Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in flow-eslint-oxidized (npm) GHSA-frhf-jqq4-m95m, MAL-2026-10896 | Malicious | Not scored | 20 Jul, 2026 | npm flow-eslint-oxidized |
Malicious release: Malicious code in exodus-payments (npm) GHSA-hrvv-3w2f-pp24, MAL-2026-10895 | Malicious | Not scored | 20 Jul, 2026 | npm exodus-payments |
Malicious release: Malicious code in exodus-checkout (npm) GHSA-mqx8-fhj5-w597, MAL-2026-10894 | Malicious | Not scored | 20 Jul, 2026 | npm exodus-checkout |
Malicious release: Malicious code in ecto-cargo-wk1tm59a (npm) GHSA-wx6c-2wgg-hcwq, MAL-2026-10893 | Malicious | Not scored | 20 Jul, 2026 | npm ecto-cargo-wk1tm59a |
Malicious release: Malicious code in claude-code-timer (npm) GHSA-6649-vv4q-q9fw, MAL-2026-10892 | Malicious | Not scored | 20 Jul, 2026 | npm claude-code-timer |
Malicious release: Malicious code in bytecraft (npm) GHSA-r2fr-28j9-gjh5, MAL-2026-10891 | Malicious | Not scored | 20 Jul, 2026 | npm bytecraft |
Malicious release: Malicious code in @public-for-cdao/utils (npm) GHSA-f6vj-gmjr-rr3c, MAL-2026-10889 | Malicious | Not scored | 20 Jul, 2026 | npm @public-for-cdao/utils |
Malicious release: Malicious code in @public-for-cdao/signer (npm) GHSA-rjhf-whh4-86cq, MAL-2026-10888 | Malicious | Not scored | 20 Jul, 2026 | npm @public-for-cdao/signer |
Malicious release: Malicious code in @public-for-cdao/deploy (npm) GHSA-8jx6-7rv4-9r5g, MAL-2026-10886 | Malicious | Not scored | 20 Jul, 2026 | npm @public-for-cdao/deploy |
Malicious release: Malicious code in @public-for-cdao/sdk (npm) GHSA-9gf9-q25g-2m67, MAL-2026-10887 | Malicious | Not scored | 20 Jul, 2026 | npm @public-for-cdao/sdk |
Malicious release: Malicious code in @public-for-cdao/core (npm) GHSA-gpx4-hq9v-733f, MAL-2026-10885 | Malicious | Not scored | 20 Jul, 2026 | npm @public-for-cdao/core |
Malicious release: Malicious code in @public-for-cdao/contracts (npm) GHSA-52h2-99jg-wx2p, MAL-2026-10884 | Malicious | Not scored | 20 Jul, 2026 | npm @public-for-cdao/contracts |
Malicious release: Malicious code in @public-for-cdao/bot (npm) GHSA-j5xp-rxh2-qg93, MAL-2026-10883 | Malicious | Not scored | 20 Jul, 2026 | npm @public-for-cdao/bot |
Malicious release: Malicious code in @public-for-cdao/backend (npm) GHSA-rx7h-q78h-96wv, MAL-2026-10882 | Malicious | Not scored | 20 Jul, 2026 | npm @public-for-cdao/backend |
Malicious release: Malicious code in @irys-solutions/odesa-main (npm) GHSA-hmhf-84x5-f526, MAL-2026-10881 | Malicious | Not scored | 20 Jul, 2026 | npm @irys-solutions/odesa-main |
Malicious release: Malicious code in @examplecorptest/hearsay-design-system-test (npm) GHSA-mpfh-v62h-hrhr, MAL-2026-10880 | Malicious | Not scored | 20 Jul, 2026 | npm @examplecorptest/hearsay-design-system-test |
Malicious release: Malicious code in @dxcl/user-js (npm) GHSA-vwf5-f55j-6283, MAL-2026-10879 | Malicious | Not scored | 20 Jul, 2026 | npm @dxcl/user-js |
Malicious release: Malicious code in @dxcl/transaction-js (npm) GHSA-wggq-6jpc-5jgf, MAL-2026-10878 | Malicious | Not scored | 20 Jul, 2026 | npm @dxcl/transaction-js |
Malicious release: Malicious code in @dxcl/log-function-js (npm) GHSA-gxw9-g46h-59h7, MAL-2026-10877 | Malicious | Not scored | 20 Jul, 2026 | npm @dxcl/log-function-js |
Malicious release: Malicious code in @dxcl/indicators-js (npm) GHSA-wv96-w2hg-89qf, MAL-2026-10876 | Malicious | Not scored | 20 Jul, 2026 | npm @dxcl/indicators-js |
Malicious release: Malicious code in @dxcl/http-common-js (npm) GHSA-gpxg-288p-43q8, MAL-2026-10875 | Malicious | Not scored | 20 Jul, 2026 | npm @dxcl/http-common-js |
Malicious release: Malicious code in @dxcl/fund-js (npm) GHSA-59xj-f6hq-vqj4, MAL-2026-10874 | Malicious | Not scored | 20 Jul, 2026 | npm @dxcl/fund-js |
Malicious release: Malicious code in @dxcl/customer-js (npm) GHSA-cmfg-6q35-wxxm, MAL-2026-10873 | Malicious | Not scored | 20 Jul, 2026 | npm @dxcl/customer-js |
Malicious release: Malicious code in @dxcl/account-js (npm) GHSA-4w3c-4vm4-mrmm, MAL-2026-10872 | Malicious | Not scored | 20 Jul, 2026 | npm @dxcl/account-js |
Malicious release: Malicious code in @azure-lab-services/ml-ts (npm) GHSA-q87h-8g7w-5938, MAL-2026-10871 | Malicious | Not scored | 20 Jul, 2026 | npm @azure-lab-services/ml-ts |
Malicious release: Malicious code in @atlaskit-internal_.smart-card/hover-card (npm) GHSA-pv57-7m7r-2r69, MAL-2026-10870 | Malicious | Not scored | 20 Jul, 2026 | npm @atlaskit-internal_.smart-card/hover-card |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-copyleft-next-0-3-1 (npm) GHSA-2gc4-3jrf-539r, MAL-2026-10815 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-copyleft-next-0-3-1 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-typosquat-lodash (npm) GHSA-2wfp-mw9m-3c6x, MAL-2026-10856 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-typosquat-lodash |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-malware-install-execution (npm) GHSA-3m93-ccj9-w63p, MAL-2026-10836 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-malware-install-execution |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-malware-code-obfuscation (npm) GHSA-4ch4-g9wf-fg55, MAL-2026-10833 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-malware-code-obfuscation |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-typosquat-webpack (npm) GHSA-4wcr-8537-v2ww, MAL-2026-10859 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-typosquat-webpack |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-typosquat-chalk (npm) GHSA-576v-8wcx-4p4q, MAL-2026-10853 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-typosquat-chalk |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-malware-cryptomining-indicators (npm) GHSA-6rh6-pc5p-4j88, MAL-2026-10835 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-malware-cryptomining-indicators |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-sspl-1-0 (npm) GHSA-7fmj-6v2f-m56v, MAL-2026-10849 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-sspl-1-0 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-typosquat-axios (npm) GHSA-7j2p-8vwj-g565, MAL-2026-10852 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-typosquat-axios |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-wxwindows (npm) GHSA-7qjp-cprm-mcp6, MAL-2026-10862 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-wxwindows |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-malware-credential-harvesting (npm) GHSA-89jh-h47r-j47w, MAL-2026-10834 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-malware-credential-harvesting |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-typosquat-moment (npm) GHSA-9mx2-4mpm-2r3j, MAL-2026-10857 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-typosquat-moment |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-sendmail-8-23 (npm) GHSA-9x3r-xqjc-rf4m, MAL-2026-10847 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-sendmail-8-23 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-tpl-1-0 (npm) GHSA-c342-xf26-r5wc, MAL-2026-10851 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-tpl-1-0 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-ncgl-uk-2-0 (npm) GHSA-cx55-w99m-rcx9, MAL-2026-10841 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-ncgl-uk-2-0 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-malware-network-indicators (npm) GHSA-fcqp-56vj-9g8m, MAL-2026-10837 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-malware-network-indicators |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-ucl-1-0 (npm) GHSA-fh2p-2rm7-q273, MAL-2026-10860 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-ucl-1-0 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-unlicense (npm) GHSA-ghmj-68m9-xmgq, MAL-2026-10861 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-unlicense |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-copyleft-next-0-3-0 (npm) GHSA-h79m-rf9m-2rw3, MAL-2026-10814 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-copyleft-next-0-3-0 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-ecos-2-0 (npm) GHSA-jhf4-7xww-5wr4, MAL-2026-10817 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-ecos-2-0 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-mpl-1-1 (npm) GHSA-jq98-3cqm-6m69, MAL-2026-10838 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-mpl-1-1 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-qpl-1-0-inria-2004 (npm) GHSA-mvwx-9jqh-5qhf, MAL-2026-10846 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-qpl-1-0-inria-2004 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-osl-3-0 (npm) GHSA-p5pm-xhx8-3gq6, MAL-2026-10843 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-osl-3-0 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-mpl-2-0 (npm) GHSA-pgj9-qg38-66qm, MAL-2026-10839 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-mpl-2-0 |