# Vulnerabilities published in 2026


- [MAL-2026-7462](https://insights.sbomify.com/MAL-2026-7462/): Malicious code in pygremlinbox-malware-cryptomining-indicators (PyPI) (malicious package)
- [MAL-2026-7461](https://insights.sbomify.com/MAL-2026-7461/): Malicious code in pygremlinbox-malware-credential-harvesting (PyPI) (malicious package)
- [MAL-2026-7460](https://insights.sbomify.com/MAL-2026-7460/): Malicious code in pygremlinbox-malware-code-obfuscation (PyPI) (malicious package)
- [MAL-2026-746](https://insights.sbomify.com/MAL-2026-746/): Malicious code in react-count-sync (npm) (malicious package)
- [MAL-2026-7459](https://insights.sbomify.com/MAL-2026-7459/): Malicious code in pygremlinbox-malware-c2-beacon (PyPI) (malicious package)
- [MAL-2026-7458](https://insights.sbomify.com/MAL-2026-7458/): Malicious code in pycryptoshuffle (PyPI) (malicious package)
- [MAL-2026-7457](https://insights.sbomify.com/MAL-2026-7457/): Malicious code in piirgg (PyPI) (malicious package)
- [MAL-2026-7456](https://insights.sbomify.com/MAL-2026-7456/): Malicious code in notrandompacketname (PyPI) (malicious package)
- [MAL-2026-7455](https://insights.sbomify.com/MAL-2026-7455/): Malicious code in myproject234 (PyPI) (malicious package)
- [MAL-2026-7454](https://insights.sbomify.com/MAL-2026-7454/): Malicious code in cyberday26szymon-payments (PyPI) (malicious package)
- [MAL-2026-7453](https://insights.sbomify.com/MAL-2026-7453/): Malicious code in cyberday26szymon-logging (PyPI) (malicious package)
- [MAL-2026-7452](https://insights.sbomify.com/MAL-2026-7452/): Malicious code in cyberday26szymon-auth (PyPI) (malicious package)
- [MAL-2026-7451](https://insights.sbomify.com/MAL-2026-7451/): Malicious code in vspropertypages (NuGet) (malicious package)
- [MAL-2026-7450](https://insights.sbomify.com/MAL-2026-7450/): Malicious code in security_hacks (NuGet) (malicious package)
- [MAL-2026-745](https://insights.sbomify.com/MAL-2026-745/): Malicious code in statssol (PyPI) (malicious package)
- [MAL-2026-7449](https://insights.sbomify.com/MAL-2026-7449/): Malicious code in hackney.core.jwt (NuGet) (malicious package)
- [MAL-2026-7448](https://insights.sbomify.com/MAL-2026-7448/): Malicious code in hackney.core.enums (NuGet) (malicious package)
- [MAL-2026-7447](https://insights.sbomify.com/MAL-2026-7447/): Malicious code in zreactjs (npm) (malicious package)
- [MAL-2026-7446](https://insights.sbomify.com/MAL-2026-7446/): Malicious code in zircuit-vault (npm) (malicious package)
- [MAL-2026-7445](https://insights.sbomify.com/MAL-2026-7445/): Malicious code in zircuit-reporter (npm) (malicious package)
- [MAL-2026-7444](https://insights.sbomify.com/MAL-2026-7444/): Malicious code in zircuit-oracle (npm) (malicious package)
- [MAL-2026-7443](https://insights.sbomify.com/MAL-2026-7443/): Malicious code in zircuit-keeper (npm) (malicious package)
- [MAL-2026-7442](https://insights.sbomify.com/MAL-2026-7442/): Malicious code in yreactjs (npm) (malicious package)
- [MAL-2026-7441](https://insights.sbomify.com/MAL-2026-7441/): Malicious code in wreactjs (npm) (malicious package)
- [MAL-2026-7440](https://insights.sbomify.com/MAL-2026-7440/): Malicious code in winston-middleware (npm) (malicious package)
- [MAL-2026-744](https://insights.sbomify.com/MAL-2026-744/): Malicious code in mdp-client-web (npm) (malicious package)
- [MAL-2026-7439](https://insights.sbomify.com/MAL-2026-7439/): Malicious code in win-env-setup (npm) (malicious package)
- [MAL-2026-7438](https://insights.sbomify.com/MAL-2026-7438/): Malicious code in whaleco-assets-json (npm) (malicious package)
- [MAL-2026-7437](https://insights.sbomify.com/MAL-2026-7437/): Malicious code in web3-runtime-engine (npm) (malicious package)
- [MAL-2026-7436](https://insights.sbomify.com/MAL-2026-7436/): Malicious code in wazirx-localtestnpm (npm) (malicious package)
- [MAL-2026-7435](https://insights.sbomify.com/MAL-2026-7435/): Malicious code in wazir-xlocaletstnpm (npm) (malicious package)
- [MAL-2026-7434](https://insights.sbomify.com/MAL-2026-7434/): Malicious code in wallarm-design-system (npm) (malicious package)
- [MAL-2026-7433](https://insights.sbomify.com/MAL-2026-7433/): Malicious code in vubiquity-website (npm) (malicious package)
- [MAL-2026-7432](https://insights.sbomify.com/MAL-2026-7432/): Malicious code in vscode-component-explorer (npm) (malicious package)
- [MAL-2026-7431](https://insights.sbomify.com/MAL-2026-7431/): Malicious code in vreactjs (npm) (malicious package)
- [MAL-2026-7430](https://insights.sbomify.com/MAL-2026-7430/): Malicious code in ureactjs (npm) (malicious package)
- [MAL-2026-743](https://insights.sbomify.com/MAL-2026-743/): Malicious code in internationalized (npm) (malicious package)
- [MAL-2026-7429](https://insights.sbomify.com/MAL-2026-7429/): Malicious code in treactjs (npm) (malicious package)
- [MAL-2026-7428](https://insights.sbomify.com/MAL-2026-7428/): Malicious code in timelycare (npm) (malicious package)
- [MAL-2026-7427](https://insights.sbomify.com/MAL-2026-7427/): Malicious code in swiper-css-normalize (npm) (malicious package)
- [MAL-2026-7426](https://insights.sbomify.com/MAL-2026-7426/): Malicious code in suit-base (npm) (malicious package)
- [MAL-2026-7425](https://insights.sbomify.com/MAL-2026-7425/): Malicious code in style-to-objact (npm) (malicious package)
- [MAL-2026-7424](https://insights.sbomify.com/MAL-2026-7424/): Malicious code in strapi-plugin-pocvk (npm) (malicious package)
- [MAL-2026-7423](https://insights.sbomify.com/MAL-2026-7423/): Malicious code in stellar-stablecoin-scripts (npm) (malicious package)
- [MAL-2026-7422](https://insights.sbomify.com/MAL-2026-7422/): Malicious code in smtp-test-server-node (npm) (malicious package)
- [MAL-2026-7421](https://insights.sbomify.com/MAL-2026-7421/): Malicious code in sitefinitywebapp (npm) (malicious package)
- [MAL-2026-7420](https://insights.sbomify.com/MAL-2026-7420/): Malicious code in sim-apis-chatbot (npm) (malicious package)
- [MAL-2026-742](https://insights.sbomify.com/MAL-2026-742/): Malicious code in dcf-commons (npm) (malicious package)
- [MAL-2026-7419](https://insights.sbomify.com/MAL-2026-7419/): Malicious code in shiphero-dashboard (npm) (malicious package)
- [MAL-2026-7418](https://insights.sbomify.com/MAL-2026-7418/): Malicious code in serverless-twi-testing (npm) (malicious package)
- [MAL-2026-7417](https://insights.sbomify.com/MAL-2026-7417/): Malicious code in rzeactjs (npm) (malicious package)
- [MAL-2026-7416](https://insights.sbomify.com/MAL-2026-7416/): Malicious code in ryeactjs (npm) (malicious package)
- [MAL-2026-7415](https://insights.sbomify.com/MAL-2026-7415/): Malicious code in rxeactjs (npm) (malicious package)
- [MAL-2026-7414](https://insights.sbomify.com/MAL-2026-7414/): Malicious code in rweactjs (npm) (malicious package)
- [MAL-2026-7413](https://insights.sbomify.com/MAL-2026-7413/): Malicious code in rveactjs (npm) (malicious package)
- [MAL-2026-7412](https://insights.sbomify.com/MAL-2026-7412/): Malicious code in rueactjs (npm) (malicious package)
- [MAL-2026-7411](https://insights.sbomify.com/MAL-2026-7411/): Malicious code in rteactjs (npm) (malicious package)
- [MAL-2026-7410](https://insights.sbomify.com/MAL-2026-7410/): Malicious code in rseactjs (npm) (malicious package)
- [MAL-2026-741](https://insights.sbomify.com/MAL-2026-741/): Malicious code in confluence-analytics-support (npm) (malicious package)
- [MAL-2026-7409](https://insights.sbomify.com/MAL-2026-7409/): Malicious code in rreactjs (npm) (malicious package)
- [MAL-2026-7408](https://insights.sbomify.com/MAL-2026-7408/): Malicious code in rqeactjs (npm) (malicious package)
- [MAL-2026-7407](https://insights.sbomify.com/MAL-2026-7407/): Malicious code in rpeactjs (npm) (malicious package)
- [MAL-2026-7406](https://insights.sbomify.com/MAL-2026-7406/): Malicious code in roeactjs (npm) (malicious package)
- [MAL-2026-7405](https://insights.sbomify.com/MAL-2026-7405/): Malicious code in roblox-lua-promise (npm) (malicious package)
- [MAL-2026-7404](https://insights.sbomify.com/MAL-2026-7404/): Malicious code in rngularjs (npm) (malicious package)
- [MAL-2026-7403](https://insights.sbomify.com/MAL-2026-7403/): Malicious code in rneactjs (npm) (malicious package)
- [MAL-2026-7402](https://insights.sbomify.com/MAL-2026-7402/): Malicious code in rn-bitu-user (npm) (malicious package)
- [MAL-2026-7401](https://insights.sbomify.com/MAL-2026-7401/): Malicious code in rn-bitu (npm) (malicious package)
- [MAL-2026-7400](https://insights.sbomify.com/MAL-2026-7400/): Malicious code in rmeactjs (npm) (malicious package)
- [MAL-2026-740](https://insights.sbomify.com/MAL-2026-740/): Malicious code in @msecscc/gaia (npm) (malicious package)
- [MAL-2026-74](https://insights.sbomify.com/MAL-2026-74/): Malicious code in cp_amm (npm) (malicious package)
- [MAL-2026-7399](https://insights.sbomify.com/MAL-2026-7399/): Malicious code in rleactjs (npm) (malicious package)
- [MAL-2026-7398](https://insights.sbomify.com/MAL-2026-7398/): Malicious code in rkeactjs (npm) (malicious package)
- [MAL-2026-7397](https://insights.sbomify.com/MAL-2026-7397/): Malicious code in rjeactjs (npm) (malicious package)
- [MAL-2026-7396](https://insights.sbomify.com/MAL-2026-7396/): Malicious code in rieactjs (npm) (malicious package)
- [MAL-2026-7395](https://insights.sbomify.com/MAL-2026-7395/): Malicious code in rheactjs (npm) (malicious package)
- [MAL-2026-7394](https://insights.sbomify.com/MAL-2026-7394/): Malicious code in rgeactjs (npm) (malicious package)
- [MAL-2026-7393](https://insights.sbomify.com/MAL-2026-7393/): Malicious code in rfeactjs (npm) (malicious package)
- [MAL-2026-7392](https://insights.sbomify.com/MAL-2026-7392/): Malicious code in rezactjs (npm) (malicious package)
- [MAL-2026-7391](https://insights.sbomify.com/MAL-2026-7391/): Malicious code in rewactjs (npm) (malicious package)
- [MAL-2026-7390](https://insights.sbomify.com/MAL-2026-7390/): Malicious code in revactjs (npm) (malicious package)
- [MAL-2026-739](https://insights.sbomify.com/MAL-2026-739/): Malicious code in test-for-ppe (PyPI) (malicious package)
- [MAL-2026-7389](https://insights.sbomify.com/MAL-2026-7389/): Malicious code in reuactjs (npm) (malicious package)
- [MAL-2026-7388](https://insights.sbomify.com/MAL-2026-7388/): Malicious code in retactjs (npm) (malicious package)
- [MAL-2026-7387](https://insights.sbomify.com/MAL-2026-7387/): Malicious code in resource-library-engine (npm) (malicious package)
- [MAL-2026-7386](https://insights.sbomify.com/MAL-2026-7386/): Malicious code in resolve-uri-internal (npm) (malicious package)
- [MAL-2026-7385](https://insights.sbomify.com/MAL-2026-7385/): Malicious code in resactjs (npm) (malicious package)
- [MAL-2026-7384](https://insights.sbomify.com/MAL-2026-7384/): Malicious code in remactjs (npm) (malicious package)
- [MAL-2026-7383](https://insights.sbomify.com/MAL-2026-7383/): Malicious code in reiactjs (npm) (malicious package)
- [MAL-2026-7382](https://insights.sbomify.com/MAL-2026-7382/): Malicious code in rei-internal-logger (npm) (malicious package)
- [MAL-2026-7381](https://insights.sbomify.com/MAL-2026-7381/): Malicious code in regactjs (npm) (malicious package)
- [MAL-2026-7380](https://insights.sbomify.com/MAL-2026-7380/): Malicious code in reeactjs (npm) (malicious package)
- [MAL-2026-738](https://insights.sbomify.com/MAL-2026-738/): Malicious code in tablescene (PyPI) (malicious package)
- [MAL-2026-7379](https://insights.sbomify.com/MAL-2026-7379/): Malicious code in rebactjs (npm) (malicious package)
- [MAL-2026-7378](https://insights.sbomify.com/MAL-2026-7378/): Malicious code in reayctjs (npm) (malicious package)
- [MAL-2026-7377](https://insights.sbomify.com/MAL-2026-7377/): Malicious code in reavctjs (npm) (malicious package)
- [MAL-2026-7376](https://insights.sbomify.com/MAL-2026-7376/): Malicious code in reauctjs (npm) (malicious package)
- [MAL-2026-7375](https://insights.sbomify.com/MAL-2026-7375/): Malicious code in reatctjs (npm) (malicious package)
- [MAL-2026-7374](https://insights.sbomify.com/MAL-2026-7374/): Malicious code in rearctjs (npm) (malicious package)
- [MAL-2026-7373](https://insights.sbomify.com/MAL-2026-7373/): Malicious code in reamctjs (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/38/