Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in pxnpm (npm) MAL-2026-17710 | Malicious | Not scored | 21 days ago | npm pxnpm |
Malicious release: Malicious code in wix-reg-poc-bypass (npm) MAL-2026-17711 | Malicious | Not scored | 22 days ago | npm wix-reg-poc-bypass |
Malicious release: Malicious code in @brick-v2/brand (npm) MAL-2026-17714 | Malicious | Not scored | 22 days ago | npm @brick-v2/brand |
Malicious release: Malicious code in @brick-v2/core (npm) MAL-2026-17715 | Malicious | Not scored | 22 days ago | npm @brick-v2/core |
Malicious release: Malicious code in @brick-v2/form (npm) MAL-2026-17716 | Malicious | Not scored | 22 days ago | npm @brick-v2/form |
Malicious release: Malicious code in @brick-v2/icons (npm) MAL-2026-17717 | Malicious | Not scored | 22 days ago | npm @brick-v2/icons |
Malicious release: Malicious code in @brick-v2/table (npm) MAL-2026-17718 | Malicious | Not scored | 22 days ago | npm @brick-v2/table |
Malicious release: Malicious code in @brick-v2/tour (npm) MAL-2026-17719 | Malicious | Not scored | 22 days ago | npm @brick-v2/tour |
Malicious release: Malicious code in @galicia-toolkit-cheques-nc/front (npm) MAL-2026-17720 | Malicious | Not scored | 22 days ago | npm @galicia-toolkit-cheques-nc/front |
Malicious release: Malicious code in @galicia-toolkit-nestjs/archetype (npm) MAL-2026-17721 | Malicious | Not scored | 22 days ago | npm @galicia-toolkit-nestjs/archetype |
Malicious release: Malicious code in @galicia-toolkit-nestjs/commons (npm) MAL-2026-17722 | Malicious | Not scored | 22 days ago | npm @galicia-toolkit-nestjs/commons |
Malicious release: Malicious code in @galicia-toolkit-nestjs/paas (npm) MAL-2026-17723 | Malicious | Not scored | 22 days ago | npm @galicia-toolkit-nestjs/paas |
Malicious release: Malicious code in @galicia-toolkit-nestjs/swagger (npm) MAL-2026-17724 | Malicious | Not scored | 22 days ago | npm @galicia-toolkit-nestjs/swagger |
Malicious release: Malicious code in @galicia-toolkit-nestjs-20/archetype (npm) MAL-2026-17725 | Malicious | Not scored | 22 days ago | npm @galicia-toolkit-nestjs-20/archetype |
Malicious release: Malicious code in @galicia-toolkit-nestjs-20/commons (npm) MAL-2026-17726 | Malicious | Not scored | 22 days ago | npm @galicia-toolkit-nestjs-20/commons |
Malicious release: Malicious code in @galicia-toolkit-nestjs-20/paas (npm) MAL-2026-17727 | Malicious | Not scored | 22 days ago | npm @galicia-toolkit-nestjs-20/paas |
Malicious release: Malicious code in @galicia-toolkit-nestjs-20-lite/archetype (npm) MAL-2026-17728 | Malicious | Not scored | 22 days ago | npm @galicia-toolkit-nestjs-20-lite/archetype |
Malicious release: Malicious code in @galicia-toolkit-nestjs-20-lite/commons (npm) MAL-2026-17729 | Malicious | Not scored | 22 days ago | npm @galicia-toolkit-nestjs-20-lite/commons |
Malicious release: Malicious code in @galicia-toolkit-nestjs-20-lite/paas (npm) MAL-2026-17730 | Malicious | Not scored | 22 days ago | npm @galicia-toolkit-nestjs-20-lite/paas |
Malicious release: Malicious code in revine (npm) GHSA-gr77-3hqf-674h, MAL-2026-17709 | Malicious | Not scored | 22 days ago | npm revine |
Malicious release: Malicious code in testrrrd (npm) MAL-2026-17706 | Malicious | Not scored | 22 days ago | npm testrrrd |
Malicious release: Malicious code in @wxwxtest/testrrrdd (npm) MAL-2026-17704 | Malicious | Not scored | 22 days ago | npm @wxwxtest/testrrrdd |
Malicious release: Malicious code in wie888r (npm) MAL-2026-17707 | Malicious | Not scored | 22 days ago | npm wie888r |
Malicious release: Malicious code in xblaxw (npm) MAL-2026-17708 | Malicious | Not scored | 22 days ago | npm xblaxw |
Malicious release: Malicious code in css-overscroll-contain (npm) GHSA-xjrr-fv8j-9hw7, MAL-2026-17705 | Malicious | Not scored | 22 days ago | npm css-overscroll-contain |
Malicious release: Malicious code in @kxafunc/xbails (npm) MAL-2026-17701 | Malicious | Not scored | 22 days ago | npm @kxafunc/xbails |
Malicious release: Malicious code in @bitwardne/jslib (npm) MAL-2026-17694 | Malicious | Not scored | 22 days ago | npm @bitwardne/jslib |
Malicious release: Malicious code in @bitwardne/cli (npm) MAL-2026-17693 | Malicious | Not scored | 22 days ago | npm @bitwardne/cli |
Malicious release: Malicious code in clickfix_npm_delivery (npm) GHSA-37h8-m54m-784j, MAL-2026-17692 | Malicious | Not scored | 22 days ago | npm clickfix_npm_delivery |
Malicious release: Malicious code in @galicia-toolkit/core (npm) GHSA-ff43-rphq-9mgw, MAL-2026-17688 | Malicious | Not scored | 22 days ago | npm @galicia-toolkit/core |
Malicious release: Malicious code in tailwindcss-effects-kit (npm) GHSA-9c94-xcv7-wcf4, MAL-2026-17686 | Malicious | Not scored | 22 days ago | npm tailwindcss-effects-kit |
Malicious release: Malicious code in tailwindcss-ui-extensions (npm) GHSA-9ww2-25r2-rppg, MAL-2026-17687 | Malicious | Not scored | 22 days ago | npm tailwindcss-ui-extensions |
Malicious release: Malicious code in @galicia-toolkit/error-master (npm) GHSA-42vv-c8c8-q765, MAL-2026-17689 | Malicious | Not scored | 22 days ago | npm @galicia-toolkit/error-master |
Malicious release: Malicious code in @galicia-toolkit/tag-manager (npm) GHSA-q3gj-mpgg-cqpv, MAL-2026-17691 | Malicious | Not scored | 22 days ago | npm @galicia-toolkit/tag-manager |
Malicious release: Malicious code in @galicia-toolkit/spa-build-config (npm) GHSA-7hx2-c7qp-ggjp, MAL-2026-17690 | Malicious | Not scored | 22 days ago | npm @galicia-toolkit/spa-build-config |
Malicious release: Malicious code in connector-agent (npm) GHSA-422j-hgjh-g8fg, MAL-2026-17682 | Malicious | Not scored | 22 days ago | npm connector-agent |
Malicious release: Malicious code in system-driver (npm) GHSA-43w2-g2fc-r4h3, MAL-2026-17685 | Malicious | Not scored | 22 days ago | npm system-driver |
Malicious release: Malicious code in node-fetch-lite (npm) GHSA-cfmp-vp7q-257m, MAL-2026-17683 | Malicious | Not scored | 22 days ago | npm node-fetch-lite |
Malicious release: Malicious code in node-gyp-runtime (npm) GHSA-v64f-f8pp-4qx2, MAL-2026-17684 | Malicious | Not scored | 22 days ago | npm node-gyp-runtime |
Malicious release: Malicious code in node-env-resolve (npm) GHSA-fw57-xw67-r253, MAL-2026-17681 | Malicious | Not scored | 22 days ago | npm node-env-resolve |
Malicious release: Malicious code in @bellaxchuu/familyxtrx (npm) GHSA-jgwg-m26g-j9c2, MAL-2026-17344 | Malicious | Not scored | 22 days ago | npm @bellaxchuu/familyxtrx |
Malicious release: Malicious code in @bellaxchuu/overbugs (npm) GHSA-mhqg-97g5-qg8m, MAL-2026-17677 | Malicious | Not scored | 22 days ago | npm @bellaxchuu/overbugs |
Malicious release: Malicious code in @bellaxchuu/libsignal-node (npm) GHSA-3x55-8979-2xhq, MAL-2026-17676 | Malicious | Not scored | 22 days ago | npm @bellaxchuu/libsignal-node |
Malicious release: Malicious code in @bellaxchuu/privatebails (npm) GHSA-46rh-wx96-cw47, MAL-2026-17346 | Malicious | Not scored | 22 days ago | npm @bellaxchuu/privatebails |
Malicious release: Malicious code in @bellaxchuu/flowblue (npm) GHSA-4gc8-pmgh-hx47, MAL-2026-17345 | Malicious | Not scored | 22 days ago | npm @bellaxchuu/flowblue |
Malicious release: Malicious code in @bellaxchuu/xtrxbails (npm) GHSA-5f6x-qj83-2895, MAL-2026-17350 | Malicious | Not scored | 22 days ago | npm @bellaxchuu/xtrxbails |
Malicious release: Malicious code in @bellaxchuu/skyblue (npm) GHSA-5x7v-4r7v-353c, MAL-2026-17347 | Malicious | Not scored | 22 days ago | npm @bellaxchuu/skyblue |
Malicious release: Malicious code in @bellaxchuu/velvetry (npm) GHSA-9jwq-m497-mcq5, MAL-2026-17349 | Malicious | Not scored | 22 days ago | npm @bellaxchuu/velvetry |
Malicious release: Malicious code in @bellaxchuu/xbailey (npm) GHSA-rq65-h2vx-ww39, MAL-2026-17678 | Malicious | Not scored | 22 days ago | npm @bellaxchuu/xbailey |
Malicious release: Malicious code in @bellaxchuu/yarnbails (npm) GHSA-mff5-fqw5-7vhj, MAL-2026-17680 | Malicious | Not scored | 22 days ago | npm @bellaxchuu/yarnbails |