Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @wethenorth12/spl-token-utils (npm) MAL-2026-12103 | Malicious | Not scored | 05 Aug, 2026 | npm @wethenorth12/spl-token-utils |
Malicious release: Malicious code in @wethenorth12/solana-wallet-adapter (npm) MAL-2026-12101 | Malicious | Not scored | 05 Aug, 2026 | npm @wethenorth12/solana-wallet-adapter |
Malicious release: Malicious code in @wethenorth12/hd-key-generator (npm) MAL-2026-12095 | Malicious | Not scored | 05 Aug, 2026 | npm @wethenorth12/hd-key-generator |
Malicious release: Malicious code in @wethenorth12/ethers-wallet (npm) MAL-2026-12094 | Malicious | Not scored | 05 Aug, 2026 | npm @wethenorth12/ethers-wallet |
Malicious release: Malicious code in @wethenorth12/ethers-signer (npm) MAL-2026-12093 | Malicious | Not scored | 05 Aug, 2026 | npm @wethenorth12/ethers-signer |
Malicious release: Malicious code in @wethenorth12/hdkey-wallet (npm) MAL-2026-12096 | Malicious | Not scored | 05 Aug, 2026 | npm @wethenorth12/hdkey-wallet |
Malicious release: Malicious code in @wethenorth12/near-api (npm) MAL-2026-12098 | Malicious | Not scored | 05 Aug, 2026 | npm @wethenorth12/near-api |
Malicious release: Malicious code in @wethenorth12/web3-provider-engine (npm) MAL-2026-12106 | Malicious | Not scored | 05 Aug, 2026 | npm @wethenorth12/web3-provider-engine |
Malicious release: Malicious code in @wethenorth12/mnemonic-to-key (npm) MAL-2026-12097 | Malicious | Not scored | 05 Aug, 2026 | npm @wethenorth12/mnemonic-to-key |
Malicious release: Malicious code in tailwind-hide-scrollbar (npm) GHSA-97j6-7w7w-7vj3, MAL-2026-12116 | Malicious | Not scored | 05 Aug, 2026 | npm tailwind-hide-scrollbar |
Malicious release: Malicious code in streak-calc-math (npm) MAL-2026-12114 | Malicious | Not scored | 05 Aug, 2026 | npm streak-calc-math |
Malicious release: Malicious code in @ccfly/setup-darwin-arm64 (npm) MAL-2026-12084 | Malicious | Not scored | 05 Aug, 2026 | npm @ccfly/setup-darwin-arm64 |
Malicious release: Malicious code in streak-math-calc (npm) GHSA-vvg8-qpgg-c28r, MAL-2026-12115 | Malicious | Not scored | 05 Aug, 2026 | npm streak-math-calc |
Malicious release: Malicious code in bip32-js (npm) MAL-2026-12109 | Malicious | Not scored | 05 Aug, 2026 | npm bip32-js |
Malicious release: Malicious code in python-bitcoinlib (npm) MAL-2026-12113 | Malicious | Not scored | 05 Aug, 2026 | npm python-bitcoinlib |
Malicious release: Malicious code in mnemonic-utils (npm) MAL-2026-12112 | Malicious | Not scored | 05 Aug, 2026 | npm mnemonic-utils |
Malicious release: Malicious code in ethereum-sign-utils (npm) MAL-2026-12110 | Malicious | Not scored | 05 Aug, 2026 | npm ethereum-sign-utils |
Malicious release: Malicious code in ethers-lib (npm) MAL-2026-12111 | Malicious | Not scored | 05 Aug, 2026 | npm ethers-lib |
Malicious release: Malicious code in alipclutch-baileys (npm) GHSA-7c8r-gc84-h9fv, MAL-2026-12108 | Malicious | Not scored | 05 Aug, 2026 | npm alipclutch-baileys |
Malicious release: Malicious code in @zzzgenesis00/mnemonic-to-key (npm) MAL-2026-12056 | Malicious | Not scored | 05 Aug, 2026 | npm @zzzgenesis00/mnemonic-to-key |
Malicious release: Malicious code in volna-boxy-di-test (npm) GHSA-2gq5-r78g-rrmq, MAL-2026-12079 | Malicious | Not scored | 05 Aug, 2026 | npm volna-boxy-di-test |
Malicious release: Malicious code in @zzzgenesis00/docker-api-client (npm) MAL-2026-12055 | Malicious | Not scored | 05 Aug, 2026 | npm @zzzgenesis00/docker-api-client |
Malicious release: Malicious code in beaver-ui-card-large (npm) MAL-2026-12060 | Malicious | Not scored | 05 Aug, 2026 | npm beaver-ui-card-large |
Malicious release: Malicious code in trezor-lib (npm) MAL-2026-12078 | Malicious | Not scored | 05 Aug, 2026 | npm trezor-lib |
Malicious release: Malicious code in hwi-lib (npm) MAL-2026-12067 | Malicious | Not scored | 05 Aug, 2026 | npm hwi-lib |
Malicious release: Malicious code in ckcc-protocol (npm) MAL-2026-12064 | Malicious | Not scored | 05 Aug, 2026 | npm ckcc-protocol |
Malicious release: Malicious code in bcore-bravo-eslint-config (npm) MAL-2026-12059 | Malicious | Not scored | 05 Aug, 2026 | npm bcore-bravo-eslint-config |
Malicious release: Malicious code in ledger-lib (npm) MAL-2026-12068 | Malicious | Not scored | 05 Aug, 2026 | npm ledger-lib |
Malicious release: Malicious code in sso-tramvai-module-context-auth (npm) GHSA-3hqw-6hwm-vh64, MAL-2026-12073 | Malicious | Not scored | 05 Aug, 2026 | npm sso-tramvai-module-context-auth |
Malicious release: Malicious code in boardwalk-js-tests (npm) GHSA-6q89-m3mh-hv96, MAL-2026-12062 | Malicious | Not scored | 05 Aug, 2026 | npm boardwalk-js-tests |
Malicious release: Malicious code in @zzzgenesis00/playwrite (npm) MAL-2026-12057 | Malicious | Not scored | 05 Aug, 2026 | npm @zzzgenesis00/playwrite |
Malicious release: Malicious code in checkout-create-pos-order-am (npm) GHSA-cpmp-7ffm-4j7c, MAL-2026-12063 | Malicious | Not scored | 05 Aug, 2026 | npm checkout-create-pos-order-am |
Malicious release: Malicious code in hubert-appointment-v2-task-create-am (npm) GHSA-4q22-w3m6-jpcx, MAL-2026-12066 | Malicious | Not scored | 05 Aug, 2026 | npm hubert-appointment-v2-task-create-am |
Malicious release: Malicious code in bigops-eslint (npm) MAL-2026-12061 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-eslint |
Malicious release: Malicious code in greatcall-customers-commandapi (npm) MAL-2026-12065 | Malicious | Not scored | 05 Aug, 2026 | npm greatcall-customers-commandapi |
Malicious release: Malicious code in tinkoff-statist-browser-typed-client-sme.compliance.web.events (npm) GHSA-9gx3-gv84-hwmg, MAL-2026-12077 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-browser-typed-client-sme.compliance.web.events |
Malicious release: Malicious code in specials-obid-webpack (npm) GHSA-r775-7c47-27mc, MAL-2026-12072 | Malicious | Not scored | 05 Aug, 2026 | npm specials-obid-webpack |
Malicious release: Malicious code in sotqa-test (npm) GHSA-p4jc-5f83-6g8m, MAL-2026-12071 | Malicious | Not scored | 05 Aug, 2026 | npm sotqa-test |
Malicious release: Malicious code in nxify-unic (npm) GHSA-m63g-4mj7-6989, MAL-2026-12069 | Malicious | Not scored | 05 Aug, 2026 | npm nxify-unic |
Malicious release: Malicious code in shopping-shared-atom-mobile-cart-counter (npm) GHSA-63p3-ggxm-fcwg, MAL-2026-12070 | Malicious | Not scored | 05 Aug, 2026 | npm shopping-shared-atom-mobile-cart-counter |
Malicious release: Malicious code in @zzzgenesis00/spl-token-utils (npm) MAL-2026-12058 | Malicious | Not scored | 05 Aug, 2026 | npm @zzzgenesis00/spl-token-utils |
Malicious release: Malicious code in tinkoff-boxy-mobile-vivid-heading (npm) GHSA-233h-rfx9-5vw9, MAL-2026-12075 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-boxy-mobile-vivid-heading |
Malicious release: Malicious code in tinkoff-cache-path (npm) GHSA-phw8-h49c-9v2q, MAL-2026-12076 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-cache-path |
Malicious release: Malicious code in statist-browser-typed-client-nfs.grocery.mobile.events (npm) GHSA-82jq-m327-383g, MAL-2026-12074 | Malicious | Not scored | 05 Aug, 2026 | npm statist-browser-typed-client-nfs.grocery.mobile.events |
Malicious release: Malicious code in bigops-customer (npm) MAL-2026-12038 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-customer |
Malicious release: Malicious code in statist-browser-typed-client-hra.workplacer.events (npm) GHSA-679q-9657-vwr6, MAL-2026-12045 | Malicious | Not scored | 05 Aug, 2026 | npm statist-browser-typed-client-hra.workplacer.events |
Malicious release: Malicious code in bigops-create-manifest (npm) MAL-2026-12037 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-create-manifest |
Malicious release: Malicious code in tui-react-mobile-styles (npm) MAL-2026-12053 | Malicious | Not scored | 05 Aug, 2026 | npm tui-react-mobile-styles |
Malicious release: Malicious code in beaver-ui-form-modal (npm) MAL-2026-12034 | Malicious | Not scored | 05 Aug, 2026 | npm beaver-ui-form-modal |
Malicious release: Malicious code in statist-browser-typed-client-test.jumpwork.circuitbreaker (npm) GHSA-xwjr-gcm9-3fcv, MAL-2026-12046 | Malicious | Not scored | 05 Aug, 2026 | npm statist-browser-typed-client-test.jumpwork.circuitbreaker |