Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in page-navigation (npm) MAL-2026-11064 | Malicious | Not scored | 25 Jul, 2026 | npm page-navigation |
Malicious release: Malicious code in identityscimapiserv (npm) GHSA-gv4f-vm3w-7v7w, MAL-2026-11061 | Malicious | Not scored | 25 Jul, 2026 | npm identityscimapiserv |
Malicious release: Malicious code in xo-member-components (npm) GHSA-r5v8-7g3c-jp8w, MAL-2026-11063 | Malicious | Not scored | 25 Jul, 2026 | npm xo-member-components |
Malicious release: Malicious code in f0-form-manipulator (npm) GHSA-r235-8hvg-777j, MAL-2026-11060 | Malicious | Not scored | 25 Jul, 2026 | npm f0-form-manipulator |
Malicious release: Malicious code in preferenceslifecycle-paypal (npm) GHSA-jpjh-7qpg-hqxv, MAL-2026-11062 | Malicious | Not scored | 25 Jul, 2026 | npm preferenceslifecycle-paypal |
Malicious release: Malicious code in merchantprefsservice-paypal (npm) GHSA-w6fc-gq73-j24m, MAL-2026-11057 | Malicious | Not scored | 25 Jul, 2026 | npm merchantprefsservice-paypal |
Malicious release: Malicious code in gpaas-paypal (npm) GHSA-c77x-6gm9-q7mf, MAL-2026-11056 | Malicious | Not scored | 25 Jul, 2026 | npm gpaas-paypal |
Malicious release: Malicious code in pp-react-ui5 (npm) GHSA-6h4j-g3j5-97rc, MAL-2026-11059 | Malicious | Not scored | 25 Jul, 2026 | npm pp-react-ui5 |
Malicious release: Malicious code in payoutsvettingserv-paypal (npm) GHSA-q284-v87w-8w6f, MAL-2026-11058 | Malicious | Not scored | 25 Jul, 2026 | npm payoutsvettingserv-paypal |
Malicious release: Malicious code in fundraiserservicepp (npm) MAL-2026-11055 | Malicious | Not scored | 25 Jul, 2026 | npm fundraiserservicepp |
Malicious release: Malicious code in clerk-next-fix-auth-protection (npm) MAL-2026-11069 | Malicious | Not scored | 24 Jul, 2026 | npm clerk-next-fix-auth-protection |
Malicious release: Malicious code in app-data-layer (npm) GHSA-346c-3w9c-8pmh, MAL-2026-11052 | Malicious | Not scored | 24 Jul, 2026 | npm app-data-layer |
Malicious release: Malicious code in app-node-layer (npm) GHSA-4xc7-2jx9-rp5j, MAL-2026-11054 | Malicious | Not scored | 24 Jul, 2026 | npm app-node-layer |
Malicious release: Malicious code in app-data-lts (npm) GHSA-c6xr-m3x3-23fm, MAL-2026-11053 | Malicious | Not scored | 24 Jul, 2026 | npm app-data-lts |
Malicious release: Malicious code in subapp-pkg-util (npm) GHSA-f946-r32q-xrp6, MAL-2026-11045 | Malicious | Not scored | 24 Jul, 2026 | npm subapp-pkg-util |
Malicious release: Malicious code in @daylightqc/date-fmt-lite (npm) MAL-2026-11041 | Malicious | Not scored | 24 Jul, 2026 | npm @daylightqc/date-fmt-lite |
Malicious release: Malicious code in eth-slint (npm) GHSA-xp97-c4c4-7928, MAL-2026-11034 | Malicious | Not scored | 23 Jul, 2026 | npm eth-slint |
Malicious release: Malicious code in chai-as-stringify (npm) GHSA-vh7h-h87g-qv6x, MAL-2026-11032 | Malicious | Not scored | 23 Jul, 2026 | npm chai-as-stringify |
Malicious release: Malicious code in yuinpm (npm) GHSA-vpgm-qmgp-w4h4, MAL-2026-11039 | Malicious | Not scored | 23 Jul, 2026 | npm yuinpm |
Malicious release: Malicious code in eth-codergen (npm) GHSA-87w3-vjw9-8h4w, MAL-2026-11033 | Malicious | Not scored | 23 Jul, 2026 | npm eth-codergen |
Malicious release: Malicious code in streak-lib-math (npm) GHSA-c7rv-9j9g-pqh2, MAL-2026-11036 | Malicious | Not scored | 23 Jul, 2026 | npm streak-lib-math |
Malicious release: Malicious code in svelte-streak-metrics (npm) GHSA-fc4x-xfq3-5f35, MAL-2026-11038 | Malicious | Not scored | 23 Jul, 2026 | npm svelte-streak-metrics |
Malicious release: Malicious code in svelte-goal-streak (npm) GHSA-jw9g-wvg5-7rjg, MAL-2026-11037 | Malicious | Not scored | 23 Jul, 2026 | npm svelte-goal-streak |
Malicious release: Malicious code in streak-bucket-lib (npm) GHSA-rg2p-8587-wx3w, MAL-2026-11035 | Malicious | Not scored | 23 Jul, 2026 | npm streak-bucket-lib |
Malicious release: Malicious code in vitest-axios (npm) GHSA-6v5g-7h35-h33q, MAL-2026-11030 | Malicious | Not scored | 23 Jul, 2026 | npm vitest-axios |
Malicious release: Malicious code in fs-extra-core (npm) GHSA-f246-8cf4-26v7, MAL-2026-11027 | Malicious | Not scored | 23 Jul, 2026 | npm fs-extra-core |
Malicious release: Malicious code in create-kumo-project (npm) GHSA-7jg3-v58m-2f3p, MAL-2026-11024 | Malicious | Not scored | 23 Jul, 2026 | npm create-kumo-project |
Malicious release: Malicious code in lychee-norm-cache (npm) GHSA-pj38-6jj4-4x3p, MAL-2026-11029 | Malicious | Not scored | 23 Jul, 2026 | npm lychee-norm-cache |
Malicious release: Malicious code in aio-commerce-lib-app (npm) GHSA-897j-xx2q-x2h9, MAL-2026-11022 | Malicious | Not scored | 23 Jul, 2026 | npm aio-commerce-lib-app |
Malicious release: Malicious code in helix-deploy (npm) GHSA-fhpm-cq57-j289, MAL-2026-11028 | Malicious | Not scored | 23 Jul, 2026 | npm helix-deploy |
Malicious release: Malicious code in da-sc-sdk (npm) GHSA-vxfh-w38r-2g54, MAL-2026-11025 | Malicious | Not scored | 23 Jul, 2026 | npm da-sc-sdk |
Malicious release: Malicious code in ethers-packge (npm) GHSA-67vw-rvv3-mh93, MAL-2026-11026 | Malicious | Not scored | 23 Jul, 2026 | npm ethers-packge |
Malicious release: Malicious code in bs58-88 (npm) GHSA-qj7h-vp7h-8v85, MAL-2026-11023 | Malicious | Not scored | 23 Jul, 2026 | npm bs58-88 |
Malicious release: Malicious code in @bcryptln/bcryptjs (npm) GHSA-qw92-vxcv-397r, MAL-2026-11021 | Malicious | Not scored | 23 Jul, 2026 | npm @bcryptln/bcryptjs |
Malicious release: Malicious code in hardhat-gas-tracker (npm) MAL-2026-11020 | Malicious | Not scored | 22 Jul, 2026 | npm hardhat-gas-tracker |
Malicious release: Malicious code in application-util (npm) MAL-2026-11000 | Malicious | Not scored | 22 Jul, 2026 | npm application-util |
Malicious release: Malicious code in web3-terminal (npm) MAL-2026-11007 | Malicious | Not scored | 22 Jul, 2026 | npm web3-terminal |
Malicious release: Malicious code in habinger (npm) MAL-2026-11002 | Malicious | Not scored | 22 Jul, 2026 | npm habinger |
Malicious release: Malicious code in encryptstringadmincore (npm) GHSA-hgfq-c4x3-jx2r, MAL-2026-11013 | Malicious | Not scored | 22 Jul, 2026 | npm encryptstringadmincore |
Malicious release: Malicious code in encrypt-string-ttak (npm) GHSA-mpgp-492w-x7xj, MAL-2026-11011 | Malicious | Not scored | 22 Jul, 2026 | npm encrypt-string-ttak |
Malicious release: Malicious code in encryptstringadmin (npm) GHSA-x92w-56m5-jchf, MAL-2026-11012 | Malicious | Not scored | 22 Jul, 2026 | npm encryptstringadmin |
Malicious release: Malicious code in n8n-nodes-net-utils (npm) MAL-2026-11003 | Malicious | Not scored | 22 Jul, 2026 | npm n8n-nodes-net-utils |
Malicious release: Malicious code in n8n-nodes-pwn (npm) MAL-2026-11004 | Malicious | Not scored | 22 Jul, 2026 | npm n8n-nodes-pwn |
Malicious release: Malicious code in n8n-nodes-quick-utils (npm) MAL-2026-11005 | Malicious | Not scored | 22 Jul, 2026 | npm n8n-nodes-quick-utils |
Malicious release: Malicious code in n8n-nodes-utils-helper (npm) MAL-2026-11006 | Malicious | Not scored | 22 Jul, 2026 | npm n8n-nodes-utils-helper |
Malicious release: Malicious code in n8n-nodes-http-probe (npm) MAL-2026-10997 | Malicious | Not scored | 22 Jul, 2026 | npm n8n-nodes-http-probe |
Malicious release: Malicious code in n8n-nodes-port-scanner (npm) MAL-2026-10998 | Malicious | Not scored | 22 Jul, 2026 | npm n8n-nodes-port-scanner |
Malicious release: Malicious code in habingeer (npm) MAL-2026-10995 | Malicious | Not scored | 22 Jul, 2026 | npm habingeer |
Malicious release: Malicious code in app-data-ist (npm) GHSA-wcx6-x67q-wff5, MAL-2026-10994 | Malicious | Not scored | 22 Jul, 2026 | npm app-data-ist |
Malicious release: Malicious code in init-js-examples (npm) MAL-2026-10996 | Malicious | Not scored | 22 Jul, 2026 | npm init-js-examples |