Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in rshell (npm) GHSA-7pc7-hr79-3cwp, MAL-2026-11374 | Malicious | Not scored | 30 Jul, 2026 | npm rshell |
Malicious release: Malicious code in equiviewer (npm) GHSA-98hr-v28p-r787, MAL-2026-11292 | Malicious | Not scored | 30 Jul, 2026 | npm equiviewer |
Malicious release: Malicious code in thoughtgear (npm) GHSA-p62r-7cm3-39m8, MAL-2026-11401 | Malicious | Not scored | 30 Jul, 2026 | npm thoughtgear |
Malicious release: Malicious code in android-web-logger (npm) GHSA-pgxg-3482-4c64, MAL-2026-11236 | Malicious | Not scored | 30 Jul, 2026 | npm android-web-logger |
Malicious release: Malicious code in n158 (npm) GHSA-prvg-mr2g-9hfr, MAL-2026-11335 | Malicious | Not scored | 30 Jul, 2026 | npm n158 |
Malicious release: Malicious code in shnc (npm) GHSA-q5hv-3jxw-ch7f, MAL-2026-11378 | Malicious | Not scored | 30 Jul, 2026 | npm shnc |
Malicious release: Malicious code in sunpro-3dmodel-renderer (npm) GHSA-q5x7-xq6c-4cfc, MAL-2026-11389 | Malicious | Not scored | 30 Jul, 2026 | npm sunpro-3dmodel-renderer |
Malicious release: Malicious code in npum (npm) GHSA-q6v5-6xq8-wxmh, MAL-2026-11342 | Malicious | Not scored | 30 Jul, 2026 | npm npum |
Malicious release: Malicious code in dsilva-react-module-seed (npm) GHSA-qrv2-rr4v-8g54, MAL-2026-11283 | Malicious | Not scored | 30 Jul, 2026 | npm dsilva-react-module-seed |
Malicious release: Malicious code in api-gateway-lambda-router (npm) GHSA-r84m-hgjm-w4mm, MAL-2026-11237 | Malicious | Not scored | 30 Jul, 2026 | npm api-gateway-lambda-router |
Malicious release: Malicious code in payu-node (npm) GHSA-vg8q-pg5j-2fq4, MAL-2026-11346 | Malicious | Not scored | 30 Jul, 2026 | npm payu-node |
Malicious release: Malicious code in express-wrapper (npm) GHSA-vm63-359p-h56j, MAL-2026-11306 | Malicious | Not scored | 30 Jul, 2026 | npm express-wrapper |
Malicious release: Malicious code in inkalabs (npm) GHSA-vrpm-5883-jc99, MAL-2026-11321 | Malicious | Not scored | 30 Jul, 2026 | npm inkalabs |
Malicious release: Malicious code in shsk (npm) GHSA-w2px-6f9h-j4rw, MAL-2026-11379 | Malicious | Not scored | 30 Jul, 2026 | npm shsk |
Malicious release: Malicious code in qserver (npm) GHSA-wpxf-fg7q-h6gv, MAL-2026-11362 | Malicious | Not scored | 30 Jul, 2026 | npm qserver |
Malicious release: Malicious code in files-bucket-server (npm) GHSA-xcx3-5pr8-rph9, MAL-2026-11311 | Malicious | Not scored | 30 Jul, 2026 | npm files-bucket-server |
Malicious release: Malicious code in merg-descripters (npm) GHSA-g4wx-r72j-qg7j, MAL-2026-11331 | Malicious | Not scored | 30 Jul, 2026 | npm merg-descripters |
Malicious release: Malicious code in express-test-dependency (npm) GHSA-v7c3-j562-ph45, MAL-2026-11305 | Malicious | Not scored | 30 Jul, 2026 | npm express-test-dependency |
Malicious release: Malicious code in @goodjavascript/dotenv (npm) GHSA-c5ch-4w75-vcw7, MAL-2026-11212 | Malicious | Not scored | 30 Jul, 2026 | npm @goodjavascript/dotenv |
Malicious release: Malicious code in discord-ms (npm) GHSA-3gvj-vp8w-8hhv, MAL-2026-11278 | Malicious | Not scored | 30 Jul, 2026 | npm discord-ms |
Malicious release: Malicious code in discord-starter (npm) GHSA-f7vm-5hq9-mwjj, MAL-2026-11280 | Malicious | Not scored | 30 Jul, 2026 | npm discord-starter |
Malicious release: Malicious code in react-ag-grid (npm) GHSA-98mq-h6cv-m583, MAL-2026-11365 | Malicious | Not scored | 30 Jul, 2026 | npm react-ag-grid |
Malicious release: Malicious code in imut-set (npm) GHSA-r3c8-mw9w-xmfv, MAL-2026-11320 | Malicious | Not scored | 30 Jul, 2026 | npm imut-set |
Malicious release: Malicious code in lodash-ex (npm) GHSA-x8qf-9h8v-gm9x, MAL-2026-11327 | Malicious | Not scored | 30 Jul, 2026 | npm lodash-ex |
Malicious release: Malicious code in ag-grid-boost (npm) GHSA-xqpj-5x5p-hgh7, MAL-2026-11235 | Malicious | Not scored | 30 Jul, 2026 | npm ag-grid-boost |
Malicious release: Malicious code in test-wastu (npm) GHSA-63j4-mhgp-qg9v, MAL-2026-11396 | Malicious | Not scored | 30 Jul, 2026 | npm test-wastu |
Malicious release: Malicious code in wastu (npm) GHSA-jwr5-mf48-j5vg, MAL-2026-11409 | Malicious | Not scored | 30 Jul, 2026 | npm wastu |
Malicious release: Malicious code in scol (npm) GHSA-qxvp-f79c-fhm8, MAL-2026-11377 | Malicious | Not scored | 30 Jul, 2026 | npm scol |
Malicious release: Malicious code in blbird (npm) GHSA-8mww-mrp7-gg4g, MAL-2026-11248 | Malicious | Not scored | 30 Jul, 2026 | npm blbird |
Malicious release: Malicious code in zcas (npm) GHSA-2v4j-qgf9-fvqc, MAL-2026-11412 | Malicious | Not scored | 30 Jul, 2026 | npm zcas |
Malicious release: Malicious code in ecto-logger (npm) GHSA-6224-2ghr-p5cq, MAL-2026-11287 | Malicious | Not scored | 30 Jul, 2026 | npm ecto-logger |
Malicious release: Malicious code in @spectraltest/loglevel (npm) GHSA-8jp7-hh94-hrrf, MAL-2026-11232 | Malicious | Not scored | 30 Jul, 2026 | npm @spectraltest/loglevel |
Malicious release: Malicious code in spectral-wraith (npm) GHSA-m2mq-w6wp-w8gf, MAL-2026-11385 | Malicious | Not scored | 30 Jul, 2026 | npm spectral-wraith |
Malicious release: Malicious code in curse-dependent (npm) MAL-2026-11272 | Malicious | Not scored | 30 Jul, 2026 | npm curse-dependent |
Malicious release: Malicious code in spectral-corsair (npm) MAL-2026-11384 | Malicious | Not scored | 30 Jul, 2026 | npm spectral-corsair |
Malicious release: Malicious code in puppetewebr (npm) GHSA-8hpf-vg2v-v9wc, MAL-2026-11361 | Malicious | Not scored | 30 Jul, 2026 | npm puppetewebr |
Malicious release: Malicious code in etwl (npm) GHSA-grfv-7rvr-chw4, MAL-2026-11301 | Malicious | Not scored | 30 Jul, 2026 | npm etwl |
Malicious release: Malicious code in pretierr (npm) GHSA-rfv2-vfmp-jq9p, MAL-2026-11348 | Malicious | Not scored | 30 Jul, 2026 | npm pretierr |
Malicious release: Malicious code in maalxios (npm) GHSA-5f53-x2hv-vqqx, MAL-2026-11329 | Malicious | Not scored | 30 Jul, 2026 | npm maalxios |
Malicious release: Malicious code in malxios (npm) GHSA-73g9-wgm7-84qr, MAL-2026-11330 | Malicious | Not scored | 30 Jul, 2026 | npm malxios |
Malicious release: Malicious code in @sourav_chanduka/oidc-client (npm) GHSA-5w3j-78pm-qcj7, MAL-2026-11231 | Malicious | Not scored | 30 Jul, 2026 | npm @sourav_chanduka/oidc-client |
Malicious release: Malicious code in @sourav_chanduka/core (npm) GHSA-7p79-743j-rjq8, MAL-2026-11229 | Malicious | Not scored | 30 Jul, 2026 | npm @sourav_chanduka/core |
Malicious release: Malicious code in @sourav_chanduka/core-no-ngrok (npm) GHSA-qrx2-r7m9-fw6x, MAL-2026-11230 | Malicious | Not scored | 30 Jul, 2026 | npm @sourav_chanduka/core-no-ngrok |
Malicious release: Malicious code in @web3utils/common (npm) GHSA-q3f3-h8g8-7qc6, MAL-2026-11234 | Malicious | Not scored | 30 Jul, 2026 | npm @web3utils/common |
Malicious release: Malicious code in @solana-utils/common (npm) GHSA-86ff-vvv8-wr2x, MAL-2026-11228 | Malicious | Not scored | 30 Jul, 2026 | npm @solana-utils/common |
Malicious release: Malicious code in @web3-util/common (npm) GHSA-wvx6-fwf2-hpp5, MAL-2026-11233 | Malicious | Not scored | 30 Jul, 2026 | npm @web3-util/common |
Malicious release: Malicious code in discord-rsc (npm) GHSA-g892-r2fw-vxgc, MAL-2026-11279 | Malicious | Not scored | 30 Jul, 2026 | npm discord-rsc |
Malicious release: Malicious code in discord-csr (npm) GHSA-gjqh-7qrr-25q9, MAL-2026-11277 | Malicious | Not scored | 30 Jul, 2026 | npm discord-csr |
Malicious release: Malicious code in tailwindcsssss (npm) GHSA-6x93-j4j5-p856, MAL-2026-11394 | Malicious | Not scored | 30 Jul, 2026 | npm tailwindcsssss |
Malicious release: Malicious code in tailwindcssss (npm) MAL-2026-11393 | Malicious | Not scored | 30 Jul, 2026 | npm tailwindcssss |