# Vulnerabilities published in 2026 - [MAL-2026-1900](https://insights.sbomify.com/MAL-2026-1900/): Malicious code in elleuchdhsolvepwn (PyPI) (malicious package) - [MAL-2026-190](https://insights.sbomify.com/MAL-2026-190/): Malicious code in conmiyagi-map (npm) (malicious package) - [MAL-2026-19](https://insights.sbomify.com/MAL-2026-19/): Malicious code in jest-config-ibm-cloud-cognitive (npm) (malicious package) - [MAL-2026-1899](https://insights.sbomify.com/MAL-2026-1899/): Malicious code in discordrlbypasser (PyPI) (malicious package) - [MAL-2026-1898](https://insights.sbomify.com/MAL-2026-1898/): Malicious code in curl-requester (PyPI) (malicious package) - [MAL-2026-1897](https://insights.sbomify.com/MAL-2026-1897/): Malicious code in bigmathutils (PyPI) (malicious package) - [MAL-2026-1896](https://insights.sbomify.com/MAL-2026-1896/): Malicious code in bigmathix (PyPI) (malicious package) - [MAL-2026-1895](https://insights.sbomify.com/MAL-2026-1895/): Malicious code in bigmathex (PyPI) (malicious package) - [MAL-2026-1894](https://insights.sbomify.com/MAL-2026-1894/): Malicious code in async-substrate-interface-sub (PyPI) (malicious package) - [MAL-2026-1893](https://insights.sbomify.com/MAL-2026-1893/): Malicious code in aitrade (PyPI) (malicious package) - [MAL-2026-1892](https://insights.sbomify.com/MAL-2026-1892/): Malicious code in test6789.v3 (NuGet) (malicious package) - [MAL-2026-1891](https://insights.sbomify.com/MAL-2026-1891/): Malicious code in test6789.latest (NuGet) (malicious package) - [MAL-2026-1890](https://insights.sbomify.com/MAL-2026-1890/): Malicious code in test6789.client (NuGet) (malicious package) - [MAL-2026-189](https://insights.sbomify.com/MAL-2026-189/): Malicious code in oncecall (PyPI) (malicious package) - [MAL-2026-1889](https://insights.sbomify.com/MAL-2026-1889/): Malicious code in stripeapi.net (NuGet) (malicious package) - [MAL-2026-1888](https://insights.sbomify.com/MAL-2026-1888/): Malicious code in solnetwallet.net.core (NuGet) (malicious package) - [MAL-2026-1887](https://insights.sbomify.com/MAL-2026-1887/): Malicious code in solnetall.net (NuGet) (malicious package) - [MAL-2026-1886](https://insights.sbomify.com/MAL-2026-1886/): Malicious code in bsure.utils (NuGet) (malicious package) - [MAL-2026-1885](https://insights.sbomify.com/MAL-2026-1885/): Malicious code in bsure.binsec (NuGet) (malicious package) - [MAL-2026-1884](https://insights.sbomify.com/MAL-2026-1884/): Malicious code in avvio.sky.userdataservice (NuGet) (malicious package) - [MAL-2026-1883](https://insights.sbomify.com/MAL-2026-1883/): Malicious code in 8y234rtv8yvf (NuGet) (malicious package) - [MAL-2026-1882](https://insights.sbomify.com/MAL-2026-1882/): Malicious code in 3rugfbe8rivferiuv (NuGet) (malicious package) - [MAL-2026-1881](https://insights.sbomify.com/MAL-2026-1881/): Malicious code in zip.js-2.8.2 (npm) (malicious package) - [MAL-2026-1880](https://insights.sbomify.com/MAL-2026-1880/): Malicious code in zero-develop-component-library (npm) (malicious package) - [MAL-2026-188](https://insights.sbomify.com/MAL-2026-188/): Malicious code in shopping-cart-service (npm) (malicious package) - [MAL-2026-1879](https://insights.sbomify.com/MAL-2026-1879/): Malicious code in yahoo-commerce (npm) (malicious package) - [MAL-2026-1878](https://insights.sbomify.com/MAL-2026-1878/): Malicious code in wpt-client (npm) (malicious package) - [MAL-2026-1877](https://insights.sbomify.com/MAL-2026-1877/): Malicious code in wiz-redirects (npm) (malicious package) - [MAL-2026-1876](https://insights.sbomify.com/MAL-2026-1876/): Malicious code in wiz-production (npm) (malicious package) - [MAL-2026-1875](https://insights.sbomify.com/MAL-2026-1875/): Malicious code in wiz-prod (npm) (malicious package) - [MAL-2026-1874](https://insights.sbomify.com/MAL-2026-1874/): Malicious code in wiz-dev (npm) (malicious package) - [MAL-2026-1873](https://insights.sbomify.com/MAL-2026-1873/): Malicious code in vvvv4234 (npm) (malicious package) - [MAL-2026-1872](https://insights.sbomify.com/MAL-2026-1872/): Malicious code in user_migration (npm) (malicious package) - [MAL-2026-1871](https://insights.sbomify.com/MAL-2026-1871/): Malicious code in urti (npm) (malicious package) - [MAL-2026-1870](https://insights.sbomify.com/MAL-2026-1870/): Malicious code in ui-core_mal (npm) (malicious package) - [MAL-2026-187](https://insights.sbomify.com/MAL-2026-187/): Malicious code in yunxohang7 (npm) (malicious package) - [MAL-2026-1869](https://insights.sbomify.com/MAL-2026-1869/): Malicious code in tss12111 (npm) (malicious package) - [MAL-2026-1868](https://insights.sbomify.com/MAL-2026-1868/): Malicious code in tscom-geo (npm) (malicious package) - [MAL-2026-1867](https://insights.sbomify.com/MAL-2026-1867/): Malicious code in thread_ppe-test (npm) (malicious package) - [MAL-2026-1866](https://insights.sbomify.com/MAL-2026-1866/): Malicious code in testctfproject3 (npm) (malicious package) - [MAL-2026-1865](https://insights.sbomify.com/MAL-2026-1865/): Malicious code in testctfproject2 (npm) (malicious package) - [MAL-2026-1864](https://insights.sbomify.com/MAL-2026-1864/): Malicious code in testctfproject1 (npm) (malicious package) - [MAL-2026-1863](https://insights.sbomify.com/MAL-2026-1863/): Malicious code in test-bugbounty-package-9 (npm) (malicious package) - [MAL-2026-1862](https://insights.sbomify.com/MAL-2026-1862/): Malicious code in test-bugbounty-package-6 (npm) (malicious package) - [MAL-2026-1861](https://insights.sbomify.com/MAL-2026-1861/): Malicious code in technical-assignment (npm) (malicious package) - [MAL-2026-1860](https://insights.sbomify.com/MAL-2026-1860/): Malicious code in tdangularjs (npm) (malicious package) - [MAL-2026-186](https://insights.sbomify.com/MAL-2026-186/): Malicious code in yunxohang6 (npm) (malicious package) - [MAL-2026-1859](https://insights.sbomify.com/MAL-2026-1859/): Malicious code in stylelint-preference (npm) (malicious package) - [MAL-2026-1858](https://insights.sbomify.com/MAL-2026-1858/): Malicious code in stnsxmp3 (npm) (malicious package) - [MAL-2026-1857](https://insights.sbomify.com/MAL-2026-1857/): Malicious code in stnsxmp (npm) (malicious package) - [MAL-2026-1856](https://insights.sbomify.com/MAL-2026-1856/): Malicious code in static-content-cannabis (npm) (malicious package) - [MAL-2026-1855](https://insights.sbomify.com/MAL-2026-1855/): Malicious code in ssf-desktop-api-specification (npm) (malicious package) - [MAL-2026-1854](https://insights.sbomify.com/MAL-2026-1854/): Malicious code in ssf-desktop-api-electron (npm) (malicious package) - [MAL-2026-1853](https://insights.sbomify.com/MAL-2026-1853/): Malicious code in solana-gateway-contracts-private (npm) (malicious package) - [MAL-2026-1852](https://insights.sbomify.com/MAL-2026-1852/): Malicious code in soft-nav (npm) (malicious package) - [MAL-2026-1851](https://insights.sbomify.com/MAL-2026-1851/): Malicious code in snort-security-tool (npm) (malicious package) - [MAL-2026-1850](https://insights.sbomify.com/MAL-2026-1850/): Malicious code in smm-yt (npm) (malicious package) - [MAL-2026-185](https://insights.sbomify.com/MAL-2026-185/): Malicious code in yunxohang5 (npm) (malicious package) - [MAL-2026-1849](https://insights.sbomify.com/MAL-2026-1849/): Malicious code in skyoauth2 (npm) (malicious package) - [MAL-2026-1848](https://insights.sbomify.com/MAL-2026-1848/): Malicious code in sky-enablement (npm) (malicious package) - [MAL-2026-1847](https://insights.sbomify.com/MAL-2026-1847/): Malicious code in signer-app (npm) (malicious package) - [MAL-2026-1846](https://insights.sbomify.com/MAL-2026-1846/): Malicious code in signalk-poc-bug (npm) (malicious package) - [MAL-2026-1845](https://insights.sbomify.com/MAL-2026-1845/): Malicious code in signalk-bug-poc (npm) (malicious package) - [MAL-2026-1844](https://insights.sbomify.com/MAL-2026-1844/): Malicious code in shopify-ping-web (npm) (malicious package) - [MAL-2026-1843](https://insights.sbomify.com/MAL-2026-1843/): Malicious code in shopify-admin-web (npm) (malicious package) - [MAL-2026-1842](https://insights.sbomify.com/MAL-2026-1842/): Malicious code in sheinx (npm) (malicious package) - [MAL-2026-1841](https://insights.sbomify.com/MAL-2026-1841/): Malicious code in safeness-sb-new (npm) (malicious package) - [MAL-2026-18404](https://insights.sbomify.com/MAL-2026-18404/): Malicious code in claims-acct-unlock (npm) (malicious package) - [MAL-2026-18403](https://insights.sbomify.com/MAL-2026-18403/): Malicious code in twitter-request-diagnostics (PyPI) (malicious package) - [MAL-2026-18402](https://insights.sbomify.com/MAL-2026-18402/): Malicious code in test-01-rafamarrara-learning-dc (PyPI) (malicious package) - [MAL-2026-18401](https://insights.sbomify.com/MAL-2026-18401/): Malicious code in dowload_ebok_reiki_sviluppa_e_usa_lenergia_reiki_by_matt_harvey_9q55p (npm) (malicious package) - [MAL-2026-18400](https://insights.sbomify.com/MAL-2026-18400/): Malicious code in dowload_ebok_nur_mal_schnell_das_mammut_retten_by_knut_kruger_eva_schoffmann_davidov_ouz6t (npm) (malicious package) - [MAL-2026-1840](https://insights.sbomify.com/MAL-2026-1840/): Malicious code in ref-selector (npm) (malicious package) - [MAL-2026-18399](https://insights.sbomify.com/MAL-2026-18399/): Malicious code in dowload_ebok_lolita_by_vladimir_nabokov_oy1gy (npm) (malicious package) - [MAL-2026-18398](https://insights.sbomify.com/MAL-2026-18398/): Malicious code in dowload_ebok_el_piso_mil_el_piso_mil_1_by_katharine_mcgee_h1llc (npm) (malicious package) - [MAL-2026-18397](https://insights.sbomify.com/MAL-2026-18397/): Malicious code in dowload_ebok_armageddon_by_max_hastings_kv3s4 (npm) (malicious package) - [MAL-2026-18396](https://insights.sbomify.com/MAL-2026-18396/): Malicious code in bq-helix-recon-6ade983e (PyPI) (malicious package) - [MAL-2026-18395](https://insights.sbomify.com/MAL-2026-18395/): Malicious code in bq-helix-build-hook-6ade983e (PyPI) (malicious package) - [MAL-2026-18394](https://insights.sbomify.com/MAL-2026-18394/): Malicious code in react-native-drago-callkit (npm) (malicious package) - [MAL-2026-18393](https://insights.sbomify.com/MAL-2026-18393/): Malicious code in orderbook-volt-plugin (npm) (malicious package) - [MAL-2026-18392](https://insights.sbomify.com/MAL-2026-18392/): Malicious code in @chatunitycenter/baileys (npm) (malicious package) - [MAL-2026-18391](https://insights.sbomify.com/MAL-2026-18391/): Malicious code in m98vip (npm) (malicious package) - [MAL-2026-18390](https://insights.sbomify.com/MAL-2026-18390/): Malicious code in m98th (npm) (malicious package) - [MAL-2026-1839](https://insights.sbomify.com/MAL-2026-1839/): Malicious code in react-state-optimizer-core (npm) (malicious package) - [MAL-2026-18389](https://insights.sbomify.com/MAL-2026-18389/): Malicious code in m98bet (npm) (malicious package) - [MAL-2026-18388](https://insights.sbomify.com/MAL-2026-18388/): Malicious code in 789bet-vip-online-login (npm) (malicious package) - [MAL-2026-18387](https://insights.sbomify.com/MAL-2026-18387/): Malicious code in 789bet-vip-login (npm) (malicious package) - [MAL-2026-18386](https://insights.sbomify.com/MAL-2026-18386/): Malicious code in 789bet-vip (npm) (malicious package) - [MAL-2026-18385](https://insights.sbomify.com/MAL-2026-18385/): Malicious code in 789bet-slot (npm) (malicious package) - [MAL-2026-18384](https://insights.sbomify.com/MAL-2026-18384/): Malicious code in 789bet-login-th (npm) (malicious package) - [MAL-2026-18383](https://insights.sbomify.com/MAL-2026-18383/): Malicious code in 789bet-entrance (npm) (malicious package) - [MAL-2026-18382](https://insights.sbomify.com/MAL-2026-18382/): Malicious code in 789bet (npm) (malicious package) - [MAL-2026-18381](https://insights.sbomify.com/MAL-2026-18381/): Malicious code in cjlowuxbnexkhgpzq (npm) (malicious package) - [MAL-2026-18380](https://insights.sbomify.com/MAL-2026-18380/): Malicious code in bcxhdh1kjlopsde (npm) (malicious package) - [MAL-2026-1838](https://insights.sbomify.com/MAL-2026-1838/): Malicious code in react-router-on-navigation (npm) (malicious package) - [MAL-2026-18379](https://insights.sbomify.com/MAL-2026-18379/): Malicious code in @jasperquinn/postcss-motion-helpers (npm) (malicious package) - [MAL-2026-18378](https://insights.sbomify.com/MAL-2026-18378/): Malicious code in poc-revshell (PyPI) (malicious package) - [MAL-2026-18377](https://insights.sbomify.com/MAL-2026-18377/): Malicious code in spectral-core (npm) (malicious package) - [MAL-2026-18376](https://insights.sbomify.com/MAL-2026-18376/): Malicious code in black-spindle-2 (npm) (malicious package) - [MAL-2026-18375](https://insights.sbomify.com/MAL-2026-18375/): Malicious code in @dmangal/curse-dependent-ecto (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2026/page/98/