# Vulnerabilities published in 2026 - [MAL-2026-11886](https://insights.sbomify.com/MAL-2026-11886/): Malicious code in @servicetitan/ld-type-generator (npm) (malicious package) - [MAL-2026-11885](https://insights.sbomify.com/MAL-2026-11885/): Malicious code in @servicetitan/lazy-module (npm) (malicious package) - [MAL-2026-11884](https://insights.sbomify.com/MAL-2026-11884/): Malicious code in @servicetitan/launchdarkly-service (npm) (malicious package) - [MAL-2026-11883](https://insights.sbomify.com/MAL-2026-11883/): Malicious code in @servicetitan/ko-bridge (npm) (malicious package) - [MAL-2026-11882](https://insights.sbomify.com/MAL-2026-11882/): Malicious code in @servicetitan/kendo-theme (npm) (malicious package) - [MAL-2026-11881](https://insights.sbomify.com/MAL-2026-11881/): Malicious code in @servicetitan/json-render-react (npm) (malicious package) - [MAL-2026-11880](https://insights.sbomify.com/MAL-2026-11880/): Malicious code in @servicetitan/intl (npm) (malicious package) - [MAL-2026-1188](https://insights.sbomify.com/MAL-2026-1188/): Malicious code in alpha-replicator (npm) (malicious package) - [MAL-2026-11879](https://insights.sbomify.com/MAL-2026-11879/): Malicious code in @servicetitan/install (npm) (malicious package) - [MAL-2026-11878](https://insights.sbomify.com/MAL-2026-11878/): Malicious code in @servicetitan/html-sketchapp (npm) (malicious package) - [MAL-2026-11877](https://insights.sbomify.com/MAL-2026-11877/): Malicious code in @servicetitan/help-center (npm) (malicious package) - [MAL-2026-11876](https://insights.sbomify.com/MAL-2026-11876/): Malicious code in @servicetitan/hash-browser-router (npm) (malicious package) - [MAL-2026-11875](https://insights.sbomify.com/MAL-2026-11875/): Malicious code in @servicetitan/hammer-token (npm) (malicious package) - [MAL-2026-11874](https://insights.sbomify.com/MAL-2026-11874/): Malicious code in @servicetitan/hammer-react (npm) (malicious package) - [MAL-2026-11873](https://insights.sbomify.com/MAL-2026-11873/): Malicious code in @servicetitan/hammer-icon (npm) (malicious package) - [MAL-2026-11872](https://insights.sbomify.com/MAL-2026-11872/): Malicious code in @servicetitan/grid (npm) (malicious package) - [MAL-2026-11871](https://insights.sbomify.com/MAL-2026-11871/): Malicious code in @servicetitan/form-state (npm) (malicious package) - [MAL-2026-11870](https://insights.sbomify.com/MAL-2026-11870/): Malicious code in @servicetitan/form (npm) (malicious package) - [MAL-2026-1187](https://insights.sbomify.com/MAL-2026-1187/): Malicious code in @twilio-client/twilio-client (npm) (malicious package) - [MAL-2026-11869](https://insights.sbomify.com/MAL-2026-11869/): Malicious code in @servicetitan/forge (npm) (malicious package) - [MAL-2026-11868](https://insights.sbomify.com/MAL-2026-11868/): Malicious code in @servicetitan/folder-lint (npm) (malicious package) - [MAL-2026-11867](https://insights.sbomify.com/MAL-2026-11867/): Malicious code in @servicetitan/feature-spotlight (npm) (malicious package) - [MAL-2026-11866](https://insights.sbomify.com/MAL-2026-11866/): Malicious code in @servicetitan/examples (npm) (malicious package) - [MAL-2026-11865](https://insights.sbomify.com/MAL-2026-11865/): Malicious code in @servicetitan/eslint-plugin-processors-stub (npm) (malicious package) - [MAL-2026-11864](https://insights.sbomify.com/MAL-2026-11864/): Malicious code in @servicetitan/eslint-plugin-mobx-6 (npm) (malicious package) - [MAL-2026-11863](https://insights.sbomify.com/MAL-2026-11863/): Malicious code in @servicetitan/eslint-plugin-folder-schema (npm) (malicious package) - [MAL-2026-11862](https://insights.sbomify.com/MAL-2026-11862/): Malicious code in @servicetitan/eslint-plugin-decorators-declare (npm) (malicious package) - [MAL-2026-11861](https://insights.sbomify.com/MAL-2026-11861/): Malicious code in @servicetitan/eslint-plugin (npm) (malicious package) - [MAL-2026-11860](https://insights.sbomify.com/MAL-2026-11860/): Malicious code in @servicetitan/eslint-config (npm) (malicious package) - [MAL-2026-1186](https://insights.sbomify.com/MAL-2026-1186/): Malicious code in @powpegtest/powpeg (npm) (malicious package) - [MAL-2026-11859](https://insights.sbomify.com/MAL-2026-11859/): Malicious code in @servicetitan/error-boundary (npm) (malicious package) - [MAL-2026-11858](https://insights.sbomify.com/MAL-2026-11858/): Malicious code in @servicetitan/eh-module-communication (npm) (malicious package) - [MAL-2026-11857](https://insights.sbomify.com/MAL-2026-11857/): Malicious code in @servicetitan/dte-unlayer (npm) (malicious package) - [MAL-2026-11856](https://insights.sbomify.com/MAL-2026-11856/): Malicious code in @servicetitan/dte-pdf-editor (npm) (malicious package) - [MAL-2026-11855](https://insights.sbomify.com/MAL-2026-11855/): Malicious code in @servicetitan/document-title (npm) (malicious package) - [MAL-2026-11854](https://insights.sbomify.com/MAL-2026-11854/): Malicious code in @servicetitan/docs-uikit (npm) (malicious package) - [MAL-2026-11853](https://insights.sbomify.com/MAL-2026-11853/): Malicious code in @servicetitan/docs-anvil-uikit-contrib (npm) (malicious package) - [MAL-2026-11852](https://insights.sbomify.com/MAL-2026-11852/): Malicious code in @servicetitan/design-system (npm) (malicious package) - [MAL-2026-11851](https://insights.sbomify.com/MAL-2026-11851/): Malicious code in @servicetitan/datetime-utils (npm) (malicious package) - [MAL-2026-11850](https://insights.sbomify.com/MAL-2026-11850/): Malicious code in @servicetitan/datadog-rum (npm) (malicious package) - [MAL-2026-1185](https://insights.sbomify.com/MAL-2026-1185/): Malicious code in @bookings.microsoft.com/s (npm) (malicious package) - [MAL-2026-11849](https://insights.sbomify.com/MAL-2026-11849/): Malicious code in @servicetitan/data-query (npm) (malicious package) - [MAL-2026-11848](https://insights.sbomify.com/MAL-2026-11848/): Malicious code in @servicetitan/culture (npm) (malicious package) - [MAL-2026-11847](https://insights.sbomify.com/MAL-2026-11847/): Malicious code in @servicetitan/cp-ui (npm) (malicious package) - [MAL-2026-11846](https://insights.sbomify.com/MAL-2026-11846/): Malicious code in @servicetitan/cp-react-hooks (npm) (malicious package) - [MAL-2026-11845](https://insights.sbomify.com/MAL-2026-11845/): Malicious code in @servicetitan/cp-mfe-dev (npm) (malicious package) - [MAL-2026-11844](https://insights.sbomify.com/MAL-2026-11844/): Malicious code in @servicetitan/cp-mfe (npm) (malicious package) - [MAL-2026-11843](https://insights.sbomify.com/MAL-2026-11843/): Malicious code in @servicetitan/cp-api (npm) (malicious package) - [MAL-2026-11842](https://insights.sbomify.com/MAL-2026-11842/): Malicious code in @servicetitan/contentful-proxy (npm) (malicious package) - [MAL-2026-11841](https://insights.sbomify.com/MAL-2026-11841/): Malicious code in @servicetitan/contentful (npm) (malicious package) - [MAL-2026-11840](https://insights.sbomify.com/MAL-2026-11840/): Malicious code in @servicetitan/confirm-navigation (npm) (malicious package) - [MAL-2026-1184](https://insights.sbomify.com/MAL-2026-1184/): Malicious code in web-prompt (npm) (malicious package) - [MAL-2026-11839](https://insights.sbomify.com/MAL-2026-11839/): Malicious code in @servicetitan/confirm (npm) (malicious package) - [MAL-2026-11838](https://insights.sbomify.com/MAL-2026-11838/): Malicious code in @servicetitan/component-usage (npm) (malicious package) - [MAL-2026-11837](https://insights.sbomify.com/MAL-2026-11837/): Malicious code in @servicetitan/carto-tokens (npm) (malicious package) - [MAL-2026-11836](https://insights.sbomify.com/MAL-2026-11836/): Malicious code in @servicetitan/carto-rn-kit (npm) (malicious package) - [MAL-2026-11835](https://insights.sbomify.com/MAL-2026-11835/): Malicious code in @servicetitan/carto-react-kit (npm) (malicious package) - [MAL-2026-11834](https://insights.sbomify.com/MAL-2026-11834/): Malicious code in @servicetitan/carto-charts-rn (npm) (malicious package) - [MAL-2026-11833](https://insights.sbomify.com/MAL-2026-11833/): Malicious code in @servicetitan/carto-charts-react (npm) (malicious package) - [MAL-2026-11832](https://insights.sbomify.com/MAL-2026-11832/): Malicious code in @servicetitan/carto-charts-core (npm) (malicious package) - [MAL-2026-11831](https://insights.sbomify.com/MAL-2026-11831/): Malicious code in @servicetitan/assist-utils (npm) (malicious package) - [MAL-2026-11830](https://insights.sbomify.com/MAL-2026-11830/): Malicious code in @servicetitan/assist-ui (npm) (malicious package) - [MAL-2026-1183](https://insights.sbomify.com/MAL-2026-1183/): Malicious code in rbxm-utils (npm) (malicious package) - [MAL-2026-11829](https://insights.sbomify.com/MAL-2026-11829/): Malicious code in @servicetitan/anvil2-mcp (npm) (malicious package) - [MAL-2026-11828](https://insights.sbomify.com/MAL-2026-11828/): Malicious code in @servicetitan/anvil2-illustrations (npm) (malicious package) - [MAL-2026-11827](https://insights.sbomify.com/MAL-2026-11827/): Malicious code in @servicetitan/anvil2-ext-mwv (npm) (malicious package) - [MAL-2026-11826](https://insights.sbomify.com/MAL-2026-11826/): Malicious code in @servicetitan/anvil2-ext-common (npm) (malicious package) - [MAL-2026-11825](https://insights.sbomify.com/MAL-2026-11825/): Malicious code in @servicetitan/anvil2-ext-charts (npm) (malicious package) - [MAL-2026-11824](https://insights.sbomify.com/MAL-2026-11824/): Malicious code in @servicetitan/anvil2-ext-atlas (npm) (malicious package) - [MAL-2026-11823](https://insights.sbomify.com/MAL-2026-11823/): Malicious code in @servicetitan/anvil2-codemods (npm) (malicious package) - [MAL-2026-11822](https://insights.sbomify.com/MAL-2026-11822/): Malicious code in @servicetitan/anvil2 (npm) (malicious package) - [MAL-2026-11821](https://insights.sbomify.com/MAL-2026-11821/): Malicious code in @servicetitan/anvil-token (npm) (malicious package) - [MAL-2026-11820](https://insights.sbomify.com/MAL-2026-11820/): Malicious code in @servicetitan/anvil-themes (npm) (malicious package) - [MAL-2026-1182](https://insights.sbomify.com/MAL-2026-1182/): Malicious code in bigmathutils-v2 (npm) (malicious package) - [MAL-2026-11819](https://insights.sbomify.com/MAL-2026-11819/): Malicious code in @servicetitan/anvil-react (npm) (malicious package) - [MAL-2026-11818](https://insights.sbomify.com/MAL-2026-11818/): Malicious code in @servicetitan/anvil-icons (npm) (malicious package) - [MAL-2026-11817](https://insights.sbomify.com/MAL-2026-11817/): Malicious code in @servicetitan/anvil-icon (npm) (malicious package) - [MAL-2026-11816](https://insights.sbomify.com/MAL-2026-11816/): Malicious code in @servicetitan/anvil-fonts (npm) (malicious package) - [MAL-2026-11815](https://insights.sbomify.com/MAL-2026-11815/): Malicious code in @servicetitan/anvil-css-utilities (npm) (malicious package) - [MAL-2026-11814](https://insights.sbomify.com/MAL-2026-11814/): Malicious code in @servicetitan/ajax-handlers (npm) (malicious package) - [MAL-2026-11813](https://insights.sbomify.com/MAL-2026-11813/): Malicious code in @servicetitan/admin-sql-table (npm) (malicious package) - [MAL-2026-11812](https://insights.sbomify.com/MAL-2026-11812/): Malicious code in @servicetitan/admin-layout (npm) (malicious package) - [MAL-2026-11811](https://insights.sbomify.com/MAL-2026-11811/): Malicious code in @servicetitan/acquisition-functions (npm) (malicious package) - [MAL-2026-11810](https://insights.sbomify.com/MAL-2026-11810/): Malicious code in @qlik/tsconfig (npm) (malicious package) - [MAL-2026-1181](https://insights.sbomify.com/MAL-2026-1181/): Malicious code in webnochs (npm) (malicious package) - [MAL-2026-11809](https://insights.sbomify.com/MAL-2026-11809/): Malicious code in @qlik/sprout-react-table (npm) (malicious package) - [MAL-2026-11808](https://insights.sbomify.com/MAL-2026-11808/): Malicious code in @qlik/sprout-react (npm) (malicious package) - [MAL-2026-11807](https://insights.sbomify.com/MAL-2026-11807/): Malicious code in @qlik/sprout-icons (npm) (malicious package) - [MAL-2026-11806](https://insights.sbomify.com/MAL-2026-11806/): Malicious code in @qlik/sprout-gesture (npm) (malicious package) - [MAL-2026-11805](https://insights.sbomify.com/MAL-2026-11805/): Malicious code in @qlik/sprout-design-docs (npm) (malicious package) - [MAL-2026-11804](https://insights.sbomify.com/MAL-2026-11804/): Malicious code in @qlik/sdk (npm) (malicious package) - [MAL-2026-11803](https://insights.sbomify.com/MAL-2026-11803/): Malicious code in @qlik/runtime-module-loader (npm) (malicious package) - [MAL-2026-11802](https://insights.sbomify.com/MAL-2026-11802/): Malicious code in @qlik/react-native-simple-grid (npm) (malicious package) - [MAL-2026-11801](https://insights.sbomify.com/MAL-2026-11801/): Malicious code in @qlik/prettier-config (npm) (malicious package) - [MAL-2026-11800](https://insights.sbomify.com/MAL-2026-11800/): Malicious code in @qlik/oxlint-config (npm) (malicious package) - [MAL-2026-1180](https://insights.sbomify.com/MAL-2026-1180/): Malicious code in webnoch (npm) (malicious package) - [MAL-2026-118](https://insights.sbomify.com/MAL-2026-118/): Malicious code in klywarn (npm) (malicious package) - [MAL-2026-11799](https://insights.sbomify.com/MAL-2026-11799/): Malicious code in @qlik/oxfmt-config (npm) (malicious package) - [MAL-2026-11798](https://insights.sbomify.com/MAL-2026-11798/): Malicious code in @qlik/nebula-table-utils (npm) (malicious package) - [MAL-2026-11797](https://insights.sbomify.com/MAL-2026-11797/): Malicious code in @qlik/eslint-config-vue (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2026/page/171/