# Vulnerabilities published in 2026


- [MAL-2026-15040](https://insights.sbomify.com/MAL-2026-15040/): Malicious code in classlink-8ockomn3 (npm) (malicious package)
- [MAL-2026-1504](https://insights.sbomify.com/MAL-2026-1504/): Malicious code in transform-jsbi-to-bigint (npm) (malicious package)
- [MAL-2026-15039](https://insights.sbomify.com/MAL-2026-15039/): Malicious code in classlink-8bkqsit1 (npm) (malicious package)
- [MAL-2026-15038](https://insights.sbomify.com/MAL-2026-15038/): Malicious code in classlink-7yk1dxxn (npm) (malicious package)
- [MAL-2026-15037](https://insights.sbomify.com/MAL-2026-15037/): Malicious code in classlink-7bnzowrp (npm) (malicious package)
- [MAL-2026-15036](https://insights.sbomify.com/MAL-2026-15036/): Malicious code in classlink-775iocrc (npm) (malicious package)
- [MAL-2026-15035](https://insights.sbomify.com/MAL-2026-15035/): Malicious code in classlink-6tjmt4am (npm) (malicious package)
- [MAL-2026-15034](https://insights.sbomify.com/MAL-2026-15034/): Malicious code in classlink-6d5qzkyc (npm) (malicious package)
- [MAL-2026-15033](https://insights.sbomify.com/MAL-2026-15033/): Malicious code in classlink-6c4gq8pl (npm) (malicious package)
- [MAL-2026-15032](https://insights.sbomify.com/MAL-2026-15032/): Malicious code in classlink-66crblus (npm) (malicious package)
- [MAL-2026-15031](https://insights.sbomify.com/MAL-2026-15031/): Malicious code in classlink-62yk5hyp (npm) (malicious package)
- [MAL-2026-15030](https://insights.sbomify.com/MAL-2026-15030/): Malicious code in classlink-5ymxe9bn (npm) (malicious package)
- [MAL-2026-1503](https://insights.sbomify.com/MAL-2026-1503/): Malicious code in minify-replace (npm) (malicious package)
- [MAL-2026-15029](https://insights.sbomify.com/MAL-2026-15029/): Malicious code in classlink-5tvmx8a6 (npm) (malicious package)
- [MAL-2026-15028](https://insights.sbomify.com/MAL-2026-15028/): Malicious code in classlink-5tdruito (npm) (malicious package)
- [MAL-2026-15027](https://insights.sbomify.com/MAL-2026-15027/): Malicious code in classlink-5kz6s5ta (npm) (malicious package)
- [MAL-2026-15026](https://insights.sbomify.com/MAL-2026-15026/): Malicious code in classlink-5gz93nzs (npm) (malicious package)
- [MAL-2026-15025](https://insights.sbomify.com/MAL-2026-15025/): Malicious code in classlink-5fkxmizt (npm) (malicious package)
- [MAL-2026-15024](https://insights.sbomify.com/MAL-2026-15024/): Malicious code in classlink-5ciuoj5g (npm) (malicious package)
- [MAL-2026-15023](https://insights.sbomify.com/MAL-2026-15023/): Malicious code in classlink-5bhzaaq2 (npm) (malicious package)
- [MAL-2026-15022](https://insights.sbomify.com/MAL-2026-15022/): Malicious code in classlink-4mjgbs9i (npm) (malicious package)
- [MAL-2026-15021](https://insights.sbomify.com/MAL-2026-15021/): Malicious code in classlink-4d2zvwhb (npm) (malicious package)
- [MAL-2026-15020](https://insights.sbomify.com/MAL-2026-15020/): Malicious code in classlink-4cnowpix (npm) (malicious package)
- [MAL-2026-1502](https://insights.sbomify.com/MAL-2026-1502/): Malicious code in better-styled-components (npm) (malicious package)
- [MAL-2026-15019](https://insights.sbomify.com/MAL-2026-15019/): Malicious code in classlink-3k14cslj (npm) (malicious package)
- [MAL-2026-15018](https://insights.sbomify.com/MAL-2026-15018/): Malicious code in classlink-321ouwqc (npm) (malicious package)
- [MAL-2026-15017](https://insights.sbomify.com/MAL-2026-15017/): Malicious code in classlink-31ci3vtf (npm) (malicious package)
- [MAL-2026-15016](https://insights.sbomify.com/MAL-2026-15016/): Malicious code in classlink-2t2ozsy0 (npm) (malicious package)
- [MAL-2026-15015](https://insights.sbomify.com/MAL-2026-15015/): Malicious code in classlink-2t1af7jn (npm) (malicious package)
- [MAL-2026-15014](https://insights.sbomify.com/MAL-2026-15014/): Malicious code in classlink-2n5caofp (npm) (malicious package)
- [MAL-2026-15013](https://insights.sbomify.com/MAL-2026-15013/): Malicious code in classlink-2ls71exe (npm) (malicious package)
- [MAL-2026-15012](https://insights.sbomify.com/MAL-2026-15012/): Malicious code in classlink-1xclw9bj (npm) (malicious package)
- [MAL-2026-15011](https://insights.sbomify.com/MAL-2026-15011/): Malicious code in classlink-1u8eeq4p (npm) (malicious package)
- [MAL-2026-15010](https://insights.sbomify.com/MAL-2026-15010/): Malicious code in classlink-1sbqnhys (npm) (malicious package)
- [MAL-2026-1501](https://insights.sbomify.com/MAL-2026-1501/): Malicious code in @storylane/uikit (npm) (malicious package)
- [MAL-2026-15009](https://insights.sbomify.com/MAL-2026-15009/): Malicious code in classlink-1avoqu4p (npm) (malicious package)
- [MAL-2026-15008](https://insights.sbomify.com/MAL-2026-15008/): Malicious code in classlink-0xj51osu (npm) (malicious package)
- [MAL-2026-15007](https://insights.sbomify.com/MAL-2026-15007/): Malicious code in classlink-0xcszcdo (npm) (malicious package)
- [MAL-2026-15006](https://insights.sbomify.com/MAL-2026-15006/): Malicious code in classlink-0wihdhrz (npm) (malicious package)
- [MAL-2026-15005](https://insights.sbomify.com/MAL-2026-15005/): Malicious code in classlink-0oci59kq (npm) (malicious package)
- [MAL-2026-15004](https://insights.sbomify.com/MAL-2026-15004/): Malicious code in classlink-0e3uievl (npm) (malicious package)
- [MAL-2026-15003](https://insights.sbomify.com/MAL-2026-15003/): Malicious code in classlink-0cxdj3vn (npm) (malicious package)
- [MAL-2026-15002](https://insights.sbomify.com/MAL-2026-15002/): Malicious code in classlink-05aivir0 (npm) (malicious package)
- [MAL-2026-15001](https://insights.sbomify.com/MAL-2026-15001/): Malicious code in chilly-mountain (npm) (malicious package)
- [MAL-2026-15000](https://insights.sbomify.com/MAL-2026-15000/): Malicious code in bluebook-testing (npm) (malicious package)
- [MAL-2026-1500](https://insights.sbomify.com/MAL-2026-1500/): Malicious code in @storylane/shared-packages (npm) (malicious package)
- [MAL-2026-150](https://insights.sbomify.com/MAL-2026-150/): Malicious code in hoppscotch-agent (npm) (malicious package)
- [MAL-2026-15](https://insights.sbomify.com/MAL-2026-15/): Malicious code in eslint-config-skynet (npm) (malicious package)
- [MAL-2026-14999](https://insights.sbomify.com/MAL-2026-14999/): Malicious code in abcdefghijklnmopqrstuvwxyz (npm) (malicious package)
- [MAL-2026-14998](https://insights.sbomify.com/MAL-2026-14998/): Malicious code in 3layerdipstackzz0n4 (npm) (malicious package)
- [MAL-2026-14997](https://insights.sbomify.com/MAL-2026-14997/): Malicious code in 3layerdipstackzpi9o (npm) (malicious package)
- [MAL-2026-14996](https://insights.sbomify.com/MAL-2026-14996/): Malicious code in 3layerdipstackzhnxi (npm) (malicious package)
- [MAL-2026-14995](https://insights.sbomify.com/MAL-2026-14995/): Malicious code in 3layerdipstackzhe5k (npm) (malicious package)
- [MAL-2026-14994](https://insights.sbomify.com/MAL-2026-14994/): Malicious code in 3layerdipstackz54iek (npm) (malicious package)
- [MAL-2026-14993](https://insights.sbomify.com/MAL-2026-14993/): Malicious code in 3layerdipstackytruq6 (npm) (malicious package)
- [MAL-2026-14992](https://insights.sbomify.com/MAL-2026-14992/): Malicious code in 3layerdipstackyt68w (npm) (malicious package)
- [MAL-2026-14991](https://insights.sbomify.com/MAL-2026-14991/): Malicious code in 3layerdipstackyqrxdf (npm) (malicious package)
- [MAL-2026-14990](https://insights.sbomify.com/MAL-2026-14990/): Malicious code in 3layerdipstackyq24q (npm) (malicious package)
- [MAL-2026-1499](https://insights.sbomify.com/MAL-2026-1499/): Malicious code in anistream (PyPI) (malicious package)
- [MAL-2026-14989](https://insights.sbomify.com/MAL-2026-14989/): Malicious code in 3layerdipstackykuowv (npm) (malicious package)
- [MAL-2026-14988](https://insights.sbomify.com/MAL-2026-14988/): Malicious code in 3layerdipstackykas5 (npm) (malicious package)
- [MAL-2026-14987](https://insights.sbomify.com/MAL-2026-14987/): Malicious code in 3layerdipstackyhk67g (npm) (malicious package)
- [MAL-2026-14986](https://insights.sbomify.com/MAL-2026-14986/): Malicious code in 3layerdipstackybqdp4 (npm) (malicious package)
- [MAL-2026-14985](https://insights.sbomify.com/MAL-2026-14985/): Malicious code in 3layerdipstacky2fxy (npm) (malicious package)
- [MAL-2026-14984](https://insights.sbomify.com/MAL-2026-14984/): Malicious code in 3layerdipstackxms0j (npm) (malicious package)
- [MAL-2026-14983](https://insights.sbomify.com/MAL-2026-14983/): Malicious code in 3layerdipstackxlmq6 (npm) (malicious package)
- [MAL-2026-14982](https://insights.sbomify.com/MAL-2026-14982/): Malicious code in 3layerdipstackxdv18 (npm) (malicious package)
- [MAL-2026-14981](https://insights.sbomify.com/MAL-2026-14981/): Malicious code in 3layerdipstackxav9q (npm) (malicious package)
- [MAL-2026-14980](https://insights.sbomify.com/MAL-2026-14980/): Malicious code in 3layerdipstackx70bgg (npm) (malicious package)
- [MAL-2026-1498](https://insights.sbomify.com/MAL-2026-1498/): Malicious code in telegramdatas (PyPI) (malicious package)
- [MAL-2026-14979](https://insights.sbomify.com/MAL-2026-14979/): Malicious code in 3layerdipstackx4y4fx (npm) (malicious package)
- [MAL-2026-14978](https://insights.sbomify.com/MAL-2026-14978/): Malicious code in 3layerdipstackx26ujd (npm) (malicious package)
- [MAL-2026-14977](https://insights.sbomify.com/MAL-2026-14977/): Malicious code in 3layerdipstackx1zi8p (npm) (malicious package)
- [MAL-2026-14976](https://insights.sbomify.com/MAL-2026-14976/): Malicious code in 3layerdipstackwudpnc (npm) (malicious package)
- [MAL-2026-14975](https://insights.sbomify.com/MAL-2026-14975/): Malicious code in 3layerdipstackwu6ij (npm) (malicious package)
- [MAL-2026-14974](https://insights.sbomify.com/MAL-2026-14974/): Malicious code in 3layerdipstackwqo67k (npm) (malicious package)
- [MAL-2026-14973](https://insights.sbomify.com/MAL-2026-14973/): Malicious code in 3layerdipstackwm7sa (npm) (malicious package)
- [MAL-2026-14972](https://insights.sbomify.com/MAL-2026-14972/): Malicious code in 3layerdipstackwexso (npm) (malicious package)
- [MAL-2026-14971](https://insights.sbomify.com/MAL-2026-14971/): Malicious code in 3layerdipstackwc0qja (npm) (malicious package)
- [MAL-2026-14970](https://insights.sbomify.com/MAL-2026-14970/): Malicious code in 3layerdipstackw2pt3 (npm) (malicious package)
- [MAL-2026-1497](https://insights.sbomify.com/MAL-2026-1497/): Malicious code in robloxapi-test (PyPI) (malicious package)
- [MAL-2026-14969](https://insights.sbomify.com/MAL-2026-14969/): Malicious code in 3layerdipstackw1ma2 (npm) (malicious package)
- [MAL-2026-14968](https://insights.sbomify.com/MAL-2026-14968/): Malicious code in 3layerdipstackvtid3m (npm) (malicious package)
- [MAL-2026-14967](https://insights.sbomify.com/MAL-2026-14967/): Malicious code in 3layerdipstackvtd7og (npm) (malicious package)
- [MAL-2026-14966](https://insights.sbomify.com/MAL-2026-14966/): Malicious code in 3layerdipstackvo9oet (npm) (malicious package)
- [MAL-2026-14965](https://insights.sbomify.com/MAL-2026-14965/): Malicious code in 3layerdipstackvnmth1 (npm) (malicious package)
- [MAL-2026-14964](https://insights.sbomify.com/MAL-2026-14964/): Malicious code in 3layerdipstackvm4qaj (npm) (malicious package)
- [MAL-2026-14963](https://insights.sbomify.com/MAL-2026-14963/): Malicious code in 3layerdipstackvld3fr (npm) (malicious package)
- [MAL-2026-14962](https://insights.sbomify.com/MAL-2026-14962/): Malicious code in 3layerdipstackvkl1hd (npm) (malicious package)
- [MAL-2026-14961](https://insights.sbomify.com/MAL-2026-14961/): Malicious code in 3layerdipstackvhbhs6 (npm) (malicious package)
- [MAL-2026-14960](https://insights.sbomify.com/MAL-2026-14960/): Malicious code in 3layerdipstackvdy7nf (npm) (malicious package)
- [MAL-2026-1496](https://insights.sbomify.com/MAL-2026-1496/): Malicious code in robloxapi-testy (PyPI) (malicious package)
- [MAL-2026-14959](https://insights.sbomify.com/MAL-2026-14959/): Malicious code in 3layerdipstackvd6za6 (npm) (malicious package)
- [MAL-2026-14958](https://insights.sbomify.com/MAL-2026-14958/): Malicious code in 3layerdipstackvcdkrp (npm) (malicious package)
- [MAL-2026-14957](https://insights.sbomify.com/MAL-2026-14957/): Malicious code in 3layerdipstackvb5y6 (npm) (malicious package)
- [MAL-2026-14956](https://insights.sbomify.com/MAL-2026-14956/): Malicious code in 3layerdipstackvaovrs (npm) (malicious package)
- [MAL-2026-14955](https://insights.sbomify.com/MAL-2026-14955/): Malicious code in 3layerdipstackv4z5q (npm) (malicious package)
- [MAL-2026-14954](https://insights.sbomify.com/MAL-2026-14954/): Malicious code in 3layerdipstackuyd45d (npm) (malicious package)
- [MAL-2026-14953](https://insights.sbomify.com/MAL-2026-14953/): Malicious code in 3layerdipstackuyb1e (npm) (malicious package)
- [MAL-2026-14952](https://insights.sbomify.com/MAL-2026-14952/): Malicious code in 3layerdipstackuu02ly (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/136/