Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @pumpdot-fun/pump-swap-sdk (npm) GHSA-4gj3-7xcg-jhpm, MAL-2026-11224 | Malicious | Not scored | 30 Jul, 2026 | npm @pumpdot-fun/pump-swap-sdk |
Malicious release: Malicious code in @relforce-dev/console-log (npm) GHSA-4rj5-hjhh-8xc8, MAL-2026-11225 | Malicious | Not scored | 30 Jul, 2026 | npm @relforce-dev/console-log |
Malicious release: Malicious code in @pumpdot-fun/pump-sdk (npm) GHSA-873h-v5vp-pq52, MAL-2026-11223 | Malicious | Not scored | 30 Jul, 2026 | npm @pumpdot-fun/pump-sdk |
Malicious release: Malicious code in @node-console-log/log (npm) GHSA-cmv8-rmg2-2232, MAL-2026-11216 | Malicious | Not scored | 30 Jul, 2026 | npm @node-console-log/log |
Malicious release: Malicious code in fwf (npm) GHSA-5rjh-56g3-j7x2, MAL-2026-11314 | Malicious | Not scored | 30 Jul, 2026 | npm fwf |
Malicious release: Malicious code in @santieich/homebridge-midea-lan (npm) GHSA-jx3g-gq4q-33jp, MAL-2026-11226 | Malicious | Not scored | 30 Jul, 2026 | npm @santieich/homebridge-midea-lan |
Malicious release: Malicious code in aruda (npm) GHSA-pxhx-3f73-24mp, MAL-2026-11240 | Malicious | Not scored | 30 Jul, 2026 | npm aruda |
Malicious release: Malicious code in famshot (npm) GHSA-v3p3-vv86-m2vx, MAL-2026-11309 | Malicious | Not scored | 30 Jul, 2026 | npm famshot |
Malicious release: Malicious code in @patternfly-4/react-core (npm) GHSA-qvfg-h978-mrfg, MAL-2026-11220 | Malicious | Not scored | 30 Jul, 2026 | npm @patternfly-4/react-core |
Malicious release: Malicious code in @patternfly-4/quickstarts (npm) MAL-2026-11219 | Malicious | Not scored | 30 Jul, 2026 | npm @patternfly-4/quickstarts |
Malicious release: Malicious code in @patternfly-4/react-table (npm) MAL-2026-11221 | Malicious | Not scored | 30 Jul, 2026 | npm @patternfly-4/react-table |
Malicious release: Malicious code in @patternfly-4/react-tokens (npm) MAL-2026-11222 | Malicious | Not scored | 30 Jul, 2026 | npm @patternfly-4/react-tokens |
Malicious release: Malicious code in node-fetch-core (npm) GHSA-jw4q-3q2m-r329, MAL-2026-11339 | Malicious | Not scored | 30 Jul, 2026 | npm node-fetch-core |
Malicious release: Malicious code in @nordea-web/core (npm) GHSA-76gq-5fh6-q22c, MAL-2026-11217 | Malicious | Not scored | 30 Jul, 2026 | npm @nordea-web/core |
Malicious release: Malicious code in @nordea-web/ui (npm) GHSA-x4m3-33mp-hhf6, MAL-2026-11218 | Malicious | Not scored | 30 Jul, 2026 | npm @nordea-web/ui |
Malicious release: Malicious code in ncc-fonts (npm) GHSA-3mww-p356-w37h, MAL-2026-11336 | Malicious | Not scored | 30 Jul, 2026 | npm ncc-fonts |
Malicious release: Malicious code in ncc-hyperapp (npm) GHSA-64cv-9vqh-jmc7, MAL-2026-11337 | Malicious | Not scored | 30 Jul, 2026 | npm ncc-hyperapp |
Malicious release: Malicious code in ncc-web (npm) GHSA-865v-rvmq-73cp, MAL-2026-11338 | Malicious | Not scored | 30 Jul, 2026 | npm ncc-web |
Malicious release: Malicious code in hjw-nasa-lib (npm) GHSA-9r29-2px8-pvcj, MAL-2026-11316 | Malicious | Not scored | 30 Jul, 2026 | npm hjw-nasa-lib |
Malicious release: Malicious code in dwa-tridion-webapp (npm) GHSA-c9jm-55f7-3w52, MAL-2026-11284 | Malicious | Not scored | 30 Jul, 2026 | npm dwa-tridion-webapp |
Malicious release: Malicious code in tsetnpmackage (npm) GHSA-2rj9-jmvj-4cr8, MAL-2026-11403 | Malicious | Not scored | 30 Jul, 2026 | npm tsetnpmackage |
Malicious release: Malicious code in testsetset (npm) GHSA-9hj6-prhx-4vq7, MAL-2026-11397 | Malicious | Not scored | 30 Jul, 2026 | npm testsetset |
Malicious release: Malicious code in @meteora-sdk/core (npm) GHSA-f5pc-vrcw-c7r3, MAL-2026-11215 | Malicious | Not scored | 30 Jul, 2026 | npm @meteora-sdk/core |
Malicious release: Malicious code in cmd-auth (npm) GHSA-7m57-mffc-c7p7, MAL-2026-11264 | Malicious | Not scored | 30 Jul, 2026 | npm cmd-auth |
Malicious release: Malicious code in kajl (npm) GHSA-vr22-p67c-9rrc, MAL-2026-11325 | Malicious | Not scored | 30 Jul, 2026 | npm kajl |
Malicious release: Malicious code in react.ja (npm) GHSA-7543-8w65-6h8j, MAL-2026-11368 | Malicious | Not scored | 30 Jul, 2026 | npm react.ja |
Malicious release: Malicious code in react.jd (npm) GHSA-m7jm-x84r-9652, MAL-2026-11369 | Malicious | Not scored | 30 Jul, 2026 | npm react.jd |
Malicious release: Malicious code in installreact (npm) GHSA-mm9w-w535-r967, MAL-2026-11322 | Malicious | Not scored | 30 Jul, 2026 | npm installreact |
Malicious release: Malicious code in express.ja (npm) GHSA-2gpw-6q22-7qwj, MAL-2026-11307 | Malicious | Not scored | 30 Jul, 2026 | npm express.ja |
Malicious release: Malicious code in ekspress (npm) GHSA-692q-284v-2hgw, MAL-2026-11288 | Malicious | Not scored | 30 Jul, 2026 | npm ekspress |
Malicious release: Malicious code in express.jd (npm) GHSA-9wgj-2979-wcq2, MAL-2026-11308 | Malicious | Not scored | 30 Jul, 2026 | npm express.jd |
Malicious release: Malicious code in react.j (npm) GHSA-cmr4-cq5h-774c, MAL-2026-11367 | Malicious | Not scored | 30 Jul, 2026 | npm react.j |
Malicious release: Malicious code in expres.js (npm) GHSA-f9fq-7h8v-5c89, MAL-2026-11302 | Malicious | Not scored | 30 Jul, 2026 | npm expres.js |
Malicious release: Malicious code in reac.js (npm) GHSA-m47m-vg8r-jqxm, MAL-2026-11364 | Malicious | Not scored | 30 Jul, 2026 | npm reac.js |
Malicious release: Malicious code in reakt.js (npm) GHSA-qxw9-cxcm-h598, MAL-2026-11370 | Malicious | Not scored | 30 Jul, 2026 | npm reakt.js |
Malicious release: Malicious code in chalk-button (npm) GHSA-6vfm-x5rq-5gqr, MAL-2026-11256 | Malicious | Not scored | 30 Jul, 2026 | npm chalk-button |
Malicious release: Malicious code in chalk-butons (npm) GHSA-qpfj-w94p-p3wv, MAL-2026-11255 | Malicious | Not scored | 30 Jul, 2026 | npm chalk-butons |
Malicious release: Malicious code in chalk-buttons (npm) GHSA-rp59-qq3q-276w, MAL-2026-11257 | Malicious | Not scored | 30 Jul, 2026 | npm chalk-buttons |
Malicious release: Malicious code in chalk-helper (npm) GHSA-vcp3-wggf-xmf4, MAL-2026-11258 | Malicious | Not scored | 30 Jul, 2026 | npm chalk-helper |
Malicious release: Malicious code in clo321 (npm) GHSA-46h5-45mv-wqvp, MAL-2026-11261 | Malicious | Not scored | 30 Jul, 2026 | npm clo321 |
Malicious release: Malicious code in ttest333 (npm) GHSA-6mwc-v3f9-7vgg, MAL-2026-11404 | Malicious | Not scored | 30 Jul, 2026 | npm ttest333 |
Malicious release: Malicious code in raydiums (npm) GHSA-8rhm-95rv-32f6, MAL-2026-11363 | Malicious | Not scored | 30 Jul, 2026 | npm raydiums |
Malicious release: Malicious code in clo321-server (npm) GHSA-c4xj-wr6j-7w45, MAL-2026-11262 | Malicious | Not scored | 30 Jul, 2026 | npm clo321-server |
Malicious release: Malicious code in 1apijs (npm) GHSA-fchq-q2wv-wg89, MAL-2026-11206 | Malicious | Not scored | 30 Jul, 2026 | npm 1apijs |
Malicious release: Malicious code in apijsclo (npm) GHSA-j2jm-6rgv-3q9p, MAL-2026-11239 | Malicious | Not scored | 30 Jul, 2026 | npm apijsclo |
Malicious release: Malicious code in clo2 (npm) GHSA-jc7h-f527-wc9v, MAL-2026-11260 | Malicious | Not scored | 30 Jul, 2026 | npm clo2 |
Malicious release: Malicious code in clo-adspect (npm) GHSA-pwwc-vh8j-q428, MAL-2026-11259 | Malicious | Not scored | 30 Jul, 2026 | npm clo-adspect |
Malicious release: Malicious code in uniswapintefrace (npm) GHSA-q756-cqgj-x6jv, MAL-2026-11407 | Malicious | Not scored | 30 Jul, 2026 | npm uniswapintefrace |
Malicious release: Malicious code in ttest3333 (npm) GHSA-vqq8-5rp9-328w, MAL-2026-11405 | Malicious | Not scored | 30 Jul, 2026 | npm ttest3333 |
Malicious release: Malicious code in testtwix (npm) GHSA-wg6g-7pqp-9j2w, MAL-2026-11398 | Malicious | Not scored | 30 Jul, 2026 | npm testtwix |