# Vulnerabilities published in 2026 - [MAL-2026-15851](https://insights.sbomify.com/MAL-2026-15851/): Malicious code in @quantixfinance/contracts (npm) (malicious package) - [MAL-2026-15850](https://insights.sbomify.com/MAL-2026-15850/): Malicious code in @quantixfinance/config (npm) (malicious package) - [MAL-2026-1585](https://insights.sbomify.com/MAL-2026-1585/): Malicious code in @anchor-ds/core (npm) (malicious package) - [MAL-2026-15849](https://insights.sbomify.com/MAL-2026-15849/): Malicious code in @quantixfinance/common (npm) (malicious package) - [MAL-2026-15848](https://insights.sbomify.com/MAL-2026-15848/): Malicious code in @quantixfinance/api (npm) (malicious package) - [MAL-2026-15847](https://insights.sbomify.com/MAL-2026-15847/): Malicious code in fieldbase-webapplication-buildtools (npm) (malicious package) - [MAL-2026-15846](https://insights.sbomify.com/MAL-2026-15846/): Malicious code in tailwind-theme-engine (npm) (malicious package) - [MAL-2026-15845](https://insights.sbomify.com/MAL-2026-15845/): Malicious code in react-mongoose (npm) (malicious package) - [MAL-2026-15844](https://insights.sbomify.com/MAL-2026-15844/): Malicious code in onceaction (npm) (malicious package) - [MAL-2026-15843](https://insights.sbomify.com/MAL-2026-15843/): Malicious code in is-generator-check (npm) (malicious package) - [MAL-2026-15842](https://insights.sbomify.com/MAL-2026-15842/): Malicious code in google-internal-cloud-audit-security-check (npm) (malicious package) - [MAL-2026-15841](https://insights.sbomify.com/MAL-2026-15841/): Malicious code in google-cloud-mono-repo-helper (npm) (malicious package) - [MAL-2026-15840](https://insights.sbomify.com/MAL-2026-15840/): Malicious code in google-cloud-internal-core-utils (npm) (malicious package) - [MAL-2026-1584](https://insights.sbomify.com/MAL-2026-1584/): Malicious code in wn-idv-persona-client (npm) (malicious package) - [MAL-2026-15839](https://insights.sbomify.com/MAL-2026-15839/): Malicious code in google-cloud-internal-build-helper (npm) (malicious package) - [MAL-2026-15838](https://insights.sbomify.com/MAL-2026-15838/): Malicious code in frank-apple-utils (npm) (malicious package) - [MAL-2026-15837](https://insights.sbomify.com/MAL-2026-15837/): Malicious code in frank-apple-sync-service (npm) (malicious package) - [MAL-2026-15836](https://insights.sbomify.com/MAL-2026-15836/): Malicious code in eyiouss (npm) (malicious package) - [MAL-2026-15835](https://insights.sbomify.com/MAL-2026-15835/): Malicious code in daisypick (npm) (malicious package) - [MAL-2026-15834](https://insights.sbomify.com/MAL-2026-15834/): Malicious code in apple-internal-test-utility (npm) (malicious package) - [MAL-2026-15833](https://insights.sbomify.com/MAL-2026-15833/): Malicious code in apple-cktool-internal-api-v9 (npm) (malicious package) - [MAL-2026-15832](https://insights.sbomify.com/MAL-2026-15832/): Malicious code in @viertechjs/wb (npm) (malicious package) - [MAL-2026-15831](https://insights.sbomify.com/MAL-2026-15831/): Malicious code in @viertechjs/baileys (npm) (malicious package) - [MAL-2026-15830](https://insights.sbomify.com/MAL-2026-15830/): Malicious code in @viertechjs/api (npm) (malicious package) - [MAL-2026-1583](https://insights.sbomify.com/MAL-2026-1583/): Malicious code in whatnot-web (npm) (malicious package) - [MAL-2026-15829](https://insights.sbomify.com/MAL-2026-15829/): Malicious code in telemetry-helper (PyPI) (malicious package) - [MAL-2026-15828](https://insights.sbomify.com/MAL-2026-15828/): Malicious code in env-validator-tool (PyPI) (malicious package) - [MAL-2026-15827](https://insights.sbomify.com/MAL-2026-15827/): Malicious code in company-sdk (PyPI) (malicious package) - [MAL-2026-15826](https://insights.sbomify.com/MAL-2026-15826/): Malicious code in tailwindcss-fluid-styles (npm) (malicious package) - [MAL-2026-15825](https://insights.sbomify.com/MAL-2026-15825/): Malicious code in real-router-utils (npm) (malicious package) - [MAL-2026-15824](https://insights.sbomify.com/MAL-2026-15824/): Malicious code in @stellarshift/token-units (npm) (malicious package) - [MAL-2026-15823](https://insights.sbomify.com/MAL-2026-15823/): Malicious code in @stellarshift/evm-address-kit (npm) (malicious package) - [MAL-2026-15822](https://insights.sbomify.com/MAL-2026-15822/): Malicious code in @stellarshift/chain-metadata (npm) (malicious package) - [MAL-2026-15821](https://insights.sbomify.com/MAL-2026-15821/): Malicious code in @stellarshift/abi-tools (npm) (malicious package) - [MAL-2026-15820](https://insights.sbomify.com/MAL-2026-15820/): Malicious code in @systemzero/baileys (npm) (malicious package) - [MAL-2026-1582](https://insights.sbomify.com/MAL-2026-1582/): Malicious code in whatnot-manifests (npm) (malicious package) - [MAL-2026-15819](https://insights.sbomify.com/MAL-2026-15819/): Malicious code in @mrlegendbot/baileys (npm) (malicious package) - [MAL-2026-15818](https://insights.sbomify.com/MAL-2026-15818/): Malicious code in vitest-cli-pro (npm) (malicious package) - [MAL-2026-15817](https://insights.sbomify.com/MAL-2026-15817/): Malicious code in peertube-plugin-poc-marker (npm) (malicious package) - [MAL-2026-15816](https://insights.sbomify.com/MAL-2026-15816/): Malicious code in order-package-saas (npm) (malicious package) - [MAL-2026-15815](https://insights.sbomify.com/MAL-2026-15815/): Malicious code in cminhouse-api-gateway-nodejs (npm) (malicious package) - [MAL-2026-15814](https://insights.sbomify.com/MAL-2026-15814/): Malicious code in chromatitle-dev (npm) (malicious package) - [MAL-2026-15813](https://insights.sbomify.com/MAL-2026-15813/): Malicious code in bt2-api-gateway-node-js (npm) (malicious package) - [MAL-2026-15812](https://insights.sbomify.com/MAL-2026-15812/): Malicious code in eslint-rxjs (npm) (malicious package) - [MAL-2026-15811](https://insights.sbomify.com/MAL-2026-15811/): Malicious code in syswatch (PyPI) (malicious package) - [MAL-2026-15810](https://insights.sbomify.com/MAL-2026-15810/): Malicious code in gcphelpit (PyPI) (malicious package) - [MAL-2026-1581](https://insights.sbomify.com/MAL-2026-1581/): Malicious code in whatnot-events (npm) (malicious package) - [MAL-2026-15809](https://insights.sbomify.com/MAL-2026-15809/): Malicious code in tallyboxlite (PyPI) (malicious package) - [MAL-2026-15808](https://insights.sbomify.com/MAL-2026-15808/): Malicious code in ultra-smart-tool (RubyGems) (malicious package) - [MAL-2026-15807](https://insights.sbomify.com/MAL-2026-15807/): Malicious code in ultra-smart-pkg (RubyGems) (malicious package) - [MAL-2026-15806](https://insights.sbomify.com/MAL-2026-15806/): Malicious code in ultra-smart-hub (RubyGems) (malicious package) - [MAL-2026-15805](https://insights.sbomify.com/MAL-2026-15805/): Malicious code in ultra-sharp-kit (RubyGems) (malicious package) - [MAL-2026-15804](https://insights.sbomify.com/MAL-2026-15804/): Malicious code in ultra-safe-box (RubyGems) (malicious package) - [MAL-2026-15803](https://insights.sbomify.com/MAL-2026-15803/): Malicious code in ultra-quick-hub (RubyGems) (malicious package) - [MAL-2026-15802](https://insights.sbomify.com/MAL-2026-15802/): Malicious code in ultra-pure-mod (RubyGems) (malicious package) - [MAL-2026-15801](https://insights.sbomify.com/MAL-2026-15801/): Malicious code in ultra-pure-hub (RubyGems) (malicious package) - [MAL-2026-15800](https://insights.sbomify.com/MAL-2026-15800/): Malicious code in ultra-pro-tool (RubyGems) (malicious package) - [MAL-2026-1580](https://insights.sbomify.com/MAL-2026-1580/): Malicious code in nflx-release (npm) (malicious package) - [MAL-2026-158](https://insights.sbomify.com/MAL-2026-158/): Malicious code in timeout-ts (npm) (malicious package) - [MAL-2026-15799](https://insights.sbomify.com/MAL-2026-15799/): Malicious code in ultra-pro-pkg (RubyGems) (malicious package) - [MAL-2026-15798](https://insights.sbomify.com/MAL-2026-15798/): Malicious code in ultra-pro-kit (RubyGems) (malicious package) - [MAL-2026-15797](https://insights.sbomify.com/MAL-2026-15797/): Malicious code in ultra-max-sys (RubyGems) (malicious package) - [MAL-2026-15796](https://insights.sbomify.com/MAL-2026-15796/): Malicious code in ultra-max-pkg (RubyGems) (malicious package) - [MAL-2026-15795](https://insights.sbomify.com/MAL-2026-15795/): Malicious code in ultra-fast-rb (RubyGems) (malicious package) - [MAL-2026-15794](https://insights.sbomify.com/MAL-2026-15794/): Malicious code in ultra-fast-hub (RubyGems) (malicious package) - [MAL-2026-15793](https://insights.sbomify.com/MAL-2026-15793/): Malicious code in tiny-smart-sys (RubyGems) (malicious package) - [MAL-2026-15792](https://insights.sbomify.com/MAL-2026-15792/): Malicious code in tiny-smart-mod (RubyGems) (malicious package) - [MAL-2026-15791](https://insights.sbomify.com/MAL-2026-15791/): Malicious code in tiny-sharp-pkg (RubyGems) (malicious package) - [MAL-2026-15790](https://insights.sbomify.com/MAL-2026-15790/): Malicious code in tiny-safe-sys (RubyGems) (malicious package) - [MAL-2026-1579](https://insights.sbomify.com/MAL-2026-1579/): Malicious code in nf-cl-ls (npm) (malicious package) - [MAL-2026-15789](https://insights.sbomify.com/MAL-2026-15789/): Malicious code in tiny-quick-box (RubyGems) (malicious package) - [MAL-2026-15788](https://insights.sbomify.com/MAL-2026-15788/): Malicious code in tiny-pure-box (RubyGems) (malicious package) - [MAL-2026-15787](https://insights.sbomify.com/MAL-2026-15787/): Malicious code in tiny-pro-sys (RubyGems) (malicious package) - [MAL-2026-15786](https://insights.sbomify.com/MAL-2026-15786/): Malicious code in tiny-pro-rb (RubyGems) (malicious package) - [MAL-2026-15785](https://insights.sbomify.com/MAL-2026-15785/): Malicious code in tiny-pro-lib (RubyGems) (malicious package) - [MAL-2026-15784](https://insights.sbomify.com/MAL-2026-15784/): Malicious code in tiny-max-gem (RubyGems) (malicious package) - [MAL-2026-15783](https://insights.sbomify.com/MAL-2026-15783/): Malicious code in tiny-max-box (RubyGems) (malicious package) - [MAL-2026-15782](https://insights.sbomify.com/MAL-2026-15782/): Malicious code in super-sharp-sys (RubyGems) (malicious package) - [MAL-2026-15781](https://insights.sbomify.com/MAL-2026-15781/): Malicious code in super-sharp-lib (RubyGems) (malicious package) - [MAL-2026-15780](https://insights.sbomify.com/MAL-2026-15780/): Malicious code in super-quick-sys (RubyGems) (malicious package) - [MAL-2026-1578](https://insights.sbomify.com/MAL-2026-1578/): Malicious code in browser-gaming-client (npm) (malicious package) - [MAL-2026-15779](https://insights.sbomify.com/MAL-2026-15779/): Malicious code in super-quick-gem (RubyGems) (malicious package) - [MAL-2026-15778](https://insights.sbomify.com/MAL-2026-15778/): Malicious code in super-pure-rb (RubyGems) (malicious package) - [MAL-2026-15777](https://insights.sbomify.com/MAL-2026-15777/): Malicious code in super-pro-hub (RubyGems) (malicious package) - [MAL-2026-15776](https://insights.sbomify.com/MAL-2026-15776/): Malicious code in super-lite-hub (RubyGems) (malicious package) - [MAL-2026-15775](https://insights.sbomify.com/MAL-2026-15775/): Malicious code in piko-smart-sys (RubyGems) (malicious package) - [MAL-2026-15774](https://insights.sbomify.com/MAL-2026-15774/): Malicious code in piko-smart-pkg (RubyGems) (malicious package) - [MAL-2026-15773](https://insights.sbomify.com/MAL-2026-15773/): Malicious code in piko-sharp-sys (RubyGems) (malicious package) - [MAL-2026-15772](https://insights.sbomify.com/MAL-2026-15772/): Malicious code in piko-max-tool (RubyGems) (malicious package) - [MAL-2026-15771](https://insights.sbomify.com/MAL-2026-15771/): Malicious code in piko-max-gem (RubyGems) (malicious package) - [MAL-2026-15770](https://insights.sbomify.com/MAL-2026-15770/): Malicious code in piko-lite-mod (RubyGems) (malicious package) - [MAL-2026-1577](https://insights.sbomify.com/MAL-2026-1577/): Malicious code in ropie (PyPI) (malicious package) - [MAL-2026-15769](https://insights.sbomify.com/MAL-2026-15769/): Malicious code in piko-lite-gem (RubyGems) (malicious package) - [MAL-2026-15768](https://insights.sbomify.com/MAL-2026-15768/): Malicious code in piko-fast-rb (RubyGems) (malicious package) - [MAL-2026-15767](https://insights.sbomify.com/MAL-2026-15767/): Malicious code in piko-fast-gem (RubyGems) (malicious package) - [MAL-2026-15766](https://insights.sbomify.com/MAL-2026-15766/): Malicious code in piko-fast-box (RubyGems) (malicious package) - [MAL-2026-15765](https://insights.sbomify.com/MAL-2026-15765/): Malicious code in piko-clean-mod (RubyGems) (malicious package) - [MAL-2026-15764](https://insights.sbomify.com/MAL-2026-15764/): Malicious code in piko-clean-hub (RubyGems) (malicious package) - [MAL-2026-15763](https://insights.sbomify.com/MAL-2026-15763/): Malicious code in opentelemetry-exporter-otlp-http (RubyGems) (malicious package) - [MAL-2026-15762](https://insights.sbomify.com/MAL-2026-15762/): Malicious code in nano-smart-pkg (RubyGems) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2026/page/127/