# Vulnerabilities published in 2026 - [MAL-2026-15220](https://insights.sbomify.com/MAL-2026-15220/): Malicious code in desmos-graphing-gv9cg140 (npm) (malicious package) - [MAL-2026-1522](https://insights.sbomify.com/MAL-2026-1522/): Malicious code in minify-mangle-names (npm) (malicious package) - [MAL-2026-15219](https://insights.sbomify.com/MAL-2026-15219/): Malicious code in desmos-graphing-fzdcyprv (npm) (malicious package) - [MAL-2026-15218](https://insights.sbomify.com/MAL-2026-15218/): Malicious code in desmos-graphing-fmb6dd87 (npm) (malicious package) - [MAL-2026-15217](https://insights.sbomify.com/MAL-2026-15217/): Malicious code in desmos-graphing-fgm5m2nw (npm) (malicious package) - [MAL-2026-15216](https://insights.sbomify.com/MAL-2026-15216/): Malicious code in desmos-graphing-ewtz5c63 (npm) (malicious package) - [MAL-2026-15215](https://insights.sbomify.com/MAL-2026-15215/): Malicious code in desmos-graphing-dkkvj828 (npm) (malicious package) - [MAL-2026-15214](https://insights.sbomify.com/MAL-2026-15214/): Malicious code in desmos-graphing-d2xe9mki (npm) (malicious package) - [MAL-2026-15213](https://insights.sbomify.com/MAL-2026-15213/): Malicious code in desmos-graphing-czo3yc51 (npm) (malicious package) - [MAL-2026-15212](https://insights.sbomify.com/MAL-2026-15212/): Malicious code in desmos-graphing-b3cpqprr (npm) (malicious package) - [MAL-2026-15211](https://insights.sbomify.com/MAL-2026-15211/): Malicious code in desmos-graphing-abi6w1hy (npm) (malicious package) - [MAL-2026-15210](https://insights.sbomify.com/MAL-2026-15210/): Malicious code in desmos-graphing-a4jd3pt5 (npm) (malicious package) - [MAL-2026-1521](https://insights.sbomify.com/MAL-2026-1521/): Malicious code in lit-a11y (npm) (malicious package) - [MAL-2026-15209](https://insights.sbomify.com/MAL-2026-15209/): Malicious code in desmos-graphing-9yn0tiwq (npm) (malicious package) - [MAL-2026-15208](https://insights.sbomify.com/MAL-2026-15208/): Malicious code in desmos-graphing-9xaocjv2 (npm) (malicious package) - [MAL-2026-15207](https://insights.sbomify.com/MAL-2026-15207/): Malicious code in desmos-graphing-9w6qhtr4 (npm) (malicious package) - [MAL-2026-15206](https://insights.sbomify.com/MAL-2026-15206/): Malicious code in desmos-graphing-9k03wszi (npm) (malicious package) - [MAL-2026-15205](https://insights.sbomify.com/MAL-2026-15205/): Malicious code in desmos-graphing-900fv2np (npm) (malicious package) - [MAL-2026-15204](https://insights.sbomify.com/MAL-2026-15204/): Malicious code in desmos-graphing-7l7x3nnm (npm) (malicious package) - [MAL-2026-15203](https://insights.sbomify.com/MAL-2026-15203/): Malicious code in desmos-graphing-6qcpuz5a (npm) (malicious package) - [MAL-2026-15202](https://insights.sbomify.com/MAL-2026-15202/): Malicious code in desmos-graphing-604nkzg5 (npm) (malicious package) - [MAL-2026-15201](https://insights.sbomify.com/MAL-2026-15201/): Malicious code in desmos-graphing-53uzgn30 (npm) (malicious package) - [MAL-2026-15200](https://insights.sbomify.com/MAL-2026-15200/): Malicious code in desmos-graphing-4qeytcit (npm) (malicious package) - [MAL-2026-1520](https://insights.sbomify.com/MAL-2026-1520/): Malicious code in jam3 (npm) (malicious package) - [MAL-2026-152](https://insights.sbomify.com/MAL-2026-152/): Malicious code in week-4-node-modularization (npm) (malicious package) - [MAL-2026-15199](https://insights.sbomify.com/MAL-2026-15199/): Malicious code in desmos-graphing-4ctk1sud (npm) (malicious package) - [MAL-2026-15198](https://insights.sbomify.com/MAL-2026-15198/): Malicious code in desmos-graphing-3zydr56h (npm) (malicious package) - [MAL-2026-15197](https://insights.sbomify.com/MAL-2026-15197/): Malicious code in desmos-graphing-3sp71tdg (npm) (malicious package) - [MAL-2026-15196](https://insights.sbomify.com/MAL-2026-15196/): Malicious code in desmos-graphing-3ab6ghzv (npm) (malicious package) - [MAL-2026-15195](https://insights.sbomify.com/MAL-2026-15195/): Malicious code in desmos-graphing-31ajc1r0 (npm) (malicious package) - [MAL-2026-15194](https://insights.sbomify.com/MAL-2026-15194/): Malicious code in desmos-graphing-2gmv774y (npm) (malicious package) - [MAL-2026-15193](https://insights.sbomify.com/MAL-2026-15193/): Malicious code in desmos-graphing-24xpfja3 (npm) (malicious package) - [MAL-2026-15192](https://insights.sbomify.com/MAL-2026-15192/): Malicious code in desmos-graphing-1yozr7ui (npm) (malicious package) - [MAL-2026-15191](https://insights.sbomify.com/MAL-2026-15191/): Malicious code in desmos-graphing-1ocr3byl (npm) (malicious package) - [MAL-2026-15190](https://insights.sbomify.com/MAL-2026-15190/): Malicious code in desmos-graphing-0uw2z1ux (npm) (malicious package) - [MAL-2026-1519](https://insights.sbomify.com/MAL-2026-1519/): Malicious code in import-newlines (npm) (malicious package) - [MAL-2026-15189](https://insights.sbomify.com/MAL-2026-15189/): Malicious code in classlink-zwfxjs6w (npm) (malicious package) - [MAL-2026-15188](https://insights.sbomify.com/MAL-2026-15188/): Malicious code in classlink-zjrua8lg (npm) (malicious package) - [MAL-2026-15187](https://insights.sbomify.com/MAL-2026-15187/): Malicious code in classlink-zgfuyabx (npm) (malicious package) - [MAL-2026-15186](https://insights.sbomify.com/MAL-2026-15186/): Malicious code in classlink-z1owf3wo (npm) (malicious package) - [MAL-2026-15185](https://insights.sbomify.com/MAL-2026-15185/): Malicious code in classlink-yxtuscfu (npm) (malicious package) - [MAL-2026-15184](https://insights.sbomify.com/MAL-2026-15184/): Malicious code in classlink-yqzh7rhx (npm) (malicious package) - [MAL-2026-15183](https://insights.sbomify.com/MAL-2026-15183/): Malicious code in classlink-yo9y3rsf (npm) (malicious package) - [MAL-2026-15182](https://insights.sbomify.com/MAL-2026-15182/): Malicious code in classlink-yiqm3f92 (npm) (malicious package) - [MAL-2026-15181](https://insights.sbomify.com/MAL-2026-15181/): Malicious code in classlink-yeyuc75j (npm) (malicious package) - [MAL-2026-15180](https://insights.sbomify.com/MAL-2026-15180/): Malicious code in classlink-ye9hv1rp (npm) (malicious package) - [MAL-2026-1518](https://insights.sbomify.com/MAL-2026-1518/): Malicious code in ignore-html-and-css-imports (npm) (malicious package) - [MAL-2026-15179](https://insights.sbomify.com/MAL-2026-15179/): Malicious code in classlink-y9cjgg19 (npm) (malicious package) - [MAL-2026-15178](https://insights.sbomify.com/MAL-2026-15178/): Malicious code in classlink-xzg0d4g6 (npm) (malicious package) - [MAL-2026-15177](https://insights.sbomify.com/MAL-2026-15177/): Malicious code in classlink-xx8vtk2p (npm) (malicious package) - [MAL-2026-15176](https://insights.sbomify.com/MAL-2026-15176/): Malicious code in classlink-xkyruh8p (npm) (malicious package) - [MAL-2026-15175](https://insights.sbomify.com/MAL-2026-15175/): Malicious code in classlink-xjpjh7dw (npm) (malicious package) - [MAL-2026-15174](https://insights.sbomify.com/MAL-2026-15174/): Malicious code in classlink-xfzjn3nt (npm) (malicious package) - [MAL-2026-15173](https://insights.sbomify.com/MAL-2026-15173/): Malicious code in classlink-x9ht6k0r (npm) (malicious package) - [MAL-2026-15172](https://insights.sbomify.com/MAL-2026-15172/): Malicious code in classlink-x8inh2p5 (npm) (malicious package) - [MAL-2026-15171](https://insights.sbomify.com/MAL-2026-15171/): Malicious code in classlink-wvr5eoop (npm) (malicious package) - [MAL-2026-15170](https://insights.sbomify.com/MAL-2026-15170/): Malicious code in classlink-wmjbe2so (npm) (malicious package) - [MAL-2026-1517](https://insights.sbomify.com/MAL-2026-1517/): Malicious code in filenames-simple (npm) (malicious package) - [MAL-2026-15169](https://insights.sbomify.com/MAL-2026-15169/): Malicious code in classlink-wktpjm2c (npm) (malicious package) - [MAL-2026-15168](https://insights.sbomify.com/MAL-2026-15168/): Malicious code in classlink-wdy28px7 (npm) (malicious package) - [MAL-2026-15167](https://insights.sbomify.com/MAL-2026-15167/): Malicious code in classlink-w64ufvz0 (npm) (malicious package) - [MAL-2026-15166](https://insights.sbomify.com/MAL-2026-15166/): Malicious code in classlink-w2aoc2w4 (npm) (malicious package) - [MAL-2026-15165](https://insights.sbomify.com/MAL-2026-15165/): Malicious code in classlink-w1k2id3o (npm) (malicious package) - [MAL-2026-15164](https://insights.sbomify.com/MAL-2026-15164/): Malicious code in classlink-w17ma4im (npm) (malicious package) - [MAL-2026-15163](https://insights.sbomify.com/MAL-2026-15163/): Malicious code in classlink-vzhe1ult (npm) (malicious package) - [MAL-2026-15162](https://insights.sbomify.com/MAL-2026-15162/): Malicious code in classlink-vvp2o5z5 (npm) (malicious package) - [MAL-2026-15161](https://insights.sbomify.com/MAL-2026-15161/): Malicious code in classlink-vulrfg00 (npm) (malicious package) - [MAL-2026-15160](https://insights.sbomify.com/MAL-2026-15160/): Malicious code in classlink-vmc7lcol (npm) (malicious package) - [MAL-2026-1516](https://insights.sbomify.com/MAL-2026-1516/): Malicious code in es6-recommended (npm) (malicious package) - [MAL-2026-15159](https://insights.sbomify.com/MAL-2026-15159/): Malicious code in classlink-vhnhn5w0 (npm) (malicious package) - [MAL-2026-15158](https://insights.sbomify.com/MAL-2026-15158/): Malicious code in classlink-vfw41du0 (npm) (malicious package) - [MAL-2026-15157](https://insights.sbomify.com/MAL-2026-15157/): Malicious code in classlink-vax4rqs7 (npm) (malicious package) - [MAL-2026-15156](https://insights.sbomify.com/MAL-2026-15156/): Malicious code in classlink-v56d6aoz (npm) (malicious package) - [MAL-2026-15155](https://insights.sbomify.com/MAL-2026-15155/): Malicious code in classlink-uzimt3ve (npm) (malicious package) - [MAL-2026-15154](https://insights.sbomify.com/MAL-2026-15154/): Malicious code in classlink-uudsbhsk (npm) (malicious package) - [MAL-2026-15153](https://insights.sbomify.com/MAL-2026-15153/): Malicious code in classlink-un5tiosp (npm) (malicious package) - [MAL-2026-15152](https://insights.sbomify.com/MAL-2026-15152/): Malicious code in classlink-u5hbagi9 (npm) (malicious package) - [MAL-2026-15151](https://insights.sbomify.com/MAL-2026-15151/): Malicious code in classlink-u2n0gqft (npm) (malicious package) - [MAL-2026-15150](https://insights.sbomify.com/MAL-2026-15150/): Malicious code in classlink-u1vqpl5z (npm) (malicious package) - [MAL-2026-1515](https://insights.sbomify.com/MAL-2026-1515/): Malicious code in developit (npm) (malicious package) - [MAL-2026-15149](https://insights.sbomify.com/MAL-2026-15149/): Malicious code in classlink-tzib0ls7 (npm) (malicious package) - [MAL-2026-15148](https://insights.sbomify.com/MAL-2026-15148/): Malicious code in classlink-tw13ax4f (npm) (malicious package) - [MAL-2026-15147](https://insights.sbomify.com/MAL-2026-15147/): Malicious code in classlink-tl646sho (npm) (malicious package) - [MAL-2026-15146](https://insights.sbomify.com/MAL-2026-15146/): Malicious code in classlink-tbq8gn8g (npm) (malicious package) - [MAL-2026-15145](https://insights.sbomify.com/MAL-2026-15145/): Malicious code in classlink-t5p3uu1o (npm) (malicious package) - [MAL-2026-15144](https://insights.sbomify.com/MAL-2026-15144/): Malicious code in classlink-t347plks (npm) (malicious package) - [MAL-2026-15143](https://insights.sbomify.com/MAL-2026-15143/): Malicious code in classlink-sowghg1a (npm) (malicious package) - [MAL-2026-15142](https://insights.sbomify.com/MAL-2026-15142/): Malicious code in classlink-sliybcp6 (npm) (malicious package) - [MAL-2026-15141](https://insights.sbomify.com/MAL-2026-15141/): Malicious code in classlink-skdmdyhc (npm) (malicious package) - [MAL-2026-15140](https://insights.sbomify.com/MAL-2026-15140/): Malicious code in classlink-s6pridbx (npm) (malicious package) - [MAL-2026-1514](https://insights.sbomify.com/MAL-2026-1514/): Malicious code in declaration-block-no-ignored-properties (npm) (malicious package) - [MAL-2026-15139](https://insights.sbomify.com/MAL-2026-15139/): Malicious code in classlink-rloj3ls4 (npm) (malicious package) - [MAL-2026-15138](https://insights.sbomify.com/MAL-2026-15138/): Malicious code in classlink-rlofqkrd (npm) (malicious package) - [MAL-2026-15137](https://insights.sbomify.com/MAL-2026-15137/): Malicious code in classlink-rikzs2gv (npm) (malicious package) - [MAL-2026-15136](https://insights.sbomify.com/MAL-2026-15136/): Malicious code in classlink-rfaxqc0e (npm) (malicious package) - [MAL-2026-15135](https://insights.sbomify.com/MAL-2026-15135/): Malicious code in classlink-r8folkn0 (npm) (malicious package) - [MAL-2026-15134](https://insights.sbomify.com/MAL-2026-15134/): Malicious code in classlink-r6iheodx (npm) (malicious package) - [MAL-2026-15133](https://insights.sbomify.com/MAL-2026-15133/): Malicious code in classlink-qz9wfc7a (npm) (malicious package) - [MAL-2026-15132](https://insights.sbomify.com/MAL-2026-15132/): Malicious code in classlink-qxwl5yxv (npm) (malicious package) - [MAL-2026-15131](https://insights.sbomify.com/MAL-2026-15131/): Malicious code in classlink-qu12nxtj (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2026/page/134/