Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @wanzlonely/bailsforme (npm) GHSA-p3g3-r8vh-rwhx, MAL-2026-17838 | Malicious | Not scored | 18 days ago | npm @wanzlonely/bailsforme |
Malicious release: Malicious code in bailslonely (npm) GHSA-vc96-c7r4-h83m, MAL-2026-17844 | Malicious | Not scored | 18 days ago | npm bailslonely |
Malicious release: Malicious code in @wenzyx1/bails (npm) GHSA-q7r7-xm3q-rmwv, MAL-2026-17382 | Malicious | Not scored | 18 days ago | npm @wenzyx1/bails |
Malicious release: Malicious code in @sanzoffc/libsignal-node (npm) GHSA-38h3-6834-45vg, MAL-2026-17837 | Malicious | Not scored | 18 days ago | npm @sanzoffc/libsignal-node |
Malicious release: Malicious code in @sakataoffc/baileys (npm) GHSA-jrm5-8gc9-77hx, MAL-2026-17379 | Malicious | Not scored | 18 days ago | npm @sakataoffc/baileys |
Malicious release: Malicious code in @sairidev/baileys-new (npm) GHSA-wf67-crp9-g283, MAL-2026-17378 | Malicious | Not scored | 18 days ago | npm @sairidev/baileys-new |
Malicious release: Malicious code in @saazkira/libsignal-node (npm) GHSA-5f92-7xqw-69hg, MAL-2026-17836 | Malicious | Not scored | 18 days ago | npm @saazkira/libsignal-node |
Malicious release: Malicious code in @saazkira/eslint-config (npm) GHSA-6h28-rjw4-r5vh, MAL-2026-17835 | Malicious | Not scored | 18 days ago | npm @saazkira/eslint-config |
Malicious release: Malicious code in @saazkira/baileys (npm) GHSA-wqr2-p8mq-9c3f, MAL-2026-17377 | Malicious | Not scored | 18 days ago | npm @saazkira/baileys |
Malicious release: Malicious code in @revizahoshii/hoshino-voip (npm) GHSA-ffcp-p98x-xf5q, MAL-2026-17833 | Malicious | Not scored | 18 days ago | npm @revizahoshii/hoshino-voip |
Malicious release: Malicious code in @revizahoshii/hoshino-fake-server (npm) GHSA-hf93-m6x5-f6w9, MAL-2026-17824 | Malicious | Not scored | 18 days ago | npm @revizahoshii/hoshino-fake-server |
Malicious release: Malicious code in @revizahoshii/hoshino-wam (npm) GHSA-mw58-c46j-c7h4, MAL-2026-17834 | Malicious | Not scored | 18 days ago | npm @revizahoshii/hoshino-wam |
Malicious release: Malicious code in @revizahoshii/hoshino-native (npm) GHSA-p9mj-5xqc-v9rw, MAL-2026-17827 | Malicious | Not scored | 18 days ago | npm @revizahoshii/hoshino-native |
Malicious release: Malicious code in @revizahoshii/hoshino-mcp-server (npm) GHSA-xjwm-grrq-qm27, MAL-2026-17825 | Malicious | Not scored | 18 days ago | npm @revizahoshii/hoshino-mcp-server |
Malicious release: Malicious code in @revizahoshii/hoshino-media-utils (npm) GHSA-5c9f-v5pg-rwjp, MAL-2026-17826 | Malicious | Not scored | 18 days ago | npm @revizahoshii/hoshino-media-utils |
Malicious release: Malicious code in @revizahoshii/hoshino (npm) GHSA-5w74-m47h-rxp2, MAL-2026-17376 | Malicious | Not scored | 18 days ago | npm @revizahoshii/hoshino |
Malicious release: Malicious code in @revizahoshii/hoshino-store-redis (npm) GHSA-9vwc-wr35-xw3c, MAL-2026-17831 | Malicious | Not scored | 18 days ago | npm @revizahoshii/hoshino-store-redis |
Malicious release: Malicious code in @revizahoshii/hoshino-store-sqlite (npm) GHSA-cjch-4gc3-vrg5, MAL-2026-17832 | Malicious | Not scored | 18 days ago | npm @revizahoshii/hoshino-store-sqlite |
Malicious release: Malicious code in @revizahoshii/hoshino-store-mysql (npm) GHSA-h3qh-5mw2-6hp7, MAL-2026-17829 | Malicious | Not scored | 18 days ago | npm @revizahoshii/hoshino-store-mysql |
Malicious release: Malicious code in @revizahoshii/baileys (npm) GHSA-h8f3-w3fx-c43w, MAL-2026-17375 | Malicious | Not scored | 18 days ago | npm @revizahoshii/baileys |
Malicious release: Malicious code in @revizahoshii/hoshino-store-postgres (npm) GHSA-j429-q69w-883m, MAL-2026-17830 | Malicious | Not scored | 18 days ago | npm @revizahoshii/hoshino-store-postgres |
Malicious release: Malicious code in @revizahoshii/hoshino-store-mongo (npm) GHSA-rw66-grf5-whpp, MAL-2026-17828 | Malicious | Not scored | 18 days ago | npm @revizahoshii/hoshino-store-mongo |
Malicious release: Malicious code in baileys-xbats (npm) GHSA-w855-vw8p-6gc8, MAL-2026-17388 | Malicious | Not scored | 18 days ago | npm baileys-xbats |
Malicious release: Malicious code in @alipclutch/libsignal-node (npm) GHSA-94v2-6899-2c3c, MAL-2026-17818 | Malicious | Not scored | 18 days ago | npm @alipclutch/libsignal-node |
Malicious release: Malicious code in @fhkryxv/baileys (npm) GHSA-68wq-8x78-778h, MAL-2026-17352 | Malicious | Not scored | 18 days ago | npm @fhkryxv/baileys |
Malicious release: Malicious code in @fhkryxv/baileys-new (npm) GHSA-f35c-j8j2-9gf5, MAL-2026-17353 | Malicious | Not scored | 18 days ago | npm @fhkryxv/baileys-new |
Malicious release: Malicious code in @fazzcodestudio/fbot (npm) GHSA-5cf4-6c42-2xjr, MAL-2026-17821 | Malicious | Not scored | 18 days ago | npm @fazzcodestudio/fbot |
Malicious release: Malicious code in @we3js/framework (npm) GHSA-7w77-fw9q-qc7r, MAL-2026-17842 | Malicious | Not scored | 18 days ago | npm @we3js/framework |
Malicious release: Malicious code in @fazzcodestudio/baileys (npm) GHSA-3x77-qcpr-q2f4, MAL-2026-17820 | Malicious | Not scored | 18 days ago | npm @fazzcodestudio/baileys |
Malicious release: Malicious code in @fazzcodestudio/wa-web (npm) GHSA-69w8-wg2c-rm67, MAL-2026-17441 | Malicious | Not scored | 18 days ago | npm @fazzcodestudio/wa-web |
Malicious release: Malicious code in @fazzcodestudio/mediaformater (npm) GHSA-cvwq-8jgf-wwfp, MAL-2026-17822 | Malicious | Not scored | 18 days ago | npm @fazzcodestudio/mediaformater |
Malicious release: Malicious code in @badzz88/eslint-config (npm) GHSA-m6mw-38h5-qvxc, MAL-2026-17819 | Malicious | Not scored | 18 days ago | npm @badzz88/eslint-config |
Malicious release: Malicious code in @astracode/byles-new (npm) GHSA-4m9q-pfvv-6w4g, MAL-2026-17340 | Malicious | Not scored | 18 days ago | npm @astracode/byles-new |
Malicious release: Malicious code in @modss/libsignal (npm) GHSA-4w65-x977-wh2r, MAL-2026-17823 | Malicious | Not scored | 18 days ago | npm @modss/libsignal |
Malicious release: Malicious code in @mivesensei/baileys (npm) GHSA-f64x-v6q7-3gfp, MAL-2026-17368 | Malicious | Not scored | 18 days ago | npm @mivesensei/baileys |
Malicious release: Malicious code in @mikudeveloper/grace (npm) GHSA-2gjh-v8x3-xjxj, MAL-2026-17367 | Malicious | Not scored | 18 days ago | npm @mikudeveloper/grace |
Malicious release: Malicious code in @mikudeveloper/libsignal-node (npm) GHSA-hf9g-jp6h-4pr2, MAL-2026-17814 | Malicious | Not scored | 18 days ago | npm @mikudeveloper/libsignal-node |
Malicious release: Malicious code in amprem (npm) GHSA-72jw-j77j-v6vv, MAL-2026-17815 | Malicious | Not scored | 18 days ago | npm amprem |
Malicious release: Malicious code in @lekzo_dev/amprem (npm) GHSA-8gjr-vm34-h79m, MAL-2026-17813 | Malicious | Not scored | 18 days ago | npm @lekzo_dev/amprem |
Malicious release: Malicious code in @kanaraa/baileys (npm) GHSA-m8g7-98g3-qmvm, MAL-2026-17361 | Malicious | Not scored | 18 days ago | npm @kanaraa/baileys |
Malicious release: Malicious code in @jojoxyz/condemnedforce-baileys (npm) GHSA-5j7f-gr36-g6pq, MAL-2026-17360 | Malicious | Not scored | 18 days ago | npm @jojoxyz/condemnedforce-baileys |
Malicious release: Malicious code in @ikanngeming/blubub (npm) GHSA-4qm4-g99f-98jp, MAL-2026-17811 | Malicious | Not scored | 18 days ago | npm @ikanngeming/blubub |
Malicious release: Malicious code in @ikanngeming/ikannbail (npm) GHSA-997h-9663-h8gw, MAL-2026-17355 | Malicious | Not scored | 18 days ago | npm @ikanngeming/ikannbail |
Malicious release: Malicious code in nakkinpm (npm) GHSA-9px4-72qq-2mj6, MAL-2026-17817 | Malicious | Not scored | 18 days ago | npm nakkinpm |
Malicious release: Malicious code in @ikanngeming/npm (npm) GHSA-fr6r-9cvc-942v, MAL-2026-17812 | Malicious | Not scored | 18 days ago | npm @ikanngeming/npm |
Malicious release: Malicious code in ikanngeming (npm) GHSA-j3wm-94vw-jhx7, MAL-2026-17816 | Malicious | Not scored | 18 days ago | npm ikanngeming |
Malicious release: Malicious code in @zaka13/zakasite (npm) GHSA-j7rx-j64h-2fch, MAL-2026-17810 | Malicious | Not scored | 18 days ago | npm @zaka13/zakasite |
Malicious release: Malicious code in @s4yhiitestpoc/r2-https-b (npm) GHSA-h99w-8693-g33v, MAL-2026-17808 | Malicious | Not scored | 18 days ago | npm @s4yhiitestpoc/r2-https-b |
Malicious release: Malicious code in ap3-foundations-ui (npm) GHSA-g9j6-f655-22p6, MAL-2026-17806 | Malicious | Not scored | 19 days ago | npm ap3-foundations-ui |
Malicious release: Malicious code in luoxy-baileys (npm) MAL-2026-17446 | Malicious | Not scored | 19 days ago | npm luoxy-baileys |