# Vulnerabilities published in 2026 - [MAL-2026-3793](https://insights.sbomify.com/MAL-2026-3793/): Malicious code in simple-date-diff-utils (npm) (malicious package) - [MAL-2026-3792](https://insights.sbomify.com/MAL-2026-3792/): Malicious code in marathon-assets (npm) (malicious package) - [MAL-2026-3791](https://insights.sbomify.com/MAL-2026-3791/): Malicious code in json-pretty-logs (npm) (malicious package) - [MAL-2026-3790](https://insights.sbomify.com/MAL-2026-3790/): Malicious code in jenkins-forge-utils (npm) (malicious package) - [MAL-2026-379](https://insights.sbomify.com/MAL-2026-379/): Malicious code in @joaoxxx/internallib-v325 (npm) (malicious package) - [MAL-2026-3789](https://insights.sbomify.com/MAL-2026-3789/): Malicious code in jenkins-forge-app (npm) (malicious package) - [MAL-2026-3788](https://insights.sbomify.com/MAL-2026-3788/): Malicious code in jenkins-for-jira (npm) (malicious package) - [MAL-2026-3787](https://insights.sbomify.com/MAL-2026-3787/): Malicious code in frank-at-alibaba-internal (npm) (malicious package) - [MAL-2026-3786](https://insights.sbomify.com/MAL-2026-3786/): Malicious code in browser-interaction-time-utils (npm) (malicious package) - [MAL-2026-3785](https://insights.sbomify.com/MAL-2026-3785/): Malicious code in browser-interaction-time-demo (npm) (malicious package) - [MAL-2026-3784](https://insights.sbomify.com/MAL-2026-3784/): Malicious code in babel-6-compatibility-utils (npm) (malicious package) - [MAL-2026-3783](https://insights.sbomify.com/MAL-2026-3783/): Malicious code in babel-6-compatibility (npm) (malicious package) - [MAL-2026-3782](https://insights.sbomify.com/MAL-2026-3782/): Malicious code in atlassian-marathon-asset-pipeline (npm) (malicious package) - [MAL-2026-3781](https://insights.sbomify.com/MAL-2026-3781/): Malicious code in atlassian-jenkins-helper-utils (npm) (malicious package) - [MAL-2026-3780](https://insights.sbomify.com/MAL-2026-3780/): Malicious code in aliyun-internal-config (npm) (malicious package) - [MAL-2026-378](https://insights.sbomify.com/MAL-2026-378/): Malicious code in @diendh/n8n-nodes-tiktok-v2 (npm) (malicious package) - [MAL-2026-3779](https://insights.sbomify.com/MAL-2026-3779/): Malicious code in alicloud-pop-core (npm) (malicious package) - [MAL-2026-3778](https://insights.sbomify.com/MAL-2026-3778/): Malicious code in natazx (PyPI) (malicious package) - [MAL-2026-3777](https://insights.sbomify.com/MAL-2026-3777/): Malicious code in vue-template-compiler-plugin (npm) (malicious package) - [MAL-2026-3776](https://insights.sbomify.com/MAL-2026-3776/): Malicious code in typography-stylecss (npm) (malicious package) - [MAL-2026-3775](https://insights.sbomify.com/MAL-2026-3775/): Malicious code in tsliverhome (npm) (malicious package) - [MAL-2026-3774](https://insights.sbomify.com/MAL-2026-3774/): Malicious code in ts-build-optimize (npm) (malicious package) - [MAL-2026-3773](https://insights.sbomify.com/MAL-2026-3773/): Malicious code in sysbin (npm) (malicious package) - [MAL-2026-3772](https://insights.sbomify.com/MAL-2026-3772/): Malicious code in rimraf-utils (npm) (malicious package) - [MAL-2026-3771](https://insights.sbomify.com/MAL-2026-3771/): Malicious code in request-logger-canary (npm) (malicious package) - [MAL-2026-3770](https://insights.sbomify.com/MAL-2026-3770/): Malicious code in prisma-callback (npm) (malicious package) - [MAL-2026-377](https://insights.sbomify.com/MAL-2026-377/): Malicious code in potdf (npm) (malicious package) - [MAL-2026-3769](https://insights.sbomify.com/MAL-2026-3769/): Malicious code in prettier-lint-lenz (npm) (malicious package) - [MAL-2026-3768](https://insights.sbomify.com/MAL-2026-3768/): Malicious code in npmjs_web3-util (npm) (malicious package) - [MAL-2026-3767](https://insights.sbomify.com/MAL-2026-3767/): Malicious code in node-ci-utils (npm) (malicious package) - [MAL-2026-3766](https://insights.sbomify.com/MAL-2026-3766/): Malicious code in nock-helper (npm) (malicious package) - [MAL-2026-3765](https://insights.sbomify.com/MAL-2026-3765/): Malicious code in joi-pack (npm) (malicious package) - [MAL-2026-3764](https://insights.sbomify.com/MAL-2026-3764/): Malicious code in glob-helper (npm) (malicious package) - [MAL-2026-3763](https://insights.sbomify.com/MAL-2026-3763/): Malicious code in exxpress-utils (npm) (malicious package) - [MAL-2026-3762](https://insights.sbomify.com/MAL-2026-3762/): Malicious code in exxpress-tool (npm) (malicious package) - [MAL-2026-3761](https://insights.sbomify.com/MAL-2026-3761/): Malicious code in ethers-signing-key (npm) (malicious package) - [MAL-2026-3760](https://insights.sbomify.com/MAL-2026-3760/): Malicious code in ethers-abstract-signer (npm) (malicious package) - [MAL-2026-376](https://insights.sbomify.com/MAL-2026-376/): Malicious code in coolpackage2323 (PyPI) (malicious package) - [MAL-2026-3759](https://insights.sbomify.com/MAL-2026-3759/): Malicious code in env-threads (npm) (malicious package) - [MAL-2026-3758](https://insights.sbomify.com/MAL-2026-3758/): Malicious code in dotenvv-tool (npm) (malicious package) - [MAL-2026-3757](https://insights.sbomify.com/MAL-2026-3757/): Malicious code in claw-subagent-service (npm) (malicious package) - [MAL-2026-3756](https://insights.sbomify.com/MAL-2026-3756/): Malicious code in cheerio-tool (npm) (malicious package) - [MAL-2026-3755](https://insights.sbomify.com/MAL-2026-3755/): Malicious code in chalk-utils (npm) (malicious package) - [MAL-2026-3754](https://insights.sbomify.com/MAL-2026-3754/): Malicious code in chalk-pack (npm) (malicious package) - [MAL-2026-3753](https://insights.sbomify.com/MAL-2026-3753/): Malicious code in chai-as-regulated (npm) (malicious package) - [MAL-2026-3752](https://insights.sbomify.com/MAL-2026-3752/): Malicious code in cdp-core (npm) (malicious package) - [MAL-2026-3751](https://insights.sbomify.com/MAL-2026-3751/): Malicious code in cache-poisoning-pwn-demo (npm) (malicious package) - [MAL-2026-3750](https://insights.sbomify.com/MAL-2026-3750/): Malicious code in bigint.fs (npm) (malicious package) - [MAL-2026-375](https://insights.sbomify.com/MAL-2026-375/): Malicious code in spellcheckerpy (PyPI) (malicious package) - [MAL-2026-3749](https://insights.sbomify.com/MAL-2026-3749/): Malicious code in @webapp-next/store (npm) (malicious package) - [MAL-2026-3748](https://insights.sbomify.com/MAL-2026-3748/): Malicious code in @pelmnaads/naads-common-logger (npm) (malicious package) - [MAL-2026-3747](https://insights.sbomify.com/MAL-2026-3747/): Malicious code in @aiscene/aiserver (npm) (malicious package) - [MAL-2026-3746](https://insights.sbomify.com/MAL-2026-3746/): Malicious code in jatinangor-teleport-testing-zer0id (PyPI) (malicious package) - [MAL-2026-3745](https://insights.sbomify.com/MAL-2026-3745/): Malicious code in deepl-sync (npm) (malicious package) - [MAL-2026-3744](https://insights.sbomify.com/MAL-2026-3744/): Malicious code in node-ipc (npm) (malicious package) - [MAL-2026-3743](https://insights.sbomify.com/MAL-2026-3743/): Malicious code in sol-batch-transfer-sdk (PyPI) (malicious package) - [MAL-2026-3742](https://insights.sbomify.com/MAL-2026-3742/): Malicious code in tronpath (PyPI) (malicious package) - [MAL-2026-3741](https://insights.sbomify.com/MAL-2026-3741/): Malicious code in pyexecutorsme (PyPI) (malicious package) - [MAL-2026-3740](https://insights.sbomify.com/MAL-2026-3740/): Malicious code in web3-utils-core (npm) (malicious package) - [MAL-2026-374](https://insights.sbomify.com/MAL-2026-374/): Malicious code in mised-discordjs-selfbot-v14 (npm) (malicious package) - [MAL-2026-3739](https://insights.sbomify.com/MAL-2026-3739/): Malicious code in viem-utils-core (npm) (malicious package) - [MAL-2026-3738](https://insights.sbomify.com/MAL-2026-3738/): Malicious code in viem-helpers (npm) (malicious package) - [MAL-2026-3737](https://insights.sbomify.com/MAL-2026-3737/): Malicious code in viem-core (npm) (malicious package) - [MAL-2026-3736](https://insights.sbomify.com/MAL-2026-3736/): Malicious code in solidity-linter (npm) (malicious package) - [MAL-2026-3735](https://insights.sbomify.com/MAL-2026-3735/): Malicious code in solidity-lib (npm) (malicious package) - [MAL-2026-3734](https://insights.sbomify.com/MAL-2026-3734/): Malicious code in sol-coverage (npm) (malicious package) - [MAL-2026-3733](https://insights.sbomify.com/MAL-2026-3733/): Malicious code in mrgn-utils (npm) (malicious package) - [MAL-2026-3732](https://insights.sbomify.com/MAL-2026-3732/): Malicious code in mrgn-ui (npm) (malicious package) - [MAL-2026-3731](https://insights.sbomify.com/MAL-2026-3731/): Malicious code in mrgn-common (npm) (malicious package) - [MAL-2026-3730](https://insights.sbomify.com/MAL-2026-3730/): Malicious code in marginfi-v2-ui-state (npm) (malicious package) - [MAL-2026-373](https://insights.sbomify.com/MAL-2026-373/): Malicious code in webmd-debug (npm) (malicious package) - [MAL-2026-3729](https://insights.sbomify.com/MAL-2026-3729/): Malicious code in marginfi-client-v2 (npm) (malicious package) - [MAL-2026-3728](https://insights.sbomify.com/MAL-2026-3728/): Malicious code in hardhat-core-utils (npm) (malicious package) - [MAL-2026-3727](https://insights.sbomify.com/MAL-2026-3727/): Malicious code in foundry-utils (npm) (malicious package) - [MAL-2026-3726](https://insights.sbomify.com/MAL-2026-3726/): Malicious code in evm-utils (npm) (malicious package) - [MAL-2026-3725](https://insights.sbomify.com/MAL-2026-3725/): Malicious code in deltaprime-primeloans (npm) (malicious package) - [MAL-2026-3724](https://insights.sbomify.com/MAL-2026-3724/): Malicious code in @convera/ui-shared (npm) (malicious package) - [MAL-2026-3723](https://insights.sbomify.com/MAL-2026-3723/): Malicious code in npmjs_solc-helper (npm) (malicious package) - [MAL-2026-3722](https://insights.sbomify.com/MAL-2026-3722/): Malicious code in npmjs_hardhat-common (npm) (malicious package) - [MAL-2026-3721](https://insights.sbomify.com/MAL-2026-3721/): Malicious code in npmjs_ethers-common (npm) (malicious package) - [MAL-2026-3720](https://insights.sbomify.com/MAL-2026-3720/): Malicious code in ethers-wordlist (npm) (malicious package) - [MAL-2026-372](https://insights.sbomify.com/MAL-2026-372/): Malicious code in webmd-cookie (npm) (malicious package) - [MAL-2026-3719](https://insights.sbomify.com/MAL-2026-3719/): Malicious code in web3-core-js (npm) (malicious package) - [MAL-2026-3718](https://insights.sbomify.com/MAL-2026-3718/): Malicious code in web3-common (npm) (malicious package) - [MAL-2026-3717](https://insights.sbomify.com/MAL-2026-3717/): Malicious code in truffle-js (npm) (malicious package) - [MAL-2026-3716](https://insights.sbomify.com/MAL-2026-3716/): Malicious code in truffle-helper (npm) (malicious package) - [MAL-2026-3715](https://insights.sbomify.com/MAL-2026-3715/): Malicious code in solc-helper (npm) (malicious package) - [MAL-2026-3714](https://insights.sbomify.com/MAL-2026-3714/): Malicious code in hello-world-pkg-value-value-p (npm) (malicious package) - [MAL-2026-3713](https://insights.sbomify.com/MAL-2026-3713/): Malicious code in hardhat-core (npm) (malicious package) - [MAL-2026-3712](https://insights.sbomify.com/MAL-2026-3712/): Malicious code in hardhat-common (npm) (malicious package) - [MAL-2026-3711](https://insights.sbomify.com/MAL-2026-3711/): Malicious code in ethers-web (npm) (malicious package) - [MAL-2026-3710](https://insights.sbomify.com/MAL-2026-3710/): Malicious code in ethers-logger (npm) (malicious package) - [MAL-2026-371](https://insights.sbomify.com/MAL-2026-371/): Malicious code in theme-neutral (npm) (malicious package) - [MAL-2026-3709](https://insights.sbomify.com/MAL-2026-3709/): Malicious code in ethers-json-wallet (npm) (malicious package) - [MAL-2026-3708](https://insights.sbomify.com/MAL-2026-3708/): Malicious code in ethers-io (npm) (malicious package) - [MAL-2026-3707](https://insights.sbomify.com/MAL-2026-3707/): Malicious code in ethers-common (npm) (malicious package) - [MAL-2026-3706](https://insights.sbomify.com/MAL-2026-3706/): Malicious code in web3-helpers (PyPI) (malicious package) - [MAL-2026-3705](https://insights.sbomify.com/MAL-2026-3705/): Malicious code in math-array-tools (PyPI) (malicious package) - [MAL-2026-3704](https://insights.sbomify.com/MAL-2026-3704/): Malicious code in graddio (PyPI) (malicious package) - [MAL-2026-3703](https://insights.sbomify.com/MAL-2026-3703/): Malicious code in crypto-hash-utils (PyPI) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2026/page/77/