Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in na-rony (npm) GHSA-f83g-5hxf-2g39, MAL-2026-6964 | Malicious | Not scored | 08 Jul, 2026 | npm na-rony |
Malicious release: Malicious code in na-rony-test-karem (npm) GHSA-pfc9-hmhj-8x4p, MAL-2026-6966 | Malicious | Not scored | 08 Jul, 2026 | npm na-rony-test-karem |
Malicious release: Malicious code in na-rony-test (npm) GHSA-ppr7-xf9p-cqpg, MAL-2026-6965 | Malicious | Not scored | 08 Jul, 2026 | npm na-rony-test |
Malicious release: Malicious code in karem-dp (npm) GHSA-qfm3-6pmh-jr8j, MAL-2026-6963 | Malicious | Not scored | 08 Jul, 2026 | npm karem-dp |
Malicious release: Malicious code in nam-os-a-man (npm) GHSA-qq66-gj73-6pqm, MAL-2026-6967 | Malicious | Not scored | 08 Jul, 2026 | npm nam-os-a-man |
Malicious release: Malicious code in gas-log (npm) GHSA-24x9-3433-gqp9, MAL-2026-6962 | Malicious | Not scored | 08 Jul, 2026 | npm gas-log |
Malicious release: Malicious code in vite-json-pwa (npm) GHSA-3f72-wf55-pqjc, MAL-2026-6969 | Malicious | Not scored | 08 Jul, 2026 | npm vite-json-pwa |
Malicious release: Malicious code in nodemon-node (npm) GHSA-58j3-rgh4-9rjc, MAL-2026-6957 | Malicious | Not scored | 08 Jul, 2026 | npm nodemon-node |
Malicious release: Malicious code in ts-await (npm) GHSA-xpmf-x27p-9vcc, MAL-2026-6958 | Malicious | Not scored | 08 Jul, 2026 | npm ts-await |
Malicious release: Malicious code in rio-design-tokens (npm) GHSA-53fp-9cgx-r5rg, MAL-2026-6956 | Malicious | Not scored | 08 Jul, 2026 | npm rio-design-tokens |
Malicious release: Malicious code in hello244b (npm) MAL-2026-6955 | Malicious | Not scored | 07 Jul, 2026 | npm hello244b |
Malicious release: Malicious code in @whs4/whs4_npm (npm) GHSA-85fx-62wv-932x, MAL-2026-6946 | Malicious | Not scored | 07 Jul, 2026 | npm @whs4/whs4_npm |
Malicious release: Malicious code in whs4_npm_test (npm) GHSA-pjv5-35wr-prrm, MAL-2026-6952 | Malicious | Not scored | 07 Jul, 2026 | npm whs4_npm_test |
Malicious release: Malicious code in whs4_pnm (npm) GHSA-23v6-j5g5-7x9p, MAL-2026-6953 | Malicious | Not scored | 07 Jul, 2026 | npm whs4_pnm |
Malicious release: Malicious code in whs4_npm (npm) GHSA-3wm9-8rfp-wp25, MAL-2026-6951 | Malicious | Not scored | 07 Jul, 2026 | npm whs4_npm |
Malicious release: Malicious code in whs4_nmp (npm) GHSA-4fw4-5853-rqf8, MAL-2026-6950 | Malicious | Not scored | 07 Jul, 2026 | npm whs4_nmp |
Malicious release: Malicious code in wsh4_npm (npm) GHSA-6h38-53x2-5jhm, MAL-2026-6954 | Malicious | Not scored | 07 Jul, 2026 | npm wsh4_npm |
Malicious release: Malicious code in runtimedev-link (npm) GHSA-v63r-xv67-wj6q, MAL-2026-6948 | Malicious | Not scored | 07 Jul, 2026 | npm runtimedev-link |
Malicious release: Malicious code in polytrade (npm) GHSA-r7mv-rcm7-x7m3, MAL-2026-6939 | Malicious | Not scored | 07 Jul, 2026 | npm polytrade |
Malicious release: Malicious code in evm-typechain (npm) GHSA-c4gm-jp6q-h9hq, MAL-2026-6932 | Malicious | Not scored | 07 Jul, 2026 | npm evm-typechain |
Malicious release: Malicious code in load-nuxt-dev (npm) GHSA-6mpp-f748-7f4q, MAL-2026-6935 | Malicious | Not scored | 07 Jul, 2026 | npm load-nuxt-dev |
Malicious release: Malicious code in nuxt-fonts-devtools (npm) GHSA-hw4h-mjrw-4qv9, MAL-2026-6937 | Malicious | Not scored | 07 Jul, 2026 | npm nuxt-fonts-devtools |
Malicious release: Malicious code in load-nuxt (npm) GHSA-qqp7-wmv2-mp34, MAL-2026-6934 | Malicious | Not scored | 07 Jul, 2026 | npm load-nuxt |
Malicious release: Malicious code in hook-augmenting-module (npm) GHSA-53f9-qr7j-x48v, MAL-2026-6933 | Malicious | Not scored | 07 Jul, 2026 | npm hook-augmenting-module |
Malicious release: Malicious code in shopify-internel (npm) GHSA-fgr2-2c8j-mp2x, MAL-2026-6941 | Malicious | Not scored | 07 Jul, 2026 | npm shopify-internel |
Malicious release: Malicious code in annotator-harvardx (npm) GHSA-hpvm-wxmp-gcxg, MAL-2026-6930 | Malicious | Not scored | 07 Jul, 2026 | npm annotator-harvardx |
Malicious release: Malicious code in rnx-align-deps (npm) GHSA-q28c-5m68-92hm, MAL-2026-6940 | Malicious | Not scored | 07 Jul, 2026 | npm rnx-align-deps |
Malicious release: Malicious code in some-theme (npm) GHSA-wcc7-m55m-mh57, MAL-2026-6942 | Malicious | Not scored | 07 Jul, 2026 | npm some-theme |
Malicious release: Malicious code in nonexistent-package (npm) GHSA-wxvr-4mc8-3qvj, MAL-2026-6936 | Malicious | Not scored | 07 Jul, 2026 | npm nonexistent-package |
Malicious release: Malicious code in tx-guard-snap (npm) GHSA-8w4p-m2h2-2wj5, MAL-2026-6943 | Malicious | Not scored | 07 Jul, 2026 | npm tx-guard-snap |
Malicious release: Malicious code in chai-sdk (npm) GHSA-xc9r-f5wv-cvxx, MAL-2026-6931 | Malicious | Not scored | 07 Jul, 2026 | npm chai-sdk |
Malicious release: Malicious code in chai-chain-dom (npm) GHSA-2gcw-jv94-7mfq, MAL-2026-6919 | Malicious | Not scored | 07 Jul, 2026 | npm chai-chain-dom |
Malicious release: Malicious code in jsf-utils (npm) GHSA-2jff-wp39-wgch, MAL-2026-6921 | Malicious | Not scored | 07 Jul, 2026 | npm jsf-utils |
Malicious release: Malicious code in notifier-utils (npm) GHSA-vg5w-f83q-fhmj, MAL-2026-6923 | Malicious | Not scored | 07 Jul, 2026 | npm notifier-utils |
Malicious release: Malicious code in crypto-base58 (npm) GHSA-frf3-wxv2-p559, MAL-2026-6920 | Malicious | Not scored | 07 Jul, 2026 | npm crypto-base58 |
Malicious release: Malicious code in typescript-base58 (npm) GHSA-rff8-755c-wqvw, MAL-2026-6925 | Malicious | Not scored | 07 Jul, 2026 | npm typescript-base58 |
Malicious release: Malicious code in solana-address-codec (npm) GHSA-9jx5-jcp6-qmqq, MAL-2026-6924 | Malicious | Not scored | 07 Jul, 2026 | npm solana-address-codec |
Malicious release: Malicious code in base58-cli (npm) GHSA-fg2f-v569-6wqv, MAL-2026-6918 | Malicious | Not scored | 07 Jul, 2026 | npm base58-cli |
Malicious release: Malicious code in @sqlite-list/schema-generator (npm) GHSA-2859-847v-c4v9, MAL-2026-6916 | Malicious | Not scored | 07 Jul, 2026 | npm @sqlite-list/schema-generator |
Malicious release: Malicious code in @sqlite-list/sql-creator (npm) GHSA-9hmc-5fx9-73cp, MAL-2026-6917 | Malicious | Not scored | 07 Jul, 2026 | npm @sqlite-list/sql-creator |
Malicious release: Malicious code in @sqlite-access/nodesql (npm) GHSA-m2mh-6v6x-qh4f, MAL-2026-6914 | Malicious | Not scored | 07 Jul, 2026 | npm @sqlite-access/nodesql |
Malicious release: Malicious code in @sqlite-list/createsql (npm) GHSA-www8-7fg3-xg79, MAL-2026-6915 | Malicious | Not scored | 07 Jul, 2026 | npm @sqlite-list/createsql |
Malicious release: Malicious code in mcp-server-pg (npm) GHSA-cfv7-74pc-vmff, MAL-2026-6922 | Malicious | Not scored | 07 Jul, 2026 | npm mcp-server-pg |
Malicious release: Malicious code in @engagehub/test-claim (npm) GHSA-q6cv-rc8j-6pp7, MAL-2026-6912 | Malicious | Not scored | 07 Jul, 2026 | npm @engagehub/test-claim |
Malicious release: Malicious code in brunomenozzi-test-pkg (npm) GHSA-hpc6-h2fp-hcpj, MAL-2026-6913 | Malicious | Not scored | 07 Jul, 2026 | npm brunomenozzi-test-pkg |
Malicious release: Malicious code in zreactjs (npm) GHSA-9xx3-2pvq-3fmq, MAL-2026-7447 | Malicious | Not scored | 07 Jul, 2026 | npm zreactjs |
Malicious release: Malicious code in zircuit-vault (npm) GHSA-r2vw-pjhw-fffh, MAL-2026-7446 | Malicious | Not scored | 07 Jul, 2026 | npm zircuit-vault |
Malicious release: Malicious code in zircuit-oracle (npm) GHSA-chhx-3jfh-88w2, MAL-2026-7444 | Malicious | Not scored | 07 Jul, 2026 | npm zircuit-oracle |
Malicious release: Malicious code in zircuit-reporter (npm) GHSA-g927-xfxw-v7r5, MAL-2026-7445 | Malicious | Not scored | 07 Jul, 2026 | npm zircuit-reporter |
Malicious release: Malicious code in zircuit-keeper (npm) GHSA-93h4-j8f7-jh32, MAL-2026-7443 | Malicious | Not scored | 07 Jul, 2026 | npm zircuit-keeper |