# Vulnerabilities published in 2026


- [MAL-2026-5288](https://insights.sbomify.com/MAL-2026-5288/): Malicious code in uisp-connector (npm) (malicious package)
- [MAL-2026-5287](https://insights.sbomify.com/MAL-2026-5287/): Malicious code in uhd-setup (npm) (malicious package)
- [MAL-2026-5286](https://insights.sbomify.com/MAL-2026-5286/): Malicious code in encrypted-archive (npm) (malicious package)
- [MAL-2026-5285](https://insights.sbomify.com/MAL-2026-5285/): Malicious code in ufish (PyPI) (malicious package)
- [MAL-2026-5284](https://insights.sbomify.com/MAL-2026-5284/): Malicious code in synago (PyPI) (malicious package)
- [MAL-2026-5283](https://insights.sbomify.com/MAL-2026-5283/): Malicious code in okite (PyPI) (malicious package)
- [MAL-2026-5282](https://insights.sbomify.com/MAL-2026-5282/): Malicious code in mrbios (PyPI) (malicious package)
- [MAL-2026-5281](https://insights.sbomify.com/MAL-2026-5281/): Malicious code in executor-http (PyPI) (malicious package)
- [MAL-2026-5280](https://insights.sbomify.com/MAL-2026-5280/): Malicious code in bramin (PyPI) (malicious package)
- [MAL-2026-528](https://insights.sbomify.com/MAL-2026-528/): Malicious code in @shije/new-qs (npm) (malicious package)
- [MAL-2026-5279](https://insights.sbomify.com/MAL-2026-5279/): Malicious code in uprobe (PyPI) (malicious package)
- [MAL-2026-5278](https://insights.sbomify.com/MAL-2026-5278/): Malicious code in spateo-release (PyPI) (malicious package)
- [MAL-2026-5277](https://insights.sbomify.com/MAL-2026-5277/): Malicious code in pantheon-toolsets (PyPI) (malicious package)
- [MAL-2026-5276](https://insights.sbomify.com/MAL-2026-5276/): Malicious code in nucbox (PyPI) (malicious package)
- [MAL-2026-5275](https://insights.sbomify.com/MAL-2026-5275/): Malicious code in napari-ufish (PyPI) (malicious package)
- [MAL-2026-5274](https://insights.sbomify.com/MAL-2026-5274/): Malicious code in dynamo-release (PyPI) (malicious package)
- [MAL-2026-5273](https://insights.sbomify.com/MAL-2026-5273/): Malicious code in anthropy (PyPI) (malicious package)
- [MAL-2026-5272](https://insights.sbomify.com/MAL-2026-5272/): Malicious code in goodoltoulas (PyPI) (malicious package)
- [MAL-2026-5271](https://insights.sbomify.com/MAL-2026-5271/): Malicious code in goodoldtoulas (PyPI) (malicious package)
- [MAL-2026-5270](https://insights.sbomify.com/MAL-2026-5270/): Malicious code in reactvora (npm) (malicious package)
- [MAL-2026-527](https://insights.sbomify.com/MAL-2026-527/): Malicious code in @santandergroup-uk/edgehome-components (npm) (malicious package)
- [MAL-2026-5269](https://insights.sbomify.com/MAL-2026-5269/): Malicious code in glyphr (npm) (malicious package)
- [MAL-2026-5268](https://insights.sbomify.com/MAL-2026-5268/): Malicious code in ulid-os (npm) (malicious package)
- [MAL-2026-5267](https://insights.sbomify.com/MAL-2026-5267/): Malicious code in wrangler-deploy (npm) (malicious package)
- [MAL-2026-5266](https://insights.sbomify.com/MAL-2026-5266/): Malicious code in node-env-resolver-vite (npm) (malicious package)
- [MAL-2026-5265](https://insights.sbomify.com/MAL-2026-5265/): Malicious code in node-env-resolver-nextjs (npm) (malicious package)
- [MAL-2026-5264](https://insights.sbomify.com/MAL-2026-5264/): Malicious code in node-env-resolver-dotenvx (npm) (malicious package)
- [MAL-2026-5263](https://insights.sbomify.com/MAL-2026-5263/): Malicious code in node-env-resolver-aws (npm) (malicious package)
- [MAL-2026-5262](https://insights.sbomify.com/MAL-2026-5262/): Malicious code in node-env-resolver (npm) (malicious package)
- [MAL-2026-5261](https://insights.sbomify.com/MAL-2026-5261/): Malicious code in mountly-tailwind (npm) (malicious package)
- [MAL-2026-5260](https://insights.sbomify.com/MAL-2026-5260/): Malicious code in mountly (npm) (malicious package)
- [MAL-2026-526](https://insights.sbomify.com/MAL-2026-526/): Malicious code in @row-components/pricing-embedded-sui (npm) (malicious package)
- [MAL-2026-5259](https://insights.sbomify.com/MAL-2026-5259/): Malicious code in github-archiver (npm) (malicious package)
- [MAL-2026-5258](https://insights.sbomify.com/MAL-2026-5258/): Malicious code in executable-stories-vitest (npm) (malicious package)
- [MAL-2026-5257](https://insights.sbomify.com/MAL-2026-5257/): Malicious code in executable-stories-react (npm) (malicious package)
- [MAL-2026-5256](https://insights.sbomify.com/MAL-2026-5256/): Malicious code in executable-stories-playwright (npm) (malicious package)
- [MAL-2026-5255](https://insights.sbomify.com/MAL-2026-5255/): Malicious code in executable-stories-mcp (npm) (malicious package)
- [MAL-2026-5254](https://insights.sbomify.com/MAL-2026-5254/): Malicious code in executable-stories-jest (npm) (malicious package)
- [MAL-2026-5253](https://insights.sbomify.com/MAL-2026-5253/): Malicious code in executable-stories-init (npm) (malicious package)
- [MAL-2026-5252](https://insights.sbomify.com/MAL-2026-5252/): Malicious code in executable-stories-formatters (npm) (malicious package)
- [MAL-2026-5251](https://insights.sbomify.com/MAL-2026-5251/): Malicious code in executable-stories-demo (npm) (malicious package)
- [MAL-2026-5250](https://insights.sbomify.com/MAL-2026-5250/): Malicious code in executable-stories-cypress (npm) (malicious package)
- [MAL-2026-525](https://insights.sbomify.com/MAL-2026-525/): Malicious code in sandbox-hooks (npm) (malicious package)
- [MAL-2026-5249](https://insights.sbomify.com/MAL-2026-5249/): Malicious code in eslint-plugin-executable-stories-vitest (npm) (malicious package)
- [MAL-2026-5248](https://insights.sbomify.com/MAL-2026-5248/): Malicious code in eslint-plugin-executable-stories-playwright (npm) (malicious package)
- [MAL-2026-5247](https://insights.sbomify.com/MAL-2026-5247/): Malicious code in eslint-plugin-executable-stories-jest (npm) (malicious package)
- [MAL-2026-5246](https://insights.sbomify.com/MAL-2026-5246/): Malicious code in eslint-plugin-awaitly (npm) (malicious package)
- [MAL-2026-5245](https://insights.sbomify.com/MAL-2026-5245/): Malicious code in effect-analyzer (npm) (malicious package)
- [MAL-2026-5244](https://insights.sbomify.com/MAL-2026-5244/): Malicious code in discord-search (npm) (malicious package)
- [MAL-2026-5243](https://insights.sbomify.com/MAL-2026-5243/): Malicious code in dbmux (npm) (malicious package)
- [MAL-2026-5242](https://insights.sbomify.com/MAL-2026-5242/): Malicious code in creditcard.js (npm) (malicious package)
- [MAL-2026-5241](https://insights.sbomify.com/MAL-2026-5241/): Malicious code in create-wrangler-deploy (npm) (malicious package)
- [MAL-2026-5240](https://insights.sbomify.com/MAL-2026-5240/): Malicious code in create-cf-token (npm) (malicious package)
- [MAL-2026-524](https://insights.sbomify.com/MAL-2026-524/): Malicious code in mapkit-example-vue (npm) (malicious package)
- [MAL-2026-5239](https://insights.sbomify.com/MAL-2026-5239/): Malicious code in awaitly-visualizer (npm) (malicious package)
- [MAL-2026-5238](https://insights.sbomify.com/MAL-2026-5238/): Malicious code in awaitly-postgres (npm) (malicious package)
- [MAL-2026-5237](https://insights.sbomify.com/MAL-2026-5237/): Malicious code in awaitly-mongo (npm) (malicious package)
- [MAL-2026-5236](https://insights.sbomify.com/MAL-2026-5236/): Malicious code in awaitly-libsql (npm) (malicious package)
- [MAL-2026-5235](https://insights.sbomify.com/MAL-2026-5235/): Malicious code in awaitly-analyze (npm) (malicious package)
- [MAL-2026-5234](https://insights.sbomify.com/MAL-2026-5234/): Malicious code in awaitly (npm) (malicious package)
- [MAL-2026-5233](https://insights.sbomify.com/MAL-2026-5233/): Malicious code in autotel-web (npm) (malicious package)
- [MAL-2026-5232](https://insights.sbomify.com/MAL-2026-5232/): Malicious code in autotel-vitest (npm) (malicious package)
- [MAL-2026-5231](https://insights.sbomify.com/MAL-2026-5231/): Malicious code in autotel-tanstack (npm) (malicious package)
- [MAL-2026-5230](https://insights.sbomify.com/MAL-2026-5230/): Malicious code in autotel-subscribers (npm) (malicious package)
- [MAL-2026-523](https://insights.sbomify.com/MAL-2026-523/): Malicious code in mapkit-example-svelte (npm) (malicious package)
- [MAL-2026-5229](https://insights.sbomify.com/MAL-2026-5229/): Malicious code in autotel-sentry (npm) (malicious package)
- [MAL-2026-5228](https://insights.sbomify.com/MAL-2026-5228/): Malicious code in autotel-plugins (npm) (malicious package)
- [MAL-2026-5227](https://insights.sbomify.com/MAL-2026-5227/): Malicious code in autotel-playwright (npm) (malicious package)
- [MAL-2026-5226](https://insights.sbomify.com/MAL-2026-5226/): Malicious code in autotel-pact (npm) (malicious package)
- [MAL-2026-5225](https://insights.sbomify.com/MAL-2026-5225/): Malicious code in autotel-mongoose (npm) (malicious package)
- [MAL-2026-5224](https://insights.sbomify.com/MAL-2026-5224/): Malicious code in autotel-mcp-instrumentation (npm) (malicious package)
- [MAL-2026-5223](https://insights.sbomify.com/MAL-2026-5223/): Malicious code in autotel-mcp (npm) (malicious package)
- [MAL-2026-5222](https://insights.sbomify.com/MAL-2026-5222/): Malicious code in autotel-hono (npm) (malicious package)
- [MAL-2026-5221](https://insights.sbomify.com/MAL-2026-5221/): Malicious code in autotel-eventcatalog (npm) (malicious package)
- [MAL-2026-5220](https://insights.sbomify.com/MAL-2026-5220/): Malicious code in autotel-edge (npm) (malicious package)
- [MAL-2026-522](https://insights.sbomify.com/MAL-2026-522/): Malicious code in magento-coding-standard-eslint-plugin (npm) (malicious package)
- [MAL-2026-5219](https://insights.sbomify.com/MAL-2026-5219/): Malicious code in autotel-drizzle (npm) (malicious package)
- [MAL-2026-5218](https://insights.sbomify.com/MAL-2026-5218/): Malicious code in autotel-devtools (npm) (malicious package)
- [MAL-2026-5217](https://insights.sbomify.com/MAL-2026-5217/): Malicious code in autotel-cloudflare (npm) (malicious package)
- [MAL-2026-5216](https://insights.sbomify.com/MAL-2026-5216/): Malicious code in autotel-cli (npm) (malicious package)
- [MAL-2026-5215](https://insights.sbomify.com/MAL-2026-5215/): Malicious code in autotel-backends (npm) (malicious package)
- [MAL-2026-5214](https://insights.sbomify.com/MAL-2026-5214/): Malicious code in autotel-aws (npm) (malicious package)
- [MAL-2026-5213](https://insights.sbomify.com/MAL-2026-5213/): Malicious code in autotel-audit (npm) (malicious package)
- [MAL-2026-5212](https://insights.sbomify.com/MAL-2026-5212/): Malicious code in autotel-adapters (npm) (malicious package)
- [MAL-2026-5211](https://insights.sbomify.com/MAL-2026-5211/): Malicious code in autotel (npm) (malicious package)
- [MAL-2026-5210](https://insights.sbomify.com/MAL-2026-5210/): Malicious code in ai-sdk-ollama (npm) (malicious package)
- [MAL-2026-521](https://insights.sbomify.com/MAL-2026-521/): Malicious code in hammer-jquery (npm) (malicious package)
- [MAL-2026-5209](https://insights.sbomify.com/MAL-2026-5209/): Malicious code in @vapi-ai/server-sdk (npm) (malicious package)
- [MAL-2026-5208](https://insights.sbomify.com/MAL-2026-5208/): Malicious code in @forjacms/sections-react (npm) (malicious package)
- [MAL-2026-5207](https://insights.sbomify.com/MAL-2026-5207/): Malicious code in @forjacms/sections (npm) (malicious package)
- [MAL-2026-5206](https://insights.sbomify.com/MAL-2026-5206/): Malicious code in @forjacms/client (npm) (malicious package)
- [MAL-2026-5205](https://insights.sbomify.com/MAL-2026-5205/): Malicious code in @forjacms/analytics (npm) (malicious package)
- [MAL-2026-5204](https://insights.sbomify.com/MAL-2026-5204/): Malicious code in @ethlete/types (npm) (malicious package)
- [MAL-2026-5203](https://insights.sbomify.com/MAL-2026-5203/): Malicious code in @ethlete/theming (npm) (malicious package)
- [MAL-2026-5202](https://insights.sbomify.com/MAL-2026-5202/): Malicious code in @ethlete/query (npm) (malicious package)
- [MAL-2026-5201](https://insights.sbomify.com/MAL-2026-5201/): Malicious code in @ethlete/dsp (npm) (malicious package)
- [MAL-2026-5200](https://insights.sbomify.com/MAL-2026-5200/): Malicious code in @ethlete/core (npm) (malicious package)
- [MAL-2026-520](https://insights.sbomify.com/MAL-2026-520/): Malicious code in ftm-noderpc (npm) (malicious package)
- [MAL-2026-52](https://insights.sbomify.com/MAL-2026-52/): Malicious code in celium-collateral-upgrade (PyPI) (malicious package)
- [MAL-2026-5199](https://insights.sbomify.com/MAL-2026-5199/): Malicious code in @ethlete/contentful (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/62/