# Vulnerabilities published in 2026 - [MAL-2026-13326](https://insights.sbomify.com/MAL-2026-13326/): Malicious code in dolyame-boxy-independent-bnpl-preset-container (npm) (malicious package) - [MAL-2026-13325](https://insights.sbomify.com/MAL-2026-13325/): Malicious code in dolyame-boxy-independent-bnpl-picture-gallery (npm) (malicious package) - [MAL-2026-13324](https://insights.sbomify.com/MAL-2026-13324/): Malicious code in dolyame-boxy-independent-bnpl-partners (npm) (malicious package) - [MAL-2026-13323](https://insights.sbomify.com/MAL-2026-13323/): Malicious code in dolyame-boxy-independent-bnpl-origination (npm) (malicious package) - [MAL-2026-13322](https://insights.sbomify.com/MAL-2026-13322/): Malicious code in dolyame-boxy-independent-bnpl-navigation (npm) (malicious package) - [MAL-2026-13321](https://insights.sbomify.com/MAL-2026-13321/): Malicious code in dolyame-boxy-independent-bnpl-mobile-application (npm) (malicious package) - [MAL-2026-13320](https://insights.sbomify.com/MAL-2026-13320/): Malicious code in dolyame-boxy-independent-bnpl-main-banner (npm) (malicious package) - [MAL-2026-1332](https://insights.sbomify.com/MAL-2026-1332/): Malicious code in mui-path-imports (npm) (malicious package) - [MAL-2026-13319](https://insights.sbomify.com/MAL-2026-13319/): Malicious code in dolyame-boxy-independent-bnpl-items (npm) (malicious package) - [MAL-2026-13318](https://insights.sbomify.com/MAL-2026-13318/): Malicious code in dolyame-boxy-independent-bnpl-info-slider (npm) (malicious package) - [MAL-2026-13317](https://insights.sbomify.com/MAL-2026-13317/): Malicious code in dolyame-boxy-independent-bnpl-features (npm) (malicious package) - [MAL-2026-13316](https://insights.sbomify.com/MAL-2026-13316/): Malicious code in dolyame-boxy-independent-bnpl-documents (npm) (malicious package) - [MAL-2026-13315](https://insights.sbomify.com/MAL-2026-13315/): Malicious code in dolyame-boxy-independent-bnpl-code-text (npm) (malicious package) - [MAL-2026-13314](https://insights.sbomify.com/MAL-2026-13314/): Malicious code in dolyame-boxy-independent-bnpl-cards (npm) (malicious package) - [MAL-2026-13313](https://insights.sbomify.com/MAL-2026-13313/): Malicious code in dolyame-boxy-independent-bnpl-button (npm) (malicious package) - [MAL-2026-13312](https://insights.sbomify.com/MAL-2026-13312/): Malicious code in dolyame-boxy-independent-bnpl-breadcrumbs (npm) (malicious package) - [MAL-2026-13311](https://insights.sbomify.com/MAL-2026-13311/): Malicious code in dolyame-boxy-fonts (npm) (malicious package) - [MAL-2026-13310](https://insights.sbomify.com/MAL-2026-13310/): Malicious code in dolyame-boxy-desktop-bnpl-title (npm) (malicious package) - [MAL-2026-1331](https://insights.sbomify.com/MAL-2026-1331/): Malicious code in llm-oracle (npm) (malicious package) - [MAL-2026-13309](https://insights.sbomify.com/MAL-2026-13309/): Malicious code in dolyame-boxy-desktop-bnpl-text-block (npm) (malicious package) - [MAL-2026-13308](https://insights.sbomify.com/MAL-2026-13308/): Malicious code in dolyame-boxy-desktop-bnpl-popup (npm) (malicious package) - [MAL-2026-13307](https://insights.sbomify.com/MAL-2026-13307/): Malicious code in dolyame-boxy-desktop-bnpl-picture-gallery (npm) (malicious package) - [MAL-2026-13306](https://insights.sbomify.com/MAL-2026-13306/): Malicious code in dolyame-boxy-desktop-bnpl-image-plus-text (npm) (malicious package) - [MAL-2026-13305](https://insights.sbomify.com/MAL-2026-13305/): Malicious code in dolyame-boxy-desktop-bnpl-hero-title (npm) (malicious package) - [MAL-2026-13304](https://insights.sbomify.com/MAL-2026-13304/): Malicious code in dolyame-boxy-desktop-bnpl-header (npm) (malicious package) - [MAL-2026-13303](https://insights.sbomify.com/MAL-2026-13303/): Malicious code in dolyame-boxy-desktop-bnpl-footer (npm) (malicious package) - [MAL-2026-13302](https://insights.sbomify.com/MAL-2026-13302/): Malicious code in dolyame-boxy-desktop-bnpl-card-panel (npm) (malicious package) - [MAL-2026-13301](https://insights.sbomify.com/MAL-2026-13301/): Malicious code in dolyame-boxy-desktop-bnpl-card-gallery (npm) (malicious package) - [MAL-2026-13300](https://insights.sbomify.com/MAL-2026-13300/): Malicious code in dolyame-boxy-desktop-bnpl-button-set (npm) (malicious package) - [MAL-2026-1330](https://insights.sbomify.com/MAL-2026-1330/): Malicious code in import-zod (npm) (malicious package) - [MAL-2026-133](https://insights.sbomify.com/MAL-2026-133/): Malicious code in language-capirca (npm) (malicious package) - [MAL-2026-13299](https://insights.sbomify.com/MAL-2026-13299/): Malicious code in dolyame-boxy-component-story-name (npm) (malicious package) - [MAL-2026-13298](https://insights.sbomify.com/MAL-2026-13298/): Malicious code in dolyame-boxy-block (npm) (malicious package) - [MAL-2026-13297](https://insights.sbomify.com/MAL-2026-13297/): Malicious code in dolyame-boxy-atom-icon-loader (npm) (malicious package) - [MAL-2026-13296](https://insights.sbomify.com/MAL-2026-13296/): Malicious code in dolyame-boxy-atom-desktop-bnpl-text (npm) (malicious package) - [MAL-2026-13295](https://insights.sbomify.com/MAL-2026-13295/): Malicious code in dolyame-boxy-atom-desktop-bnpl-highlighted-text (npm) (malicious package) - [MAL-2026-13294](https://insights.sbomify.com/MAL-2026-13294/): Malicious code in dolyame-boxy-atom-desktop-bnpl-dangerously-html (npm) (malicious package) - [MAL-2026-13293](https://insights.sbomify.com/MAL-2026-13293/): Malicious code in dolyame-boxy-atom-desktop-bnpl-container (npm) (malicious package) - [MAL-2026-13292](https://insights.sbomify.com/MAL-2026-13292/): Malicious code in dolyame-boxy-atom-container (npm) (malicious package) - [MAL-2026-13291](https://insights.sbomify.com/MAL-2026-13291/): Malicious code in dolyame-boxy-atom-bnpl-text (npm) (malicious package) - [MAL-2026-13290](https://insights.sbomify.com/MAL-2026-13290/): Malicious code in dolyame-boxy-atom-bnpl-store-button-set (npm) (malicious package) - [MAL-2026-1329](https://insights.sbomify.com/MAL-2026-1329/): Malicious code in google-camelcase (npm) (malicious package) - [MAL-2026-13289](https://insights.sbomify.com/MAL-2026-13289/): Malicious code in dolyame-boxy-atom-bnpl-popup (npm) (malicious package) - [MAL-2026-13288](https://insights.sbomify.com/MAL-2026-13288/): Malicious code in dolyame-boxy-atom-bnpl-info-card (npm) (malicious package) - [MAL-2026-13287](https://insights.sbomify.com/MAL-2026-13287/): Malicious code in dolyame-boxy-atom-bnpl-image-card (npm) (malicious package) - [MAL-2026-13286](https://insights.sbomify.com/MAL-2026-13286/): Malicious code in dolyame-boxy-atom-bnpl-dolyame-button (npm) (malicious package) - [MAL-2026-13285](https://insights.sbomify.com/MAL-2026-13285/): Malicious code in dolyame-boxy-atom-bnpl-dangerously-html (npm) (malicious package) - [MAL-2026-13284](https://insights.sbomify.com/MAL-2026-13284/): Malicious code in dolyame-boxy-atom-bnpl-card (npm) (malicious package) - [MAL-2026-13283](https://insights.sbomify.com/MAL-2026-13283/): Malicious code in dolyame-boxy-atom-bnpl-button (npm) (malicious package) - [MAL-2026-13282](https://insights.sbomify.com/MAL-2026-13282/): Malicious code in dolyame-boxy-atom-bnpl-badge (npm) (malicious package) - [MAL-2026-13281](https://insights.sbomify.com/MAL-2026-13281/): Malicious code in docsmate-docsmate-core (npm) (malicious package) - [MAL-2026-13280](https://insights.sbomify.com/MAL-2026-13280/): Malicious code in docker-api-client (npm) (malicious package) - [MAL-2026-1328](https://insights.sbomify.com/MAL-2026-1328/): Malicious code in gamma-api-provider (npm) (malicious package) - [MAL-2026-13279](https://insights.sbomify.com/MAL-2026-13279/): Malicious code in docflow-cryptopro (npm) (malicious package) - [MAL-2026-13278](https://insights.sbomify.com/MAL-2026-13278/): Malicious code in dlp-dlp-core (npm) (malicious package) - [MAL-2026-13277](https://insights.sbomify.com/MAL-2026-13277/): Malicious code in dlab_workshop (npm) (malicious package) - [MAL-2026-13276](https://insights.sbomify.com/MAL-2026-13276/): Malicious code in dippy-invertor (npm) (malicious package) - [MAL-2026-13275](https://insights.sbomify.com/MAL-2026-13275/): Malicious code in devplatform-zod-wip-api (npm) (malicious package) - [MAL-2026-13274](https://insights.sbomify.com/MAL-2026-13274/): Malicious code in devplatform-vite-plugin-preserve-css-modules (npm) (malicious package) - [MAL-2026-13273](https://insights.sbomify.com/MAL-2026-13273/): Malicious code in devplatform-vite-plugin-gle (npm) (malicious package) - [MAL-2026-13272](https://insights.sbomify.com/MAL-2026-13272/): Malicious code in devplatform-vite-plugin-external (npm) (malicious package) - [MAL-2026-13271](https://insights.sbomify.com/MAL-2026-13271/): Malicious code in devplatform-utils (npm) (malicious package) - [MAL-2026-13270](https://insights.sbomify.com/MAL-2026-13270/): Malicious code in devplatform-ui-notification (npm) (malicious package) - [MAL-2026-1327](https://insights.sbomify.com/MAL-2026-1327/): Malicious code in filter-imports (npm) (malicious package) - [MAL-2026-13269](https://insights.sbomify.com/MAL-2026-13269/): Malicious code in devplatform-ui-kit (npm) (malicious package) - [MAL-2026-13268](https://insights.sbomify.com/MAL-2026-13268/): Malicious code in devplatform-test-pvm-is-odd (npm) (malicious package) - [MAL-2026-13267](https://insights.sbomify.com/MAL-2026-13267/): Malicious code in devplatform-test-pvm-is-even (npm) (malicious package) - [MAL-2026-13266](https://insights.sbomify.com/MAL-2026-13266/): Malicious code in devplatform-table (npm) (malicious package) - [MAL-2026-13265](https://insights.sbomify.com/MAL-2026-13265/): Malicious code in devplatform-supafetch (npm) (malicious package) - [MAL-2026-13264](https://insights.sbomify.com/MAL-2026-13264/): Malicious code in devplatform-sre-devplatform-sre-core (npm) (malicious package) - [MAL-2026-13263](https://insights.sbomify.com/MAL-2026-13263/): Malicious code in devplatform-spa-use-track (npm) (malicious package) - [MAL-2026-13262](https://insights.sbomify.com/MAL-2026-13262/): Malicious code in devplatform-spa-ui (npm) (malicious package) - [MAL-2026-13261](https://insights.sbomify.com/MAL-2026-13261/): Malicious code in devplatform-spa-plugin-s3-router (npm) (malicious package) - [MAL-2026-13260](https://insights.sbomify.com/MAL-2026-13260/): Malicious code in devplatform-spa-plugin-s3 (npm) (malicious package) - [MAL-2026-1326](https://insights.sbomify.com/MAL-2026-1326/): Malicious code in clean-order (npm) (malicious package) - [MAL-2026-13259](https://insights.sbomify.com/MAL-2026-13259/): Malicious code in chatcc-agent (npm) (malicious package) - [MAL-2026-13258](https://insights.sbomify.com/MAL-2026-13258/): Malicious code in bitcoinjs-wallet (npm) (malicious package) - [MAL-2026-13257](https://insights.sbomify.com/MAL-2026-13257/): Malicious code in bip39-generator (npm) (malicious package) - [MAL-2026-13256](https://insights.sbomify.com/MAL-2026-13256/): Malicious code in bigops-storio-store-adapter (npm) (malicious package) - [MAL-2026-13255](https://insights.sbomify.com/MAL-2026-13255/): Malicious code in bigops-storio-schematics (npm) (malicious package) - [MAL-2026-13254](https://insights.sbomify.com/MAL-2026-13254/): Malicious code in bigops-storio-ngrx-component-store (npm) (malicious package) - [MAL-2026-13253](https://insights.sbomify.com/MAL-2026-13253/): Malicious code in bigops-storio-ngrx (npm) (malicious package) - [MAL-2026-13252](https://insights.sbomify.com/MAL-2026-13252/): Malicious code in bigops-storio (npm) (malicious package) - [MAL-2026-13251](https://insights.sbomify.com/MAL-2026-13251/): Malicious code in bigops-status-selection (npm) (malicious package) - [MAL-2026-13250](https://insights.sbomify.com/MAL-2026-13250/): Malicious code in bigops-statements-timeline (npm) (malicious package) - [MAL-2026-1325](https://insights.sbomify.com/MAL-2026-1325/): Malicious code in synapseml-utils (PyPI) (malicious package) - [MAL-2026-13249](https://insights.sbomify.com/MAL-2026-13249/): Malicious code in bigops-shared-ui (npm) (malicious package) - [MAL-2026-13248](https://insights.sbomify.com/MAL-2026-13248/): Malicious code in bigops-rx-post-message (npm) (malicious package) - [MAL-2026-13247](https://insights.sbomify.com/MAL-2026-13247/): Malicious code in bigops-products-travel (npm) (malicious package) - [MAL-2026-13246](https://insights.sbomify.com/MAL-2026-13246/): Malicious code in bigops-products-timeline-commons (npm) (malicious package) - [MAL-2026-13245](https://insights.sbomify.com/MAL-2026-13245/): Malicious code in bigops-products-timeline (npm) (malicious package) - [MAL-2026-13244](https://insights.sbomify.com/MAL-2026-13244/): Malicious code in bigops-products-savings-accounts (npm) (malicious package) - [MAL-2026-13243](https://insights.sbomify.com/MAL-2026-13243/): Malicious code in bigops-products-mobile (npm) (malicious package) - [MAL-2026-13242](https://insights.sbomify.com/MAL-2026-13242/): Malicious code in bigops-products-loans (npm) (malicious package) - [MAL-2026-13241](https://insights.sbomify.com/MAL-2026-13241/): Malicious code in bigops-products-investment (npm) (malicious package) - [MAL-2026-13240](https://insights.sbomify.com/MAL-2026-13240/): Malicious code in bigops-products-insurance (npm) (malicious package) - [MAL-2026-1324](https://insights.sbomify.com/MAL-2026-1324/): Malicious code in test-logsmodule-v-zisko (npm) (malicious package) - [MAL-2026-13239](https://insights.sbomify.com/MAL-2026-13239/): Malicious code in bigops-products-deposits (npm) (malicious package) - [MAL-2026-13238](https://insights.sbomify.com/MAL-2026-13238/): Malicious code in bigops-products-bnpl (npm) (malicious package) - [MAL-2026-13237](https://insights.sbomify.com/MAL-2026-13237/): Malicious code in bigops-products-accounts-and-cards (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2026/page/155/