Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @zzzgenesis00/bitcoin-lib (npm) MAL-2026-12118 | Malicious | Not scored | 05 Aug, 2026 | npm @zzzgenesis00/bitcoin-lib |
Malicious release: Malicious code in @zzzgenesis00/web3-utils-crypto (npm) MAL-2026-12125 | Malicious | Not scored | 05 Aug, 2026 | npm @zzzgenesis00/web3-utils-crypto |
Malicious release: Malicious code in @zzzgenesis00/near-api (npm) MAL-2026-12122 | Malicious | Not scored | 05 Aug, 2026 | npm @zzzgenesis00/near-api |
Malicious release: Malicious code in @zzzgenesis00/solana-spl-token (npm) MAL-2026-12123 | Malicious | Not scored | 05 Aug, 2026 | npm @zzzgenesis00/solana-spl-token |
Malicious release: Malicious code in @zzzgenesis00/tronweb3 (npm) MAL-2026-12124 | Malicious | Not scored | 05 Aug, 2026 | npm @zzzgenesis00/tronweb3 |
Malicious release: Malicious code in @zzzgenesis00/bitcoinjs-wallet (npm) MAL-2026-12119 | Malicious | Not scored | 05 Aug, 2026 | npm @zzzgenesis00/bitcoinjs-wallet |
Malicious release: Malicious code in @zzzgenesis00/hd-key-generator (npm) MAL-2026-12121 | Malicious | Not scored | 05 Aug, 2026 | npm @zzzgenesis00/hd-key-generator |
Malicious release: Malicious code in sextant-relay-darwin-arm64 (npm) MAL-2026-12193 | Malicious | Not scored | 05 Aug, 2026 | npm sextant-relay-darwin-arm64 |
Malicious release: Malicious code in @wethenorth12/test-fresh (npm) MAL-2026-12104 | Malicious | Not scored | 05 Aug, 2026 | npm @wethenorth12/test-fresh |
Malicious release: Malicious code in @wethenorth12/etherjs (npm) MAL-2026-12092 | Malicious | Not scored | 05 Aug, 2026 | npm @wethenorth12/etherjs |
Malicious release: Malicious code in @wethenorth12/solana-web3 (npm) MAL-2026-12102 | Malicious | Not scored | 05 Aug, 2026 | npm @wethenorth12/solana-web3 |
Malicious release: Malicious code in @wethenorth12/crypto-config (npm) MAL-2026-12089 | Malicious | Not scored | 05 Aug, 2026 | npm @wethenorth12/crypto-config |
Malicious release: Malicious code in @wethenorth12/bip39-generator (npm) MAL-2026-12085 | Malicious | Not scored | 05 Aug, 2026 | npm @wethenorth12/bip39-generator |
Malicious release: Malicious code in @wethenorth12/bitcoin-lib (npm) MAL-2026-12087 | Malicious | Not scored | 05 Aug, 2026 | npm @wethenorth12/bitcoin-lib |
Malicious release: Malicious code in @wethenorth12/docker-api-client (npm) MAL-2026-12090 | Malicious | Not scored | 05 Aug, 2026 | npm @wethenorth12/docker-api-client |
Malicious release: Malicious code in @wethenorth12/bip39-mnemonic (npm) MAL-2026-12086 | Malicious | Not scored | 05 Aug, 2026 | npm @wethenorth12/bip39-mnemonic |
Malicious release: Malicious code in @wethenorth12/bitcoinjs-wallet (npm) MAL-2026-12088 | Malicious | Not scored | 05 Aug, 2026 | npm @wethenorth12/bitcoinjs-wallet |
Malicious release: Malicious code in @wethenorth12/web3-utils-crypto (npm) MAL-2026-12107 | Malicious | Not scored | 05 Aug, 2026 | npm @wethenorth12/web3-utils-crypto |
Malicious release: Malicious code in @wethenorth12/env-loader (npm) MAL-2026-12091 | Malicious | Not scored | 05 Aug, 2026 | npm @wethenorth12/env-loader |
Malicious release: Malicious code in @wethenorth12/tronweb3 (npm) MAL-2026-12105 | Malicious | Not scored | 05 Aug, 2026 | npm @wethenorth12/tronweb3 |
Malicious release: Malicious code in @wethenorth12/solana-spl-token (npm) MAL-2026-12100 | Malicious | Not scored | 05 Aug, 2026 | npm @wethenorth12/solana-spl-token |
Malicious release: Malicious code in @wethenorth12/playwrite (npm) MAL-2026-12099 | Malicious | Not scored | 05 Aug, 2026 | npm @wethenorth12/playwrite |
Malicious release: Malicious code in @wethenorth12/spl-token-utils (npm) MAL-2026-12103 | Malicious | Not scored | 05 Aug, 2026 | npm @wethenorth12/spl-token-utils |
Malicious release: Malicious code in @wethenorth12/solana-wallet-adapter (npm) MAL-2026-12101 | Malicious | Not scored | 05 Aug, 2026 | npm @wethenorth12/solana-wallet-adapter |
Malicious release: Malicious code in @wethenorth12/hd-key-generator (npm) MAL-2026-12095 | Malicious | Not scored | 05 Aug, 2026 | npm @wethenorth12/hd-key-generator |
Malicious release: Malicious code in @wethenorth12/ethers-wallet (npm) MAL-2026-12094 | Malicious | Not scored | 05 Aug, 2026 | npm @wethenorth12/ethers-wallet |
Malicious release: Malicious code in @wethenorth12/ethers-signer (npm) MAL-2026-12093 | Malicious | Not scored | 05 Aug, 2026 | npm @wethenorth12/ethers-signer |
Malicious release: Malicious code in @wethenorth12/hdkey-wallet (npm) MAL-2026-12096 | Malicious | Not scored | 05 Aug, 2026 | npm @wethenorth12/hdkey-wallet |
Malicious release: Malicious code in @wethenorth12/near-api (npm) MAL-2026-12098 | Malicious | Not scored | 05 Aug, 2026 | npm @wethenorth12/near-api |
Malicious release: Malicious code in @wethenorth12/web3-provider-engine (npm) MAL-2026-12106 | Malicious | Not scored | 05 Aug, 2026 | npm @wethenorth12/web3-provider-engine |
Malicious release: Malicious code in @wethenorth12/mnemonic-to-key (npm) MAL-2026-12097 | Malicious | Not scored | 05 Aug, 2026 | npm @wethenorth12/mnemonic-to-key |
Malicious release: Malicious code in tailwind-hide-scrollbar (npm) GHSA-97j6-7w7w-7vj3, MAL-2026-12116 | Malicious | Not scored | 05 Aug, 2026 | npm tailwind-hide-scrollbar |
Malicious release: Malicious code in streak-calc-math (npm) MAL-2026-12114 | Malicious | Not scored | 05 Aug, 2026 | npm streak-calc-math |
Malicious release: Malicious code in @ccfly/setup-darwin-arm64 (npm) MAL-2026-12084 | Malicious | Not scored | 05 Aug, 2026 | npm @ccfly/setup-darwin-arm64 |
Malicious release: Malicious code in streak-math-calc (npm) GHSA-vvg8-qpgg-c28r, MAL-2026-12115 | Malicious | Not scored | 05 Aug, 2026 | npm streak-math-calc |
Malicious release: Malicious code in bip32-js (npm) MAL-2026-12109 | Malicious | Not scored | 05 Aug, 2026 | npm bip32-js |
Malicious release: Malicious code in python-bitcoinlib (npm) MAL-2026-12113 | Malicious | Not scored | 05 Aug, 2026 | npm python-bitcoinlib |
Malicious release: Malicious code in mnemonic-utils (npm) MAL-2026-12112 | Malicious | Not scored | 05 Aug, 2026 | npm mnemonic-utils |
Malicious release: Malicious code in ethereum-sign-utils (npm) MAL-2026-12110 | Malicious | Not scored | 05 Aug, 2026 | npm ethereum-sign-utils |
Malicious release: Malicious code in ethers-lib (npm) MAL-2026-12111 | Malicious | Not scored | 05 Aug, 2026 | npm ethers-lib |
Malicious release: Malicious code in alipclutch-baileys (npm) GHSA-7c8r-gc84-h9fv, MAL-2026-12108 | Malicious | Not scored | 05 Aug, 2026 | npm alipclutch-baileys |
Malicious release: Malicious code in @zzzgenesis00/mnemonic-to-key (npm) MAL-2026-12056 | Malicious | Not scored | 05 Aug, 2026 | npm @zzzgenesis00/mnemonic-to-key |
Malicious release: Malicious code in volna-boxy-di-test (npm) GHSA-2gq5-r78g-rrmq, MAL-2026-12079 | Malicious | Not scored | 05 Aug, 2026 | npm volna-boxy-di-test |
Malicious release: Malicious code in @zzzgenesis00/docker-api-client (npm) MAL-2026-12055 | Malicious | Not scored | 05 Aug, 2026 | npm @zzzgenesis00/docker-api-client |
Malicious release: Malicious code in beaver-ui-card-large (npm) MAL-2026-12060 | Malicious | Not scored | 05 Aug, 2026 | npm beaver-ui-card-large |
Malicious release: Malicious code in trezor-lib (npm) MAL-2026-12078 | Malicious | Not scored | 05 Aug, 2026 | npm trezor-lib |
Malicious release: Malicious code in hwi-lib (npm) MAL-2026-12067 | Malicious | Not scored | 05 Aug, 2026 | npm hwi-lib |
Malicious release: Malicious code in ckcc-protocol (npm) MAL-2026-12064 | Malicious | Not scored | 05 Aug, 2026 | npm ckcc-protocol |
Malicious release: Malicious code in bcore-bravo-eslint-config (npm) MAL-2026-12059 | Malicious | Not scored | 05 Aug, 2026 | npm bcore-bravo-eslint-config |
Malicious release: Malicious code in ledger-lib (npm) MAL-2026-12068 | Malicious | Not scored | 05 Aug, 2026 | npm ledger-lib |