# Vulnerabilities published in 2026


- [MAL-2026-15941](https://insights.sbomify.com/MAL-2026-15941/): Malicious code in ocfe-tv-subscription-center-web (npm) (malicious package)
- [MAL-2026-15940](https://insights.sbomify.com/MAL-2026-15940/): Malicious code in oce-configurator-wireless-frontend (npm) (malicious package)
- [MAL-2026-1594](https://insights.sbomify.com/MAL-2026-1594/): Malicious code in @cewe-onsitesearch/schemas (npm) (malicious package)
- [MAL-2026-15939](https://insights.sbomify.com/MAL-2026-15939/): Malicious code in omni-channel-oid-frontend (npm) (malicious package)
- [MAL-2026-15938](https://insights.sbomify.com/MAL-2026-15938/): Malicious code in dac-tools (PyPI) (malicious package)
- [MAL-2026-15937](https://insights.sbomify.com/MAL-2026-15937/): Malicious code in minecraftmodes (PyPI) (malicious package)
- [MAL-2026-15936](https://insights.sbomify.com/MAL-2026-15936/): Malicious code in trongridew (PyPI) (malicious package)
- [MAL-2026-15935](https://insights.sbomify.com/MAL-2026-15935/): Malicious code in proxycer (PyPI) (malicious package)
- [MAL-2026-15934](https://insights.sbomify.com/MAL-2026-15934/): Malicious code in dbt-sa-cli (PyPI) (malicious package)
- [MAL-2026-15933](https://insights.sbomify.com/MAL-2026-15933/): Malicious code in houdus (PyPI) (malicious package)
- [MAL-2026-15932](https://insights.sbomify.com/MAL-2026-15932/): Malicious code in chartkit-core (PyPI) (malicious package)
- [MAL-2026-15931](https://insights.sbomify.com/MAL-2026-15931/): Malicious code in metricboxlite (PyPI) (malicious package)
- [MAL-2026-15930](https://insights.sbomify.com/MAL-2026-15930/): Malicious code in tpu-raiden-jax (PyPI) (malicious package)
- [MAL-2026-1593](https://insights.sbomify.com/MAL-2026-1593/): Malicious code in @cbreone/utilities (npm) (malicious package)
- [MAL-2026-15929](https://insights.sbomify.com/MAL-2026-15929/): Malicious code in pymaas (PyPI) (malicious package)
- [MAL-2026-15928](https://insights.sbomify.com/MAL-2026-15928/): Malicious code in olympuslib (PyPI) (malicious package)
- [MAL-2026-15927](https://insights.sbomify.com/MAL-2026-15927/): Malicious code in qoeoe (PyPI) (malicious package)
- [MAL-2026-15926](https://insights.sbomify.com/MAL-2026-15926/): Malicious code in astlsi (PyPI) (malicious package)
- [MAL-2026-15925](https://insights.sbomify.com/MAL-2026-15925/): Malicious code in tailwind-contact-forms (npm) (malicious package)
- [MAL-2026-15924](https://insights.sbomify.com/MAL-2026-15924/): Malicious code in real-router-telemetry (npm) (malicious package)
- [MAL-2026-15923](https://insights.sbomify.com/MAL-2026-15923/): Malicious code in line-through (npm) (malicious package)
- [MAL-2026-15922](https://insights.sbomify.com/MAL-2026-15922/): Malicious code in claude-channel-discord (npm) (malicious package)
- [MAL-2026-15921](https://insights.sbomify.com/MAL-2026-15921/): Malicious code in box-sign-client-poc (npm) (malicious package)
- [MAL-2026-15920](https://insights.sbomify.com/MAL-2026-15920/): Malicious code in box-sign-client (npm) (malicious package)
- [MAL-2026-1592](https://insights.sbomify.com/MAL-2026-1592/): Malicious code in @cbreone/survey-ui (npm) (malicious package)
- [MAL-2026-15919](https://insights.sbomify.com/MAL-2026-15919/): Malicious code in megan-baileys (npm) (malicious package)
- [MAL-2026-15918](https://insights.sbomify.com/MAL-2026-15918/): Malicious code in @modss/baileys (npm) (malicious package)
- [MAL-2026-15917](https://insights.sbomify.com/MAL-2026-15917/): Malicious code in @crysnovax/baileys (npm) (malicious package)
- [MAL-2026-15916](https://insights.sbomify.com/MAL-2026-15916/): Malicious code in xcryption (npm) (malicious package)
- [MAL-2026-15915](https://insights.sbomify.com/MAL-2026-15915/): Malicious code in text-transform-plus (npm) (malicious package)
- [MAL-2026-15914](https://insights.sbomify.com/MAL-2026-15914/): Malicious code in taskforge-9xv (npm) (malicious package)
- [MAL-2026-15913](https://insights.sbomify.com/MAL-2026-15913/): Malicious code in taskforge-8xv (npm) (malicious package)
- [MAL-2026-15912](https://insights.sbomify.com/MAL-2026-15912/): Malicious code in tailwind-aspect (npm) (malicious package)
- [MAL-2026-15911](https://insights.sbomify.com/MAL-2026-15911/): Malicious code in 2nestjs (npm) (malicious package)
- [MAL-2026-15910](https://insights.sbomify.com/MAL-2026-15910/): Malicious code in timeweave (PyPI) (malicious package)
- [MAL-2026-1591](https://insights.sbomify.com/MAL-2026-1591/): Malicious code in @cbreone/micro-ui-survey (npm) (malicious package)
- [MAL-2026-15909](https://insights.sbomify.com/MAL-2026-15909/): Malicious code in 1nestjs (npm) (malicious package)
- [MAL-2026-15908](https://insights.sbomify.com/MAL-2026-15908/): Malicious code in 0nestjs (npm) (malicious package)
- [MAL-2026-15907](https://insights.sbomify.com/MAL-2026-15907/): Malicious code in tiny-folder-tree (npm) (malicious package)
- [MAL-2026-15906](https://insights.sbomify.com/MAL-2026-15906/): Malicious code in tailwindcss-animate-styles (npm) (malicious package)
- [MAL-2026-15905](https://insights.sbomify.com/MAL-2026-15905/): Malicious code in tailwindcss-3d-styles (npm) (malicious package)
- [MAL-2026-15904](https://insights.sbomify.com/MAL-2026-15904/): Malicious code in tailwind-scrollbar-styles (npm) (malicious package)
- [MAL-2026-15903](https://insights.sbomify.com/MAL-2026-15903/): Malicious code in tailwind-container-queries (npm) (malicious package)
- [MAL-2026-15902](https://insights.sbomify.com/MAL-2026-15902/): Malicious code in peertube-plugin-video-views-counter (npm) (malicious package)
- [MAL-2026-15901](https://insights.sbomify.com/MAL-2026-15901/): Malicious code in net-util-y8 (npm) (malicious package)
- [MAL-2026-15900](https://insights.sbomify.com/MAL-2026-15900/): Malicious code in hydration-ui-pkg (npm) (malicious package)
- [MAL-2026-1590](https://insights.sbomify.com/MAL-2026-1590/): Malicious code in @cbreone/core-ui (npm) (malicious package)
- [MAL-2026-159](https://insights.sbomify.com/MAL-2026-159/): Malicious code in chai-min (npm) (malicious package)
- [MAL-2026-15899](https://insights.sbomify.com/MAL-2026-15899/): Malicious code in easypanel-docker (npm) (malicious package)
- [MAL-2026-15898](https://insights.sbomify.com/MAL-2026-15898/): Malicious code in easypanel-ctl (npm) (malicious package)
- [MAL-2026-15897](https://insights.sbomify.com/MAL-2026-15897/): Malicious code in easypanel-core (npm) (malicious package)
- [MAL-2026-15896](https://insights.sbomify.com/MAL-2026-15896/): Malicious code in easypanel-client (npm) (malicious package)
- [MAL-2026-15895](https://insights.sbomify.com/MAL-2026-15895/): Malicious code in easypanel-app (npm) (malicious package)
- [MAL-2026-15894](https://insights.sbomify.com/MAL-2026-15894/): Malicious code in vscode-vue (npm) (malicious package)
- [MAL-2026-15893](https://insights.sbomify.com/MAL-2026-15893/): Malicious code in sliding-score-window (npm) (malicious package)
- [MAL-2026-15892](https://insights.sbomify.com/MAL-2026-15892/): Malicious code in priority-slot-queue (npm) (malicious package)
- [MAL-2026-15891](https://insights.sbomify.com/MAL-2026-15891/): Malicious code in ordered-kv-index (npm) (malicious package)
- [MAL-2026-15890](https://insights.sbomify.com/MAL-2026-15890/): Malicious code in ordered-freq-counter (npm) (malicious package)
- [MAL-2026-1589](https://insights.sbomify.com/MAL-2026-1589/): Malicious code in @cbreone/core-services (npm) (malicious package)
- [MAL-2026-15889](https://insights.sbomify.com/MAL-2026-15889/): Malicious code in neighbor-key-map (npm) (malicious package)
- [MAL-2026-15888](https://insights.sbomify.com/MAL-2026-15888/): Malicious code in indexed-btree (npm) (malicious package)
- [MAL-2026-15887](https://insights.sbomify.com/MAL-2026-15887/): Malicious code in html_vue (npm) (malicious package)
- [MAL-2026-15886](https://insights.sbomify.com/MAL-2026-15886/): Malicious code in guci-wxrout (npm) (malicious package)
- [MAL-2026-15885](https://insights.sbomify.com/MAL-2026-15885/): Malicious code in guci-main (npm) (malicious package)
- [MAL-2026-15884](https://insights.sbomify.com/MAL-2026-15884/): Malicious code in guci-date (npm) (malicious package)
- [MAL-2026-15883](https://insights.sbomify.com/MAL-2026-15883/): Malicious code in fullcalendar-windos (npm) (malicious package)
- [MAL-2026-15882](https://insights.sbomify.com/MAL-2026-15882/): Malicious code in element-utils-guci (npm) (malicious package)
- [MAL-2026-15881](https://insights.sbomify.com/MAL-2026-15881/): Malicious code in element-icon-guci (npm) (malicious package)
- [MAL-2026-15880](https://insights.sbomify.com/MAL-2026-15880/): Malicious code in element-guci-util (npm) (malicious package)
- [MAL-2026-1588](https://insights.sbomify.com/MAL-2026-1588/): Malicious code in @bingads-webui-help/apex.core.v3.min (npm) (malicious package)
- [MAL-2026-15879](https://insights.sbomify.com/MAL-2026-15879/): Malicious code in dsh-waste-market (npm) (malicious package)
- [MAL-2026-15878](https://insights.sbomify.com/MAL-2026-15878/): Malicious code in cbc97b7a (npm) (malicious package)
- [MAL-2026-15877](https://insights.sbomify.com/MAL-2026-15877/): Malicious code in btree-time-index (npm) (malicious package)
- [MAL-2026-15876](https://insights.sbomify.com/MAL-2026-15876/): Malicious code in btree-range-store (npm) (malicious package)
- [MAL-2026-15875](https://insights.sbomify.com/MAL-2026-15875/): Malicious code in btree-lru-cache (npm) (malicious package)
- [MAL-2026-15874](https://insights.sbomify.com/MAL-2026-15874/): Malicious code in btree-leaderboard (npm) (malicious package)
- [MAL-2026-15873](https://insights.sbomify.com/MAL-2026-15873/): Malicious code in btree-core (npm) (malicious package)
- [MAL-2026-15872](https://insights.sbomify.com/MAL-2026-15872/): Malicious code in @a23842/dsh-notifier (npm) (malicious package)
- [MAL-2026-15871](https://insights.sbomify.com/MAL-2026-15871/): Malicious code in wallet-watcher (npm) (malicious package)
- [MAL-2026-15870](https://insights.sbomify.com/MAL-2026-15870/): Malicious code in vitest-cli-dev (npm) (malicious package)
- [MAL-2026-1587](https://insights.sbomify.com/MAL-2026-1587/): Malicious code in @bingads-webui-cc-react/edit-primary-contact (npm) (malicious package)
- [MAL-2026-15869](https://insights.sbomify.com/MAL-2026-15869/): Malicious code in mcp-consultasdeveiculos-client (npm) (malicious package)
- [MAL-2026-15868](https://insights.sbomify.com/MAL-2026-15868/): Malicious code in @bx-ui-framework/microfrontend (npm) (malicious package)
- [MAL-2026-15867](https://insights.sbomify.com/MAL-2026-15867/): Malicious code in @bx-ui-framework/common (npm) (malicious package)
- [MAL-2026-15866](https://insights.sbomify.com/MAL-2026-15866/): Malicious code in @bx-ui-framework/authentication (npm) (malicious package)
- [MAL-2026-15865](https://insights.sbomify.com/MAL-2026-15865/): Malicious code in @avigilon/node-webrtc (npm) (malicious package)
- [MAL-2026-15864](https://insights.sbomify.com/MAL-2026-15864/): Malicious code in asti (PyPI) (malicious package)
- [MAL-2026-15863](https://insights.sbomify.com/MAL-2026-15863/): Malicious code in uvhttp-custom (PyPI) (malicious package)
- [MAL-2026-15862](https://insights.sbomify.com/MAL-2026-15862/): Malicious code in py-2equests (PyPI) (malicious package)
- [MAL-2026-15861](https://insights.sbomify.com/MAL-2026-15861/): Malicious code in py-1requests (PyPI) (malicious package)
- [MAL-2026-15860](https://insights.sbomify.com/MAL-2026-15860/): Malicious code in py-0requests (PyPI) (malicious package)
- [MAL-2026-1586](https://insights.sbomify.com/MAL-2026-1586/): Malicious code in @at-point/valiant-widgets-v2 (npm) (malicious package)
- [MAL-2026-15859](https://insights.sbomify.com/MAL-2026-15859/): Malicious code in 0requests (PyPI) (malicious package)
- [MAL-2026-15858](https://insights.sbomify.com/MAL-2026-15858/): Malicious code in trongridi (PyPI) (malicious package)
- [MAL-2026-15857](https://insights.sbomify.com/MAL-2026-15857/): Malicious code in @quantixfinance/wallet (npm) (malicious package)
- [MAL-2026-15856](https://insights.sbomify.com/MAL-2026-15856/): Malicious code in @quantixfinance/ui (npm) (malicious package)
- [MAL-2026-15855](https://insights.sbomify.com/MAL-2026-15855/): Malicious code in @quantixfinance/tron (npm) (malicious package)
- [MAL-2026-15854](https://insights.sbomify.com/MAL-2026-15854/): Malicious code in @quantixfinance/token (npm) (malicious package)
- [MAL-2026-15853](https://insights.sbomify.com/MAL-2026-15853/): Malicious code in @quantixfinance/supabase (npm) (malicious package)
- [MAL-2026-15852](https://insights.sbomify.com/MAL-2026-15852/): Malicious code in @quantixfinance/sdk (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/126/