# Vulnerabilities published in 2026 - [MAL-2026-11435](https://insights.sbomify.com/MAL-2026-11435/): Malicious code in @cr-invested-ui-components/chart (npm) (malicious package) - [MAL-2026-11434](https://insights.sbomify.com/MAL-2026-11434/): Malicious code in @404c3s4r/lodash (npm) (malicious package) - [MAL-2026-11433](https://insights.sbomify.com/MAL-2026-11433/): Malicious code in @0xlr/test-callback (npm) (malicious package) - [MAL-2026-11432](https://insights.sbomify.com/MAL-2026-11432/): Malicious code in @0xlr/question-types (npm) (malicious package) - [MAL-2026-11431](https://insights.sbomify.com/MAL-2026-11431/): Malicious code in @0xlr/dep-confusion-poc (npm) (malicious package) - [MAL-2026-11430](https://insights.sbomify.com/MAL-2026-11430/): Malicious code in list-issue-predecessor-dependencies-block (npm) (malicious package) - [MAL-2026-1143](https://insights.sbomify.com/MAL-2026-1143/): Malicious code in wisecloudsecrets (PyPI) (malicious package) - [MAL-2026-11429](https://insights.sbomify.com/MAL-2026-11429/): Malicious code in trongriden (PyPI) (malicious package) - [MAL-2026-11428](https://insights.sbomify.com/MAL-2026-11428/): Malicious code in wacve-utils (PyPI) (malicious package) - [MAL-2026-11427](https://insights.sbomify.com/MAL-2026-11427/): Malicious code in pp-react-worldready (npm) (malicious package) - [MAL-2026-11426](https://insights.sbomify.com/MAL-2026-11426/): Malicious code in trtllm-subdir-test (PyPI) (malicious package) - [MAL-2026-11425](https://insights.sbomify.com/MAL-2026-11425/): Malicious code in nvtorch-oot-nightly (PyPI) (malicious package) - [MAL-2026-11424](https://insights.sbomify.com/MAL-2026-11424/): Malicious code in telerape (PyPI) (malicious package) - [MAL-2026-11423](https://insights.sbomify.com/MAL-2026-11423/): Malicious code in asdk-plugin-legacy (PyPI) (malicious package) - [MAL-2026-11422](https://insights.sbomify.com/MAL-2026-11422/): Malicious code in asdk-plugin-alphagen (PyPI) (malicious package) - [MAL-2026-11421](https://insights.sbomify.com/MAL-2026-11421/): Malicious code in asdk-plugin-ai-platform (PyPI) (malicious package) - [MAL-2026-11420](https://insights.sbomify.com/MAL-2026-11420/): Malicious code in walmart-genai-trace (PyPI) (malicious package) - [MAL-2026-1142](https://insights.sbomify.com/MAL-2026-1142/): Malicious code in wisecloudcyberark (PyPI) (malicious package) - [MAL-2026-11419](https://insights.sbomify.com/MAL-2026-11419/): Malicious code in cognikit (PyPI) (malicious package) - [MAL-2026-11418](https://insights.sbomify.com/MAL-2026-11418/): Malicious code in catalogai (PyPI) (malicious package) - [MAL-2026-11417](https://insights.sbomify.com/MAL-2026-11417/): Malicious code in aiprepkit (PyPI) (malicious package) - [MAL-2026-11416](https://insights.sbomify.com/MAL-2026-11416/): Malicious code in ailaunchkit (PyPI) (malicious package) - [MAL-2026-11415](https://insights.sbomify.com/MAL-2026-11415/): Malicious code in aichannel (PyPI) (malicious package) - [MAL-2026-11414](https://insights.sbomify.com/MAL-2026-11414/): Malicious code in aiassistcore (PyPI) (malicious package) - [MAL-2026-11413](https://insights.sbomify.com/MAL-2026-11413/): Malicious code in reguestsc (PyPI) (malicious package) - [MAL-2026-11412](https://insights.sbomify.com/MAL-2026-11412/): Malicious code in zcas (npm) (malicious package) - [MAL-2026-11411](https://insights.sbomify.com/MAL-2026-11411/): Malicious code in xp-node-logger (npm) (malicious package) - [MAL-2026-11410](https://insights.sbomify.com/MAL-2026-11410/): Malicious code in wistia_namespace (npm) (malicious package) - [MAL-2026-1141](https://insights.sbomify.com/MAL-2026-1141/): Malicious code in identityapi (PyPI) (malicious package) - [MAL-2026-11409](https://insights.sbomify.com/MAL-2026-11409/): Malicious code in wastu (npm) (malicious package) - [MAL-2026-11408](https://insights.sbomify.com/MAL-2026-11408/): Malicious code in vcse (npm) (malicious package) - [MAL-2026-11407](https://insights.sbomify.com/MAL-2026-11407/): Malicious code in uniswapintefrace (npm) (malicious package) - [MAL-2026-11406](https://insights.sbomify.com/MAL-2026-11406/): Malicious code in unified-help-center-alpha (npm) (malicious package) - [MAL-2026-11405](https://insights.sbomify.com/MAL-2026-11405/): Malicious code in ttest3333 (npm) (malicious package) - [MAL-2026-11404](https://insights.sbomify.com/MAL-2026-11404/): Malicious code in ttest333 (npm) (malicious package) - [MAL-2026-11403](https://insights.sbomify.com/MAL-2026-11403/): Malicious code in tsetnpmackage (npm) (malicious package) - [MAL-2026-11402](https://insights.sbomify.com/MAL-2026-11402/): Malicious code in time-to-reload (npm) (malicious package) - [MAL-2026-11401](https://insights.sbomify.com/MAL-2026-11401/): Malicious code in thoughtgear (npm) (malicious package) - [MAL-2026-11400](https://insights.sbomify.com/MAL-2026-11400/): Malicious code in thedata (npm) (malicious package) - [MAL-2026-1140](https://insights.sbomify.com/MAL-2026-1140/): Malicious code in heimdal-credentials (PyPI) (malicious package) - [MAL-2026-114](https://insights.sbomify.com/MAL-2026-114/): Malicious code in garfield777 (npm) (malicious package) - [MAL-2026-11399](https://insights.sbomify.com/MAL-2026-11399/): Malicious code in tgnode (npm) (malicious package) - [MAL-2026-11398](https://insights.sbomify.com/MAL-2026-11398/): Malicious code in testtwix (npm) (malicious package) - [MAL-2026-11397](https://insights.sbomify.com/MAL-2026-11397/): Malicious code in testsetset (npm) (malicious package) - [MAL-2026-11396](https://insights.sbomify.com/MAL-2026-11396/): Malicious code in test-wastu (npm) (malicious package) - [MAL-2026-11395](https://insights.sbomify.com/MAL-2026-11395/): Malicious code in termly-namespace (npm) (malicious package) - [MAL-2026-11394](https://insights.sbomify.com/MAL-2026-11394/): Malicious code in tailwindcsssss (npm) (malicious package) - [MAL-2026-11393](https://insights.sbomify.com/MAL-2026-11393/): Malicious code in tailwindcssss (npm) (malicious package) - [MAL-2026-11392](https://insights.sbomify.com/MAL-2026-11392/): Malicious code in switchpaymentsapiserv-paypal (npm) (malicious package) - [MAL-2026-11391](https://insights.sbomify.com/MAL-2026-11391/): Malicious code in svelte-streak-metric (npm) (malicious package) - [MAL-2026-11390](https://insights.sbomify.com/MAL-2026-11390/): Malicious code in svelte-metric-map (npm) (malicious package) - [MAL-2026-1139](https://insights.sbomify.com/MAL-2026-1139/): Malicious code in fwk-amigapython-rest-server (PyPI) (malicious package) - [MAL-2026-11389](https://insights.sbomify.com/MAL-2026-11389/): Malicious code in sunpro-3dmodel-renderer (npm) (malicious package) - [MAL-2026-11388](https://insights.sbomify.com/MAL-2026-11388/): Malicious code in streak-metrics-math (npm) (malicious package) - [MAL-2026-11387](https://insights.sbomify.com/MAL-2026-11387/): Malicious code in streak-metrics-core (npm) (malicious package) - [MAL-2026-11386](https://insights.sbomify.com/MAL-2026-11386/): Malicious code in srgb-linear (npm) (malicious package) - [MAL-2026-11385](https://insights.sbomify.com/MAL-2026-11385/): Malicious code in spectral-wraith (npm) (malicious package) - [MAL-2026-11384](https://insights.sbomify.com/MAL-2026-11384/): Malicious code in spectral-corsair (npm) (malicious package) - [MAL-2026-11383](https://insights.sbomify.com/MAL-2026-11383/): Malicious code in socktio (npm) (malicious package) - [MAL-2026-11382](https://insights.sbomify.com/MAL-2026-11382/): Malicious code in socketi (npm) (malicious package) - [MAL-2026-11381](https://insights.sbomify.com/MAL-2026-11381/): Malicious code in soccketio (npm) (malicious package) - [MAL-2026-11380](https://insights.sbomify.com/MAL-2026-11380/): Malicious code in slowest-build-nodes (npm) (malicious package) - [MAL-2026-1138](https://insights.sbomify.com/MAL-2026-1138/): Malicious code in fwk-amigapython-amigamlserver (PyPI) (malicious package) - [MAL-2026-11379](https://insights.sbomify.com/MAL-2026-11379/): Malicious code in shsk (npm) (malicious package) - [MAL-2026-11378](https://insights.sbomify.com/MAL-2026-11378/): Malicious code in shnc (npm) (malicious package) - [MAL-2026-11377](https://insights.sbomify.com/MAL-2026-11377/): Malicious code in scol (npm) (malicious package) - [MAL-2026-11376](https://insights.sbomify.com/MAL-2026-11376/): Malicious code in scketio (npm) (malicious package) - [MAL-2026-11375](https://insights.sbomify.com/MAL-2026-11375/): Malicious code in rumjs (npm) (malicious package) - [MAL-2026-11374](https://insights.sbomify.com/MAL-2026-11374/): Malicious code in rshell (npm) (malicious package) - [MAL-2026-11373](https://insights.sbomify.com/MAL-2026-11373/): Malicious code in rph-validator (npm) (malicious package) - [MAL-2026-11372](https://insights.sbomify.com/MAL-2026-11372/): Malicious code in rlp.git (npm) (malicious package) - [MAL-2026-11371](https://insights.sbomify.com/MAL-2026-11371/): Malicious code in rlp-master (npm) (malicious package) - [MAL-2026-11370](https://insights.sbomify.com/MAL-2026-11370/): Malicious code in reakt.js (npm) (malicious package) - [MAL-2026-1137](https://insights.sbomify.com/MAL-2026-1137/): Malicious code in fwk-amigapython (PyPI) (malicious package) - [MAL-2026-11369](https://insights.sbomify.com/MAL-2026-11369/): Malicious code in react.jd (npm) (malicious package) - [MAL-2026-11368](https://insights.sbomify.com/MAL-2026-11368/): Malicious code in react.ja (npm) (malicious package) - [MAL-2026-11367](https://insights.sbomify.com/MAL-2026-11367/): Malicious code in react.j (npm) (malicious package) - [MAL-2026-11366](https://insights.sbomify.com/MAL-2026-11366/): Malicious code in react-fast-refresh-helper (npm) (malicious package) - [MAL-2026-11365](https://insights.sbomify.com/MAL-2026-11365/): Malicious code in react-ag-grid (npm) (malicious package) - [MAL-2026-11364](https://insights.sbomify.com/MAL-2026-11364/): Malicious code in reac.js (npm) (malicious package) - [MAL-2026-11363](https://insights.sbomify.com/MAL-2026-11363/): Malicious code in raydiums (npm) (malicious package) - [MAL-2026-11362](https://insights.sbomify.com/MAL-2026-11362/): Malicious code in qserver (npm) (malicious package) - [MAL-2026-11361](https://insights.sbomify.com/MAL-2026-11361/): Malicious code in puppetewebr (npm) (malicious package) - [MAL-2026-11360](https://insights.sbomify.com/MAL-2026-11360/): Malicious code in pullingpackageeeeeeeeeee (npm) (malicious package) - [MAL-2026-1136](https://insights.sbomify.com/MAL-2026-1136/): Malicious code in amigapythonupdater (PyPI) (malicious package) - [MAL-2026-11359](https://insights.sbomify.com/MAL-2026-11359/): Malicious code in pullingpackageeeeeeeeee (npm) (malicious package) - [MAL-2026-11358](https://insights.sbomify.com/MAL-2026-11358/): Malicious code in pullingpackageeeeeeeee (npm) (malicious package) - [MAL-2026-11357](https://insights.sbomify.com/MAL-2026-11357/): Malicious code in pullingpackageeeeeeee (npm) (malicious package) - [MAL-2026-11356](https://insights.sbomify.com/MAL-2026-11356/): Malicious code in pullingpackageeeeeee (npm) (malicious package) - [MAL-2026-11355](https://insights.sbomify.com/MAL-2026-11355/): Malicious code in pullingpackageeee (npm) (malicious package) - [MAL-2026-11354](https://insights.sbomify.com/MAL-2026-11354/): Malicious code in pullingpackageee (npm) (malicious package) - [MAL-2026-11353](https://insights.sbomify.com/MAL-2026-11353/): Malicious code in pullingpackagee (npm) (malicious package) - [MAL-2026-11352](https://insights.sbomify.com/MAL-2026-11352/): Malicious code in pullingpackaged (npm) (malicious package) - [MAL-2026-11351](https://insights.sbomify.com/MAL-2026-11351/): Malicious code in pullingpackage (npm) (malicious package) - [MAL-2026-11350](https://insights.sbomify.com/MAL-2026-11350/): Malicious code in pulleeelll (npm) (malicious package) - [MAL-2026-1135](https://insights.sbomify.com/MAL-2026-1135/): Malicious code in yuji-baileys (npm) (malicious package) - [MAL-2026-11349](https://insights.sbomify.com/MAL-2026-11349/): Malicious code in pretty-log-cli (npm) (malicious package) - [MAL-2026-11348](https://insights.sbomify.com/MAL-2026-11348/): Malicious code in pretierr (npm) (malicious package) - [MAL-2026-11347](https://insights.sbomify.com/MAL-2026-11347/): Malicious code in pjm-dls (npm) (malicious package) - [MAL-2026-11346](https://insights.sbomify.com/MAL-2026-11346/): Malicious code in payu-node (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2026/page/176/