Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in polygon-toolkit-validation (npm) MAL-2026-10640 | Malicious | Not scored | 15 Jul, 2026 | npm polygon-toolkit-validation |
Malicious release: Malicious code in @bcs-mi-ui/message (npm) GHSA-4ppp-p4x6-p4w5, MAL-2026-10645 | Malicious | Not scored | 15 Jul, 2026 | npm @bcs-mi-ui/message |
Malicious release: Malicious code in @bcs-mi-ui/test1243npmpacket76 (npm) GHSA-9gp9-4wmv-j8qf, MAL-2026-10647 | Malicious | Not scored | 15 Jul, 2026 | npm @bcs-mi-ui/test1243npmpacket76 |
Malicious release: Malicious code in @bcs-mi-ui/message-block (npm) GHSA-j6mx-7p76-j3h7, MAL-2026-10646 | Malicious | Not scored | 15 Jul, 2026 | npm @bcs-mi-ui/message-block |
Malicious release: Malicious code in leviosa86-test (npm) MAL-2026-10636 | Malicious | Not scored | 15 Jul, 2026 | npm leviosa86-test |
Malicious release: Malicious code in ai-explain (npm) MAL-2026-10628 | Malicious | Not scored | 15 Jul, 2026 | npm ai-explain |
Malicious release: Malicious code in ai-pro-sdk (npm) GHSA-pw5v-v543-v4mp, MAL-2026-10629 | Malicious | Not scored | 15 Jul, 2026 | npm ai-pro-sdk |
Malicious release: Malicious code in @hkyyy/portal-widget-helper-0601 (npm) GHSA-wgx8-6mv9-p6jm, MAL-2026-10648 | Malicious | Not scored | 15 Jul, 2026 | npm @hkyyy/portal-widget-helper-0601 |
Malicious release: Malicious code in @saladin0x1/js-shared-modules (npm) GHSA-7xh4-j295-69xm, MAL-2026-10649 | Malicious | Not scored | 15 Jul, 2026 | npm @saladin0x1/js-shared-modules |
Malicious release: Malicious code in @leviosa86com/leviosa86-test (npm) MAL-2026-10625 | Malicious | Not scored | 15 Jul, 2026 | npm @leviosa86com/leviosa86-test |
Malicious release: Malicious code in chai-as-byte (npm) MAL-2026-10630 | Malicious | Not scored | 15 Jul, 2026 | npm chai-as-byte |
Malicious release: Malicious code in @sqlite-frame/nodesql (npm) GHSA-r9rm-52xp-prf4, MAL-2026-10627 | Malicious | Not scored | 15 Jul, 2026 | npm @sqlite-frame/nodesql |
Malicious release: Malicious code in @react-case/option (npm) MAL-2026-10626 | Malicious | Not scored | 15 Jul, 2026 | npm @react-case/option |
Malicious release: Malicious code in mc-reg (npm) GHSA-hvhc-6qpw-v5r9, MAL-2026-10637 | Malicious | Not scored | 15 Jul, 2026 | npm mc-reg |
Malicious release: Malicious code in iwsdk (npm) GHSA-35fw-734c-r8xf, MAL-2026-10651 | Malicious | Not scored | 14 Jul, 2026 | npm iwsdk |
Malicious release: Malicious code in install-skia (npm) GHSA-r9fr-8w7j-4vj6, MAL-2026-10650 | Malicious | Not scored | 14 Jul, 2026 | npm install-skia |
Malicious release: Malicious code in cppt-common (npm) MAL-2026-10632 | Malicious | Not scored | 14 Jul, 2026 | npm cppt-common |
Malicious release: Malicious code in json-bigint-extend (npm) GHSA-h8r4-9vf9-jp96, MAL-2026-10652 | Malicious | Not scored | 14 Jul, 2026 | npm json-bigint-extend |
Malicious release: Malicious code in @vite-js/vui (npm) GHSA-6x4h-wrvq-m68h, MAL-2026-10619 | Malicious | Not scored | 14 Jul, 2026 | npm @vite-js/vui |
Malicious release: Malicious code in chai-as-structured (npm) GHSA-wf75-6wm5-v349, MAL-2026-10622 | Malicious | Not scored | 14 Jul, 2026 | npm chai-as-structured |
Malicious release: Malicious code in chai-as-hardened (npm) MAL-2026-10621 | Malicious | Not scored | 14 Jul, 2026 | npm chai-as-hardened |
Malicious release: Malicious code in http-ws-listener (npm) MAL-2026-10623 | Malicious | Not scored | 14 Jul, 2026 | npm http-ws-listener |
Malicious release: Malicious code in ahooks-3.7.8 (npm) MAL-2026-10620 | Malicious | Not scored | 14 Jul, 2026 | npm ahooks-3.7.8 |
Malicious release: Malicious code in postcss-selector-minify (npm) GHSA-pjfj-gp2h-5692, MAL-2026-10614 | Malicious | Not scored | 14 Jul, 2026 | npm postcss-selector-minify |
Malicious release: Malicious code in ethereum-lib-utils (npm) GHSA-p99f-7355-gvr8, MAL-2026-10613 | Malicious | Not scored | 14 Jul, 2026 | npm ethereum-lib-utils |
Malicious release: Malicious code in assertion-utils-js (npm) GHSA-q727-8h63-fm25, MAL-2026-10612 | Malicious | Not scored | 14 Jul, 2026 | npm assertion-utils-js |
Malicious release: Malicious code in smb-common-uikit (npm) MAL-2026-10615 | Malicious | Not scored | 14 Jul, 2026 | npm smb-common-uikit |
Malicious release: Malicious code in smb-portal-uikit (npm) MAL-2026-10616 | Malicious | Not scored | 14 Jul, 2026 | npm smb-portal-uikit |
Malicious release: Malicious code in @web3-helpers/core (npm) MAL-2026-10611 | Malicious | Not scored | 14 Jul, 2026 | npm @web3-helpers/core |
Malicious release: Malicious code in utils-style-engine (npm) MAL-2026-10609 | Malicious | Not scored | 14 Jul, 2026 | npm utils-style-engine |
Malicious release: Malicious code in @radivi-ui/react-dialog (npm) MAL-2026-10605 | Malicious | Not scored | 14 Jul, 2026 | npm @radivi-ui/react-dialog |
Malicious release: Malicious code in chain-sdk-js (npm) GHSA-2p8p-vrrr-9f6c, MAL-2026-10608 | Malicious | Not scored | 14 Jul, 2026 | npm chain-sdk-js |
Malicious release: Malicious code in chai-as-act (npm) MAL-2026-10607 | Malicious | Not scored | 14 Jul, 2026 | npm chai-as-act |
Malicious release: Malicious code in base58-utils (npm) MAL-2026-10606 | Malicious | Not scored | 14 Jul, 2026 | npm base58-utils |
Malicious release: Malicious code in monitoring-service (npm) GHSA-538g-pxj3-w58h, MAL-2026-10597 | Malicious | Not scored | 14 Jul, 2026 | npm monitoring-service |
Malicious release: Malicious code in monitoring-service-util (npm) GHSA-mc6r-4967-53wm, MAL-2026-10598 | Malicious | Not scored | 14 Jul, 2026 | npm monitoring-service-util |
Malicious release: Malicious code in @ayunlove/bails (npm) GHSA-qv85-w97v-vpp2, MAL-2026-10596 | Malicious | Not scored | 14 Jul, 2026 | npm @ayunlove/bails |
Malicious release: Malicious code in nodemon-plint (npm) GHSA-3pf8-vmwm-g7gv, MAL-2026-10595 | Malicious | Not scored | 14 Jul, 2026 | npm nodemon-plint |
Malicious release: Malicious code in async-mutex-v2 (npm) GHSA-f829-g84r-2fq7, MAL-2026-10582 | Malicious | Not scored | 14 Jul, 2026 | npm async-mutex-v2 |
Malicious release: Malicious code in nodeaxois (npm) MAL-2026-10589 | Malicious | Not scored | 14 Jul, 2026 | npm nodeaxois |
Malicious release: Malicious code in dayjscore (npm) MAL-2026-10587 | Malicious | Not scored | 14 Jul, 2026 | npm dayjscore |
Malicious release: Malicious code in chalkdevx (npm) MAL-2026-10584 | Malicious | Not scored | 14 Jul, 2026 | npm chalkdevx |
Malicious release: Malicious code in chalkdev (npm) MAL-2026-10583 | Malicious | Not scored | 14 Jul, 2026 | npm chalkdev |
Malicious release: Malicious code in momenntjs (npm) MAL-2026-10588 | Malicious | Not scored | 14 Jul, 2026 | npm momenntjs |
Malicious release: Malicious code in yargsplus (npm) MAL-2026-10594 | Malicious | Not scored | 14 Jul, 2026 | npm yargsplus |
Malicious release: Malicious code in cheeriobox (npm) MAL-2026-10585 | Malicious | Not scored | 14 Jul, 2026 | npm cheeriobox |
Malicious release: Malicious code in twiliobox (npm) MAL-2026-10593 | Malicious | Not scored | 14 Jul, 2026 | npm twiliobox |
Malicious release: Malicious code in openaiwrapper (npm) MAL-2026-10590 | Malicious | Not scored | 14 Jul, 2026 | npm openaiwrapper |
Malicious release: Malicious code in stripedev (npm) MAL-2026-10592 | Malicious | Not scored | 14 Jul, 2026 | npm stripedev |
Malicious release: Malicious code in crypto-validate-lib (npm) MAL-2026-10586 | Malicious | Not scored | 14 Jul, 2026 | npm crypto-validate-lib |