# Vulnerabilities published in 2026


- [MAL-2026-5015](https://insights.sbomify.com/MAL-2026-5015/): Malicious code in @mlspace/env-gitlab (npm) (malicious package)
- [MAL-2026-5014](https://insights.sbomify.com/MAL-2026-5014/): Malicious code in @mlspace/dtransfer-history (npm) (malicious package)
- [MAL-2026-5013](https://insights.sbomify.com/MAL-2026-5013/): Malicious code in @mlspace/dtransfer (npm) (malicious package)
- [MAL-2026-5012](https://insights.sbomify.com/MAL-2026-5012/): Malicious code in @mlspace/docker-registry (npm) (malicious package)
- [MAL-2026-5011](https://insights.sbomify.com/MAL-2026-5011/): Malicious code in @mlspace/connectors (npm) (malicious package)
- [MAL-2026-5010](https://insights.sbomify.com/MAL-2026-5010/): Malicious code in @mlspace/allocations (npm) (malicious package)
- [MAL-2026-501](https://insights.sbomify.com/MAL-2026-501/): Malicious code in system-integration-toxi (PyPI) (malicious package)
- [MAL-2026-5009](https://insights.sbomify.com/MAL-2026-5009/): Malicious code in @fb-deposit/form-savings-account (npm) (malicious package)
- [MAL-2026-5008](https://insights.sbomify.com/MAL-2026-5008/): Malicious code in @fb-deposit/form-deposit-calc (npm) (malicious package)
- [MAL-2026-5007](https://insights.sbomify.com/MAL-2026-5007/): Malicious code in @fb-deposit/form-deposit-auth (npm) (malicious package)
- [MAL-2026-5006](https://insights.sbomify.com/MAL-2026-5006/): Malicious code in @fb-deposit/form-deposit (npm) (malicious package)
- [MAL-2026-5005](https://insights.sbomify.com/MAL-2026-5005/): Malicious code in @debit-ib/mobile-debit-ib-additional-card-form (npm) (malicious package)
- [MAL-2026-5004](https://insights.sbomify.com/MAL-2026-5004/): Malicious code in @debit-ib/desktop-debit-ib-additional-card-form (npm) (malicious package)
- [MAL-2026-5003](https://insights.sbomify.com/MAL-2026-5003/): Malicious code in @cloudplatform-single-spa/vpn (npm) (malicious package)
- [MAL-2026-5002](https://insights.sbomify.com/MAL-2026-5002/): Malicious code in @cloudplatform-single-spa/vpc-endpoint (npm) (malicious package)
- [MAL-2026-5001](https://insights.sbomify.com/MAL-2026-5001/): Malicious code in @cloudplatform-single-spa/vpc (npm) (malicious package)
- [MAL-2026-5000](https://insights.sbomify.com/MAL-2026-5000/): Malicious code in @cloudplatform-single-spa/vmware-draas (npm) (malicious package)
- [MAL-2026-500](https://insights.sbomify.com/MAL-2026-500/): Malicious code in zabittest11 (npm) (malicious package)
- [MAL-2026-50](https://insights.sbomify.com/MAL-2026-50/): Malicious code in faceplate-ui (npm) (malicious package)
- [MAL-2026-5](https://insights.sbomify.com/MAL-2026-5/): Malicious code in queryservice-client (PyPI) (malicious package)
- [MAL-2026-4999](https://insights.sbomify.com/MAL-2026-4999/): Malicious code in @cloudplatform-single-spa/vmmanager (npm) (malicious package)
- [MAL-2026-4998](https://insights.sbomify.com/MAL-2026-4998/): Malicious code in @cloudplatform-single-spa/virtual-machines (npm) (malicious package)
- [MAL-2026-4997](https://insights.sbomify.com/MAL-2026-4997/): Malicious code in @cloudplatform-single-spa/virtual-ip (npm) (malicious package)
- [MAL-2026-4996](https://insights.sbomify.com/MAL-2026-4996/): Malicious code in @cloudplatform-single-spa/vdi (npm) (malicious package)
- [MAL-2026-4995](https://insights.sbomify.com/MAL-2026-4995/): Malicious code in @cloudplatform-single-spa/vcenter-virtual-machines (npm) (malicious package)
- [MAL-2026-4994](https://insights.sbomify.com/MAL-2026-4994/): Malicious code in @cloudplatform-single-spa/vcenter-manager (npm) (malicious package)
- [MAL-2026-4993](https://insights.sbomify.com/MAL-2026-4993/): Malicious code in @cloudplatform-single-spa/timescale-db (npm) (malicious package)
- [MAL-2026-4992](https://insights.sbomify.com/MAL-2026-4992/): Malicious code in @cloudplatform-single-spa/svp-vm-migration (npm) (malicious package)
- [MAL-2026-4991](https://insights.sbomify.com/MAL-2026-4991/): Malicious code in @cloudplatform-single-spa/svp-vdi (npm) (malicious package)
- [MAL-2026-4990](https://insights.sbomify.com/MAL-2026-4990/): Malicious code in @cloudplatform-single-spa/svp-tasks (npm) (malicious package)
- [MAL-2026-499](https://insights.sbomify.com/MAL-2026-499/): Malicious code in system-integration (PyPI) (malicious package)
- [MAL-2026-4989](https://insights.sbomify.com/MAL-2026-4989/): Malicious code in @cloudplatform-single-spa/svp-tags (npm) (malicious package)
- [MAL-2026-4988](https://insights.sbomify.com/MAL-2026-4988/): Malicious code in @cloudplatform-single-spa/svp-s3-storage (npm) (malicious package)
- [MAL-2026-4987](https://insights.sbomify.com/MAL-2026-4987/): Malicious code in @cloudplatform-single-spa/svp-pipeline (npm) (malicious package)
- [MAL-2026-4986](https://insights.sbomify.com/MAL-2026-4986/): Malicious code in @cloudplatform-single-spa/svp-managed-kubernetes (npm) (malicious package)
- [MAL-2026-4985](https://insights.sbomify.com/MAL-2026-4985/): Malicious code in @cloudplatform-single-spa/svp-lbaas (npm) (malicious package)
- [MAL-2026-4984](https://insights.sbomify.com/MAL-2026-4984/): Malicious code in @cloudplatform-single-spa/svp-interfaces (npm) (malicious package)
- [MAL-2026-4983](https://insights.sbomify.com/MAL-2026-4983/): Malicious code in @cloudplatform-single-spa/svp-images (npm) (malicious package)
- [MAL-2026-4982](https://insights.sbomify.com/MAL-2026-4982/): Malicious code in @cloudplatform-single-spa/svp-gitaas (npm) (malicious package)
- [MAL-2026-4981](https://insights.sbomify.com/MAL-2026-4981/): Malicious code in @cloudplatform-single-spa/svp-gateways (npm) (malicious package)
- [MAL-2026-4980](https://insights.sbomify.com/MAL-2026-4980/): Malicious code in @cloudplatform-single-spa/svp-draas (npm) (malicious package)
- [MAL-2026-498](https://insights.sbomify.com/MAL-2026-498/): Malicious code in instascan-pro (PyPI) (malicious package)
- [MAL-2026-4979](https://insights.sbomify.com/MAL-2026-4979/): Malicious code in @cloudplatform-single-spa/svp-bare-metal-servers (npm) (malicious package)
- [MAL-2026-4978](https://insights.sbomify.com/MAL-2026-4978/): Malicious code in @cloudplatform-single-spa/svp-baas (npm) (malicious package)
- [MAL-2026-4977](https://insights.sbomify.com/MAL-2026-4977/): Malicious code in @cloudplatform-single-spa/svp-anti-affinity (npm) (malicious package)
- [MAL-2026-4976](https://insights.sbomify.com/MAL-2026-4976/): Malicious code in @cloudplatform-single-spa/svp-agent-backup (npm) (malicious package)
- [MAL-2026-4975](https://insights.sbomify.com/MAL-2026-4975/): Malicious code in @cloudplatform-single-spa/support (npm) (malicious package)
- [MAL-2026-4974](https://insights.sbomify.com/MAL-2026-4974/): Malicious code in @cloudplatform-single-spa/subnets (npm) (malicious package)
- [MAL-2026-4973](https://insights.sbomify.com/MAL-2026-4973/): Malicious code in @cloudplatform-single-spa/static-page (npm) (malicious package)
- [MAL-2026-4972](https://insights.sbomify.com/MAL-2026-4972/): Malicious code in @cloudplatform-single-spa/ssh-keys (npm) (malicious package)
- [MAL-2026-4971](https://insights.sbomify.com/MAL-2026-4971/): Malicious code in @cloudplatform-single-spa/solutions (npm) (malicious package)
- [MAL-2026-4970](https://insights.sbomify.com/MAL-2026-4970/): Malicious code in @cloudplatform-single-spa/smk (npm) (malicious package)
- [MAL-2026-497](https://insights.sbomify.com/MAL-2026-497/): Malicious code in test-on-other (npm) (malicious package)
- [MAL-2026-4969](https://insights.sbomify.com/MAL-2026-4969/): Malicious code in @cloudplatform-single-spa/serverless-containers (npm) (malicious package)
- [MAL-2026-4968](https://insights.sbomify.com/MAL-2026-4968/): Malicious code in @cloudplatform-single-spa/self-service (npm) (malicious package)
- [MAL-2026-4967](https://insights.sbomify.com/MAL-2026-4967/): Malicious code in @cloudplatform-single-spa/security-groups (npm) (malicious package)
- [MAL-2026-4966](https://insights.sbomify.com/MAL-2026-4966/): Malicious code in @cloudplatform-single-spa/secret-manager (npm) (malicious package)
- [MAL-2026-4965](https://insights.sbomify.com/MAL-2026-4965/): Malicious code in @cloudplatform-single-spa/search (npm) (malicious package)
- [MAL-2026-4964](https://insights.sbomify.com/MAL-2026-4964/): Malicious code in @cloudplatform-single-spa/resource-manager (npm) (malicious package)
- [MAL-2026-4963](https://insights.sbomify.com/MAL-2026-4963/): Malicious code in @cloudplatform-single-spa/redirect (npm) (malicious package)
- [MAL-2026-4962](https://insights.sbomify.com/MAL-2026-4962/): Malicious code in @cloudplatform-single-spa/rabbitmq (npm) (malicious package)
- [MAL-2026-4961](https://insights.sbomify.com/MAL-2026-4961/): Malicious code in @cloudplatform-single-spa/profile (npm) (malicious package)
- [MAL-2026-4960](https://insights.sbomify.com/MAL-2026-4960/): Malicious code in @cloudplatform-single-spa/postgre (npm) (malicious package)
- [MAL-2026-496](https://insights.sbomify.com/MAL-2026-496/): Malicious code in hemi-btc-staking-actions (npm) (malicious package)
- [MAL-2026-4959](https://insights.sbomify.com/MAL-2026-4959/): Malicious code in @cloudplatform-single-spa/pangolin (npm) (malicious package)
- [MAL-2026-4958](https://insights.sbomify.com/MAL-2026-4958/): Malicious code in @cloudplatform-single-spa/paas-redis (npm) (malicious package)
- [MAL-2026-4957](https://insights.sbomify.com/MAL-2026-4957/): Malicious code in @cloudplatform-single-spa/paas-kafka (npm) (malicious package)
- [MAL-2026-4956](https://insights.sbomify.com/MAL-2026-4956/): Malicious code in @cloudplatform-single-spa/opensearch (npm) (malicious package)
- [MAL-2026-4955](https://insights.sbomify.com/MAL-2026-4955/): Malicious code in @cloudplatform-single-spa/onboarding (npm) (malicious package)
- [MAL-2026-4954](https://insights.sbomify.com/MAL-2026-4954/): Malicious code in @cloudplatform-single-spa/observability (npm) (malicious package)
- [MAL-2026-4953](https://insights.sbomify.com/MAL-2026-4953/): Malicious code in @cloudplatform-single-spa/notification-gateway (npm) (malicious package)
- [MAL-2026-4952](https://insights.sbomify.com/MAL-2026-4952/): Malicious code in @cloudplatform-single-spa/monitoring (npm) (malicious package)
- [MAL-2026-4951](https://insights.sbomify.com/MAL-2026-4951/): Malicious code in @cloudplatform-single-spa/monaas-ui (npm) (malicious package)
- [MAL-2026-4950](https://insights.sbomify.com/MAL-2026-4950/): Malicious code in @cloudplatform-single-spa/mlspace-access-request (npm) (malicious package)
- [MAL-2026-495](https://insights.sbomify.com/MAL-2026-495/): Malicious code in h-jsencrypt (npm) (malicious package)
- [MAL-2026-4949](https://insights.sbomify.com/MAL-2026-4949/): Malicious code in @cloudplatform-single-spa/ml-rag (npm) (malicious package)
- [MAL-2026-4948](https://insights.sbomify.com/MAL-2026-4948/): Malicious code in @cloudplatform-single-spa/ml-inference-router (npm) (malicious package)
- [MAL-2026-4947](https://insights.sbomify.com/MAL-2026-4947/): Malicious code in @cloudplatform-single-spa/ml-inference-model-run (npm) (malicious package)
- [MAL-2026-4946](https://insights.sbomify.com/MAL-2026-4946/): Malicious code in @cloudplatform-single-spa/ml-inference-marketplace (npm) (malicious package)
- [MAL-2026-4945](https://insights.sbomify.com/MAL-2026-4945/): Malicious code in @cloudplatform-single-spa/ml-inference-docker-run (npm) (malicious package)
- [MAL-2026-4944](https://insights.sbomify.com/MAL-2026-4944/): Malicious code in @cloudplatform-single-spa/ml-inference-comfy-run (npm) (malicious package)
- [MAL-2026-4943](https://insights.sbomify.com/MAL-2026-4943/): Malicious code in @cloudplatform-single-spa/ml-inference (npm) (malicious package)
- [MAL-2026-4942](https://insights.sbomify.com/MAL-2026-4942/): Malicious code in @cloudplatform-single-spa/ml-foundation-models (npm) (malicious package)
- [MAL-2026-4941](https://insights.sbomify.com/MAL-2026-4941/): Malicious code in @cloudplatform-single-spa/ml-finetuning (npm) (malicious package)
- [MAL-2026-4940](https://insights.sbomify.com/MAL-2026-4940/): Malicious code in @cloudplatform-single-spa/ml-ai-agents-trigger (npm) (malicious package)
- [MAL-2026-494](https://insights.sbomify.com/MAL-2026-494/): Malicious code in eits (npm) (malicious package)
- [MAL-2026-4939](https://insights.sbomify.com/MAL-2026-4939/): Malicious code in @cloudplatform-single-spa/ml-ai-agents-system-prompt (npm) (malicious package)
- [MAL-2026-4938](https://insights.sbomify.com/MAL-2026-4938/): Malicious code in @cloudplatform-single-spa/ml-ai-agents-mcp-server (npm) (malicious package)
- [MAL-2026-4937](https://insights.sbomify.com/MAL-2026-4937/): Malicious code in @cloudplatform-single-spa/ml-ai-agents-marketplace (npm) (malicious package)
- [MAL-2026-4936](https://insights.sbomify.com/MAL-2026-4936/): Malicious code in @cloudplatform-single-spa/ml-ai-agents-ide (npm) (malicious package)
- [MAL-2026-4935](https://insights.sbomify.com/MAL-2026-4935/): Malicious code in @cloudplatform-single-spa/ml-ai-agents-evo-claw (npm) (malicious package)
- [MAL-2026-4934](https://insights.sbomify.com/MAL-2026-4934/): Malicious code in @cloudplatform-single-spa/ml-ai-agents-agent-system (npm) (malicious package)
- [MAL-2026-4933](https://insights.sbomify.com/MAL-2026-4933/): Malicious code in @cloudplatform-single-spa/ml-ai-agents-agent (npm) (malicious package)
- [MAL-2026-4932](https://insights.sbomify.com/MAL-2026-4932/): Malicious code in @cloudplatform-single-spa/marketplace-main (npm) (malicious package)
- [MAL-2026-4931](https://insights.sbomify.com/MAL-2026-4931/): Malicious code in @cloudplatform-single-spa/marketplace-gigachat (npm) (malicious package)
- [MAL-2026-4930](https://insights.sbomify.com/MAL-2026-4930/): Malicious code in @cloudplatform-single-spa/marketplace-apps (npm) (malicious package)
- [MAL-2026-493](https://insights.sbomify.com/MAL-2026-493/): Malicious code in oxnoxon (npm) (malicious package)
- [MAL-2026-4929](https://insights.sbomify.com/MAL-2026-4929/): Malicious code in @cloudplatform-single-spa/managed-identities (npm) (malicious package)
- [MAL-2026-4928](https://insights.sbomify.com/MAL-2026-4928/): Malicious code in @cloudplatform-single-spa/magic-router (npm) (malicious package)
- [MAL-2026-4927](https://insights.sbomify.com/MAL-2026-4927/): Malicious code in @cloudplatform-single-spa/magic-bridge (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/65/