Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in solana-key-utils (npm) MAL-2026-10591 | Malicious | Not scored | 14 Jul, 2026 | npm solana-key-utils |
Malicious release: Malicious code in bimi-maker (npm) MAL-2026-10579 | Malicious | Not scored | 14 Jul, 2026 | npm bimi-maker |
Malicious release: Malicious code in ethers-core (npm) MAL-2026-10580 | Malicious | Not scored | 14 Jul, 2026 | npm ethers-core |
Malicious release: Malicious code in process-status-widget (npm) GHSA-rvcg-4hj7-jmv2, MAL-2026-10581 | Malicious | Not scored | 14 Jul, 2026 | npm process-status-widget |
Malicious release: Malicious code in @sqlite-group/sql-creator (npm) GHSA-pgxx-98xj-2gvg, MAL-2026-10578 | Malicious | Not scored | 14 Jul, 2026 | npm @sqlite-group/sql-creator |
Malicious release: Malicious code in @sqlite-clone/nodesql (npm) GHSA-x8m3-m829-mhc4, MAL-2026-10577 | Malicious | Not scored | 14 Jul, 2026 | npm @sqlite-clone/nodesql |
Malicious release: Malicious code in @wrenfield/viem (npm) GHSA-pm4g-83cj-7858, MAL-2026-10571 | Malicious | Not scored | 14 Jul, 2026 | npm @wrenfield/viem |
Malicious release: Malicious code in vite-plugin-config-paths (npm) MAL-2026-10574 | Malicious | Not scored | 14 Jul, 2026 | npm vite-plugin-config-paths |
Malicious release: Malicious code in harpoon-package (npm) MAL-2026-10573 | Malicious | Not scored | 14 Jul, 2026 | npm harpoon-package |
Malicious release: Malicious code in web-pop (npm) MAL-2026-10575 | Malicious | Not scored | 14 Jul, 2026 | npm web-pop |
Malicious release: Malicious code in eth-wallet-helpers (npm) MAL-2026-10572 | Malicious | Not scored | 14 Jul, 2026 | npm eth-wallet-helpers |
Malicious release: Malicious code in @akshajrawat/plugin-repo-cli (npm) GHSA-4pr3-9qm5-4r6c, MAL-2026-10554 | Malicious | Not scored | 14 Jul, 2026 | npm @akshajrawat/plugin-repo-cli |
Malicious release: Malicious code in akshajrawat.utils (npm) GHSA-68xp-rp76-mhf5, MAL-2026-10558 | Malicious | Not scored | 14 Jul, 2026 | npm akshajrawat.utils |
Malicious release: Malicious code in eth-dev (npm) MAL-2026-10552 | Malicious | Not scored | 14 Jul, 2026 | npm eth-dev |
Malicious release: Malicious code in abi-encode (npm) MAL-2026-10549 | Malicious | Not scored | 14 Jul, 2026 | npm abi-encode |
Malicious release: Malicious code in @cw-ui/asio-neon-themes (npm) GHSA-4966-56x6-595h, MAL-2026-10556 | Malicious | Not scored | 14 Jul, 2026 | npm @cw-ui/asio-neon-themes |
Malicious release: Malicious code in micro-ui-loader (npm) GHSA-cc9r-4374-69qj, MAL-2026-10564 | Malicious | Not scored | 14 Jul, 2026 | npm micro-ui-loader |
Malicious release: Malicious code in @cw-ui/micro-ui-loader (npm) GHSA-fq95-jj7h-pj3w, MAL-2026-10557 | Malicious | Not scored | 14 Jul, 2026 | npm @cw-ui/micro-ui-loader |
Malicious release: Malicious code in elsisi-cli (npm) MAL-2026-10551 | Malicious | Not scored | 14 Jul, 2026 | npm elsisi-cli |
Malicious release: Malicious code in home-mp-commons (npm) MAL-2026-10553 | Malicious | Not scored | 14 Jul, 2026 | npm home-mp-commons |
Malicious release: Malicious code in avatar-forge (npm) GHSA-23h6-jm35-q4x7, MAL-2026-10559 | Malicious | Not scored | 14 Jul, 2026 | npm avatar-forge |
Malicious release: Malicious code in sync-logger (npm) GHSA-3x53-3cq6-9g58, MAL-2026-10568 | Malicious | Not scored | 14 Jul, 2026 | npm sync-logger |
Malicious release: Malicious code in clipboard-drop (npm) GHSA-85m7-f7fw-3h7f, MAL-2026-10560 | Malicious | Not scored | 14 Jul, 2026 | npm clipboard-drop |
Malicious release: Malicious code in duration-kit (npm) GHSA-8853-3cv6-g8q4, MAL-2026-10562 | Malicious | Not scored | 14 Jul, 2026 | npm duration-kit |
Malicious release: Malicious code in valid-scope (npm) GHSA-chfc-f2cm-2wf8, MAL-2026-10570 | Malicious | Not scored | 14 Jul, 2026 | npm valid-scope |
Malicious release: Malicious code in string-morph (npm) GHSA-ggfx-72x6-p884, MAL-2026-10567 | Malicious | Not scored | 14 Jul, 2026 | npm string-morph |
Malicious release: Malicious code in humanize-kit (npm) GHSA-hxh5-f4r5-8m6g, MAL-2026-10563 | Malicious | Not scored | 14 Jul, 2026 | npm humanize-kit |
Malicious release: Malicious code in relative-time-live (npm) GHSA-p7gw-9qj5-3mmw, MAL-2026-10565 | Malicious | Not scored | 14 Jul, 2026 | npm relative-time-live |
Malicious release: Malicious code in temp-cloak (npm) GHSA-rr2q-r4vq-r6cm, MAL-2026-10569 | Malicious | Not scored | 14 Jul, 2026 | npm temp-cloak |
Malicious release: Malicious code in sight-bind (npm) GHSA-v3x8-hfcr-q8p2, MAL-2026-10566 | Malicious | Not scored | 14 Jul, 2026 | npm sight-bind |
Malicious release: Malicious code in dom-weave (npm) GHSA-wx59-xwhx-3mmv, MAL-2026-10561 | Malicious | Not scored | 14 Jul, 2026 | npm dom-weave |
Malicious release: Malicious code in @codex2005/logger-core (npm) GHSA-jc68-fr59-2vfv, MAL-2026-10555 | Malicious | Not scored | 14 Jul, 2026 | npm @codex2005/logger-core |
Malicious release: Malicious code in better-tailwindcss (npm) GHSA-w8pj-3w7c-464w, MAL-2026-10550 | Malicious | Not scored | 14 Jul, 2026 | npm better-tailwindcss |
Malicious release: Malicious code in viteplugiin (npm) MAL-2026-10546 | Malicious | Not scored | 14 Jul, 2026 | npm viteplugiin |
Malicious release: Malicious code in chain-devkit (npm) MAL-2026-10531 | Malicious | Not scored | 14 Jul, 2026 | npm chain-devkit |
Malicious release: Malicious code in my-empty-package (npm) GHSA-39q9-338w-8vhv, MAL-2026-10535 | Malicious | Not scored | 14 Jul, 2026 | npm my-empty-package |
Malicious release: Malicious code in fluterjs (npm) GHSA-gj4r-435f-67cr, MAL-2026-10532 | Malicious | Not scored | 14 Jul, 2026 | npm fluterjs |
Malicious release: Malicious code in cbr-internal-utils (npm) MAL-2026-10530 | Malicious | Not scored | 14 Jul, 2026 | npm cbr-internal-utils |
Malicious release: Malicious code in neon-postgres (npm) MAL-2026-10537 | Malicious | Not scored | 14 Jul, 2026 | npm neon-postgres |
Malicious release: Malicious code in lusha-iam-widgets (npm) GHSA-8xrv-62w2-rp6g, MAL-2026-10533 | Malicious | Not scored | 14 Jul, 2026 | npm lusha-iam-widgets |
Malicious release: Malicious code in n8n-nodes-social-facebook (npm) MAL-2026-10536 | Malicious | Not scored | 14 Jul, 2026 | npm n8n-nodes-social-facebook |
Malicious release: Malicious code in proxy-seller-mcp (npm) MAL-2026-10541 | Malicious | Not scored | 14 Jul, 2026 | npm proxy-seller-mcp |
Malicious release: Malicious code in skrill-payments (npm) MAL-2026-10543 | Malicious | Not scored | 14 Jul, 2026 | npm skrill-payments |
Malicious release: Malicious code in neteller (npm) MAL-2026-10538 | Malicious | Not scored | 14 Jul, 2026 | npm neteller |
Malicious release: Malicious code in skrill-sdk (npm) MAL-2026-10544 | Malicious | Not scored | 14 Jul, 2026 | npm skrill-sdk |
Malicious release: Malicious code in skrill (npm) MAL-2026-10542 | Malicious | Not scored | 14 Jul, 2026 | npm skrill |
Malicious release: Malicious code in postcss-processor-utils (npm) GHSA-r5fg-j5cf-mfgx, MAL-2026-10540 | Malicious | Not scored | 14 Jul, 2026 | npm postcss-processor-utils |
Malicious release: Malicious code in postcss-animatecss (npm) MAL-2026-10539 | Malicious | Not scored | 14 Jul, 2026 | npm postcss-animatecss |
Malicious release: Malicious code in vite-plugin-model (npm) GHSA-p58m-2wrh-74xr, MAL-2026-10545 | Malicious | Not scored | 14 Jul, 2026 | npm vite-plugin-model |
Malicious release: Malicious code in motion-pull (npm) GHSA-6hf9-8x52-w6g3, MAL-2026-10534 | Malicious | Not scored | 14 Jul, 2026 | npm motion-pull |