Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in hridoy-ultimate (npm) MAL-2026-17803 | Malicious | Not scored | 19 days ago | npm hridoy-ultimate |
Malicious release: Malicious code in @coopeuch/core (npm) GHSA-8jgp-jmwc-7fxg, MAL-2026-17763 | Malicious | Not scored | 19 days ago | npm @coopeuch/core |
Malicious release: Malicious code in @coopeuch/components (npm) GHSA-8m68-7f2m-4825, MAL-2026-17761 | Malicious | Not scored | 19 days ago | npm @coopeuch/components |
Malicious release: Malicious code in @s4yhiitestpoc/scan-https-d (npm) GHSA-96fg-4mp3-2hj5, MAL-2026-17766 | Malicious | Not scored | 19 days ago | npm @s4yhiitestpoc/scan-https-d |
Malicious release: Malicious code in @coopeuch/common (npm) GHSA-5h58-475h-6287, MAL-2026-17760 | Malicious | Not scored | 19 days ago | npm @coopeuch/common |
Malicious release: Malicious code in @s4yhiitestpoc/r2-https (npm) MAL-2026-17764 | Malicious | Not scored | 19 days ago | npm @s4yhiitestpoc/r2-https |
Malicious release: Malicious code in @s4yhiitestpoc/r3-https (npm) GHSA-798w-mj69-gc2x, MAL-2026-17765 | Malicious | Not scored | 19 days ago | npm @s4yhiitestpoc/r3-https |
Malicious release: Malicious code in react-paginate-v5 (npm) MAL-2026-17777 | Malicious | Not scored | 19 days ago | npm react-paginate-v5 |
Malicious release: Malicious code in liferay-workspace-scripts (npm) GHSA-rm73-xcfr-76qq, MAL-2026-17772 | Malicious | Not scored | 19 days ago | npm liferay-workspace-scripts |
Malicious release: Malicious code in ksp-app (npm) MAL-2026-17770 | Malicious | Not scored | 19 days ago | npm ksp-app |
Malicious release: Malicious code in ksp-client-registry (npm) MAL-2026-17771 | Malicious | Not scored | 19 days ago | npm ksp-client-registry |
Malicious release: Malicious code in another-very-long-name (npm) MAL-2026-17767 | Malicious | Not scored | 19 days ago | npm another-very-long-name |
Malicious release: Malicious code in some-very-long-package-name (npm) MAL-2026-17778 | Malicious | Not scored | 19 days ago | npm some-very-long-package-name |
Malicious release: Malicious code in nested-lib (npm) MAL-2026-17773 | Malicious | Not scored | 19 days ago | npm nested-lib |
Malicious release: Malicious code in pay-methods-kmf (npm) MAL-2026-17776 | Malicious | Not scored | 19 days ago | npm pay-methods-kmf |
Malicious release: Malicious code in cloudflare_module (npm) MAL-2026-17768 | Malicious | Not scored | 19 days ago | npm cloudflare_module |
Malicious release: Malicious code in @coopeuch/button (npm) GHSA-55qj-2wwm-x5v6, MAL-2026-17759 | Malicious | Not scored | 19 days ago | npm @coopeuch/button |
Malicious release: Malicious code in deposit-limit-fe (npm) MAL-2026-17769 | Malicious | Not scored | 19 days ago | npm deposit-limit-fe |
Malicious release: Malicious code in nitro-cjs-requirer (npm) MAL-2026-17775 | Malicious | Not scored | 19 days ago | npm nitro-cjs-requirer |
Malicious release: Malicious code in @coopeuch/config (npm) GHSA-5w9x-2gg7-px58, MAL-2026-17762 | Malicious | Not scored | 19 days ago | npm @coopeuch/config |
Malicious release: Malicious code in nitro-bundled-dep (npm) MAL-2026-17774 | Malicious | Not scored | 19 days ago | npm nitro-bundled-dep |
Malicious release: Malicious code in orderly-plugin-liquidity-heatmap (npm) GHSA-83cj-fp7v-jmfx, MAL-2026-17848 | Malicious | Not scored | 19 days ago | npm orderly-plugin-liquidity-heatmap |
Malicious release: Malicious code in react-dropzone-v4 (npm) GHSA-cqf2-3c3q-p639, MAL-2026-17758 | Malicious | Not scored | 19 days ago | npm react-dropzone-v4 |
Malicious release: Malicious code in @library-wide/library-shell (npm) GHSA-8j36-pr5c-f6vx, MAL-2026-17754 | Malicious | Not scored | 20 days ago | npm @library-wide/library-shell |
Malicious release: Malicious code in passwordcracker (npm) MAL-2026-17864 | Malicious | Not scored | 21 days ago | npm passwordcracker |
Malicious release: Malicious code in passwordcrackv2 (npm) MAL-2026-17865 | Malicious | Not scored | 21 days ago | npm passwordcrackv2 |
Malicious release: Malicious code in @fer2809fl/baileys (npm) GHSA-wv7g-r3r9-ww8v, MAL-2026-17750 | Malicious | Not scored | 21 days ago | npm @fer2809fl/baileys |
Malicious release: Malicious code in cloud-baileys (npm) GHSA-745p-g872-6x8c, MAL-2026-17751 | Malicious | Not scored | 21 days ago | npm cloud-baileys |
Malicious release: Malicious code in arsya-baileys (npm) GHSA-pv3g-8jvf-qc7x, MAL-2026-17387 | Malicious | Not scored | 21 days ago | npm arsya-baileys |
Malicious release: Malicious code in @myorder-frontend-commons/analytics (npm) GHSA-4xrc-8qvp-c7r5, MAL-2026-17749 | Malicious | Not scored | 21 days ago | npm @myorder-frontend-commons/analytics |
Malicious release: Malicious code in kmf-i18n (npm) MAL-2026-17747 | Malicious | Not scored | 21 days ago | npm kmf-i18n |
Malicious release: Malicious code in test-account-portal-fe (npm) MAL-2026-17748 | Malicious | Not scored | 21 days ago | npm test-account-portal-fe |
Malicious release: Malicious code in kmf-bootstrap (npm) MAL-2026-17746 | Malicious | Not scored | 21 days ago | npm kmf-bootstrap |
Malicious release: Malicious code in bungoma (npm) GHSA-jj55-mvw9-496r, MAL-2026-17389 | Malicious | Not scored | 21 days ago | npm bungoma |
Malicious release: Malicious code in @bellaxchuu/teambails (npm) MAL-2026-17348 | Malicious | Not scored | 21 days ago | npm @bellaxchuu/teambails |
Malicious release: Malicious code in @tunstock/remact-dom (npm) MAL-2026-17745 | Malicious | Not scored | 21 days ago | npm @tunstock/remact-dom |
Malicious release: Malicious code in kmf-vendor-pack (npm) MAL-2026-17744 | Malicious | Not scored | 21 days ago | npm kmf-vendor-pack |
Malicious release: Malicious code in tailwind-animatecss-form (npm) GHSA-pp69-57rc-3v49, MAL-2026-17743 | Malicious | Not scored | 21 days ago | npm tailwind-animatecss-form |
Malicious release: Malicious code in hanncap (npm) GHSA-jw9f-6xx8-mj3f, MAL-2026-17740 | Malicious | Not scored | 21 days ago | npm hanncap |
Malicious release: Malicious code in asepxyz-baileys (npm) GHSA-xv7g-p6pq-vg9q, MAL-2026-17733 | Malicious | Not scored | 21 days ago | npm asepxyz-baileys |
Malicious release: Malicious code in asepxyz-signal (npm) GHSA-38rx-c4rh-xc4p, MAL-2026-17735 | Malicious | Not scored | 21 days ago | npm asepxyz-signal |
Malicious release: Malicious code in asepxyz12 (npm) GHSA-3rxj-r3x6-3992, MAL-2026-17736 | Malicious | Not scored | 21 days ago | npm asepxyz12 |
Malicious release: Malicious code in @aseppxyzz12/baileys (npm) GHSA-4pw9-3c22-g559, MAL-2026-17731 | Malicious | Not scored | 21 days ago | npm @aseppxyzz12/baileys |
Malicious release: Malicious code in razamodsxasepxyz (npm) GHSA-f3vq-wx4x-jv6w, MAL-2026-17742 | Malicious | Not scored | 21 days ago | npm razamodsxasepxyz |
Malicious release: Malicious code in pahinuy (npm) GHSA-hcwg-cqc9-469q, MAL-2026-17741 | Malicious | Not scored | 21 days ago | npm pahinuy |
Malicious release: Malicious code in asepxyzz (npm) GHSA-hmqh-m5mj-f7mm, MAL-2026-17739 | Malicious | Not scored | 21 days ago | npm asepxyzz |
Malicious release: Malicious code in asepxyznew (npm) GHSA-m23r-8cxr-4gw3, MAL-2026-17737 | Malicious | Not scored | 21 days ago | npm asepxyznew |
Malicious release: Malicious code in asepxyz (npm) GHSA-qvwh-x99q-h49x, MAL-2026-17732 | Malicious | Not scored | 21 days ago | npm asepxyz |
Malicious release: Malicious code in asepxyz-eslint-config (npm) GHSA-rhjp-rpj7-8x4q, MAL-2026-17734 | Malicious | Not scored | 21 days ago | npm asepxyz-eslint-config |
Malicious release: Malicious code in asepxyzxrazamodsnew-baileys (npm) GHSA-v95p-rhxh-mm8g, MAL-2026-17738 | Malicious | Not scored | 21 days ago | npm asepxyzxrazamodsnew-baileys |