Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 70 of 1013.
- MAL-2026-450 Malicious code in sympy-dev (PyPI)
- MAL-2026-45 Malicious code in @signify/vue-components (npm)
- MAL-2026-4499 Malicious code in bolt-delivery-menu-app (npm)
- MAL-2026-4498 Malicious code in bitrix24-tasks-mcp-server (npm)
- MAL-2026-4497 Malicious code in bingocode (npm)
- MAL-2026-4496 Malicious code in bandkit (npm)
- MAL-2026-4495 Malicious code in banana-stand (npm)
- MAL-2026-4494 Malicious code in axois-utils (npm)
- MAL-2026-4493 Malicious code in axiosqqq (npm)
- MAL-2026-4492 Malicious code in autoheal-dev-cli (npm)
- MAL-2026-4491 Malicious code in authcascade (npm)
- MAL-2026-4490 Malicious code in auth0-templates-scripts-utils (npm)
- MAL-2026-449 Malicious code in icloudprocessor (PyPI)
- MAL-2026-4489 Malicious code in auth0-templates-scripts (npm)
- MAL-2026-4488 Malicious code in auth-basic-vault (npm)
- MAL-2026-4487 Malicious code in audit-logsss (npm)
- MAL-2026-4486 Malicious code in atomic-notes (npm)
- MAL-2026-4483 Malicious code in arnext-arkb (npm)
- MAL-2026-4482 Malicious code in arnext (npm)
- MAL-2026-4481 Malicious code in arc-diag-util (npm)
- MAL-2026-4480 Malicious code in aonote (npm)
- MAL-2026-448 Malicious code in rank253222 (npm)
- MAL-2026-4479 Malicious code in anthropic-shared-logger (npm)
- MAL-2026-4477 Malicious code in allbridge-example-react (npm)
- MAL-2026-4476 Malicious code in ai3 (npm)
- MAL-2026-4475 Malicious code in aes-decode-runner-pro (npm)
- MAL-2026-4473 Malicious code in @zizie071/libsignal-node (npm)
- MAL-2026-4472 Malicious code in @zhengshuo888/huoke (npm)
- MAL-2026-447 Malicious code in ttam-ploy (PyPI)
- MAL-2026-4467 Malicious code in @weirdorg/dotenv (npm)
- MAL-2026-4466 Malicious code in @weirdorg/config (npm)
- MAL-2026-4465 Malicious code in @web-3d-tool/sdk (npm)
- MAL-2026-4464 Malicious code in @vtmn-play/react (npm)
- MAL-2026-4463 Malicious code in @vivaux/telemetry (npm)
- MAL-2026-4460 Malicious code in @trackking/core (npm)
- MAL-2026-446 Malicious code in code-transfering-4 (PyPI)
- MAL-2026-445 Malicious code in code-transfering-3 (PyPI)
- MAL-2026-4446 Malicious code in @solarcraft/observix (npm)
- MAL-2026-4444 Malicious code in @shwfed/nuxt (npm)
- MAL-2026-4440 Malicious code in @serviceshub/x-web-core (npm)
- MAL-2026-444 Malicious code in terminalbrush (PyPI)
- MAL-2026-4439 Malicious code in @service-user-notifications/set_notifications_not_removable (npm)
- MAL-2026-4438 Malicious code in @service-suppliers/suppliers (npm)
- MAL-2026-4437 Malicious code in @service-suppliers/set_selected_supplier (npm)
- MAL-2026-4436 Malicious code in @service-suppliers/select-supplier-watcher-saga (npm)
- MAL-2026-4435 Malicious code in @service-suppliers/fetch_suppliers_action_saga (npm)
- MAL-2026-4432 Malicious code in @sec-loans-ui/utils (npm)
- MAL-2026-443 Malicious code in 1q847 (PyPI)
- MAL-2026-4427 Malicious code in @rocketreach/rr-components (npm)
- MAL-2026-4425 Malicious code in @riskine-frontend/design-elements (npm)
- MAL-2026-4424 Malicious code in @remitee-money-transfer/rmt-base (npm)
- MAL-2026-4422 Malicious code in @qwedqwed/axios (npm)
- MAL-2026-4421 Malicious code in @pulse-web-platform-core/scripts-loader (npm)
- MAL-2026-4420 Malicious code in @polka-ui/loader (npm)
- MAL-2026-442 Malicious code in xadauiom (PyPI)
- MAL-2026-4418 Malicious code in @pluxee-connect/api-client (npm)
- MAL-2026-441 Malicious code in spellcheckpy (PyPI)
- MAL-2026-4404 Malicious code in @loans/vehicles-api (npm)
- MAL-2026-440 Malicious code in anduril-lattice-sdk-grpc-python (PyPI)
- MAL-2026-44 Malicious code in @airtel-web/legos (npm)
- MAL-2026-4396 Malicious code in @izumiswap/sdk (npm)
- MAL-2026-4394 Malicious code in @ikyyofc/gemini-cli (npm)
- MAL-2026-4393 Malicious code in @hanssoft/libsignal-node (npm)
- MAL-2026-4391 Malicious code in @gad360/apothem (npm)
- MAL-2026-439 Malicious code in tv-admin-commons (npm)
- MAL-2026-4389 Malicious code in @flipbit2-bb/test-auth-state (npm)
- MAL-2026-4385 Malicious code in @druids/ui (npm)
- MAL-2026-4382 Malicious code in @djessicatony/folk-mcp-canary (npm)
- MAL-2026-438 Malicious code in ts-tweetnacl-utils (npm)
- MAL-2026-4379 Malicious code in @deadcode09284814/axios-util (npm)
- MAL-2026-4378 Malicious code in @databus-service-ui/scroll-up-content (npm)
- MAL-2026-437 Malicious code in lumo-api-client (npm)
- MAL-2026-436 Malicious code in jquery-ajaxchimp (npm)
- MAL-2026-4358 Malicious code in mistral-search-toolkit (PyPI)
- MAL-2026-4357 Malicious code in helu (PyPI)
- MAL-2026-4356 Malicious code in testing-on-npmjs (npm)
- MAL-2026-4355 Malicious code in mistral-workflows-plugins-webhook (PyPI)
- MAL-2026-4354 Malicious code in mistral-workflows-plugins-mistralai (PyPI)
- MAL-2026-4353 Malicious code in mistral-workflows (PyPI)
- MAL-2026-4352 Malicious code in xarc-webpack-cli (npm)
- MAL-2026-4351 Malicious code in @databus-service-ui/ui-event (npm)
- MAL-2026-4350 Malicious code in clobprice.api (npm)
- MAL-2026-435 Malicious code in aligntype (npm)
- MAL-2026-4349 Malicious code in clob.api (npm)
- MAL-2026-4348 Malicious code in api-rs-node (npm)
- MAL-2026-4347 Malicious code in @devcarron/clob (npm)
- MAL-2026-4346 Malicious code in logger-draft (npm)
- MAL-2026-4345 Malicious code in eo-terminal (npm)
- MAL-2026-4344 Malicious code in verify-mycommand (npm)
- MAL-2026-4343 Malicious code in wnba-parent (npm)
- MAL-2026-4342 Malicious code in wm-w5g-preview (npm)
- MAL-2026-4341 Malicious code in wm-plugin-set-walkme-language (npm)
- MAL-2026-4340 Malicious code in wm-plugin-open-teach-me-after-deployable-played (npm)
- MAL-2026-434 Malicious code in weaviate-js (npm)
- MAL-2026-4339 Malicious code in wm-plugin-native-functions-restorer (npm)
- MAL-2026-4338 Malicious code in wm-plugin-json-conditions (npm)
- MAL-2026-4337 Malicious code in wm-plugin-create-iframe-capturing (npm)
- MAL-2026-4336 Malicious code in webservices.rest-utils (npm)
- MAL-2026-4335 Malicious code in webservices.rest (npm)
- MAL-2026-4334 Malicious code in vite-plugin-env-compat-plus (npm)