Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @sectest429/hello-npm-world (npm) GHSA-q7w2-749v-c98p, MAL-2026-10478 | Malicious | Not scored | 13 Jul, 2026 | npm @sectest429/hello-npm-world |
Malicious release: Malicious code in @torbeck/priority-queue (npm) GHSA-v2rg-75ch-7cfx, MAL-2026-10472 | Malicious | Not scored | 13 Jul, 2026 | npm @torbeck/priority-queue |
Malicious release: Malicious code in claude-team-tracker (npm) MAL-2026-10473 | Malicious | Not scored | 13 Jul, 2026 | npm claude-team-tracker |
Malicious release: Malicious code in @dervix/socket.io (npm) GHSA-8hwh-fjw2-33qq, MAL-2026-10475 | Malicious | Not scored | 13 Jul, 2026 | npm @dervix/socket.io |
Malicious release: Malicious code in @dervix/engine.io (npm) GHSA-p68q-mqrg-7w4p, MAL-2026-10474 | Malicious | Not scored | 13 Jul, 2026 | npm @dervix/engine.io |
Malicious release: Malicious code in @gleamkit/socket.io (npm) GHSA-666h-5h3g-crf4, MAL-2026-10477 | Malicious | Not scored | 13 Jul, 2026 | npm @gleamkit/socket.io |
Malicious release: Malicious code in @gleamkit/engine.io (npm) GHSA-gvp7-6g9j-r5c6, MAL-2026-10476 | Malicious | Not scored | 13 Jul, 2026 | npm @gleamkit/engine.io |
Malicious release: Malicious code in loading-sessions (npm) GHSA-qrjp-fmwp-2rjq, MAL-2026-10471 | Malicious | Not scored | 13 Jul, 2026 | npm loading-sessions |
Malicious release: Malicious code in @uw010010/vite-tree (npm) GHSA-5q9f-77m9-x7c2, MAL-2026-10470 | Malicious | Not scored | 13 Jul, 2026 | npm @uw010010/vite-tree |
Malicious release: Malicious code in @sheltr_/agent (npm) MAL-2026-10469 | Malicious | Not scored | 13 Jul, 2026 | npm @sheltr_/agent |
Malicious release: Malicious code in @origindev/ethaccount (npm) MAL-2026-10455 | Malicious | Not scored | 13 Jul, 2026 | npm @origindev/ethaccount |
Malicious release: Malicious code in @spzhongwin/skill-logger-plugin (npm) MAL-2026-10456 | Malicious | Not scored | 13 Jul, 2026 | npm @spzhongwin/skill-logger-plugin |
Malicious release: Malicious code in nodemon-sync (npm) GHSA-jj64-x8fg-q524, MAL-2026-10468 | Malicious | Not scored | 13 Jul, 2026 | npm nodemon-sync |
Malicious release: Malicious code in hehehee (npm) MAL-2026-10462 | Malicious | Not scored | 13 Jul, 2026 | npm hehehee |
Malicious release: Malicious code in cktool-core (npm) GHSA-qm37-v399-r9m5, MAL-2026-10457 | Malicious | Not scored | 13 Jul, 2026 | npm cktool-core |
Malicious release: Malicious code in polymarket-math-stake-kelly (npm) MAL-2026-10466 | Malicious | Not scored | 13 Jul, 2026 | npm polymarket-math-stake-kelly |
Malicious release: Malicious code in gptlite (npm) MAL-2026-10461 | Malicious | Not scored | 13 Jul, 2026 | npm gptlite |
Malicious release: Malicious code in polymarket-stake-kelly-math (npm) GHSA-2957-xv6c-9vvm, MAL-2026-10467 | Malicious | Not scored | 13 Jul, 2026 | npm polymarket-stake-kelly-math |
Malicious release: Malicious code in compliancepolicyserv (npm) MAL-2026-10458 | Malicious | Not scored | 13 Jul, 2026 | npm compliancepolicyserv |
Malicious release: Malicious code in connectedmerchantsserv (npm) MAL-2026-10459 | Malicious | Not scored | 13 Jul, 2026 | npm connectedmerchantsserv |
Malicious release: Malicious code in datavaultx (npm) MAL-2026-10460 | Malicious | Not scored | 13 Jul, 2026 | npm datavaultx |
Malicious release: Malicious code in node-path-addon (npm) GHSA-87rj-7vj7-vxgg, MAL-2026-10463 | Malicious | Not scored | 13 Jul, 2026 | npm node-path-addon |
Malicious release: Malicious code in node-procmetrics-data (npm) MAL-2026-10464 | Malicious | Not scored | 13 Jul, 2026 | npm node-procmetrics-data |
Malicious release: Malicious code in node-sysmon-native (npm) MAL-2026-10465 | Malicious | Not scored | 13 Jul, 2026 | npm node-sysmon-native |
Malicious release: Malicious code in nodemon-async (npm) GHSA-p75m-7xf4-8cqw, MAL-2026-10454 | Malicious | Not scored | 13 Jul, 2026 | npm nodemon-async |
Malicious release: Malicious code in router-processor (npm) MAL-2026-10453 | Malicious | Not scored | 13 Jul, 2026 | npm router-processor |
Malicious release: Malicious code in font-hub (npm) MAL-2026-10450 | Malicious | Not scored | 13 Jul, 2026 | npm font-hub |
Malicious release: Malicious code in @sqlite-group/schema-generator (npm) GHSA-cf6c-6x68-cf8r, MAL-2026-10448 | Malicious | Not scored | 13 Jul, 2026 | npm @sqlite-group/schema-generator |
Malicious release: Malicious code in gifuct (npm) GHSA-829c-v26f-5g9m, MAL-2026-10451 | Malicious | Not scored | 13 Jul, 2026 | npm gifuct |
Malicious release: Malicious code in auth-gen-next (npm) MAL-2026-10449 | Malicious | Not scored | 13 Jul, 2026 | npm auth-gen-next |
Malicious release: Malicious code in markdown-editable-table (npm) GHSA-jf3r-qgv3-frvm, MAL-2026-10452 | Malicious | Not scored | 13 Jul, 2026 | npm markdown-editable-table |
Malicious release: Malicious code in @oliviamcdaniel12/safer-buffer (npm) GHSA-88h2-qq8c-r5pv, MAL-2026-10442 | Malicious | Not scored | 13 Jul, 2026 | npm @oliviamcdaniel12/safer-buffer |
Malicious release: Malicious code in react-markable-table (npm) GHSA-37wc-pv88-9vwq, MAL-2026-10446 | Malicious | Not scored | 13 Jul, 2026 | npm react-markable-table |
Malicious release: Malicious code in remarkable-table (npm) GHSA-pw78-w6gv-hfcr, MAL-2026-10447 | Malicious | Not scored | 13 Jul, 2026 | npm remarkable-table |
Malicious release: Malicious code in markable-table (npm) GHSA-qc34-pqm6-35rf, MAL-2026-10444 | Malicious | Not scored | 13 Jul, 2026 | npm markable-table |
Malicious release: Malicious code in home-sections-web-ui (npm) GHSA-343f-5692-gj8q, MAL-2026-10443 | Malicious | Not scored | 13 Jul, 2026 | npm home-sections-web-ui |
Malicious release: Malicious code in node-procmetrics (npm) MAL-2026-10445 | Malicious | Not scored | 13 Jul, 2026 | npm node-procmetrics |
Malicious release: Malicious code in fetchcraft (npm) GHSA-fg76-g9g4-9xpr, MAL-2026-10435 | Malicious | Not scored | 13 Jul, 2026 | npm fetchcraft |
Malicious release: Malicious code in netspeedutil (npm) MAL-2026-10438 | Malicious | Not scored | 13 Jul, 2026 | npm netspeedutil |
Malicious release: Malicious code in jest-formatter (npm) MAL-2026-10436 | Malicious | Not scored | 13 Jul, 2026 | npm jest-formatter |
Malicious release: Malicious code in env-fast (npm) MAL-2026-10434 | Malicious | Not scored | 13 Jul, 2026 | npm env-fast |
Malicious release: Malicious code in @tailwind-ts/eslint-plugin (npm) GHSA-26mx-f526-39mh, MAL-2026-10431 | Malicious | Not scored | 13 Jul, 2026 | npm @tailwind-ts/eslint-plugin |
Malicious release: Malicious code in type-context (npm) GHSA-rw86-h32r-9xf5, MAL-2026-10440 | Malicious | Not scored | 13 Jul, 2026 | npm type-context |
Malicious release: Malicious code in react-hot-svg (npm) GHSA-46cj-57m5-r4wc, MAL-2026-10439 | Malicious | Not scored | 13 Jul, 2026 | npm react-hot-svg |
Malicious release: Malicious code in chain-guardian (npm) MAL-2026-10433 | Malicious | Not scored | 13 Jul, 2026 | npm chain-guardian |
Malicious release: Malicious code in animated-css-kit (npm) GHSA-q9x5-95j3-g76v, MAL-2026-10432 | Malicious | Not scored | 13 Jul, 2026 | npm animated-css-kit |
Malicious release: Malicious code in jsonfb (npm) GHSA-86qc-ppwg-mgcj, MAL-2026-10437 | Malicious | Not scored | 13 Jul, 2026 | npm jsonfb |
Malicious release: Malicious code in @nsub/nitxe (npm) GHSA-54gp-rw59-mwf2, MAL-2026-10429 | Malicious | Not scored | 13 Jul, 2026 | npm @nsub/nitxe |
Malicious release: Malicious code in prettier-plugin-base (npm) GHSA-8mq9-26pc-p36f, MAL-2026-10430 | Malicious | Not scored | 13 Jul, 2026 | npm prettier-plugin-base |
Malicious release: Malicious code in sysb1 (npm) MAL-2026-10428 | Malicious | Not scored | 13 Jul, 2026 | npm sysb1 |