# Vulnerabilities published in 2026 - [MAL-2026-15400](https://insights.sbomify.com/MAL-2026-15400/): Malicious code in secure-test-browser-nxottb5j (npm) (malicious package) - [MAL-2026-1540](https://insights.sbomify.com/MAL-2026-1540/): Malicious code in typescript-type-graphql (npm) (malicious package) - [MAL-2026-154](https://insights.sbomify.com/MAL-2026-154/): Malicious code in ncodeauth (npm) (malicious package) - [MAL-2026-15399](https://insights.sbomify.com/MAL-2026-15399/): Malicious code in secure-test-browser-nve3ll3e (npm) (malicious package) - [MAL-2026-15398](https://insights.sbomify.com/MAL-2026-15398/): Malicious code in secure-test-browser-nuoqdbij (npm) (malicious package) - [MAL-2026-15397](https://insights.sbomify.com/MAL-2026-15397/): Malicious code in secure-test-browser-nu4lhvyb (npm) (malicious package) - [MAL-2026-15396](https://insights.sbomify.com/MAL-2026-15396/): Malicious code in secure-test-browser-nqhmg3dh (npm) (malicious package) - [MAL-2026-15395](https://insights.sbomify.com/MAL-2026-15395/): Malicious code in secure-test-browser-njhgckg2 (npm) (malicious package) - [MAL-2026-15394](https://insights.sbomify.com/MAL-2026-15394/): Malicious code in secure-test-browser-n115xjja (npm) (malicious package) - [MAL-2026-15393](https://insights.sbomify.com/MAL-2026-15393/): Malicious code in secure-test-browser-mulk8a4f (npm) (malicious package) - [MAL-2026-15392](https://insights.sbomify.com/MAL-2026-15392/): Malicious code in secure-test-browser-mg7243ns (npm) (malicious package) - [MAL-2026-15391](https://insights.sbomify.com/MAL-2026-15391/): Malicious code in secure-test-browser-mevcta3b (npm) (malicious package) - [MAL-2026-15390](https://insights.sbomify.com/MAL-2026-15390/): Malicious code in secure-test-browser-mcpdx7d2 (npm) (malicious package) - [MAL-2026-1539](https://insights.sbomify.com/MAL-2026-1539/): Malicious code in relay-optimizer-plugin (npm) (malicious package) - [MAL-2026-15389](https://insights.sbomify.com/MAL-2026-15389/): Malicious code in secure-test-browser-m3g9i71p (npm) (malicious package) - [MAL-2026-15388](https://insights.sbomify.com/MAL-2026-15388/): Malicious code in secure-test-browser-lyoqpvaa (npm) (malicious package) - [MAL-2026-15387](https://insights.sbomify.com/MAL-2026-15387/): Malicious code in secure-test-browser-lu4lkn26 (npm) (malicious package) - [MAL-2026-15386](https://insights.sbomify.com/MAL-2026-15386/): Malicious code in secure-test-browser-lqc3kubo (npm) (malicious package) - [MAL-2026-15385](https://insights.sbomify.com/MAL-2026-15385/): Malicious code in secure-test-browser-ljzgz4nz (npm) (malicious package) - [MAL-2026-15384](https://insights.sbomify.com/MAL-2026-15384/): Malicious code in secure-test-browser-lhf0jvj4 (npm) (malicious package) - [MAL-2026-15383](https://insights.sbomify.com/MAL-2026-15383/): Malicious code in secure-test-browser-lb0mxh9x (npm) (malicious package) - [MAL-2026-15382](https://insights.sbomify.com/MAL-2026-15382/): Malicious code in secure-test-browser-l8ruvmc8 (npm) (malicious package) - [MAL-2026-15381](https://insights.sbomify.com/MAL-2026-15381/): Malicious code in secure-test-browser-l8clykly (npm) (malicious package) - [MAL-2026-15380](https://insights.sbomify.com/MAL-2026-15380/): Malicious code in secure-test-browser-l78cgbss (npm) (malicious package) - [MAL-2026-1538](https://insights.sbomify.com/MAL-2026-1538/): Malicious code in vue-scoped-css (npm) (malicious package) - [MAL-2026-15379](https://insights.sbomify.com/MAL-2026-15379/): Malicious code in secure-test-browser-l5js3w12 (npm) (malicious package) - [MAL-2026-15378](https://insights.sbomify.com/MAL-2026-15378/): Malicious code in secure-test-browser-kp4pxm1b (npm) (malicious package) - [MAL-2026-15377](https://insights.sbomify.com/MAL-2026-15377/): Malicious code in secure-test-browser-knr23kp7 (npm) (malicious package) - [MAL-2026-15376](https://insights.sbomify.com/MAL-2026-15376/): Malicious code in secure-test-browser-khflxpz7 (npm) (malicious package) - [MAL-2026-15375](https://insights.sbomify.com/MAL-2026-15375/): Malicious code in secure-test-browser-kec5c73l (npm) (malicious package) - [MAL-2026-15374](https://insights.sbomify.com/MAL-2026-15374/): Malicious code in secure-test-browser-kdfmv2fs (npm) (malicious package) - [MAL-2026-15373](https://insights.sbomify.com/MAL-2026-15373/): Malicious code in secure-test-browser-k866lkga (npm) (malicious package) - [MAL-2026-15372](https://insights.sbomify.com/MAL-2026-15372/): Malicious code in secure-test-browser-jxcnispl (npm) (malicious package) - [MAL-2026-15371](https://insights.sbomify.com/MAL-2026-15371/): Malicious code in secure-test-browser-jo8mjqxy (npm) (malicious package) - [MAL-2026-15370](https://insights.sbomify.com/MAL-2026-15370/): Malicious code in secure-test-browser-jiyi62e9 (npm) (malicious package) - [MAL-2026-1537](https://insights.sbomify.com/MAL-2026-1537/): Malicious code in typescript-rtk-query (npm) (malicious package) - [MAL-2026-15369](https://insights.sbomify.com/MAL-2026-15369/): Malicious code in secure-test-browser-jau0u06f (npm) (malicious package) - [MAL-2026-15368](https://insights.sbomify.com/MAL-2026-15368/): Malicious code in secure-test-browser-j8hvv68h (npm) (malicious package) - [MAL-2026-15367](https://insights.sbomify.com/MAL-2026-15367/): Malicious code in secure-test-browser-j60bbhhk (npm) (malicious package) - [MAL-2026-15366](https://insights.sbomify.com/MAL-2026-15366/): Malicious code in secure-test-browser-izxyw11l (npm) (malicious package) - [MAL-2026-15365](https://insights.sbomify.com/MAL-2026-15365/): Malicious code in secure-test-browser-iy9s690g (npm) (malicious package) - [MAL-2026-15364](https://insights.sbomify.com/MAL-2026-15364/): Malicious code in secure-test-browser-ipq1kljp (npm) (malicious package) - [MAL-2026-15363](https://insights.sbomify.com/MAL-2026-15363/): Malicious code in secure-test-browser-iny4wirp (npm) (malicious package) - [MAL-2026-15362](https://insights.sbomify.com/MAL-2026-15362/): Malicious code in secure-test-browser-inakf617 (npm) (malicious package) - [MAL-2026-15361](https://insights.sbomify.com/MAL-2026-15361/): Malicious code in secure-test-browser-ig1r2teb (npm) (malicious package) - [MAL-2026-15360](https://insights.sbomify.com/MAL-2026-15360/): Malicious code in secure-test-browser-ifgfdw9m (npm) (malicious package) - [MAL-2026-1536](https://insights.sbomify.com/MAL-2026-1536/): Malicious code in typescript-resolvers (npm) (malicious package) - [MAL-2026-15359](https://insights.sbomify.com/MAL-2026-15359/): Malicious code in secure-test-browser-i1f7ingl (npm) (malicious package) - [MAL-2026-15358](https://insights.sbomify.com/MAL-2026-15358/): Malicious code in secure-test-browser-hyowq23e (npm) (malicious package) - [MAL-2026-15357](https://insights.sbomify.com/MAL-2026-15357/): Malicious code in secure-test-browser-hy4udrjc (npm) (malicious package) - [MAL-2026-15356](https://insights.sbomify.com/MAL-2026-15356/): Malicious code in secure-test-browser-hxytxlf0 (npm) (malicious package) - [MAL-2026-15355](https://insights.sbomify.com/MAL-2026-15355/): Malicious code in secure-test-browser-hu55z8cs (npm) (malicious package) - [MAL-2026-15354](https://insights.sbomify.com/MAL-2026-15354/): Malicious code in secure-test-browser-hgqmatd7 (npm) (malicious package) - [MAL-2026-15353](https://insights.sbomify.com/MAL-2026-15353/): Malicious code in secure-test-browser-h3vxp8o4 (npm) (malicious package) - [MAL-2026-15352](https://insights.sbomify.com/MAL-2026-15352/): Malicious code in secure-test-browser-gth8e4pu (npm) (malicious package) - [MAL-2026-15351](https://insights.sbomify.com/MAL-2026-15351/): Malicious code in secure-test-browser-ggbh6tng (npm) (malicious package) - [MAL-2026-15350](https://insights.sbomify.com/MAL-2026-15350/): Malicious code in secure-test-browser-gcaoki0c (npm) (malicious package) - [MAL-2026-1535](https://insights.sbomify.com/MAL-2026-1535/): Malicious code in transform-dev-warning (npm) (malicious package) - [MAL-2026-15349](https://insights.sbomify.com/MAL-2026-15349/): Malicious code in secure-test-browser-gbzem94w (npm) (malicious package) - [MAL-2026-15348](https://insights.sbomify.com/MAL-2026-15348/): Malicious code in secure-test-browser-garuibak (npm) (malicious package) - [MAL-2026-15347](https://insights.sbomify.com/MAL-2026-15347/): Malicious code in secure-test-browser-g3ptxefk (npm) (malicious package) - [MAL-2026-15346](https://insights.sbomify.com/MAL-2026-15346/): Malicious code in secure-test-browser-folaacmo (npm) (malicious package) - [MAL-2026-15345](https://insights.sbomify.com/MAL-2026-15345/): Malicious code in secure-test-browser-fnv4nx5h (npm) (malicious package) - [MAL-2026-15344](https://insights.sbomify.com/MAL-2026-15344/): Malicious code in secure-test-browser-fndndxw5 (npm) (malicious package) - [MAL-2026-15343](https://insights.sbomify.com/MAL-2026-15343/): Malicious code in secure-test-browser-fmbp7grs (npm) (malicious package) - [MAL-2026-15342](https://insights.sbomify.com/MAL-2026-15342/): Malicious code in secure-test-browser-fl9ivf6p (npm) (malicious package) - [MAL-2026-15341](https://insights.sbomify.com/MAL-2026-15341/): Malicious code in secure-test-browser-fb1mhg79 (npm) (malicious package) - [MAL-2026-15340](https://insights.sbomify.com/MAL-2026-15340/): Malicious code in secure-test-browser-f0dzh835 (npm) (malicious package) - [MAL-2026-1534](https://insights.sbomify.com/MAL-2026-1534/): Malicious code in transform-dev (npm) (malicious package) - [MAL-2026-15339](https://insights.sbomify.com/MAL-2026-15339/): Malicious code in secure-test-browser-ezbajpcd (npm) (malicious package) - [MAL-2026-15338](https://insights.sbomify.com/MAL-2026-15338/): Malicious code in secure-test-browser-evbdrbjc (npm) (malicious package) - [MAL-2026-15337](https://insights.sbomify.com/MAL-2026-15337/): Malicious code in secure-test-browser-eudlabdg (npm) (malicious package) - [MAL-2026-15336](https://insights.sbomify.com/MAL-2026-15336/): Malicious code in secure-test-browser-ennvvg1y (npm) (malicious package) - [MAL-2026-15335](https://insights.sbomify.com/MAL-2026-15335/): Malicious code in secure-test-browser-emsn23qs (npm) (malicious package) - [MAL-2026-15334](https://insights.sbomify.com/MAL-2026-15334/): Malicious code in secure-test-browser-egronan3 (npm) (malicious package) - [MAL-2026-15333](https://insights.sbomify.com/MAL-2026-15333/): Malicious code in secure-test-browser-eeaoqmwm (npm) (malicious package) - [MAL-2026-15332](https://insights.sbomify.com/MAL-2026-15332/): Malicious code in secure-test-browser-e96lialz (npm) (malicious package) - [MAL-2026-15331](https://insights.sbomify.com/MAL-2026-15331/): Malicious code in secure-test-browser-dixty5xk (npm) (malicious package) - [MAL-2026-15330](https://insights.sbomify.com/MAL-2026-15330/): Malicious code in secure-test-browser-df9e7gu5 (npm) (malicious package) - [MAL-2026-1533](https://insights.sbomify.com/MAL-2026-1533/): Malicious code in todo-plz (npm) (malicious package) - [MAL-2026-15329](https://insights.sbomify.com/MAL-2026-15329/): Malicious code in secure-test-browser-demni4rs (npm) (malicious package) - [MAL-2026-15328](https://insights.sbomify.com/MAL-2026-15328/): Malicious code in secure-test-browser-d75nv86j (npm) (malicious package) - [MAL-2026-15327](https://insights.sbomify.com/MAL-2026-15327/): Malicious code in secure-test-browser-d2gc9pv0 (npm) (malicious package) - [MAL-2026-15326](https://insights.sbomify.com/MAL-2026-15326/): Malicious code in secure-test-browser-cxu66pgp (npm) (malicious package) - [MAL-2026-15325](https://insights.sbomify.com/MAL-2026-15325/): Malicious code in secure-test-browser-cxtwmz33 (npm) (malicious package) - [MAL-2026-15324](https://insights.sbomify.com/MAL-2026-15324/): Malicious code in secure-test-browser-cqkfx0ip (npm) (malicious package) - [MAL-2026-15323](https://insights.sbomify.com/MAL-2026-15323/): Malicious code in secure-test-browser-cnsorczp (npm) (malicious package) - [MAL-2026-15322](https://insights.sbomify.com/MAL-2026-15322/): Malicious code in secure-test-browser-cezm8gko (npm) (malicious package) - [MAL-2026-15321](https://insights.sbomify.com/MAL-2026-15321/): Malicious code in secure-test-browser-c9b32eoo (npm) (malicious package) - [MAL-2026-15320](https://insights.sbomify.com/MAL-2026-15320/): Malicious code in secure-test-browser-c5iac3qm (npm) (malicious package) - [MAL-2026-1532](https://insights.sbomify.com/MAL-2026-1532/): Malicious code in syntax-exponentiation-operator (npm) (malicious package) - [MAL-2026-15319](https://insights.sbomify.com/MAL-2026-15319/): Malicious code in secure-test-browser-c2df2vbx (npm) (malicious package) - [MAL-2026-15318](https://insights.sbomify.com/MAL-2026-15318/): Malicious code in secure-test-browser-bv6h8voq (npm) (malicious package) - [MAL-2026-15317](https://insights.sbomify.com/MAL-2026-15317/): Malicious code in secure-test-browser-bph71q7u (npm) (malicious package) - [MAL-2026-15316](https://insights.sbomify.com/MAL-2026-15316/): Malicious code in secure-test-browser-bgsjanbj (npm) (malicious package) - [MAL-2026-15315](https://insights.sbomify.com/MAL-2026-15315/): Malicious code in secure-test-browser-aycygv9y (npm) (malicious package) - [MAL-2026-15314](https://insights.sbomify.com/MAL-2026-15314/): Malicious code in secure-test-browser-avybg7z5 (npm) (malicious package) - [MAL-2026-15313](https://insights.sbomify.com/MAL-2026-15313/): Malicious code in secure-test-browser-ameyqv97 (npm) (malicious package) - [MAL-2026-15312](https://insights.sbomify.com/MAL-2026-15312/): Malicious code in secure-test-browser-ak37sb04 (npm) (malicious package) - [MAL-2026-15311](https://insights.sbomify.com/MAL-2026-15311/): Malicious code in secure-test-browser-ajsfon9k (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2026/page/132/