# Vulnerabilities published in 2026 - [MAL-2026-13236](https://insights.sbomify.com/MAL-2026-13236/): Malicious code in bigops-products (npm) (malicious package) - [MAL-2026-13235](https://insights.sbomify.com/MAL-2026-13235/): Malicious code in bigops-product-list (npm) (malicious package) - [MAL-2026-13234](https://insights.sbomify.com/MAL-2026-13234/): Malicious code in bigops-procedure-player (npm) (malicious package) - [MAL-2026-13233](https://insights.sbomify.com/MAL-2026-13233/): Malicious code in bigops-procedure-file-handlers (npm) (malicious package) - [MAL-2026-13232](https://insights.sbomify.com/MAL-2026-13232/): Malicious code in bigops-plugin-notification-builder (npm) (malicious package) - [MAL-2026-13231](https://insights.sbomify.com/MAL-2026-13231/): Malicious code in bigops-outgoing-call (npm) (malicious package) - [MAL-2026-13230](https://insights.sbomify.com/MAL-2026-13230/): Malicious code in bigops-operator-status (npm) (malicious package) - [MAL-2026-1323](https://insights.sbomify.com/MAL-2026-1323/): Malicious code in bluelite-bot-manager (npm) (malicious package) - [MAL-2026-13229](https://insights.sbomify.com/MAL-2026-13229/): Malicious code in bigops-opening-file-handler (npm) (malicious package) - [MAL-2026-13228](https://insights.sbomify.com/MAL-2026-13228/): Malicious code in bigops-offers (npm) (malicious package) - [MAL-2026-13227](https://insights.sbomify.com/MAL-2026-13227/): Malicious code in bigops-notes (npm) (malicious package) - [MAL-2026-13226](https://insights.sbomify.com/MAL-2026-13226/): Malicious code in bigops-nitro-events-table (npm) (malicious package) - [MAL-2026-13225](https://insights.sbomify.com/MAL-2026-13225/): Malicious code in bigops-nitro-client (npm) (malicious package) - [MAL-2026-13224](https://insights.sbomify.com/MAL-2026-13224/): Malicious code in bigops-microfrontend (npm) (malicious package) - [MAL-2026-13223](https://insights.sbomify.com/MAL-2026-13223/): Malicious code in bigops-logs-player (npm) (malicious package) - [MAL-2026-13222](https://insights.sbomify.com/MAL-2026-13222/): Malicious code in bigops-legacy-utils (npm) (malicious package) - [MAL-2026-13221](https://insights.sbomify.com/MAL-2026-13221/): Malicious code in bigops-legacy-telephony-panel (npm) (malicious package) - [MAL-2026-13220](https://insights.sbomify.com/MAL-2026-13220/): Malicious code in bigops-jsonpath-mapper (npm) (malicious package) - [MAL-2026-1322](https://insights.sbomify.com/MAL-2026-1322/): Malicious code in rtxnode-sass22 (npm) (malicious package) - [MAL-2026-13219](https://insights.sbomify.com/MAL-2026-13219/): Malicious code in bigops-insite (npm) (malicious package) - [MAL-2026-13218](https://insights.sbomify.com/MAL-2026-13218/): Malicious code in aws-sdk-v4 (npm) (malicious package) - [MAL-2026-13217](https://insights.sbomify.com/MAL-2026-13217/): Malicious code in akamai-sensorv2 (npm) (malicious package) - [MAL-2026-13216](https://insights.sbomify.com/MAL-2026-13216/): Malicious code in akamai-sensorv1 (npm) (malicious package) - [MAL-2026-13215](https://insights.sbomify.com/MAL-2026-13215/): Malicious code in @zzzcrypto/xrp-lib (npm) (malicious package) - [MAL-2026-13214](https://insights.sbomify.com/MAL-2026-13214/): Malicious code in @zzzcrypto/solana-spl-token (npm) (malicious package) - [MAL-2026-13213](https://insights.sbomify.com/MAL-2026-13213/): Malicious code in @zzzcrypto/playwrite (npm) (malicious package) - [MAL-2026-13212](https://insights.sbomify.com/MAL-2026-13212/): Malicious code in @zzzcrypto/etherjs (npm) (malicious package) - [MAL-2026-13211](https://insights.sbomify.com/MAL-2026-13211/): Malicious code in @zzzcrypto/bitcoin-lib (npm) (malicious package) - [MAL-2026-13210](https://insights.sbomify.com/MAL-2026-13210/): Malicious code in @ohos-ports/codex (npm) (malicious package) - [MAL-2026-1321](https://insights.sbomify.com/MAL-2026-1321/): Malicious code in @openclaw-ai/openclawai (npm) (malicious package) - [MAL-2026-13209](https://insights.sbomify.com/MAL-2026-13209/): Malicious code in @guangnao/claude-cli (npm) (malicious package) - [MAL-2026-13208](https://insights.sbomify.com/MAL-2026-13208/): Malicious code in eacq-auth (npm) (malicious package) - [MAL-2026-13207](https://insights.sbomify.com/MAL-2026-13207/): Malicious code in eacq-api (npm) (malicious package) - [MAL-2026-13206](https://insights.sbomify.com/MAL-2026-13206/): Malicious code in eacq-acq-menu-core (npm) (malicious package) - [MAL-2026-13205](https://insights.sbomify.com/MAL-2026-13205/): Malicious code in eacq-acq-menu (npm) (malicious package) - [MAL-2026-13204](https://insights.sbomify.com/MAL-2026-13204/): Malicious code in dwsai-dwsai-core (npm) (malicious package) - [MAL-2026-13203](https://insights.sbomify.com/MAL-2026-13203/): Malicious code in dws-frontend-dws-frontend-core (npm) (malicious package) - [MAL-2026-13202](https://insights.sbomify.com/MAL-2026-13202/): Malicious code in dwhetlfront-dwhetlfront-core (npm) (malicious package) - [MAL-2026-13201](https://insights.sbomify.com/MAL-2026-13201/): Malicious code in dp-web-header (npm) (malicious package) - [MAL-2026-13200](https://insights.sbomify.com/MAL-2026-13200/): Malicious code in dp-owners (npm) (malicious package) - [MAL-2026-1320](https://insights.sbomify.com/MAL-2026-1320/): Malicious code in chain-promised-await (npm) (malicious package) - [MAL-2026-132](https://insights.sbomify.com/MAL-2026-132/): Malicious code in create-react-app-lambda (npm) (malicious package) - [MAL-2026-13199](https://insights.sbomify.com/MAL-2026-13199/): Malicious code in dolyame-ui-utils (npm) (malicious package) - [MAL-2026-13198](https://insights.sbomify.com/MAL-2026-13198/): Malicious code in dolyame-ui-types (npm) (malicious package) - [MAL-2026-13197](https://insights.sbomify.com/MAL-2026-13197/): Malicious code in dolyame-ui-tooltip (npm) (malicious package) - [MAL-2026-13196](https://insights.sbomify.com/MAL-2026-13196/): Malicious code in dolyame-ui-toggle (npm) (malicious package) - [MAL-2026-13195](https://insights.sbomify.com/MAL-2026-13195/): Malicious code in dolyame-ui-themes (npm) (malicious package) - [MAL-2026-13194](https://insights.sbomify.com/MAL-2026-13194/): Malicious code in dolyame-ui-textarea (npm) (malicious package) - [MAL-2026-13193](https://insights.sbomify.com/MAL-2026-13193/): Malicious code in dolyame-ui-text (npm) (malicious package) - [MAL-2026-13192](https://insights.sbomify.com/MAL-2026-13192/): Malicious code in dolyame-ui-test (npm) (malicious package) - [MAL-2026-13191](https://insights.sbomify.com/MAL-2026-13191/): Malicious code in dolyame-ui-tag (npm) (malicious package) - [MAL-2026-13190](https://insights.sbomify.com/MAL-2026-13190/): Malicious code in dolyame-ui-tabs (npm) (malicious package) - [MAL-2026-1319](https://insights.sbomify.com/MAL-2026-1319/): Malicious code in alinet-w (npm) (malicious package) - [MAL-2026-13189](https://insights.sbomify.com/MAL-2026-13189/): Malicious code in dolyame-ui-table (npm) (malicious package) - [MAL-2026-13188](https://insights.sbomify.com/MAL-2026-13188/): Malicious code in dolyame-ui-swiper (npm) (malicious package) - [MAL-2026-13187](https://insights.sbomify.com/MAL-2026-13187/): Malicious code in dolyame-ui-styles (npm) (malicious package) - [MAL-2026-13186](https://insights.sbomify.com/MAL-2026-13186/): Malicious code in dolyame-ui-storybook-menu (npm) (malicious package) - [MAL-2026-13185](https://insights.sbomify.com/MAL-2026-13185/): Malicious code in dolyame-ui-stepper (npm) (malicious package) - [MAL-2026-13184](https://insights.sbomify.com/MAL-2026-13184/): Malicious code in dolyame-ui-slider (npm) (malicious package) - [MAL-2026-13183](https://insights.sbomify.com/MAL-2026-13183/): Malicious code in dolyame-ui-skeleton (npm) (malicious package) - [MAL-2026-13182](https://insights.sbomify.com/MAL-2026-13182/): Malicious code in dolyame-ui-select (npm) (malicious package) - [MAL-2026-13181](https://insights.sbomify.com/MAL-2026-13181/): Malicious code in dolyame-ui-scroll (npm) (malicious package) - [MAL-2026-13180](https://insights.sbomify.com/MAL-2026-13180/): Malicious code in dolyame-ui-react-wrapper (npm) (malicious package) - [MAL-2026-1318](https://insights.sbomify.com/MAL-2026-1318/): Malicious code in @web-monorepo/fetchers (npm) (malicious package) - [MAL-2026-13179](https://insights.sbomify.com/MAL-2026-13179/): Malicious code in dolyame-ui-react-version-switch (npm) (malicious package) - [MAL-2026-13178](https://insights.sbomify.com/MAL-2026-13178/): Malicious code in dolyame-ui-react-dom-wrapper (npm) (malicious package) - [MAL-2026-13177](https://insights.sbomify.com/MAL-2026-13177/): Malicious code in dolyame-ui-radio (npm) (malicious package) - [MAL-2026-13176](https://insights.sbomify.com/MAL-2026-13176/): Malicious code in dolyame-ui-portal (npm) (malicious package) - [MAL-2026-13175](https://insights.sbomify.com/MAL-2026-13175/): Malicious code in dolyame-ui-popup (npm) (malicious package) - [MAL-2026-13174](https://insights.sbomify.com/MAL-2026-13174/): Malicious code in dolyame-ui-popover (npm) (malicious package) - [MAL-2026-13173](https://insights.sbomify.com/MAL-2026-13173/): Malicious code in dolyame-ui-pie (npm) (malicious package) - [MAL-2026-13172](https://insights.sbomify.com/MAL-2026-13172/): Malicious code in dolyame-ui-pagination (npm) (malicious package) - [MAL-2026-13171](https://insights.sbomify.com/MAL-2026-13171/): Malicious code in dolyame-ui-notification (npm) (malicious package) - [MAL-2026-13170](https://insights.sbomify.com/MAL-2026-13170/): Malicious code in dolyame-ui-navigation (npm) (malicious package) - [MAL-2026-1317](https://insights.sbomify.com/MAL-2026-1317/): Malicious code in @augmentor/experiences (npm) (malicious package) - [MAL-2026-13169](https://insights.sbomify.com/MAL-2026-13169/): Malicious code in dolyame-ui-money (npm) (malicious package) - [MAL-2026-13168](https://insights.sbomify.com/MAL-2026-13168/): Malicious code in dolyame-ui-mixins (npm) (malicious package) - [MAL-2026-13167](https://insights.sbomify.com/MAL-2026-13167/): Malicious code in dolyame-ui-menu (npm) (malicious package) - [MAL-2026-13166](https://insights.sbomify.com/MAL-2026-13166/): Malicious code in dolyame-ui-loader (npm) (malicious package) - [MAL-2026-13165](https://insights.sbomify.com/MAL-2026-13165/): Malicious code in dolyame-ui-list (npm) (malicious package) - [MAL-2026-13164](https://insights.sbomify.com/MAL-2026-13164/): Malicious code in dolyame-ui-link (npm) (malicious package) - [MAL-2026-13163](https://insights.sbomify.com/MAL-2026-13163/): Malicious code in dolyame-ui-layout (npm) (malicious package) - [MAL-2026-13162](https://insights.sbomify.com/MAL-2026-13162/): Malicious code in dolyame-ui-label (npm) (malicious package) - [MAL-2026-13161](https://insights.sbomify.com/MAL-2026-13161/): Malicious code in dolyame-ui-island (npm) (malicious package) - [MAL-2026-13160](https://insights.sbomify.com/MAL-2026-13160/): Malicious code in dolyame-ui-input (npm) (malicious package) - [MAL-2026-1316](https://insights.sbomify.com/MAL-2026-1316/): Malicious code in xc-input-toggle (npm) (malicious package) - [MAL-2026-13159](https://insights.sbomify.com/MAL-2026-13159/): Malicious code in dolyame-ui-icon (npm) (malicious package) - [MAL-2026-13158](https://insights.sbomify.com/MAL-2026-13158/): Malicious code in dolyame-ui-group (npm) (malicious package) - [MAL-2026-13157](https://insights.sbomify.com/MAL-2026-13157/): Malicious code in dolyame-ui-grid (npm) (malicious package) - [MAL-2026-13156](https://insights.sbomify.com/MAL-2026-13156/): Malicious code in dolyame-ui-footer (npm) (malicious package) - [MAL-2026-13155](https://insights.sbomify.com/MAL-2026-13155/): Malicious code in dolyame-ui-flag (npm) (malicious package) - [MAL-2026-13154](https://insights.sbomify.com/MAL-2026-13154/): Malicious code in dolyame-ui-filter (npm) (malicious package) - [MAL-2026-13153](https://insights.sbomify.com/MAL-2026-13153/): Malicious code in dolyame-ui-editor (npm) (malicious package) - [MAL-2026-13152](https://insights.sbomify.com/MAL-2026-13152/): Malicious code in dolyame-ui-dropdown (npm) (malicious package) - [MAL-2026-13151](https://insights.sbomify.com/MAL-2026-13151/): Malicious code in dolyame-ui-draggable (npm) (malicious package) - [MAL-2026-13150](https://insights.sbomify.com/MAL-2026-13150/): Malicious code in dolyame-ui-container (npm) (malicious package) - [MAL-2026-1315](https://insights.sbomify.com/MAL-2026-1315/): Malicious code in iron-signals (npm) (malicious package) - [MAL-2026-13149](https://insights.sbomify.com/MAL-2026-13149/): Malicious code in dolyame-ui-constants (npm) (malicious package) - [MAL-2026-13148](https://insights.sbomify.com/MAL-2026-13148/): Malicious code in dolyame-ui-confirmation (npm) (malicious package) - [MAL-2026-13147](https://insights.sbomify.com/MAL-2026-13147/): Malicious code in dolyame-ui-colors (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2026/page/156/