Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @public-for-cdao/core (npm) GHSA-gpx4-hq9v-733f, MAL-2026-10885 | Malicious | Not scored | 20 Jul, 2026 | npm @public-for-cdao/core |
Malicious release: Malicious code in @public-for-cdao/contracts (npm) GHSA-52h2-99jg-wx2p, MAL-2026-10884 | Malicious | Not scored | 20 Jul, 2026 | npm @public-for-cdao/contracts |
Malicious release: Malicious code in @public-for-cdao/bot (npm) GHSA-j5xp-rxh2-qg93, MAL-2026-10883 | Malicious | Not scored | 20 Jul, 2026 | npm @public-for-cdao/bot |
Malicious release: Malicious code in @public-for-cdao/backend (npm) GHSA-rx7h-q78h-96wv, MAL-2026-10882 | Malicious | Not scored | 20 Jul, 2026 | npm @public-for-cdao/backend |
Malicious release: Malicious code in @irys-solutions/odesa-main (npm) GHSA-hmhf-84x5-f526, MAL-2026-10881 | Malicious | Not scored | 20 Jul, 2026 | npm @irys-solutions/odesa-main |
Malicious release: Malicious code in @examplecorptest/hearsay-design-system-test (npm) GHSA-mpfh-v62h-hrhr, MAL-2026-10880 | Malicious | Not scored | 20 Jul, 2026 | npm @examplecorptest/hearsay-design-system-test |
Malicious release: Malicious code in @dxcl/user-js (npm) GHSA-vwf5-f55j-6283, MAL-2026-10879 | Malicious | Not scored | 20 Jul, 2026 | npm @dxcl/user-js |
Malicious release: Malicious code in @dxcl/transaction-js (npm) GHSA-wggq-6jpc-5jgf, MAL-2026-10878 | Malicious | Not scored | 20 Jul, 2026 | npm @dxcl/transaction-js |
Malicious release: Malicious code in @dxcl/log-function-js (npm) GHSA-gxw9-g46h-59h7, MAL-2026-10877 | Malicious | Not scored | 20 Jul, 2026 | npm @dxcl/log-function-js |
Malicious release: Malicious code in @dxcl/indicators-js (npm) GHSA-wv96-w2hg-89qf, MAL-2026-10876 | Malicious | Not scored | 20 Jul, 2026 | npm @dxcl/indicators-js |
Malicious release: Malicious code in @dxcl/http-common-js (npm) GHSA-gpxg-288p-43q8, MAL-2026-10875 | Malicious | Not scored | 20 Jul, 2026 | npm @dxcl/http-common-js |
Malicious release: Malicious code in @dxcl/fund-js (npm) GHSA-59xj-f6hq-vqj4, MAL-2026-10874 | Malicious | Not scored | 20 Jul, 2026 | npm @dxcl/fund-js |
Malicious release: Malicious code in @dxcl/customer-js (npm) GHSA-cmfg-6q35-wxxm, MAL-2026-10873 | Malicious | Not scored | 20 Jul, 2026 | npm @dxcl/customer-js |
Malicious release: Malicious code in @dxcl/account-js (npm) GHSA-4w3c-4vm4-mrmm, MAL-2026-10872 | Malicious | Not scored | 20 Jul, 2026 | npm @dxcl/account-js |
Malicious release: Malicious code in @azure-lab-services/ml-ts (npm) GHSA-q87h-8g7w-5938, MAL-2026-10871 | Malicious | Not scored | 20 Jul, 2026 | npm @azure-lab-services/ml-ts |
Malicious release: Malicious code in @atlaskit-internal_.smart-card/hover-card (npm) GHSA-pv57-7m7r-2r69, MAL-2026-10870 | Malicious | Not scored | 20 Jul, 2026 | npm @atlaskit-internal_.smart-card/hover-card |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-copyleft-next-0-3-1 (npm) GHSA-2gc4-3jrf-539r, MAL-2026-10815 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-copyleft-next-0-3-1 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-typosquat-lodash (npm) GHSA-2wfp-mw9m-3c6x, MAL-2026-10856 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-typosquat-lodash |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-malware-install-execution (npm) GHSA-3m93-ccj9-w63p, MAL-2026-10836 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-malware-install-execution |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-malware-code-obfuscation (npm) GHSA-4ch4-g9wf-fg55, MAL-2026-10833 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-malware-code-obfuscation |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-typosquat-webpack (npm) GHSA-4wcr-8537-v2ww, MAL-2026-10859 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-typosquat-webpack |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-typosquat-chalk (npm) GHSA-576v-8wcx-4p4q, MAL-2026-10853 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-typosquat-chalk |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-malware-cryptomining-indicators (npm) GHSA-6rh6-pc5p-4j88, MAL-2026-10835 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-malware-cryptomining-indicators |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-sspl-1-0 (npm) GHSA-7fmj-6v2f-m56v, MAL-2026-10849 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-sspl-1-0 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-typosquat-axios (npm) GHSA-7j2p-8vwj-g565, MAL-2026-10852 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-typosquat-axios |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-wxwindows (npm) GHSA-7qjp-cprm-mcp6, MAL-2026-10862 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-wxwindows |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-malware-credential-harvesting (npm) GHSA-89jh-h47r-j47w, MAL-2026-10834 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-malware-credential-harvesting |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-typosquat-moment (npm) GHSA-9mx2-4mpm-2r3j, MAL-2026-10857 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-typosquat-moment |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-sendmail-8-23 (npm) GHSA-9x3r-xqjc-rf4m, MAL-2026-10847 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-sendmail-8-23 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-tpl-1-0 (npm) GHSA-c342-xf26-r5wc, MAL-2026-10851 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-tpl-1-0 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-ncgl-uk-2-0 (npm) GHSA-cx55-w99m-rcx9, MAL-2026-10841 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-ncgl-uk-2-0 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-malware-network-indicators (npm) GHSA-fcqp-56vj-9g8m, MAL-2026-10837 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-malware-network-indicators |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-ucl-1-0 (npm) GHSA-fh2p-2rm7-q273, MAL-2026-10860 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-ucl-1-0 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-unlicense (npm) GHSA-ghmj-68m9-xmgq, MAL-2026-10861 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-unlicense |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-copyleft-next-0-3-0 (npm) GHSA-h79m-rf9m-2rw3, MAL-2026-10814 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-copyleft-next-0-3-0 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-ecos-2-0 (npm) GHSA-jhf4-7xww-5wr4, MAL-2026-10817 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-ecos-2-0 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-mpl-1-1 (npm) GHSA-jq98-3cqm-6m69, MAL-2026-10838 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-mpl-1-1 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-qpl-1-0-inria-2004 (npm) GHSA-mvwx-9jqh-5qhf, MAL-2026-10846 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-qpl-1-0-inria-2004 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-osl-3-0 (npm) GHSA-p5pm-xhx8-3gq6, MAL-2026-10843 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-osl-3-0 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-mpl-2-0 (npm) GHSA-pgj9-qg38-66qm, MAL-2026-10839 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-mpl-2-0 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-polyform-small-business-1-0-0 (npm) GHSA-pj22-8328-xx6m, MAL-2026-10845 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-polyform-small-business-1-0-0 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-ms-lpl (npm) GHSA-pwfp-vhxq-7g8f, MAL-2026-10840 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-ms-lpl |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-polyform-noncommercial-1-0-0 (npm) GHSA-q9m9-5h2w-6fqv, MAL-2026-10844 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-polyform-noncommercial-1-0-0 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-typosquat-commander (npm) GHSA-qpvx-cv58-6gq8, MAL-2026-10854 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-typosquat-commander |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-tapr-ohl-1-0 (npm) GHSA-qrhx-w63c-43gx, MAL-2026-10850 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-tapr-ohl-1-0 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-simpl-2-0 (npm) GHSA-r8xp-4267-6m36, MAL-2026-10848 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-simpl-2-0 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-typosquat-react (npm) GHSA-rf94-jqj5-mxj3, MAL-2026-10858 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-typosquat-react |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-typosquat-express (npm) GHSA-rhf7-542w-5vqq, MAL-2026-10855 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-typosquat-express |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-openpbs-2-3 (npm) GHSA-rhgp-gf2p-j7r3, MAL-2026-10842 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-openpbs-2-3 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-malware-c2-beacon (npm) GHSA-vmcc-vqgj-wh6c, MAL-2026-10832 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-malware-c2-beacon |