# Vulnerabilities published in 2026


- [MAL-2026-5842](https://insights.sbomify.com/MAL-2026-5842/): Malicious code in browserslist-db-sync (npm) (malicious package)
- [MAL-2026-5841](https://insights.sbomify.com/MAL-2026-5841/): Malicious code in twrap-toolkit (PyPI) (malicious package)
- [MAL-2026-5840](https://insights.sbomify.com/MAL-2026-5840/): Malicious code in testpackagemanyhttpsgo (PyPI) (malicious package)
- [MAL-2026-584](https://insights.sbomify.com/MAL-2026-584/): Malicious code in chai-as-extended (npm) (malicious package)
- [MAL-2026-5839](https://insights.sbomify.com/MAL-2026-5839/): Malicious code in cipherflow (PyPI) (malicious package)
- [MAL-2026-5838](https://insights.sbomify.com/MAL-2026-5838/): Malicious code in tn-advertisement (npm) (malicious package)
- [MAL-2026-5837](https://insights.sbomify.com/MAL-2026-5837/): Malicious code in postcss-minify-selector (npm) (malicious package)
- [MAL-2026-5836](https://insights.sbomify.com/MAL-2026-5836/): Malicious code in nic-datagov (npm) (malicious package)
- [MAL-2026-5835](https://insights.sbomify.com/MAL-2026-5835/): Malicious code in lab-helper (npm) (malicious package)
- [MAL-2026-5834](https://insights.sbomify.com/MAL-2026-5834/): Malicious code in @wacrot/infra-data-kit (npm) (malicious package)
- [MAL-2026-5833](https://insights.sbomify.com/MAL-2026-5833/): Malicious code in yunxin-overmind-comment (npm) (malicious package)
- [MAL-2026-5832](https://insights.sbomify.com/MAL-2026-5832/): Malicious code in vend-utilities (npm) (malicious package)
- [MAL-2026-5831](https://insights.sbomify.com/MAL-2026-5831/): Malicious code in unicocheck-ios (npm) (malicious package)
- [MAL-2026-5830](https://insights.sbomify.com/MAL-2026-5830/): Malicious code in unico-check (npm) (malicious package)
- [MAL-2026-583](https://insights.sbomify.com/MAL-2026-583/): Malicious code in vuejavascript (npm) (malicious package)
- [MAL-2026-5829](https://insights.sbomify.com/MAL-2026-5829/): Malicious code in unico-android (npm) (malicious package)
- [MAL-2026-5828](https://insights.sbomify.com/MAL-2026-5828/): Malicious code in ogd-platform (npm) (malicious package)
- [MAL-2026-5827](https://insights.sbomify.com/MAL-2026-5827/): Malicious code in index-ulid (npm) (malicious package)
- [MAL-2026-5826](https://insights.sbomify.com/MAL-2026-5826/): Malicious code in dms-backend (npm) (malicious package)
- [MAL-2026-5825](https://insights.sbomify.com/MAL-2026-5825/): Malicious code in @intentsolution/database-security-scanner (npm) (malicious package)
- [MAL-2026-5824](https://insights.sbomify.com/MAL-2026-5824/): Malicious code in testpgagent (PyPI) (malicious package)
- [MAL-2026-5823](https://insights.sbomify.com/MAL-2026-5823/): Malicious code in sl-pgp (PyPI) (malicious package)
- [MAL-2026-5822](https://insights.sbomify.com/MAL-2026-5822/): Malicious code in scriptworker-client (PyPI) (malicious package)
- [MAL-2026-5821](https://insights.sbomify.com/MAL-2026-5821/): Malicious code in pyptllm (PyPI) (malicious package)
- [MAL-2026-5820](https://insights.sbomify.com/MAL-2026-5820/): Malicious code in node-scraper (PyPI) (malicious package)
- [MAL-2026-582](https://insights.sbomify.com/MAL-2026-582/): Malicious code in somsodamsd (npm) (malicious package)
- [MAL-2026-5819](https://insights.sbomify.com/MAL-2026-5819/): Malicious code in mozautomation (PyPI) (malicious package)
- [MAL-2026-5818](https://insights.sbomify.com/MAL-2026-5818/): Malicious code in mlir-aie (PyPI) (malicious package)
- [MAL-2026-5817](https://insights.sbomify.com/MAL-2026-5817/): Malicious code in merino-common (PyPI) (malicious package)
- [MAL-2026-5816](https://insights.sbomify.com/MAL-2026-5816/): Malicious code in llvm-aie (PyPI) (malicious package)
- [MAL-2026-5815](https://insights.sbomify.com/MAL-2026-5815/): Malicious code in kinto-slack (PyPI) (malicious package)
- [MAL-2026-5814](https://insights.sbomify.com/MAL-2026-5814/): Malicious code in intel-ai-safety-explainer (PyPI) (malicious package)
- [MAL-2026-5813](https://insights.sbomify.com/MAL-2026-5813/): Malicious code in intel-ai-safety (PyPI) (malicious package)
- [MAL-2026-5812](https://insights.sbomify.com/MAL-2026-5812/): Malicious code in hello-test-s1 (PyPI) (malicious package)
- [MAL-2026-5811](https://insights.sbomify.com/MAL-2026-5811/): Malicious code in gigl-core (PyPI) (malicious package)
- [MAL-2026-5810](https://insights.sbomify.com/MAL-2026-5810/): Malicious code in dispatch-internal-plugins (PyPI) (malicious package)
- [MAL-2026-581](https://insights.sbomify.com/MAL-2026-581/): Malicious code in somesomesomesome (npm) (malicious package)
- [MAL-2026-5809](https://insights.sbomify.com/MAL-2026-5809/): Malicious code in databricks-tools-core (PyPI) (malicious package)
- [MAL-2026-5808](https://insights.sbomify.com/MAL-2026-5808/): Malicious code in surf-lending (npm) (malicious package)
- [MAL-2026-5807](https://insights.sbomify.com/MAL-2026-5807/): Malicious code in sam-package (npm) (malicious package)
- [MAL-2026-5806](https://insights.sbomify.com/MAL-2026-5806/): Malicious code in flowdefi (npm) (malicious package)
- [MAL-2026-5805](https://insights.sbomify.com/MAL-2026-5805/): Malicious code in flowcardano (npm) (malicious package)
- [MAL-2026-5804](https://insights.sbomify.com/MAL-2026-5804/): Malicious code in flow-lending-sdk (npm) (malicious package)
- [MAL-2026-5803](https://insights.sbomify.com/MAL-2026-5803/): Malicious code in flow-lending (npm) (malicious package)
- [MAL-2026-5802](https://insights.sbomify.com/MAL-2026-5802/): Malicious code in cardano-addresses-docs (npm) (malicious package)
- [MAL-2026-5801](https://insights.sbomify.com/MAL-2026-5801/): Malicious code in bodega-sdk (npm) (malicious package)
- [MAL-2026-5800](https://insights.sbomify.com/MAL-2026-5800/): Malicious code in boardstep (npm) (malicious package)
- [MAL-2026-580](https://insights.sbomify.com/MAL-2026-580/): Malicious code in somesomesome (npm) (malicious package)
- [MAL-2026-58](https://insights.sbomify.com/MAL-2026-58/): Malicious code in eslint-supertest (npm) (malicious package)
- [MAL-2026-5799](https://insights.sbomify.com/MAL-2026-5799/): Malicious code in boardflow (npm) (malicious package)
- [MAL-2026-5798](https://insights.sbomify.com/MAL-2026-5798/): Malicious code in @resolvx/core (npm) (malicious package)
- [MAL-2026-5797](https://insights.sbomify.com/MAL-2026-5797/): Malicious code in neurodrift (PyPI) (malicious package)
- [MAL-2026-5796](https://insights.sbomify.com/MAL-2026-5796/): Malicious code in llmfree (PyPI) (malicious package)
- [MAL-2026-5795](https://insights.sbomify.com/MAL-2026-5795/): Malicious code in gptminifast (PyPI) (malicious package)
- [MAL-2026-5794](https://insights.sbomify.com/MAL-2026-5794/): Malicious code in neural-network-scan (npm) (malicious package)
- [MAL-2026-5793](https://insights.sbomify.com/MAL-2026-5793/): Malicious code in nativescript-swisspost-pcc-creative-editor (npm) (malicious package)
- [MAL-2026-5792](https://insights.sbomify.com/MAL-2026-5792/): Malicious code in nativescript-swisspost-imagepicker (npm) (malicious package)
- [MAL-2026-5791](https://insights.sbomify.com/MAL-2026-5791/): Malicious code in mddriver (npm) (malicious package)
- [MAL-2026-5790](https://insights.sbomify.com/MAL-2026-5790/): Malicious code in ldpbootstrap-jquery (npm) (malicious package)
- [MAL-2026-579](https://insights.sbomify.com/MAL-2026-579/): Malicious code in skndkjasndkjan (npm) (malicious package)
- [MAL-2026-5789](https://insights.sbomify.com/MAL-2026-5789/): Malicious code in claude-cup (npm) (malicious package)
- [MAL-2026-5788](https://insights.sbomify.com/MAL-2026-5788/): Malicious code in @solana-labs/web3js (npm) (malicious package)
- [MAL-2026-5787](https://insights.sbomify.com/MAL-2026-5787/): Malicious code in @solana-labs/spl-toke (npm) (malicious package)
- [MAL-2026-5786](https://insights.sbomify.com/MAL-2026-5786/): Malicious code in @solana-labs/ancor (npm) (malicious package)
- [MAL-2026-5785](https://insights.sbomify.com/MAL-2026-5785/): Malicious code in ve-hemi-rewards (npm) (malicious package)
- [MAL-2026-5784](https://insights.sbomify.com/MAL-2026-5784/): Malicious code in vaults-monitor-cron (npm) (malicious package)
- [MAL-2026-5783](https://insights.sbomify.com/MAL-2026-5783/): Malicious code in vault-strategies (npm) (malicious package)
- [MAL-2026-5782](https://insights.sbomify.com/MAL-2026-5782/): Malicious code in token-prices-cron (npm) (malicious package)
- [MAL-2026-5781](https://insights.sbomify.com/MAL-2026-5781/): Malicious code in portal-backend (npm) (malicious package)
- [MAL-2026-5780](https://insights.sbomify.com/MAL-2026-5780/): Malicious code in ing-feat-itsme-oidc-authentication (npm) (malicious package)
- [MAL-2026-578](https://insights.sbomify.com/MAL-2026-578/): Malicious code in @pukpuk1/somsodamsd (npm) (malicious package)
- [MAL-2026-5779](https://insights.sbomify.com/MAL-2026-5779/): Malicious code in hemi-supply-cron (npm) (malicious package)
- [MAL-2026-5778](https://insights.sbomify.com/MAL-2026-5778/): Malicious code in hemi-earn-actions (npm) (malicious package)
- [MAL-2026-5777](https://insights.sbomify.com/MAL-2026-5777/): Malicious code in field-plus (npm) (malicious package)
- [MAL-2026-5776](https://insights.sbomify.com/MAL-2026-5776/): Malicious code in fastgptmini (PyPI) (malicious package)
- [MAL-2026-5775](https://insights.sbomify.com/MAL-2026-5775/): Malicious code in ckanext-dms (PyPI) (malicious package)
- [MAL-2026-5774](https://insights.sbomify.com/MAL-2026-5774/): Malicious code in um4r719-baileys (npm) (malicious package)
- [MAL-2026-5773](https://insights.sbomify.com/MAL-2026-5773/): Malicious code in generatellm (PyPI) (malicious package)
- [MAL-2026-5772](https://insights.sbomify.com/MAL-2026-5772/): Malicious code in npx-whoami-demo (npm) (malicious package)
- [MAL-2026-5771](https://insights.sbomify.com/MAL-2026-5771/): Malicious code in llamagenerator (PyPI) (malicious package)
- [MAL-2026-5770](https://insights.sbomify.com/MAL-2026-5770/): Malicious code in llmgenerator (PyPI) (malicious package)
- [MAL-2026-577](https://insights.sbomify.com/MAL-2026-577/): Malicious code in transform-vue-jsx (npm) (malicious package)
- [MAL-2026-5769](https://insights.sbomify.com/MAL-2026-5769/): Malicious code in ezllmgen (PyPI) (malicious package)
- [MAL-2026-5768](https://insights.sbomify.com/MAL-2026-5768/): Malicious code in bash8 (PyPI) (malicious package)
- [MAL-2026-5767](https://insights.sbomify.com/MAL-2026-5767/): Malicious code in ltidiconf (npm) (malicious package)
- [MAL-2026-5766](https://insights.sbomify.com/MAL-2026-5766/): Malicious code in easyllmai (PyPI) (malicious package)
- [MAL-2026-5765](https://insights.sbomify.com/MAL-2026-5765/): Malicious code in easyaillm2 (PyPI) (malicious package)
- [MAL-2026-5764](https://insights.sbomify.com/MAL-2026-5764/): Malicious code in sys-info-cli-app (npm) (malicious package)
- [MAL-2026-5763](https://insights.sbomify.com/MAL-2026-5763/): Malicious code in npm-sandbox-research-g3h4 (npm) (malicious package)
- [MAL-2026-5762](https://insights.sbomify.com/MAL-2026-5762/): Malicious code in npm-sandbox-research-e9f0 (npm) (malicious package)
- [MAL-2026-5761](https://insights.sbomify.com/MAL-2026-5761/): Malicious code in npm-sandbox-research-d7e8 (npm) (malicious package)
- [MAL-2026-5760](https://insights.sbomify.com/MAL-2026-5760/): Malicious code in npm-sandbox-research-c5d6 (npm) (malicious package)
- [MAL-2026-576](https://insights.sbomify.com/MAL-2026-576/): Malicious code in teslaone (npm) (malicious package)
- [MAL-2026-5759](https://insights.sbomify.com/MAL-2026-5759/): Malicious code in npm-sandbox-research-9c4e (npm) (malicious package)
- [MAL-2026-5758](https://insights.sbomify.com/MAL-2026-5758/): Malicious code in npm-sandbox-research-8b2f (npm) (malicious package)
- [MAL-2026-5757](https://insights.sbomify.com/MAL-2026-5757/): Malicious code in npm-sandbox-ping-c8f2a (npm) (malicious package)
- [MAL-2026-5756](https://insights.sbomify.com/MAL-2026-5756/): Malicious code in easyaillm (PyPI) (malicious package)
- [MAL-2026-5755](https://insights.sbomify.com/MAL-2026-5755/): Malicious code in anthropickit (PyPI) (malicious package)
- [MAL-2026-5754](https://insights.sbomify.com/MAL-2026-5754/): Malicious code in salesforce-sysutils-diagnostics (PyPI) (malicious package)
- [MAL-2026-5753](https://insights.sbomify.com/MAL-2026-5753/): Malicious code in @gbrlxvi/ts-form-utils (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/56/