Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in yreactjs (npm) GHSA-6rw7-ppgr-8jfp, MAL-2026-7442 | Malicious | Not scored | 07 Jul, 2026 | npm yreactjs |
Malicious release: Malicious code in wreactjs (npm) GHSA-7w53-mp9w-79w9, MAL-2026-7441 | Malicious | Not scored | 07 Jul, 2026 | npm wreactjs |
Malicious release: Malicious code in winston-middleware (npm) GHSA-mh82-qcqf-7cpv, MAL-2026-7440 | Malicious | Not scored | 07 Jul, 2026 | npm winston-middleware |
Malicious release: Malicious code in win-env-setup (npm) GHSA-v48m-xpmx-rf2x, MAL-2026-7439 | Malicious | Not scored | 07 Jul, 2026 | npm win-env-setup |
Malicious release: Malicious code in whaleco-assets-json (npm) GHSA-j2cq-rw7r-9fq7, MAL-2026-7438 | Malicious | Not scored | 07 Jul, 2026 | npm whaleco-assets-json |
Malicious release: Malicious code in web3-runtime-engine (npm) GHSA-6x52-8ggw-r388, MAL-2026-7437 | Malicious | Not scored | 07 Jul, 2026 | npm web3-runtime-engine |
Malicious release: Malicious code in wazirx-localtestnpm (npm) GHSA-3gqp-qc73-wv6c, MAL-2026-7436 | Malicious | Not scored | 07 Jul, 2026 | npm wazirx-localtestnpm |
Malicious release: Malicious code in wazir-xlocaletstnpm (npm) GHSA-64h9-56m7-9wmf, MAL-2026-7435 | Malicious | Not scored | 07 Jul, 2026 | npm wazir-xlocaletstnpm |
Malicious release: Malicious code in wallarm-design-system (npm) GHSA-9j5f-jhv8-w4f2, MAL-2026-7434 | Malicious | Not scored | 07 Jul, 2026 | npm wallarm-design-system |
Malicious release: Malicious code in vubiquity-website (npm) GHSA-wpjx-hcc6-99v4, MAL-2026-7433 | Malicious | Not scored | 07 Jul, 2026 | npm vubiquity-website |
Malicious release: Malicious code in vscode-component-explorer (npm) GHSA-vxrm-3gww-6q6x, MAL-2026-7432 | Malicious | Not scored | 07 Jul, 2026 | npm vscode-component-explorer |
Malicious release: Malicious code in vreactjs (npm) GHSA-2v6q-463p-h2xq, MAL-2026-7431 | Malicious | Not scored | 07 Jul, 2026 | npm vreactjs |
Malicious release: Malicious code in ureactjs (npm) GHSA-q947-v524-7rjh, MAL-2026-7430 | Malicious | Not scored | 07 Jul, 2026 | npm ureactjs |
Malicious release: Malicious code in treactjs (npm) GHSA-j688-85vh-w735, MAL-2026-7429 | Malicious | Not scored | 07 Jul, 2026 | npm treactjs |
Malicious release: Malicious code in timelycare (npm) GHSA-vvh3-mp5w-4828, MAL-2026-7428 | Malicious | Not scored | 07 Jul, 2026 | npm timelycare |
Malicious release: Malicious code in swiper-css-normalize (npm) GHSA-35pw-8mpv-x8gp, MAL-2026-7427 | Malicious | Not scored | 07 Jul, 2026 | npm swiper-css-normalize |
Malicious release: Malicious code in suit-base (npm) GHSA-jwvf-9258-r56f, MAL-2026-7426 | Malicious | Not scored | 07 Jul, 2026 | npm suit-base |
Malicious release: Malicious code in style-to-objact (npm) GHSA-jpj5-c2jv-8hr4, MAL-2026-7425 | Malicious | Not scored | 07 Jul, 2026 | npm style-to-objact |
Malicious release: Malicious code in strapi-plugin-pocvk (npm) GHSA-w8fm-qc28-f5gx, MAL-2026-7424 | Malicious | Not scored | 07 Jul, 2026 | npm strapi-plugin-pocvk |
Malicious release: Malicious code in stellar-stablecoin-scripts (npm) GHSA-jx2r-2xcc-f4gc, MAL-2026-7423 | Malicious | Not scored | 07 Jul, 2026 | npm stellar-stablecoin-scripts |
Malicious release: Malicious code in smtp-test-server-node (npm) GHSA-gwhq-rc9q-mcjv, MAL-2026-7422 | Malicious | Not scored | 07 Jul, 2026 | npm smtp-test-server-node |
Malicious release: Malicious code in sitefinitywebapp (npm) GHSA-9q7v-3vhc-h4fp, MAL-2026-7421 | Malicious | Not scored | 07 Jul, 2026 | npm sitefinitywebapp |
Malicious release: Malicious code in sim-apis-chatbot (npm) GHSA-x57q-mh65-jx6c, MAL-2026-7420 | Malicious | Not scored | 07 Jul, 2026 | npm sim-apis-chatbot |
Malicious release: Malicious code in shiphero-dashboard (npm) GHSA-7jrf-6w34-j726, MAL-2026-7419 | Malicious | Not scored | 07 Jul, 2026 | npm shiphero-dashboard |
Malicious release: Malicious code in serverless-twi-testing (npm) GHSA-88gp-cw68-g6q6, MAL-2026-7418 | Malicious | Not scored | 07 Jul, 2026 | npm serverless-twi-testing |
Malicious release: Malicious code in rzeactjs (npm) GHSA-9wmm-mrq8-pfrj, MAL-2026-7417 | Malicious | Not scored | 07 Jul, 2026 | npm rzeactjs |
Malicious release: Malicious code in ryeactjs (npm) GHSA-4rcc-rr6w-f6wc, MAL-2026-7416 | Malicious | Not scored | 07 Jul, 2026 | npm ryeactjs |
Malicious release: Malicious code in rxeactjs (npm) GHSA-gmwv-hr6q-w545, MAL-2026-7415 | Malicious | Not scored | 07 Jul, 2026 | npm rxeactjs |
Malicious release: Malicious code in rweactjs (npm) GHSA-crgw-9m6j-5qm7, MAL-2026-7414 | Malicious | Not scored | 07 Jul, 2026 | npm rweactjs |
Malicious release: Malicious code in rveactjs (npm) GHSA-rj3g-7w93-vhgj, MAL-2026-7413 | Malicious | Not scored | 07 Jul, 2026 | npm rveactjs |
Malicious release: Malicious code in rueactjs (npm) GHSA-9q4m-v573-9wrv, MAL-2026-7412 | Malicious | Not scored | 07 Jul, 2026 | npm rueactjs |
Malicious release: Malicious code in rseactjs (npm) GHSA-h5qw-9j96-j73f, MAL-2026-7410 | Malicious | Not scored | 07 Jul, 2026 | npm rseactjs |
Malicious release: Malicious code in rteactjs (npm) GHSA-wph9-pmmp-2v96, MAL-2026-7411 | Malicious | Not scored | 07 Jul, 2026 | npm rteactjs |
Malicious release: Malicious code in rqeactjs (npm) GHSA-3rh6-5wgx-2892, MAL-2026-7408 | Malicious | Not scored | 07 Jul, 2026 | npm rqeactjs |
Malicious release: Malicious code in rreactjs (npm) GHSA-q8q2-j4jx-ff9q, MAL-2026-7409 | Malicious | Not scored | 07 Jul, 2026 | npm rreactjs |
Malicious release: Malicious code in rpeactjs (npm) GHSA-h8gf-mpx8-5mhf, MAL-2026-7407 | Malicious | Not scored | 07 Jul, 2026 | npm rpeactjs |
Malicious release: Malicious code in roeactjs (npm) GHSA-g22v-944x-xxw4, MAL-2026-7406 | Malicious | Not scored | 07 Jul, 2026 | npm roeactjs |
Malicious release: Malicious code in roblox-lua-promise (npm) GHSA-jmj6-h36q-xf5g, MAL-2026-7405 | Malicious | Not scored | 07 Jul, 2026 | npm roblox-lua-promise |
Malicious release: Malicious code in rngularjs (npm) GHSA-rf5g-jh85-335h, MAL-2026-7404 | Malicious | Not scored | 07 Jul, 2026 | npm rngularjs |
Malicious release: Malicious code in rn-bitu-user (npm) GHSA-cmfg-q299-348f, MAL-2026-7402 | Malicious | Not scored | 07 Jul, 2026 | npm rn-bitu-user |
Malicious release: Malicious code in rneactjs (npm) GHSA-rmq5-48rq-m797, MAL-2026-7403 | Malicious | Not scored | 07 Jul, 2026 | npm rneactjs |
Malicious release: Malicious code in rleactjs (npm) GHSA-67vw-7jhx-5cv4, MAL-2026-7399 | Malicious | Not scored | 07 Jul, 2026 | npm rleactjs |
Malicious release: Malicious code in rn-bitu (npm) GHSA-mgpg-gh7c-784p, MAL-2026-7401 | Malicious | Not scored | 07 Jul, 2026 | npm rn-bitu |
Malicious release: Malicious code in rmeactjs (npm) GHSA-qw2g-f6gh-7p9g, MAL-2026-7400 | Malicious | Not scored | 07 Jul, 2026 | npm rmeactjs |
Malicious release: Malicious code in rkeactjs (npm) GHSA-36vj-mhxw-qm6p, MAL-2026-7398 | Malicious | Not scored | 07 Jul, 2026 | npm rkeactjs |
Malicious release: Malicious code in rjeactjs (npm) GHSA-rm2v-hhpx-hvg3, MAL-2026-7397 | Malicious | Not scored | 07 Jul, 2026 | npm rjeactjs |
Malicious release: Malicious code in rheactjs (npm) GHSA-5g5h-q9cw-gm2p, MAL-2026-7395 | Malicious | Not scored | 07 Jul, 2026 | npm rheactjs |
Malicious release: Malicious code in rieactjs (npm) GHSA-7cpp-263x-4mcc, MAL-2026-7396 | Malicious | Not scored | 07 Jul, 2026 | npm rieactjs |
Malicious release: Malicious code in rgeactjs (npm) GHSA-7hhx-2xg4-h392, MAL-2026-7394 | Malicious | Not scored | 07 Jul, 2026 | npm rgeactjs |
Malicious release: Malicious code in rezactjs (npm) GHSA-f894-wx86-v563, MAL-2026-7392 | Malicious | Not scored | 07 Jul, 2026 | npm rezactjs |