Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in trailserver (npm) MAL-2026-12484 | Malicious | Not scored | 05 Aug, 2026 | npm trailserver |
Malicious release: Malicious code in voicemail (npm) MAL-2026-12496 | Malicious | Not scored | 05 Aug, 2026 | npm voicemail |
Malicious release: Malicious code in luluking (npm) MAL-2026-12397 | Malicious | Not scored | 05 Aug, 2026 | npm luluking |
Malicious release: Malicious code in alpha-helper (npm) MAL-2026-12338 | Malicious | Not scored | 05 Aug, 2026 | npm alpha-helper |
Malicious release: Malicious code in @nextco/utils (npm) MAL-2026-12325 | Malicious | Not scored | 05 Aug, 2026 | npm @nextco/utils |
Malicious release: Malicious code in streak-daykey-lib (npm) GHSA-v22h-w6r5-jwfx, MAL-2026-12465 | Malicious | Not scored | 05 Aug, 2026 | npm streak-daykey-lib |
Malicious release: Malicious code in sc-geeksquad-core (npm) MAL-2026-12435 | Malicious | Not scored | 05 Aug, 2026 | npm sc-geeksquad-core |
Malicious release: Malicious code in @cryptosrvc/shift-exchange-root (npm) MAL-2026-12316 | Malicious | Not scored | 05 Aug, 2026 | npm @cryptosrvc/shift-exchange-root |
Malicious release: Malicious code in uploader-frontend (npm) MAL-2026-12491 | Malicious | Not scored | 05 Aug, 2026 | npm uploader-frontend |
Malicious release: Malicious code in uploader-frontend-legacy (npm) MAL-2026-12492 | Malicious | Not scored | 05 Aug, 2026 | npm uploader-frontend-legacy |
Malicious release: Malicious code in croft-node (npm) MAL-2026-12358 | Malicious | Not scored | 05 Aug, 2026 | npm croft-node |
Malicious release: Malicious code in jquery.ui.tabs (npm) MAL-2026-12395 | Malicious | Not scored | 05 Aug, 2026 | npm jquery.ui.tabs |
Malicious release: Malicious code in node-cache-multithread (npm) MAL-2026-12403 | Malicious | Not scored | 05 Aug, 2026 | npm node-cache-multithread |
Malicious release: Malicious code in rollup-plugins-polyfills-rode (npm) MAL-2026-12430 | Malicious | Not scored | 05 Aug, 2026 | npm rollup-plugins-polyfills-rode |
Malicious release: Malicious code in jquery.ui.core (npm) MAL-2026-12394 | Malicious | Not scored | 05 Aug, 2026 | npm jquery.ui.core |
Malicious release: Malicious code in @kite-js-tools/core (npm) MAL-2026-12319 | Malicious | Not scored | 05 Aug, 2026 | npm @kite-js-tools/core |
Malicious release: Malicious code in ach-detail (npm) MAL-2026-12334 | Malicious | Not scored | 05 Aug, 2026 | npm ach-detail |
Malicious release: Malicious code in token-list-fetcher (npm) MAL-2026-12481 | Malicious | Not scored | 05 Aug, 2026 | npm token-list-fetcher |
Malicious release: Malicious code in express-rate-controller (npm) MAL-2026-12378 | Malicious | Not scored | 05 Aug, 2026 | npm express-rate-controller |
Malicious release: Malicious code in rollup-plugins-check (npm) MAL-2026-12429 | Malicious | Not scored | 05 Aug, 2026 | npm rollup-plugins-check |
Malicious release: Malicious code in clover-codelab-remote-pay-cloud (npm) MAL-2026-12353 | Malicious | Not scored | 05 Aug, 2026 | npm clover-codelab-remote-pay-cloud |
Malicious release: Malicious code in @mgor/fw-canary-20260725-394b024b (npm) MAL-2026-12321 | Malicious | Not scored | 05 Aug, 2026 | npm @mgor/fw-canary-20260725-394b024b |
Malicious release: Malicious code in npm-module-service (npm) MAL-2026-12404 | Malicious | Not scored | 05 Aug, 2026 | npm npm-module-service |
Malicious release: Malicious code in tool-registry-scripts (npm) GHSA-r8mg-hv3j-fc44, MAL-2026-12482 | Malicious | Not scored | 05 Aug, 2026 | npm tool-registry-scripts |
Malicious release: Malicious code in @shiftmarkets/shift-sdk-v4 (npm) MAL-2026-12329 | Malicious | Not scored | 05 Aug, 2026 | npm @shiftmarkets/shift-sdk-v4 |
Malicious release: Malicious code in pp-react-worldready-v5 (npm) MAL-2026-12419 | Malicious | Not scored | 05 Aug, 2026 | npm pp-react-worldready-v5 |
Malicious release: Malicious code in luluking3 (npm) MAL-2026-12399 | Malicious | Not scored | 05 Aug, 2026 | npm luluking3 |
Malicious release: Malicious code in electrode-ota-ui-app (npm) GHSA-mxx2-5pvc-7hc9, MAL-2026-12368 | Malicious | Not scored | 05 Aug, 2026 | npm electrode-ota-ui-app |
Malicious release: Malicious code in matlab-azure-devops-extension (npm) GHSA-9cfc-3wfm-r8p5, MAL-2026-12400 | Malicious | Not scored | 05 Aug, 2026 | npm matlab-azure-devops-extension |
Malicious release: Malicious code in luluking2 (npm) MAL-2026-12398 | Malicious | Not scored | 05 Aug, 2026 | npm luluking2 |
Malicious release: Malicious code in fastify-client-bundler (npm) MAL-2026-12379 | Malicious | Not scored | 05 Aug, 2026 | npm fastify-client-bundler |
Malicious release: Malicious code in @cryptosrvc/no-brainer-sdk (npm) MAL-2026-12315 | Malicious | Not scored | 05 Aug, 2026 | npm @cryptosrvc/no-brainer-sdk |
Malicious release: Malicious code in @cryptosrvc/shift-sdk-v4 (npm) MAL-2026-12317 | Malicious | Not scored | 05 Aug, 2026 | npm @cryptosrvc/shift-sdk-v4 |
Malicious release: Malicious code in hyper-kube-config (npm) GHSA-pvc8-7whj-r3w4, MAL-2026-12392 | Malicious | Not scored | 05 Aug, 2026 | npm hyper-kube-config |
Malicious release: Malicious code in poly-custom-api (npm) MAL-2026-12416 | Malicious | Not scored | 05 Aug, 2026 | npm poly-custom-api |
Malicious release: Malicious code in akamaijs-sensor (npm) MAL-2026-12337 | Malicious | Not scored | 05 Aug, 2026 | npm akamaijs-sensor |
Malicious release: Malicious code in remote_session_elements (npm) MAL-2026-12427 | Malicious | Not scored | 05 Aug, 2026 | npm remote_session_elements |
Malicious release: Malicious code in content-publisher-sdks (npm) GHSA-cmjx-pgm3-j5gc, MAL-2026-12356 | Malicious | Not scored | 05 Aug, 2026 | npm content-publisher-sdks |
Malicious release: Malicious code in crypto-javas (npm) MAL-2026-12359 | Malicious | Not scored | 05 Aug, 2026 | npm crypto-javas |
Malicious release: Malicious code in relativity-foundation-core (npm) MAL-2026-12426 | Malicious | Not scored | 05 Aug, 2026 | npm relativity-foundation-core |
Malicious release: Malicious code in fundraiserservpp (npm) MAL-2026-12386 | Malicious | Not scored | 05 Aug, 2026 | npm fundraiserservpp |
Malicious release: Malicious code in streak-view-core (npm) GHSA-vv6v-hc8c-p5q9, MAL-2026-12471 | Malicious | Not scored | 05 Aug, 2026 | npm streak-view-core |
Malicious release: Malicious code in rpc-endpoint-rotator (npm) MAL-2026-12431 | Malicious | Not scored | 05 Aug, 2026 | npm rpc-endpoint-rotator |
Malicious release: Malicious code in chai-as-rendered (npm) MAL-2026-12348 | Malicious | Not scored | 05 Aug, 2026 | npm chai-as-rendered |
Malicious release: Malicious code in eth-codegen (npm) MAL-2026-12371 | Malicious | Not scored | 05 Aug, 2026 | npm eth-codegen |
Malicious release: Malicious code in vscode-designer-14 (npm) MAL-2026-12497 | Malicious | Not scored | 05 Aug, 2026 | npm vscode-designer-14 |
Malicious release: Malicious code in wagmi-react (npm) MAL-2026-12498 | Malicious | Not scored | 05 Aug, 2026 | npm wagmi-react |
Malicious release: Malicious code in cors-security (npm) MAL-2026-12357 | Malicious | Not scored | 05 Aug, 2026 | npm cors-security |
Malicious release: Malicious code in shift-sdk-v5 (npm) MAL-2026-12436 | Malicious | Not scored | 05 Aug, 2026 | npm shift-sdk-v5 |
Malicious release: Malicious code in react-native-ui-message (npm) GHSA-w3j6-3pww-qfcw, MAL-2026-12424 | Malicious | Not scored | 05 Aug, 2026 | npm react-native-ui-message |