# Vulnerabilities published in 2026


- [MAL-2026-12697](https://insights.sbomify.com/MAL-2026-12697/): Malicious code in devplatform-api-v2-resources-metadata (npm) (malicious package)
- [MAL-2026-12696](https://insights.sbomify.com/MAL-2026-12696/): Malicious code in devplatform-api-v2-resources (npm) (malicious package)
- [MAL-2026-12695](https://insights.sbomify.com/MAL-2026-12695/): Malicious code in devplatform-api-v2-resource-mock (npm) (malicious package)
- [MAL-2026-12694](https://insights.sbomify.com/MAL-2026-12694/): Malicious code in devplatform-api-v2-endpoint (npm) (malicious package)
- [MAL-2026-12693](https://insights.sbomify.com/MAL-2026-12693/): Malicious code in devplatform-api-v1-endpoint (npm) (malicious package)
- [MAL-2026-12692](https://insights.sbomify.com/MAL-2026-12692/): Malicious code in devplatform-api-endpoint (npm) (malicious package)
- [MAL-2026-12691](https://insights.sbomify.com/MAL-2026-12691/): Malicious code in devplatform-api-clients (npm) (malicious package)
- [MAL-2026-12690](https://insights.sbomify.com/MAL-2026-12690/): Malicious code in deposits-common (npm) (malicious package)
- [MAL-2026-1269](https://insights.sbomify.com/MAL-2026-1269/): Malicious code in @wgu-edu/wgu-core (npm) (malicious package)
- [MAL-2026-12689](https://insights.sbomify.com/MAL-2026-12689/): Malicious code in delivery-ci-validate-tinkoff-fb (npm) (malicious package)
- [MAL-2026-12688](https://insights.sbomify.com/MAL-2026-12688/): Malicious code in delivery-ci-validate (npm) (malicious package)
- [MAL-2026-12687](https://insights.sbomify.com/MAL-2026-12687/): Malicious code in delivery-ci-upgrade-from (npm) (malicious package)
- [MAL-2026-12686](https://insights.sbomify.com/MAL-2026-12686/): Malicious code in delivery-ci-upgrade-form (npm) (malicious package)
- [MAL-2026-12685](https://insights.sbomify.com/MAL-2026-12685/): Malicious code in delivery-ci-update-gitlab (npm) (malicious package)
- [MAL-2026-12684](https://insights.sbomify.com/MAL-2026-12684/): Malicious code in delivery-ci-unit (npm) (malicious package)
- [MAL-2026-12683](https://insights.sbomify.com/MAL-2026-12683/): Malicious code in delivery-ci-tech-holder (npm) (malicious package)
- [MAL-2026-12682](https://insights.sbomify.com/MAL-2026-12682/): Malicious code in delivery-ci-storyshots (npm) (malicious package)
- [MAL-2026-12681](https://insights.sbomify.com/MAL-2026-12681/): Malicious code in delivery-ci-storybook (npm) (malicious package)
- [MAL-2026-12680](https://insights.sbomify.com/MAL-2026-12680/): Malicious code in delivery-ci-sage (npm) (malicious package)
- [MAL-2026-1268](https://insights.sbomify.com/MAL-2026-1268/): Malicious code in @shenira/libsignal-node (npm) (malicious package)
- [MAL-2026-12679](https://insights.sbomify.com/MAL-2026-12679/): Malicious code in delivery-ci-quality (npm) (malicious package)
- [MAL-2026-12678](https://insights.sbomify.com/MAL-2026-12678/): Malicious code in delivery-ci-pipeline-rules (npm) (malicious package)
- [MAL-2026-12677](https://insights.sbomify.com/MAL-2026-12677/): Malicious code in delivery-ci-notify (npm) (malicious package)
- [MAL-2026-12676](https://insights.sbomify.com/MAL-2026-12676/): Malicious code in delivery-ci-microforms (npm) (malicious package)
- [MAL-2026-12675](https://insights.sbomify.com/MAL-2026-12675/): Malicious code in ded-pwa-bnpl-forms-demo (npm) (malicious package)
- [MAL-2026-12674](https://insights.sbomify.com/MAL-2026-12674/): Malicious code in ded-ps-events-ded-ps-events-core (npm) (malicious package)
- [MAL-2026-12673](https://insights.sbomify.com/MAL-2026-12673/): Malicious code in ded-ps-ded-ps-core (npm) (malicious package)
- [MAL-2026-12672](https://insights.sbomify.com/MAL-2026-12672/): Malicious code in ded-aa-liza-ui-components (npm) (malicious package)
- [MAL-2026-12671](https://insights.sbomify.com/MAL-2026-12671/): Malicious code in dc-renewals-layout2 (npm) (malicious package)
- [MAL-2026-12670](https://insights.sbomify.com/MAL-2026-12670/): Malicious code in dc-dc-core (npm) (malicious package)
- [MAL-2026-1267](https://insights.sbomify.com/MAL-2026-1267/): Malicious code in @shenira/baileysx (npm) (malicious package)
- [MAL-2026-12669](https://insights.sbomify.com/MAL-2026-12669/): Malicious code in dbk-ui-forms (npm) (malicious package)
- [MAL-2026-12668](https://insights.sbomify.com/MAL-2026-12668/): Malicious code in custom-plugins-request-factory (npm) (malicious package)
- [MAL-2026-12667](https://insights.sbomify.com/MAL-2026-12667/): Malicious code in csc-csc-core (npm) (malicious package)
- [MAL-2026-12666](https://insights.sbomify.com/MAL-2026-12666/): Malicious code in crypto-checkout-api (npm) (malicious package)
- [MAL-2026-12665](https://insights.sbomify.com/MAL-2026-12665/): Malicious code in contract-contract-builder (npm) (malicious package)
- [MAL-2026-12664](https://insights.sbomify.com/MAL-2026-12664/): Malicious code in constructor-blocks-renderer-mailings (npm) (malicious package)
- [MAL-2026-12663](https://insights.sbomify.com/MAL-2026-12663/): Malicious code in constructor-blocks-renderer-landings (npm) (malicious package)
- [MAL-2026-12662](https://insights.sbomify.com/MAL-2026-12662/): Malicious code in constructor-blocks-mailings (npm) (malicious package)
- [MAL-2026-12661](https://insights.sbomify.com/MAL-2026-12661/): Malicious code in constructor-blocks-landings (npm) (malicious package)
- [MAL-2026-12660](https://insights.sbomify.com/MAL-2026-12660/): Malicious code in constructor-blocks-common (npm) (malicious package)
- [MAL-2026-1266](https://insights.sbomify.com/MAL-2026-1266/): Malicious code in @shenira/baileys (npm) (malicious package)
- [MAL-2026-12659](https://insights.sbomify.com/MAL-2026-12659/): Malicious code in cobrowsing-utils (npm) (malicious package)
- [MAL-2026-12658](https://insights.sbomify.com/MAL-2026-12658/): Malicious code in cobrowsing-test-utils (npm) (malicious package)
- [MAL-2026-12657](https://insights.sbomify.com/MAL-2026-12657/): Malicious code in cobrowsing-redis-module (npm) (malicious package)
- [MAL-2026-12656](https://insights.sbomify.com/MAL-2026-12656/): Malicious code in cobrowsing-logger (npm) (malicious package)
- [MAL-2026-12655](https://insights.sbomify.com/MAL-2026-12655/): Malicious code in cobrowsing-k8s-module (npm) (malicious package)
- [MAL-2026-12654](https://insights.sbomify.com/MAL-2026-12654/): Malicious code in cobrowsing-exception-filter (npm) (malicious package)
- [MAL-2026-12653](https://insights.sbomify.com/MAL-2026-12653/): Malicious code in cobrowsing-decorators (npm) (malicious package)
- [MAL-2026-12652](https://insights.sbomify.com/MAL-2026-12652/): Malicious code in cobrowsing-configs (npm) (malicious package)
- [MAL-2026-12651](https://insights.sbomify.com/MAL-2026-12651/): Malicious code in cobrowsing-cobrowsing-core (npm) (malicious package)
- [MAL-2026-12650](https://insights.sbomify.com/MAL-2026-12650/): Malicious code in cnb-cnb-core (npm) (malicious package)
- [MAL-2026-1265](https://insights.sbomify.com/MAL-2026-1265/): Malicious code in aaaaaxxxxx (npm) (malicious package)
- [MAL-2026-12649](https://insights.sbomify.com/MAL-2026-12649/): Malicious code in clients-structure (npm) (malicious package)
- [MAL-2026-12648](https://insights.sbomify.com/MAL-2026-12648/): Malicious code in claims-use-visual-viewport-resizing (npm) (malicious package)
- [MAL-2026-12647](https://insights.sbomify.com/MAL-2026-12647/): Malicious code in claims-use-callback-once (npm) (malicious package)
- [MAL-2026-12646](https://insights.sbomify.com/MAL-2026-12646/): Malicious code in claims-use-base-analytics (npm) (malicious package)
- [MAL-2026-12645](https://insights.sbomify.com/MAL-2026-12645/): Malicious code in claims-types (npm) (malicious package)
- [MAL-2026-12644](https://insights.sbomify.com/MAL-2026-12644/): Malicious code in claims-to-iso-string-with-timezone (npm) (malicious package)
- [MAL-2026-12643](https://insights.sbomify.com/MAL-2026-12643/): Malicious code in claims-should-retry (npm) (malicious package)
- [MAL-2026-12642](https://insights.sbomify.com/MAL-2026-12642/): Malicious code in claims-shared (npm) (malicious package)
- [MAL-2026-12641](https://insights.sbomify.com/MAL-2026-12641/): Malicious code in claims-replace-url-params (npm) (malicious package)
- [MAL-2026-12640](https://insights.sbomify.com/MAL-2026-12640/): Malicious code in claims-policy-details-domain (npm) (malicious package)
- [MAL-2026-1264](https://insights.sbomify.com/MAL-2026-1264/): Malicious code in python-requirements (PyPI) (malicious package)
- [MAL-2026-12639](https://insights.sbomify.com/MAL-2026-12639/): Malicious code in claims-policy-details-api-adapters (npm) (malicious package)
- [MAL-2026-12638](https://insights.sbomify.com/MAL-2026-12638/): Malicious code in claims-policies-domain (npm) (malicious package)
- [MAL-2026-12637](https://insights.sbomify.com/MAL-2026-12637/): Malicious code in claims-policies-api-adapters (npm) (malicious package)
- [MAL-2026-12636](https://insights.sbomify.com/MAL-2026-12636/): Malicious code in claims-person-domain (npm) (malicious package)
- [MAL-2026-12635](https://insights.sbomify.com/MAL-2026-12635/): Malicious code in claims-person-api-adapters (npm) (malicious package)
- [MAL-2026-12634](https://insights.sbomify.com/MAL-2026-12634/): Malicious code in claims-payout-offer-domain (npm) (malicious package)
- [MAL-2026-12633](https://insights.sbomify.com/MAL-2026-12633/): Malicious code in claims-payout-offer-api-adapters (npm) (malicious package)
- [MAL-2026-12632](https://insights.sbomify.com/MAL-2026-12632/): Malicious code in claims-payout-offer-api (npm) (malicious package)
- [MAL-2026-12631](https://insights.sbomify.com/MAL-2026-12631/): Malicious code in claims-patch-url (npm) (malicious package)
- [MAL-2026-12630](https://insights.sbomify.com/MAL-2026-12630/): Malicious code in claims-page-maker-types (npm) (malicious package)
- [MAL-2026-1263](https://insights.sbomify.com/MAL-2026-1263/): Malicious code in python-module-installer (PyPI) (malicious package)
- [MAL-2026-12629](https://insights.sbomify.com/MAL-2026-12629/): Malicious code in claims-navigate (npm) (malicious package)
- [MAL-2026-12628](https://insights.sbomify.com/MAL-2026-12628/): Malicious code in claims-microgen-templates (npm) (malicious package)
- [MAL-2026-12627](https://insights.sbomify.com/MAL-2026-12627/): Malicious code in claims-jira-service (npm) (malicious package)
- [MAL-2026-12626](https://insights.sbomify.com/MAL-2026-12626/): Malicious code in claims-is-mobile-layout (npm) (malicious package)
- [MAL-2026-12625](https://insights.sbomify.com/MAL-2026-12625/): Malicious code in claims-historical-claims-domain (npm) (malicious package)
- [MAL-2026-12624](https://insights.sbomify.com/MAL-2026-12624/): Malicious code in claims-historical-claims-api-adapters (npm) (malicious package)
- [MAL-2026-12623](https://insights.sbomify.com/MAL-2026-12623/): Malicious code in claims-handle-api-response (npm) (malicious package)
- [MAL-2026-12622](https://insights.sbomify.com/MAL-2026-12622/): Malicious code in claims-get-percentage-value (npm) (malicious package)
- [MAL-2026-12621](https://insights.sbomify.com/MAL-2026-12621/): Malicious code in claims-get-indexed-selector (npm) (malicious package)
- [MAL-2026-12620](https://insights.sbomify.com/MAL-2026-12620/): Malicious code in claims-get-error-string (npm) (malicious package)
- [MAL-2026-1262](https://insights.sbomify.com/MAL-2026-1262/): Malicious code in fastapis-requests (PyPI) (malicious package)
- [MAL-2026-12619](https://insights.sbomify.com/MAL-2026-12619/): Malicious code in claims-get-base-url (npm) (malicious package)
- [MAL-2026-12618](https://insights.sbomify.com/MAL-2026-12618/): Malicious code in claims-format-money (npm) (malicious package)
- [MAL-2026-12617](https://insights.sbomify.com/MAL-2026-12617/): Malicious code in claims-format-masked-phone-number (npm) (malicious package)
- [MAL-2026-12616](https://insights.sbomify.com/MAL-2026-12616/): Malicious code in claims-format-date (npm) (malicious package)
- [MAL-2026-12615](https://insights.sbomify.com/MAL-2026-12615/): Malicious code in claims-fixtures-shared (npm) (malicious package)
- [MAL-2026-12614](https://insights.sbomify.com/MAL-2026-12614/): Malicious code in claims-enums (npm) (malicious package)
- [MAL-2026-12613](https://insights.sbomify.com/MAL-2026-12613/): Malicious code in claims-domain (npm) (malicious package)
- [MAL-2026-12612](https://insights.sbomify.com/MAL-2026-12612/): Malicious code in claims-create-client-validator (npm) (malicious package)
- [MAL-2026-12611](https://insights.sbomify.com/MAL-2026-12611/): Malicious code in claims-constants (npm) (malicious package)
- [MAL-2026-12610](https://insights.sbomify.com/MAL-2026-12610/): Malicious code in claims-claims-api-adapters (npm) (malicious package)
- [MAL-2026-1261](https://insights.sbomify.com/MAL-2026-1261/): Malicious code in fastapi-requests (PyPI) (malicious package)
- [MAL-2026-12609](https://insights.sbomify.com/MAL-2026-12609/): Malicious code in claims-block-visibility (npm) (malicious package)
- [MAL-2026-12608](https://insights.sbomify.com/MAL-2026-12608/): Malicious code in claims-auth-domain (npm) (malicious package)
- [MAL-2026-12607](https://insights.sbomify.com/MAL-2026-12607/): Malicious code in claims-auth-api-adapters (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/162/