Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in random-certs (npm) GHSA-2cfv-92gp-9f6m, MAL-2026-17644 | Malicious | Not scored | 23 days ago | npm random-certs |
Malicious release: Malicious code in vectorizers (npm) GHSA-q8rg-7mvv-2c63, MAL-2026-17645 | Malicious | Not scored | 23 days ago | npm vectorizers |
Malicious release: Malicious code in waie-crash-baileys (npm) GHSA-5r5f-v5vv-289q, MAL-2026-17643 | Malicious | Not scored | 23 days ago | npm waie-crash-baileys |
Malicious release: Malicious code in personio-pipeline-projen (npm) MAL-2026-17642 | Malicious | Not scored | 24 days ago | npm personio-pipeline-projen |
Malicious release: Malicious code in troubleshooting (npm) MAL-2026-17641 | Malicious | Not scored | 24 days ago | npm troubleshooting |
Malicious release: Malicious code in browser-metrics-plugin.contrib (npm) MAL-2026-17640 | Malicious | Not scored | 24 days ago | npm browser-metrics-plugin.contrib |
Malicious release: Malicious code in css-jptvix-polyfill (npm) MAL-2026-17638 | Malicious | Not scored | 24 days ago | npm css-jptvix-polyfill |
Malicious release: Malicious code in @kxa/xbails (npm) GHSA-7gvw-4c75-pc6p, MAL-2026-17363 | Malicious | Not scored | 24 days ago | npm @kxa/xbails |
Malicious release: Malicious code in captchetat-angularv8 (npm) GHSA-7crr-x792-cp3w, MAL-2026-17637 | Malicious | Not scored | 24 days ago | npm captchetat-angularv8 |
Malicious release: Malicious code in hardhat-init (npm) MAL-2026-17636 | Malicious | Not scored | 25 days ago | npm hardhat-init |
Malicious release: Malicious code in @badzz88/baileys (npm) GHSA-884c-mw3w-x2wg, MAL-2026-17341 | Malicious | Not scored | 25 days ago | npm @badzz88/baileys |
Malicious release: Malicious code in internallib_v23 (npm) MAL-2026-17632 | Malicious | Not scored | 25 days ago | npm internallib_v23 |
Malicious release: Malicious code in @pinecone-experience/messages (npm) GHSA-r9p9-pfmv-rc77, MAL-2026-17631 | Malicious | Not scored | 25 days ago | npm @pinecone-experience/messages |
Malicious release: Malicious code in internallib_v30 (npm) MAL-2026-17633 | Malicious | Not scored | 25 days ago | npm internallib_v30 |
Malicious release: Malicious code in internallib_v86 (npm) MAL-2026-17634 | Malicious | Not scored | 25 days ago | npm internallib_v86 |
Malicious release: Malicious code in internallib_v875 (npm) MAL-2026-17635 | Malicious | Not scored | 25 days ago | npm internallib_v875 |
Malicious release: Malicious code in serpacksven (npm) GHSA-297h-8m5x-925p, MAL-2026-17625 | Malicious | Not scored | 25 days ago | npm serpacksven |
Malicious release: Malicious code in serpacksven2 (npm) GHSA-4pg5-wvv5-w7fg, MAL-2026-17627 | Malicious | Not scored | 25 days ago | npm serpacksven2 |
Malicious release: Malicious code in documenclient (npm) GHSA-648r-w4vm-vvvp, MAL-2026-17624 | Malicious | Not scored | 25 days ago | npm documenclient |
Malicious release: Malicious code in serpacksven1 (npm) GHSA-696v-rr55-26pc, MAL-2026-17626 | Malicious | Not scored | 25 days ago | npm serpacksven1 |
Malicious release: Malicious code in css-nrmgzn-polyfill (npm) MAL-2026-17576 | Malicious | Not scored | 25 days ago | npm css-nrmgzn-polyfill |
Malicious release: Malicious code in css-eqxcdx-polyfill (npm) MAL-2026-17573 | Malicious | Not scored | 25 days ago | npm css-eqxcdx-polyfill |
Malicious release: Malicious code in css-kfvwax-polyfill (npm) MAL-2026-17575 | Malicious | Not scored | 25 days ago | npm css-kfvwax-polyfill |
Malicious release: Malicious code in css-gwqyid-polyfill (npm) MAL-2026-17574 | Malicious | Not scored | 25 days ago | npm css-gwqyid-polyfill |
Malicious release: Malicious code in css-yhpodl-polyfill (npm) MAL-2026-17578 | Malicious | Not scored | 25 days ago | npm css-yhpodl-polyfill |
Malicious release: Malicious code in css-vvgsze-polyfill (npm) MAL-2026-17577 | Malicious | Not scored | 25 days ago | npm css-vvgsze-polyfill |
Malicious release: Malicious code in dzyclutch (npm) GHSA-36rj-4crv-cmgm, MAL-2026-17619 | Malicious | Not scored | 25 days ago | npm dzyclutch |
Malicious release: Malicious code in @diezyclutch/baileys (npm) GHSA-5f29-482c-j4rr, MAL-2026-17618 | Malicious | Not scored | 25 days ago | npm @diezyclutch/baileys |
Malicious release: Malicious code in yonzoffic-baileys (npm) GHSA-8434-c34v-f7h8, MAL-2026-17413 | Malicious | Not scored | 25 days ago | npm yonzoffic-baileys |
Malicious release: Malicious code in dzyclutch-baileys (npm) GHSA-c936-2h58-8v2f, MAL-2026-17620 | Malicious | Not scored | 25 days ago | npm dzyclutch-baileys |
Malicious release: Malicious code in dzyclutch-libsignal-node (npm) GHSA-f74h-98gv-73jv, MAL-2026-17621 | Malicious | Not scored | 25 days ago | npm dzyclutch-libsignal-node |
Malicious release: Malicious code in dzyhaxz-libsignal (npm) GHSA-jjrx-mg27-p6ww, MAL-2026-17623 | Malicious | Not scored | 25 days ago | npm dzyhaxz-libsignal |
Malicious release: Malicious code in dzyhaxz-baileys (npm) GHSA-xwv2-25hq-j64g, MAL-2026-17622 | Malicious | Not scored | 25 days ago | npm dzyhaxz-baileys |
Malicious release: Malicious code in @subql/common (npm) GHSA-9333-3c4x-x3h5, MAL-2026-17571 | Malicious | Not scored | 25 days ago | npm @subql/common |
Malicious release: Malicious code in checkmate-remediation-assistant (npm) MAL-2026-17572 | Malicious | Not scored | 25 days ago | npm checkmate-remediation-assistant |
Malicious release: Malicious code in with-cte (npm) MAL-2026-17579 | Malicious | Not scored | 26 days ago | npm with-cte |
Malicious release: Malicious code in unified-platform (npm) GHSA-9j7c-8j8v-428c, MAL-2026-17566 | Malicious | Not scored | 26 days ago | npm unified-platform |
Malicious release: Malicious code in risk-detection (npm) GHSA-h6f8-r5fm-58fv, MAL-2026-17563 | Malicious | Not scored | 26 days ago | npm risk-detection |
Malicious release: Malicious code in typesens (npm) MAL-2026-17565 | Malicious | Not scored | 26 days ago | npm typesens |
Malicious release: Malicious code in aria-live-region-helper (npm) MAL-2026-17546 | Malicious | Not scored | 26 days ago | npm aria-live-region-helper |
Malicious release: Malicious code in css-at-scope-polyfill (npm) MAL-2026-17547 | Malicious | Not scored | 26 days ago | npm css-at-scope-polyfill |
Malicious release: Malicious code in css-svqggc-polyfill (npm) MAL-2026-17557 | Malicious | Not scored | 26 days ago | npm css-svqggc-polyfill |
Malicious release: Malicious code in css-hgwctv-polyfill (npm) MAL-2026-17552 | Malicious | Not scored | 26 days ago | npm css-hgwctv-polyfill |
Malicious release: Malicious code in css-mpmdds-polyfill (npm) MAL-2026-17554 | Malicious | Not scored | 26 days ago | npm css-mpmdds-polyfill |
Malicious release: Malicious code in css-txedrf-polyfill (npm) MAL-2026-17558 | Malicious | Not scored | 26 days ago | npm css-txedrf-polyfill |
Malicious release: Malicious code in css-gvqmfn-polyfill (npm) MAL-2026-17551 | Malicious | Not scored | 26 days ago | npm css-gvqmfn-polyfill |
Malicious release: Malicious code in css-ikomdq-polyfill (npm) MAL-2026-17553 | Malicious | Not scored | 26 days ago | npm css-ikomdq-polyfill |
Malicious release: Malicious code in css-ogojwh-polyfill (npm) MAL-2026-17556 | Malicious | Not scored | 26 days ago | npm css-ogojwh-polyfill |
Malicious release: Malicious code in css-ayucyz-polyfill (npm) MAL-2026-17548 | Malicious | Not scored | 26 days ago | npm css-ayucyz-polyfill |
Malicious release: Malicious code in css-nbanqq-polyfill (npm) MAL-2026-17555 | Malicious | Not scored | 26 days ago | npm css-nbanqq-polyfill |