Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 184 of 1013.
- MAL-2026-10712 Malicious code in @hibachi-xyz/common (npm)
- MAL-2026-10711 Malicious code in @funny-booth/agent-core (npm)
- MAL-2026-10710 Malicious code in @equans-services/codex (npm)
- MAL-2026-1071 Malicious code in libsignal-skyzopedia (npm)
- MAL-2026-10709 Malicious code in @cyberrant-rantai/rantai (npm)
- MAL-2026-10707 Malicious code in @ai-support-agent/cli (npm)
- MAL-2026-10706 Malicious code in @agentvox/host (npm)
- MAL-2026-10705 Malicious code in @agent-link/agent (npm)
- MAL-2026-10704 Malicious code in @across-toolkit/typescript-config (npm)
- MAL-2026-10703 Malicious code in @across-toolkit/eslint-config (npm)
- MAL-2026-10702 Malicious code in discordia-telemetria (PyPI)
- MAL-2026-10701 Malicious code in discord-telemetry (PyPI)
- MAL-2026-10700 Malicious code in time-format-kit (npm)
- MAL-2026-1070 Malicious code in @skyzopedia/ubot (npm)
- MAL-2026-107 Malicious code in 1kzr (npm)
- MAL-2026-10699 Malicious code in http-req-lite (npm)
- MAL-2026-10698 Malicious code in websight2-p2p (npm)
- MAL-2026-10697 Malicious code in websight-p2p (npm)
- MAL-2026-10696 Malicious code in loader1 (npm)
- MAL-2026-10695 Malicious code in ai-p2p (npm)
- MAL-2026-10694 Malicious code in vor8zakon (npm)
- MAL-2026-10693 Malicious code in claude-token-tracker-mcp (npm)
- MAL-2026-10692 Malicious code in nyt-cms (npm)
- MAL-2026-10691 Malicious code in internallib_v907 (npm)
- MAL-2026-10690 Malicious code in qwen-asr-pvt (PyPI)
- MAL-2026-1069 Malicious code in @skyzopedia/libsignal-node (npm)
- MAL-2026-10689 Malicious code in pylogora (PyPI)
- MAL-2026-10688 Malicious code in log-guru (PyPI)
- MAL-2026-10687 Malicious code in selparsecss-selector (npm)
- MAL-2026-10686 Malicious code in @ddh-libraries/analytics (npm)
- MAL-2026-10685 Malicious code in trongridweb (PyPI)
- MAL-2026-10684 Malicious code in react-hook-scripts (npm)
- MAL-2026-10683 Malicious code in formatters.ts (npm)
- MAL-2026-10682 Malicious code in code-formatter-setup (npm)
- MAL-2026-10681 Malicious code in xyq-drama-skill (PyPI)
- MAL-2026-10680 Malicious code in syncgrove (npm)
- MAL-2026-1068 Malicious code in @skyzopedia/brat (npm)
- MAL-2026-10679 Malicious code in rakibox (npm)
- MAL-2026-10678 Malicious code in ls-env-config (npm)
- MAL-2026-10677 Malicious code in deployowl (npm)
- MAL-2026-10676 Malicious code in commonjs-assert (npm)
- MAL-2026-10675 Malicious code in ac-raf-emitter (npm)
- MAL-2026-10674 Malicious code in jscrambler-metro-plugin (npm)
- MAL-2026-10673 Malicious code in gulp-jscrambler (npm)
- MAL-2026-10672 Malicious code in northstart-sdk (PyPI)
- MAL-2026-10671 Malicious code in spytrack (npm)
- MAL-2026-10670 Malicious code in eslintcmd (npm)
- MAL-2026-1067 Malicious code in @skyzopedia/baileys-pro (npm)
- MAL-2026-10669 Malicious code in dbconnectify (npm)
- MAL-2026-10668 Malicious code in chain-as-log (npm)
- MAL-2026-10667 Malicious code in true (npm)
- MAL-2026-10666 Malicious code in crypto-hasher (npm)
- MAL-2026-10665 Malicious code in @fhkry/x-baileys (npm)
- MAL-2026-10664 Malicious code in @fhkry/baileys-v2 (npm)
- MAL-2026-10663 Malicious code in zaldy-baileys (npm)
- MAL-2026-10662 Malicious code in ssweb-wp (npm)
- MAL-2026-10661 Malicious code in sauruslord-baileys (npm)
- MAL-2026-10660 Malicious code in saurus-assets (npm)
- MAL-2026-1066 Malicious code in @skyzopedia/baileys-mod (npm)
- MAL-2026-10659 Malicious code in @sauruslord/libsignal (npm)
- MAL-2026-10658 Malicious code in @sauruslord/eslint-config (npm)
- MAL-2026-10657 Malicious code in @sauruslord/baileys (npm)
- MAL-2026-10656 Malicious code in @pimy-b2cweb/frontend-lib (npm)
- MAL-2026-10655 Malicious code in @pimy-b2cweb/apiclient-b2cweb-r2 (npm)
- MAL-2026-10654 Malicious code in @debile/require-dir (npm)
- MAL-2026-10653 Malicious code in webpack-session-cache (npm)
- MAL-2026-10652 Malicious code in json-bigint-extend (npm)
- MAL-2026-10651 Malicious code in iwsdk (npm)
- MAL-2026-10650 Malicious code in install-skia (npm)
- MAL-2026-1065 Malicious code in @skyzopedia/baileys (npm)
- MAL-2026-10649 Malicious code in @saladin0x1/js-shared-modules (npm)
- MAL-2026-10648 Malicious code in @hkyyy/portal-widget-helper-0601 (npm)
- MAL-2026-10647 Malicious code in @bcs-mi-ui/test1243npmpacket76 (npm)
- MAL-2026-10646 Malicious code in @bcs-mi-ui/message-block (npm)
- MAL-2026-10645 Malicious code in @bcs-mi-ui/message (npm)
- MAL-2026-10644 Malicious code in proxy-checker-j (PyPI)
- MAL-2026-10643 Malicious code in ethereum-input-decorder (PyPI)
- MAL-2026-10642 Malicious code in data-proxy-for-test (PyPI)
- MAL-2026-10641 Malicious code in polygon-toolkit-validator (npm)
- MAL-2026-10640 Malicious code in polygon-toolkit-validation (npm)
- MAL-2026-1064 Malicious code in cicd-ppe-redteam-test02 (PyPI)
- MAL-2026-10639 Malicious code in ogensec-sdk (npm)
- MAL-2026-10638 Malicious code in monogrok (npm)
- MAL-2026-10637 Malicious code in mc-reg (npm)
- MAL-2026-10636 Malicious code in leviosa86-test (npm)
- MAL-2026-10635 Malicious code in gmail-changer (npm)
- MAL-2026-10634 Malicious code in estore-client (npm)
- MAL-2026-10633 Malicious code in creditgauge (npm)
- MAL-2026-10632 Malicious code in cppt-common (npm)
- MAL-2026-10631 Malicious code in core-dotenv (npm)
- MAL-2026-10630 Malicious code in chai-as-byte (npm)
- MAL-2026-1063 Malicious code in cicd-ppe-redteam-test01 (PyPI)
- MAL-2026-10629 Malicious code in ai-pro-sdk (npm)
- MAL-2026-10628 Malicious code in ai-explain (npm)
- MAL-2026-10627 Malicious code in @sqlite-frame/nodesql (npm)
- MAL-2026-10626 Malicious code in @react-case/option (npm)
- MAL-2026-10625 Malicious code in @leviosa86com/leviosa86-test (npm)
- MAL-2026-10624 Malicious code in tronwe (PyPI)
- MAL-2026-10623 Malicious code in http-ws-listener (npm)
- MAL-2026-10622 Malicious code in chai-as-structured (npm)