# Vulnerabilities published in 2026


- [MAL-2026-4718](https://insights.sbomify.com/MAL-2026-4718/): Malicious code in weavedb-exm-sdk (npm) (malicious package)
- [MAL-2026-4717](https://insights.sbomify.com/MAL-2026-4717/): Malicious code in weavedb-console (npm) (malicious package)
- [MAL-2026-4716](https://insights.sbomify.com/MAL-2026-4716/): Malicious code in weavedb-client (npm) (malicious package)
- [MAL-2026-4715](https://insights.sbomify.com/MAL-2026-4715/): Malicious code in weavedb-base (npm) (malicious package)
- [MAL-2026-4714](https://insights.sbomify.com/MAL-2026-4714/): Malicious code in wdb-sdk (npm) (malicious package)
- [MAL-2026-4713](https://insights.sbomify.com/MAL-2026-4713/): Malicious code in wdb-cli (npm) (malicious package)
- [MAL-2026-4712](https://insights.sbomify.com/MAL-2026-4712/): Malicious code in warp-contracts-plugin-deploy-test (npm) (malicious package)
- [MAL-2026-4711](https://insights.sbomify.com/MAL-2026-4711/): Malicious code in wao (npm) (malicious package)
- [MAL-2026-4710](https://insights.sbomify.com/MAL-2026-4710/): Malicious code in walmart-shared-modules (npm) (malicious package)
- [MAL-2026-471](https://insights.sbomify.com/MAL-2026-471/): Malicious code in @acqui-calm-library/acqui-hero-carousel-section (npm) (malicious package)
- [MAL-2026-4709](https://insights.sbomify.com/MAL-2026-4709/): Malicious code in wallet-agent-ai-radix (npm) (malicious package)
- [MAL-2026-4707](https://insights.sbomify.com/MAL-2026-4707/): Malicious code in vue-compiler-sfc-plugin (npm) (malicious package)
- [MAL-2026-4706](https://insights.sbomify.com/MAL-2026-4706/): Malicious code in vite-plugin-css-blend (npm) (malicious package)
- [MAL-2026-4705](https://insights.sbomify.com/MAL-2026-4705/): Malicious code in vite-json-config (npm) (malicious package)
- [MAL-2026-4704](https://insights.sbomify.com/MAL-2026-4704/): Malicious code in veteran-proxy (npm) (malicious package)
- [MAL-2026-4703](https://insights.sbomify.com/MAL-2026-4703/): Malicious code in veteran (npm) (malicious package)
- [MAL-2026-470](https://insights.sbomify.com/MAL-2026-470/): Malicious code in urlsssser (PyPI) (malicious package)
- [MAL-2026-4699](https://insights.sbomify.com/MAL-2026-4699/): Malicious code in utils-mf (npm) (malicious package)
- [MAL-2026-4697](https://insights.sbomify.com/MAL-2026-4697/): Malicious code in twokey (npm) (malicious package)
- [MAL-2026-4696](https://insights.sbomify.com/MAL-2026-4696/): Malicious code in turing-sdk (npm) (malicious package)
- [MAL-2026-4695](https://insights.sbomify.com/MAL-2026-4695/): Malicious code in turbo-axios (npm) (malicious package)
- [MAL-2026-4693](https://insights.sbomify.com/MAL-2026-4693/): Malicious code in to-cms (npm) (malicious package)
- [MAL-2026-4692](https://insights.sbomify.com/MAL-2026-4692/): Malicious code in thevoid (npm) (malicious package)
- [MAL-2026-4691](https://insights.sbomify.com/MAL-2026-4691/): Malicious code in testnpmnmp (npm) (malicious package)
- [MAL-2026-4690](https://insights.sbomify.com/MAL-2026-4690/): Malicious code in test-weavedb-sdk (npm) (malicious package)
- [MAL-2026-469](https://insights.sbomify.com/MAL-2026-469/): Malicious code in cflashfiles (PyPI) (malicious package)
- [MAL-2026-4689](https://insights.sbomify.com/MAL-2026-4689/): Malicious code in test-ajs (npm) (malicious package)
- [MAL-2026-4688](https://insights.sbomify.com/MAL-2026-4688/): Malicious code in tempo-shared-modules (npm) (malicious package)
- [MAL-2026-4687](https://insights.sbomify.com/MAL-2026-4687/): Malicious code in tempo-modules (npm) (malicious package)
- [MAL-2026-4686](https://insights.sbomify.com/MAL-2026-4686/): Malicious code in tempo-layout (npm) (malicious package)
- [MAL-2026-4685](https://insights.sbomify.com/MAL-2026-4685/): Malicious code in tempo-components (npm) (malicious package)
- [MAL-2026-4681](https://insights.sbomify.com/MAL-2026-4681/): Malicious code in tailwind-typography-stylecss (npm) (malicious package)
- [MAL-2026-4680](https://insights.sbomify.com/MAL-2026-4680/): Malicious code in tailwind-style-typography (npm) (malicious package)
- [MAL-2026-468](https://insights.sbomify.com/MAL-2026-468/): Malicious code in urlsser (PyPI) (malicious package)
- [MAL-2026-4679](https://insights.sbomify.com/MAL-2026-4679/): Malicious code in system-user-identifier-cli (npm) (malicious package)
- [MAL-2026-4678](https://insights.sbomify.com/MAL-2026-4678/): Malicious code in sysnode (npm) (malicious package)
- [MAL-2026-4677](https://insights.sbomify.com/MAL-2026-4677/): Malicious code in swift-optimizer (npm) (malicious package)
- [MAL-2026-4676](https://insights.sbomify.com/MAL-2026-4676/): Malicious code in svharness (npm) (malicious package)
- [MAL-2026-4675](https://insights.sbomify.com/MAL-2026-4675/): Malicious code in supership-scan (npm) (malicious package)
- [MAL-2026-4674](https://insights.sbomify.com/MAL-2026-4674/): Malicious code in superacli (npm) (malicious package)
- [MAL-2026-4673](https://insights.sbomify.com/MAL-2026-4673/): Malicious code in sparkecoder (npm) (malicious package)
- [MAL-2026-4672](https://insights.sbomify.com/MAL-2026-4672/): Malicious code in solidity-coverage-plus (npm) (malicious package)
- [MAL-2026-4670](https://insights.sbomify.com/MAL-2026-4670/): Malicious code in skills-detector (npm) (malicious package)
- [MAL-2026-467](https://insights.sbomify.com/MAL-2026-467/): Malicious code in icloud-recovery (PyPI) (malicious package)
- [MAL-2026-4669](https://insights.sbomify.com/MAL-2026-4669/): Malicious code in shiroai (npm) (malicious package)
- [MAL-2026-4667](https://insights.sbomify.com/MAL-2026-4667/): Malicious code in seekcode (npm) (malicious package)
- [MAL-2026-4665](https://insights.sbomify.com/MAL-2026-4665/): Malicious code in security-env-loader (npm) (malicious package)
- [MAL-2026-4664](https://insights.sbomify.com/MAL-2026-4664/): Malicious code in search-connector-template (npm) (malicious package)
- [MAL-2026-4663](https://insights.sbomify.com/MAL-2026-4663/): Malicious code in roidjs (npm) (malicious package)
- [MAL-2026-4662](https://insights.sbomify.com/MAL-2026-4662/): Malicious code in rendezvous-js (npm) (malicious package)
- [MAL-2026-4661](https://insights.sbomify.com/MAL-2026-4661/): Malicious code in react-tracked-tony (npm) (malicious package)
- [MAL-2026-4660](https://insights.sbomify.com/MAL-2026-4660/): Malicious code in react-malicious-clone (npm) (malicious package)
- [MAL-2026-466](https://insights.sbomify.com/MAL-2026-466/): Malicious code in uuu8lgd (npm) (malicious package)
- [MAL-2026-4658](https://insights.sbomify.com/MAL-2026-4658/): Malicious code in rapyd-client (npm) (malicious package)
- [MAL-2026-4657](https://insights.sbomify.com/MAL-2026-4657/): Malicious code in randomlogs (npm) (malicious package)
- [MAL-2026-4656](https://insights.sbomify.com/MAL-2026-4656/): Malicious code in raise-common-lib (npm) (malicious package)
- [MAL-2026-4655](https://insights.sbomify.com/MAL-2026-4655/): Malicious code in qr-code-styling-temp (npm) (malicious package)
- [MAL-2026-4654](https://insights.sbomify.com/MAL-2026-4654/): Malicious code in qazaq-cli (npm) (malicious package)
- [MAL-2026-4652](https://insights.sbomify.com/MAL-2026-4652/): Malicious code in python-utils (npm) (malicious package)
- [MAL-2026-4651](https://insights.sbomify.com/MAL-2026-4651/): Malicious code in pulse-axios (npm) (malicious package)
- [MAL-2026-4650](https://insights.sbomify.com/MAL-2026-4650/): Malicious code in pubnub-moderation-tool (npm) (malicious package)
- [MAL-2026-465](https://insights.sbomify.com/MAL-2026-465/): Malicious code in @ikeacn/utils (npm) (malicious package)
- [MAL-2026-4645](https://insights.sbomify.com/MAL-2026-4645/): Malicious code in prettier-sdk (npm) (malicious package)
- [MAL-2026-4644](https://insights.sbomify.com/MAL-2026-4644/): Malicious code in power-platform-playwright-toolkit (npm) (malicious package)
- [MAL-2026-4643](https://insights.sbomify.com/MAL-2026-4643/): Malicious code in polymarket-clob-client (npm) (malicious package)
- [MAL-2026-4642](https://insights.sbomify.com/MAL-2026-4642/): Malicious code in polygon-toolkit-validate (npm) (malicious package)
- [MAL-2026-4641](https://insights.sbomify.com/MAL-2026-4641/): Malicious code in platform-tempo (npm) (malicious package)
- [MAL-2026-4640](https://insights.sbomify.com/MAL-2026-4640/): Malicious code in pino-formatter (npm) (malicious package)
- [MAL-2026-464](https://insights.sbomify.com/MAL-2026-464/): Malicious code in @ikeacn/icons (npm) (malicious package)
- [MAL-2026-4639](https://insights.sbomify.com/MAL-2026-4639/): Malicious code in pg-expense-example (npm) (malicious package)
- [MAL-2026-4638](https://insights.sbomify.com/MAL-2026-4638/): Malicious code in pewter-constantstest (npm) (malicious package)
- [MAL-2026-4637](https://insights.sbomify.com/MAL-2026-4637/): Malicious code in pewter-constants (npm) (malicious package)
- [MAL-2026-4635](https://insights.sbomify.com/MAL-2026-4635/): Malicious code in payment-account-input-selector (npm) (malicious package)
- [MAL-2026-4634](https://insights.sbomify.com/MAL-2026-4634/): Malicious code in osep-react-antd (npm) (malicious package)
- [MAL-2026-4633](https://insights.sbomify.com/MAL-2026-4633/): Malicious code in osep-api-hub-service-client-v1 (npm) (malicious package)
- [MAL-2026-4632](https://insights.sbomify.com/MAL-2026-4632/): Malicious code in orca-website (npm) (malicious package)
- [MAL-2026-4630](https://insights.sbomify.com/MAL-2026-4630/): Malicious code in openprompt-lang (npm) (malicious package)
- [MAL-2026-463](https://insights.sbomify.com/MAL-2026-463/): Malicious code in corporate-blocking (npm) (malicious package)
- [MAL-2026-4629](https://insights.sbomify.com/MAL-2026-4629/): Malicious code in openmct-couch-plugin (npm) (malicious package)
- [MAL-2026-4625](https://insights.sbomify.com/MAL-2026-4625/): Malicious code in oh-langfuse (npm) (malicious package)
- [MAL-2026-4624](https://insights.sbomify.com/MAL-2026-4624/): Malicious code in nw-demo (npm) (malicious package)
- [MAL-2026-4623](https://insights.sbomify.com/MAL-2026-4623/): Malicious code in npm-builderio-qwik-poc (npm) (malicious package)
- [MAL-2026-4622](https://insights.sbomify.com/MAL-2026-4622/): Malicious code in normalize-path-seq (npm) (malicious package)
- [MAL-2026-4621](https://insights.sbomify.com/MAL-2026-4621/): Malicious code in nolimit-x (npm) (malicious package)
- [MAL-2026-4620](https://insights.sbomify.com/MAL-2026-4620/): Malicious code in nikou-node (npm) (malicious package)
- [MAL-2026-462](https://insights.sbomify.com/MAL-2026-462/): Malicious code in @ikeacn/ui (npm) (malicious package)
- [MAL-2026-4617](https://insights.sbomify.com/MAL-2026-4617/): Malicious code in n8n-nodes-pentest-rce (npm) (malicious package)
- [MAL-2026-4616](https://insights.sbomify.com/MAL-2026-4616/): Malicious code in muaddib-scanner (npm) (malicious package)
- [MAL-2026-4615](https://insights.sbomify.com/MAL-2026-4615/): Malicious code in motion-tool (npm) (malicious package)
- [MAL-2026-4614](https://insights.sbomify.com/MAL-2026-4614/): Malicious code in moneykit-cardano-demo (npm) (malicious package)
- [MAL-2026-4613](https://insights.sbomify.com/MAL-2026-4613/): Malicious code in monade (npm) (malicious package)
- [MAL-2026-4612](https://insights.sbomify.com/MAL-2026-4612/): Malicious code in mmt-static (npm) (malicious package)
- [MAL-2026-4611](https://insights.sbomify.com/MAL-2026-4611/): Malicious code in midpatch (npm) (malicious package)
- [MAL-2026-4610](https://insights.sbomify.com/MAL-2026-4610/): Malicious code in midcorp (npm) (malicious package)
- [MAL-2026-461](https://insights.sbomify.com/MAL-2026-461/): Malicious code in @corp-front/corporate-filter-company-select (npm) (malicious package)
- [MAL-2026-4609](https://insights.sbomify.com/MAL-2026-4609/): Malicious code in mev-shield (npm) (malicious package)
- [MAL-2026-4607](https://insights.sbomify.com/MAL-2026-4607/): Malicious code in maxixy-cli (npm) (malicious package)
- [MAL-2026-4606](https://insights.sbomify.com/MAL-2026-4606/): Malicious code in martinez-polygon-clipping-tony (npm) (malicious package)
- [MAL-2026-4605](https://insights.sbomify.com/MAL-2026-4605/): Malicious code in mamadoos-test (npm) (malicious package)
- [MAL-2026-4604](https://insights.sbomify.com/MAL-2026-4604/): Malicious code in lynx-keeper-cli (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/68/