# Vulnerabilities published in 2026 - [MAL-2026-12967](https://insights.sbomify.com/MAL-2026-12967/): Malicious code in bnpl-blocks-independent-bnpl-product-grid (npm) (malicious package) - [MAL-2026-12966](https://insights.sbomify.com/MAL-2026-12966/): Malicious code in bnpl-blocks-independent-bnpl-preset-container (npm) (malicious package) - [MAL-2026-12965](https://insights.sbomify.com/MAL-2026-12965/): Malicious code in bnpl-blocks-independent-bnpl-picture-gallery (npm) (malicious package) - [MAL-2026-12964](https://insights.sbomify.com/MAL-2026-12964/): Malicious code in bnpl-blocks-independent-bnpl-origination (npm) (malicious package) - [MAL-2026-12963](https://insights.sbomify.com/MAL-2026-12963/): Malicious code in bnpl-blocks-independent-bnpl-open-api (npm) (malicious package) - [MAL-2026-12962](https://insights.sbomify.com/MAL-2026-12962/): Malicious code in bnpl-blocks-independent-bnpl-navigation (npm) (malicious package) - [MAL-2026-12961](https://insights.sbomify.com/MAL-2026-12961/): Malicious code in bnpl-blocks-independent-bnpl-mobile-application (npm) (malicious package) - [MAL-2026-12960](https://insights.sbomify.com/MAL-2026-12960/): Malicious code in bnpl-blocks-independent-bnpl-main-title (npm) (malicious package) - [MAL-2026-1296](https://insights.sbomify.com/MAL-2026-1296/): Malicious code in bpsm (PyPI) (malicious package) - [MAL-2026-12959](https://insights.sbomify.com/MAL-2026-12959/): Malicious code in bnpl-blocks-independent-bnpl-main-banner (npm) (malicious package) - [MAL-2026-12958](https://insights.sbomify.com/MAL-2026-12958/): Malicious code in bnpl-blocks-independent-bnpl-items (npm) (malicious package) - [MAL-2026-12957](https://insights.sbomify.com/MAL-2026-12957/): Malicious code in bnpl-blocks-independent-bnpl-info-slider (npm) (malicious package) - [MAL-2026-12956](https://insights.sbomify.com/MAL-2026-12956/): Malicious code in bnpl-blocks-independent-bnpl-features (npm) (malicious package) - [MAL-2026-12955](https://insights.sbomify.com/MAL-2026-12955/): Malicious code in bnpl-blocks-independent-bnpl-faq (npm) (malicious package) - [MAL-2026-12954](https://insights.sbomify.com/MAL-2026-12954/): Malicious code in bnpl-blocks-independent-bnpl-documents (npm) (malicious package) - [MAL-2026-12953](https://insights.sbomify.com/MAL-2026-12953/): Malicious code in bnpl-blocks-independent-bnpl-code-text (npm) (malicious package) - [MAL-2026-12952](https://insights.sbomify.com/MAL-2026-12952/): Malicious code in bnpl-blocks-independent-bnpl-cards (npm) (malicious package) - [MAL-2026-12951](https://insights.sbomify.com/MAL-2026-12951/): Malicious code in bnpl-blocks-independent-bnpl-button (npm) (malicious package) - [MAL-2026-12950](https://insights.sbomify.com/MAL-2026-12950/): Malicious code in bnpl-blocks-independent-bnpl-breadcrumbs (npm) (malicious package) - [MAL-2026-1295](https://insights.sbomify.com/MAL-2026-1295/): Malicious code in tabformerlite (PyPI) (malicious package) - [MAL-2026-12949](https://insights.sbomify.com/MAL-2026-12949/): Malicious code in bnpl-blocks-independent-bnpl-anchor (npm) (malicious package) - [MAL-2026-12948](https://insights.sbomify.com/MAL-2026-12948/): Malicious code in bnpl-blocks-fonts (npm) (malicious package) - [MAL-2026-12947](https://insights.sbomify.com/MAL-2026-12947/): Malicious code in bnpl-blocks-feature-partners (npm) (malicious package) - [MAL-2026-12946](https://insights.sbomify.com/MAL-2026-12946/): Malicious code in bnpl-blocks-desktop-large-bnpl-reviews (npm) (malicious package) - [MAL-2026-12945](https://insights.sbomify.com/MAL-2026-12945/): Malicious code in bnpl-blocks-desktop-bnpl-title (npm) (malicious package) - [MAL-2026-12944](https://insights.sbomify.com/MAL-2026-12944/): Malicious code in bnpl-blocks-desktop-bnpl-text-block (npm) (malicious package) - [MAL-2026-12943](https://insights.sbomify.com/MAL-2026-12943/): Malicious code in bnpl-blocks-desktop-bnpl-table (npm) (malicious package) - [MAL-2026-12942](https://insights.sbomify.com/MAL-2026-12942/): Malicious code in bnpl-blocks-desktop-bnpl-tab-buttons (npm) (malicious package) - [MAL-2026-12941](https://insights.sbomify.com/MAL-2026-12941/): Malicious code in bnpl-blocks-desktop-bnpl-shopping-header (npm) (malicious package) - [MAL-2026-12940](https://insights.sbomify.com/MAL-2026-12940/): Malicious code in bnpl-blocks-desktop-bnpl-shopping-banner (npm) (malicious package) - [MAL-2026-1294](https://insights.sbomify.com/MAL-2026-1294/): Malicious code in causal-canvas (PyPI) (malicious package) - [MAL-2026-12939](https://insights.sbomify.com/MAL-2026-12939/): Malicious code in bnpl-blocks-desktop-bnpl-separator (npm) (malicious package) - [MAL-2026-12938](https://insights.sbomify.com/MAL-2026-12938/): Malicious code in bnpl-blocks-desktop-bnpl-reviews (npm) (malicious package) - [MAL-2026-12937](https://insights.sbomify.com/MAL-2026-12937/): Malicious code in bnpl-blocks-desktop-bnpl-popup (npm) (malicious package) - [MAL-2026-12936](https://insights.sbomify.com/MAL-2026-12936/): Malicious code in bnpl-blocks-desktop-bnpl-picture-gallery (npm) (malicious package) - [MAL-2026-12935](https://insights.sbomify.com/MAL-2026-12935/): Malicious code in bnpl-blocks-desktop-bnpl-partners (npm) (malicious package) - [MAL-2026-12934](https://insights.sbomify.com/MAL-2026-12934/): Malicious code in bnpl-blocks-desktop-bnpl-notification (npm) (malicious package) - [MAL-2026-12933](https://insights.sbomify.com/MAL-2026-12933/): Malicious code in bnpl-blocks-desktop-bnpl-news-cards (npm) (malicious package) - [MAL-2026-12932](https://insights.sbomify.com/MAL-2026-12932/): Malicious code in bnpl-blocks-desktop-bnpl-navigation (npm) (malicious package) - [MAL-2026-12931](https://insights.sbomify.com/MAL-2026-12931/): Malicious code in bnpl-blocks-desktop-bnpl-link-group (npm) (malicious package) - [MAL-2026-12930](https://insights.sbomify.com/MAL-2026-12930/): Malicious code in bnpl-blocks-desktop-bnpl-info-slider (npm) (malicious package) - [MAL-2026-1293](https://insights.sbomify.com/MAL-2026-1293/): Malicious code in tw-modern-ui (npm) (malicious package) - [MAL-2026-12929](https://insights.sbomify.com/MAL-2026-12929/): Malicious code in bnpl-blocks-desktop-bnpl-image-with-caption (npm) (malicious package) - [MAL-2026-12928](https://insights.sbomify.com/MAL-2026-12928/): Malicious code in bnpl-blocks-desktop-bnpl-image-plus-text (npm) (malicious package) - [MAL-2026-12927](https://insights.sbomify.com/MAL-2026-12927/): Malicious code in bnpl-blocks-desktop-bnpl-header-search (npm) (malicious package) - [MAL-2026-12926](https://insights.sbomify.com/MAL-2026-12926/): Malicious code in bnpl-blocks-desktop-bnpl-header-catalog (npm) (malicious package) - [MAL-2026-12925](https://insights.sbomify.com/MAL-2026-12925/): Malicious code in bnpl-blocks-desktop-bnpl-header (npm) (malicious package) - [MAL-2026-12924](https://insights.sbomify.com/MAL-2026-12924/): Malicious code in bnpl-blocks-desktop-bnpl-grid-container (npm) (malicious package) - [MAL-2026-12923](https://insights.sbomify.com/MAL-2026-12923/): Malicious code in bnpl-blocks-desktop-bnpl-footer (npm) (malicious package) - [MAL-2026-12922](https://insights.sbomify.com/MAL-2026-12922/): Malicious code in bnpl-blocks-desktop-bnpl-floating-button (npm) (malicious package) - [MAL-2026-12921](https://insights.sbomify.com/MAL-2026-12921/): Malicious code in bnpl-blocks-desktop-bnpl-feedback (npm) (malicious package) - [MAL-2026-12920](https://insights.sbomify.com/MAL-2026-12920/): Malicious code in bnpl-blocks-desktop-bnpl-faq (npm) (malicious package) - [MAL-2026-1292](https://insights.sbomify.com/MAL-2026-1292/): Malicious code in odds-analyzer (npm) (malicious package) - [MAL-2026-12919](https://insights.sbomify.com/MAL-2026-12919/): Malicious code in bnpl-blocks-desktop-bnpl-container (npm) (malicious package) - [MAL-2026-12918](https://insights.sbomify.com/MAL-2026-12918/): Malicious code in bnpl-blocks-desktop-bnpl-category-gallery (npm) (malicious package) - [MAL-2026-12917](https://insights.sbomify.com/MAL-2026-12917/): Malicious code in bnpl-blocks-desktop-bnpl-card-panel (npm) (malicious package) - [MAL-2026-12916](https://insights.sbomify.com/MAL-2026-12916/): Malicious code in bnpl-blocks-desktop-bnpl-card-gallery (npm) (malicious package) - [MAL-2026-12915](https://insights.sbomify.com/MAL-2026-12915/): Malicious code in bnpl-blocks-desktop-bnpl-button-set (npm) (malicious package) - [MAL-2026-12914](https://insights.sbomify.com/MAL-2026-12914/): Malicious code in bnpl-blocks-desktop-bnpl-breadcrumbs (npm) (malicious package) - [MAL-2026-12913](https://insights.sbomify.com/MAL-2026-12913/): Malicious code in bnpl-blocks-desktop-bnpl-article-author (npm) (malicious package) - [MAL-2026-12912](https://insights.sbomify.com/MAL-2026-12912/): Malicious code in bnpl-blocks-desktop-bnpl-anchor-title (npm) (malicious package) - [MAL-2026-12911](https://insights.sbomify.com/MAL-2026-12911/): Malicious code in bnpl-blocks-desktop-bnpl-action-panel (npm) (malicious package) - [MAL-2026-12910](https://insights.sbomify.com/MAL-2026-12910/): Malicious code in bnpl-blocks-design-system (npm) (malicious package) - [MAL-2026-1291](https://insights.sbomify.com/MAL-2026-1291/): Malicious code in requests-lite (PyPI) (malicious package) - [MAL-2026-12909](https://insights.sbomify.com/MAL-2026-12909/): Malicious code in bnpl-blocks-data-schema-generator (npm) (malicious package) - [MAL-2026-12908](https://insights.sbomify.com/MAL-2026-12908/): Malicious code in bnpl-blocks-consts (npm) (malicious package) - [MAL-2026-12907](https://insights.sbomify.com/MAL-2026-12907/): Malicious code in bnpl-blocks-component-story-name (npm) (malicious package) - [MAL-2026-12906](https://insights.sbomify.com/MAL-2026-12906/): Malicious code in bnpl-blocks-block (npm) (malicious package) - [MAL-2026-12905](https://insights.sbomify.com/MAL-2026-12905/): Malicious code in bnpl-blocks-atom-image-gallery (npm) (malicious package) - [MAL-2026-12904](https://insights.sbomify.com/MAL-2026-12904/): Malicious code in bnpl-blocks-atom-icon-loader (npm) (malicious package) - [MAL-2026-12903](https://insights.sbomify.com/MAL-2026-12903/): Malicious code in bnpl-blocks-atom-desktop-bnpl-text (npm) (malicious package) - [MAL-2026-12902](https://insights.sbomify.com/MAL-2026-12902/): Malicious code in bnpl-blocks-atom-desktop-bnpl-highlighted-text (npm) (malicious package) - [MAL-2026-12901](https://insights.sbomify.com/MAL-2026-12901/): Malicious code in bnpl-blocks-atom-desktop-bnpl-dangerously-html (npm) (malicious package) - [MAL-2026-12900](https://insights.sbomify.com/MAL-2026-12900/): Malicious code in bnpl-blocks-atom-container (npm) (malicious package) - [MAL-2026-1290](https://insights.sbomify.com/MAL-2026-1290/): Malicious code in remjsonparse (PyPI) (malicious package) - [MAL-2026-129](https://insights.sbomify.com/MAL-2026-129/): Malicious code in aws-target-mediator (npm) (malicious package) - [MAL-2026-12899](https://insights.sbomify.com/MAL-2026-12899/): Malicious code in bnpl-blocks-atom-bnpl-toggle (npm) (malicious package) - [MAL-2026-12898](https://insights.sbomify.com/MAL-2026-12898/): Malicious code in bnpl-blocks-atom-bnpl-text (npm) (malicious package) - [MAL-2026-12897](https://insights.sbomify.com/MAL-2026-12897/): Malicious code in bnpl-blocks-atom-bnpl-store-button-set (npm) (malicious package) - [MAL-2026-12896](https://insights.sbomify.com/MAL-2026-12896/): Malicious code in bnpl-blocks-atom-bnpl-store-button (npm) (malicious package) - [MAL-2026-12895](https://insights.sbomify.com/MAL-2026-12895/): Malicious code in bnpl-blocks-atom-bnpl-star-rating (npm) (malicious package) - [MAL-2026-12894](https://insights.sbomify.com/MAL-2026-12894/): Malicious code in bnpl-blocks-atom-bnpl-small-image-card (npm) (malicious package) - [MAL-2026-12893](https://insights.sbomify.com/MAL-2026-12893/): Malicious code in bnpl-blocks-atom-bnpl-skeleton (npm) (malicious package) - [MAL-2026-12892](https://insights.sbomify.com/MAL-2026-12892/): Malicious code in bnpl-blocks-atom-bnpl-search-input (npm) (malicious package) - [MAL-2026-12891](https://insights.sbomify.com/MAL-2026-12891/): Malicious code in bnpl-blocks-atom-bnpl-reviews-counter (npm) (malicious package) - [MAL-2026-12890](https://insights.sbomify.com/MAL-2026-12890/): Malicious code in bnpl-blocks-atom-bnpl-review (npm) (malicious package) - [MAL-2026-1289](https://insights.sbomify.com/MAL-2026-1289/): Malicious code in aioutil3 (PyPI) (malicious package) - [MAL-2026-12889](https://insights.sbomify.com/MAL-2026-12889/): Malicious code in bnpl-blocks-atom-bnpl-range (npm) (malicious package) - [MAL-2026-12888](https://insights.sbomify.com/MAL-2026-12888/): Malicious code in bnpl-blocks-atom-bnpl-radio (npm) (malicious package) - [MAL-2026-12887](https://insights.sbomify.com/MAL-2026-12887/): Malicious code in bnpl-blocks-atom-bnpl-promocode (npm) (malicious package) - [MAL-2026-12886](https://insights.sbomify.com/MAL-2026-12886/): Malicious code in bnpl-blocks-atom-bnpl-product-card (npm) (malicious package) - [MAL-2026-12885](https://insights.sbomify.com/MAL-2026-12885/): Malicious code in bnpl-blocks-atom-bnpl-popup (npm) (malicious package) - [MAL-2026-12884](https://insights.sbomify.com/MAL-2026-12884/): Malicious code in bnpl-blocks-atom-bnpl-notification (npm) (malicious package) - [MAL-2026-12883](https://insights.sbomify.com/MAL-2026-12883/): Malicious code in bnpl-blocks-atom-bnpl-no-index-link (npm) (malicious package) - [MAL-2026-12882](https://insights.sbomify.com/MAL-2026-12882/): Malicious code in bnpl-blocks-atom-bnpl-news-card (npm) (malicious package) - [MAL-2026-12881](https://insights.sbomify.com/MAL-2026-12881/): Malicious code in bnpl-blocks-atom-bnpl-navigation-arrow (npm) (malicious package) - [MAL-2026-12880](https://insights.sbomify.com/MAL-2026-12880/): Malicious code in bnpl-blocks-atom-bnpl-link-avatar (npm) (malicious package) - [MAL-2026-1288](https://insights.sbomify.com/MAL-2026-1288/): Malicious code in arnavtest123 (PyPI) (malicious package) - [MAL-2026-12879](https://insights.sbomify.com/MAL-2026-12879/): Malicious code in bnpl-blocks-atom-bnpl-integrations-breadcrumbs (npm) (malicious package) - [MAL-2026-12878](https://insights.sbomify.com/MAL-2026-12878/): Malicious code in bnpl-blocks-atom-bnpl-info-card (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2026/page/159/