# Vulnerabilities published in 2026 - [MAL-2026-9172](https://insights.sbomify.com/MAL-2026-9172/): Malicious code in wandczvof5git (RubyGems) (malicious package) - [MAL-2026-9171](https://insights.sbomify.com/MAL-2026-9171/): Malicious code in wandczvof4svn (RubyGems) (malicious package) - [MAL-2026-9170](https://insights.sbomify.com/MAL-2026-9170/): Malicious code in wandczvof4hg (RubyGems) (malicious package) - [MAL-2026-917](https://insights.sbomify.com/MAL-2026-917/): Malicious code in aliyun-python-sdk-v2 (PyPI) (malicious package) - [MAL-2026-9169](https://insights.sbomify.com/MAL-2026-9169/): Malicious code in wandczvof4git (RubyGems) (malicious package) - [MAL-2026-9168](https://insights.sbomify.com/MAL-2026-9168/): Malicious code in wandczvof3svn (RubyGems) (malicious package) - [MAL-2026-9167](https://insights.sbomify.com/MAL-2026-9167/): Malicious code in wandczvof3hg (RubyGems) (malicious package) - [MAL-2026-9166](https://insights.sbomify.com/MAL-2026-9166/): Malicious code in wandczvof3git (RubyGems) (malicious package) - [MAL-2026-9165](https://insights.sbomify.com/MAL-2026-9165/): Malicious code in wandczvof2svn (RubyGems) (malicious package) - [MAL-2026-9164](https://insights.sbomify.com/MAL-2026-9164/): Malicious code in wandczvof2hg (RubyGems) (malicious package) - [MAL-2026-9163](https://insights.sbomify.com/MAL-2026-9163/): Malicious code in wandczvof2git (RubyGems) (malicious package) - [MAL-2026-9162](https://insights.sbomify.com/MAL-2026-9162/): Malicious code in wandczvof1svn (RubyGems) (malicious package) - [MAL-2026-9161](https://insights.sbomify.com/MAL-2026-9161/): Malicious code in wandczvof1hg (RubyGems) (malicious package) - [MAL-2026-9160](https://insights.sbomify.com/MAL-2026-9160/): Malicious code in wandczvof1git (RubyGems) (malicious package) - [MAL-2026-916](https://insights.sbomify.com/MAL-2026-916/): Malicious code in alibabacloude (PyPI) (malicious package) - [MAL-2026-9159](https://insights.sbomify.com/MAL-2026-9159/): Malicious code in wandczvof11hg (RubyGems) (malicious package) - [MAL-2026-9158](https://insights.sbomify.com/MAL-2026-9158/): Malicious code in wandczvof10svn (RubyGems) (malicious package) - [MAL-2026-9157](https://insights.sbomify.com/MAL-2026-9157/): Malicious code in wandczvof10hg (RubyGems) (malicious package) - [MAL-2026-9156](https://insights.sbomify.com/MAL-2026-9156/): Malicious code in wandczvof10git (RubyGems) (malicious package) - [MAL-2026-9155](https://insights.sbomify.com/MAL-2026-9155/): Malicious code in wandczvof0svn (RubyGems) (malicious package) - [MAL-2026-9154](https://insights.sbomify.com/MAL-2026-9154/): Malicious code in wandczvof0hg (RubyGems) (malicious package) - [MAL-2026-9153](https://insights.sbomify.com/MAL-2026-9153/): Malicious code in wandczvof0git (RubyGems) (malicious package) - [MAL-2026-9152](https://insights.sbomify.com/MAL-2026-9152/): Malicious code in wandcaluzys1778552233 (RubyGems) (malicious package) - [MAL-2026-9151](https://insights.sbomify.com/MAL-2026-9151/): Malicious code in wandcalq9101 (RubyGems) (malicious package) - [MAL-2026-9150](https://insights.sbomify.com/MAL-2026-9150/): Malicious code in wandcalq613 (RubyGems) (malicious package) - [MAL-2026-915](https://insights.sbomify.com/MAL-2026-915/): Malicious code in alibabacloud-code-tool (PyPI) (malicious package) - [MAL-2026-9149](https://insights.sbomify.com/MAL-2026-9149/): Malicious code in wandcalq5320 (RubyGems) (malicious package) - [MAL-2026-9148](https://insights.sbomify.com/MAL-2026-9148/): Malicious code in wandcalq32668 (RubyGems) (malicious package) - [MAL-2026-9147](https://insights.sbomify.com/MAL-2026-9147/): Malicious code in wandcalq25713 (RubyGems) (malicious package) - [MAL-2026-9146](https://insights.sbomify.com/MAL-2026-9146/): Malicious code in wandcalq2440 (RubyGems) (malicious package) - [MAL-2026-9145](https://insights.sbomify.com/MAL-2026-9145/): Malicious code in wandcalq17818 (RubyGems) (malicious package) - [MAL-2026-9144](https://insights.sbomify.com/MAL-2026-9144/): Malicious code in wandcalq1045 (RubyGems) (malicious package) - [MAL-2026-9143](https://insights.sbomify.com/MAL-2026-9143/): Malicious code in wandcalhg2083 (RubyGems) (malicious package) - [MAL-2026-9142](https://insights.sbomify.com/MAL-2026-9142/): Malicious code in wandcalh (RubyGems) (malicious package) - [MAL-2026-9141](https://insights.sbomify.com/MAL-2026-9141/): Malicious code in wandbzrx (RubyGems) (malicious package) - [MAL-2026-9140](https://insights.sbomify.com/MAL-2026-9140/): Malicious code in wandbzrroot (RubyGems) (malicious package) - [MAL-2026-914](https://insights.sbomify.com/MAL-2026-914/): Malicious code in @qualys/react-web (npm) (malicious package) - [MAL-2026-9139](https://insights.sbomify.com/MAL-2026-9139/): Malicious code in waitwhg1778555688 (RubyGems) (malicious package) - [MAL-2026-9138](https://insights.sbomify.com/MAL-2026-9138/): Malicious code in wagwn6txtab (RubyGems) (malicious package) - [MAL-2026-9137](https://insights.sbomify.com/MAL-2026-9137/): Malicious code in wagwn6bothab (RubyGems) (malicious package) - [MAL-2026-9136](https://insights.sbomify.com/MAL-2026-9136/): Malicious code in wagwn5txtab (RubyGems) (malicious package) - [MAL-2026-9135](https://insights.sbomify.com/MAL-2026-9135/): Malicious code in wagwn5bothab (RubyGems) (malicious package) - [MAL-2026-9134](https://insights.sbomify.com/MAL-2026-9134/): Malicious code in wagwn4txtab (RubyGems) (malicious package) - [MAL-2026-9133](https://insights.sbomify.com/MAL-2026-9133/): Malicious code in wagwn4bothab (RubyGems) (malicious package) - [MAL-2026-9132](https://insights.sbomify.com/MAL-2026-9132/): Malicious code in wagwn3txtab (RubyGems) (malicious package) - [MAL-2026-9131](https://insights.sbomify.com/MAL-2026-9131/): Malicious code in wagwn3bothab (RubyGems) (malicious package) - [MAL-2026-9130](https://insights.sbomify.com/MAL-2026-9130/): Malicious code in wagwn2txtab (RubyGems) (malicious package) - [MAL-2026-913](https://insights.sbomify.com/MAL-2026-913/): Malicious code in groq-ppe-pkg (PyPI) (malicious package) - [MAL-2026-9129](https://insights.sbomify.com/MAL-2026-9129/): Malicious code in wagwn2bothab (RubyGems) (malicious package) - [MAL-2026-9128](https://insights.sbomify.com/MAL-2026-9128/): Malicious code in wagwn1txtab (RubyGems) (malicious package) - [MAL-2026-9127](https://insights.sbomify.com/MAL-2026-9127/): Malicious code in wagwn1bothab (RubyGems) (malicious package) - [MAL-2026-9126](https://insights.sbomify.com/MAL-2026-9126/): Malicious code in w9927x (RubyGems) (malicious package) - [MAL-2026-9125](https://insights.sbomify.com/MAL-2026-9125/): Malicious code in w9927 (RubyGems) (malicious package) - [MAL-2026-9124](https://insights.sbomify.com/MAL-2026-9124/): Malicious code in w10385x (RubyGems) (malicious package) - [MAL-2026-9123](https://insights.sbomify.com/MAL-2026-9123/): Malicious code in w10385 (RubyGems) (malicious package) - [MAL-2026-9122](https://insights.sbomify.com/MAL-2026-9122/): Malicious code in w10266x (RubyGems) (malicious package) - [MAL-2026-9121](https://insights.sbomify.com/MAL-2026-9121/): Malicious code in w10266 (RubyGems) (malicious package) - [MAL-2026-9120](https://insights.sbomify.com/MAL-2026-9120/): Malicious code in vcssvnx1 (RubyGems) (malicious package) - [MAL-2026-912](https://insights.sbomify.com/MAL-2026-912/): Malicious code in http-request-toolkit (PyPI) (malicious package) - [MAL-2026-9119](https://insights.sbomify.com/MAL-2026-9119/): Malicious code in vcssvnpdfx1 (RubyGems) (malicious package) - [MAL-2026-9118](https://insights.sbomify.com/MAL-2026-9118/): Malicious code in vcsmodpdfx1 (RubyGems) (malicious package) - [MAL-2026-9117](https://insights.sbomify.com/MAL-2026-9117/): Malicious code in vcshgx1 (RubyGems) (malicious package) - [MAL-2026-9116](https://insights.sbomify.com/MAL-2026-9116/): Malicious code in vcshgpdfx1 (RubyGems) (malicious package) - [MAL-2026-9115](https://insights.sbomify.com/MAL-2026-9115/): Malicious code in vcsgitpdfx1 (RubyGems) (malicious package) - [MAL-2026-9114](https://insights.sbomify.com/MAL-2026-9114/): Malicious code in vcsfossilx1 (RubyGems) (malicious package) - [MAL-2026-9113](https://insights.sbomify.com/MAL-2026-9113/): Malicious code in vcsfossilpdfx1 (RubyGems) (malicious package) - [MAL-2026-9112](https://insights.sbomify.com/MAL-2026-9112/): Malicious code in vcsfetchx1 (RubyGems) (malicious package) - [MAL-2026-9111](https://insights.sbomify.com/MAL-2026-9111/): Malicious code in vcsbzrx1 (RubyGems) (malicious package) - [MAL-2026-9110](https://insights.sbomify.com/MAL-2026-9110/): Malicious code in vcsbzrpdfx1 (RubyGems) (malicious package) - [MAL-2026-911](https://insights.sbomify.com/MAL-2026-911/): Malicious code in malpkgv2-0 (PyPI) (malicious package) - [MAL-2026-9109](https://insights.sbomify.com/MAL-2026-9109/): Malicious code in vanityzzgbqvirfx (RubyGems) (malicious package) - [MAL-2026-9108](https://insights.sbomify.com/MAL-2026-9108/): Malicious code in vanity2zzgbqvirfx (RubyGems) (malicious package) - [MAL-2026-9107](https://insights.sbomify.com/MAL-2026-9107/): Malicious code in vand7mldo1778552612 (RubyGems) (malicious package) - [MAL-2026-9106](https://insights.sbomify.com/MAL-2026-9106/): Malicious code in vand6zltd1778552597 (RubyGems) (malicious package) - [MAL-2026-9105](https://insights.sbomify.com/MAL-2026-9105/): Malicious code in vand5kbjt1778552578 (RubyGems) (malicious package) - [MAL-2026-9104](https://insights.sbomify.com/MAL-2026-9104/): Malicious code in vand4yiiq1778552563 (RubyGems) (malicious package) - [MAL-2026-9103](https://insights.sbomify.com/MAL-2026-9103/): Malicious code in vand3flmy1778552525 (RubyGems) (malicious package) - [MAL-2026-9102](https://insights.sbomify.com/MAL-2026-9102/): Malicious code in vanc5smpr1778552455 (RubyGems) (malicious package) - [MAL-2026-9101](https://insights.sbomify.com/MAL-2026-9101/): Malicious code in vanc4inrp1778552437 (RubyGems) (malicious package) - [MAL-2026-9100](https://insights.sbomify.com/MAL-2026-9100/): Malicious code in vanc3ubcy1778552409 (RubyGems) (malicious package) - [MAL-2026-910](https://insights.sbomify.com/MAL-2026-910/): Malicious code in dns-execution-test (PyPI) (malicious package) - [MAL-2026-91](https://insights.sbomify.com/MAL-2026-91/): Malicious code in okta-auth-js (npm) (malicious package) - [MAL-2026-9099](https://insights.sbomify.com/MAL-2026-9099/): Malicious code in vanc2selo1778552388 (RubyGems) (malicious package) - [MAL-2026-9098](https://insights.sbomify.com/MAL-2026-9098/): Malicious code in vanc1rfwf1778552366 (RubyGems) (malicious package) - [MAL-2026-9097](https://insights.sbomify.com/MAL-2026-9097/): Malicious code in vanc0ekto1778552346 (RubyGems) (malicious package) - [MAL-2026-9096](https://insights.sbomify.com/MAL-2026-9096/): Malicious code in v9zzgbqvirfx (RubyGems) (malicious package) - [MAL-2026-9095](https://insights.sbomify.com/MAL-2026-9095/): Malicious code in v8zzgbqvirfx (RubyGems) (malicious package) - [MAL-2026-9094](https://insights.sbomify.com/MAL-2026-9094/): Malicious code in v7zzgbqvirfx (RubyGems) (malicious package) - [MAL-2026-9093](https://insights.sbomify.com/MAL-2026-9093/): Malicious code in v6zzgbqvirfx (RubyGems) (malicious package) - [MAL-2026-9092](https://insights.sbomify.com/MAL-2026-9092/): Malicious code in v5zzgbqvirfx (RubyGems) (malicious package) - [MAL-2026-9091](https://insights.sbomify.com/MAL-2026-9091/): Malicious code in v4zzgbqvirfx (RubyGems) (malicious package) - [MAL-2026-9090](https://insights.sbomify.com/MAL-2026-9090/): Malicious code in v3zzgbqvirfx (RubyGems) (malicious package) - [MAL-2026-909](https://insights.sbomify.com/MAL-2026-909/): Malicious code in clawdist (PyPI) (malicious package) - [MAL-2026-9089](https://insights.sbomify.com/MAL-2026-9089/): Malicious code in v26zzgbqvirfx (RubyGems) (malicious package) - [MAL-2026-9088](https://insights.sbomify.com/MAL-2026-9088/): Malicious code in v25zzgbqvirfx (RubyGems) (malicious package) - [MAL-2026-9087](https://insights.sbomify.com/MAL-2026-9087/): Malicious code in v24zzgbqvirfx (RubyGems) (malicious package) - [MAL-2026-9086](https://insights.sbomify.com/MAL-2026-9086/): Malicious code in v23zzgbqvirfx (RubyGems) (malicious package) - [MAL-2026-9085](https://insights.sbomify.com/MAL-2026-9085/): Malicious code in v22zzgbqvirfx (RubyGems) (malicious package) - [MAL-2026-9084](https://insights.sbomify.com/MAL-2026-9084/): Malicious code in v21zzgbqvirfx (RubyGems) (malicious package) - [MAL-2026-9083](https://insights.sbomify.com/MAL-2026-9083/): Malicious code in v20zzgbqvirfx (RubyGems) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2026/page/19/