Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 191 of 1013.
- MAL-2026-10081 Malicious code in webrix-docs1 (npm)
- MAL-2026-10080 Malicious code in webrix-docs (npm)
- MAL-2026-1008 Malicious code in es1int-re1ease (npm)
- MAL-2026-10079 Malicious code in vybscan-testbed-obfuscated-postinstall (npm)
- MAL-2026-10078 Malicious code in vybscan-testbed-inert-postinstall (npm)
- MAL-2026-10077 Malicious code in type-slint (npm)
- MAL-2026-10076 Malicious code in ts-eslint-jest (npm)
- MAL-2026-10075 Malicious code in testudo-pack (npm)
- MAL-2026-10074 Malicious code in testis-pack (npm)
- MAL-2026-10073 Malicious code in tailwind-animate-v4 (npm)
- MAL-2026-10072 Malicious code in polymarket-trader-apis (npm)
- MAL-2026-10071 Malicious code in polymarket-kit (npm)
- MAL-2026-10070 Malicious code in polymarket-kelly-stake-math (npm)
- MAL-2026-1007 Malicious code in dotenvx-ext (npm)
- MAL-2026-10069 Malicious code in polymarket-kelly-maths (npm)
- MAL-2026-10068 Malicious code in polymarket-kelly-math (npm)
- MAL-2026-10067 Malicious code in polymarket-apis (npm)
- MAL-2026-10066 Malicious code in nps-retrieval-diagnostics (npm)
- MAL-2026-10065 Malicious code in nodemon-gulp (npm)
- MAL-2026-10064 Malicious code in multer-orm (npm)
- MAL-2026-10063 Malicious code in express-router-engine (npm)
- MAL-2026-10062 Malicious code in es6-codify (npm)
- MAL-2026-10061 Malicious code in cursed-ecto-d3ab00 (npm)
- MAL-2026-10060 Malicious code in cookie-parser-js (npm)
- MAL-2026-1006 Malicious code in chai-tools (npm)
- MAL-2026-10059 Malicious code in cookie-parser-es (npm)
- MAL-2026-10058 Malicious code in cookie-js-ease (npm)
- MAL-2026-10057 Malicious code in chunk-parser (npm)
- MAL-2026-10056 Malicious code in chain-chai-await (npm)
- MAL-2026-10055 Malicious code in chain-chai-async (npm)
- MAL-2026-10054 Malicious code in chai-smart (npm)
- MAL-2026-10053 Malicious code in chai-secure (npm)
- MAL-2026-10052 Malicious code in chai-promised-test (npm)
- MAL-2026-10051 Malicious code in chai-deflect (npm)
- MAL-2026-10050 Malicious code in chai-defender (npm)
- MAL-2026-1005 Malicious code in argon-web3-chain (npm)
- MAL-2026-10049 Malicious code in chai-await-dom (npm)
- MAL-2026-10048 Malicious code in chai-as-thread (npm)
- MAL-2026-10047 Malicious code in chai-as-staged (npm)
- MAL-2026-10046 Malicious code in chai-as-smart (npm)
- MAL-2026-10045 Malicious code in chai-as-sharpened (npm)
- MAL-2026-10044 Malicious code in chai-as-serialized (npm)
- MAL-2026-10043 Malicious code in chai-as-modified (npm)
- MAL-2026-10042 Malicious code in chai-as-disarmed (npm)
- MAL-2026-10041 Malicious code in chai-as-buffered (npm)
- MAL-2026-10040 Malicious code in chai-as-balanced (npm)
- MAL-2026-1004 Malicious code in request-httpx-9 (PyPI)
- MAL-2026-10039 Malicious code in chai-as-align (npm)
- MAL-2026-10038 Malicious code in antsrcsrctest (npm)
- MAL-2026-10037 Malicious code in @wagni_bot/web3-toolkit (npm)
- MAL-2026-10036 Malicious code in @wagni_bot/web3-agent (npm)
- MAL-2026-10035 Malicious code in @wagni_bot/solana-sdk (npm)
- MAL-2026-10034 Malicious code in @wagni_bot/pumpfun-sdk (npm)
- MAL-2026-10033 Malicious code in @wagni_bot/polymarket-sdk (npm)
- MAL-2026-10032 Malicious code in @wagni_bot/polygon-sdk (npm)
- MAL-2026-10031 Malicious code in @wagni_bot/orca-sdk (npm)
- MAL-2026-10030 Malicious code in @wagni_bot/opensea-sdk (npm)
- MAL-2026-1003 Malicious code in cnnct-eaas-corre (PyPI)
- MAL-2026-10029 Malicious code in @wagni_bot/meteora-sdk (npm)
- MAL-2026-10028 Malicious code in @wagni_bot/metemask-sdk (npm)
- MAL-2026-10027 Malicious code in @wagni_bot/jupiter-sdk (npm)
- MAL-2026-10026 Malicious code in @wagni_bot/hyperliquid-sdk (npm)
- MAL-2026-10025 Malicious code in @wagni_bot/ethereum-wallet (npm)
- MAL-2026-10024 Malicious code in @wagni_bot/eth-agent (npm)
- MAL-2026-10023 Malicious code in @wagni_bot/bsc-sdk (npm)
- MAL-2026-10022 Malicious code in @wagni_bot/binance-sdk (npm)
- MAL-2026-10021 Malicious code in txs-builder-lib (npm)
- MAL-2026-10020 Malicious code in playwrightr (PyPI)
- MAL-2026-1002 Malicious code in newrubylogger (RubyGems)
- MAL-2026-10019 Malicious code in client-cookies-agent (npm)
- MAL-2026-10018 Malicious code in security-console-ui (npm)
- MAL-2026-10017 Malicious code in rabi-snooze-api (npm)
- MAL-2026-10016 Malicious code in qlkube (npm)
- MAL-2026-10015 Malicious code in poc-node-npm (npm)
- MAL-2026-10014 Malicious code in nodemon-sudo (npm)
- MAL-2026-10013 Malicious code in n8n-nodes-mcputils (npm)
- MAL-2026-10012 Malicious code in mchain-sdk (npm)
- MAL-2026-10011 Malicious code in fusion-client (npm)
- MAL-2026-10010 Malicious code in feedback-api (npm)
- MAL-2026-1001 Malicious code in request-httpx-4 (PyPI)
- MAL-2026-10009 Malicious code in chain-api-sdk (npm)
- MAL-2026-10008 Malicious code in breeze-feature-flag-poc (npm)
- MAL-2026-10007 Malicious code in bizapi-portal (npm)
- MAL-2026-10006 Malicious code in testing-d3do (npm)
- MAL-2026-10005 Malicious code in zzzltestfoobarxyz (RubyGems)
- MAL-2026-10004 Malicious code in zzwmgweb02 (RubyGems)
- MAL-2026-10003 Malicious code in zzwandtemp1778552518 (RubyGems)
- MAL-2026-10002 Malicious code in zzwandsxabc119 (RubyGems)
- MAL-2026-10001 Malicious code in zztxtwtmp14 (RubyGems)
- MAL-2026-10000 Malicious code in zztxtwtmp13 (RubyGems)
- MAL-2026-1000 Malicious code in scraper-npm (PyPI)
- MAL-2026-100 Malicious code in eslint-plugin-supertest (npm)
- MAL-2026-10 Malicious code in babel-preset-ibm-cloud-cognitive (npm)
- MAL-2026-1 Malicious code in sfnt2woff-zopfli (PyPI)
- MAL-2025-193013 Malicious code in tablixs (PyPI)
- MAL-2025-193012 Malicious code in gridifies (PyPI)
- MAL-2024-12375 Malicious code in langraph (PyPI)
- MAL-2024-12374 Malicious code in ci-metadata-python-logging (PyPI)
- MAL-2024-12373 Malicious code in gpu-discovery (PyPI)
- HSEC-2026-0010 Improper parsing of fractional NumericDate from JWT exp claims