# Vulnerabilities published in 2026 - [MAL-2026-8542](https://insights.sbomify.com/MAL-2026-8542/): Malicious code in rootxproxyhg (RubyGems) (malicious package) - [MAL-2026-8541](https://insights.sbomify.com/MAL-2026-8541/): Malicious code in roottestkey10726 (RubyGems) (malicious package) - [MAL-2026-8540](https://insights.sbomify.com/MAL-2026-8540/): Malicious code in rootprobejan991 (RubyGems) (malicious package) - [MAL-2026-854](https://insights.sbomify.com/MAL-2026-854/): Malicious code in sinon-node (npm) (malicious package) - [MAL-2026-8539](https://insights.sbomify.com/MAL-2026-8539/): Malicious code in rootmv26543 (RubyGems) (malicious package) - [MAL-2026-8538](https://insights.sbomify.com/MAL-2026-8538/): Malicious code in rootmv25753 (RubyGems) (malicious package) - [MAL-2026-8537](https://insights.sbomify.com/MAL-2026-8537/): Malicious code in rootmtest14978 (RubyGems) (malicious package) - [MAL-2026-8536](https://insights.sbomify.com/MAL-2026-8536/): Malicious code in rootll2545 (RubyGems) (malicious package) - [MAL-2026-8535](https://insights.sbomify.com/MAL-2026-8535/): Malicious code in rootjina18601 (RubyGems) (malicious package) - [MAL-2026-8534](https://insights.sbomify.com/MAL-2026-8534/): Malicious code in rootjcal8873 (RubyGems) (malicious package) - [MAL-2026-8533](https://insights.sbomify.com/MAL-2026-8533/): Malicious code in rootfetch1 (RubyGems) (malicious package) - [MAL-2026-8532](https://insights.sbomify.com/MAL-2026-8532/): Malicious code in rootfetch002 (RubyGems) (malicious package) - [MAL-2026-8531](https://insights.sbomify.com/MAL-2026-8531/): Malicious code in rkproxyzen (RubyGems) (malicious package) - [MAL-2026-8530](https://insights.sbomify.com/MAL-2026-8530/): Malicious code in rjan5 (RubyGems) (malicious package) - [MAL-2026-853](https://insights.sbomify.com/MAL-2026-853/): Malicious code in node-dotenv-cli (npm) (malicious package) - [MAL-2026-8529](https://insights.sbomify.com/MAL-2026-8529/): Malicious code in rjan4 (RubyGems) (malicious package) - [MAL-2026-8528](https://insights.sbomify.com/MAL-2026-8528/): Malicious code in rjan3 (RubyGems) (malicious package) - [MAL-2026-8527](https://insights.sbomify.com/MAL-2026-8527/): Malicious code in rjan2 (RubyGems) (malicious package) - [MAL-2026-8526](https://insights.sbomify.com/MAL-2026-8526/): Malicious code in rjan1 (RubyGems) (malicious package) - [MAL-2026-8525](https://insights.sbomify.com/MAL-2026-8525/): Malicious code in rfetchj (RubyGems) (malicious package) - [MAL-2026-8524](https://insights.sbomify.com/MAL-2026-8524/): Malicious code in rfetchi (RubyGems) (malicious package) - [MAL-2026-8523](https://insights.sbomify.com/MAL-2026-8523/): Malicious code in rfetchh (RubyGems) (malicious package) - [MAL-2026-8522](https://insights.sbomify.com/MAL-2026-8522/): Malicious code in rfetchg (RubyGems) (malicious package) - [MAL-2026-8521](https://insights.sbomify.com/MAL-2026-8521/): Malicious code in rfetchf (RubyGems) (malicious package) - [MAL-2026-8520](https://insights.sbomify.com/MAL-2026-8520/): Malicious code in rfetche (RubyGems) (malicious package) - [MAL-2026-852](https://insights.sbomify.com/MAL-2026-852/): Malicious code in chai-await (npm) (malicious package) - [MAL-2026-8519](https://insights.sbomify.com/MAL-2026-8519/): Malicious code in rfetchd (RubyGems) (malicious package) - [MAL-2026-8518](https://insights.sbomify.com/MAL-2026-8518/): Malicious code in rfetchc (RubyGems) (malicious package) - [MAL-2026-8517](https://insights.sbomify.com/MAL-2026-8517/): Malicious code in rfetchb (RubyGems) (malicious package) - [MAL-2026-8516](https://insights.sbomify.com/MAL-2026-8516/): Malicious code in rfetcha (RubyGems) (malicious package) - [MAL-2026-8515](https://insights.sbomify.com/MAL-2026-8515/): Malicious code in rfetch6 (RubyGems) (malicious package) - [MAL-2026-8514](https://insights.sbomify.com/MAL-2026-8514/): Malicious code in rfetch5 (RubyGems) (malicious package) - [MAL-2026-8513](https://insights.sbomify.com/MAL-2026-8513/): Malicious code in rfetch4 (RubyGems) (malicious package) - [MAL-2026-8512](https://insights.sbomify.com/MAL-2026-8512/): Malicious code in rfetch3 (RubyGems) (malicious package) - [MAL-2026-8511](https://insights.sbomify.com/MAL-2026-8511/): Malicious code in rfetch2 (RubyGems) (malicious package) - [MAL-2026-8510](https://insights.sbomify.com/MAL-2026-8510/): Malicious code in retryqq9 (RubyGems) (malicious package) - [MAL-2026-851](https://insights.sbomify.com/MAL-2026-851/): Malicious code in python-files-mod (PyPI) (malicious package) - [MAL-2026-8509](https://insights.sbomify.com/MAL-2026-8509/): Malicious code in retryqq8 (RubyGems) (malicious package) - [MAL-2026-8508](https://insights.sbomify.com/MAL-2026-8508/): Malicious code in retryqq7 (RubyGems) (malicious package) - [MAL-2026-8507](https://insights.sbomify.com/MAL-2026-8507/): Malicious code in retryqq6 (RubyGems) (malicious package) - [MAL-2026-8506](https://insights.sbomify.com/MAL-2026-8506/): Malicious code in retryqq5 (RubyGems) (malicious package) - [MAL-2026-8505](https://insights.sbomify.com/MAL-2026-8505/): Malicious code in retryqq4 (RubyGems) (malicious package) - [MAL-2026-8504](https://insights.sbomify.com/MAL-2026-8504/): Malicious code in retryqq3 (RubyGems) (malicious package) - [MAL-2026-8503](https://insights.sbomify.com/MAL-2026-8503/): Malicious code in retryqq2 (RubyGems) (malicious package) - [MAL-2026-8502](https://insights.sbomify.com/MAL-2026-8502/): Malicious code in retryqq15 (RubyGems) (malicious package) - [MAL-2026-8501](https://insights.sbomify.com/MAL-2026-8501/): Malicious code in retryqq14 (RubyGems) (malicious package) - [MAL-2026-8500](https://insights.sbomify.com/MAL-2026-8500/): Malicious code in retryqq13 (RubyGems) (malicious package) - [MAL-2026-850](https://insights.sbomify.com/MAL-2026-850/): Malicious code in ntoctfutils (PyPI) (malicious package) - [MAL-2026-85](https://insights.sbomify.com/MAL-2026-85/): Malicious code in elastic-docs-v3-utilities (npm) (malicious package) - [MAL-2026-8499](https://insights.sbomify.com/MAL-2026-8499/): Malicious code in retryqq12 (RubyGems) (malicious package) - [MAL-2026-8498](https://insights.sbomify.com/MAL-2026-8498/): Malicious code in retryqq11 (RubyGems) (malicious package) - [MAL-2026-8497](https://insights.sbomify.com/MAL-2026-8497/): Malicious code in retryqq10 (RubyGems) (malicious package) - [MAL-2026-8496](https://insights.sbomify.com/MAL-2026-8496/): Malicious code in retrylasttry1 (RubyGems) (malicious package) - [MAL-2026-8495](https://insights.sbomify.com/MAL-2026-8495/): Malicious code in qagzskimfsb (RubyGems) (malicious package) - [MAL-2026-8494](https://insights.sbomify.com/MAL-2026-8494/): Malicious code in qagwpyrinwn (RubyGems) (malicious package) - [MAL-2026-8493](https://insights.sbomify.com/MAL-2026-8493/): Malicious code in qagwhdzmmuz (RubyGems) (malicious package) - [MAL-2026-8492](https://insights.sbomify.com/MAL-2026-8492/): Malicious code in qagwgygtafv (RubyGems) (malicious package) - [MAL-2026-8491](https://insights.sbomify.com/MAL-2026-8491/): Malicious code in qagvzhtvhwi (RubyGems) (malicious package) - [MAL-2026-8490](https://insights.sbomify.com/MAL-2026-8490/): Malicious code in qagpujyfgjw (RubyGems) (malicious package) - [MAL-2026-849](https://insights.sbomify.com/MAL-2026-849/): Malicious code in jsonconfig-utils (PyPI) (malicious package) - [MAL-2026-8489](https://insights.sbomify.com/MAL-2026-8489/): Malicious code in qagnvmckazu (RubyGems) (malicious package) - [MAL-2026-8488](https://insights.sbomify.com/MAL-2026-8488/): Malicious code in qagnajvsmyl (RubyGems) (malicious package) - [MAL-2026-8487](https://insights.sbomify.com/MAL-2026-8487/): Malicious code in qagloqwrnfv (RubyGems) (malicious package) - [MAL-2026-8486](https://insights.sbomify.com/MAL-2026-8486/): Malicious code in qagfypuewln (RubyGems) (malicious package) - [MAL-2026-8485](https://insights.sbomify.com/MAL-2026-8485/): Malicious code in qagfoukolga (RubyGems) (malicious package) - [MAL-2026-8484](https://insights.sbomify.com/MAL-2026-8484/): Malicious code in qagehndongu (RubyGems) (malicious package) - [MAL-2026-8483](https://insights.sbomify.com/MAL-2026-8483/): Malicious code in qageegqgmnk (RubyGems) (malicious package) - [MAL-2026-8482](https://insights.sbomify.com/MAL-2026-8482/): Malicious code in qagcimtffzt (RubyGems) (malicious package) - [MAL-2026-8481](https://insights.sbomify.com/MAL-2026-8481/): Malicious code in qagaismkupj (RubyGems) (malicious package) - [MAL-2026-8480](https://insights.sbomify.com/MAL-2026-8480/): Malicious code in pwnwtest1 (RubyGems) (malicious package) - [MAL-2026-848](https://insights.sbomify.com/MAL-2026-848/): Malicious code in npm_cimetadata (npm) (malicious package) - [MAL-2026-8479](https://insights.sbomify.com/MAL-2026-8479/): Malicious code in pwnp999 (RubyGems) (malicious package) - [MAL-2026-8478](https://insights.sbomify.com/MAL-2026-8478/): Malicious code in pwnldir1 (RubyGems) (malicious package) - [MAL-2026-8477](https://insights.sbomify.com/MAL-2026-8477/): Malicious code in pwnlambtest4 (RubyGems) (malicious package) - [MAL-2026-8476](https://insights.sbomify.com/MAL-2026-8476/): Malicious code in pwnlambjan6 (RubyGems) (malicious package) - [MAL-2026-8475](https://insights.sbomify.com/MAL-2026-8475/): Malicious code in pwnlambjan5 (RubyGems) (malicious package) - [MAL-2026-8474](https://insights.sbomify.com/MAL-2026-8474/): Malicious code in pwnlambhome2 (RubyGems) (malicious package) - [MAL-2026-8473](https://insights.sbomify.com/MAL-2026-8473/): Malicious code in pwnlambhome1 (RubyGems) (malicious package) - [MAL-2026-8472](https://insights.sbomify.com/MAL-2026-8472/): Malicious code in pwnlambcal3 (RubyGems) (malicious package) - [MAL-2026-8471](https://insights.sbomify.com/MAL-2026-8471/): Malicious code in pwnlambcal2 (RubyGems) (malicious package) - [MAL-2026-8470](https://insights.sbomify.com/MAL-2026-8470/): Malicious code in pwnlambcal1 (RubyGems) (malicious package) - [MAL-2026-847](https://insights.sbomify.com/MAL-2026-847/): Malicious code in requests-auth-toolkit (PyPI) (malicious package) - [MAL-2026-8469](https://insights.sbomify.com/MAL-2026-8469/): Malicious code in prxf2ea0504a0 (RubyGems) (malicious package) - [MAL-2026-8468](https://insights.sbomify.com/MAL-2026-8468/): Malicious code in prxef6dfdf4be (RubyGems) (malicious package) - [MAL-2026-8467](https://insights.sbomify.com/MAL-2026-8467/): Malicious code in prxe87db1bbc7 (RubyGems) (malicious package) - [MAL-2026-8466](https://insights.sbomify.com/MAL-2026-8466/): Malicious code in prxdfbdfbeb3b (RubyGems) (malicious package) - [MAL-2026-8465](https://insights.sbomify.com/MAL-2026-8465/): Malicious code in prxca79e95716 (RubyGems) (malicious package) - [MAL-2026-8464](https://insights.sbomify.com/MAL-2026-8464/): Malicious code in prx975fe5e3fe (RubyGems) (malicious package) - [MAL-2026-8463](https://insights.sbomify.com/MAL-2026-8463/): Malicious code in prx92ddbfc4c5 (RubyGems) (malicious package) - [MAL-2026-8462](https://insights.sbomify.com/MAL-2026-8462/): Malicious code in prx6cfa4a2be2 (RubyGems) (malicious package) - [MAL-2026-8461](https://insights.sbomify.com/MAL-2026-8461/): Malicious code in prx5a01811907 (RubyGems) (malicious package) - [MAL-2026-8460](https://insights.sbomify.com/MAL-2026-8460/): Malicious code in prx51cee8dbf7 (RubyGems) (malicious package) - [MAL-2026-846](https://insights.sbomify.com/MAL-2026-846/): Malicious code in cryptowallethash (PyPI) (malicious package) - [MAL-2026-8459](https://insights.sbomify.com/MAL-2026-8459/): Malicious code in prx48d92bd9a6 (RubyGems) (malicious package) - [MAL-2026-8458](https://insights.sbomify.com/MAL-2026-8458/): Malicious code in prx4542f26b08 (RubyGems) (malicious package) - [MAL-2026-8457](https://insights.sbomify.com/MAL-2026-8457/): Malicious code in prx34ae9b4ae3 (RubyGems) (malicious package) - [MAL-2026-8456](https://insights.sbomify.com/MAL-2026-8456/): Malicious code in prx1b49033905 (RubyGems) (malicious package) - [MAL-2026-8455](https://insights.sbomify.com/MAL-2026-8455/): Malicious code in prx06e608f6da (RubyGems) (malicious package) - [MAL-2026-8454](https://insights.sbomify.com/MAL-2026-8454/): Malicious code in proxyzz1778548845 (RubyGems) (malicious package) - [MAL-2026-8453](https://insights.sbomify.com/MAL-2026-8453/): Malicious code in proxytf7cceba2 (RubyGems) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2026/page/26/