# Vulnerabilities published in 2026 - [MAL-2026-8632](https://insights.sbomify.com/MAL-2026-8632/): Malicious code in shopify-cli-extensions (RubyGems) (malicious package) - [MAL-2026-8631](https://insights.sbomify.com/MAL-2026-8631/): Malicious code in shopify-cli-dependencies (RubyGems) (malicious package) - [MAL-2026-8630](https://insights.sbomify.com/MAL-2026-8630/): Malicious code in shipstudyhelper1778418891 (RubyGems) (malicious package) - [MAL-2026-863](https://insights.sbomify.com/MAL-2026-863/): Malicious code in krbutils (PyPI) (malicious package) - [MAL-2026-8629](https://insights.sbomify.com/MAL-2026-8629/): Malicious code in sgyewbarsi (RubyGems) (malicious package) - [MAL-2026-8628](https://insights.sbomify.com/MAL-2026-8628/): Malicious code in sgxtvmueur (RubyGems) (malicious package) - [MAL-2026-8627](https://insights.sbomify.com/MAL-2026-8627/): Malicious code in sgxqzbqqph (RubyGems) (malicious package) - [MAL-2026-8626](https://insights.sbomify.com/MAL-2026-8626/): Malicious code in sgxnwefney (RubyGems) (malicious package) - [MAL-2026-8625](https://insights.sbomify.com/MAL-2026-8625/): Malicious code in sgxdhvmbhl (RubyGems) (malicious package) - [MAL-2026-8624](https://insights.sbomify.com/MAL-2026-8624/): Malicious code in sgxbvusaqz (RubyGems) (malicious package) - [MAL-2026-8623](https://insights.sbomify.com/MAL-2026-8623/): Malicious code in sgvtbcatnr (RubyGems) (malicious package) - [MAL-2026-8622](https://insights.sbomify.com/MAL-2026-8622/): Malicious code in sgvgyorjgr (RubyGems) (malicious package) - [MAL-2026-8621](https://insights.sbomify.com/MAL-2026-8621/): Malicious code in sguxfwfnet (RubyGems) (malicious package) - [MAL-2026-8620](https://insights.sbomify.com/MAL-2026-8620/): Malicious code in sgtyoqebjb (RubyGems) (malicious package) - [MAL-2026-862](https://insights.sbomify.com/MAL-2026-862/): Malicious code in get-incorrect-name-bob (PyPI) (malicious package) - [MAL-2026-8619](https://insights.sbomify.com/MAL-2026-8619/): Malicious code in sgrernmauc (RubyGems) (malicious package) - [MAL-2026-8618](https://insights.sbomify.com/MAL-2026-8618/): Malicious code in sgrcdgzate (RubyGems) (malicious package) - [MAL-2026-8617](https://insights.sbomify.com/MAL-2026-8617/): Malicious code in sgqokjrgqt (RubyGems) (malicious package) - [MAL-2026-8616](https://insights.sbomify.com/MAL-2026-8616/): Malicious code in sgpakpubiz (RubyGems) (malicious package) - [MAL-2026-8615](https://insights.sbomify.com/MAL-2026-8615/): Malicious code in sgpajdnsoz (RubyGems) (malicious package) - [MAL-2026-8614](https://insights.sbomify.com/MAL-2026-8614/): Malicious code in sgmexribvq (RubyGems) (malicious package) - [MAL-2026-8613](https://insights.sbomify.com/MAL-2026-8613/): Malicious code in sgkbxnctcg (RubyGems) (malicious package) - [MAL-2026-8612](https://insights.sbomify.com/MAL-2026-8612/): Malicious code in sgjqdnyybe (RubyGems) (malicious package) - [MAL-2026-8611](https://insights.sbomify.com/MAL-2026-8611/): Malicious code in sgjcvwjwwo (RubyGems) (malicious package) - [MAL-2026-8610](https://insights.sbomify.com/MAL-2026-8610/): Malicious code in sgicgptpuh (RubyGems) (malicious package) - [MAL-2026-861](https://insights.sbomify.com/MAL-2026-861/): Malicious code in express-gueues (npm) (malicious package) - [MAL-2026-8609](https://insights.sbomify.com/MAL-2026-8609/): Malicious code in sghwnriwgq (RubyGems) (malicious package) - [MAL-2026-8608](https://insights.sbomify.com/MAL-2026-8608/): Malicious code in sghsvfnjgk (RubyGems) (malicious package) - [MAL-2026-8607](https://insights.sbomify.com/MAL-2026-8607/): Malicious code in sghrlhoxql (RubyGems) (malicious package) - [MAL-2026-8606](https://insights.sbomify.com/MAL-2026-8606/): Malicious code in sghizaeigy (RubyGems) (malicious package) - [MAL-2026-8605](https://insights.sbomify.com/MAL-2026-8605/): Malicious code in sggenmlieh (RubyGems) (malicious package) - [MAL-2026-8604](https://insights.sbomify.com/MAL-2026-8604/): Malicious code in sggcezgmtn (RubyGems) (malicious package) - [MAL-2026-8603](https://insights.sbomify.com/MAL-2026-8603/): Malicious code in sgfnnyznra (RubyGems) (malicious package) - [MAL-2026-8602](https://insights.sbomify.com/MAL-2026-8602/): Malicious code in sgfesdiqyo (RubyGems) (malicious package) - [MAL-2026-8601](https://insights.sbomify.com/MAL-2026-8601/): Malicious code in sgfcchuzox (RubyGems) (malicious package) - [MAL-2026-8600](https://insights.sbomify.com/MAL-2026-8600/): Malicious code in sgeymwpcar (RubyGems) (malicious package) - [MAL-2026-860](https://insights.sbomify.com/MAL-2026-860/): Malicious code in osopackagepy (PyPI) (malicious package) - [MAL-2026-86](https://insights.sbomify.com/MAL-2026-86/): Malicious code in electra-web-player (npm) (malicious package) - [MAL-2026-8599](https://insights.sbomify.com/MAL-2026-8599/): Malicious code in sgekvdhxno (RubyGems) (malicious package) - [MAL-2026-8598](https://insights.sbomify.com/MAL-2026-8598/): Malicious code in sgccmmheke (RubyGems) (malicious package) - [MAL-2026-8597](https://insights.sbomify.com/MAL-2026-8597/): Malicious code in sfded640 (RubyGems) (malicious package) - [MAL-2026-8596](https://insights.sbomify.com/MAL-2026-8596/): Malicious code in sfc0e8fa (RubyGems) (malicious package) - [MAL-2026-8595](https://insights.sbomify.com/MAL-2026-8595/): Malicious code in sfb9199b (RubyGems) (malicious package) - [MAL-2026-8594](https://insights.sbomify.com/MAL-2026-8594/): Malicious code in sf727fc0 (RubyGems) (malicious package) - [MAL-2026-8593](https://insights.sbomify.com/MAL-2026-8593/): Malicious code in sf72647c (RubyGems) (malicious package) - [MAL-2026-8592](https://insights.sbomify.com/MAL-2026-8592/): Malicious code in sf5770a8 (RubyGems) (malicious package) - [MAL-2026-8591](https://insights.sbomify.com/MAL-2026-8591/): Malicious code in sf3481c8 (RubyGems) (malicious package) - [MAL-2026-8590](https://insights.sbomify.com/MAL-2026-8590/): Malicious code in sf1d68a9 (RubyGems) (malicious package) - [MAL-2026-859](https://insights.sbomify.com/MAL-2026-859/): Malicious code in systemtest-network (npm) (malicious package) - [MAL-2026-8589](https://insights.sbomify.com/MAL-2026-8589/): Malicious code in sf126006 (RubyGems) (malicious package) - [MAL-2026-8588](https://insights.sbomify.com/MAL-2026-8588/): Malicious code in sf042efe (RubyGems) (malicious package) - [MAL-2026-8587](https://insights.sbomify.com/MAL-2026-8587/): Malicious code in secrequeryabc (RubyGems) (malicious package) - [MAL-2026-8586](https://insights.sbomify.com/MAL-2026-8586/): Malicious code in scallistajxel (RubyGems) (malicious package) - [MAL-2026-8585](https://insights.sbomify.com/MAL-2026-8585/): Malicious code in scaljanbfksf (RubyGems) (malicious package) - [MAL-2026-8584](https://insights.sbomify.com/MAL-2026-8584/): Malicious code in scaljan2momxm (RubyGems) (malicious package) - [MAL-2026-8583](https://insights.sbomify.com/MAL-2026-8583/): Malicious code in sbc55dd196 (RubyGems) (malicious package) - [MAL-2026-8582](https://insights.sbomify.com/MAL-2026-8582/): Malicious code in sba517fb66 (RubyGems) (malicious package) - [MAL-2026-8581](https://insights.sbomify.com/MAL-2026-8581/): Malicious code in sb759e41fa (RubyGems) (malicious package) - [MAL-2026-8580](https://insights.sbomify.com/MAL-2026-8580/): Malicious code in sb70efdeba (RubyGems) (malicious package) - [MAL-2026-858](https://insights.sbomify.com/MAL-2026-858/): Malicious code in systemtest-information (npm) (malicious package) - [MAL-2026-8579](https://insights.sbomify.com/MAL-2026-8579/): Malicious code in sb50a0902f (RubyGems) (malicious package) - [MAL-2026-8578](https://insights.sbomify.com/MAL-2026-8578/): Malicious code in sb391423d1 (RubyGems) (malicious package) - [MAL-2026-8577](https://insights.sbomify.com/MAL-2026-8577/): Malicious code in sb06ac4700 (RubyGems) (malicious package) - [MAL-2026-8576](https://insights.sbomify.com/MAL-2026-8576/): Malicious code in sb01dc8349 (RubyGems) (malicious package) - [MAL-2026-8575](https://insights.sbomify.com/MAL-2026-8575/): Malicious code in saf368b4bc (RubyGems) (malicious package) - [MAL-2026-8574](https://insights.sbomify.com/MAL-2026-8574/): Malicious code in saee8cba76 (RubyGems) (malicious package) - [MAL-2026-8573](https://insights.sbomify.com/MAL-2026-8573/): Malicious code in saeb369b8c (RubyGems) (malicious package) - [MAL-2026-8572](https://insights.sbomify.com/MAL-2026-8572/): Malicious code in sae6a0e752 (RubyGems) (malicious package) - [MAL-2026-8571](https://insights.sbomify.com/MAL-2026-8571/): Malicious code in sad01504db (RubyGems) (malicious package) - [MAL-2026-8570](https://insights.sbomify.com/MAL-2026-8570/): Malicious code in sacb0f5cd9 (RubyGems) (malicious package) - [MAL-2026-857](https://insights.sbomify.com/MAL-2026-857/): Malicious code in osopackage (npm) (malicious package) - [MAL-2026-8569](https://insights.sbomify.com/MAL-2026-8569/): Malicious code in sac7635b0f (RubyGems) (malicious package) - [MAL-2026-8568](https://insights.sbomify.com/MAL-2026-8568/): Malicious code in sa9695b9d2 (RubyGems) (malicious package) - [MAL-2026-8567](https://insights.sbomify.com/MAL-2026-8567/): Malicious code in sa93cd2c64 (RubyGems) (malicious package) - [MAL-2026-8566](https://insights.sbomify.com/MAL-2026-8566/): Malicious code in sa70855610 (RubyGems) (malicious package) - [MAL-2026-8565](https://insights.sbomify.com/MAL-2026-8565/): Malicious code in sa7055ee3e (RubyGems) (malicious package) - [MAL-2026-8564](https://insights.sbomify.com/MAL-2026-8564/): Malicious code in sa6ed9cec3 (RubyGems) (malicious package) - [MAL-2026-8563](https://insights.sbomify.com/MAL-2026-8563/): Malicious code in sa64ce1145 (RubyGems) (malicious package) - [MAL-2026-8562](https://insights.sbomify.com/MAL-2026-8562/): Malicious code in sa62b50d0b (RubyGems) (malicious package) - [MAL-2026-8561](https://insights.sbomify.com/MAL-2026-8561/): Malicious code in sa35a63c8a (RubyGems) (malicious package) - [MAL-2026-8560](https://insights.sbomify.com/MAL-2026-8560/): Malicious code in sa20a7aec4 (RubyGems) (malicious package) - [MAL-2026-856](https://insights.sbomify.com/MAL-2026-856/): Malicious code in chai-prop (npm) (malicious package) - [MAL-2026-8559](https://insights.sbomify.com/MAL-2026-8559/): Malicious code in sa00810ac0 (RubyGems) (malicious package) - [MAL-2026-8558](https://insights.sbomify.com/MAL-2026-8558/): Malicious code in rxwws (RubyGems) (malicious package) - [MAL-2026-8557](https://insights.sbomify.com/MAL-2026-8557/): Malicious code in rxwsemi (RubyGems) (malicious package) - [MAL-2026-8556](https://insights.sbomify.com/MAL-2026-8556/): Malicious code in rxwjq (RubyGems) (malicious package) - [MAL-2026-8555](https://insights.sbomify.com/MAL-2026-8555/): Malicious code in rxwandmeet (RubyGems) (malicious package) - [MAL-2026-8554](https://insights.sbomify.com/MAL-2026-8554/): Malicious code in rxwandjan (RubyGems) (malicious package) - [MAL-2026-8553](https://insights.sbomify.com/MAL-2026-8553/): Malicious code in rxsws (RubyGems) (malicious package) - [MAL-2026-8552](https://insights.sbomify.com/MAL-2026-8552/): Malicious code in rxsouthmeet (RubyGems) (malicious package) - [MAL-2026-8551](https://insights.sbomify.com/MAL-2026-8551/): Malicious code in rxsouthjan (RubyGems) (malicious package) - [MAL-2026-8550](https://insights.sbomify.com/MAL-2026-8550/): Malicious code in rxsjq (RubyGems) (malicious package) - [MAL-2026-855](https://insights.sbomify.com/MAL-2026-855/): Malicious code in config-toolkit (PyPI) (malicious package) - [MAL-2026-8549](https://insights.sbomify.com/MAL-2026-8549/): Malicious code in rxlws (RubyGems) (malicious package) - [MAL-2026-8548](https://insights.sbomify.com/MAL-2026-8548/): Malicious code in rxljq (RubyGems) (malicious package) - [MAL-2026-8547](https://insights.sbomify.com/MAL-2026-8547/): Malicious code in rxlambmeet (RubyGems) (malicious package) - [MAL-2026-8546](https://insights.sbomify.com/MAL-2026-8546/): Malicious code in rxlambjan (RubyGems) (malicious package) - [MAL-2026-8545](https://insights.sbomify.com/MAL-2026-8545/): Malicious code in rubydocmeta1 (RubyGems) (malicious package) - [MAL-2026-8544](https://insights.sbomify.com/MAL-2026-8544/): Malicious code in rtok3xw993 (RubyGems) (malicious package) - [MAL-2026-8543](https://insights.sbomify.com/MAL-2026-8543/): Malicious code in rootxproxytest (RubyGems) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2026/page/25/