# Vulnerabilities published in 2026


- [MAL-2026-15130](https://insights.sbomify.com/MAL-2026-15130/): Malicious code in classlink-qrvgupip (npm) (malicious package)
- [MAL-2026-1513](https://insights.sbomify.com/MAL-2026-1513/): Malicious code in vitest-globals (npm) (malicious package)
- [MAL-2026-15129](https://insights.sbomify.com/MAL-2026-15129/): Malicious code in classlink-qq62iaxh (npm) (malicious package)
- [MAL-2026-15128](https://insights.sbomify.com/MAL-2026-15128/): Malicious code in classlink-qph1z5ql (npm) (malicious package)
- [MAL-2026-15127](https://insights.sbomify.com/MAL-2026-15127/): Malicious code in classlink-qk0jdy82 (npm) (malicious package)
- [MAL-2026-15126](https://insights.sbomify.com/MAL-2026-15126/): Malicious code in classlink-qfa5rsns (npm) (malicious package)
- [MAL-2026-15125](https://insights.sbomify.com/MAL-2026-15125/): Malicious code in classlink-qeyyxkvk (npm) (malicious package)
- [MAL-2026-15124](https://insights.sbomify.com/MAL-2026-15124/): Malicious code in classlink-qejnkyc6 (npm) (malicious package)
- [MAL-2026-15123](https://insights.sbomify.com/MAL-2026-15123/): Malicious code in classlink-q2byg0v7 (npm) (malicious package)
- [MAL-2026-15122](https://insights.sbomify.com/MAL-2026-15122/): Malicious code in classlink-pv0kxucy (npm) (malicious package)
- [MAL-2026-15121](https://insights.sbomify.com/MAL-2026-15121/): Malicious code in classlink-ptiyrjb5 (npm) (malicious package)
- [MAL-2026-15120](https://insights.sbomify.com/MAL-2026-15120/): Malicious code in classlink-otcbsfdv (npm) (malicious package)
- [MAL-2026-1512](https://insights.sbomify.com/MAL-2026-1512/): Malicious code in undeclared-variables-check (npm) (malicious package)
- [MAL-2026-15119](https://insights.sbomify.com/MAL-2026-15119/): Malicious code in classlink-ojxguxoq (npm) (malicious package)
- [MAL-2026-15118](https://insights.sbomify.com/MAL-2026-15118/): Malicious code in classlink-oizqqihf (npm) (malicious package)
- [MAL-2026-15117](https://insights.sbomify.com/MAL-2026-15117/): Malicious code in classlink-nvrzsxgt (npm) (malicious package)
- [MAL-2026-15116](https://insights.sbomify.com/MAL-2026-15116/): Malicious code in classlink-mwnbufxp (npm) (malicious package)
- [MAL-2026-15115](https://insights.sbomify.com/MAL-2026-15115/): Malicious code in classlink-miudxzw9 (npm) (malicious package)
- [MAL-2026-15114](https://insights.sbomify.com/MAL-2026-15114/): Malicious code in classlink-mikkkqox (npm) (malicious package)
- [MAL-2026-15113](https://insights.sbomify.com/MAL-2026-15113/): Malicious code in classlink-mgsmua9q (npm) (malicious package)
- [MAL-2026-15112](https://insights.sbomify.com/MAL-2026-15112/): Malicious code in classlink-mdtv2lhz (npm) (malicious package)
- [MAL-2026-15111](https://insights.sbomify.com/MAL-2026-15111/): Malicious code in classlink-m7k74jsv (npm) (malicious package)
- [MAL-2026-15110](https://insights.sbomify.com/MAL-2026-15110/): Malicious code in classlink-m3zzm8wb (npm) (malicious package)
- [MAL-2026-1511](https://insights.sbomify.com/MAL-2026-1511/): Malicious code in transform-undefined-to-void (npm) (malicious package)
- [MAL-2026-15109](https://insights.sbomify.com/MAL-2026-15109/): Malicious code in classlink-lipiec7v (npm) (malicious package)
- [MAL-2026-15108](https://insights.sbomify.com/MAL-2026-15108/): Malicious code in classlink-lflju095 (npm) (malicious package)
- [MAL-2026-15107](https://insights.sbomify.com/MAL-2026-15107/): Malicious code in classlink-lbh9r8oq (npm) (malicious package)
- [MAL-2026-15106](https://insights.sbomify.com/MAL-2026-15106/): Malicious code in classlink-ksqo5rn6 (npm) (malicious package)
- [MAL-2026-15105](https://insights.sbomify.com/MAL-2026-15105/): Malicious code in classlink-kr6i9ei3 (npm) (malicious package)
- [MAL-2026-15104](https://insights.sbomify.com/MAL-2026-15104/): Malicious code in classlink-kr1dsssk (npm) (malicious package)
- [MAL-2026-15103](https://insights.sbomify.com/MAL-2026-15103/): Malicious code in classlink-kfovigbh (npm) (malicious package)
- [MAL-2026-15102](https://insights.sbomify.com/MAL-2026-15102/): Malicious code in classlink-k4nakbnt (npm) (malicious package)
- [MAL-2026-15101](https://insights.sbomify.com/MAL-2026-15101/): Malicious code in classlink-k2zddcsu (npm) (malicious package)
- [MAL-2026-15100](https://insights.sbomify.com/MAL-2026-15100/): Malicious code in classlink-k0tfm3o8 (npm) (malicious package)
- [MAL-2026-1510](https://insights.sbomify.com/MAL-2026-1510/): Malicious code in transform-simplify-comparison-operators (npm) (malicious package)
- [MAL-2026-151](https://insights.sbomify.com/MAL-2026-151/): Malicious code in svelte-monorepo (npm) (malicious package)
- [MAL-2026-15099](https://insights.sbomify.com/MAL-2026-15099/): Malicious code in classlink-jp62vjo9 (npm) (malicious package)
- [MAL-2026-15098](https://insights.sbomify.com/MAL-2026-15098/): Malicious code in classlink-jkakj9fh (npm) (malicious package)
- [MAL-2026-15097](https://insights.sbomify.com/MAL-2026-15097/): Malicious code in classlink-j9vld79j (npm) (malicious package)
- [MAL-2026-15096](https://insights.sbomify.com/MAL-2026-15096/): Malicious code in classlink-ivfqk4dz (npm) (malicious package)
- [MAL-2026-15095](https://insights.sbomify.com/MAL-2026-15095/): Malicious code in classlink-ioteg9wb (npm) (malicious package)
- [MAL-2026-15094](https://insights.sbomify.com/MAL-2026-15094/): Malicious code in classlink-ilhmof2m (npm) (malicious package)
- [MAL-2026-15093](https://insights.sbomify.com/MAL-2026-15093/): Malicious code in classlink-ikbkatut (npm) (malicious package)
- [MAL-2026-15092](https://insights.sbomify.com/MAL-2026-15092/): Malicious code in classlink-idih6eh4 (npm) (malicious package)
- [MAL-2026-15091](https://insights.sbomify.com/MAL-2026-15091/): Malicious code in classlink-icth7fnc (npm) (malicious package)
- [MAL-2026-15090](https://insights.sbomify.com/MAL-2026-15090/): Malicious code in classlink-i9ht4ftz (npm) (malicious package)
- [MAL-2026-1509](https://insights.sbomify.com/MAL-2026-1509/): Malicious code in transform-remove-debugger (npm) (malicious package)
- [MAL-2026-15089](https://insights.sbomify.com/MAL-2026-15089/): Malicious code in classlink-i6i0xjcn (npm) (malicious package)
- [MAL-2026-15088](https://insights.sbomify.com/MAL-2026-15088/): Malicious code in classlink-i6ftjcf7 (npm) (malicious package)
- [MAL-2026-15087](https://insights.sbomify.com/MAL-2026-15087/): Malicious code in classlink-i1otx27d (npm) (malicious package)
- [MAL-2026-15086](https://insights.sbomify.com/MAL-2026-15086/): Malicious code in classlink-hpxf23yu (npm) (malicious package)
- [MAL-2026-15085](https://insights.sbomify.com/MAL-2026-15085/): Malicious code in classlink-hl9uycka (npm) (malicious package)
- [MAL-2026-15084](https://insights.sbomify.com/MAL-2026-15084/): Malicious code in classlink-hilvoxs4 (npm) (malicious package)
- [MAL-2026-15083](https://insights.sbomify.com/MAL-2026-15083/): Malicious code in classlink-hceirb4w (npm) (malicious package)
- [MAL-2026-15082](https://insights.sbomify.com/MAL-2026-15082/): Malicious code in classlink-hb1qmq9m (npm) (malicious package)
- [MAL-2026-15081](https://insights.sbomify.com/MAL-2026-15081/): Malicious code in classlink-h7lrg5jc (npm) (malicious package)
- [MAL-2026-15080](https://insights.sbomify.com/MAL-2026-15080/): Malicious code in classlink-h6e4w4ws (npm) (malicious package)
- [MAL-2026-1508](https://insights.sbomify.com/MAL-2026-1508/): Malicious code in transform-react-jsx (npm) (malicious package)
- [MAL-2026-15079](https://insights.sbomify.com/MAL-2026-15079/): Malicious code in classlink-h08wpi0d (npm) (malicious package)
- [MAL-2026-15078](https://insights.sbomify.com/MAL-2026-15078/): Malicious code in classlink-gvxxr7vn (npm) (malicious package)
- [MAL-2026-15077](https://insights.sbomify.com/MAL-2026-15077/): Malicious code in classlink-gd7tr7i7 (npm) (malicious package)
- [MAL-2026-15076](https://insights.sbomify.com/MAL-2026-15076/): Malicious code in classlink-fy6wub00 (npm) (malicious package)
- [MAL-2026-15075](https://insights.sbomify.com/MAL-2026-15075/): Malicious code in classlink-fr0zh2sv (npm) (malicious package)
- [MAL-2026-15074](https://insights.sbomify.com/MAL-2026-15074/): Malicious code in classlink-fp7poyii (npm) (malicious package)
- [MAL-2026-15073](https://insights.sbomify.com/MAL-2026-15073/): Malicious code in classlink-f5r03nln (npm) (malicious package)
- [MAL-2026-15072](https://insights.sbomify.com/MAL-2026-15072/): Malicious code in classlink-eznqjohp (npm) (malicious package)
- [MAL-2026-15071](https://insights.sbomify.com/MAL-2026-15071/): Malicious code in classlink-ewfmy87w (npm) (malicious package)
- [MAL-2026-15070](https://insights.sbomify.com/MAL-2026-15070/): Malicious code in classlink-ekumpokt (npm) (malicious package)
- [MAL-2026-1507](https://insights.sbomify.com/MAL-2026-1507/): Malicious code in transform-property-literals (npm) (malicious package)
- [MAL-2026-15069](https://insights.sbomify.com/MAL-2026-15069/): Malicious code in classlink-ejybc15w (npm) (malicious package)
- [MAL-2026-15068](https://insights.sbomify.com/MAL-2026-15068/): Malicious code in classlink-dskw2g17 (npm) (malicious package)
- [MAL-2026-15067](https://insights.sbomify.com/MAL-2026-15067/): Malicious code in classlink-djhde9mb (npm) (malicious package)
- [MAL-2026-15066](https://insights.sbomify.com/MAL-2026-15066/): Malicious code in classlink-dg6t1awu (npm) (malicious package)
- [MAL-2026-15065](https://insights.sbomify.com/MAL-2026-15065/): Malicious code in classlink-d7x3eua6 (npm) (malicious package)
- [MAL-2026-15064](https://insights.sbomify.com/MAL-2026-15064/): Malicious code in classlink-d6dllzf9 (npm) (malicious package)
- [MAL-2026-15063](https://insights.sbomify.com/MAL-2026-15063/): Malicious code in classlink-d29uplpm (npm) (malicious package)
- [MAL-2026-15062](https://insights.sbomify.com/MAL-2026-15062/): Malicious code in classlink-cx3wum2m (npm) (malicious package)
- [MAL-2026-15061](https://insights.sbomify.com/MAL-2026-15061/): Malicious code in classlink-cwhcq8dv (npm) (malicious package)
- [MAL-2026-15060](https://insights.sbomify.com/MAL-2026-15060/): Malicious code in classlink-csowy37o (npm) (malicious package)
- [MAL-2026-1506](https://insights.sbomify.com/MAL-2026-1506/): Malicious code in transform-minify-booleans (npm) (malicious package)
- [MAL-2026-15059](https://insights.sbomify.com/MAL-2026-15059/): Malicious code in classlink-csh3v6cf (npm) (malicious package)
- [MAL-2026-15058](https://insights.sbomify.com/MAL-2026-15058/): Malicious code in classlink-cqofn6z6 (npm) (malicious package)
- [MAL-2026-15057](https://insights.sbomify.com/MAL-2026-15057/): Malicious code in classlink-cpecvdw5 (npm) (malicious package)
- [MAL-2026-15056](https://insights.sbomify.com/MAL-2026-15056/): Malicious code in classlink-co3ghhbr (npm) (malicious package)
- [MAL-2026-15055](https://insights.sbomify.com/MAL-2026-15055/): Malicious code in classlink-chtm9stv (npm) (malicious package)
- [MAL-2026-15054](https://insights.sbomify.com/MAL-2026-15054/): Malicious code in classlink-c9l8m7yz (npm) (malicious package)
- [MAL-2026-15053](https://insights.sbomify.com/MAL-2026-15053/): Malicious code in classlink-c9euh9gz (npm) (malicious package)
- [MAL-2026-15052](https://insights.sbomify.com/MAL-2026-15052/): Malicious code in classlink-c78zjnbn (npm) (malicious package)
- [MAL-2026-15051](https://insights.sbomify.com/MAL-2026-15051/): Malicious code in classlink-bxzjfapu (npm) (malicious package)
- [MAL-2026-15050](https://insights.sbomify.com/MAL-2026-15050/): Malicious code in classlink-bjd009ch (npm) (malicious package)
- [MAL-2026-1505](https://insights.sbomify.com/MAL-2026-1505/): Malicious code in transform-jscript (npm) (malicious package)
- [MAL-2026-15049](https://insights.sbomify.com/MAL-2026-15049/): Malicious code in classlink-bi8xv3ye (npm) (malicious package)
- [MAL-2026-15048](https://insights.sbomify.com/MAL-2026-15048/): Malicious code in classlink-bae1zj6h (npm) (malicious package)
- [MAL-2026-15047](https://insights.sbomify.com/MAL-2026-15047/): Malicious code in classlink-b3kc8x9d (npm) (malicious package)
- [MAL-2026-15046](https://insights.sbomify.com/MAL-2026-15046/): Malicious code in classlink-b2mpnr66 (npm) (malicious package)
- [MAL-2026-15045](https://insights.sbomify.com/MAL-2026-15045/): Malicious code in classlink-aki2aftl (npm) (malicious package)
- [MAL-2026-15044](https://insights.sbomify.com/MAL-2026-15044/): Malicious code in classlink-aki07yws (npm) (malicious package)
- [MAL-2026-15043](https://insights.sbomify.com/MAL-2026-15043/): Malicious code in classlink-a68gv8mp (npm) (malicious package)
- [MAL-2026-15042](https://insights.sbomify.com/MAL-2026-15042/): Malicious code in classlink-9uqnil1j (npm) (malicious package)
- [MAL-2026-15041](https://insights.sbomify.com/MAL-2026-15041/): Malicious code in classlink-9nxfp7hx (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/135/
