# Vulnerabilities published in 2026 - [MAL-2026-8902](https://insights.sbomify.com/MAL-2026-8902/): Malicious code in stc6a044 (RubyGems) (malicious package) - [MAL-2026-8901](https://insights.sbomify.com/MAL-2026-8901/): Malicious code in st89a5c8 (RubyGems) (malicious package) - [MAL-2026-8900](https://insights.sbomify.com/MAL-2026-8900/): Malicious code in st8708c5 (RubyGems) (malicious package) - [MAL-2026-890](https://insights.sbomify.com/MAL-2026-890/): Malicious code in responsible-ai (npm) (malicious package) - [MAL-2026-89](https://insights.sbomify.com/MAL-2026-89/): Malicious code in importmap-polyfil (npm) (malicious package) - [MAL-2026-8899](https://insights.sbomify.com/MAL-2026-8899/): Malicious code in st5770a8 (RubyGems) (malicious package) - [MAL-2026-8898](https://insights.sbomify.com/MAL-2026-8898/): Malicious code in st3481c8 (RubyGems) (malicious package) - [MAL-2026-8897](https://insights.sbomify.com/MAL-2026-8897/): Malicious code in st126006 (RubyGems) (malicious package) - [MAL-2026-8896](https://insights.sbomify.com/MAL-2026-8896/): Malicious code in ssrftestxyznever (RubyGems) (malicious package) - [MAL-2026-8895](https://insights.sbomify.com/MAL-2026-8895/): Malicious code in sproxytestsvnone (RubyGems) (malicious package) - [MAL-2026-8894](https://insights.sbomify.com/MAL-2026-8894/): Malicious code in sproxytestmodone (RubyGems) (malicious package) - [MAL-2026-8893](https://insights.sbomify.com/MAL-2026-8893/): Malicious code in sproxytesthgone (RubyGems) (malicious package) - [MAL-2026-8892](https://insights.sbomify.com/MAL-2026-8892/): Malicious code in sproxytestgitone (RubyGems) (malicious package) - [MAL-2026-8891](https://insights.sbomify.com/MAL-2026-8891/): Malicious code in sproxytestfossilone (RubyGems) (malicious package) - [MAL-2026-8890](https://insights.sbomify.com/MAL-2026-8890/): Malicious code in sproxytestbzrone (RubyGems) (malicious package) - [MAL-2026-889](https://insights.sbomify.com/MAL-2026-889/): Malicious code in responses-starter-app (npm) (malicious package) - [MAL-2026-8889](https://insights.sbomify.com/MAL-2026-8889/): Malicious code in sprox-c160-4svn (RubyGems) (malicious package) - [MAL-2026-8888](https://insights.sbomify.com/MAL-2026-8888/): Malicious code in sprox-c160-4mod (RubyGems) (malicious package) - [MAL-2026-8887](https://insights.sbomify.com/MAL-2026-8887/): Malicious code in sprox-c160-4hg (RubyGems) (malicious package) - [MAL-2026-8886](https://insights.sbomify.com/MAL-2026-8886/): Malicious code in sprox-c160-4git (RubyGems) (malicious package) - [MAL-2026-8885](https://insights.sbomify.com/MAL-2026-8885/): Malicious code in sprox-c160-4fossil (RubyGems) (malicious package) - [MAL-2026-8884](https://insights.sbomify.com/MAL-2026-8884/): Malicious code in sprox-c160-4bzr (RubyGems) (malicious package) - [MAL-2026-8883](https://insights.sbomify.com/MAL-2026-8883/): Malicious code in sprox-c160-3svn (RubyGems) (malicious package) - [MAL-2026-8882](https://insights.sbomify.com/MAL-2026-8882/): Malicious code in sprox-c160-3mod (RubyGems) (malicious package) - [MAL-2026-8881](https://insights.sbomify.com/MAL-2026-8881/): Malicious code in sprox-c160-3hg (RubyGems) (malicious package) - [MAL-2026-8880](https://insights.sbomify.com/MAL-2026-8880/): Malicious code in sprox-c160-3git (RubyGems) (malicious package) - [MAL-2026-888](https://insights.sbomify.com/MAL-2026-888/): Malicious code in pyright-root (npm) (malicious package) - [MAL-2026-8879](https://insights.sbomify.com/MAL-2026-8879/): Malicious code in sprox-c160-3fossil (RubyGems) (malicious package) - [MAL-2026-8878](https://insights.sbomify.com/MAL-2026-8878/): Malicious code in sprox-c160-3bzr (RubyGems) (malicious package) - [MAL-2026-8877](https://insights.sbomify.com/MAL-2026-8877/): Malicious code in sprox-c160-2svn (RubyGems) (malicious package) - [MAL-2026-8876](https://insights.sbomify.com/MAL-2026-8876/): Malicious code in sprox-c160-2mod (RubyGems) (malicious package) - [MAL-2026-8875](https://insights.sbomify.com/MAL-2026-8875/): Malicious code in sprox-c160-2hg (RubyGems) (malicious package) - [MAL-2026-8874](https://insights.sbomify.com/MAL-2026-8874/): Malicious code in sprox-c160-2git (RubyGems) (malicious package) - [MAL-2026-8873](https://insights.sbomify.com/MAL-2026-8873/): Malicious code in sprox-c160-2fossil (RubyGems) (malicious package) - [MAL-2026-8872](https://insights.sbomify.com/MAL-2026-8872/): Malicious code in sprox-c160-2bzr (RubyGems) (malicious package) - [MAL-2026-8871](https://insights.sbomify.com/MAL-2026-8871/): Malicious code in sprox-c160-1svn (RubyGems) (malicious package) - [MAL-2026-8870](https://insights.sbomify.com/MAL-2026-8870/): Malicious code in sprox-c160-1mod (RubyGems) (malicious package) - [MAL-2026-887](https://insights.sbomify.com/MAL-2026-887/): Malicious code in pyrefly (npm) (malicious package) - [MAL-2026-8869](https://insights.sbomify.com/MAL-2026-8869/): Malicious code in sprox-c160-1hg (RubyGems) (malicious package) - [MAL-2026-8868](https://insights.sbomify.com/MAL-2026-8868/): Malicious code in sprox-c160-1git (RubyGems) (malicious package) - [MAL-2026-8867](https://insights.sbomify.com/MAL-2026-8867/): Malicious code in sprox-c160-1fossil (RubyGems) (malicious package) - [MAL-2026-8866](https://insights.sbomify.com/MAL-2026-8866/): Malicious code in sprox-c160-1bzr (RubyGems) (malicious package) - [MAL-2026-8865](https://insights.sbomify.com/MAL-2026-8865/): Malicious code in sprox-c160-0svn (RubyGems) (malicious package) - [MAL-2026-8864](https://insights.sbomify.com/MAL-2026-8864/): Malicious code in sprox-c160-0mod (RubyGems) (malicious package) - [MAL-2026-8863](https://insights.sbomify.com/MAL-2026-8863/): Malicious code in sprox-c160-0hg (RubyGems) (malicious package) - [MAL-2026-8862](https://insights.sbomify.com/MAL-2026-8862/): Malicious code in sprox-c160-0git (RubyGems) (malicious package) - [MAL-2026-8861](https://insights.sbomify.com/MAL-2026-8861/): Malicious code in sprox-c160-0fossil (RubyGems) (malicious package) - [MAL-2026-8860](https://insights.sbomify.com/MAL-2026-8860/): Malicious code in sprox-c160-0bzr (RubyGems) (malicious package) - [MAL-2026-886](https://insights.sbomify.com/MAL-2026-886/): Malicious code in open-answer-engine-frontend (npm) (malicious package) - [MAL-2026-8859](https://insights.sbomify.com/MAL-2026-8859/): Malicious code in sprobesvnz (RubyGems) (malicious package) - [MAL-2026-8858](https://insights.sbomify.com/MAL-2026-8858/): Malicious code in sprobehgz (RubyGems) (malicious package) - [MAL-2026-8857](https://insights.sbomify.com/MAL-2026-8857/): Malicious code in sprobefossilz (RubyGems) (malicious package) - [MAL-2026-8856](https://insights.sbomify.com/MAL-2026-8856/): Malicious code in sprobebzrz (RubyGems) (malicious package) - [MAL-2026-8855](https://insights.sbomify.com/MAL-2026-8855/): Malicious code in southwarkssrfhack5 (RubyGems) (malicious package) - [MAL-2026-8854](https://insights.sbomify.com/MAL-2026-8854/): Malicious code in southwarkssrfhack4 (RubyGems) (malicious package) - [MAL-2026-8853](https://insights.sbomify.com/MAL-2026-8853/): Malicious code in southwarkssrfhack3 (RubyGems) (malicious package) - [MAL-2026-8852](https://insights.sbomify.com/MAL-2026-8852/): Malicious code in southwarkssrfhack2 (RubyGems) (malicious package) - [MAL-2026-8851](https://insights.sbomify.com/MAL-2026-8851/): Malicious code in southwarkssrfhack (RubyGems) (malicious package) - [MAL-2026-8850](https://insights.sbomify.com/MAL-2026-8850/): Malicious code in southwarkproxyabcabc (RubyGems) (malicious package) - [MAL-2026-885](https://insights.sbomify.com/MAL-2026-885/): Malicious code in metadata-stripper (npm) (malicious package) - [MAL-2026-8849](https://insights.sbomify.com/MAL-2026-8849/): Malicious code in southwarkhack1778555109 (RubyGems) (malicious package) - [MAL-2026-8848](https://insights.sbomify.com/MAL-2026-8848/): Malicious code in southwark-test-f8e1778549558 (RubyGems) (malicious package) - [MAL-2026-8847](https://insights.sbomify.com/MAL-2026-8847/): Malicious code in southrobots (RubyGems) (malicious package) - [MAL-2026-8846](https://insights.sbomify.com/MAL-2026-8846/): Malicious code in southregtestabc (RubyGems) (malicious package) - [MAL-2026-8845](https://insights.sbomify.com/MAL-2026-8845/): Malicious code in southproxytestabc (RubyGems) (malicious package) - [MAL-2026-8844](https://insights.sbomify.com/MAL-2026-8844/): Malicious code in southproxysvn (RubyGems) (malicious package) - [MAL-2026-8843](https://insights.sbomify.com/MAL-2026-8843/): Malicious code in southproxyhg (RubyGems) (malicious package) - [MAL-2026-8842](https://insights.sbomify.com/MAL-2026-8842/): Malicious code in southproxyfossil (RubyGems) (malicious package) - [MAL-2026-8841](https://insights.sbomify.com/MAL-2026-8841/): Malicious code in southproxybzr (RubyGems) (malicious package) - [MAL-2026-8840](https://insights.sbomify.com/MAL-2026-8840/): Malicious code in southproxy2 (RubyGems) (malicious package) - [MAL-2026-884](https://insights.sbomify.com/MAL-2026-884/): Malicious code in hxz-protection (npm) (malicious package) - [MAL-2026-8839](https://insights.sbomify.com/MAL-2026-8839/): Malicious code in southprox1778549640 (RubyGems) (malicious package) - [MAL-2026-8838](https://insights.sbomify.com/MAL-2026-8838/): Malicious code in southprobe55a1778551356 (RubyGems) (malicious package) - [MAL-2026-8837](https://insights.sbomify.com/MAL-2026-8837/): Malicious code in southprobe1778555189 (RubyGems) (malicious package) - [MAL-2026-8836](https://insights.sbomify.com/MAL-2026-8836/): Malicious code in southnews-test-35329 (RubyGems) (malicious package) - [MAL-2026-8835](https://insights.sbomify.com/MAL-2026-8835/): Malicious code in southmodinj1778552871 (RubyGems) (malicious package) - [MAL-2026-8834](https://insights.sbomify.com/MAL-2026-8834/): Malicious code in southmeet8405 (RubyGems) (malicious package) - [MAL-2026-8833](https://insights.sbomify.com/MAL-2026-8833/): Malicious code in southmeet8403 (RubyGems) (malicious package) - [MAL-2026-8832](https://insights.sbomify.com/MAL-2026-8832/): Malicious code in southmeet8402 (RubyGems) (malicious package) - [MAL-2026-8831](https://insights.sbomify.com/MAL-2026-8831/): Malicious code in southmeet8320 (RubyGems) (malicious package) - [MAL-2026-8830](https://insights.sbomify.com/MAL-2026-8830/): Malicious code in southmeet8249 (RubyGems) (malicious package) - [MAL-2026-883](https://insights.sbomify.com/MAL-2026-883/): Malicious code in ecosystem_ui (npm) (malicious package) - [MAL-2026-8829](https://insights.sbomify.com/MAL-2026-8829/): Malicious code in southmeet8178 (RubyGems) (malicious package) - [MAL-2026-8828](https://insights.sbomify.com/MAL-2026-8828/): Malicious code in southip1 (RubyGems) (malicious package) - [MAL-2026-8827](https://insights.sbomify.com/MAL-2026-8827/): Malicious code in southinjectabc (RubyGems) (malicious package) - [MAL-2026-8826](https://insights.sbomify.com/MAL-2026-8826/): Malicious code in southhgjina245 (RubyGems) (malicious package) - [MAL-2026-8825](https://insights.sbomify.com/MAL-2026-8825/): Malicious code in southhacks47761 (RubyGems) (malicious package) - [MAL-2026-8824](https://insights.sbomify.com/MAL-2026-8824/): Malicious code in southgoinj1778551435 (RubyGems) (malicious package) - [MAL-2026-8823](https://insights.sbomify.com/MAL-2026-8823/): Malicious code in southfossj356 (RubyGems) (malicious package) - [MAL-2026-8822](https://insights.sbomify.com/MAL-2026-8822/): Malicious code in southextractproxy2026 (RubyGems) (malicious package) - [MAL-2026-8821](https://insights.sbomify.com/MAL-2026-8821/): Malicious code in southdot (RubyGems) (malicious package) - [MAL-2026-8820](https://insights.sbomify.com/MAL-2026-8820/): Malicious code in sometestproxyywayle (RubyGems) (malicious package) - [MAL-2026-882](https://insights.sbomify.com/MAL-2026-882/): Malicious code in despicable-me (npm) (malicious package) - [MAL-2026-8819](https://insights.sbomify.com/MAL-2026-8819/): Malicious code in sm8295yubf (RubyGems) (malicious package) - [MAL-2026-8818](https://insights.sbomify.com/MAL-2026-8818/): Malicious code in sm8290nhgm (RubyGems) (malicious package) - [MAL-2026-8817](https://insights.sbomify.com/MAL-2026-8817/): Malicious code in sm8285iqre (RubyGems) (malicious package) - [MAL-2026-8816](https://insights.sbomify.com/MAL-2026-8816/): Malicious code in sm8280qgal (RubyGems) (malicious package) - [MAL-2026-8815](https://insights.sbomify.com/MAL-2026-8815/): Malicious code in sm8275loeo (RubyGems) (malicious package) - [MAL-2026-8814](https://insights.sbomify.com/MAL-2026-8814/): Malicious code in sm8270sqhi (RubyGems) (malicious package) - [MAL-2026-8813](https://insights.sbomify.com/MAL-2026-8813/): Malicious code in sm8265jdjf (RubyGems) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2026/page/22/