# Vulnerabilities published in 2026


- [MAL-2026-4926](https://insights.sbomify.com/MAL-2026-4926/): Malicious code in @cloudplatform-single-spa/logaas (npm) (malicious package)
- [MAL-2026-4925](https://insights.sbomify.com/MAL-2026-4925/): Malicious code in @cloudplatform-single-spa/key-manager (npm) (malicious package)
- [MAL-2026-4924](https://insights.sbomify.com/MAL-2026-4924/): Malicious code in @cloudplatform-single-spa/installations (npm) (malicious package)
- [MAL-2026-4923](https://insights.sbomify.com/MAL-2026-4923/): Malicious code in @cloudplatform-single-spa/iam (npm) (malicious package)
- [MAL-2026-4922](https://insights.sbomify.com/MAL-2026-4922/): Malicious code in @cloudplatform-single-spa/floating-ips (npm) (malicious package)
- [MAL-2026-4921](https://insights.sbomify.com/MAL-2026-4921/): Malicious code in @cloudplatform-single-spa/evolution (npm) (malicious package)
- [MAL-2026-4920](https://insights.sbomify.com/MAL-2026-4920/): Malicious code in @cloudplatform-single-spa/evocs (npm) (malicious package)
- [MAL-2026-492](https://insights.sbomify.com/MAL-2026-492/): Malicious code in tableates (PyPI) (malicious package)
- [MAL-2026-4919](https://insights.sbomify.com/MAL-2026-4919/): Malicious code in @cloudplatform-single-spa/event-bus (npm) (malicious package)
- [MAL-2026-4918](https://insights.sbomify.com/MAL-2026-4918/): Malicious code in @cloudplatform-single-spa/enterprise (npm) (malicious package)
- [MAL-2026-4917](https://insights.sbomify.com/MAL-2026-4917/): Malicious code in @cloudplatform-single-spa/employees (npm) (malicious package)
- [MAL-2026-4916](https://insights.sbomify.com/MAL-2026-4916/): Malicious code in @cloudplatform-single-spa/edge-manager (npm) (malicious package)
- [MAL-2026-4915](https://insights.sbomify.com/MAL-2026-4915/): Malicious code in @cloudplatform-single-spa/document-db (npm) (malicious package)
- [MAL-2026-4914](https://insights.sbomify.com/MAL-2026-4914/): Malicious code in @cloudplatform-single-spa/dns (npm) (malicious package)
- [MAL-2026-4913](https://insights.sbomify.com/MAL-2026-4913/): Malicious code in @cloudplatform-single-spa/disks (npm) (malicious package)
- [MAL-2026-4912](https://insights.sbomify.com/MAL-2026-4912/): Malicious code in @cloudplatform-single-spa/dataplatform-trino (npm) (malicious package)
- [MAL-2026-4911](https://insights.sbomify.com/MAL-2026-4911/): Malicious code in @cloudplatform-single-spa/dataplatform-spark (npm) (malicious package)
- [MAL-2026-4910](https://insights.sbomify.com/MAL-2026-4910/): Malicious code in @cloudplatform-single-spa/dataplatform-nessie (npm) (malicious package)
- [MAL-2026-491](https://insights.sbomify.com/MAL-2026-491/): Malicious code in test-on-other-again (npm) (malicious package)
- [MAL-2026-4909](https://insights.sbomify.com/MAL-2026-4909/): Malicious code in @cloudplatform-single-spa/dataplatform-metastore (npm) (malicious package)
- [MAL-2026-4908](https://insights.sbomify.com/MAL-2026-4908/): Malicious code in @cloudplatform-single-spa/dataplatform-flink (npm) (malicious package)
- [MAL-2026-4907](https://insights.sbomify.com/MAL-2026-4907/): Malicious code in @cloudplatform-single-spa/dataplatform-connections (npm) (malicious package)
- [MAL-2026-4906](https://insights.sbomify.com/MAL-2026-4906/): Malicious code in @cloudplatform-single-spa/dataplatform-clusters (npm) (malicious package)
- [MAL-2026-4905](https://insights.sbomify.com/MAL-2026-4905/): Malicious code in @cloudplatform-single-spa/dataplatform-cloudberry (npm) (malicious package)
- [MAL-2026-4904](https://insights.sbomify.com/MAL-2026-4904/): Malicious code in @cloudplatform-single-spa/dataplatform-bi (npm) (malicious package)
- [MAL-2026-4903](https://insights.sbomify.com/MAL-2026-4903/): Malicious code in @cloudplatform-single-spa/dataplatform (npm) (malicious package)
- [MAL-2026-4902](https://insights.sbomify.com/MAL-2026-4902/): Malicious code in @cloudplatform-single-spa/datagrid (npm) (malicious package)
- [MAL-2026-4901](https://insights.sbomify.com/MAL-2026-4901/): Malicious code in @cloudplatform-single-spa/cp-api-gw (npm) (malicious package)
- [MAL-2026-4900](https://insights.sbomify.com/MAL-2026-4900/): Malicious code in @cloudplatform-single-spa/corax (npm) (malicious package)
- [MAL-2026-490](https://insights.sbomify.com/MAL-2026-490/): Malicious code in tabletes (PyPI) (malicious package)
- [MAL-2026-49](https://insights.sbomify.com/MAL-2026-49/): Malicious code in diskho (npm) (malicious package)
- [MAL-2026-4899](https://insights.sbomify.com/MAL-2026-4899/): Malicious code in @cloudplatform-single-spa/container-registry (npm) (malicious package)
- [MAL-2026-4898](https://insights.sbomify.com/MAL-2026-4898/): Malicious code in @cloudplatform-single-spa/cnapp-ui (npm) (malicious package)
- [MAL-2026-4897](https://insights.sbomify.com/MAL-2026-4897/): Malicious code in @cloudplatform-single-spa/cloudia (npm) (malicious package)
- [MAL-2026-4896](https://insights.sbomify.com/MAL-2026-4896/): Malicious code in @cloudplatform-single-spa/cloud-dns (npm) (malicious package)
- [MAL-2026-4895](https://insights.sbomify.com/MAL-2026-4895/): Malicious code in @cloudplatform-single-spa/clickhouse (npm) (malicious package)
- [MAL-2026-4894](https://insights.sbomify.com/MAL-2026-4894/): Malicious code in @cloudplatform-single-spa/certificate-manager (npm) (malicious package)
- [MAL-2026-4893](https://insights.sbomify.com/MAL-2026-4893/): Malicious code in @cloudplatform-single-spa/business-solutions (npm) (malicious package)
- [MAL-2026-4892](https://insights.sbomify.com/MAL-2026-4892/): Malicious code in @cloudplatform-single-spa/billing (npm) (malicious package)
- [MAL-2026-4891](https://insights.sbomify.com/MAL-2026-4891/): Malicious code in @cloudplatform-single-spa/base-static-page (npm) (malicious package)
- [MAL-2026-4890](https://insights.sbomify.com/MAL-2026-4890/): Malicious code in @cloudplatform-single-spa/bare-metal-servers (npm) (malicious package)
- [MAL-2026-489](https://insights.sbomify.com/MAL-2026-489/): Malicious code in rank4222wun (npm) (malicious package)
- [MAL-2026-4889](https://insights.sbomify.com/MAL-2026-4889/): Malicious code in @cloudplatform-single-spa/audit-log (npm) (malicious package)
- [MAL-2026-4888](https://insights.sbomify.com/MAL-2026-4888/): Malicious code in @cloudplatform-single-spa/arenadata-db (npm) (malicious package)
- [MAL-2026-4887](https://insights.sbomify.com/MAL-2026-4887/): Malicious code in @cloudplatform-single-spa/anti-ddos (npm) (malicious package)
- [MAL-2026-4886](https://insights.sbomify.com/MAL-2026-4886/): Malicious code in @cloudplatform-single-spa/airflow (npm) (malicious package)
- [MAL-2026-4885](https://insights.sbomify.com/MAL-2026-4885/): Malicious code in @cloudplatform-single-spa/aifactory-notebooks (npm) (malicious package)
- [MAL-2026-4884](https://insights.sbomify.com/MAL-2026-4884/): Malicious code in @cloudplatform-single-spa/agreements (npm) (malicious package)
- [MAL-2026-4883](https://insights.sbomify.com/MAL-2026-4883/): Malicious code in @cloudplatform-single-spa/advanced (npm) (malicious package)
- [MAL-2026-4882](https://insights.sbomify.com/MAL-2026-4882/): Malicious code in @cloudplatform-single-spa/administration (npm) (malicious package)
- [MAL-2026-4881](https://insights.sbomify.com/MAL-2026-4881/): Malicious code in @car-loans/wait-task-props (npm) (malicious package)
- [MAL-2026-4880](https://insights.sbomify.com/MAL-2026-4880/): Malicious code in @car-loans/show-car-year-module (npm) (malicious package)
- [MAL-2026-488](https://insights.sbomify.com/MAL-2026-488/): Malicious code in ntwsx (npm) (malicious package)
- [MAL-2026-4879](https://insights.sbomify.com/MAL-2026-4879/): Malicious code in @car-loans/save (npm) (malicious package)
- [MAL-2026-4878](https://insights.sbomify.com/MAL-2026-4878/): Malicious code in @car-loans/safe-storage-module (npm) (malicious package)
- [MAL-2026-4877](https://insights.sbomify.com/MAL-2026-4877/): Malicious code in @car-loans/restore (npm) (malicious package)
- [MAL-2026-4876](https://insights.sbomify.com/MAL-2026-4876/): Malicious code in @car-loans/referrer-module (npm) (malicious package)
- [MAL-2026-4875](https://insights.sbomify.com/MAL-2026-4875/): Malicious code in @car-loans/online-sign-aff (npm) (malicious package)
- [MAL-2026-4874](https://insights.sbomify.com/MAL-2026-4874/): Malicious code in @car-loans/online-scoring-aff (npm) (malicious package)
- [MAL-2026-4873](https://insights.sbomify.com/MAL-2026-4873/): Malicious code in @car-loans/mobile-car-loans-application (npm) (malicious package)
- [MAL-2026-4872](https://insights.sbomify.com/MAL-2026-4872/): Malicious code in @car-loans/gus (npm) (malicious package)
- [MAL-2026-4871](https://insights.sbomify.com/MAL-2026-4871/): Malicious code in @car-loans/general-feature-toggles (npm) (malicious package)
- [MAL-2026-4870](https://insights.sbomify.com/MAL-2026-4870/): Malicious code in @car-loans/general-analytics (npm) (malicious package)
- [MAL-2026-487](https://insights.sbomify.com/MAL-2026-487/): Malicious code in ntwsc (npm) (malicious package)
- [MAL-2026-4869](https://insights.sbomify.com/MAL-2026-4869/): Malicious code in @car-loans/feature-toggles-module (npm) (malicious package)
- [MAL-2026-4868](https://insights.sbomify.com/MAL-2026-4868/): Malicious code in @car-loans/desktop-car-loans-application (npm) (malicious package)
- [MAL-2026-4867](https://insights.sbomify.com/MAL-2026-4867/): Malicious code in @car-loans/deal-aff (npm) (malicious package)
- [MAL-2026-4866](https://insights.sbomify.com/MAL-2026-4866/): Malicious code in @car-loans/deal (npm) (malicious package)
- [MAL-2026-4865](https://insights.sbomify.com/MAL-2026-4865/): Malicious code in @car-loans/close-flow-module (npm) (malicious package)
- [MAL-2026-4864](https://insights.sbomify.com/MAL-2026-4864/): Malicious code in @car-loans/application-aff (npm) (malicious package)
- [MAL-2026-4863](https://insights.sbomify.com/MAL-2026-4863/): Malicious code in @car-loans/applicaion-aff (npm) (malicious package)
- [MAL-2026-4862](https://insights.sbomify.com/MAL-2026-4862/): Malicious code in veloxml-cli (PyPI) (malicious package)
- [MAL-2026-4861](https://insights.sbomify.com/MAL-2026-4861/): Malicious code in lib-1779997093-yjeeqn (PyPI) (malicious package)
- [MAL-2026-4860](https://insights.sbomify.com/MAL-2026-4860/): Malicious code in @qlab/ui (npm) (malicious package)
- [MAL-2026-486](https://insights.sbomify.com/MAL-2026-486/): Malicious code in a5xm (npm) (malicious package)
- [MAL-2026-4859](https://insights.sbomify.com/MAL-2026-4859/): Malicious code in telethon-pro-safe (PyPI) (malicious package)
- [MAL-2026-4858](https://insights.sbomify.com/MAL-2026-4858/): Malicious code in @service-user-notifications/set_refresh_interval (npm) (malicious package)
- [MAL-2026-4857](https://insights.sbomify.com/MAL-2026-4857/): Malicious code in @service-user-notifications/reset_notifications_not_removable (npm) (malicious package)
- [MAL-2026-4856](https://insights.sbomify.com/MAL-2026-4856/): Malicious code in @service-suppliers/set_suppliers_loading_stop (npm) (malicious package)
- [MAL-2026-4855](https://insights.sbomify.com/MAL-2026-4855/): Malicious code in @service-suppliers/set_suppliers_loading_start (npm) (malicious package)
- [MAL-2026-4854](https://insights.sbomify.com/MAL-2026-4854/): Malicious code in @service-suppliers/set_suppliers_data (npm) (malicious package)
- [MAL-2026-4853](https://insights.sbomify.com/MAL-2026-4853/): Malicious code in @service-suppliers/set_selected_supplier_action_saga (npm) (malicious package)
- [MAL-2026-4852](https://insights.sbomify.com/MAL-2026-4852/): Malicious code in @service-suppliers/set_initial_loaded (npm) (malicious package)
- [MAL-2026-4851](https://insights.sbomify.com/MAL-2026-4851/): Malicious code in @service-suppliers/set_country_list (npm) (malicious package)
- [MAL-2026-4850](https://insights.sbomify.com/MAL-2026-4850/): Malicious code in @service-suppliers/reset_country_list (npm) (malicious package)
- [MAL-2026-485](https://insights.sbomify.com/MAL-2026-485/): Malicious code in a4wu (npm) (malicious package)
- [MAL-2026-4849](https://insights.sbomify.com/MAL-2026-4849/): Malicious code in @service-suppliers/fetch_suppliers_country_list_action_saga (npm) (malicious package)
- [MAL-2026-4848](https://insights.sbomify.com/MAL-2026-4848/): Malicious code in @service-suppliers/fetch_initial_suppliers_action_saga (npm) (malicious package)
- [MAL-2026-4847](https://insights.sbomify.com/MAL-2026-4847/): Malicious code in @service-suppliers/fetch-suppliers-watcher-saga (npm) (malicious package)
- [MAL-2026-4846](https://insights.sbomify.com/MAL-2026-4846/): Malicious code in @service-suppliers/fetch-initial-suppliers-watcher-saga (npm) (malicious package)
- [MAL-2026-4845](https://insights.sbomify.com/MAL-2026-4845/): Malicious code in @polka-ui/recoc (npm) (malicious package)
- [MAL-2026-4844](https://insights.sbomify.com/MAL-2026-4844/): Malicious code in @polka-ui/reco (npm) (malicious package)
- [MAL-2026-4843](https://insights.sbomify.com/MAL-2026-4843/): Malicious code in @polka-ui/loads (npm) (malicious package)
- [MAL-2026-4842](https://insights.sbomify.com/MAL-2026-4842/): Malicious code in @polka-ui/configuration (npm) (malicious package)
- [MAL-2026-4841](https://insights.sbomify.com/MAL-2026-4841/): Malicious code in @hcs-hybrid/uirouter-core (npm) (malicious package)
- [MAL-2026-4840](https://insights.sbomify.com/MAL-2026-4840/): Malicious code in @bcs-bank-complex-ui/deeplink (npm) (malicious package)
- [MAL-2026-484](https://insights.sbomify.com/MAL-2026-484/): Malicious code in translation-note (npm) (malicious package)
- [MAL-2026-4839](https://insights.sbomify.com/MAL-2026-4839/): Malicious code in hellowornd (npm) (malicious package)
- [MAL-2026-4838](https://insights.sbomify.com/MAL-2026-4838/): Malicious code in justsaying-docs (npm) (malicious package)
- [MAL-2026-4837](https://insights.sbomify.com/MAL-2026-4837/): Malicious code in my-test-package-2025-xyz (PyPI) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/66/