# Vulnerabilities published in 2026 - [MAL-2026-9082](https://insights.sbomify.com/MAL-2026-9082/): Malicious code in v19zzgbqvirfx (RubyGems) (malicious package) - [MAL-2026-9081](https://insights.sbomify.com/MAL-2026-9081/): Malicious code in v18zzgbqvirfx (RubyGems) (malicious package) - [MAL-2026-9080](https://insights.sbomify.com/MAL-2026-9080/): Malicious code in v17zzgbqvirfx (RubyGems) (malicious package) - [MAL-2026-908](https://insights.sbomify.com/MAL-2026-908/): Malicious code in hops-preset-jest (npm) (malicious package) - [MAL-2026-9079](https://insights.sbomify.com/MAL-2026-9079/): Malicious code in v16zzgbqvirfx (RubyGems) (malicious package) - [MAL-2026-9078](https://insights.sbomify.com/MAL-2026-9078/): Malicious code in v15zzgbqvirfx (RubyGems) (malicious package) - [MAL-2026-9077](https://insights.sbomify.com/MAL-2026-9077/): Malicious code in v14zzgbqvirfx (RubyGems) (malicious package) - [MAL-2026-9076](https://insights.sbomify.com/MAL-2026-9076/): Malicious code in v13zzgbqvirfx (RubyGems) (malicious package) - [MAL-2026-9075](https://insights.sbomify.com/MAL-2026-9075/): Malicious code in v12zzgbqvirfx (RubyGems) (malicious package) - [MAL-2026-9074](https://insights.sbomify.com/MAL-2026-9074/): Malicious code in v11zzgbqvirfx (RubyGems) (malicious package) - [MAL-2026-9073](https://insights.sbomify.com/MAL-2026-9073/): Malicious code in v10zzgbqvirfx (RubyGems) (malicious package) - [MAL-2026-9072](https://insights.sbomify.com/MAL-2026-9072/): Malicious code in uxwcookie4 (RubyGems) (malicious package) - [MAL-2026-9071](https://insights.sbomify.com/MAL-2026-9071/): Malicious code in uxwcookie3 (RubyGems) (malicious package) - [MAL-2026-9070](https://insights.sbomify.com/MAL-2026-9070/): Malicious code in uxwcookie2 (RubyGems) (malicious package) - [MAL-2026-907](https://insights.sbomify.com/MAL-2026-907/): Malicious code in tronpad (PyPI) (malicious package) - [MAL-2026-9069](https://insights.sbomify.com/MAL-2026-9069/): Malicious code in uxwcookie1 (RubyGems) (malicious package) - [MAL-2026-9068](https://insights.sbomify.com/MAL-2026-9068/): Malicious code in uxtestok2 (RubyGems) (malicious package) - [MAL-2026-9067](https://insights.sbomify.com/MAL-2026-9067/): Malicious code in uxtestok (RubyGems) (malicious package) - [MAL-2026-9066](https://insights.sbomify.com/MAL-2026-9066/): Malicious code in uxlambcal2 (RubyGems) (malicious package) - [MAL-2026-9065](https://insights.sbomify.com/MAL-2026-9065/): Malicious code in uxlambcal1 (RubyGems) (malicious package) - [MAL-2026-9064](https://insights.sbomify.com/MAL-2026-9064/): Malicious code in uxjinawands2 (RubyGems) (malicious package) - [MAL-2026-9063](https://insights.sbomify.com/MAL-2026-9063/): Malicious code in uxjinasouth2 (RubyGems) (malicious package) - [MAL-2026-9062](https://insights.sbomify.com/MAL-2026-9062/): Malicious code in uxjinalamb2 (RubyGems) (malicious package) - [MAL-2026-9061](https://insights.sbomify.com/MAL-2026-9061/): Malicious code in uxjanwands2 (RubyGems) (malicious package) - [MAL-2026-9060](https://insights.sbomify.com/MAL-2026-9060/): Malicious code in uxjanwands1 (RubyGems) (malicious package) - [MAL-2026-906](https://insights.sbomify.com/MAL-2026-906/): Malicious code in cucumber_json_schema (RubyGems) (malicious package) - [MAL-2026-9059](https://insights.sbomify.com/MAL-2026-9059/): Malicious code in uxjanlamb3 (RubyGems) (malicious package) - [MAL-2026-9058](https://insights.sbomify.com/MAL-2026-9058/): Malicious code in uxjanlamb2 (RubyGems) (malicious package) - [MAL-2026-9057](https://insights.sbomify.com/MAL-2026-9057/): Malicious code in uxjanlamb1 (RubyGems) (malicious package) - [MAL-2026-9056](https://insights.sbomify.com/MAL-2026-9056/): Malicious code in uxhttpswands1 (RubyGems) (malicious package) - [MAL-2026-9055](https://insights.sbomify.com/MAL-2026-9055/): Malicious code in uxhttpslamb1 (RubyGems) (malicious package) - [MAL-2026-9054](https://insights.sbomify.com/MAL-2026-9054/): Malicious code in uxds124885 (RubyGems) (malicious package) - [MAL-2026-9053](https://insights.sbomify.com/MAL-2026-9053/): Malicious code in uxds124884 (RubyGems) (malicious package) - [MAL-2026-9052](https://insights.sbomify.com/MAL-2026-9052/): Malicious code in uxds124883 (RubyGems) (malicious package) - [MAL-2026-9051](https://insights.sbomify.com/MAL-2026-9051/): Malicious code in uxds124882 (RubyGems) (malicious package) - [MAL-2026-9050](https://insights.sbomify.com/MAL-2026-9050/): Malicious code in uxds124881 (RubyGems) (malicious package) - [MAL-2026-905](https://insights.sbomify.com/MAL-2026-905/): Malicious code in marshmellows (PyPI) (malicious package) - [MAL-2026-9049](https://insights.sbomify.com/MAL-2026-9049/): Malicious code in uxds124880 (RubyGems) (malicious package) - [MAL-2026-9048](https://insights.sbomify.com/MAL-2026-9048/): Malicious code in uxds124879 (RubyGems) (malicious package) - [MAL-2026-9047](https://insights.sbomify.com/MAL-2026-9047/): Malicious code in uxds124878 (RubyGems) (malicious package) - [MAL-2026-9046](https://insights.sbomify.com/MAL-2026-9046/): Malicious code in uxds124877 (RubyGems) (malicious package) - [MAL-2026-9045](https://insights.sbomify.com/MAL-2026-9045/): Malicious code in uxds124876 (RubyGems) (malicious package) - [MAL-2026-9044](https://insights.sbomify.com/MAL-2026-9044/): Malicious code in uxds124875 (RubyGems) (malicious package) - [MAL-2026-9043](https://insights.sbomify.com/MAL-2026-9043/): Malicious code in uxds124874 (RubyGems) (malicious package) - [MAL-2026-9042](https://insights.sbomify.com/MAL-2026-9042/): Malicious code in uxds124873 (RubyGems) (malicious package) - [MAL-2026-9041](https://insights.sbomify.com/MAL-2026-9041/): Malicious code in uxds124872 (RubyGems) (malicious package) - [MAL-2026-9040](https://insights.sbomify.com/MAL-2026-9040/): Malicious code in uxds124871 (RubyGems) (malicious package) - [MAL-2026-904](https://insights.sbomify.com/MAL-2026-904/): Malicious code in strands-agents-anthropic (PyPI) (malicious package) - [MAL-2026-9039](https://insights.sbomify.com/MAL-2026-9039/): Malicious code in uxds124870 (RubyGems) (malicious package) - [MAL-2026-9038](https://insights.sbomify.com/MAL-2026-9038/): Malicious code in uxbcrwands3 (RubyGems) (malicious package) - [MAL-2026-9037](https://insights.sbomify.com/MAL-2026-9037/): Malicious code in uxbcrwands2 (RubyGems) (malicious package) - [MAL-2026-9036](https://insights.sbomify.com/MAL-2026-9036/): Malicious code in uxbcrwands1 (RubyGems) (malicious package) - [MAL-2026-9035](https://insights.sbomify.com/MAL-2026-9035/): Malicious code in uuext4c477b (RubyGems) (malicious package) - [MAL-2026-9034](https://insights.sbomify.com/MAL-2026-9034/): Malicious code in tryf8zz (RubyGems) (malicious package) - [MAL-2026-9033](https://insights.sbomify.com/MAL-2026-9033/): Malicious code in tryf7zz (RubyGems) (malicious package) - [MAL-2026-9032](https://insights.sbomify.com/MAL-2026-9032/): Malicious code in tryf6zz (RubyGems) (malicious package) - [MAL-2026-9031](https://insights.sbomify.com/MAL-2026-9031/): Malicious code in tryf5zz (RubyGems) (malicious package) - [MAL-2026-9030](https://insights.sbomify.com/MAL-2026-9030/): Malicious code in tryf4zz (RubyGems) (malicious package) - [MAL-2026-903](https://insights.sbomify.com/MAL-2026-903/): Malicious code in requests-toolkit (PyPI) (malicious package) - [MAL-2026-9029](https://insights.sbomify.com/MAL-2026-9029/): Malicious code in tryf3zz (RubyGems) (malicious package) - [MAL-2026-9028](https://insights.sbomify.com/MAL-2026-9028/): Malicious code in tryf2zz (RubyGems) (malicious package) - [MAL-2026-9027](https://insights.sbomify.com/MAL-2026-9027/): Malicious code in tryf1zz (RubyGems) (malicious package) - [MAL-2026-9026](https://insights.sbomify.com/MAL-2026-9026/): Malicious code in tryf0zz (RubyGems) (malicious package) - [MAL-2026-9025](https://insights.sbomify.com/MAL-2026-9025/): Malicious code in trye4zz (RubyGems) (malicious package) - [MAL-2026-9024](https://insights.sbomify.com/MAL-2026-9024/): Malicious code in trye3zz (RubyGems) (malicious package) - [MAL-2026-9023](https://insights.sbomify.com/MAL-2026-9023/): Malicious code in trye2zz (RubyGems) (malicious package) - [MAL-2026-9022](https://insights.sbomify.com/MAL-2026-9022/): Malicious code in trye1zz (RubyGems) (malicious package) - [MAL-2026-9021](https://insights.sbomify.com/MAL-2026-9021/): Malicious code in trye0zz (RubyGems) (malicious package) - [MAL-2026-9020](https://insights.sbomify.com/MAL-2026-9020/): Malicious code in tryd4zz (RubyGems) (malicious package) - [MAL-2026-902](https://insights.sbomify.com/MAL-2026-902/): Malicious code in crc32fast (PyPI) (malicious package) - [MAL-2026-9019](https://insights.sbomify.com/MAL-2026-9019/): Malicious code in tryd3zz (RubyGems) (malicious package) - [MAL-2026-9018](https://insights.sbomify.com/MAL-2026-9018/): Malicious code in tryd2zz (RubyGems) (malicious package) - [MAL-2026-9017](https://insights.sbomify.com/MAL-2026-9017/): Malicious code in tryd1zz (RubyGems) (malicious package) - [MAL-2026-9016](https://insights.sbomify.com/MAL-2026-9016/): Malicious code in tryd0zz (RubyGems) (malicious package) - [MAL-2026-9015](https://insights.sbomify.com/MAL-2026-9015/): Malicious code in tryc4xzz (RubyGems) (malicious package) - [MAL-2026-9014](https://insights.sbomify.com/MAL-2026-9014/): Malicious code in tryc4tzz (RubyGems) (malicious package) - [MAL-2026-9013](https://insights.sbomify.com/MAL-2026-9013/): Malicious code in tryc4bzz (RubyGems) (malicious package) - [MAL-2026-9012](https://insights.sbomify.com/MAL-2026-9012/): Malicious code in tryb4zz (RubyGems) (malicious package) - [MAL-2026-9011](https://insights.sbomify.com/MAL-2026-9011/): Malicious code in tryb3zz (RubyGems) (malicious package) - [MAL-2026-9010](https://insights.sbomify.com/MAL-2026-9010/): Malicious code in tryb2zz (RubyGems) (malicious package) - [MAL-2026-901](https://insights.sbomify.com/MAL-2026-901/): Malicious code in platforms (PyPI) (malicious package) - [MAL-2026-9009](https://insights.sbomify.com/MAL-2026-9009/): Malicious code in tryb1zz (RubyGems) (malicious package) - [MAL-2026-9008](https://insights.sbomify.com/MAL-2026-9008/): Malicious code in tryb0zz (RubyGems) (malicious package) - [MAL-2026-9007](https://insights.sbomify.com/MAL-2026-9007/): Malicious code in trya5zz (RubyGems) (malicious package) - [MAL-2026-9006](https://insights.sbomify.com/MAL-2026-9006/): Malicious code in trya4zz (RubyGems) (malicious package) - [MAL-2026-9005](https://insights.sbomify.com/MAL-2026-9005/): Malicious code in trya3zz (RubyGems) (malicious package) - [MAL-2026-9004](https://insights.sbomify.com/MAL-2026-9004/): Malicious code in trya2zz (RubyGems) (malicious package) - [MAL-2026-9003](https://insights.sbomify.com/MAL-2026-9003/): Malicious code in trya1zz (RubyGems) (malicious package) - [MAL-2026-9002](https://insights.sbomify.com/MAL-2026-9002/): Malicious code in tmpxyz984024x (RubyGems) (malicious package) - [MAL-2026-9001](https://insights.sbomify.com/MAL-2026-9001/): Malicious code in tmptestsfvagomq (RubyGems) (malicious package) - [MAL-2026-9000](https://insights.sbomify.com/MAL-2026-9000/): Malicious code in tmpojrljqbwjgabc (RubyGems) (malicious package) - [MAL-2026-900](https://insights.sbomify.com/MAL-2026-900/): Malicious code in cubaflixdownload (PyPI) (malicious package) - [MAL-2026-90](https://insights.sbomify.com/MAL-2026-90/): Malicious code in matic-transfer-consumer (npm) (malicious package) - [MAL-2026-9](https://insights.sbomify.com/MAL-2026-9/): Malicious code in 511fola (npm) (malicious package) - [MAL-2026-8999](https://insights.sbomify.com/MAL-2026-8999/): Malicious code in tmpgemx (RubyGems) (malicious package) - [MAL-2026-8998](https://insights.sbomify.com/MAL-2026-8998/): Malicious code in tmpgemtestwands12345abc (RubyGems) (malicious package) - [MAL-2026-8997](https://insights.sbomify.com/MAL-2026-8997/): Malicious code in tmpgemikotzwpgd (RubyGems) (malicious package) - [MAL-2026-8996](https://insights.sbomify.com/MAL-2026-8996/): Malicious code in tmpfjbgghjfcigl (RubyGems) (malicious package) - [MAL-2026-8995](https://insights.sbomify.com/MAL-2026-8995/): Malicious code in tmp-meta-testabc123 (RubyGems) (malicious package) - [MAL-2026-8994](https://insights.sbomify.com/MAL-2026-8994/): Malicious code in tinytestbkpsfsnykc (RubyGems) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2026/page/20/