Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 49 of 1013.
- MAL-2026-6472 Malicious code in tailwindcss-effector (npm)
- MAL-2026-6471 Malicious code in tailwind-color-shades (npm)
- MAL-2026-6470 Malicious code in chlklib (npm)
- MAL-2026-647 Malicious code in react-native-expofp (npm)
- MAL-2026-6469 Malicious code in ts-precision (npm)
- MAL-2026-6468 Malicious code in ts-opus (npm)
- MAL-2026-6467 Malicious code in @vpms/design-system (npm)
- MAL-2026-6466 Malicious code in gx-npm-feature-flags (npm)
- MAL-2026-6465 Malicious code in chai-as-built (npm)
- MAL-2026-6464 Malicious code in @colibri-event-types/megamarket-ru-web (npm)
- MAL-2026-6463 Malicious code in abu-common-components (npm)
- MAL-2026-6462 Malicious code in dttsdee (npm)
- MAL-2026-6461 Malicious code in easy-string-kit232 (npm)
- MAL-2026-6460 Malicious code in dddooo (npm)
- MAL-2026-646 Malicious code in picking-miniapp (npm)
- MAL-2026-6459 Malicious code in easy-string-kit (npm)
- MAL-2026-6458 Malicious code in wp-codebox-workspace (npm)
- MAL-2026-6457 Malicious code in subsearch (npm)
- MAL-2026-6456 Malicious code in stitch-design (npm)
- MAL-2026-6455 Malicious code in simple-node-calc-ccc (npm)
- MAL-2026-6454 Malicious code in simple-node-calc-c (npm)
- MAL-2026-6453 Malicious code in simple-node-calc-b (npm)
- MAL-2026-6452 Malicious code in simple-node-calc-aa (npm)
- MAL-2026-6451 Malicious code in simple-node-calc-a (npm)
- MAL-2026-6450 Malicious code in nizzybase32 (npm)
- MAL-2026-645 Malicious code in libsignal-yazxzpedia (npm)
- MAL-2026-6449 Malicious code in howdybase32 (npm)
- MAL-2026-6448 Malicious code in bs58-86 (npm)
- MAL-2026-6447 Malicious code in based-32 (npm)
- MAL-2026-6446 Malicious code in base62-86x (npm)
- MAL-2026-6445 Malicious code in base58-core (npm)
- MAL-2026-6444 Malicious code in agentsync-tool (npm)
- MAL-2026-6443 Malicious code in agentsync-pkg (npm)
- MAL-2026-6442 Malicious code in easy-time-format (npm)
- MAL-2026-6441 Malicious code in unifydata (npm)
- MAL-2026-6440 Malicious code in tokenization-util (npm)
- MAL-2026-644 Malicious code in dise-pkt (npm)
- MAL-2026-6439 Malicious code in polymarket-stake-maths (npm)
- MAL-2026-6438 Malicious code in polymarket-stake-math (npm)
- MAL-2026-6437 Malicious code in logfmt-core (npm)
- MAL-2026-6436 Malicious code in solo-nav (npm)
- MAL-2026-6435 Malicious code in serverless-leo (npm)
- MAL-2026-6434 Malicious code in serverless-convention (npm)
- MAL-2026-6433 Malicious code in rstreams-shard-util (npm)
- MAL-2026-6432 Malicious code in rstreams-metrics (npm)
- MAL-2026-6431 Malicious code in leo-streams (npm)
- MAL-2026-6430 Malicious code in leo-sdk (npm)
- MAL-2026-643 Malicious code in @hemanshu_patil/xcode-windows-x64 (npm)
- MAL-2026-6429 Malicious code in leo-logger (npm)
- MAL-2026-6428 Malicious code in leo-cron (npm)
- MAL-2026-6427 Malicious code in leo-connector-redshift (npm)
- MAL-2026-6426 Malicious code in leo-connector-oracle (npm)
- MAL-2026-6425 Malicious code in leo-connector-mysql (npm)
- MAL-2026-6424 Malicious code in leo-connector-mongo (npm)
- MAL-2026-6423 Malicious code in leo-connector-elasticsearch (npm)
- MAL-2026-6422 Malicious code in leo-config (npm)
- MAL-2026-6421 Malicious code in leo-cli (npm)
- MAL-2026-6420 Malicious code in leo-cdk-lib (npm)
- MAL-2026-642 Malicious code in @hemanshu_patil/xcode (npm)
- MAL-2026-6419 Malicious code in leo-cache (npm)
- MAL-2026-6418 Malicious code in leo-aws (npm)
- MAL-2026-6417 Malicious code in leo-auth (npm)
- MAL-2026-6416 Malicious code in block-slot (npm)
- MAL-2026-6415 Malicious code in anthropic-claude-latest (npm)
- MAL-2026-6414 Malicious code in two-factor-prompt-lib (npm)
- MAL-2026-6413 Malicious code in poc-publish-test-su-doughnym (npm)
- MAL-2026-6412 Malicious code in nabisco (npm)
- MAL-2026-6411 Malicious code in data-fetching-client (npm)
- MAL-2026-6410 Malicious code in @su-doughnym/react-dlb (npm)
- MAL-2026-641 Malicious code in connections-api-requests (PyPI)
- MAL-2026-6409 Malicious code in @su-doughnym/metrics-js (npm)
- MAL-2026-6408 Malicious code in @su-doughnym/loginui (npm)
- MAL-2026-6407 Malicious code in @su-doughnym/hubspot-loginui-poc (npm)
- MAL-2026-6406 Malicious code in syspo (npm)
- MAL-2026-6405 Malicious code in sypoi1 (npm)
- MAL-2026-6404 Malicious code in syco1 (npm)
- MAL-2026-6403 Malicious code in @kl-dolphin/jump (npm)
- MAL-2026-6402 Malicious code in @kl-dolphin/swim (npm)
- MAL-2026-6401 Malicious code in zenith-utils (npm)
- MAL-2026-6400 Malicious code in python-dateutil2 (PyPI)
- MAL-2026-640 Malicious code in connections-api-request (PyPI)
- MAL-2026-64 Malicious code in oj-sp-css-additions (npm)
- MAL-2026-6399 Malicious code in normalize-plus (npm)
- MAL-2026-6398 Malicious code in ui-core-system (npm)
- MAL-2026-6397 Malicious code in ldapaotest (npm)
- MAL-2026-6396 Malicious code in signup-embedder (npm)
- MAL-2026-6395 Malicious code in react-campaign-optimizer (npm)
- MAL-2026-6394 Malicious code in hs-locale-management (npm)
- MAL-2026-6393 Malicious code in chai-as-predicted (npm)
- MAL-2026-6392 Malicious code in cccmyssr3 (npm)
- MAL-2026-6391 Malicious code in cccmyssr2 (npm)
- MAL-2026-6390 Malicious code in cccmyssr-util (npm)
- MAL-2026-639 Malicious code in connection-api-requests (PyPI)
- MAL-2026-6389 Malicious code in vercel-api-client (npm)
- MAL-2026-6388 Malicious code in rapidsearch (npm)
- MAL-2026-6387 Malicious code in multer-express (npm)
- MAL-2026-6386 Malicious code in evmdotjs (npm)
- MAL-2026-6385 Malicious code in eth_accounts (npm)
- MAL-2026-6384 Malicious code in mcpsever (PyPI)
- MAL-2026-6383 Malicious code in gunicorm (PyPI)