# Vulnerabilities published in 2026 - [MAL-2026-10351](https://insights.sbomify.com/MAL-2026-10351/): Malicious code in nottuff26 (npm) (malicious package) - [MAL-2026-10350](https://insights.sbomify.com/MAL-2026-10350/): Malicious code in nottuff24 (npm) (malicious package) - [MAL-2026-1035](https://insights.sbomify.com/MAL-2026-1035/): Malicious code in neural-compressor-jax (PyPI) (malicious package) - [MAL-2026-10349](https://insights.sbomify.com/MAL-2026-10349/): Malicious code in nottuff22 (npm) (malicious package) - [MAL-2026-10348](https://insights.sbomify.com/MAL-2026-10348/): Malicious code in nottuff21 (npm) (malicious package) - [MAL-2026-10347](https://insights.sbomify.com/MAL-2026-10347/): Malicious code in nottuff20 (npm) (malicious package) - [MAL-2026-10346](https://insights.sbomify.com/MAL-2026-10346/): Malicious code in nottuff2 (npm) (malicious package) - [MAL-2026-10345](https://insights.sbomify.com/MAL-2026-10345/): Malicious code in nottuff19 (npm) (malicious package) - [MAL-2026-10344](https://insights.sbomify.com/MAL-2026-10344/): Malicious code in nottuff18 (npm) (malicious package) - [MAL-2026-10343](https://insights.sbomify.com/MAL-2026-10343/): Malicious code in nottuff17 (npm) (malicious package) - [MAL-2026-10342](https://insights.sbomify.com/MAL-2026-10342/): Malicious code in nottuff16 (npm) (malicious package) - [MAL-2026-10341](https://insights.sbomify.com/MAL-2026-10341/): Malicious code in nottuff14 (npm) (malicious package) - [MAL-2026-10340](https://insights.sbomify.com/MAL-2026-10340/): Malicious code in nottuff13 (npm) (malicious package) - [MAL-2026-1034](https://insights.sbomify.com/MAL-2026-1034/): Malicious code in chai-lite-lib (npm) (malicious package) - [MAL-2026-10339](https://insights.sbomify.com/MAL-2026-10339/): Malicious code in nottuff12 (npm) (malicious package) - [MAL-2026-10338](https://insights.sbomify.com/MAL-2026-10338/): Malicious code in nottuff11 (npm) (malicious package) - [MAL-2026-10337](https://insights.sbomify.com/MAL-2026-10337/): Malicious code in nottuff10 (npm) (malicious package) - [MAL-2026-10336](https://insights.sbomify.com/MAL-2026-10336/): Malicious code in nottuff1 (npm) (malicious package) - [MAL-2026-10335](https://insights.sbomify.com/MAL-2026-10335/): Malicious code in miguelphonk (npm) (malicious package) - [MAL-2026-10334](https://insights.sbomify.com/MAL-2026-10334/): Malicious code in midnightrush (npm) (malicious package) - [MAL-2026-10333](https://insights.sbomify.com/MAL-2026-10333/): Malicious code in lowkirkuenly (npm) (malicious package) - [MAL-2026-10332](https://insights.sbomify.com/MAL-2026-10332/): Malicious code in lowkeybored (npm) (malicious package) - [MAL-2026-10331](https://insights.sbomify.com/MAL-2026-10331/): Malicious code in kirkland (npm) (malicious package) - [MAL-2026-10330](https://insights.sbomify.com/MAL-2026-10330/): Malicious code in ishowfeet9 (npm) (malicious package) - [MAL-2026-1033](https://insights.sbomify.com/MAL-2026-1033/): Malicious code in duer-js (npm) (malicious package) - [MAL-2026-10329](https://insights.sbomify.com/MAL-2026-10329/): Malicious code in ishowfeet8 (npm) (malicious package) - [MAL-2026-10328](https://insights.sbomify.com/MAL-2026-10328/): Malicious code in ishowfeet7 (npm) (malicious package) - [MAL-2026-10327](https://insights.sbomify.com/MAL-2026-10327/): Malicious code in ishowfeet6 (npm) (malicious package) - [MAL-2026-10326](https://insights.sbomify.com/MAL-2026-10326/): Malicious code in ishowfeet5 (npm) (malicious package) - [MAL-2026-10325](https://insights.sbomify.com/MAL-2026-10325/): Malicious code in ishowfeet4 (npm) (malicious package) - [MAL-2026-10324](https://insights.sbomify.com/MAL-2026-10324/): Malicious code in ishowfeet3 (npm) (malicious package) - [MAL-2026-10323](https://insights.sbomify.com/MAL-2026-10323/): Malicious code in ishowfeet20 (npm) (malicious package) - [MAL-2026-10322](https://insights.sbomify.com/MAL-2026-10322/): Malicious code in ishowfeet2 (npm) (malicious package) - [MAL-2026-10321](https://insights.sbomify.com/MAL-2026-10321/): Malicious code in ishowfeet19 (npm) (malicious package) - [MAL-2026-10320](https://insights.sbomify.com/MAL-2026-10320/): Malicious code in ishowfeet18 (npm) (malicious package) - [MAL-2026-1032](https://insights.sbomify.com/MAL-2026-1032/): Malicious code in sample-custom-component (npm) (malicious package) - [MAL-2026-10319](https://insights.sbomify.com/MAL-2026-10319/): Malicious code in ishowfeet17 (npm) (malicious package) - [MAL-2026-10318](https://insights.sbomify.com/MAL-2026-10318/): Malicious code in ishowfeet16 (npm) (malicious package) - [MAL-2026-10317](https://insights.sbomify.com/MAL-2026-10317/): Malicious code in ishowfeet15 (npm) (malicious package) - [MAL-2026-10316](https://insights.sbomify.com/MAL-2026-10316/): Malicious code in ishowfeet14 (npm) (malicious package) - [MAL-2026-10315](https://insights.sbomify.com/MAL-2026-10315/): Malicious code in ishowfeet13 (npm) (malicious package) - [MAL-2026-10314](https://insights.sbomify.com/MAL-2026-10314/): Malicious code in ishowfeet12 (npm) (malicious package) - [MAL-2026-10313](https://insights.sbomify.com/MAL-2026-10313/): Malicious code in ishowfeet11 (npm) (malicious package) - [MAL-2026-10312](https://insights.sbomify.com/MAL-2026-10312/): Malicious code in ishowfeet10 (npm) (malicious package) - [MAL-2026-10311](https://insights.sbomify.com/MAL-2026-10311/): Malicious code in ishowfeet1 (npm) (malicious package) - [MAL-2026-10310](https://insights.sbomify.com/MAL-2026-10310/): Malicious code in imillegal5 (npm) (malicious package) - [MAL-2026-1031](https://insights.sbomify.com/MAL-2026-1031/): Malicious code in react-svg-helper-fast (npm) (malicious package) - [MAL-2026-10309](https://insights.sbomify.com/MAL-2026-10309/): Malicious code in imillegal4 (npm) (malicious package) - [MAL-2026-10308](https://insights.sbomify.com/MAL-2026-10308/): Malicious code in imillegal3 (npm) (malicious package) - [MAL-2026-10307](https://insights.sbomify.com/MAL-2026-10307/): Malicious code in imillegal2 (npm) (malicious package) - [MAL-2026-10306](https://insights.sbomify.com/MAL-2026-10306/): Malicious code in imillegal1 (npm) (malicious package) - [MAL-2026-10305](https://insights.sbomify.com/MAL-2026-10305/): Malicious code in ilovefemboys (npm) (malicious package) - [MAL-2026-10304](https://insights.sbomify.com/MAL-2026-10304/): Malicious code in howmanygreatbritain (npm) (malicious package) - [MAL-2026-10303](https://insights.sbomify.com/MAL-2026-10303/): Malicious code in gpapps (npm) (malicious package) - [MAL-2026-10302](https://insights.sbomify.com/MAL-2026-10302/): Malicious code in gpapp (npm) (malicious package) - [MAL-2026-10301](https://insights.sbomify.com/MAL-2026-10301/): Malicious code in fflc-updated (npm) (malicious package) - [MAL-2026-10300](https://insights.sbomify.com/MAL-2026-10300/): Malicious code in dogfood-search (npm) (malicious package) - [MAL-2026-1030](https://insights.sbomify.com/MAL-2026-1030/): Malicious code in chai-as-utils (npm) (malicious package) - [MAL-2026-103](https://insights.sbomify.com/MAL-2026-103/): Malicious code in const-enum (npm) (malicious package) - [MAL-2026-10299](https://insights.sbomify.com/MAL-2026-10299/): Malicious code in crazynut (npm) (malicious package) - [MAL-2026-10298](https://insights.sbomify.com/MAL-2026-10298/): Malicious code in changiairportpromax (npm) (malicious package) - [MAL-2026-10297](https://insights.sbomify.com/MAL-2026-10297/): Malicious code in captainindia (npm) (malicious package) - [MAL-2026-10296](https://insights.sbomify.com/MAL-2026-10296/): Malicious code in bomboclatwallahi (npm) (malicious package) - [MAL-2026-10295](https://insights.sbomify.com/MAL-2026-10295/): Malicious code in bismillahitidakimas (npm) (malicious package) - [MAL-2026-10294](https://insights.sbomify.com/MAL-2026-10294/): Malicious code in backupsitetuff9 (npm) (malicious package) - [MAL-2026-10293](https://insights.sbomify.com/MAL-2026-10293/): Malicious code in backupsitetuff6 (npm) (malicious package) - [MAL-2026-10292](https://insights.sbomify.com/MAL-2026-10292/): Malicious code in backupsitetuff3 (npm) (malicious package) - [MAL-2026-10291](https://insights.sbomify.com/MAL-2026-10291/): Malicious code in backupsitetuff10 (npm) (malicious package) - [MAL-2026-10290](https://insights.sbomify.com/MAL-2026-10290/): Malicious code in backupgenuine-updated (npm) (malicious package) - [MAL-2026-1029](https://insights.sbomify.com/MAL-2026-1029/): Malicious code in geocommunes-geoportal (PyPI) (malicious package) - [MAL-2026-10289](https://insights.sbomify.com/MAL-2026-10289/): Malicious code in backup5-updated (npm) (malicious package) - [MAL-2026-10288](https://insights.sbomify.com/MAL-2026-10288/): Malicious code in backup4-gasp (npm) (malicious package) - [MAL-2026-10287](https://insights.sbomify.com/MAL-2026-10287/): Malicious code in backup3-ff (npm) (malicious package) - [MAL-2026-10286](https://insights.sbomify.com/MAL-2026-10286/): Malicious code in backup2-asd (npm) (malicious package) - [MAL-2026-10285](https://insights.sbomify.com/MAL-2026-10285/): Malicious code in backup1-gg (npm) (malicious package) - [MAL-2026-10284](https://insights.sbomify.com/MAL-2026-10284/): Malicious code in apps-gpt (npm) (malicious package) - [MAL-2026-10283](https://insights.sbomify.com/MAL-2026-10283/): Malicious code in another-poc-by-tipsen (npm) (malicious package) - [MAL-2026-10282](https://insights.sbomify.com/MAL-2026-10282/): Malicious code in acidic (npm) (malicious package) - [MAL-2026-10281](https://insights.sbomify.com/MAL-2026-10281/): Malicious code in abuden5 (npm) (malicious package) - [MAL-2026-10280](https://insights.sbomify.com/MAL-2026-10280/): Malicious code in abuden4 (npm) (malicious package) - [MAL-2026-1028](https://insights.sbomify.com/MAL-2026-1028/): Malicious code in examplereactnative76 (npm) (malicious package) - [MAL-2026-10279](https://insights.sbomify.com/MAL-2026-10279/): Malicious code in abuden3 (npm) (malicious package) - [MAL-2026-10278](https://insights.sbomify.com/MAL-2026-10278/): Malicious code in abuden29 (npm) (malicious package) - [MAL-2026-10277](https://insights.sbomify.com/MAL-2026-10277/): Malicious code in abuden28 (npm) (malicious package) - [MAL-2026-10276](https://insights.sbomify.com/MAL-2026-10276/): Malicious code in abuden27 (npm) (malicious package) - [MAL-2026-10275](https://insights.sbomify.com/MAL-2026-10275/): Malicious code in abuden26 (npm) (malicious package) - [MAL-2026-10274](https://insights.sbomify.com/MAL-2026-10274/): Malicious code in abuden25 (npm) (malicious package) - [MAL-2026-10273](https://insights.sbomify.com/MAL-2026-10273/): Malicious code in abuden24 (npm) (malicious package) - [MAL-2026-10272](https://insights.sbomify.com/MAL-2026-10272/): Malicious code in abuden230 (npm) (malicious package) - [MAL-2026-10271](https://insights.sbomify.com/MAL-2026-10271/): Malicious code in abuden23 (npm) (malicious package) - [MAL-2026-10270](https://insights.sbomify.com/MAL-2026-10270/): Malicious code in abuden229 (npm) (malicious package) - [MAL-2026-1027](https://insights.sbomify.com/MAL-2026-1027/): Malicious code in rtxbbtyols (npm) (malicious package) - [MAL-2026-10269](https://insights.sbomify.com/MAL-2026-10269/): Malicious code in abuden228 (npm) (malicious package) - [MAL-2026-10268](https://insights.sbomify.com/MAL-2026-10268/): Malicious code in abuden227 (npm) (malicious package) - [MAL-2026-10267](https://insights.sbomify.com/MAL-2026-10267/): Malicious code in abuden226 (npm) (malicious package) - [MAL-2026-10266](https://insights.sbomify.com/MAL-2026-10266/): Malicious code in abuden225 (npm) (malicious package) - [MAL-2026-10265](https://insights.sbomify.com/MAL-2026-10265/): Malicious code in abuden224 (npm) (malicious package) - [MAL-2026-10264](https://insights.sbomify.com/MAL-2026-10264/): Malicious code in abuden223 (npm) (malicious package) - [MAL-2026-10263](https://insights.sbomify.com/MAL-2026-10263/): Malicious code in abuden222 (npm) (malicious package) - [MAL-2026-10262](https://insights.sbomify.com/MAL-2026-10262/): Malicious code in abuden220 (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2026/page/188/