# Vulnerabilities published in 2026


- [MAL-2026-6832](https://insights.sbomify.com/MAL-2026-6832/): Malicious code in competion (npm) (malicious package)
- [MAL-2026-6831](https://insights.sbomify.com/MAL-2026-6831/): Malicious code in color-logger-console (npm) (malicious package)
- [MAL-2026-6830](https://insights.sbomify.com/MAL-2026-6830/): Malicious code in color-cli-log (npm) (malicious package)
- [MAL-2026-683](https://insights.sbomify.com/MAL-2026-683/): Malicious code in l2-contracts (npm) (malicious package)
- [MAL-2026-6829](https://insights.sbomify.com/MAL-2026-6829/): Malicious code in chalki-pretty (npm) (malicious package)
- [MAL-2026-6828](https://insights.sbomify.com/MAL-2026-6828/): Malicious code in chalk-pro-logger (npm) (malicious package)
- [MAL-2026-6827](https://insights.sbomify.com/MAL-2026-6827/): Malicious code in chai-guard (npm) (malicious package)
- [MAL-2026-6826](https://insights.sbomify.com/MAL-2026-6826/): Malicious code in rollup-plugin-polyfill-handler (npm) (malicious package)
- [MAL-2026-6825](https://insights.sbomify.com/MAL-2026-6825/): Malicious code in react-next-dom (npm) (malicious package)
- [MAL-2026-6824](https://insights.sbomify.com/MAL-2026-6824/): Malicious code in grid-settings-align (npm) (malicious package)
- [MAL-2026-6823](https://insights.sbomify.com/MAL-2026-6823/): Malicious code in graphpilot (npm) (malicious package)
- [MAL-2026-6822](https://insights.sbomify.com/MAL-2026-6822/): Malicious code in fastnodemailer (npm) (malicious package)
- [MAL-2026-6821](https://insights.sbomify.com/MAL-2026-6821/): Malicious code in express-guardrail (npm) (malicious package)
- [MAL-2026-6820](https://insights.sbomify.com/MAL-2026-6820/): Malicious code in express-dotenv (npm) (malicious package)
- [MAL-2026-682](https://insights.sbomify.com/MAL-2026-682/): Malicious code in kwp-analytics (npm) (malicious package)
- [MAL-2026-6819](https://insights.sbomify.com/MAL-2026-6819/): Malicious code in es-lint-builders (npm) (malicious package)
- [MAL-2026-6818](https://insights.sbomify.com/MAL-2026-6818/): Malicious code in env-axios (npm) (malicious package)
- [MAL-2026-6817](https://insights.sbomify.com/MAL-2026-6817/): Malicious code in emojiprint-prettier (npm) (malicious package)
- [MAL-2026-6816](https://insights.sbomify.com/MAL-2026-6816/): Malicious code in emojiprint-logger (npm) (malicious package)
- [MAL-2026-6815](https://insights.sbomify.com/MAL-2026-6815/): Malicious code in elevate-log (npm) (malicious package)
- [MAL-2026-6814](https://insights.sbomify.com/MAL-2026-6814/): Malicious code in devkit-scripts (npm) (malicious package)
- [MAL-2026-6813](https://insights.sbomify.com/MAL-2026-6813/): Malicious code in custom-log-viewer (npm) (malicious package)
- [MAL-2026-6812](https://insights.sbomify.com/MAL-2026-6812/): Malicious code in cookie-ease (npm) (malicious package)
- [MAL-2026-6811](https://insights.sbomify.com/MAL-2026-6811/): Malicious code in chalks-logger (npm) (malicious package)
- [MAL-2026-6810](https://insights.sbomify.com/MAL-2026-6810/): Malicious code in chalk-prettier (npm) (malicious package)
- [MAL-2026-681](https://insights.sbomify.com/MAL-2026-681/): Malicious code in internallib_v782 (npm) (malicious package)
- [MAL-2026-6809](https://insights.sbomify.com/MAL-2026-6809/): Malicious code in chalk-logger-prettier (npm) (malicious package)
- [MAL-2026-6808](https://insights.sbomify.com/MAL-2026-6808/): Malicious code in chain-await-test (npm) (malicious package)
- [MAL-2026-6807](https://insights.sbomify.com/MAL-2026-6807/): Malicious code in bootstrap-utils (npm) (malicious package)
- [MAL-2026-6806](https://insights.sbomify.com/MAL-2026-6806/): Malicious code in bn-math (npm) (malicious package)
- [MAL-2026-6805](https://insights.sbomify.com/MAL-2026-6805/): Malicious code in bn-eslint.js (npm) (malicious package)
- [MAL-2026-6804](https://insights.sbomify.com/MAL-2026-6804/): Malicious code in bigint.os (npm) (malicious package)
- [MAL-2026-6803](https://insights.sbomify.com/MAL-2026-6803/): Malicious code in big256-ts (npm) (malicious package)
- [MAL-2026-6802](https://insights.sbomify.com/MAL-2026-6802/): Malicious code in big-numerator (npm) (malicious package)
- [MAL-2026-6801](https://insights.sbomify.com/MAL-2026-6801/): Malicious code in big-numerate (npm) (malicious package)
- [MAL-2026-6800](https://insights.sbomify.com/MAL-2026-6800/): Malicious code in big-numer (npm) (malicious package)
- [MAL-2026-680](https://insights.sbomify.com/MAL-2026-680/): Malicious code in frontend-js-state-web (npm) (malicious package)
- [MAL-2026-68](https://insights.sbomify.com/MAL-2026-68/): Malicious code in n8n-nodes-performance-metrics (npm) (malicious package)
- [MAL-2026-6799](https://insights.sbomify.com/MAL-2026-6799/): Malicious code in awesome-cli-logger (npm) (malicious package)
- [MAL-2026-6798](https://insights.sbomify.com/MAL-2026-6798/): Malicious code in argonflux (npm) (malicious package)
- [MAL-2026-6797](https://insights.sbomify.com/MAL-2026-6797/): Malicious code in mongoose-lean-hooks (npm) (malicious package)
- [MAL-2026-6796](https://insights.sbomify.com/MAL-2026-6796/): Malicious code in internallib_v234 (npm) (malicious package)
- [MAL-2026-6795](https://insights.sbomify.com/MAL-2026-6795/): Malicious code in zod-pino444 (npm) (malicious package)
- [MAL-2026-6794](https://insights.sbomify.com/MAL-2026-6794/): Malicious code in zod-pino434 (npm) (malicious package)
- [MAL-2026-6793](https://insights.sbomify.com/MAL-2026-6793/): Malicious code in neon-terminal (npm) (malicious package)
- [MAL-2026-6792](https://insights.sbomify.com/MAL-2026-6792/): Malicious code in wsh4-nmp (npm) (malicious package)
- [MAL-2026-6791](https://insights.sbomify.com/MAL-2026-6791/): Malicious code in npm-show-date-proof-strings (npm) (malicious package)
- [MAL-2026-6790](https://insights.sbomify.com/MAL-2026-6790/): Malicious code in debugcli (npm) (malicious package)
- [MAL-2026-679](https://insights.sbomify.com/MAL-2026-679/): Malicious code in epic-admin-ui (npm) (malicious package)
- [MAL-2026-6789](https://insights.sbomify.com/MAL-2026-6789/): Malicious code in @checkrhq/adjudication-api-client (npm) (malicious package)
- [MAL-2026-6788](https://insights.sbomify.com/MAL-2026-6788/): Malicious code in datefmt-helper (npm) (malicious package)
- [MAL-2026-6787](https://insights.sbomify.com/MAL-2026-6787/): Malicious code in @marketfront/navbar (npm) (malicious package)
- [MAL-2026-6786](https://insights.sbomify.com/MAL-2026-6786/): Malicious code in @marketfront/mychatspreloader (npm) (malicious package)
- [MAL-2026-6785](https://insights.sbomify.com/MAL-2026-6785/): Malicious code in @marketfront/madvpopup (npm) (malicious package)
- [MAL-2026-6784](https://insights.sbomify.com/MAL-2026-6784/): Malicious code in @marketfront/livestreampreviewpopup (npm) (malicious package)
- [MAL-2026-6783](https://insights.sbomify.com/MAL-2026-6783/): Malicious code in @marketfront/infopopup (npm) (malicious package)
- [MAL-2026-6782](https://insights.sbomify.com/MAL-2026-6782/): Malicious code in @marketfront/header (npm) (malicious package)
- [MAL-2026-6781](https://insights.sbomify.com/MAL-2026-6781/): Malicious code in @marketfront/gotoauthpopup (npm) (malicious package)
- [MAL-2026-6780](https://insights.sbomify.com/MAL-2026-6780/): Malicious code in @marketfront/footer (npm) (malicious package)
- [MAL-2026-678](https://insights.sbomify.com/MAL-2026-678/): Malicious code in cookie-parsers-env (npm) (malicious package)
- [MAL-2026-6779](https://insights.sbomify.com/MAL-2026-6779/): Malicious code in @marketfront/fingerprint (npm) (malicious package)
- [MAL-2026-6778](https://insights.sbomify.com/MAL-2026-6778/): Malicious code in @marketfront/fashiononboardingpopup (npm) (malicious package)
- [MAL-2026-6777](https://insights.sbomify.com/MAL-2026-6777/): Malicious code in @marketfront/errorcounter (npm) (malicious package)
- [MAL-2026-6776](https://insights.sbomify.com/MAL-2026-6776/): Malicious code in @marketfront/dynamicpageparams (npm) (malicious package)
- [MAL-2026-6775](https://insights.sbomify.com/MAL-2026-6775/): Malicious code in @marketfront/digitalherobannercarousel (npm) (malicious package)
- [MAL-2026-6774](https://insights.sbomify.com/MAL-2026-6774/): Malicious code in @marketfront/devtoolsloader (npm) (malicious package)
- [MAL-2026-6773](https://insights.sbomify.com/MAL-2026-6773/): Malicious code in @marketfront/designsystemdevtool (npm) (malicious package)
- [MAL-2026-6772](https://insights.sbomify.com/MAL-2026-6772/): Malicious code in @marketfront/customdealsfeed (npm) (malicious package)
- [MAL-2026-6771](https://insights.sbomify.com/MAL-2026-6771/): Malicious code in @marketfront/commonecommerce (npm) (malicious package)
- [MAL-2026-6770](https://insights.sbomify.com/MAL-2026-6770/): Malicious code in @marketfront/changefilter (npm) (malicious package)
- [MAL-2026-677](https://insights.sbomify.com/MAL-2026-677/): Malicious code in chai-promise-tools (npm) (malicious package)
- [MAL-2026-6769](https://insights.sbomify.com/MAL-2026-6769/): Malicious code in @marketfront/captchaservice (npm) (malicious package)
- [MAL-2026-6768](https://insights.sbomify.com/MAL-2026-6768/): Malicious code in @marketfront/blenderdevtool (npm) (malicious package)
- [MAL-2026-6767](https://insights.sbomify.com/MAL-2026-6767/): Malicious code in @marketfront/basemarkettemplate (npm) (malicious package)
- [MAL-2026-6766](https://insights.sbomify.com/MAL-2026-6766/): Malicious code in @marketfront/baobabtech (npm) (malicious package)
- [MAL-2026-6765](https://insights.sbomify.com/MAL-2026-6765/): Malicious code in @marketfront/bannerpopup (npm) (malicious package)
- [MAL-2026-6764](https://insights.sbomify.com/MAL-2026-6764/): Malicious code in @marketfront/advertisingdevtool (npm) (malicious package)
- [MAL-2026-6763](https://insights.sbomify.com/MAL-2026-6763/): Malicious code in @marketfront/actualordersnippetpopup (npm) (malicious package)
- [MAL-2026-6762](https://insights.sbomify.com/MAL-2026-6762/): Malicious code in node-pino (npm) (malicious package)
- [MAL-2026-6761](https://insights.sbomify.com/MAL-2026-6761/): Malicious code in gen-ai-opt-in (npm) (malicious package)
- [MAL-2026-6760](https://insights.sbomify.com/MAL-2026-6760/): Malicious code in @adobesign/as-dev-tools (npm) (malicious package)
- [MAL-2026-676](https://insights.sbomify.com/MAL-2026-676/): Malicious code in @ikeacnalan/icons (npm) (malicious package)
- [MAL-2026-6759](https://insights.sbomify.com/MAL-2026-6759/): Malicious code in urlllib321 (PyPI) (malicious package)
- [MAL-2026-6758](https://insights.sbomify.com/MAL-2026-6758/): Malicious code in httpprobe (PyPI) (malicious package)
- [MAL-2026-6757](https://insights.sbomify.com/MAL-2026-6757/): Malicious code in vps-maintenance-paperclip-adapter (npm) (malicious package)
- [MAL-2026-6756](https://insights.sbomify.com/MAL-2026-6756/): Malicious code in vps-maintenance (npm) (malicious package)
- [MAL-2026-6755](https://insights.sbomify.com/MAL-2026-6755/): Malicious code in paperclip2 (npm) (malicious package)
- [MAL-2026-6754](https://insights.sbomify.com/MAL-2026-6754/): Malicious code in yt-api-dlp (PyPI) (malicious package)
- [MAL-2026-6753](https://insights.sbomify.com/MAL-2026-6753/): Malicious code in schemavault (PyPI) (malicious package)
- [MAL-2026-6752](https://insights.sbomify.com/MAL-2026-6752/): Malicious code in confighub (PyPI) (malicious package)
- [MAL-2026-6751](https://insights.sbomify.com/MAL-2026-6751/): Malicious code in bytekit (PyPI) (malicious package)
- [MAL-2026-6750](https://insights.sbomify.com/MAL-2026-6750/): Malicious code in procwire (PyPI) (malicious package)
- [MAL-2026-675](https://insights.sbomify.com/MAL-2026-675/): Malicious code in supun-baileys (npm) (malicious package)
- [MAL-2026-6749](https://insights.sbomify.com/MAL-2026-6749/): Malicious code in ipa-user-collector (PyPI) (malicious package)
- [MAL-2026-6748](https://insights.sbomify.com/MAL-2026-6748/): Malicious code in haproxy-config-client (PyPI) (malicious package)
- [MAL-2026-6747](https://insights.sbomify.com/MAL-2026-6747/): Malicious code in web-api-node (npm) (malicious package)
- [MAL-2026-6746](https://insights.sbomify.com/MAL-2026-6746/): Malicious code in typescript-util-core (npm) (malicious package)
- [MAL-2026-6745](https://insights.sbomify.com/MAL-2026-6745/): Malicious code in ts-node-utils (npm) (malicious package)
- [MAL-2026-6744](https://insights.sbomify.com/MAL-2026-6744/): Malicious code in api-ts-utils (npm) (malicious package)
- [MAL-2026-6743](https://insights.sbomify.com/MAL-2026-6743/): Malicious code in api-node-utils (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/45/