# Vulnerabilities published in 2026 - [MAL-2026-13871](https://insights.sbomify.com/MAL-2026-13871/): Malicious code in @years17/n8n-nodes-utils-helper-b (npm) (malicious package) - [MAL-2026-13870](https://insights.sbomify.com/MAL-2026-13870/): Malicious code in @years17/n8n-nodes-utils-helper (npm) (malicious package) - [MAL-2026-1387](https://insights.sbomify.com/MAL-2026-1387/): Malicious code in tahoe-tap (npm) (malicious package) - [MAL-2026-13869](https://insights.sbomify.com/MAL-2026-13869/): Malicious code in @years17/n8n-nodes-helper-utils (npm) (malicious package) - [MAL-2026-13868](https://insights.sbomify.com/MAL-2026-13868/): Malicious code in @years18/n8n-nodes-utils-helper-x (npm) (malicious package) - [MAL-2026-13867](https://insights.sbomify.com/MAL-2026-13867/): Malicious code in @years18/n8n-nodes-utils-helper-w (npm) (malicious package) - [MAL-2026-13866](https://insights.sbomify.com/MAL-2026-13866/): Malicious code in @years18/n8n-nodes-utils-helper-v (npm) (malicious package) - [MAL-2026-13865](https://insights.sbomify.com/MAL-2026-13865/): Malicious code in @years18/n8n-nodes-utils-helper-u (npm) (malicious package) - [MAL-2026-13864](https://insights.sbomify.com/MAL-2026-13864/): Malicious code in @years18/n8n-nodes-utils-helper-t (npm) (malicious package) - [MAL-2026-13863](https://insights.sbomify.com/MAL-2026-13863/): Malicious code in @years18/n8n-nodes-utils-helper-s (npm) (malicious package) - [MAL-2026-13862](https://insights.sbomify.com/MAL-2026-13862/): Malicious code in @years18/n8n-nodes-utils-helper-r (npm) (malicious package) - [MAL-2026-13861](https://insights.sbomify.com/MAL-2026-13861/): Malicious code in @years18/n8n-nodes-utils-helper-q (npm) (malicious package) - [MAL-2026-13860](https://insights.sbomify.com/MAL-2026-13860/): Malicious code in @years18/n8n-nodes-utils-helper-p (npm) (malicious package) - [MAL-2026-1386](https://insights.sbomify.com/MAL-2026-1386/): Malicious code in tachyon-spade-reporter (npm) (malicious package) - [MAL-2026-13859](https://insights.sbomify.com/MAL-2026-13859/): Malicious code in @years18/n8n-nodes-utils-helper-o (npm) (malicious package) - [MAL-2026-13858](https://insights.sbomify.com/MAL-2026-13858/): Malicious code in @years18/n8n-nodes-utils-helper-n (npm) (malicious package) - [MAL-2026-13857](https://insights.sbomify.com/MAL-2026-13857/): Malicious code in @years18/n8n-nodes-utils-helper-m (npm) (malicious package) - [MAL-2026-13856](https://insights.sbomify.com/MAL-2026-13856/): Malicious code in @years18/n8n-nodes-utils-helper-l (npm) (malicious package) - [MAL-2026-13855](https://insights.sbomify.com/MAL-2026-13855/): Malicious code in @years18/n8n-nodes-utils-helper-k (npm) (malicious package) - [MAL-2026-13854](https://insights.sbomify.com/MAL-2026-13854/): Malicious code in @years18/n8n-nodes-utils-helper-j (npm) (malicious package) - [MAL-2026-13853](https://insights.sbomify.com/MAL-2026-13853/): Malicious code in @years18/n8n-nodes-utils-helper-g (npm) (malicious package) - [MAL-2026-13852](https://insights.sbomify.com/MAL-2026-13852/): Malicious code in @years18/n8n-nodes-utils-helper-f (npm) (malicious package) - [MAL-2026-13851](https://insights.sbomify.com/MAL-2026-13851/): Malicious code in @years18/n8n-nodes-utils-helper-e (npm) (malicious package) - [MAL-2026-13850](https://insights.sbomify.com/MAL-2026-13850/): Malicious code in @years18/n8n-nodes-utils-helper-d (npm) (malicious package) - [MAL-2026-1385](https://insights.sbomify.com/MAL-2026-1385/): Malicious code in conductor-managed-airflow-environment (npm) (malicious package) - [MAL-2026-13849](https://insights.sbomify.com/MAL-2026-13849/): Malicious code in @years18/n8n-nodes-utils-helper-c (npm) (malicious package) - [MAL-2026-13848](https://insights.sbomify.com/MAL-2026-13848/): Malicious code in @years18/n8n-nodes-utils-helper-b (npm) (malicious package) - [MAL-2026-13847](https://insights.sbomify.com/MAL-2026-13847/): Malicious code in @years18/n8n-nodes-utils-helper-a (npm) (malicious package) - [MAL-2026-13846](https://insights.sbomify.com/MAL-2026-13846/): Malicious code in yangming8 (npm) (malicious package) - [MAL-2026-13845](https://insights.sbomify.com/MAL-2026-13845/): Malicious code in yangming708 (npm) (malicious package) - [MAL-2026-13844](https://insights.sbomify.com/MAL-2026-13844/): Malicious code in xhjckswqivb (npm) (malicious package) - [MAL-2026-13843](https://insights.sbomify.com/MAL-2026-13843/): Malicious code in xcnvjfsiewlk9 (npm) (malicious package) - [MAL-2026-13842](https://insights.sbomify.com/MAL-2026-13842/): Malicious code in vlbhvgovbbhfab (npm) (malicious package) - [MAL-2026-13841](https://insights.sbomify.com/MAL-2026-13841/): Malicious code in vkldhcmieru6 (npm) (malicious package) - [MAL-2026-13840](https://insights.sbomify.com/MAL-2026-13840/): Malicious code in vfgnhlkxchrd (npm) (malicious package) - [MAL-2026-1384](https://insights.sbomify.com/MAL-2026-1384/): Malicious code in @lux2/ssr-catalogue-sfcc (npm) (malicious package) - [MAL-2026-13839](https://insights.sbomify.com/MAL-2026-13839/): Malicious code in vczxijghsvizu4 (npm) (malicious package) - [MAL-2026-13838](https://insights.sbomify.com/MAL-2026-13838/): Malicious code in unitel4 (npm) (malicious package) - [MAL-2026-13837](https://insights.sbomify.com/MAL-2026-13837/): Malicious code in unitel3 (npm) (malicious package) - [MAL-2026-13836](https://insights.sbomify.com/MAL-2026-13836/): Malicious code in twcvhjlksdmx (npm) (malicious package) - [MAL-2026-13835](https://insights.sbomify.com/MAL-2026-13835/): Malicious code in truecxikdsal (npm) (malicious package) - [MAL-2026-13834](https://insights.sbomify.com/MAL-2026-13834/): Malicious code in thundertiger (npm) (malicious package) - [MAL-2026-13833](https://insights.sbomify.com/MAL-2026-13833/): Malicious code in prezdentkxheiw (npm) (malicious package) - [MAL-2026-13832](https://insights.sbomify.com/MAL-2026-13832/): Malicious code in passport811 (npm) (malicious package) - [MAL-2026-13831](https://insights.sbomify.com/MAL-2026-13831/): Malicious code in noxleys (npm) (malicious package) - [MAL-2026-13830](https://insights.sbomify.com/MAL-2026-13830/): Malicious code in nihzvdeowx5 (npm) (malicious package) - [MAL-2026-1383](https://insights.sbomify.com/MAL-2026-1383/): Malicious code in @immuta/pxl-components (npm) (malicious package) - [MAL-2026-13829](https://insights.sbomify.com/MAL-2026-13829/): Malicious code in nhdxzthponv5 (npm) (malicious package) - [MAL-2026-13828](https://insights.sbomify.com/MAL-2026-13828/): Malicious code in ms_aidc_com_tw (npm) (malicious package) - [MAL-2026-13827](https://insights.sbomify.com/MAL-2026-13827/): Malicious code in mobicwkgjmx (npm) (malicious package) - [MAL-2026-13826](https://insights.sbomify.com/MAL-2026-13826/): Malicious code in mobicommn (npm) (malicious package) - [MAL-2026-13825](https://insights.sbomify.com/MAL-2026-13825/): Malicious code in mnzjgxciwadk (npm) (malicious package) - [MAL-2026-13824](https://insights.sbomify.com/MAL-2026-13824/): Malicious code in mnteckets (npm) (malicious package) - [MAL-2026-13823](https://insights.sbomify.com/MAL-2026-13823/): Malicious code in mnmobicom (npm) (malicious package) - [MAL-2026-13822](https://insights.sbomify.com/MAL-2026-13822/): Malicious code in mnhdjoweuq (npm) (malicious package) - [MAL-2026-13821](https://insights.sbomify.com/MAL-2026-13821/): Malicious code in mnchfnvbue1 (npm) (malicious package) - [MAL-2026-13820](https://insights.sbomify.com/MAL-2026-13820/): Malicious code in khanbmnxls (npm) (malicious package) - [MAL-2026-1382](https://insights.sbomify.com/MAL-2026-1382/): Malicious code in @immuta/flag-providers-web (npm) (malicious package) - [MAL-2026-13819](https://insights.sbomify.com/MAL-2026-13819/): Malicious code in kanyut (npm) (malicious package) - [MAL-2026-13818](https://insights.sbomify.com/MAL-2026-13818/): Malicious code in jkbnwsdf8 (npm) (malicious package) - [MAL-2026-13817](https://insights.sbomify.com/MAL-2026-13817/): Malicious code in jhkxcixudnvm1 (npm) (malicious package) - [MAL-2026-13816](https://insights.sbomify.com/MAL-2026-13816/): Malicious code in hxckdoeaqjlc8 (npm) (malicious package) - [MAL-2026-13815](https://insights.sbomify.com/MAL-2026-13815/): Malicious code in hngfykuvgh4 (npm) (malicious package) - [MAL-2026-13814](https://insights.sbomify.com/MAL-2026-13814/): Malicious code in hlksdcixycvf (npm) (malicious package) - [MAL-2026-13813](https://insights.sbomify.com/MAL-2026-13813/): Malicious code in hgdvfuflnb (npm) (malicious package) - [MAL-2026-13812](https://insights.sbomify.com/MAL-2026-13812/): Malicious code in hfkcdyuwbdx1 (npm) (malicious package) - [MAL-2026-13811](https://insights.sbomify.com/MAL-2026-13811/): Malicious code in hcfguyfrmblp (npm) (malicious package) - [MAL-2026-13810](https://insights.sbomify.com/MAL-2026-13810/): Malicious code in gdwkh6vcbu (npm) (malicious package) - [MAL-2026-1381](https://insights.sbomify.com/MAL-2026-1381/): Malicious code in @immuta/feature-flags-core (npm) (malicious package) - [MAL-2026-13809](https://insights.sbomify.com/MAL-2026-13809/): Malicious code in fhj8cv9dkwm4 (npm) (malicious package) - [MAL-2026-13808](https://insights.sbomify.com/MAL-2026-13808/): Malicious code in fghvbmniwu (npm) (malicious package) - [MAL-2026-13807](https://insights.sbomify.com/MAL-2026-13807/): Malicious code in fdhcvriwecv3 (npm) (malicious package) - [MAL-2026-13806](https://insights.sbomify.com/MAL-2026-13806/): Malicious code in egypt0811 (npm) (malicious package) - [MAL-2026-13805](https://insights.sbomify.com/MAL-2026-13805/): Malicious code in egair0810 (npm) (malicious package) - [MAL-2026-13804](https://insights.sbomify.com/MAL-2026-13804/): Malicious code in dzvchorehui2 (npm) (malicious package) - [MAL-2026-13803](https://insights.sbomify.com/MAL-2026-13803/): Malicious code in dzcvhfruwluwe (npm) (malicious package) - [MAL-2026-13802](https://insights.sbomify.com/MAL-2026-13802/): Malicious code in dhjksficgwu2 (npm) (malicious package) - [MAL-2026-13801](https://insights.sbomify.com/MAL-2026-13801/): Malicious code in cxcbdjxcmncvfg2 (npm) (malicious package) - [MAL-2026-13800](https://insights.sbomify.com/MAL-2026-13800/): Malicious code in cvvkshuelwiu (npm) (malicious package) - [MAL-2026-1380](https://insights.sbomify.com/MAL-2026-1380/): Malicious code in cline (npm) (malicious package) - [MAL-2026-138](https://insights.sbomify.com/MAL-2026-138/): Malicious code in rt-footer (npm) (malicious package) - [MAL-2026-13799](https://insights.sbomify.com/MAL-2026-13799/): Malicious code in cvmbxcjiasdg (npm) (malicious package) - [MAL-2026-13798](https://insights.sbomify.com/MAL-2026-13798/): Malicious code in cvjwyinkpas (npm) (malicious package) - [MAL-2026-13797](https://insights.sbomify.com/MAL-2026-13797/): Malicious code in cvbniydplwe3 (npm) (malicious package) - [MAL-2026-13796](https://insights.sbomify.com/MAL-2026-13796/): Malicious code in cvbmxiowkwqla6 (npm) (malicious package) - [MAL-2026-13795](https://insights.sbomify.com/MAL-2026-13795/): Malicious code in csbcldfvivwfgd4 (npm) (malicious package) - [MAL-2026-13794](https://insights.sbomify.com/MAL-2026-13794/): Malicious code in clxofwfjskaz7 (npm) (malicious package) - [MAL-2026-13793](https://insights.sbomify.com/MAL-2026-13793/): Malicious code in cjdfswifuem3 (npm) (malicious package) - [MAL-2026-13792](https://insights.sbomify.com/MAL-2026-13792/): Malicious code in chmjdsidwlf5 (npm) (malicious package) - [MAL-2026-13791](https://insights.sbomify.com/MAL-2026-13791/): Malicious code in china_airlines (npm) (malicious package) - [MAL-2026-13790](https://insights.sbomify.com/MAL-2026-13790/): Malicious code in bvdfhdfvnk3 (npm) (malicious package) - [MAL-2026-1379](https://insights.sbomify.com/MAL-2026-1379/): Malicious code in 8x8-developer-docs (npm) (malicious package) - [MAL-2026-13789](https://insights.sbomify.com/MAL-2026-13789/): Malicious code in bmgki3g6fh3 (npm) (malicious package) - [MAL-2026-13788](https://insights.sbomify.com/MAL-2026-13788/): Malicious code in bikliwrapper (npm) (malicious package) - [MAL-2026-13787](https://insights.sbomify.com/MAL-2026-13787/): Malicious code in biklirouter (npm) (malicious package) - [MAL-2026-13786](https://insights.sbomify.com/MAL-2026-13786/): Malicious code in biklimaster (npm) (malicious package) - [MAL-2026-13785](https://insights.sbomify.com/MAL-2026-13785/): Malicious code in bgzxcuite2 (npm) (malicious package) - [MAL-2026-13784](https://insights.sbomify.com/MAL-2026-13784/): Malicious code in bgncvhferucfds (npm) (malicious package) - [MAL-2026-13783](https://insights.sbomify.com/MAL-2026-13783/): Malicious code in bcnfjndwbkf2 (npm) (malicious package) - [MAL-2026-13782](https://insights.sbomify.com/MAL-2026-13782/): Malicious code in airdzticket (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2026/page/149/