# Vulnerabilities published in 2026 - [MAL-2026-1360](https://insights.sbomify.com/MAL-2026-1360/): Malicious code in npm-doc-build (npm) (malicious package) - [MAL-2026-136](https://insights.sbomify.com/MAL-2026-136/): Malicious code in npe-toolkit-server-deps (npm) (malicious package) - [MAL-2026-13599](https://insights.sbomify.com/MAL-2026-13599/): Malicious code in dolyame-ui-sortablelist (npm) (malicious package) - [MAL-2026-13598](https://insights.sbomify.com/MAL-2026-13598/): Malicious code in dolyame-ui-selectaccount (npm) (malicious package) - [MAL-2026-13597](https://insights.sbomify.com/MAL-2026-13597/): Malicious code in dolyame-ui-scrollblock (npm) (malicious package) - [MAL-2026-13596](https://insights.sbomify.com/MAL-2026-13596/): Malicious code in dolyame-ui-progressline (npm) (malicious package) - [MAL-2026-13595](https://insights.sbomify.com/MAL-2026-13595/): Malicious code in dolyame-ui-postcsscustomproperties (npm) (malicious package) - [MAL-2026-13594](https://insights.sbomify.com/MAL-2026-13594/): Malicious code in dolyame-ui-postcssconfig (npm) (malicious package) - [MAL-2026-13593](https://insights.sbomify.com/MAL-2026-13593/): Malicious code in dolyame-ui-popupcarousel (npm) (malicious package) - [MAL-2026-13592](https://insights.sbomify.com/MAL-2026-13592/): Malicious code in dolyame-ui-pageheader (npm) (malicious package) - [MAL-2026-13591](https://insights.sbomify.com/MAL-2026-13591/): Malicious code in dolyame-ui-overridestyles (npm) (malicious package) - [MAL-2026-13590](https://insights.sbomify.com/MAL-2026-13590/): Malicious code in dolyame-ui-noindex (npm) (malicious package) - [MAL-2026-1359](https://insights.sbomify.com/MAL-2026-1359/): Malicious code in libsignal-mod (npm) (malicious package) - [MAL-2026-13589](https://insights.sbomify.com/MAL-2026-13589/): Malicious code in dolyame-ui-memoizeweak (npm) (malicious package) - [MAL-2026-13588](https://insights.sbomify.com/MAL-2026-13588/): Malicious code in dolyame-ui-mediainfohoc (npm) (malicious package) - [MAL-2026-13587](https://insights.sbomify.com/MAL-2026-13587/): Malicious code in dolyame-ui-inputtools (npm) (malicious package) - [MAL-2026-13586](https://insights.sbomify.com/MAL-2026-13586/): Malicious code in dolyame-ui-inputtime (npm) (malicious package) - [MAL-2026-13585](https://insights.sbomify.com/MAL-2026-13585/): Malicious code in dolyame-ui-inputtag (npm) (malicious package) - [MAL-2026-13584](https://insights.sbomify.com/MAL-2026-13584/): Malicious code in dolyame-ui-inputsecure (npm) (malicious package) - [MAL-2026-13583](https://insights.sbomify.com/MAL-2026-13583/): Malicious code in dolyame-ui-inputsearchtagged (npm) (malicious package) - [MAL-2026-13582](https://insights.sbomify.com/MAL-2026-13582/): Malicious code in dolyame-ui-inputsearch (npm) (malicious package) - [MAL-2026-13581](https://insights.sbomify.com/MAL-2026-13581/): Malicious code in dolyame-ui-inputrange (npm) (malicious package) - [MAL-2026-13580](https://insights.sbomify.com/MAL-2026-13580/): Malicious code in dolyame-ui-inputphone (npm) (malicious package) - [MAL-2026-1358](https://insights.sbomify.com/MAL-2026-1358/): Malicious code in dappa-libsignal (npm) (malicious package) - [MAL-2026-13579](https://insights.sbomify.com/MAL-2026-13579/): Malicious code in dolyame-ui-inputmoney (npm) (malicious package) - [MAL-2026-13578](https://insights.sbomify.com/MAL-2026-13578/): Malicious code in dolyame-ui-inputfio (npm) (malicious package) - [MAL-2026-13577](https://insights.sbomify.com/MAL-2026-13577/): Malicious code in dolyame-ui-inputdate (npm) (malicious package) - [MAL-2026-13576](https://insights.sbomify.com/MAL-2026-13576/): Malicious code in dolyame-ui-inputcount (npm) (malicious package) - [MAL-2026-13575](https://insights.sbomify.com/MAL-2026-13575/): Malicious code in dolyame-ui-inputcard (npm) (malicious package) - [MAL-2026-13574](https://insights.sbomify.com/MAL-2026-13574/): Malicious code in dolyame-ui-inputautocomplete (npm) (malicious package) - [MAL-2026-13573](https://insights.sbomify.com/MAL-2026-13573/): Malicious code in dolyame-ui-inlineedit (npm) (malicious package) - [MAL-2026-13572](https://insights.sbomify.com/MAL-2026-13572/): Malicious code in dolyame-ui-iconspack (npm) (malicious package) - [MAL-2026-13571](https://insights.sbomify.com/MAL-2026-13571/): Malicious code in dolyame-ui-generateid (npm) (malicious package) - [MAL-2026-13570](https://insights.sbomify.com/MAL-2026-13570/): Malicious code in dolyame-ui-focusstatehoc (npm) (malicious package) - [MAL-2026-1357](https://insights.sbomify.com/MAL-2026-1357/): Malicious code in bign.ts (npm) (malicious package) - [MAL-2026-13569](https://insights.sbomify.com/MAL-2026-13569/): Malicious code in dolyame-ui-flatcorners (npm) (malicious package) - [MAL-2026-13568](https://insights.sbomify.com/MAL-2026-13568/): Malicious code in dolyame-ui-eventoutside (npm) (malicious package) - [MAL-2026-13567](https://insights.sbomify.com/MAL-2026-13567/): Malicious code in dolyame-ui-draghoc (npm) (malicious package) - [MAL-2026-13566](https://insights.sbomify.com/MAL-2026-13566/): Malicious code in dolyame-ui-deprecatepropshoc (npm) (malicious package) - [MAL-2026-13565](https://insights.sbomify.com/MAL-2026-13565/): Malicious code in dolyame-ui-datatable (npm) (malicious package) - [MAL-2026-13564](https://insights.sbomify.com/MAL-2026-13564/): Malicious code in dolyame-ui-dataqa (npm) (malicious package) - [MAL-2026-13563](https://insights.sbomify.com/MAL-2026-13563/): Malicious code in dolyame-ui-controlgroup (npm) (malicious package) - [MAL-2026-13562](https://insights.sbomify.com/MAL-2026-13562/): Malicious code in dolyame-ui-contextmenusearchable (npm) (malicious package) - [MAL-2026-13561](https://insights.sbomify.com/MAL-2026-13561/): Malicious code in dolyame-ui-contextmenu (npm) (malicious package) - [MAL-2026-13560](https://insights.sbomify.com/MAL-2026-13560/): Malicious code in dolyame-ui-contenteditable (npm) (malicious package) - [MAL-2026-1356](https://insights.sbomify.com/MAL-2026-1356/): Malicious code in b2b-common-cb-lib (npm) (malicious package) - [MAL-2026-13559](https://insights.sbomify.com/MAL-2026-13559/): Malicious code in dolyame-ui-collapseblock (npm) (malicious package) - [MAL-2026-13558](https://insights.sbomify.com/MAL-2026-13558/): Malicious code in dolyame-ui-clickoutsidehoc (npm) (malicious package) - [MAL-2026-13557](https://insights.sbomify.com/MAL-2026-13557/): Malicious code in dolyame-ui-checkablegroup (npm) (malicious package) - [MAL-2026-13556](https://insights.sbomify.com/MAL-2026-13556/): Malicious code in dolyame-ui-carouselline (npm) (malicious package) - [MAL-2026-13555](https://insights.sbomify.com/MAL-2026-13555/): Malicious code in dolyame-ui-cardlogo (npm) (malicious package) - [MAL-2026-13554](https://insights.sbomify.com/MAL-2026-13554/): Malicious code in dolyame-ui-buttonstore (npm) (malicious package) - [MAL-2026-13553](https://insights.sbomify.com/MAL-2026-13553/): Malicious code in dolyame-boxy-independent-bnpl-product-grid (npm) (malicious package) - [MAL-2026-13552](https://insights.sbomify.com/MAL-2026-13552/): Malicious code in dolyame-boxy-independent-bnpl-main-title (npm) (malicious package) - [MAL-2026-13551](https://insights.sbomify.com/MAL-2026-13551/): Malicious code in dolyame-boxy-independent-bnpl-faq (npm) (malicious package) - [MAL-2026-13550](https://insights.sbomify.com/MAL-2026-13550/): Malicious code in dolyame-boxy-atom-bnpl-navigation-arrow (npm) (malicious package) - [MAL-2026-1355](https://insights.sbomify.com/MAL-2026-1355/): Malicious code in @dappaoffc/baileys-mod (npm) (malicious package) - [MAL-2026-13549](https://insights.sbomify.com/MAL-2026-13549/): Malicious code in dojo-rn-interview (npm) (malicious package) - [MAL-2026-13548](https://insights.sbomify.com/MAL-2026-13548/): Malicious code in devplatform-stylelint-config (npm) (malicious package) - [MAL-2026-13547](https://insights.sbomify.com/MAL-2026-13547/): Malicious code in devplatform-spa-plugin-remote-module (npm) (malicious package) - [MAL-2026-13546](https://insights.sbomify.com/MAL-2026-13546/): Malicious code in devplatform-spa-plugin-feature-toggle (npm) (malicious package) - [MAL-2026-13545](https://insights.sbomify.com/MAL-2026-13545/): Malicious code in devplatform-spa-errors (npm) (malicious package) - [MAL-2026-13544](https://insights.sbomify.com/MAL-2026-13544/): Malicious code in devplatform-eslint-config (npm) (malicious package) - [MAL-2026-13543](https://insights.sbomify.com/MAL-2026-13543/): Malicious code in devplatform-api-v1-resources (npm) (malicious package) - [MAL-2026-13542](https://insights.sbomify.com/MAL-2026-13542/): Malicious code in delivery-ci-jira (npm) (malicious package) - [MAL-2026-13541](https://insights.sbomify.com/MAL-2026-13541/): Malicious code in delivery-ci-documentation (npm) (malicious package) - [MAL-2026-13540](https://insights.sbomify.com/MAL-2026-13540/): Malicious code in delivery-ci-core (npm) (malicious package) - [MAL-2026-1354](https://insights.sbomify.com/MAL-2026-1354/): Malicious code in @dappaoffc/baileys (npm) (malicious package) - [MAL-2026-13539](https://insights.sbomify.com/MAL-2026-13539/): Malicious code in delivery-ci-codeceptjs (npm) (malicious package) - [MAL-2026-13538](https://insights.sbomify.com/MAL-2026-13538/): Malicious code in delivery-ci-cli (npm) (malicious package) - [MAL-2026-13537](https://insights.sbomify.com/MAL-2026-13537/): Malicious code in ded-pwa-test-pub-pkg (npm) (malicious package) - [MAL-2026-13536](https://insights.sbomify.com/MAL-2026-13536/): Malicious code in ded-pwa-c-micro (npm) (malicious package) - [MAL-2026-13535](https://insights.sbomify.com/MAL-2026-13535/): Malicious code in ded-pwa-c-mapping (npm) (malicious package) - [MAL-2026-13534](https://insights.sbomify.com/MAL-2026-13534/): Malicious code in ded-pwa-c-boxy-di (npm) (malicious package) - [MAL-2026-13533](https://insights.sbomify.com/MAL-2026-13533/): Malicious code in ded-pwa-c-boxy (npm) (malicious package) - [MAL-2026-13532](https://insights.sbomify.com/MAL-2026-13532/): Malicious code in ded-pwa-bnpl-forms-test-demo (npm) (malicious package) - [MAL-2026-13531](https://insights.sbomify.com/MAL-2026-13531/): Malicious code in damir-cbr-dawdntrnssbf (npm) (malicious package) - [MAL-2026-13530](https://insights.sbomify.com/MAL-2026-13530/): Malicious code in bnpl-blocks-atom-bnpl-loader (npm) (malicious package) - [MAL-2026-1353](https://insights.sbomify.com/MAL-2026-1353/): Malicious code in restrict-imports (npm) (malicious package) - [MAL-2026-13529](https://insights.sbomify.com/MAL-2026-13529/): Malicious code in bnpl-blocks-atom-bnpl-image-card (npm) (malicious package) - [MAL-2026-13528](https://insights.sbomify.com/MAL-2026-13528/): Malicious code in bnpl-blocks-atom-bnpl-faq-item (npm) (malicious package) - [MAL-2026-13527](https://insights.sbomify.com/MAL-2026-13527/): Malicious code in bnpl-blocks-atom-bnpl-checkbox (npm) (malicious package) - [MAL-2026-13526](https://insights.sbomify.com/MAL-2026-13526/): Malicious code in bigops-shared-product-design (npm) (malicious package) - [MAL-2026-13525](https://insights.sbomify.com/MAL-2026-13525/): Malicious code in bigops-security (npm) (malicious package) - [MAL-2026-13524](https://insights.sbomify.com/MAL-2026-13524/): Malicious code in bigops-abstract-entity-data (npm) (malicious package) - [MAL-2026-13523](https://insights.sbomify.com/MAL-2026-13523/): Malicious code in beaver-ui-popover-marker (npm) (malicious package) - [MAL-2026-13521](https://insights.sbomify.com/MAL-2026-13521/): Malicious code in @rbxst/services (npm) (malicious package) - [MAL-2026-13520](https://insights.sbomify.com/MAL-2026-13520/): Malicious code in @aster110/cc2wechat (npm) (malicious package) - [MAL-2026-1352](https://insights.sbomify.com/MAL-2026-1352/): Malicious code in jinja-template (npm) (malicious package) - [MAL-2026-13519](https://insights.sbomify.com/MAL-2026-13519/): Malicious code in streak-kit-map (npm) (malicious package) - [MAL-2026-13518](https://insights.sbomify.com/MAL-2026-13518/): Malicious code in postcss-theme-provider (npm) (malicious package) - [MAL-2026-13517](https://insights.sbomify.com/MAL-2026-13517/): Malicious code in gas-diff-core (npm) (malicious package) - [MAL-2026-13516](https://insights.sbomify.com/MAL-2026-13516/): Malicious code in forge-gas-diff (npm) (malicious package) - [MAL-2026-13515](https://insights.sbomify.com/MAL-2026-13515/): Malicious code in eacq-dialog (npm) (malicious package) - [MAL-2026-13514](https://insights.sbomify.com/MAL-2026-13514/): Malicious code in eacq-core (npm) (malicious package) - [MAL-2026-13513](https://insights.sbomify.com/MAL-2026-13513/): Malicious code in eacq-cdk (npm) (malicious package) - [MAL-2026-13512](https://insights.sbomify.com/MAL-2026-13512/): Malicious code in dolyame-ui-tabsblock (npm) (malicious package) - [MAL-2026-13511](https://insights.sbomify.com/MAL-2026-13511/): Malicious code in dolyame-ui-stateutils (npm) (malicious package) - [MAL-2026-13510](https://insights.sbomify.com/MAL-2026-13510/): Malicious code in dolyame-ui-progresscircle (npm) (malicious package) - [MAL-2026-1351](https://insights.sbomify.com/MAL-2026-1351/): Malicious code in faaladorcli (PyPI) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2026/page/152/