# Vulnerabilities published in 2026 - [MAL-2026-15761](https://insights.sbomify.com/MAL-2026-15761/): Malicious code in nano-smart-gem (RubyGems) (malicious package) - [MAL-2026-15760](https://insights.sbomify.com/MAL-2026-15760/): Malicious code in nano-smart-box (RubyGems) (malicious package) - [MAL-2026-1576](https://insights.sbomify.com/MAL-2026-1576/): Malicious code in chai-as-constrained (npm) (malicious package) - [MAL-2026-15759](https://insights.sbomify.com/MAL-2026-15759/): Malicious code in nano-sharp-kit (RubyGems) (malicious package) - [MAL-2026-15758](https://insights.sbomify.com/MAL-2026-15758/): Malicious code in nano-safe-sys (RubyGems) (malicious package) - [MAL-2026-15757](https://insights.sbomify.com/MAL-2026-15757/): Malicious code in nano-quick-tool (RubyGems) (malicious package) - [MAL-2026-15756](https://insights.sbomify.com/MAL-2026-15756/): Malicious code in nano-quick-mod (RubyGems) (malicious package) - [MAL-2026-15755](https://insights.sbomify.com/MAL-2026-15755/): Malicious code in nano-quick-box (RubyGems) (malicious package) - [MAL-2026-15754](https://insights.sbomify.com/MAL-2026-15754/): Malicious code in nano-pure-tool (RubyGems) (malicious package) - [MAL-2026-15753](https://insights.sbomify.com/MAL-2026-15753/): Malicious code in nano-max-mod (RubyGems) (malicious package) - [MAL-2026-15752](https://insights.sbomify.com/MAL-2026-15752/): Malicious code in nano-max-box (RubyGems) (malicious package) - [MAL-2026-15751](https://insights.sbomify.com/MAL-2026-15751/): Malicious code in nano-fast-lib (RubyGems) (malicious package) - [MAL-2026-15750](https://insights.sbomify.com/MAL-2026-15750/): Malicious code in nano-clean-sys (RubyGems) (malicious package) - [MAL-2026-1575](https://insights.sbomify.com/MAL-2026-1575/): Malicious code in transform-typescript (npm) (malicious package) - [MAL-2026-15749](https://insights.sbomify.com/MAL-2026-15749/): Malicious code in mini-sharp-lib (RubyGems) (malicious package) - [MAL-2026-15748](https://insights.sbomify.com/MAL-2026-15748/): Malicious code in mini-sharp-kit (RubyGems) (malicious package) - [MAL-2026-15747](https://insights.sbomify.com/MAL-2026-15747/): Malicious code in mini-safe-mod (RubyGems) (malicious package) - [MAL-2026-15746](https://insights.sbomify.com/MAL-2026-15746/): Malicious code in mini-safe-lib (RubyGems) (malicious package) - [MAL-2026-15745](https://insights.sbomify.com/MAL-2026-15745/): Malicious code in mini-safe-gem (RubyGems) (malicious package) - [MAL-2026-15744](https://insights.sbomify.com/MAL-2026-15744/): Malicious code in mini-quick-pkg (RubyGems) (malicious package) - [MAL-2026-15743](https://insights.sbomify.com/MAL-2026-15743/): Malicious code in mini-pure-tool (RubyGems) (malicious package) - [MAL-2026-15742](https://insights.sbomify.com/MAL-2026-15742/): Malicious code in mini-pure-lib (RubyGems) (malicious package) - [MAL-2026-15741](https://insights.sbomify.com/MAL-2026-15741/): Malicious code in mini-max-gem (RubyGems) (malicious package) - [MAL-2026-15740](https://insights.sbomify.com/MAL-2026-15740/): Malicious code in mini-lite-rb (RubyGems) (malicious package) - [MAL-2026-1574](https://insights.sbomify.com/MAL-2026-1574/): Malicious code in transform-spread (npm) (malicious package) - [MAL-2026-15739](https://insights.sbomify.com/MAL-2026-15739/): Malicious code in mini-fast-lib (RubyGems) (malicious package) - [MAL-2026-15738](https://insights.sbomify.com/MAL-2026-15738/): Malicious code in mini-clean-sys (RubyGems) (malicious package) - [MAL-2026-15737](https://insights.sbomify.com/MAL-2026-15737/): Malicious code in micro-sharp-mod (RubyGems) (malicious package) - [MAL-2026-15736](https://insights.sbomify.com/MAL-2026-15736/): Malicious code in micro-sharp-kit (RubyGems) (malicious package) - [MAL-2026-15735](https://insights.sbomify.com/MAL-2026-15735/): Malicious code in micro-safe-tool (RubyGems) (malicious package) - [MAL-2026-15734](https://insights.sbomify.com/MAL-2026-15734/): Malicious code in micro-quick-box (RubyGems) (malicious package) - [MAL-2026-15733](https://insights.sbomify.com/MAL-2026-15733/): Malicious code in micro-pure-kit (RubyGems) (malicious package) - [MAL-2026-15732](https://insights.sbomify.com/MAL-2026-15732/): Malicious code in micro-max-rb (RubyGems) (malicious package) - [MAL-2026-15731](https://insights.sbomify.com/MAL-2026-15731/): Malicious code in micro-max-mod (RubyGems) (malicious package) - [MAL-2026-15730](https://insights.sbomify.com/MAL-2026-15730/): Malicious code in micro-max-hub (RubyGems) (malicious package) - [MAL-2026-1573](https://insights.sbomify.com/MAL-2026-1573/): Malicious code in transform-proto-to-assign (npm) (malicious package) - [MAL-2026-15729](https://insights.sbomify.com/MAL-2026-15729/): Malicious code in micro-lite-pkg (RubyGems) (malicious package) - [MAL-2026-15728](https://insights.sbomify.com/MAL-2026-15728/): Malicious code in micro-fast-mod (RubyGems) (malicious package) - [MAL-2026-15727](https://insights.sbomify.com/MAL-2026-15727/): Malicious code in micro-fast-hub (RubyGems) (malicious package) - [MAL-2026-15726](https://insights.sbomify.com/MAL-2026-15726/): Malicious code in micro-clean-gem (RubyGems) (malicious package) - [MAL-2026-15725](https://insights.sbomify.com/MAL-2026-15725/): Malicious code in mega-smart-tool (RubyGems) (malicious package) - [MAL-2026-15724](https://insights.sbomify.com/MAL-2026-15724/): Malicious code in mega-smart-sys (RubyGems) (malicious package) - [MAL-2026-15723](https://insights.sbomify.com/MAL-2026-15723/): Malicious code in mega-smart-pkg (RubyGems) (malicious package) - [MAL-2026-15722](https://insights.sbomify.com/MAL-2026-15722/): Malicious code in mega-sharp-hub (RubyGems) (malicious package) - [MAL-2026-15721](https://insights.sbomify.com/MAL-2026-15721/): Malicious code in mega-safe-pkg (RubyGems) (malicious package) - [MAL-2026-15720](https://insights.sbomify.com/MAL-2026-15720/): Malicious code in mega-safe-hub (RubyGems) (malicious package) - [MAL-2026-1572](https://insights.sbomify.com/MAL-2026-1572/): Malicious code in transform-new-target (npm) (malicious package) - [MAL-2026-15719](https://insights.sbomify.com/MAL-2026-15719/): Malicious code in mega-quick-rb (RubyGems) (malicious package) - [MAL-2026-15718](https://insights.sbomify.com/MAL-2026-15718/): Malicious code in mega-pure-tool (RubyGems) (malicious package) - [MAL-2026-15717](https://insights.sbomify.com/MAL-2026-15717/): Malicious code in mega-pure-gem (RubyGems) (malicious package) - [MAL-2026-15716](https://insights.sbomify.com/MAL-2026-15716/): Malicious code in mega-pro-kit (RubyGems) (malicious package) - [MAL-2026-15715](https://insights.sbomify.com/MAL-2026-15715/): Malicious code in mega-pro-box (RubyGems) (malicious package) - [MAL-2026-15714](https://insights.sbomify.com/MAL-2026-15714/): Malicious code in mega-lite-kit (RubyGems) (malicious package) - [MAL-2026-15713](https://insights.sbomify.com/MAL-2026-15713/): Malicious code in mega-fast-sys (RubyGems) (malicious package) - [MAL-2026-15712](https://insights.sbomify.com/MAL-2026-15712/): Malicious code in mega-clean-sys (RubyGems) (malicious package) - [MAL-2026-15711](https://insights.sbomify.com/MAL-2026-15711/): Malicious code in hyper-smart-kit (RubyGems) (malicious package) - [MAL-2026-15710](https://insights.sbomify.com/MAL-2026-15710/): Malicious code in hyper-sharp-lib (RubyGems) (malicious package) - [MAL-2026-1571](https://insights.sbomify.com/MAL-2026-1571/): Malicious code in transform-modules-systemjs (npm) (malicious package) - [MAL-2026-15709](https://insights.sbomify.com/MAL-2026-15709/): Malicious code in hyper-sharp-box (RubyGems) (malicious package) - [MAL-2026-15708](https://insights.sbomify.com/MAL-2026-15708/): Malicious code in hyper-safe-kit (RubyGems) (malicious package) - [MAL-2026-15707](https://insights.sbomify.com/MAL-2026-15707/): Malicious code in hyper-safe-hub (RubyGems) (malicious package) - [MAL-2026-15706](https://insights.sbomify.com/MAL-2026-15706/): Malicious code in hyper-quick-kit (RubyGems) (malicious package) - [MAL-2026-15705](https://insights.sbomify.com/MAL-2026-15705/): Malicious code in hyper-pro-kit (RubyGems) (malicious package) - [MAL-2026-15704](https://insights.sbomify.com/MAL-2026-15704/): Malicious code in hyper-lite-tool (RubyGems) (malicious package) - [MAL-2026-15703](https://insights.sbomify.com/MAL-2026-15703/): Malicious code in giga-sharp-tool (RubyGems) (malicious package) - [MAL-2026-15702](https://insights.sbomify.com/MAL-2026-15702/): Malicious code in giga-safe-hub (RubyGems) (malicious package) - [MAL-2026-15701](https://insights.sbomify.com/MAL-2026-15701/): Malicious code in giga-quick-rb (RubyGems) (malicious package) - [MAL-2026-15700](https://insights.sbomify.com/MAL-2026-15700/): Malicious code in giga-pure-kit (RubyGems) (malicious package) - [MAL-2026-1570](https://insights.sbomify.com/MAL-2026-1570/): Malicious code in transform-member-expression-literals (npm) (malicious package) - [MAL-2026-157](https://insights.sbomify.com/MAL-2026-157/): Malicious code in test-thegenetic-module (npm) (malicious package) - [MAL-2026-15699](https://insights.sbomify.com/MAL-2026-15699/): Malicious code in giga-max-mod (RubyGems) (malicious package) - [MAL-2026-15698](https://insights.sbomify.com/MAL-2026-15698/): Malicious code in giga-max-kit (RubyGems) (malicious package) - [MAL-2026-15697](https://insights.sbomify.com/MAL-2026-15697/): Malicious code in giga-clean-pkg (RubyGems) (malicious package) - [MAL-2026-15696](https://insights.sbomify.com/MAL-2026-15696/): Malicious code in giga-clean-kit (RubyGems) (malicious package) - [MAL-2026-15695](https://insights.sbomify.com/MAL-2026-15695/): Malicious code in giga-clean-box (RubyGems) (malicious package) - [MAL-2026-15694](https://insights.sbomify.com/MAL-2026-15694/): Malicious code in circle-w3s (RubyGems) (malicious package) - [MAL-2026-15693](https://insights.sbomify.com/MAL-2026-15693/): Malicious code in py-devoli-common (PyPI) (malicious package) - [MAL-2026-15692](https://insights.sbomify.com/MAL-2026-15692/): Malicious code in unifi-credential-server (npm) (malicious package) - [MAL-2026-15691](https://insights.sbomify.com/MAL-2026-15691/): Malicious code in react-hook-doms (npm) (malicious package) - [MAL-2026-15690](https://insights.sbomify.com/MAL-2026-15690/): Malicious code in mongosooe (npm) (malicious package) - [MAL-2026-1569](https://insights.sbomify.com/MAL-2026-1569/): Malicious code in transform-json-strings (npm) (malicious package) - [MAL-2026-15689](https://insights.sbomify.com/MAL-2026-15689/): Malicious code in lil-swisgom-hlepers (npm) (malicious package) - [MAL-2026-15688](https://insights.sbomify.com/MAL-2026-15688/): Malicious code in leaflet-opencage-geocoding (npm) (malicious package) - [MAL-2026-15687](https://insights.sbomify.com/MAL-2026-15687/): Malicious code in @yuva2210/okx-poc-rce-impact (npm) (malicious package) - [MAL-2026-15686](https://insights.sbomify.com/MAL-2026-15686/): Malicious code in @yuva2210/htx-poc-skills-rce (npm) (malicious package) - [MAL-2026-15685](https://insights.sbomify.com/MAL-2026-15685/): Malicious code in @x-team/strapi (npm) (malicious package) - [MAL-2026-15684](https://insights.sbomify.com/MAL-2026-15684/): Malicious code in @pimy-b2cweb/common (npm) (malicious package) - [MAL-2026-15683](https://insights.sbomify.com/MAL-2026-15683/): Malicious code in @pimy-b2cweb/apiclient-common (npm) (malicious package) - [MAL-2026-15682](https://insights.sbomify.com/MAL-2026-15682/): Malicious code in @ice-trade-components/common (npm) (malicious package) - [MAL-2026-15681](https://insights.sbomify.com/MAL-2026-15681/): Malicious code in @grab-food/order-sdk-web (npm) (malicious package) - [MAL-2026-15680](https://insights.sbomify.com/MAL-2026-15680/): Malicious code in @cawraytestorg/packagetest2 (npm) (malicious package) - [MAL-2026-1568](https://insights.sbomify.com/MAL-2026-1568/): Malicious code in transform-inline-consecutive-adds (npm) (malicious package) - [MAL-2026-15679](https://insights.sbomify.com/MAL-2026-15679/): Malicious code in @bpa-internal/bpa-utils (npm) (malicious package) - [MAL-2026-15678](https://insights.sbomify.com/MAL-2026-15678/): Malicious code in @bpa-internal/bpa-types (npm) (malicious package) - [MAL-2026-15677](https://insights.sbomify.com/MAL-2026-15677/): Malicious code in @bpa-internal/bpa-common (npm) (malicious package) - [MAL-2026-15676](https://insights.sbomify.com/MAL-2026-15676/): Malicious code in @bpa-internal/bpa-auth (npm) (malicious package) - [MAL-2026-15675](https://insights.sbomify.com/MAL-2026-15675/): Malicious code in @b2b-frontend/store (npm) (malicious package) - [MAL-2026-15674](https://insights.sbomify.com/MAL-2026-15674/): Malicious code in bamru (npm) (malicious package) - [MAL-2026-15673](https://insights.sbomify.com/MAL-2026-15673/): Malicious code in fuels-versions (npm) (malicious package) - [MAL-2026-15672](https://insights.sbomify.com/MAL-2026-15672/): Malicious code in randomunblockedwebsite (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2026/page/128/