Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @wagni_bot/bsc (npm) MAL-2026-11109 | Malicious | Not scored | 09 Jul, 2026 | npm @wagni_bot/bsc |
Malicious release: Malicious code in @wagni_bot/eth (npm) MAL-2026-11110 | Malicious | Not scored | 09 Jul, 2026 | npm @wagni_bot/eth |
Malicious release: Malicious code in @wagni_bot/hyperliquid (npm) MAL-2026-11111 | Malicious | Not scored | 09 Jul, 2026 | npm @wagni_bot/hyperliquid |
Malicious release: Malicious code in @wagni_bot/metamask (npm) MAL-2026-11112 | Malicious | Not scored | 09 Jul, 2026 | npm @wagni_bot/metamask |
Malicious release: Malicious code in @wagni_bot/opensea (npm) MAL-2026-11113 | Malicious | Not scored | 09 Jul, 2026 | npm @wagni_bot/opensea |
Malicious release: Malicious code in @wagni_bot/polygon (npm) MAL-2026-11114 | Malicious | Not scored | 09 Jul, 2026 | npm @wagni_bot/polygon |
Malicious release: Malicious code in @wagni_bot/polymarket (npm) MAL-2026-11115 | Malicious | Not scored | 09 Jul, 2026 | npm @wagni_bot/polymarket |
Malicious release: Malicious code in @wagni_bot/wagni (npm) MAL-2026-11116 | Malicious | Not scored | 09 Jul, 2026 | npm @wagni_bot/wagni |
Malicious release: Malicious code in @wagni_bot/web3 (npm) MAL-2026-11117 | Malicious | Not scored | 09 Jul, 2026 | npm @wagni_bot/web3 |
Malicious release: Malicious code in tslint-conf (npm) GHSA-wchw-4whx-qhq5, MAL-2026-7022 | Malicious | Not scored | 08 Jul, 2026 | npm tslint-conf |
Malicious release: Malicious code in @vite-js/ui (npm) GHSA-x4cp-w826-x466, MAL-2026-7021 | Malicious | Not scored | 08 Jul, 2026 | npm @vite-js/ui |
Malicious release: Malicious code in n8n-nodes-barcode-generator (npm) MAL-2026-7018 | Malicious | Not scored | 08 Jul, 2026 | npm n8n-nodes-barcode-generator |
Malicious release: Malicious code in react-v17 (npm) MAL-2026-7020 | Malicious | Not scored | 08 Jul, 2026 | npm react-v17 |
Malicious release: Malicious code in npm-rce-poc (npm) GHSA-pqpr-7m94-xhm4, MAL-2026-7019 | Malicious | Not scored | 08 Jul, 2026 | npm npm-rce-poc |
Malicious release: Malicious code in none123s (npm) GHSA-rqf4-7r8q-fxmq, MAL-2026-7024 | Malicious | Not scored | 08 Jul, 2026 | npm none123s |
Malicious release: Malicious code in @vraksha/gh-helper (npm) MAL-2026-7016 | Malicious | Not scored | 08 Jul, 2026 | npm @vraksha/gh-helper |
Malicious release: Malicious code in crypto-promiser (npm) GHSA-pgcc-398f-7cv2, MAL-2026-7010 | Malicious | Not scored | 08 Jul, 2026 | npm crypto-promiser |
Malicious release: Malicious code in vps-new-manager (npm) GHSA-vm7q-854p-gw38, MAL-2026-7014 | Malicious | Not scored | 08 Jul, 2026 | npm vps-new-manager |
Malicious release: Malicious code in events-alias (npm) MAL-2026-7011 | Malicious | Not scored | 08 Jul, 2026 | npm events-alias |
Malicious release: Malicious code in chai-as-const (npm) GHSA-c2cc-6c6f-8qrp, MAL-2026-7008 | Malicious | Not scored | 08 Jul, 2026 | npm chai-as-const |
Malicious release: Malicious code in configration (npm) GHSA-6vxp-hr6q-qq8g, MAL-2026-7009 | Malicious | Not scored | 08 Jul, 2026 | npm configration |
Malicious release: Malicious code in next-locomotive-init (npm) GHSA-v4q3-jmq9-q449, MAL-2026-7013 | Malicious | Not scored | 08 Jul, 2026 | npm next-locomotive-init |
Malicious release: Malicious code in @vite-tab/tab (npm) GHSA-74pv-97c8-9hfp, MAL-2026-6988 | Malicious | Not scored | 08 Jul, 2026 | npm @vite-tab/tab |
Malicious release: Malicious code in luludawang-kit (npm) GHSA-vgv8-886r-fvp5, MAL-2026-6999 | Malicious | Not scored | 08 Jul, 2026 | npm luludawang-kit |
Malicious release: Malicious code in ec-checker (npm) MAL-2026-6996 | Malicious | Not scored | 08 Jul, 2026 | npm ec-checker |
Malicious release: Malicious code in chai-redirection (npm) GHSA-89c7-5mf7-c86r, MAL-2026-6995 | Malicious | Not scored | 08 Jul, 2026 | npm chai-redirection |
Malicious release: Malicious code in chai-presentation (npm) MAL-2026-6994 | Malicious | Not scored | 08 Jul, 2026 | npm chai-presentation |
Malicious release: Malicious code in airkey-mfa-react (npm) GHSA-85x8-7x9f-f978, MAL-2026-6991 | Malicious | Not scored | 08 Jul, 2026 | npm airkey-mfa-react |
Malicious release: Malicious code in pipo-sdk (npm) MAL-2026-7000 | Malicious | Not scored | 08 Jul, 2026 | npm pipo-sdk |
Malicious release: Malicious code in goofy-sdk (npm) MAL-2026-6997 | Malicious | Not scored | 08 Jul, 2026 | npm goofy-sdk |
Malicious release: Malicious code in @luminarycloudinternal/lcvis-st (npm) GHSA-pgh8-mm8r-r796, MAL-2026-6987 | Malicious | Not scored | 08 Jul, 2026 | npm @luminarycloudinternal/lcvis-st |
Malicious release: Malicious code in bytefaas-sdk (npm) MAL-2026-6993 | Malicious | Not scored | 08 Jul, 2026 | npm bytefaas-sdk |
Malicious release: Malicious code in searchresults (npm) GHSA-cpff-p65h-24c4, MAL-2026-7003 | Malicious | Not scored | 08 Jul, 2026 | npm searchresults |
Malicious release: Malicious code in thunder-rony (npm) MAL-2026-7004 | Malicious | Not scored | 08 Jul, 2026 | npm thunder-rony |
Malicious release: Malicious code in ronyfortest (npm) MAL-2026-7002 | Malicious | Not scored | 08 Jul, 2026 | npm ronyfortest |
Malicious release: Malicious code in rony-test (npm) MAL-2026-7001 | Malicious | Not scored | 08 Jul, 2026 | npm rony-test |
Malicious release: Malicious code in higherlogic-ocfe (npm) GHSA-6c7j-c4j8-rgq3, MAL-2026-6998 | Malicious | Not scored | 08 Jul, 2026 | npm higherlogic-ocfe |
Malicious release: Malicious code in babel-eslint-parser-legacy (npm) GHSA-xr98-72p4-pwg2, MAL-2026-6992 | Malicious | Not scored | 08 Jul, 2026 | npm babel-eslint-parser-legacy |
Malicious release: Malicious code in ag-charts-test (npm) GHSA-p9cr-rm9c-q8mg, MAL-2026-6989 | Malicious | Not scored | 08 Jul, 2026 | npm ag-charts-test |
Malicious release: Malicious code in visa-cli-tools (npm) GHSA-jx6g-7h69-4334, MAL-2026-7005 | Malicious | Not scored | 08 Jul, 2026 | npm visa-cli-tools |
Malicious release: Malicious code in ai-gen-ai-opt-in (npm) MAL-2026-6990 | Malicious | Not scored | 08 Jul, 2026 | npm ai-gen-ai-opt-in |
Malicious release: Malicious code in @luminarycloudinternal/frodo (npm) GHSA-p92p-63h9-qrvc, MAL-2026-6986 | Malicious | Not scored | 08 Jul, 2026 | npm @luminarycloudinternal/frodo |
Malicious release: Malicious code in promo-helper (npm) GHSA-mvg5-c69w-jg7r, MAL-2026-6985 | Malicious | Not scored | 08 Jul, 2026 | npm promo-helper |
Malicious release: Malicious code in @vite-ln/build-ts (npm) GHSA-p85w-qq28-35h6, MAL-2026-6984 | Malicious | Not scored | 08 Jul, 2026 | npm @vite-ln/build-ts |
Malicious release: Malicious code in paysafe-cards (npm) MAL-2026-6982 | Malicious | Not scored | 08 Jul, 2026 | npm paysafe-cards |
Malicious release: Malicious code in domains-billing-types (npm) MAL-2026-6980 | Malicious | Not scored | 08 Jul, 2026 | npm domains-billing-types |
Malicious release: Malicious code in @vwfs-its/sf-sac-frontend (npm) MAL-2026-6972 | Malicious | Not scored | 08 Jul, 2026 | npm @vwfs-its/sf-sac-frontend |
Malicious release: Malicious code in dependency_confusions (npm) MAL-2026-10085 | Malicious | Not scored | 08 Jul, 2026 | npm dependency_confusions |
Malicious release: Malicious code in gitlens (npm) GHSA-mgwg-48mg-h7pg, MAL-2026-6973 | Malicious | Not scored | 08 Jul, 2026 | npm gitlens |
Malicious release: Malicious code in rony-testing (npm) GHSA-7p38-gfgq-g3f3, MAL-2026-6968 | Malicious | Not scored | 08 Jul, 2026 | npm rony-testing |