Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 169 of 1013.
- MAL-2026-12065 Malicious code in greatcall-customers-commandapi (npm)
- MAL-2026-12064 Malicious code in ckcc-protocol (npm)
- MAL-2026-12063 Malicious code in checkout-create-pos-order-am (npm)
- MAL-2026-12062 Malicious code in boardwalk-js-tests (npm)
- MAL-2026-12061 Malicious code in bigops-eslint (npm)
- MAL-2026-12060 Malicious code in beaver-ui-card-large (npm)
- MAL-2026-1206 Malicious code in polymarket-trade-bot-api (npm)
- MAL-2026-12059 Malicious code in bcore-bravo-eslint-config (npm)
- MAL-2026-12058 Malicious code in @zzzgenesis00/spl-token-utils (npm)
- MAL-2026-12057 Malicious code in @zzzgenesis00/playwrite (npm)
- MAL-2026-12056 Malicious code in @zzzgenesis00/mnemonic-to-key (npm)
- MAL-2026-12055 Malicious code in @zzzgenesis00/docker-api-client (npm)
- MAL-2026-12054 Malicious code in uibabai (npm)
- MAL-2026-12053 Malicious code in tui-react-mobile-styles (npm)
- MAL-2026-12052 Malicious code in tramvai-tinkoff-module-legacy-popup (npm)
- MAL-2026-12051 Malicious code in tinkoff-ui-action (npm)
- MAL-2026-12050 Malicious code in tinkoff-statist-browser-typed-client-sme.reporting.reporting (npm)
- MAL-2026-1205 Malicious code in polymarket-provider (npm)
- MAL-2026-12049 Malicious code in tinkoff-component-infopanel (npm)
- MAL-2026-12048 Malicious code in tinkoff-boxy-desktop-features-banner (npm)
- MAL-2026-12047 Malicious code in streak-day-utils (npm)
- MAL-2026-12046 Malicious code in statist-browser-typed-client-test.jumpwork.circuitbreaker (npm)
- MAL-2026-12045 Malicious code in statist-browser-typed-client-hra.workplacer.events (npm)
- MAL-2026-12044 Malicious code in specials-mvno-client (npm)
- MAL-2026-12043 Malicious code in sextant-cli-linux-arm64 (npm)
- MAL-2026-12042 Malicious code in platform-ui-island (npm)
- MAL-2026-12041 Malicious code in platform-ui-codemods (npm)
- MAL-2026-12040 Malicious code in forge-extended (npm)
- MAL-2026-1204 Malicious code in polygon-bitquery-api (npm)
- MAL-2026-12039 Malicious code in data-format-helper (npm)
- MAL-2026-12038 Malicious code in bigops-customer (npm)
- MAL-2026-12037 Malicious code in bigops-create-manifest (npm)
- MAL-2026-12036 Malicious code in bigops-chat-tmsg (npm)
- MAL-2026-12035 Malicious code in bigops-auth-utils (npm)
- MAL-2026-12034 Malicious code in beaver-ui-form-modal (npm)
- MAL-2026-12033 Malicious code in aedes_clusters (npm)
- MAL-2026-12032 Malicious code in add-two-numbers-x7q9m (npm)
- MAL-2026-12031 Malicious code in @zzzgenesis00/ethers-wallet (npm)
- MAL-2026-12030 Malicious code in @zzzgenesis00/bip39-mnemonic (npm)
- MAL-2026-1203 Malicious code in polmarket (npm)
- MAL-2026-12029 Malicious code in sextant-cli-linux-amd64 (npm)
- MAL-2026-12028 Malicious code in sextant-cli-darwin-amd64 (npm)
- MAL-2026-12027 Malicious code in tailwind-anime (npm)
- MAL-2026-12026 Malicious code in cors-version (npm)
- MAL-2026-12025 Malicious code in @keyv/valkey (npm)
- MAL-2026-12024 Malicious code in @keyv/test-suite (npm)
- MAL-2026-12023 Malicious code in @keyv/sqlite (npm)
- MAL-2026-12022 Malicious code in @keyv/serialize-superjson (npm)
- MAL-2026-12021 Malicious code in @keyv/serialize-msgpackr (npm)
- MAL-2026-12020 Malicious code in @keyv/redis (npm)
- MAL-2026-1202 Malicious code in mvn-runtime (npm)
- MAL-2026-12019 Malicious code in @keyv/postgres (npm)
- MAL-2026-12018 Malicious code in @keyv/mysql (npm)
- MAL-2026-12017 Malicious code in @keyv/mongo (npm)
- MAL-2026-12016 Malicious code in @keyv/memcache (npm)
- MAL-2026-12015 Malicious code in @keyv/etcd (npm)
- MAL-2026-12014 Malicious code in @keyv/encrypt-web (npm)
- MAL-2026-12013 Malicious code in @keyv/encrypt-node (npm)
- MAL-2026-12012 Malicious code in @keyv/dynamo (npm)
- MAL-2026-12011 Malicious code in @keyv/compress-lz4 (npm)
- MAL-2026-12010 Malicious code in @keyv/compress-gzip (npm)
- MAL-2026-1201 Malicious code in mongos-api (npm)
- MAL-2026-12009 Malicious code in @keyv/compress-brotli (npm)
- MAL-2026-12008 Malicious code in @keyv/cloudflare-kv (npm)
- MAL-2026-12007 Malicious code in @keyv/bigmap (npm)
- MAL-2026-12006 Malicious code in @jsimplify/errno (npm)
- MAL-2026-12005 Malicious code in webdev-conf (npm)
- MAL-2026-12004 Malicious code in vitest-preview-pro (npm)
- MAL-2026-12003 Malicious code in streak-test-mathcore (npm)
- MAL-2026-12002 Malicious code in streak-metricsazb (npm)
- MAL-2026-12001 Malicious code in streak-metricazbd (npm)
- MAL-2026-12000 Malicious code in streak-math-metrics (npm)
- MAL-2026-1200 Malicious code in mongoose-apis (npm)
- MAL-2026-120 Malicious code in qyxb (npm)
- MAL-2026-12 Malicious code in datatables-editor (npm)
- MAL-2026-11999 Malicious code in streak-map-metrics (npm)
- MAL-2026-11998 Malicious code in simple-date-formatter-util-7 (npm)
- MAL-2026-11997 Malicious code in sextant-cli-darwin-arm64 (npm)
- MAL-2026-11996 Malicious code in emulative (npm)
- MAL-2026-11995 Malicious code in approval-guardian (npm)
- MAL-2026-11994 Malicious code in @zzzgenesis00/web3-provider-engine (npm)
- MAL-2026-11993 Malicious code in @tuluax/errb (npm)
- MAL-2026-11992 Malicious code in workbench-browser-server (npm)
- MAL-2026-11991 Malicious code in verdaccio-tarball-local-storage (npm)
- MAL-2026-11990 Malicious code in verdaccio-okta-oauth (npm)
- MAL-2026-1199 Malicious code in fps-logger (npm)
- MAL-2026-11989 Malicious code in umadev (npm)
- MAL-2026-11988 Malicious code in tslint-folder-schema (npm)
- MAL-2026-11987 Malicious code in sn-listbox (npm)
- MAL-2026-11986 Malicious code in server-hemera-mongo (npm)
- MAL-2026-11985 Malicious code in rwc-client (npm)
- MAL-2026-11984 Malicious code in qlik-object-conversion (npm)
- MAL-2026-11983 Malicious code in qlik-modifiers (npm)
- MAL-2026-11982 Malicious code in qlik-chart-modules (npm)
- MAL-2026-11981 Malicious code in pob-test-typescript-package-in-monorepo (npm)
- MAL-2026-11980 Malicious code in pob-test-package-in-monorepo (npm)
- MAL-2026-1198 Malicious code in flycord (npm)
- MAL-2026-11979 Malicious code in picasso.js (npm)
- MAL-2026-11978 Malicious code in picasso-plugin-q (npm)
- MAL-2026-11977 Malicious code in picasso-plugin-hammer (npm)