Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in fflc-updated (npm) GHSA-95g2-38r2-hcj9, MAL-2026-10301 | Malicious | Not scored | 13 Jul, 2026 | npm fflc-updated |
Malicious release: Malicious code in backup5-updated (npm) GHSA-cjhm-8r3j-gcvx, MAL-2026-10289 | Malicious | Not scored | 13 Jul, 2026 | npm backup5-updated |
Malicious release: Malicious code in omgyesyesyes (npm) GHSA-cmv4-jj53-2277, MAL-2026-10362 | Malicious | Not scored | 13 Jul, 2026 | npm omgyesyesyes |
Malicious release: Malicious code in crazynut (npm) GHSA-f3cg-jgrj-f48c, MAL-2026-10299 | Malicious | Not scored | 13 Jul, 2026 | npm crazynut |
Malicious release: Malicious code in whatsadmaidk (npm) GHSA-h2gh-rhc4-98p2, MAL-2026-10396 | Malicious | Not scored | 13 Jul, 2026 | npm whatsadmaidk |
Malicious release: Malicious code in captainindia (npm) GHSA-j4pr-j9jm-rj9c, MAL-2026-10297 | Malicious | Not scored | 13 Jul, 2026 | npm captainindia |
Malicious release: Malicious code in pasirianspirit (npm) GHSA-m248-4qv7-2hhj, MAL-2026-10364 | Malicious | Not scored | 13 Jul, 2026 | npm pasirianspirit |
Malicious release: Malicious code in bomboclatwallahi (npm) GHSA-p2r6-86wx-rc38, MAL-2026-10296 | Malicious | Not scored | 13 Jul, 2026 | npm bomboclatwallahi |
Malicious release: Malicious code in backup4-gasp (npm) GHSA-rwpw-7393-4jg2, MAL-2026-10288 | Malicious | Not scored | 13 Jul, 2026 | npm backup4-gasp |
Malicious release: Malicious code in omglucidesotuff (npm) GHSA-w7g9-q298-vp9x, MAL-2026-10361 | Malicious | Not scored | 13 Jul, 2026 | npm omglucidesotuff |
Malicious release: Malicious code in changiairportpromax (npm) GHSA-wfx2-wf73-jrc5, MAL-2026-10298 | Malicious | Not scored | 13 Jul, 2026 | npm changiairportpromax |
Malicious release: Malicious code in midnightrush (npm) GHSA-wq56-6fvg-rgjg, MAL-2026-10334 | Malicious | Not scored | 13 Jul, 2026 | npm midnightrush |
Malicious release: Malicious code in kuaishou (npm) GHSA-hwmq-4g98-3x4p, MAL-2026-10416 | Malicious | Not scored | 13 Jul, 2026 | npm kuaishou |
Malicious release: Malicious code in @gt-test-exp/profiler-exp-00000013 (npm) GHSA-7rqp-vw5q-8mm6, MAL-2026-10249 | Malicious | Not scored | 13 Jul, 2026 | npm @gt-test-exp/profiler-exp-00000013 |
Malicious release: Malicious code in @gt-test-exp/profiler-exp-00000012 (npm) GHSA-9hmh-5qfv-mxcg, MAL-2026-10248 | Malicious | Not scored | 13 Jul, 2026 | npm @gt-test-exp/profiler-exp-00000012 |
Malicious release: Malicious code in @gt-test-exp/profiler-exp-00000006 (npm) GHSA-jch9-93vc-f77v, MAL-2026-10243 | Malicious | Not scored | 13 Jul, 2026 | npm @gt-test-exp/profiler-exp-00000006 |
Malicious release: Malicious code in @gt-test-exp/profiler-exp-00000008 (npm) GHSA-jgcf-m4v8-6mvj, MAL-2026-10244 | Malicious | Not scored | 13 Jul, 2026 | npm @gt-test-exp/profiler-exp-00000008 |
Malicious release: Malicious code in @gt-test-exp/profiler-exp-00000010 (npm) GHSA-m8x8-cqcw-m2h3, MAL-2026-10246 | Malicious | Not scored | 13 Jul, 2026 | npm @gt-test-exp/profiler-exp-00000010 |
Malicious release: Malicious code in @gt-test-exp/profiler-exp-00000009 (npm) GHSA-mvmj-8g56-5p56, MAL-2026-10245 | Malicious | Not scored | 13 Jul, 2026 | npm @gt-test-exp/profiler-exp-00000009 |
Malicious release: Malicious code in @gt-test-exp/profiler-exp-00000014 (npm) GHSA-q8h8-p77m-hfj6, MAL-2026-10250 | Malicious | Not scored | 13 Jul, 2026 | npm @gt-test-exp/profiler-exp-00000014 |
Malicious release: Malicious code in @gt-test-exp/profiler-exp-00000011 (npm) GHSA-xjv3-hx8r-9hm5, MAL-2026-10247 | Malicious | Not scored | 13 Jul, 2026 | npm @gt-test-exp/profiler-exp-00000011 |
Malicious release: Malicious code in @gt-test-exp/profiler-exp-00000004 (npm) GHSA-2pxp-qv4h-5pf5, MAL-2026-10241 | Malicious | Not scored | 13 Jul, 2026 | npm @gt-test-exp/profiler-exp-00000004 |
Malicious release: Malicious code in @gt-test-exp/profiler-exp-00000002 (npm) GHSA-cqr6-qg6q-mjrf, MAL-2026-10239 | Malicious | Not scored | 13 Jul, 2026 | npm @gt-test-exp/profiler-exp-00000002 |
Malicious release: Malicious code in @gt-test-exp/profiler-exp-00000005 (npm) GHSA-h3w8-853x-jh37, MAL-2026-10242 | Malicious | Not scored | 13 Jul, 2026 | npm @gt-test-exp/profiler-exp-00000005 |
Malicious release: Malicious code in @gt-test-exp/profiler-exp-00000001 (npm) GHSA-vj45-v39j-8wrg, MAL-2026-10238 | Malicious | Not scored | 13 Jul, 2026 | npm @gt-test-exp/profiler-exp-00000001 |
Malicious release: Malicious code in @gt-test-exp/profiler-exp-00000003 (npm) GHSA-xh9v-9556-25xw, MAL-2026-10240 | Malicious | Not scored | 13 Jul, 2026 | npm @gt-test-exp/profiler-exp-00000003 |
Malicious release: Malicious code in openai-apps (npm) GHSA-6p8x-rqq9-f5hm, MAL-2026-10363 | Malicious | Not scored | 13 Jul, 2026 | npm openai-apps |
Malicious release: Malicious code in dogfood-search (npm) GHSA-rj7x-4vm3-g5qh, MAL-2026-10300 | Malicious | Not scored | 13 Jul, 2026 | npm dogfood-search |
Malicious release: Malicious code in vibewise (npm) GHSA-5w28-c486-hwhp, MAL-2026-10394 | Malicious | Not scored | 13 Jul, 2026 | npm vibewise |
Malicious release: Malicious code in vibewise-cli (npm) GHSA-c576-6fr6-958p, MAL-2026-10395 | Malicious | Not scored | 13 Jul, 2026 | npm vibewise-cli |
Malicious release: Malicious code in gpapp (npm) GHSA-jqmp-phjr-8wgf, MAL-2026-10302 | Malicious | Not scored | 13 Jul, 2026 | npm gpapp |
Malicious release: Malicious code in gpapps (npm) GHSA-q3m9-9f7f-9rjp, MAL-2026-10303 | Malicious | Not scored | 13 Jul, 2026 | npm gpapps |
Malicious release: Malicious code in apps-gpt (npm) GHSA-w8x5-m86w-956v, MAL-2026-10284 | Malicious | Not scored | 13 Jul, 2026 | npm apps-gpt |
Malicious release: Malicious code in @gleamkit/ws (npm) MAL-2026-10402 | Malicious | Not scored | 13 Jul, 2026 | npm @gleamkit/ws |
Malicious release: Malicious code in @iana-rzms/bff-sdk (npm) MAL-2026-10403 | Malicious | Not scored | 13 Jul, 2026 | npm @iana-rzms/bff-sdk |
Malicious release: Malicious code in @espn-ping/react-dmed-oauth (npm) GHSA-c99m-x4q9-727p, MAL-2026-10401 | Malicious | Not scored | 13 Jul, 2026 | npm @espn-ping/react-dmed-oauth |
Malicious release: Malicious code in @db-tools/main-app (npm) GHSA-fwf6-6x3c-6g3h, MAL-2026-10398 | Malicious | Not scored | 13 Jul, 2026 | npm @db-tools/main-app |
Malicious release: Malicious code in @equansservices/tool (npm) GHSA-5v77-3vqq-cv88, MAL-2026-10400 | Malicious | Not scored | 13 Jul, 2026 | npm @equansservices/tool |
Malicious release: Malicious code in @equansservices/codex (npm) MAL-2026-10399 | Malicious | Not scored | 13 Jul, 2026 | npm @equansservices/codex |
Malicious release: Malicious code in @car_loans/dealerships-approval (npm) GHSA-p8xg-5qpp-p289, MAL-2026-10397 | Malicious | Not scored | 13 Jul, 2026 | npm @car_loans/dealerships-approval |
Malicious release: Malicious code in @jplopezy/connectivity-test-do-not-install (npm) GHSA-gc65-4rgh-4rc3, MAL-2026-10220 | Malicious | Not scored | 13 Jul, 2026 | npm @jplopezy/connectivity-test-do-not-install |
Malicious release: Malicious code in chai-as-precision (npm) MAL-2026-10219 | Malicious | Not scored | 13 Jul, 2026 | npm chai-as-precision |
Malicious release: Malicious code in pure-folder-three (npm) GHSA-9w58-3cgj-jw7v, MAL-2026-10218 | Malicious | Not scored | 13 Jul, 2026 | npm pure-folder-three |
Malicious release: Malicious code in dotnet-runtime-base (npm) GHSA-9gr8-wg29-9wvv, MAL-2026-10217 | Malicious | Not scored | 13 Jul, 2026 | npm dotnet-runtime-base |
Malicious release: Malicious code in node-sysmetrics (npm) GHSA-w2wx-f2m6-332m, MAL-2026-10216 | Malicious | Not scored | 13 Jul, 2026 | npm node-sysmetrics |
Malicious release: Malicious code in slds-lsp-client (npm) GHSA-63pr-5274-mfh7, MAL-2026-10234 | Malicious | Not scored | 13 Jul, 2026 | npm slds-lsp-client |
Malicious release: Malicious code in salesforce-vscode-slds (npm) GHSA-9cp8-cmrv-qrg9, MAL-2026-10232 | Malicious | Not scored | 13 Jul, 2026 | npm salesforce-vscode-slds |
Malicious release: Malicious code in chat-adapter-zoom (npm) GHSA-vw6g-629w-6hgx, MAL-2026-10228 | Malicious | Not scored | 13 Jul, 2026 | npm chat-adapter-zoom |
Malicious release: Malicious code in babel-preset-lib-client (npm) GHSA-wxh7-fh8g-5j3m, MAL-2026-10214 | Malicious | Not scored | 12 Jul, 2026 | npm babel-preset-lib-client |
Malicious release: Malicious code in auto-debug-tool (npm) GHSA-j6r6-q63r-r4qx, MAL-2026-10209 | Malicious | Not scored | 12 Jul, 2026 | npm auto-debug-tool |