malicious package) - [MAL-2026-16175](https://insights.sbomify.com/MAL-2026-16175/): Malicious code in csa-mfa (npm) (malicious package) - [MAL-2026-16174](https://insights.sbomify.com/MAL-2026-16174/): Malicious code in alkajsdfoiwqeusdflkjsdf (npm) (malicious package) - [MAL-2026-16173](https://insights.sbomify.com/MAL-2026-16173/): Malicious code in id79-client (npm) (malicious package) - [MAL-2026-16172](https://insights.sbomify.com/MAL-2026-16172/): Malicious code in @biz44/runtime-utils (npm) (malicious package) - [MAL-2026-16171](https://insights.sbomify.com/MAL-2026-16171/): Malicious code in @biz44/process-runtime-utils (npm) (malicious package) - [MAL-2026-16170](https://insights.sbomify.com/MAL-2026-16170/): Malicious code in @biz44/id99-client (npm) (malicious package) - [MAL-2026-1617](https://insights.sbomify.com/MAL-2026-1617/): Malicious code in @f5rest/icr-odata-adapter (npm) (malicious package) - [MAL-2026-16169](https://insights.sbomify.com/MAL-2026-16169/): Malicious code in @biz44/id95-client (npm) (malicious package) - [MAL-2026-16168](https://insights.sbomify.com/MAL-2026-16168/): Malicious code in @biz44/id79-client (npm) (malicious package) - [MAL-2026-16167](https://insights.sbomify.com/MAL-2026-16167/): Malicious code in @biz44/id44-client (npm) (malicious package) - [MAL-2026-16166](https://insights.sbomify.com/MAL-2026-16166/): Malicious code in @biz44/id12-client (npm) (malicious package) - [MAL-2026-16165](https://insights.sbomify.com/MAL-2026-16165/): Malicious code in @biz44/id10-client (npm) (malicious package) - [MAL-2026-16164](https://insights.sbomify.com/MAL-2026-16164/): Malicious code in logs_update (crates.io) (malicious package) - [MAL-2026-16163](https://insights.sbomify.com/MAL-2026-16163/): Malicious code in @yggbrasil/api (npm) (malicious package) - [MAL-2026-16162](https://insights.sbomify.com/MAL-2026-16162/): Malicious code in n8n-nodes-sysdiag2 (npm) (malicious package) - [MAL-2026-16161](https://insights.sbomify.com/MAL-2026-16161/): Malicious code in meraz-project-tracker (npm) (malicious package) - [MAL-2026-16160](https://insights.sbomify.com/MAL-2026-16160/): Malicious code in lpulogin (npm) (malicious package) - [MAL-2026-1616](https://insights.sbomify.com/MAL-2026-1616/): Malicious code in @f5rest/icr-metadata-generator (npm) (malicious package) - [MAL-2026-16159](https://insights.sbomify.com/MAL-2026-16159/): Malicious code in dilxztech (npm) (malicious package) - [MAL-2026-16158](https://insights.sbomify.com/MAL-2026-16158/): Malicious code in afhmxiewpsf (npm) (malicious package) - [MAL-2026-16157](https://insights.sbomify.com/MAL-2026-16157/): Malicious code in @merazmz/project-tracker (npm) (malicious package) - [MAL-2026-16156](https://insights.sbomify.com/MAL-2026-16156/): Malicious code in get-power (npm) (malicious package) - [MAL-2026-16155](https://insights.sbomify.com/MAL-2026-16155/): Malicious code in ultra-ws (npm) (malicious package) - [MAL-2026-16154](https://insights.sbomify.com/MAL-2026-16154/): Malicious code in pino-ulid (npm) (malicious package) - [MAL-2026-16153](https://insights.sbomify.com/MAL-2026-16153/): Malicious code in web-main (npm) (malicious package) - [MAL-2026-16152](https://insights.sbomify.com/MAL-2026-16152/): Malicious code in strapi-plugin-os-info-meeb322k (npm) (malicious package) - [MAL-2026-16151](https://insights.sbomify.com/MAL-2026-16151/): Malicious code in sql-limit-enforcer (npm) (malicious package) - [MAL-2026-16150](https://insights.sbomify.com/MAL-2026-16150/): Malicious code in postgreesqlhelper (npm) (malicious package) - [MAL-2026-1615](https://insights.sbomify.com/MAL-2026-1615/): Malicious code in @emerald-react/menu (npm) (malicious package) - [MAL-2026-16149](https://insights.sbomify.com/MAL-2026-16149/): Malicious code in os-info-meeb322k (npm) (malicious package) - [MAL-2026-16148](https://insights.sbomify.com/MAL-2026-16148/): Malicious code in noblox-asset.js (npm) (malicious package) - [MAL-2026-16147](https://insights.sbomify.com/MAL-2026-16147/): Malicious code in n8n-nodes-sysdiag (npm) (malicious package) - [MAL-2026-16146](https://insights.sbomify.com/MAL-2026-16146/): Malicious code in @aiwfm/communitywfm.scripts.api (npm) (malicious package) - [MAL-2026-16145](https://insights.sbomify.com/MAL-2026-16145/): Malicious code in concierge-sdk (npm) (malicious package) - [MAL-2026-16144](https://insights.sbomify.com/MAL-2026-16144/): Malicious code in app-rrhh (npm) (malicious package) - [MAL-2026-16143](https://insights.sbomify.com/MAL-2026-16143/): Malicious code in chroma-client (PyPI) (malicious package) - [MAL-2026-16142](https://insights.sbomify.com/MAL-2026-16142/): Malicious code in python-fork (PyPI) (malicious package) - [MAL-2026-16141](https://insights.sbomify.com/MAL-2026-16141/): Malicious code in platform-telemetry-client (PyPI) (malicious package) - [MAL-2026-16140](https://insights.sbomify.com/MAL-2026-16140/): Malicious code in tracker-cloudflare (npm) (malicious package) - [MAL-2026-1614](https://insights.sbomify.com/MAL-2026-1614/): Malicious code in @emerald-react/list (npm) (malicious package) - [MAL-2026-16139](https://insights.sbomify.com/MAL-2026-16139/): Malicious code in tailwind-form-kit (npm) (malicious package) - [MAL-2026-16138](https://insights.sbomify.com/MAL-2026-16138/): Malicious code in greensaver (npm) (malicious package) - [MAL-2026-16137](https://insights.sbomify.com/MAL-2026-16137/): Malicious code in cr-bot-common (npm) (malicious package) - [MAL-2026-16136](https://insights.sbomify.com/MAL-2026-16136/): Malicious code in transfomers (PyPI) (malicious package) - [MAL-2026-16135](https://insights.sbomify.com/MAL-2026-16135/): Malicious code in openaii (PyPI) (malicious package) - [MAL-2026-16134](https://insights.sbomify.com/MAL-2026-16134/): Malicious code in ollamaa (PyPI) (malicious package) - [MAL-2026-16133](https://insights.sbomify.com/MAL-2026-16133/): Malicious code in langgrap (PyPI) (malicious package) - [MAL-2026-16132](https://insights.sbomify.com/MAL-2026-16132/): Malicious code in @nimbusedge/auth (npm) (malicious package) - [MAL-2026-16131](https://insights.sbomify.com/MAL-2026-16131/): Malicious code in aitextutils-py (PyPI) (malicious package) - [MAL-2026-16130](https://insights.sbomify.com/MAL-2026-16130/): Malicious code in aitextkit-py (PyPI) (malicious package) - [MAL-2026-1613](https://insights.sbomify.com/MAL-2026-1613/): Malicious code in @emerald-react/label (npm) (malicious package) - [MAL-2026-16129](https://insights.sbomify.com/MAL-2026-16129/): Malicious code in web3-eth-account (PyPI) (malicious package) - [MAL-2026-16128](https://insights.sbomify.com/MAL-2026-16128/): Malicious code in pymem-win (PyPI) (malicious package) - [MAL-2026-16127](https://insights.sbomify.com/MAL-2026-16127/): Malicious code in eth-account-web3 (PyPI) (malicious package) - [MAL-2026-16126](https://insights.sbomify.com/MAL-2026-16126/): Malicious code in strapi-plugin-vinsoc-1109 (npm) (malicious package) - [MAL-2026-16125](https://insights.sbomify.com/MAL-2026-16125/): Malicious code in lucy-python-script-2030 (PyPI) (malicious package) - [MAL-2026-16124](https://insights.sbomify.com/MAL-2026-16124/): Malicious code in tailwindcss-contact-forms (npm) (malicious package) - [MAL-2026-16123](https://insights.sbomify.com/MAL-2026-16123/): Malicious code in pinochiomathm (npm) (malicious package) - [MAL-2026-16122](https://insights.sbomify.com/MAL-2026-16122/): Malicious code in pylever (PyPI) (malicious package) - [MAL-2026-16121](https://insights.sbomify.com/MAL-2026-16121/): Malicious code in websetup (PyPI) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2026/page/123/