# Vulnerabilities published in 2026 - [MAL-2026-9442](https://insights.sbomify.com/MAL-2026-9442/): Malicious code in wphraA (RubyGems) (malicious package) - [MAL-2026-9441](https://insights.sbomify.com/MAL-2026-9441/): Malicious code in wphra2 (RubyGems) (malicious package) - [MAL-2026-9440](https://insights.sbomify.com/MAL-2026-9440/): Malicious code in wphra (RubyGems) (malicious package) - [MAL-2026-944](https://insights.sbomify.com/MAL-2026-944/): Malicious code in realestate-ask (npm) (malicious package) - [MAL-2026-9439](https://insights.sbomify.com/MAL-2026-9439/): Malicious code in wphimp2 (RubyGems) (malicious package) - [MAL-2026-9438](https://insights.sbomify.com/MAL-2026-9438/): Malicious code in wphimp (RubyGems) (malicious package) - [MAL-2026-9437](https://insights.sbomify.com/MAL-2026-9437/): Malicious code in wpfoxrev (RubyGems) (malicious package) - [MAL-2026-9436](https://insights.sbomify.com/MAL-2026-9436/): Malicious code in wpfox (RubyGems) (malicious package) - [MAL-2026-9435](https://insights.sbomify.com/MAL-2026-9435/): Malicious code in wpact2 (RubyGems) (malicious package) - [MAL-2026-9434](https://insights.sbomify.com/MAL-2026-9434/): Malicious code in wpact (RubyGems) (malicious package) - [MAL-2026-9433](https://insights.sbomify.com/MAL-2026-9433/): Malicious code in wp944 (RubyGems) (malicious package) - [MAL-2026-9432](https://insights.sbomify.com/MAL-2026-9432/): Malicious code in wp941 (RubyGems) (malicious package) - [MAL-2026-9431](https://insights.sbomify.com/MAL-2026-9431/): Malicious code in wp925 (RubyGems) (malicious package) - [MAL-2026-9430](https://insights.sbomify.com/MAL-2026-9430/): Malicious code in wp924 (RubyGems) (malicious package) - [MAL-2026-943](https://insights.sbomify.com/MAL-2026-943/): Malicious code in ethereums-lint (npm) (malicious package) - [MAL-2026-9429](https://insights.sbomify.com/MAL-2026-9429/): Malicious code in wp887 (RubyGems) (malicious package) - [MAL-2026-9428](https://insights.sbomify.com/MAL-2026-9428/): Malicious code in wp886 (RubyGems) (malicious package) - [MAL-2026-9427](https://insights.sbomify.com/MAL-2026-9427/): Malicious code in wp885 (RubyGems) (malicious package) - [MAL-2026-9426](https://insights.sbomify.com/MAL-2026-9426/): Malicious code in wp884 (RubyGems) (malicious package) - [MAL-2026-9425](https://insights.sbomify.com/MAL-2026-9425/): Malicious code in wp876 (RubyGems) (malicious package) - [MAL-2026-9424](https://insights.sbomify.com/MAL-2026-9424/): Malicious code in wp875 (RubyGems) (malicious package) - [MAL-2026-9423](https://insights.sbomify.com/MAL-2026-9423/): Malicious code in woppwyijhxfak (RubyGems) (malicious package) - [MAL-2026-9422](https://insights.sbomify.com/MAL-2026-9422/): Malicious code in wnuqwugrxxae (RubyGems) (malicious package) - [MAL-2026-9421](https://insights.sbomify.com/MAL-2026-9421/): Malicious code in wnumghplcqou (RubyGems) (malicious package) - [MAL-2026-9420](https://insights.sbomify.com/MAL-2026-9420/): Malicious code in wnmbihytgkye (RubyGems) (malicious package) - [MAL-2026-942](https://insights.sbomify.com/MAL-2026-942/): Malicious code in ethereum-lint (npm) (malicious package) - [MAL-2026-9419](https://insights.sbomify.com/MAL-2026-9419/): Malicious code in wnmaofmjqxdu (RubyGems) (malicious package) - [MAL-2026-9418](https://insights.sbomify.com/MAL-2026-9418/): Malicious code in wnkbnefoxjyr (RubyGems) (malicious package) - [MAL-2026-9417](https://insights.sbomify.com/MAL-2026-9417/): Malicious code in wnizcisqddnw (RubyGems) (malicious package) - [MAL-2026-9416](https://insights.sbomify.com/MAL-2026-9416/): Malicious code in wngoscmktfuf (RubyGems) (malicious package) - [MAL-2026-9415](https://insights.sbomify.com/MAL-2026-9415/): Malicious code in wnekmzzveqou (RubyGems) (malicious package) - [MAL-2026-9414](https://insights.sbomify.com/MAL-2026-9414/): Malicious code in wndcal458f2b (RubyGems) (malicious package) - [MAL-2026-9413](https://insights.sbomify.com/MAL-2026-9413/): Malicious code in wn5wknotxt1 (RubyGems) (malicious package) - [MAL-2026-9412](https://insights.sbomify.com/MAL-2026-9412/): Malicious code in wn5wknob2a (RubyGems) (malicious package) - [MAL-2026-9411](https://insights.sbomify.com/MAL-2026-9411/): Malicious code in wn5prnotxt2 (RubyGems) (malicious package) - [MAL-2026-9410](https://insights.sbomify.com/MAL-2026-9410/): Malicious code in wn5prnotxt1 (RubyGems) (malicious package) - [MAL-2026-941](https://insights.sbomify.com/MAL-2026-941/): Malicious code in ether-lint (npm) (malicious package) - [MAL-2026-9409](https://insights.sbomify.com/MAL-2026-9409/): Malicious code in wn5ielist2a (RubyGems) (malicious package) - [MAL-2026-9408](https://insights.sbomify.com/MAL-2026-9408/): Malicious code in wn5ielist1a (RubyGems) (malicious package) - [MAL-2026-9407](https://insights.sbomify.com/MAL-2026-9407/): Malicious code in wn5agnotxt1 (RubyGems) (malicious package) - [MAL-2026-9406](https://insights.sbomify.com/MAL-2026-9406/): Malicious code in wmwk6txtab (RubyGems) (malicious package) - [MAL-2026-9405](https://insights.sbomify.com/MAL-2026-9405/): Malicious code in wmwk6nobab (RubyGems) (malicious package) - [MAL-2026-9404](https://insights.sbomify.com/MAL-2026-9404/): Malicious code in wmwk6bothab (RubyGems) (malicious package) - [MAL-2026-9403](https://insights.sbomify.com/MAL-2026-9403/): Malicious code in wmwk6ab (RubyGems) (malicious package) - [MAL-2026-9402](https://insights.sbomify.com/MAL-2026-9402/): Malicious code in wmwk5txtab (RubyGems) (malicious package) - [MAL-2026-9401](https://insights.sbomify.com/MAL-2026-9401/): Malicious code in wmwk5nobab (RubyGems) (malicious package) - [MAL-2026-9400](https://insights.sbomify.com/MAL-2026-9400/): Malicious code in wmwk5bothab (RubyGems) (malicious package) - [MAL-2026-940](https://insights.sbomify.com/MAL-2026-940/): Malicious code in abcxyzz (npm) (malicious package) - [MAL-2026-94](https://insights.sbomify.com/MAL-2026-94/): Malicious code in shopify-perf-kit (npm) (malicious package) - [MAL-2026-9399](https://insights.sbomify.com/MAL-2026-9399/): Malicious code in wmwk5ab (RubyGems) (malicious package) - [MAL-2026-9398](https://insights.sbomify.com/MAL-2026-9398/): Malicious code in wmwk4txtab (RubyGems) (malicious package) - [MAL-2026-9397](https://insights.sbomify.com/MAL-2026-9397/): Malicious code in wmwk4nobab (RubyGems) (malicious package) - [MAL-2026-9396](https://insights.sbomify.com/MAL-2026-9396/): Malicious code in wmwk4bothab (RubyGems) (malicious package) - [MAL-2026-9395](https://insights.sbomify.com/MAL-2026-9395/): Malicious code in wmwk4ab (RubyGems) (malicious package) - [MAL-2026-9394](https://insights.sbomify.com/MAL-2026-9394/): Malicious code in wmwk3txtab (RubyGems) (malicious package) - [MAL-2026-9393](https://insights.sbomify.com/MAL-2026-9393/): Malicious code in wmwk3nobab (RubyGems) (malicious package) - [MAL-2026-9392](https://insights.sbomify.com/MAL-2026-9392/): Malicious code in wmwk3bothab (RubyGems) (malicious package) - [MAL-2026-9391](https://insights.sbomify.com/MAL-2026-9391/): Malicious code in wmwk3ab (RubyGems) (malicious package) - [MAL-2026-9390](https://insights.sbomify.com/MAL-2026-9390/): Malicious code in wmwk2txtab (RubyGems) (malicious package) - [MAL-2026-939](https://insights.sbomify.com/MAL-2026-939/): Malicious code in ably-forks (npm) (malicious package) - [MAL-2026-9389](https://insights.sbomify.com/MAL-2026-9389/): Malicious code in wmwk2nobab (RubyGems) (malicious package) - [MAL-2026-9388](https://insights.sbomify.com/MAL-2026-9388/): Malicious code in wmwk2bothab (RubyGems) (malicious package) - [MAL-2026-9387](https://insights.sbomify.com/MAL-2026-9387/): Malicious code in wmwk2ab (RubyGems) (malicious package) - [MAL-2026-9386](https://insights.sbomify.com/MAL-2026-9386/): Malicious code in wmwk1txtab (RubyGems) (malicious package) - [MAL-2026-9385](https://insights.sbomify.com/MAL-2026-9385/): Malicious code in wmwk1nobab (RubyGems) (malicious package) - [MAL-2026-9384](https://insights.sbomify.com/MAL-2026-9384/): Malicious code in wmwk1bothab (RubyGems) (malicious package) - [MAL-2026-9383](https://insights.sbomify.com/MAL-2026-9383/): Malicious code in wmwk1ab (RubyGems) (malicious package) - [MAL-2026-9382](https://insights.sbomify.com/MAL-2026-9382/): Malicious code in wmj738682 (RubyGems) (malicious package) - [MAL-2026-9381](https://insights.sbomify.com/MAL-2026-9381/): Malicious code in wmj557183 (RubyGems) (malicious package) - [MAL-2026-9380](https://insights.sbomify.com/MAL-2026-9380/): Malicious code in wmj169905 (RubyGems) (malicious package) - [MAL-2026-938](https://insights.sbomify.com/MAL-2026-938/): Malicious code in pylibcugraphops (PyPI) (malicious package) - [MAL-2026-9379](https://insights.sbomify.com/MAL-2026-9379/): Malicious code in wmj167461 (RubyGems) (malicious package) - [MAL-2026-9378](https://insights.sbomify.com/MAL-2026-9378/): Malicious code in wmeta9721478 (RubyGems) (malicious package) - [MAL-2026-9377](https://insights.sbomify.com/MAL-2026-9377/): Malicious code in wm961055 (RubyGems) (malicious package) - [MAL-2026-9376](https://insights.sbomify.com/MAL-2026-9376/): Malicious code in wm752757 (RubyGems) (malicious package) - [MAL-2026-9375](https://insights.sbomify.com/MAL-2026-9375/): Malicious code in wm735526 (RubyGems) (malicious package) - [MAL-2026-9374](https://insights.sbomify.com/MAL-2026-9374/): Malicious code in wm720979 (RubyGems) (malicious package) - [MAL-2026-9373](https://insights.sbomify.com/MAL-2026-9373/): Malicious code in wlamsvn (RubyGems) (malicious package) - [MAL-2026-9372](https://insights.sbomify.com/MAL-2026-9372/): Malicious code in wlamhg (RubyGems) (malicious package) - [MAL-2026-9371](https://insights.sbomify.com/MAL-2026-9371/): Malicious code in wlambzr (RubyGems) (malicious package) - [MAL-2026-9370](https://insights.sbomify.com/MAL-2026-9370/): Malicious code in wjstand (RubyGems) (malicious package) - [MAL-2026-937](https://insights.sbomify.com/MAL-2026-937/): Malicious code in telebot-infee (PyPI) (malicious package) - [MAL-2026-9369](https://insights.sbomify.com/MAL-2026-9369/): Malicious code in wjsacre (RubyGems) (malicious package) - [MAL-2026-9368](https://insights.sbomify.com/MAL-2026-9368/): Malicious code in wjlic (RubyGems) (malicious package) - [MAL-2026-9367](https://insights.sbomify.com/MAL-2026-9367/): Malicious code in wjin4 (RubyGems) (malicious package) - [MAL-2026-9366](https://insights.sbomify.com/MAL-2026-9366/): Malicious code in wjin3 (RubyGems) (malicious package) - [MAL-2026-9365](https://insights.sbomify.com/MAL-2026-9365/): Malicious code in wjin2 (RubyGems) (malicious package) - [MAL-2026-9364](https://insights.sbomify.com/MAL-2026-9364/): Malicious code in wjin1 (RubyGems) (malicious package) - [MAL-2026-9363](https://insights.sbomify.com/MAL-2026-9363/): Malicious code in wjgrants (RubyGems) (malicious package) - [MAL-2026-9362](https://insights.sbomify.com/MAL-2026-9362/): Malicious code in wjcab (RubyGems) (malicious package) - [MAL-2026-9361](https://insights.sbomify.com/MAL-2026-9361/): Malicious code in whssrftestabcxx (RubyGems) (malicious package) - [MAL-2026-9360](https://insights.sbomify.com/MAL-2026-9360/): Malicious code in whg1778555582995 (RubyGems) (malicious package) - [MAL-2026-936](https://insights.sbomify.com/MAL-2026-936/): Malicious code in questpro (PyPI) (malicious package) - [MAL-2026-9359](https://insights.sbomify.com/MAL-2026-9359/): Malicious code in whg1778555581536 (RubyGems) (malicious package) - [MAL-2026-9358](https://insights.sbomify.com/MAL-2026-9358/): Malicious code in whg1778555579563 (RubyGems) (malicious package) - [MAL-2026-9357](https://insights.sbomify.com/MAL-2026-9357/): Malicious code in whg1778555578218 (RubyGems) (malicious package) - [MAL-2026-9356](https://insights.sbomify.com/MAL-2026-9356/): Malicious code in whg1778555577181 (RubyGems) (malicious package) - [MAL-2026-9355](https://insights.sbomify.com/MAL-2026-9355/): Malicious code in whg1778555575753 (RubyGems) (malicious package) - [MAL-2026-9354](https://insights.sbomify.com/MAL-2026-9354/): Malicious code in whg1778555574496 (RubyGems) (malicious package) - [MAL-2026-9353](https://insights.sbomify.com/MAL-2026-9353/): Malicious code in whg1778555572981 (RubyGems) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2026/page/16/