# Vulnerabilities published in 2026 - [MAL-2026-7011](https://insights.sbomify.com/MAL-2026-7011/): Malicious code in events-alias (npm) (malicious package) - [MAL-2026-7010](https://insights.sbomify.com/MAL-2026-7010/): Malicious code in crypto-promiser (npm) (malicious package) - [MAL-2026-701](https://insights.sbomify.com/MAL-2026-701/): Malicious code in filespath (PyPI) (malicious package) - [MAL-2026-7009](https://insights.sbomify.com/MAL-2026-7009/): Malicious code in configration (npm) (malicious package) - [MAL-2026-7008](https://insights.sbomify.com/MAL-2026-7008/): Malicious code in chai-as-const (npm) (malicious package) - [MAL-2026-7007](https://insights.sbomify.com/MAL-2026-7007/): Malicious code in manom (PyPI) (malicious package) - [MAL-2026-7006](https://insights.sbomify.com/MAL-2026-7006/): Malicious code in manik (PyPI) (malicious package) - [MAL-2026-7005](https://insights.sbomify.com/MAL-2026-7005/): Malicious code in visa-cli-tools (npm) (malicious package) - [MAL-2026-7004](https://insights.sbomify.com/MAL-2026-7004/): Malicious code in thunder-rony (npm) (malicious package) - [MAL-2026-7003](https://insights.sbomify.com/MAL-2026-7003/): Malicious code in searchresults (npm) (malicious package) - [MAL-2026-7002](https://insights.sbomify.com/MAL-2026-7002/): Malicious code in ronyfortest (npm) (malicious package) - [MAL-2026-7001](https://insights.sbomify.com/MAL-2026-7001/): Malicious code in rony-test (npm) (malicious package) - [MAL-2026-7000](https://insights.sbomify.com/MAL-2026-7000/): Malicious code in pipo-sdk (npm) (malicious package) - [MAL-2026-700](https://insights.sbomify.com/MAL-2026-700/): Malicious code in tabulapys (PyPI) (malicious package) - [MAL-2026-70](https://insights.sbomify.com/MAL-2026-70/): Malicious code in @shop-cicd/webpack-package-artifact (npm) (malicious package) - [MAL-2026-7](https://insights.sbomify.com/MAL-2026-7/): Malicious code in gatr (PyPI) (malicious package) - [MAL-2026-6999](https://insights.sbomify.com/MAL-2026-6999/): Malicious code in luludawang-kit (npm) (malicious package) - [MAL-2026-6998](https://insights.sbomify.com/MAL-2026-6998/): Malicious code in higherlogic-ocfe (npm) (malicious package) - [MAL-2026-6997](https://insights.sbomify.com/MAL-2026-6997/): Malicious code in goofy-sdk (npm) (malicious package) - [MAL-2026-6996](https://insights.sbomify.com/MAL-2026-6996/): Malicious code in ec-checker (npm) (malicious package) - [MAL-2026-6995](https://insights.sbomify.com/MAL-2026-6995/): Malicious code in chai-redirection (npm) (malicious package) - [MAL-2026-6994](https://insights.sbomify.com/MAL-2026-6994/): Malicious code in chai-presentation (npm) (malicious package) - [MAL-2026-6993](https://insights.sbomify.com/MAL-2026-6993/): Malicious code in bytefaas-sdk (npm) (malicious package) - [MAL-2026-6992](https://insights.sbomify.com/MAL-2026-6992/): Malicious code in babel-eslint-parser-legacy (npm) (malicious package) - [MAL-2026-6991](https://insights.sbomify.com/MAL-2026-6991/): Malicious code in airkey-mfa-react (npm) (malicious package) - [MAL-2026-6990](https://insights.sbomify.com/MAL-2026-6990/): Malicious code in ai-gen-ai-opt-in (npm) (malicious package) - [MAL-2026-699](https://insights.sbomify.com/MAL-2026-699/): Malicious code in tokyo-ppe-test (PyPI) (malicious package) - [MAL-2026-6989](https://insights.sbomify.com/MAL-2026-6989/): Malicious code in ag-charts-test (npm) (malicious package) - [MAL-2026-6988](https://insights.sbomify.com/MAL-2026-6988/): Malicious code in @vite-tab/tab (npm) (malicious package) - [MAL-2026-6987](https://insights.sbomify.com/MAL-2026-6987/): Malicious code in @luminarycloudinternal/lcvis-st (npm) (malicious package) - [MAL-2026-6986](https://insights.sbomify.com/MAL-2026-6986/): Malicious code in @luminarycloudinternal/frodo (npm) (malicious package) - [MAL-2026-6985](https://insights.sbomify.com/MAL-2026-6985/): Malicious code in promo-helper (npm) (malicious package) - [MAL-2026-6984](https://insights.sbomify.com/MAL-2026-6984/): Malicious code in @vite-ln/build-ts (npm) (malicious package) - [MAL-2026-6983](https://insights.sbomify.com/MAL-2026-6983/): Malicious code in tronpak (PyPI) (malicious package) - [MAL-2026-6982](https://insights.sbomify.com/MAL-2026-6982/): Malicious code in paysafe-cards (npm) (malicious package) - [MAL-2026-6981](https://insights.sbomify.com/MAL-2026-6981/): Malicious code in paperclip-adapter-helpers (npm) (malicious package) - [MAL-2026-6980](https://insights.sbomify.com/MAL-2026-6980/): Malicious code in domains-billing-types (npm) (malicious package) - [MAL-2026-698](https://insights.sbomify.com/MAL-2026-698/): Malicious code in tableshow (PyPI) (malicious package) - [MAL-2026-6979](https://insights.sbomify.com/MAL-2026-6979/): Malicious code in turbod (PyPI) (malicious package) - [MAL-2026-6978](https://insights.sbomify.com/MAL-2026-6978/): Malicious code in manin (PyPI) (malicious package) - [MAL-2026-6977](https://insights.sbomify.com/MAL-2026-6977/): Malicious code in rarcore (PyPI) (malicious package) - [MAL-2026-6976](https://insights.sbomify.com/MAL-2026-6976/): Malicious code in py-slugify (PyPI) (malicious package) - [MAL-2026-6975](https://insights.sbomify.com/MAL-2026-6975/): Malicious code in oxntime (PyPI) (malicious package) - [MAL-2026-6974](https://insights.sbomify.com/MAL-2026-6974/): Malicious code in tronhapy (PyPI) (malicious package) - [MAL-2026-6973](https://insights.sbomify.com/MAL-2026-6973/): Malicious code in gitlens (npm) (malicious package) - [MAL-2026-6972](https://insights.sbomify.com/MAL-2026-6972/): Malicious code in @vwfs-its/sf-sac-frontend (npm) (malicious package) - [MAL-2026-6971](https://insights.sbomify.com/MAL-2026-6971/): Malicious code in tronhap (PyPI) (malicious package) - [MAL-2026-6970](https://insights.sbomify.com/MAL-2026-6970/): Malicious code in jsonschemavalid (PyPI) (malicious package) - [MAL-2026-697](https://insights.sbomify.com/MAL-2026-697/): Malicious code in pathlib-v2-utility (PyPI) (malicious package) - [MAL-2026-6969](https://insights.sbomify.com/MAL-2026-6969/): Malicious code in vite-json-pwa (npm) (malicious package) - [MAL-2026-6968](https://insights.sbomify.com/MAL-2026-6968/): Malicious code in rony-testing (npm) (malicious package) - [MAL-2026-6967](https://insights.sbomify.com/MAL-2026-6967/): Malicious code in nam-os-a-man (npm) (malicious package) - [MAL-2026-6966](https://insights.sbomify.com/MAL-2026-6966/): Malicious code in na-rony-test-karem (npm) (malicious package) - [MAL-2026-6965](https://insights.sbomify.com/MAL-2026-6965/): Malicious code in na-rony-test (npm) (malicious package) - [MAL-2026-6964](https://insights.sbomify.com/MAL-2026-6964/): Malicious code in na-rony (npm) (malicious package) - [MAL-2026-6963](https://insights.sbomify.com/MAL-2026-6963/): Malicious code in karem-dp (npm) (malicious package) - [MAL-2026-6962](https://insights.sbomify.com/MAL-2026-6962/): Malicious code in gas-log (npm) (malicious package) - [MAL-2026-6961](https://insights.sbomify.com/MAL-2026-6961/): Malicious code in waymo-waymax (PyPI) (malicious package) - [MAL-2026-6960](https://insights.sbomify.com/MAL-2026-6960/): Malicious code in pyqt6darktheme (PyPI) (malicious package) - [MAL-2026-696](https://insights.sbomify.com/MAL-2026-696/): Malicious code in pathfiles (PyPI) (malicious package) - [MAL-2026-6959](https://insights.sbomify.com/MAL-2026-6959/): Malicious code in proton_pfff (crates.io) (malicious package) - [MAL-2026-6958](https://insights.sbomify.com/MAL-2026-6958/): Malicious code in ts-await (npm) (malicious package) - [MAL-2026-6957](https://insights.sbomify.com/MAL-2026-6957/): Malicious code in nodemon-node (npm) (malicious package) - [MAL-2026-6956](https://insights.sbomify.com/MAL-2026-6956/): Malicious code in rio-design-tokens (npm) (malicious package) - [MAL-2026-6955](https://insights.sbomify.com/MAL-2026-6955/): Malicious code in hello244b (npm) (malicious package) - [MAL-2026-6954](https://insights.sbomify.com/MAL-2026-6954/): Malicious code in wsh4_npm (npm) (malicious package) - [MAL-2026-6953](https://insights.sbomify.com/MAL-2026-6953/): Malicious code in whs4_pnm (npm) (malicious package) - [MAL-2026-6952](https://insights.sbomify.com/MAL-2026-6952/): Malicious code in whs4_npm_test (npm) (malicious package) - [MAL-2026-6951](https://insights.sbomify.com/MAL-2026-6951/): Malicious code in whs4_npm (npm) (malicious package) - [MAL-2026-6950](https://insights.sbomify.com/MAL-2026-6950/): Malicious code in whs4_nmp (npm) (malicious package) - [MAL-2026-695](https://insights.sbomify.com/MAL-2026-695/): Malicious code in tsconfig-stitch (npm) (malicious package) - [MAL-2026-6949](https://insights.sbomify.com/MAL-2026-6949/): Malicious code in vps-adapter-core (npm) (malicious package) - [MAL-2026-6948](https://insights.sbomify.com/MAL-2026-6948/): Malicious code in runtimedev-link (npm) (malicious package) - [MAL-2026-6947](https://insights.sbomify.com/MAL-2026-6947/): Malicious code in paperclip-host-utils (npm) (malicious package) - [MAL-2026-6946](https://insights.sbomify.com/MAL-2026-6946/): Malicious code in @whs4/whs4_npm (npm) (malicious package) - [MAL-2026-6945](https://insights.sbomify.com/MAL-2026-6945/): Malicious code in jsonschemavalidation (PyPI) (malicious package) - [MAL-2026-6944](https://insights.sbomify.com/MAL-2026-6944/): Malicious code in zredis-typed (npm) (malicious package) - [MAL-2026-6943](https://insights.sbomify.com/MAL-2026-6943/): Malicious code in tx-guard-snap (npm) (malicious package) - [MAL-2026-6942](https://insights.sbomify.com/MAL-2026-6942/): Malicious code in some-theme (npm) (malicious package) - [MAL-2026-6941](https://insights.sbomify.com/MAL-2026-6941/): Malicious code in shopify-internel (npm) (malicious package) - [MAL-2026-6940](https://insights.sbomify.com/MAL-2026-6940/): Malicious code in rnx-align-deps (npm) (malicious package) - [MAL-2026-694](https://insights.sbomify.com/MAL-2026-694/): Malicious code in tarax (npm) (malicious package) - [MAL-2026-6939](https://insights.sbomify.com/MAL-2026-6939/): Malicious code in polytrade (npm) (malicious package) - [MAL-2026-6938](https://insights.sbomify.com/MAL-2026-6938/): Malicious code in pinokio-redis (npm) (malicious package) - [MAL-2026-6937](https://insights.sbomify.com/MAL-2026-6937/): Malicious code in nuxt-fonts-devtools (npm) (malicious package) - [MAL-2026-6936](https://insights.sbomify.com/MAL-2026-6936/): Malicious code in nonexistent-package (npm) (malicious package) - [MAL-2026-6935](https://insights.sbomify.com/MAL-2026-6935/): Malicious code in load-nuxt-dev (npm) (malicious package) - [MAL-2026-6934](https://insights.sbomify.com/MAL-2026-6934/): Malicious code in load-nuxt (npm) (malicious package) - [MAL-2026-6933](https://insights.sbomify.com/MAL-2026-6933/): Malicious code in hook-augmenting-module (npm) (malicious package) - [MAL-2026-6932](https://insights.sbomify.com/MAL-2026-6932/): Malicious code in evm-typechain (npm) (malicious package) - [MAL-2026-6931](https://insights.sbomify.com/MAL-2026-6931/): Malicious code in chai-sdk (npm) (malicious package) - [MAL-2026-6930](https://insights.sbomify.com/MAL-2026-6930/): Malicious code in annotator-harvardx (npm) (malicious package) - [MAL-2026-693](https://insights.sbomify.com/MAL-2026-693/): Malicious code in tailwindcss-forms-kit (npm) (malicious package) - [MAL-2026-6929](https://insights.sbomify.com/MAL-2026-6929/): Malicious code in paysafe-sdk (PyPI) (malicious package) - [MAL-2026-6928](https://insights.sbomify.com/MAL-2026-6928/): Malicious code in paysafe-payments (PyPI) (malicious package) - [MAL-2026-6927](https://insights.sbomify.com/MAL-2026-6927/): Malicious code in paysafe-kyc (PyPI) (malicious package) - [MAL-2026-6926](https://insights.sbomify.com/MAL-2026-6926/): Malicious code in paysafe-api (PyPI) (malicious package) - [MAL-2026-6925](https://insights.sbomify.com/MAL-2026-6925/): Malicious code in typescript-base58 (npm) (malicious package) - [MAL-2026-6924](https://insights.sbomify.com/MAL-2026-6924/): Malicious code in solana-address-codec (npm) (malicious package) - [MAL-2026-6923](https://insights.sbomify.com/MAL-2026-6923/): Malicious code in notifier-utils (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2026/page/43/