Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in svg-fetcher (npm) GHSA-36vw-78q8-pj2r, MAL-2026-10427 | Malicious | Not scored | 13 Jul, 2026 | npm svg-fetcher |
Malicious release: Malicious code in chai-log (npm) GHSA-2534-xr99-f4wh, MAL-2026-10426 | Malicious | Not scored | 13 Jul, 2026 | npm chai-log |
Malicious release: Malicious code in @ica-gaming/slot-engine (npm) MAL-2026-10404 | Malicious | Not scored | 13 Jul, 2026 | npm @ica-gaming/slot-engine |
Malicious release: Malicious code in frontend-regulations (npm) GHSA-hf3r-x49q-fxm2, MAL-2026-10415 | Malicious | Not scored | 13 Jul, 2026 | npm frontend-regulations |
Malicious release: Malicious code in notifications-broadcast (npm) GHSA-hh3x-6gh6-rhxf, MAL-2026-10419 | Malicious | Not scored | 13 Jul, 2026 | npm notifications-broadcast |
Malicious release: Malicious code in portway (npm) GHSA-j5q6-x29x-2v5x, MAL-2026-10421 | Malicious | Not scored | 13 Jul, 2026 | npm portway |
Malicious release: Malicious code in sso-users-detection (npm) GHSA-x9p4-637q-6wjw, MAL-2026-10422 | Malicious | Not scored | 13 Jul, 2026 | npm sso-users-detection |
Malicious release: Malicious code in path-addon-extend (npm) GHSA-8535-q23c-9jr2, MAL-2026-10420 | Malicious | Not scored | 13 Jul, 2026 | npm path-addon-extend |
Malicious release: Malicious code in cold-debug-elevator (npm) GHSA-w47c-q2p5-gq33, MAL-2026-10409 | Malicious | Not scored | 13 Jul, 2026 | npm cold-debug-elevator |
Malicious release: Malicious code in supertokens-web (npm) GHSA-m7xr-6cvv-jm79, MAL-2026-10423 | Malicious | Not scored | 13 Jul, 2026 | npm supertokens-web |
Malicious release: Malicious code in env-stream (npm) MAL-2026-10412 | Malicious | Not scored | 13 Jul, 2026 | npm env-stream |
Malicious release: Malicious code in express-request-engine (npm) GHSA-684q-384r-cr7r, MAL-2026-10414 | Malicious | Not scored | 13 Jul, 2026 | npm express-request-engine |
Malicious release: Malicious code in trinity-scheme (npm) MAL-2026-10425 | Malicious | Not scored | 13 Jul, 2026 | npm trinity-scheme |
Malicious release: Malicious code in minigptcore (npm) MAL-2026-10417 | Malicious | Not scored | 13 Jul, 2026 | npm minigptcore |
Malicious release: Malicious code in @torbeck/heap (npm) GHSA-8vr7-5wqc-fjwv, MAL-2026-10405 | Malicious | Not scored | 13 Jul, 2026 | npm @torbeck/heap |
Malicious release: Malicious code in eth-base (npm) GHSA-26h4-2435-hp66, MAL-2026-10413 | Malicious | Not scored | 13 Jul, 2026 | npm eth-base |
Malicious release: Malicious code in terminal-mascot (npm) GHSA-g2cj-hj2c-phvf, MAL-2026-10424 | Malicious | Not scored | 13 Jul, 2026 | npm terminal-mascot |
Malicious release: Malicious code in awesome-terminal (npm) GHSA-cv56-pvc8-j5rg, MAL-2026-10407 | Malicious | Not scored | 13 Jul, 2026 | npm awesome-terminal |
Malicious release: Malicious code in async-chain-dom (npm) MAL-2026-10406 | Malicious | Not scored | 13 Jul, 2026 | npm async-chain-dom |
Malicious release: Malicious code in chain-js-utils (npm) MAL-2026-10408 | Malicious | Not scored | 13 Jul, 2026 | npm chain-js-utils |
Malicious release: Malicious code in note-utilities (npm) MAL-2026-10418 | Malicious | Not scored | 13 Jul, 2026 | npm note-utilities |
Malicious release: Malicious code in cookie-phase (npm) MAL-2026-10410 | Malicious | Not scored | 13 Jul, 2026 | npm cookie-phase |
Malicious release: Malicious code in cookie-sign (npm) MAL-2026-10411 | Malicious | Not scored | 13 Jul, 2026 | npm cookie-sign |
Malicious release: Malicious code in tipsen-last-pls (npm) GHSA-r7j6-rpc2-h6xh, MAL-2026-10392 | Malicious | Not scored | 13 Jul, 2026 | npm tipsen-last-pls |
Malicious release: Malicious code in tipsen-last (npm) GHSA-83fp-39mc-pvp5, MAL-2026-10391 | Malicious | Not scored | 13 Jul, 2026 | npm tipsen-last |
Malicious release: Malicious code in tipsen-poc-again (npm) GHSA-q256-mmcv-pqmq, MAL-2026-10393 | Malicious | Not scored | 13 Jul, 2026 | npm tipsen-poc-again |
Malicious release: Malicious code in another-poc-by-tipsen (npm) GHSA-r459-5pr6-64j7, MAL-2026-10283 | Malicious | Not scored | 13 Jul, 2026 | npm another-poc-by-tipsen |
Malicious release: Malicious code in abuden215 (npm) GHSA-27j2-xj3j-rm76, MAL-2026-10258 | Malicious | Not scored | 13 Jul, 2026 | npm abuden215 |
Malicious release: Malicious code in abuden229 (npm) GHSA-58rr-h29w-m3qr, MAL-2026-10270 | Malicious | Not scored | 13 Jul, 2026 | npm abuden229 |
Malicious release: Malicious code in sixseven10 (npm) GHSA-5gvg-2c5f-82xv, MAL-2026-10373 | Malicious | Not scored | 13 Jul, 2026 | npm sixseven10 |
Malicious release: Malicious code in abuden225 (npm) GHSA-8vj6-qxfj-fj3v, MAL-2026-10266 | Malicious | Not scored | 13 Jul, 2026 | npm abuden225 |
Malicious release: Malicious code in abuden214 (npm) GHSA-c3vr-r9ph-97h4, MAL-2026-10257 | Malicious | Not scored | 13 Jul, 2026 | npm abuden214 |
Malicious release: Malicious code in abuden216 (npm) GHSA-c58j-frv2-64vv, MAL-2026-10259 | Malicious | Not scored | 13 Jul, 2026 | npm abuden216 |
Malicious release: Malicious code in abuden224 (npm) GHSA-c9hf-84ch-wfpq, MAL-2026-10265 | Malicious | Not scored | 13 Jul, 2026 | npm abuden224 |
Malicious release: Malicious code in abuden222 (npm) GHSA-c9rm-cppg-wm89, MAL-2026-10263 | Malicious | Not scored | 13 Jul, 2026 | npm abuden222 |
Malicious release: Malicious code in abuden230 (npm) GHSA-cp92-4557-v59f, MAL-2026-10272 | Malicious | Not scored | 13 Jul, 2026 | npm abuden230 |
Malicious release: Malicious code in abuden226 (npm) GHSA-fwjx-23mw-83cp, MAL-2026-10267 | Malicious | Not scored | 13 Jul, 2026 | npm abuden226 |
Malicious release: Malicious code in abuden211 (npm) GHSA-h7w9-4p27-jwwg, MAL-2026-10254 | Malicious | Not scored | 13 Jul, 2026 | npm abuden211 |
Malicious release: Malicious code in abuden219 (npm) GHSA-hrfj-hvpm-2jqh, MAL-2026-10261 | Malicious | Not scored | 13 Jul, 2026 | npm abuden219 |
Malicious release: Malicious code in sixseven7 (npm) GHSA-mwqw-w54p-rhm7, MAL-2026-10379 | Malicious | Not scored | 13 Jul, 2026 | npm sixseven7 |
Malicious release: Malicious code in abuden213 (npm) GHSA-pqjq-v3c7-738r, MAL-2026-10256 | Malicious | Not scored | 13 Jul, 2026 | npm abuden213 |
Malicious release: Malicious code in testdonotredeemit (npm) GHSA-pw55-4833-m3q2, MAL-2026-10386 | Malicious | Not scored | 13 Jul, 2026 | npm testdonotredeemit |
Malicious release: Malicious code in abuden223 (npm) GHSA-q3qh-h756-5hx8, MAL-2026-10264 | Malicious | Not scored | 13 Jul, 2026 | npm abuden223 |
Malicious release: Malicious code in abuden220 (npm) GHSA-rp92-p3vv-4j7m, MAL-2026-10262 | Malicious | Not scored | 13 Jul, 2026 | npm abuden220 |
Malicious release: Malicious code in abuden210 (npm) GHSA-rr6m-gx9c-x82q, MAL-2026-10253 | Malicious | Not scored | 13 Jul, 2026 | npm abuden210 |
Malicious release: Malicious code in abuden212 (npm) GHSA-rx3v-j544-22mx, MAL-2026-10255 | Malicious | Not scored | 13 Jul, 2026 | npm abuden212 |
Malicious release: Malicious code in sixseven8 (npm) GHSA-v77c-326h-8xw6, MAL-2026-10380 | Malicious | Not scored | 13 Jul, 2026 | npm sixseven8 |
Malicious release: Malicious code in acidic (npm) GHSA-w85c-pm3f-wmmf, MAL-2026-10282 | Malicious | Not scored | 13 Jul, 2026 | npm acidic |
Malicious release: Malicious code in sixseven9 (npm) GHSA-whcw-mp7w-q79g, MAL-2026-10381 | Malicious | Not scored | 13 Jul, 2026 | npm sixseven9 |
Malicious release: Malicious code in abuden28 (npm) GHSA-x262-mm3f-jrcx, MAL-2026-10277 | Malicious | Not scored | 13 Jul, 2026 | npm abuden28 |