Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in orderbook-volt-plugin (npm) GHSA-w9pq-6r9f-pj96, MAL-2026-18393 | Malicious | Not scored | 1 hour ago | npm orderbook-volt-plugin |
Malicious release: Malicious code in react-native-drago-callkit (npm) GHSA-jp74-4rg3-7ppj, MAL-2026-18394 | Malicious | Not scored | 2 hours ago | npm react-native-drago-callkit |
Malicious release: Malicious code in @chatunitycenter/baileys (npm) GHSA-g6j7-j669-23g6, MAL-2026-18392 | Malicious | Not scored | 3 hours ago | npm @chatunitycenter/baileys |
Malicious release: Malicious code in 789bet-vip-login (npm) GHSA-4rjq-j97h-cqxc, MAL-2026-18387 | Malicious | Not scored | 5 hours ago | npm 789bet-vip-login |
Malicious release: Malicious code in 789bet-entrance (npm) GHSA-6xqc-cfvp-q89v, MAL-2026-18383 | Malicious | Not scored | 5 hours ago | npm 789bet-entrance |
Malicious release: Malicious code in 789bet-vip-online-login (npm) GHSA-f5mv-v4rc-qq2q, MAL-2026-18388 | Malicious | Not scored | 5 hours ago | npm 789bet-vip-online-login |
Malicious release: Malicious code in 789bet-slot (npm) GHSA-q68g-454g-9qww, MAL-2026-18385 | Malicious | Not scored | 5 hours ago | npm 789bet-slot |
Malicious release: Malicious code in 789bet-vip (npm) GHSA-rvxc-82gp-xpr6, MAL-2026-18386 | Malicious | Not scored | 5 hours ago | npm 789bet-vip |
Malicious release: Malicious code in 789bet-login-th (npm) GHSA-wg3r-wqgc-7fgf, MAL-2026-18384 | Malicious | Not scored | 5 hours ago | npm 789bet-login-th |
Malicious release: Malicious code in m98bet (npm) GHSA-6ggw-hqvq-8wcm, MAL-2026-18389 | Malicious | Not scored | 5 hours ago | npm m98bet |
Malicious release: Malicious code in 789bet (npm) GHSA-cccw-qphx-7whg, MAL-2026-18382 | Malicious | Not scored | 5 hours ago | npm 789bet |
Malicious release: Malicious code in m98vip (npm) GHSA-gp92-xqcg-876c, MAL-2026-18391 | Malicious | Not scored | 5 hours ago | npm m98vip |
Malicious release: Malicious code in m98th (npm) GHSA-x82c-crm3-jcwv, MAL-2026-18390 | Malicious | Not scored | 5 hours ago | npm m98th |
Malicious release: Malicious code in @jasperquinn/postcss-motion-helpers (npm) GHSA-88vx-c9pj-9527, MAL-2026-18379 | Malicious | Not scored | 5 hours ago | npm @jasperquinn/postcss-motion-helpers |
Malicious release: Malicious code in black-spindle-2 (npm) MAL-2026-18376 | Malicious | Not scored | 5 hours ago | npm black-spindle-2 |
Malicious release: Malicious code in poc-revshell (PyPI) MAL-2026-18378 | Malicious | Not scored | 5 hours ago | PyPI poc-revshell |
Malicious release: Malicious code in spectral-core (npm) MAL-2026-18377 | Malicious | Not scored | 5 hours ago | npm spectral-core |
Malicious release: Malicious code in @dmangal/curse-dependent-ecto (npm) MAL-2026-18375 | Malicious | Not scored | 5 hours ago | npm @dmangal/curse-dependent-ecto |
Malicious release: Malicious code in cjlowuxbnexkhgpzq (npm) GHSA-pr23-gvcv-c422, MAL-2026-18381 | Malicious | Not scored | 6 hours ago | npm cjlowuxbnexkhgpzq |
Malicious release: Malicious code in bcxhdh1kjlopsde (npm) GHSA-v78q-7787-v9rq, MAL-2026-18380 | Malicious | Not scored | 6 hours ago | npm bcxhdh1kjlopsde |
Malicious release: Malicious code in mw-communication-client (npm) MAL-2026-18370 | Malicious | Not scored | 6 hours ago | npm mw-communication-client |
Malicious release: Malicious code in mw-test-utils (npm) MAL-2026-18371 | Malicious | Not scored | 6 hours ago | npm mw-test-utils |
Malicious release: Malicious code in mui-wrapper-x-date-pickers (npm) MAL-2026-18369 | Malicious | Not scored | 6 hours ago | npm mui-wrapper-x-date-pickers |
Malicious release: Malicious code in monte-md-baileys (npm) MAL-2026-17399 | Malicious | Not scored | 7 hours ago | npm monte-md-baileys |
Malicious release: Malicious code in noxleyss (npm) MAL-2026-17402 | Malicious | Not scored | 7 hours ago | npm noxleyss |
Malicious release: Malicious code in @rennnpm/baileys (npm) MAL-2026-17374 | Malicious | Not scored | 7 hours ago | npm @rennnpm/baileys |
Malicious release: Malicious code in seapy-ops (PyPI) MAL-2026-17880 | Malicious | Not scored | 7 hours ago | PyPI seapy-ops |
Malicious release: Malicious code in @testsecuiitytestme/cache-helper (npm) MAL-2026-18358 | Malicious | Not scored | 7 hours ago | npm @testsecuiitytestme/cache-helper |
Malicious release: Malicious code in dsh-volcengine-provider (npm) GHSA-8hr2-m7vq-fhpg, MAL-2026-18374 | Malicious | Not scored | 11 hours ago | npm dsh-volcengine-provider |
Malicious release: Malicious code in dsh-redteam-mode (npm) GHSA-r4m9-8735-g966, MAL-2026-18366 | Malicious | Not scored | 15 hours ago | npm dsh-redteam-mode |