Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in css-nbanqq-polyfill (npm) MAL-2026-17555 | Malicious | Not scored | 26 days ago | npm css-nbanqq-polyfill |
Malicious release: Malicious code in css-dwsawd-polyfill (npm) MAL-2026-17550 | Malicious | Not scored | 26 days ago | npm css-dwsawd-polyfill |
Malicious release: Malicious code in css-display-reading-polyfill (npm) MAL-2026-17549 | Malicious | Not scored | 26 days ago | npm css-display-reading-polyfill |
Malicious release: Malicious code in insomnia-plugin-api-lint-helper (npm) MAL-2026-17561 | Malicious | Not scored | 26 days ago | npm insomnia-plugin-api-lint-helper |
Malicious release: Malicious code in abbishal-poc (npm) MAL-2026-17545 | Malicious | Not scored | 26 days ago | npm abbishal-poc |
Malicious release: Malicious code in hardhat-kex (npm) MAL-2026-17559 | Malicious | Not scored | 26 days ago | npm hardhat-kex |
Malicious release: Malicious code in tostpro (npm) GHSA-x5qq-j2hm-34m3, MAL-2026-17564 | Malicious | Not scored | 26 days ago | npm tostpro |
Malicious release: Malicious code in @inpeek/odata (npm) GHSA-cmm5-vwvx-cv5f, MAL-2026-17542 | Malicious | Not scored | 26 days ago | npm @inpeek/odata |
Malicious release: Malicious code in @inpeek/odata-angular (npm) GHSA-7p27-jmq6-46ph, MAL-2026-17543 | Malicious | Not scored | 26 days ago | npm @inpeek/odata-angular |
Malicious release: Malicious code in @angjlar/core (npm) MAL-2026-17534 | Malicious | Not scored | 26 days ago | npm @angjlar/core |
Malicious release: Malicious code in hardhat-spack (npm) MAL-2026-17560 | Malicious | Not scored | 26 days ago | npm hardhat-spack |
Malicious release: Malicious code in @angulaar/core (npm) MAL-2026-17537 | Malicious | Not scored | 26 days ago | npm @angulaar/core |
Malicious release: Malicious code in @anguar/core (npm) MAL-2026-17535 | Malicious | Not scored | 26 days ago | npm @anguar/core |
Malicious release: Malicious code in @abgular/core (npm) MAL-2026-17532 | Malicious | Not scored | 26 days ago | npm @abgular/core |
Malicious release: Malicious code in @angulr/core (npm) MAL-2026-17538 | Malicious | Not scored | 26 days ago | npm @angulr/core |
Malicious release: Malicious code in @anuglar/core (npm) MAL-2026-17541 | Malicious | Not scored | 26 days ago | npm @anuglar/core |
Malicious release: Malicious code in @anngular/core (npm) MAL-2026-17540 | Malicious | Not scored | 26 days ago | npm @anngular/core |
Malicious release: Malicious code in @angupar/core (npm) MAL-2026-17539 | Malicious | Not scored | 26 days ago | npm @angupar/core |
Malicious release: Malicious code in internallib_v923 (npm) MAL-2026-17562 | Malicious | Not scored | 26 days ago | npm internallib_v923 |
Malicious release: Malicious code in @qngular/core (npm) MAL-2026-17544 | Malicious | Not scored | 26 days ago | npm @qngular/core |
Malicious release: Malicious code in @angulaar/cli (npm) MAL-2026-17536 | Malicious | Not scored | 26 days ago | npm @angulaar/cli |
Malicious release: Malicious code in @anfular/core (npm) MAL-2026-17533 | Malicious | Not scored | 26 days ago | npm @anfular/core |
Malicious release: Malicious code in api-nebula (npm) GHSA-q4h6-37pw-8pc9, MAL-2026-17531 | Malicious | Not scored | 26 days ago | npm api-nebula |
Malicious release: Malicious code in dotenv-async (npm) GHSA-gp83-4g76-4qg5, MAL-2026-17504 | Malicious | Not scored | 26 days ago | npm dotenv-async |
Malicious release: Malicious code in dotenv-promises (npm) MAL-2026-17505 | Malicious | Not scored | 26 days ago | npm dotenv-promises |
Malicious release: Malicious code in a11y-tabindex-manager (npm) MAL-2026-17501 | Malicious | Not scored | 26 days ago | npm a11y-tabindex-manager |
Malicious release: Malicious code in dom-focus-sentinel (npm) MAL-2026-17503 | Malicious | Not scored | 26 days ago | npm dom-focus-sentinel |
Malicious release: Malicious code in hardhat-roof (npm) MAL-2026-17509 | Malicious | Not scored | 26 days ago | npm hardhat-roof |
Malicious release: Malicious code in hardhat-plus (npm) MAL-2026-17508 | Malicious | Not scored | 26 days ago | npm hardhat-plus |
Malicious release: Malicious code in hardhat-ftp (npm) MAL-2026-17506 | Malicious | Not scored | 26 days ago | npm hardhat-ftp |
Malicious release: Malicious code in hardhat-jsx (npm) MAL-2026-17507 | Malicious | Not scored | 26 days ago | npm hardhat-jsx |
Malicious release: Malicious code in internallib_v275 (npm) GHSA-f6rc-jhj3-4p2w, MAL-2026-17510 | Malicious | Not scored | 26 days ago | npm internallib_v275 |
Malicious release: Malicious code in lite-matte (npm) MAL-2026-17512 | Malicious | Not scored | 26 days ago | npm lite-matte |
Malicious release: Malicious code in lite-matterr (npm) MAL-2026-17513 | Malicious | Not scored | 26 days ago | npm lite-matterr |
Malicious release: Malicious code in lite-mater (npm) MAL-2026-17511 | Malicious | Not scored | 26 days ago | npm lite-mater |
Malicious release: Malicious code in oleh-modal (npm) MAL-2026-17516 | Malicious | Not scored | 26 days ago | npm oleh-modal |
Malicious release: Malicious code in minimal-a11y-contrast-check (npm) MAL-2026-17514 | Malicious | Not scored | 26 days ago | npm minimal-a11y-contrast-check |
Malicious release: Malicious code in monitoring-agent (npm) GHSA-fvjv-j94x-c8wm, MAL-2026-17515 | Malicious | Not scored | 26 days ago | npm monitoring-agent |
Malicious release: Malicious code in postcss-gap-fallback-util (npm) MAL-2026-17518 | Malicious | Not scored | 26 days ago | npm postcss-gap-fallback-util |
Malicious release: Malicious code in popover-anchor-polyfill (npm) MAL-2026-17517 | Malicious | Not scored | 26 days ago | npm popover-anchor-polyfill |
Malicious release: Malicious code in tiny-viewport-unit-calc (npm) MAL-2026-17528 | Malicious | Not scored | 26 days ago | npm tiny-viewport-unit-calc |
Malicious release: Malicious code in promises-dotenv3 (npm) MAL-2026-17519 | Malicious | Not scored | 26 days ago | npm promises-dotenv3 |
Malicious release: Malicious code in rgx33-css-grid-utils (npm) MAL-2026-17520 | Malicious | Not scored | 26 days ago | npm rgx33-css-grid-utils |
Malicious release: Malicious code in studiocode_tools (npm) MAL-2026-17523 | Malicious | Not scored | 26 days ago | npm studiocode_tools |
Malicious release: Malicious code in studiocode_eligibility (npm) MAL-2026-17522 | Malicious | Not scored | 26 days ago | npm studiocode_eligibility |
Malicious release: Malicious code in rgx33-flex-layout-core (npm) MAL-2026-17521 | Malicious | Not scored | 26 days ago | npm rgx33-flex-layout-core |
Malicious release: Malicious code in tiny-css-token-parser (npm) MAL-2026-17525 | Malicious | Not scored | 26 days ago | npm tiny-css-token-parser |
Malicious release: Malicious code in tiny-dom-focus-trap (npm) MAL-2026-17526 | Malicious | Not scored | 26 days ago | npm tiny-dom-focus-trap |
Malicious release: Malicious code in tailwindcss-forms-styles (npm) MAL-2026-17524 | Malicious | Not scored | 26 days ago | npm tailwindcss-forms-styles |
Malicious release: Malicious code in tiny-focusgroup-helper (npm) MAL-2026-17527 | Malicious | Not scored | 26 days ago | npm tiny-focusgroup-helper |