# Vulnerabilities published in 2026 - [MAL-2026-15491](https://insights.sbomify.com/MAL-2026-15491/): Malicious code in eip712-lite (npm) (malicious package) - [MAL-2026-15490](https://insights.sbomify.com/MAL-2026-15490/): Malicious code in clmm-fee-audit (npm) (malicious package) - [MAL-2026-1549](https://insights.sbomify.com/MAL-2026-1549/): Malicious code in syntax-do-expressions (npm) (malicious package) - [MAL-2026-15489](https://insights.sbomify.com/MAL-2026-15489/): Malicious code in borsh-lite (npm) (malicious package) - [MAL-2026-15488](https://insights.sbomify.com/MAL-2026-15488/): Malicious code in calcboxlite (PyPI) (malicious package) - [MAL-2026-15487](https://insights.sbomify.com/MAL-2026-15487/): Malicious code in waxed-slightly-weathered-cut-copper-stairs-vxn9jfje (npm) (malicious package) - [MAL-2026-15486](https://insights.sbomify.com/MAL-2026-15486/): Malicious code in waxed-slightly-weathered-cut-copper-stairs-tyhez6rf (npm) (malicious package) - [MAL-2026-15485](https://insights.sbomify.com/MAL-2026-15485/): Malicious code in waxed-slightly-weathered-cut-copper-stairs-t8vrii0t (npm) (malicious package) - [MAL-2026-15484](https://insights.sbomify.com/MAL-2026-15484/): Malicious code in waxed-slightly-weathered-cut-copper-stairs-rsq09wdf (npm) (malicious package) - [MAL-2026-15483](https://insights.sbomify.com/MAL-2026-15483/): Malicious code in waxed-slightly-weathered-cut-copper-stairs-q0j9jdqv (npm) (malicious package) - [MAL-2026-15482](https://insights.sbomify.com/MAL-2026-15482/): Malicious code in waxed-slightly-weathered-cut-copper-stairs-kg8byhpv (npm) (malicious package) - [MAL-2026-15481](https://insights.sbomify.com/MAL-2026-15481/): Malicious code in waxed-slightly-weathered-cut-copper-stairs-f90oqwwm (npm) (malicious package) - [MAL-2026-15480](https://insights.sbomify.com/MAL-2026-15480/): Malicious code in waxed-slightly-weathered-cut-copper-stairs-e7jj8nht (npm) (malicious package) - [MAL-2026-1548](https://insights.sbomify.com/MAL-2026-1548/): Malicious code in syntax-class-constructor-call (npm) (malicious package) - [MAL-2026-15479](https://insights.sbomify.com/MAL-2026-15479/): Malicious code in waxed-slightly-weathered-cut-copper-stairs-cg2nzejt (npm) (malicious package) - [MAL-2026-15478](https://insights.sbomify.com/MAL-2026-15478/): Malicious code in waxed-slightly-weathered-cut-copper-stairs-at3x6r0d (npm) (malicious package) - [MAL-2026-15477](https://insights.sbomify.com/MAL-2026-15477/): Malicious code in waxed-slightly-weathered-cut-copper-stairs-ah9dirwo (npm) (malicious package) - [MAL-2026-15476](https://insights.sbomify.com/MAL-2026-15476/): Malicious code in waxed-slightly-weathered-cut-copper-stairs-7m6xp6w6 (npm) (malicious package) - [MAL-2026-15475](https://insights.sbomify.com/MAL-2026-15475/): Malicious code in waxed-slightly-weathered-cut-copper-stairs-3xt74ldh (npm) (malicious package) - [MAL-2026-15474](https://insights.sbomify.com/MAL-2026-15474/): Malicious code in secure-test-browser-zyyxnta9 (npm) (malicious package) - [MAL-2026-15473](https://insights.sbomify.com/MAL-2026-15473/): Malicious code in secure-test-browser-zystijl5 (npm) (malicious package) - [MAL-2026-15472](https://insights.sbomify.com/MAL-2026-15472/): Malicious code in secure-test-browser-zvl6tsad (npm) (malicious package) - [MAL-2026-15471](https://insights.sbomify.com/MAL-2026-15471/): Malicious code in secure-test-browser-zufp4hzx (npm) (malicious package) - [MAL-2026-15470](https://insights.sbomify.com/MAL-2026-15470/): Malicious code in secure-test-browser-znrlknt8 (npm) (malicious package) - [MAL-2026-1547](https://insights.sbomify.com/MAL-2026-1547/): Malicious code in pear-wrk-wdk (npm) (malicious package) - [MAL-2026-15469](https://insights.sbomify.com/MAL-2026-15469/): Malicious code in secure-test-browser-zmhkw0mg (npm) (malicious package) - [MAL-2026-15468](https://insights.sbomify.com/MAL-2026-15468/): Malicious code in secure-test-browser-zbkz03dn (npm) (malicious package) - [MAL-2026-15467](https://insights.sbomify.com/MAL-2026-15467/): Malicious code in secure-test-browser-z7qi6ys2 (npm) (malicious package) - [MAL-2026-15466](https://insights.sbomify.com/MAL-2026-15466/): Malicious code in secure-test-browser-z7dg2pww (npm) (malicious package) - [MAL-2026-15465](https://insights.sbomify.com/MAL-2026-15465/): Malicious code in secure-test-browser-z6d4ruii (npm) (malicious package) - [MAL-2026-15464](https://insights.sbomify.com/MAL-2026-15464/): Malicious code in secure-test-browser-z5stq4b0 (npm) (malicious package) - [MAL-2026-15463](https://insights.sbomify.com/MAL-2026-15463/): Malicious code in secure-test-browser-z2j7z8ae (npm) (malicious package) - [MAL-2026-15462](https://insights.sbomify.com/MAL-2026-15462/): Malicious code in secure-test-browser-yyh15o1o (npm) (malicious package) - [MAL-2026-15461](https://insights.sbomify.com/MAL-2026-15461/): Malicious code in secure-test-browser-ypovha9r (npm) (malicious package) - [MAL-2026-15460](https://insights.sbomify.com/MAL-2026-15460/): Malicious code in secure-test-browser-yp88o07w (npm) (malicious package) - [MAL-2026-1546](https://insights.sbomify.com/MAL-2026-1546/): Malicious code in dazaar-payment (npm) (malicious package) - [MAL-2026-15459](https://insights.sbomify.com/MAL-2026-15459/): Malicious code in secure-test-browser-y85jryx0 (npm) (malicious package) - [MAL-2026-15458](https://insights.sbomify.com/MAL-2026-15458/): Malicious code in secure-test-browser-y76q2hho (npm) (malicious package) - [MAL-2026-15457](https://insights.sbomify.com/MAL-2026-15457/): Malicious code in secure-test-browser-y6f58a5o (npm) (malicious package) - [MAL-2026-15456](https://insights.sbomify.com/MAL-2026-15456/): Malicious code in secure-test-browser-y4yd7ndu (npm) (malicious package) - [MAL-2026-15455](https://insights.sbomify.com/MAL-2026-15455/): Malicious code in secure-test-browser-xynt39lg (npm) (malicious package) - [MAL-2026-15454](https://insights.sbomify.com/MAL-2026-15454/): Malicious code in secure-test-browser-xteou3v8 (npm) (malicious package) - [MAL-2026-15453](https://insights.sbomify.com/MAL-2026-15453/): Malicious code in secure-test-browser-xob8el1r (npm) (malicious package) - [MAL-2026-15452](https://insights.sbomify.com/MAL-2026-15452/): Malicious code in secure-test-browser-xnhyannw (npm) (malicious package) - [MAL-2026-15451](https://insights.sbomify.com/MAL-2026-15451/): Malicious code in secure-test-browser-xcx2boj2 (npm) (malicious package) - [MAL-2026-15450](https://insights.sbomify.com/MAL-2026-15450/): Malicious code in secure-test-browser-x2k6m2im (npm) (malicious package) - [MAL-2026-1545](https://insights.sbomify.com/MAL-2026-1545/): Malicious code in dazaar-cli (npm) (malicious package) - [MAL-2026-15449](https://insights.sbomify.com/MAL-2026-15449/): Malicious code in secure-test-browser-x1a67wby (npm) (malicious package) - [MAL-2026-15448](https://insights.sbomify.com/MAL-2026-15448/): Malicious code in secure-test-browser-wrbb4ntb (npm) (malicious package) - [MAL-2026-15447](https://insights.sbomify.com/MAL-2026-15447/): Malicious code in secure-test-browser-wctt1ocx (npm) (malicious package) - [MAL-2026-15446](https://insights.sbomify.com/MAL-2026-15446/): Malicious code in secure-test-browser-w3hnz5rz (npm) (malicious package) - [MAL-2026-15445](https://insights.sbomify.com/MAL-2026-15445/): Malicious code in secure-test-browser-vixx0js1 (npm) (malicious package) - [MAL-2026-15444](https://insights.sbomify.com/MAL-2026-15444/): Malicious code in secure-test-browser-vf21r2kh (npm) (malicious package) - [MAL-2026-15443](https://insights.sbomify.com/MAL-2026-15443/): Malicious code in secure-test-browser-vd16ucb8 (npm) (malicious package) - [MAL-2026-15442](https://insights.sbomify.com/MAL-2026-15442/): Malicious code in secure-test-browser-v1ll4zdk (npm) (malicious package) - [MAL-2026-15441](https://insights.sbomify.com/MAL-2026-15441/): Malicious code in secure-test-browser-uwydfkra (npm) (malicious package) - [MAL-2026-15440](https://insights.sbomify.com/MAL-2026-15440/): Malicious code in secure-test-browser-us4fh8cc (npm) (malicious package) - [MAL-2026-1544](https://insights.sbomify.com/MAL-2026-1544/): Malicious code in rowrap (PyPI) (malicious package) - [MAL-2026-15439](https://insights.sbomify.com/MAL-2026-15439/): Malicious code in secure-test-browser-uoi8lnoc (npm) (malicious package) - [MAL-2026-15438](https://insights.sbomify.com/MAL-2026-15438/): Malicious code in secure-test-browser-umhcq9s5 (npm) (malicious package) - [MAL-2026-15437](https://insights.sbomify.com/MAL-2026-15437/): Malicious code in secure-test-browser-ujmcmke5 (npm) (malicious package) - [MAL-2026-15436](https://insights.sbomify.com/MAL-2026-15436/): Malicious code in secure-test-browser-ui1d892v (npm) (malicious package) - [MAL-2026-15435](https://insights.sbomify.com/MAL-2026-15435/): Malicious code in secure-test-browser-uhdrf7v4 (npm) (malicious package) - [MAL-2026-15434](https://insights.sbomify.com/MAL-2026-15434/): Malicious code in secure-test-browser-ude9srx4 (npm) (malicious package) - [MAL-2026-15433](https://insights.sbomify.com/MAL-2026-15433/): Malicious code in secure-test-browser-tvzkbkqw (npm) (malicious package) - [MAL-2026-15432](https://insights.sbomify.com/MAL-2026-15432/): Malicious code in secure-test-browser-tln381c3 (npm) (malicious package) - [MAL-2026-15431](https://insights.sbomify.com/MAL-2026-15431/): Malicious code in secure-test-browser-tiig2hex (npm) (malicious package) - [MAL-2026-15430](https://insights.sbomify.com/MAL-2026-15430/): Malicious code in secure-test-browser-t7a9jtay (npm) (malicious package) - [MAL-2026-1543](https://insights.sbomify.com/MAL-2026-1543/): Malicious code in aniresolve (PyPI) (malicious package) - [MAL-2026-15429](https://insights.sbomify.com/MAL-2026-15429/): Malicious code in secure-test-browser-t2i4qcoi (npm) (malicious package) - [MAL-2026-15428](https://insights.sbomify.com/MAL-2026-15428/): Malicious code in secure-test-browser-srukyz7a (npm) (malicious package) - [MAL-2026-15427](https://insights.sbomify.com/MAL-2026-15427/): Malicious code in secure-test-browser-sq08t0fx (npm) (malicious package) - [MAL-2026-15426](https://insights.sbomify.com/MAL-2026-15426/): Malicious code in secure-test-browser-sbfd7kfx (npm) (malicious package) - [MAL-2026-15425](https://insights.sbomify.com/MAL-2026-15425/): Malicious code in secure-test-browser-s78uli7l (npm) (malicious package) - [MAL-2026-15424](https://insights.sbomify.com/MAL-2026-15424/): Malicious code in secure-test-browser-s55u3gg6 (npm) (malicious package) - [MAL-2026-15423](https://insights.sbomify.com/MAL-2026-15423/): Malicious code in secure-test-browser-rwlrhorb (npm) (malicious package) - [MAL-2026-15422](https://insights.sbomify.com/MAL-2026-15422/): Malicious code in secure-test-browser-rryi25y4 (npm) (malicious package) - [MAL-2026-15421](https://insights.sbomify.com/MAL-2026-15421/): Malicious code in secure-test-browser-rnvmkpow (npm) (malicious package) - [MAL-2026-15420](https://insights.sbomify.com/MAL-2026-15420/): Malicious code in secure-test-browser-rkt8e6l7 (npm) (malicious package) - [MAL-2026-1542](https://insights.sbomify.com/MAL-2026-1542/): Malicious code in bugbounty-test-123 (npm) (malicious package) - [MAL-2026-15419](https://insights.sbomify.com/MAL-2026-15419/): Malicious code in secure-test-browser-rk9zd7ax (npm) (malicious package) - [MAL-2026-15418](https://insights.sbomify.com/MAL-2026-15418/): Malicious code in secure-test-browser-rgoovozu (npm) (malicious package) - [MAL-2026-15417](https://insights.sbomify.com/MAL-2026-15417/): Malicious code in secure-test-browser-rccbxvt8 (npm) (malicious package) - [MAL-2026-15416](https://insights.sbomify.com/MAL-2026-15416/): Malicious code in secure-test-browser-r270knja (npm) (malicious package) - [MAL-2026-15415](https://insights.sbomify.com/MAL-2026-15415/): Malicious code in secure-test-browser-qq9c659k (npm) (malicious package) - [MAL-2026-15414](https://insights.sbomify.com/MAL-2026-15414/): Malicious code in secure-test-browser-q73s2nfh (npm) (malicious package) - [MAL-2026-15413](https://insights.sbomify.com/MAL-2026-15413/): Malicious code in secure-test-browser-q0mgniqs (npm) (malicious package) - [MAL-2026-15412](https://insights.sbomify.com/MAL-2026-15412/): Malicious code in secure-test-browser-pw5nxdep (npm) (malicious package) - [MAL-2026-15411](https://insights.sbomify.com/MAL-2026-15411/): Malicious code in secure-test-browser-puq5o3yn (npm) (malicious package) - [MAL-2026-15410](https://insights.sbomify.com/MAL-2026-15410/): Malicious code in secure-test-browser-pdsbchpf (npm) (malicious package) - [MAL-2026-1541](https://insights.sbomify.com/MAL-2026-1541/): Malicious code in urql-introspection (npm) (malicious package) - [MAL-2026-15409](https://insights.sbomify.com/MAL-2026-15409/): Malicious code in secure-test-browser-p9cmgd4z (npm) (malicious package) - [MAL-2026-15408](https://insights.sbomify.com/MAL-2026-15408/): Malicious code in secure-test-browser-p8ocawid (npm) (malicious package) - [MAL-2026-15407](https://insights.sbomify.com/MAL-2026-15407/): Malicious code in secure-test-browser-ouqvph7x (npm) (malicious package) - [MAL-2026-15406](https://insights.sbomify.com/MAL-2026-15406/): Malicious code in secure-test-browser-opnxdwiy (npm) (malicious package) - [MAL-2026-15405](https://insights.sbomify.com/MAL-2026-15405/): Malicious code in secure-test-browser-ob8ovb9g (npm) (malicious package) - [MAL-2026-15404](https://insights.sbomify.com/MAL-2026-15404/): Malicious code in secure-test-browser-o87p0cmc (npm) (malicious package) - [MAL-2026-15403](https://insights.sbomify.com/MAL-2026-15403/): Malicious code in secure-test-browser-o6h9f5zo (npm) (malicious package) - [MAL-2026-15402](https://insights.sbomify.com/MAL-2026-15402/): Malicious code in secure-test-browser-o5kevayg (npm) (malicious package) - [MAL-2026-15401](https://insights.sbomify.com/MAL-2026-15401/): Malicious code in secure-test-browser-nyiv1der (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2026/page/131/