Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 53 of 1013.
- MAL-2026-6111 Malicious code in @rafaelsene01/agent-flow (npm)
- MAL-2026-6110 Malicious code in @ncurran/sandbox-recon-uac-4e7c (npm)
- MAL-2026-611 Malicious code in mbo-letters-cl (npm)
- MAL-2026-6109 Malicious code in @ncurran/sandbox-recon-sys-6a3f (npm)
- MAL-2026-6108 Malicious code in @ncurran/sandbox-recon-sys-5f1b (npm)
- MAL-2026-6107 Malicious code in @ncurran/sandbox-recon-sys-5b2c (npm)
- MAL-2026-6106 Malicious code in @ncurran/sandbox-recon-9b2d4f (npm)
- MAL-2026-6105 Malicious code in @ncurran/sandbox-recon-880538 (npm)
- MAL-2026-6104 Malicious code in @ncurran/sandbox-recon-7c4e1a (npm)
- MAL-2026-6103 Malicious code in @ncurran/dc-selftest-ba0ad4 (npm)
- MAL-2026-6102 Malicious code in @ncurran/dc-selftest-33afb7 (npm)
- MAL-2026-6101 Malicious code in type-check-816d (npm)
- MAL-2026-6100 Malicious code in string-tools-be6c (npm)
- MAL-2026-610 Malicious code in snapshot-date (PyPI)
- MAL-2026-61 Malicious code in oj-sp-common (npm)
- MAL-2026-6099 Malicious code in stream-read-35cf (npm)
- MAL-2026-6098 Malicious code in stackus (npm)
- MAL-2026-6097 Malicious code in roblox-api-client (npm)
- MAL-2026-6096 Malicious code in requests-middleware (npm)
- MAL-2026-6095 Malicious code in oem-agentic-shared (npm)
- MAL-2026-6094 Malicious code in metrics-probe-f256 (npm)
- MAL-2026-6093 Malicious code in jwtmode (npm)
- MAL-2026-6092 Malicious code in fmt-helpers-794b (npm)
- MAL-2026-6091 Malicious code in datacamp-light (npm)
- MAL-2026-6090 Malicious code in data-utils-bcf2 (npm)
- MAL-2026-609 Malicious code in euskalplantxa (npm)
- MAL-2026-6089 Malicious code in color-utils-dee0 (npm)
- MAL-2026-6088 Malicious code in vite-common-utils (npm)
- MAL-2026-6087 Malicious code in uol-simple-api-futebol (npm)
- MAL-2026-6086 Malicious code in ai-chat-helper (npm)
- MAL-2026-6085 Malicious code in @hotcappuccino/nodepull (npm)
- MAL-2026-6084 Malicious code in @array-util/nodepull (npm)
- MAL-2026-6083 Malicious code in syncagents (PyPI)
- MAL-2026-6082 Malicious code in dotenv-sync (PyPI)
- MAL-2026-6081 Malicious code in disksweep (PyPI)
- MAL-2026-6080 Malicious code in boardflow (PyPI)
- MAL-2026-608 Malicious code in ezviz-shop-mall (npm)
- MAL-2026-6079 Malicious code in set-proto-chain (npm)
- MAL-2026-6078 Malicious code in pino-slite (npm)
- MAL-2026-6077 Malicious code in ebpf-tracker-action (npm)
- MAL-2026-6076 Malicious code in pystylish (PyPI)
- MAL-2026-6075 Malicious code in opt-archetype-check (npm)
- MAL-2026-6074 Malicious code in @mastra/redis (npm)
- MAL-2026-6073 Malicious code in @mastra/observability (npm)
- MAL-2026-6072 Malicious code in @mastra/loggers (npm)
- MAL-2026-6071 Malicious code in n8n-nodes-security-test-poc (npm)
- MAL-2026-6070 Malicious code in libsc-runtime-telemetry (npm)
- MAL-2026-607 Malicious code in banquet-runtime-modules (npm)
- MAL-2026-6069 Malicious code in @civitatis/bot-ui (npm)
- MAL-2026-6068 Malicious code in swift-parse-stream (npm)
- MAL-2026-6067 Malicious code in scan-only (npm)
- MAL-2026-6066 Malicious code in quirky-token (npm)
- MAL-2026-6065 Malicious code in lab-services (npm)
- MAL-2026-6064 Malicious code in tailwindcss-animates-css (npm)
- MAL-2026-6063 Malicious code in sort-btree (npm)
- MAL-2026-6062 Malicious code in sodel-pych (npm)
- MAL-2026-6061 Malicious code in qrcode-generator-node (npm)
- MAL-2026-6060 Malicious code in qrcode-express (npm)
- MAL-2026-606 Malicious code in userver-requires-at-least-python-3-10 (PyPI)
- MAL-2026-6059 Malicious code in express-validates (npm)
- MAL-2026-6058 Malicious code in @ignacionunez91/keccak24 (npm)
- MAL-2026-6057 Malicious code in @mastra/voice-playai (npm)
- MAL-2026-6056 Malicious code in @mastra/react (npm)
- MAL-2026-6055 Malicious code in @mastra/node-speaker (npm)
- MAL-2026-6054 Malicious code in @mastra/node-audio (npm)
- MAL-2026-6053 Malicious code in @mastra/mem0 (npm)
- MAL-2026-6052 Malicious code in @mastra/github-signals (npm)
- MAL-2026-6051 Malicious code in telegram-lite-grabber (PyPI)
- MAL-2026-6050 Malicious code in create-mastra (npm)
- MAL-2026-605 Malicious code in dhgshop (npm)
- MAL-2026-6049 Malicious code in @mastra/voice-openai-realtime (npm)
- MAL-2026-6048 Malicious code in @mastra/voice-openai (npm)
- MAL-2026-6047 Malicious code in @mastra/voice-google-gemini-live (npm)
- MAL-2026-6046 Malicious code in @mastra/voice-google (npm)
- MAL-2026-6045 Malicious code in @mastra/voice-elevenlabs (npm)
- MAL-2026-6044 Malicious code in @mastra/voice-deepgram (npm)
- MAL-2026-6043 Malicious code in @mastra/voice-aws-nova-sonic (npm)
- MAL-2026-6042 Malicious code in @mastra/vectorize (npm)
- MAL-2026-6041 Malicious code in @mastra/upstash (npm)
- MAL-2026-6040 Malicious code in @mastra/turbopuffer (npm)
- MAL-2026-604 Malicious code in securedrop-workstation-dom0-config (PyPI)
- MAL-2026-6039 Malicious code in @mastra/temporal (npm)
- MAL-2026-6038 Malicious code in @mastra/tavily (npm)
- MAL-2026-6037 Malicious code in @mastra/stagehand (npm)
- MAL-2026-6036 Malicious code in @mastra/server (npm)
- MAL-2026-6035 Malicious code in @mastra/s3vectors (npm)
- MAL-2026-6034 Malicious code in @mastra/qdrant (npm)
- MAL-2026-6033 Malicious code in @mastra/playground-ui (npm)
- MAL-2026-6032 Malicious code in @mastra/pinecone (npm)
- MAL-2026-6031 Malicious code in @mastra/otel-exporter (npm)
- MAL-2026-6030 Malicious code in @mastra/nestjs (npm)
- MAL-2026-603 Malicious code in mcp-pdftool-plus (PyPI)
- MAL-2026-6029 Malicious code in @mastra/mssql (npm)
- MAL-2026-6028 Malicious code in @mastra/memory (npm)
- MAL-2026-6027 Malicious code in @mastra/mcp-registry-registry (npm)
- MAL-2026-6026 Malicious code in @mastra/longmemeval (npm)
- MAL-2026-6025 Malicious code in @mastra/koa (npm)
- MAL-2026-6024 Malicious code in @mastra/google-cloud-pubsub (npm)
- MAL-2026-6023 Malicious code in @mastra/gcs (npm)
- MAL-2026-6022 Malicious code in @mastra/express (npm)