Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in vuln-package (npm) MAL-2026-10212 | Malicious | Not scored | 12 Jul, 2026 | npm vuln-package |
Malicious release: Malicious code in mcp-notes-server-poc-praetorian (npm) GHSA-rfhm-2wfr-r9p2, MAL-2026-10210 | Malicious | Not scored | 12 Jul, 2026 | npm mcp-notes-server-poc-praetorian |
Malicious release: Malicious code in @meziizana/frontend-logger (npm) MAL-2026-10208 | Malicious | Not scored | 12 Jul, 2026 | npm @meziizana/frontend-logger |
Malicious release: Malicious code in react-next-vite (npm) MAL-2026-10211 | Malicious | Not scored | 12 Jul, 2026 | npm react-next-vite |
Malicious release: Malicious code in nullrift (npm) MAL-2026-10206 | Malicious | Not scored | 12 Jul, 2026 | npm nullrift |
Malicious release: Malicious code in chain-await-dom (npm) MAL-2026-10202 | Malicious | Not scored | 12 Jul, 2026 | npm chain-await-dom |
Malicious release: Malicious code in react-dom-v17 (npm) MAL-2026-10207 | Malicious | Not scored | 12 Jul, 2026 | npm react-dom-v17 |
Malicious release: Malicious code in library-explorer (npm) GHSA-rgpm-2hw4-8725, MAL-2026-10205 | Malicious | Not scored | 12 Jul, 2026 | npm library-explorer |
Malicious release: Malicious code in giantswarm (npm) MAL-2026-10203 | Malicious | Not scored | 12 Jul, 2026 | npm giantswarm |
Malicious release: Malicious code in api-changelly (npm) GHSA-3835-mjjv-wqw8, MAL-2026-10200 | Malicious | Not scored | 12 Jul, 2026 | npm api-changelly |
Malicious release: Malicious code in gptcore (npm) MAL-2026-10204 | Malicious | Not scored | 12 Jul, 2026 | npm gptcore |
Malicious release: Malicious code in bugexploit (npm) MAL-2026-10201 | Malicious | Not scored | 12 Jul, 2026 | npm bugexploit |
Malicious release: Malicious code in polylabel-web-lib (npm) GHSA-4x59-mhxh-4ghc, MAL-2026-10198 | Malicious | Not scored | 12 Jul, 2026 | npm polylabel-web-lib |
Malicious release: Malicious code in polymarket-kelly-math-stake (npm) GHSA-394f-8988-57rp, MAL-2026-10199 | Malicious | Not scored | 12 Jul, 2026 | npm polymarket-kelly-math-stake |
Malicious release: Malicious code in tinymask-js (npm) GHSA-993g-jhvm-h79j, MAL-2026-10189 | Malicious | Not scored | 11 Jul, 2026 | npm tinymask-js |
Malicious release: Malicious code in awesome-ts-jest (npm) GHSA-7xr4-v32m-4h8x, MAL-2026-10188 | Malicious | Not scored | 11 Jul, 2026 | npm awesome-ts-jest |
Malicious release: Malicious code in tinyparrot (npm) GHSA-447m-j3q4-m529, MAL-2026-10190 | Malicious | Not scored | 11 Jul, 2026 | npm tinyparrot |
Malicious release: Malicious code in google-caja-bower (npm) GHSA-qq75-mfwc-v6gx, MAL-2026-10186 | Malicious | Not scored | 11 Jul, 2026 | npm google-caja-bower |
Malicious release: Malicious code in authvaultx (npm) GHSA-frr6-2jc6-6fhr, MAL-2026-10185 | Malicious | Not scored | 11 Jul, 2026 | npm authvaultx |
Malicious release: Malicious code in jscrambler (npm) GHSA-v3g3-4x77-rw68, MAL-2026-10187 | Malicious | Not scored | 11 Jul, 2026 | npm jscrambler |
Malicious release: Malicious code in polymarket-mcp-v2 (npm) MAL-2026-10481 | Malicious | Not scored | 11 Jul, 2026 | npm polymarket-mcp-v2 |
Malicious release: Malicious code in @uwr/colors (npm) GHSA-8rcq-736v-r8j8, MAL-2026-10179 | Malicious | Not scored | 10 Jul, 2026 | npm @uwr/colors |
Malicious release: Malicious code in fkext-browser-min (npm) GHSA-rc5q-c5vp-6g46, MAL-2026-10183 | Malicious | Not scored | 10 Jul, 2026 | npm fkext-browser-min |
Malicious release: Malicious code in @broadpeak/smartlib-ad (npm) MAL-2026-10178 | Malicious | Not scored | 10 Jul, 2026 | npm @broadpeak/smartlib-ad |
Malicious release: Malicious code in consumerweb (npm) GHSA-5jfq-x73h-v53x, MAL-2026-10181 | Malicious | Not scored | 10 Jul, 2026 | npm consumerweb |
Malicious release: Malicious code in express-guardian (npm) MAL-2026-10182 | Malicious | Not scored | 10 Jul, 2026 | npm express-guardian |
Malicious release: Malicious code in mongoose-schema-unique (npm) MAL-2026-10184 | Malicious | Not scored | 10 Jul, 2026 | npm mongoose-schema-unique |
Malicious release: Malicious code in auth-next-gen (npm) GHSA-8qpp-8j53-4wh7, MAL-2026-10180 | Malicious | Not scored | 10 Jul, 2026 | npm auth-next-gen |
Malicious release: Malicious code in @jaymara/jsononifier (npm) MAL-2026-10177 | Malicious | Not scored | 10 Jul, 2026 | npm @jaymara/jsononifier |
Malicious release: Malicious code in chai-as-doc (npm) MAL-2026-10175 | Malicious | Not scored | 10 Jul, 2026 | npm chai-as-doc |
Malicious release: Malicious code in uncaxss (npm) MAL-2026-10176 | Malicious | Not scored | 10 Jul, 2026 | npm uncaxss |
Malicious release: Malicious code in @injectivelabs/sdk-ts (npm) GHSA-5fc4-fm2x-6f4r, MAL-2026-10165 | Malicious | Not scored | 10 Jul, 2026 | npm @injectivelabs/sdk-ts |
Malicious release: Malicious code in paysafe-vault (npm) MAL-2026-10173 | Malicious | Not scored | 10 Jul, 2026 | npm paysafe-vault |
Malicious release: Malicious code in paysafe-payments (npm) MAL-2026-10172 | Malicious | Not scored | 10 Jul, 2026 | npm paysafe-payments |
Malicious release: Malicious code in paysafe-node (npm) MAL-2026-10171 | Malicious | Not scored | 10 Jul, 2026 | npm paysafe-node |
Malicious release: Malicious code in paysafe-kyc (npm) MAL-2026-10170 | Malicious | Not scored | 10 Jul, 2026 | npm paysafe-kyc |
Malicious release: Malicious code in paysafe-fraud (npm) MAL-2026-10168 | Malicious | Not scored | 10 Jul, 2026 | npm paysafe-fraud |
Malicious release: Malicious code in paysafe-js (npm) MAL-2026-10169 | Malicious | Not scored | 10 Jul, 2026 | npm paysafe-js |
Malicious release: Malicious code in paysafe-checkout (npm) MAL-2026-10167 | Malicious | Not scored | 10 Jul, 2026 | npm paysafe-checkout |
Malicious release: Malicious code in paysafe-api (npm) MAL-2026-10166 | Malicious | Not scored | 10 Jul, 2026 | npm paysafe-api |
Malicious release: Malicious code in type-atob (npm) GHSA-w8g3-2xjv-6vf6, MAL-2026-10174 | Malicious | Not scored | 10 Jul, 2026 | npm type-atob |
Malicious release: Malicious code in llama-tokenizer (npm) GHSA-q4hv-j85h-9h7j, MAL-2026-10163 | Malicious | Not scored | 10 Jul, 2026 | npm llama-tokenizer |
Malicious release: Malicious code in type-async (npm) GHSA-rfhj-93m8-qhgx, MAL-2026-10164 | Malicious | Not scored | 10 Jul, 2026 | npm type-async |
Malicious release: Malicious code in @bcryptln/becryptjs (npm) GHSA-9qhg-2wvw-j95c, MAL-2026-10162 | Malicious | Not scored | 10 Jul, 2026 | npm @bcryptln/becryptjs |
Malicious release: Malicious code in rollup-packages-polyfill-core (npm) MAL-2026-10160 | Malicious | Not scored | 10 Jul, 2026 | npm rollup-packages-polyfill-core |
Malicious release: Malicious code in buffer-util-internal (npm) MAL-2026-10151 | Malicious | Not scored | 10 Jul, 2026 | npm buffer-util-internal |
Malicious release: Malicious code in ap3-components-ui (npm) GHSA-qhgr-v9vh-3784, MAL-2026-10150 | Malicious | Not scored | 10 Jul, 2026 | npm ap3-components-ui |
Malicious release: Malicious code in notify-utilities (npm) MAL-2026-10158 | Malicious | Not scored | 10 Jul, 2026 | npm notify-utilities |
Malicious release: Malicious code in notify-logs (npm) MAL-2026-10156 | Malicious | Not scored | 10 Jul, 2026 | npm notify-logs |
Malicious release: Malicious code in notify-theme (npm) MAL-2026-10157 | Malicious | Not scored | 10 Jul, 2026 | npm notify-theme |