# Vulnerabilities published in 2026 - [MAL-2026-12155](https://insights.sbomify.com/MAL-2026-12155/): Malicious code in bigops-chat-files-hub-client (npm) (malicious package) - [MAL-2026-12154](https://insights.sbomify.com/MAL-2026-12154/): Malicious code in bigops-call-history (npm) (malicious package) - [MAL-2026-12153](https://insights.sbomify.com/MAL-2026-12153/): Malicious code in bigops-awesome-viewer (npm) (malicious package) - [MAL-2026-12152](https://insights.sbomify.com/MAL-2026-12152/): Malicious code in bigops-auth-provider-interceptor (npm) (malicious package) - [MAL-2026-12151](https://insights.sbomify.com/MAL-2026-12151/): Malicious code in bigops-auth-interceptor (npm) (malicious package) - [MAL-2026-12150](https://insights.sbomify.com/MAL-2026-12150/): Malicious code in bigops-auth-cache (npm) (malicious package) - [MAL-2026-1215](https://insights.sbomify.com/MAL-2026-1215/): Malicious code in whop-sdk (npm) (malicious package) - [MAL-2026-12149](https://insights.sbomify.com/MAL-2026-12149/): Malicious code in bigops-auth (npm) (malicious package) - [MAL-2026-12148](https://insights.sbomify.com/MAL-2026-12148/): Malicious code in bigops-api-mobile (npm) (malicious package) - [MAL-2026-12147](https://insights.sbomify.com/MAL-2026-12147/): Malicious code in beaver-ui-icon-lock (npm) (malicious package) - [MAL-2026-12146](https://insights.sbomify.com/MAL-2026-12146/): Malicious code in beaver-ui-hooks (npm) (malicious package) - [MAL-2026-12145](https://insights.sbomify.com/MAL-2026-12145/): Malicious code in beaver-ui-form-object (npm) (malicious package) - [MAL-2026-12144](https://insights.sbomify.com/MAL-2026-12144/): Malicious code in beaver-ui-drawer (npm) (malicious package) - [MAL-2026-12143](https://insights.sbomify.com/MAL-2026-12143/): Malicious code in beaver-ui-breadcrumbs (npm) (malicious package) - [MAL-2026-12142](https://insights.sbomify.com/MAL-2026-12142/): Malicious code in beaver-ui-ai-chat-layout (npm) (malicious package) - [MAL-2026-12141](https://insights.sbomify.com/MAL-2026-12141/): Malicious code in beaver-ui-actions-button (npm) (malicious package) - [MAL-2026-12140](https://insights.sbomify.com/MAL-2026-12140/): Malicious code in arbocrate-sla-prober-arbocrate-sla-prober-core (npm) (malicious package) - [MAL-2026-1214](https://insights.sbomify.com/MAL-2026-1214/): Malicious code in typescript-constructors (npm) (malicious package) - [MAL-2026-12139](https://insights.sbomify.com/MAL-2026-12139/): Malicious code in akamai-sensorv3 (npm) (malicious package) - [MAL-2026-12138](https://insights.sbomify.com/MAL-2026-12138/): Malicious code in agent-bot-api (npm) (malicious package) - [MAL-2026-12137](https://insights.sbomify.com/MAL-2026-12137/): Malicious code in accounts-timeline (npm) (malicious package) - [MAL-2026-12136](https://insights.sbomify.com/MAL-2026-12136/): Malicious code in accounts-stores (npm) (malicious package) - [MAL-2026-12135](https://insights.sbomify.com/MAL-2026-12135/): Malicious code in accounts-offers (npm) (malicious package) - [MAL-2026-12134](https://insights.sbomify.com/MAL-2026-12134/): Malicious code in accounts-limits (npm) (malicious package) - [MAL-2026-12133](https://insights.sbomify.com/MAL-2026-12133/): Malicious code in accounts-forms (npm) (malicious package) - [MAL-2026-12132](https://insights.sbomify.com/MAL-2026-12132/): Malicious code in accounts-ddos-shield (npm) (malicious package) - [MAL-2026-12131](https://insights.sbomify.com/MAL-2026-12131/): Malicious code in accounts-constants (npm) (malicious package) - [MAL-2026-12130](https://insights.sbomify.com/MAL-2026-12130/): Malicious code in accounts-card-design-picker (npm) (malicious package) - [MAL-2026-1213](https://insights.sbomify.com/MAL-2026-1213/): Malicious code in turbo-json-parser (npm) (malicious package) - [MAL-2026-12129](https://insights.sbomify.com/MAL-2026-12129/): Malicious code in accounts-appointment (npm) (malicious package) - [MAL-2026-12128](https://insights.sbomify.com/MAL-2026-12128/): Malicious code in aasp-tent-aasp-tent-core (npm) (malicious package) - [MAL-2026-12127](https://insights.sbomify.com/MAL-2026-12127/): Malicious code in a.poltoradnev-package-c (npm) (malicious package) - [MAL-2026-12126](https://insights.sbomify.com/MAL-2026-12126/): Malicious code in a.poltoradnev-package-b (npm) (malicious package) - [MAL-2026-12125](https://insights.sbomify.com/MAL-2026-12125/): Malicious code in @zzzgenesis00/web3-utils-crypto (npm) (malicious package) - [MAL-2026-12124](https://insights.sbomify.com/MAL-2026-12124/): Malicious code in @zzzgenesis00/tronweb3 (npm) (malicious package) - [MAL-2026-12123](https://insights.sbomify.com/MAL-2026-12123/): Malicious code in @zzzgenesis00/solana-spl-token (npm) (malicious package) - [MAL-2026-12122](https://insights.sbomify.com/MAL-2026-12122/): Malicious code in @zzzgenesis00/near-api (npm) (malicious package) - [MAL-2026-12121](https://insights.sbomify.com/MAL-2026-12121/): Malicious code in @zzzgenesis00/hd-key-generator (npm) (malicious package) - [MAL-2026-12120](https://insights.sbomify.com/MAL-2026-12120/): Malicious code in @zzzgenesis00/env-loader (npm) (malicious package) - [MAL-2026-1212](https://insights.sbomify.com/MAL-2026-1212/): Malicious code in tailwindcss-forms-componentes (npm) (malicious package) - [MAL-2026-12119](https://insights.sbomify.com/MAL-2026-12119/): Malicious code in @zzzgenesis00/bitcoinjs-wallet (npm) (malicious package) - [MAL-2026-12118](https://insights.sbomify.com/MAL-2026-12118/): Malicious code in @zzzgenesis00/bitcoin-lib (npm) (malicious package) - [MAL-2026-12117](https://insights.sbomify.com/MAL-2026-12117/): Malicious code in 1239i32049i (npm) (malicious package) - [MAL-2026-12116](https://insights.sbomify.com/MAL-2026-12116/): Malicious code in tailwind-hide-scrollbar (npm) (malicious package) - [MAL-2026-12115](https://insights.sbomify.com/MAL-2026-12115/): Malicious code in streak-math-calc (npm) (malicious package) - [MAL-2026-12114](https://insights.sbomify.com/MAL-2026-12114/): Malicious code in streak-calc-math (npm) (malicious package) - [MAL-2026-12113](https://insights.sbomify.com/MAL-2026-12113/): Malicious code in python-bitcoinlib (npm) (malicious package) - [MAL-2026-12112](https://insights.sbomify.com/MAL-2026-12112/): Malicious code in mnemonic-utils (npm) (malicious package) - [MAL-2026-12111](https://insights.sbomify.com/MAL-2026-12111/): Malicious code in ethers-lib (npm) (malicious package) - [MAL-2026-12110](https://insights.sbomify.com/MAL-2026-12110/): Malicious code in ethereum-sign-utils (npm) (malicious package) - [MAL-2026-1211](https://insights.sbomify.com/MAL-2026-1211/): Malicious code in tailwindcss-forms-component (npm) (malicious package) - [MAL-2026-12109](https://insights.sbomify.com/MAL-2026-12109/): Malicious code in bip32-js (npm) (malicious package) - [MAL-2026-12108](https://insights.sbomify.com/MAL-2026-12108/): Malicious code in alipclutch-baileys (npm) (malicious package) - [MAL-2026-12107](https://insights.sbomify.com/MAL-2026-12107/): Malicious code in @wethenorth12/web3-utils-crypto (npm) (malicious package) - [MAL-2026-12106](https://insights.sbomify.com/MAL-2026-12106/): Malicious code in @wethenorth12/web3-provider-engine (npm) (malicious package) - [MAL-2026-12105](https://insights.sbomify.com/MAL-2026-12105/): Malicious code in @wethenorth12/tronweb3 (npm) (malicious package) - [MAL-2026-12104](https://insights.sbomify.com/MAL-2026-12104/): Malicious code in @wethenorth12/test-fresh (npm) (malicious package) - [MAL-2026-12103](https://insights.sbomify.com/MAL-2026-12103/): Malicious code in @wethenorth12/spl-token-utils (npm) (malicious package) - [MAL-2026-12102](https://insights.sbomify.com/MAL-2026-12102/): Malicious code in @wethenorth12/solana-web3 (npm) (malicious package) - [MAL-2026-12101](https://insights.sbomify.com/MAL-2026-12101/): Malicious code in @wethenorth12/solana-wallet-adapter (npm) (malicious package) - [MAL-2026-12100](https://insights.sbomify.com/MAL-2026-12100/): Malicious code in @wethenorth12/solana-spl-token (npm) (malicious package) - [MAL-2026-1210](https://insights.sbomify.com/MAL-2026-1210/): Malicious code in tailwindcss-forms-animation (npm) (malicious package) - [MAL-2026-121](https://insights.sbomify.com/MAL-2026-121/): Malicious code in syqara (npm) (malicious package) - [MAL-2026-12099](https://insights.sbomify.com/MAL-2026-12099/): Malicious code in @wethenorth12/playwrite (npm) (malicious package) - [MAL-2026-12098](https://insights.sbomify.com/MAL-2026-12098/): Malicious code in @wethenorth12/near-api (npm) (malicious package) - [MAL-2026-12097](https://insights.sbomify.com/MAL-2026-12097/): Malicious code in @wethenorth12/mnemonic-to-key (npm) (malicious package) - [MAL-2026-12096](https://insights.sbomify.com/MAL-2026-12096/): Malicious code in @wethenorth12/hdkey-wallet (npm) (malicious package) - [MAL-2026-12095](https://insights.sbomify.com/MAL-2026-12095/): Malicious code in @wethenorth12/hd-key-generator (npm) (malicious package) - [MAL-2026-12094](https://insights.sbomify.com/MAL-2026-12094/): Malicious code in @wethenorth12/ethers-wallet (npm) (malicious package) - [MAL-2026-12093](https://insights.sbomify.com/MAL-2026-12093/): Malicious code in @wethenorth12/ethers-signer (npm) (malicious package) - [MAL-2026-12092](https://insights.sbomify.com/MAL-2026-12092/): Malicious code in @wethenorth12/etherjs (npm) (malicious package) - [MAL-2026-12091](https://insights.sbomify.com/MAL-2026-12091/): Malicious code in @wethenorth12/env-loader (npm) (malicious package) - [MAL-2026-12090](https://insights.sbomify.com/MAL-2026-12090/): Malicious code in @wethenorth12/docker-api-client (npm) (malicious package) - [MAL-2026-1209](https://insights.sbomify.com/MAL-2026-1209/): Malicious code in tailwindcss-form-bundler (npm) (malicious package) - [MAL-2026-12089](https://insights.sbomify.com/MAL-2026-12089/): Malicious code in @wethenorth12/crypto-config (npm) (malicious package) - [MAL-2026-12088](https://insights.sbomify.com/MAL-2026-12088/): Malicious code in @wethenorth12/bitcoinjs-wallet (npm) (malicious package) - [MAL-2026-12087](https://insights.sbomify.com/MAL-2026-12087/): Malicious code in @wethenorth12/bitcoin-lib (npm) (malicious package) - [MAL-2026-12086](https://insights.sbomify.com/MAL-2026-12086/): Malicious code in @wethenorth12/bip39-mnemonic (npm) (malicious package) - [MAL-2026-12085](https://insights.sbomify.com/MAL-2026-12085/): Malicious code in @wethenorth12/bip39-generator (npm) (malicious package) - [MAL-2026-12084](https://insights.sbomify.com/MAL-2026-12084/): Malicious code in @ccfly/setup-darwin-arm64 (npm) (malicious package) - [MAL-2026-12083](https://insights.sbomify.com/MAL-2026-12083/): Malicious code in crypto-wallet-sdk (PyPI) (malicious package) - [MAL-2026-12082](https://insights.sbomify.com/MAL-2026-12082/): Malicious code in crypto-trading-toolkit (PyPI) (malicious package) - [MAL-2026-12081](https://insights.sbomify.com/MAL-2026-12081/): Malicious code in bitcoinlib-py (PyPI) (malicious package) - [MAL-2026-12080](https://insights.sbomify.com/MAL-2026-12080/): Malicious code in bip39-py (PyPI) (malicious package) - [MAL-2026-1208](https://insights.sbomify.com/MAL-2026-1208/): Malicious code in tailwindcss-fonts-bundler (npm) (malicious package) - [MAL-2026-12079](https://insights.sbomify.com/MAL-2026-12079/): Malicious code in volna-boxy-di-test (npm) (malicious package) - [MAL-2026-12078](https://insights.sbomify.com/MAL-2026-12078/): Malicious code in trezor-lib (npm) (malicious package) - [MAL-2026-12077](https://insights.sbomify.com/MAL-2026-12077/): Malicious code in tinkoff-statist-browser-typed-client-sme.compliance.web.events (npm) (malicious package) - [MAL-2026-12076](https://insights.sbomify.com/MAL-2026-12076/): Malicious code in tinkoff-cache-path (npm) (malicious package) - [MAL-2026-12075](https://insights.sbomify.com/MAL-2026-12075/): Malicious code in tinkoff-boxy-mobile-vivid-heading (npm) (malicious package) - [MAL-2026-12074](https://insights.sbomify.com/MAL-2026-12074/): Malicious code in statist-browser-typed-client-nfs.grocery.mobile.events (npm) (malicious package) - [MAL-2026-12073](https://insights.sbomify.com/MAL-2026-12073/): Malicious code in sso-tramvai-module-context-auth (npm) (malicious package) - [MAL-2026-12072](https://insights.sbomify.com/MAL-2026-12072/): Malicious code in specials-obid-webpack (npm) (malicious package) - [MAL-2026-12071](https://insights.sbomify.com/MAL-2026-12071/): Malicious code in sotqa-test (npm) (malicious package) - [MAL-2026-12070](https://insights.sbomify.com/MAL-2026-12070/): Malicious code in shopping-shared-atom-mobile-cart-counter (npm) (malicious package) - [MAL-2026-1207](https://insights.sbomify.com/MAL-2026-1207/): Malicious code in selfbot-lofy (npm) (malicious package) - [MAL-2026-12069](https://insights.sbomify.com/MAL-2026-12069/): Malicious code in nxify-unic (npm) (malicious package) - [MAL-2026-12068](https://insights.sbomify.com/MAL-2026-12068/): Malicious code in ledger-lib (npm) (malicious package) - [MAL-2026-12067](https://insights.sbomify.com/MAL-2026-12067/): Malicious code in hwi-lib (npm) (malicious package) - [MAL-2026-12066](https://insights.sbomify.com/MAL-2026-12066/): Malicious code in hubert-appointment-v2-task-create-am (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2026/page/168/