Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in syncora (npm) GHSA-2xgm-25c8-fggh, MAL-2026-6884 | Malicious | Not scored | 06 Jul, 2026 | npm syncora |
Malicious release: Malicious code in styled-text-logger (npm) GHSA-676w-w872-57p4, MAL-2026-6883 | Malicious | Not scored | 06 Jul, 2026 | npm styled-text-logger |
Malicious release: Malicious code in tailwind-scroller (npm) GHSA-x935-j33v-9678, MAL-2026-6887 | Malicious | Not scored | 06 Jul, 2026 | npm tailwind-scroller |
Malicious release: Malicious code in secure-box (npm) GHSA-q75v-v55m-r6v2, MAL-2026-6875 | Malicious | Not scored | 06 Jul, 2026 | npm secure-box |
Malicious release: Malicious code in st-bigintr (npm) GHSA-vvxr-vc6m-w98j, MAL-2026-6881 | Malicious | Not scored | 06 Jul, 2026 | npm st-bigintr |
Malicious release: Malicious code in sjs-builder (npm) GHSA-27jm-f99f-wqr4, MAL-2026-6876 | Malicious | Not scored | 06 Jul, 2026 | npm sjs-builder |
Malicious release: Malicious code in sjs-builders (npm) GHSA-55q4-68jc-wrgw, MAL-2026-6877 | Malicious | Not scored | 06 Jul, 2026 | npm sjs-builders |
Malicious release: Malicious code in router-kit (npm) GHSA-fgc2-8wjr-56hg, MAL-2026-6873 | Malicious | Not scored | 06 Jul, 2026 | npm router-kit |
Malicious release: Malicious code in safe-validate (npm) GHSA-xvj3-jjxg-v74h, MAL-2026-6874 | Malicious | Not scored | 06 Jul, 2026 | npm safe-validate |
Malicious release: Malicious code in react-svg-render (npm) GHSA-h2hr-f82c-f7h5, MAL-2026-6870 | Malicious | Not scored | 06 Jul, 2026 | npm react-svg-render |
Malicious release: Malicious code in react-native-template-my-starter (npm) GHSA-7p9r-785r-fg9p, MAL-2026-6869 | Malicious | Not scored | 06 Jul, 2026 | npm react-native-template-my-starter |
Malicious release: Malicious code in pretty-pino-logger (npm) GHSA-9vrr-rpr8-7hfj, MAL-2026-6867 | Malicious | Not scored | 06 Jul, 2026 | npm pretty-pino-logger |
Malicious release: Malicious code in pretty-pino-loggers (npm) GHSA-vhw2-mvjh-m4gr, MAL-2026-6868 | Malicious | Not scored | 06 Jul, 2026 | npm pretty-pino-loggers |
Malicious release: Malicious code in prettier-logger (npm) GHSA-6wq6-hvcw-xmcx, MAL-2026-6866 | Malicious | Not scored | 06 Jul, 2026 | npm prettier-logger |
Malicious release: Malicious code in polymarket-onchain-plugin (npm) GHSA-29mh-pwqh-6586, MAL-2026-6864 | Malicious | Not scored | 06 Jul, 2026 | npm polymarket-onchain-plugin |
Malicious release: Malicious code in pino-utils (npm) GHSA-jwwm-v6rr-f5cv, MAL-2026-6863 | Malicious | Not scored | 06 Jul, 2026 | npm pino-utils |
Malicious release: Malicious code in pino-pretty-logs (npm) GHSA-7cfh-3cj9-3fc3, MAL-2026-6862 | Malicious | Not scored | 06 Jul, 2026 | npm pino-pretty-logs |
Malicious release: Malicious code in polymarket-onchain-sdk (npm) GHSA-89w2-qgj2-9f2w, MAL-2026-6865 | Malicious | Not scored | 06 Jul, 2026 | npm polymarket-onchain-sdk |
Malicious release: Malicious code in picocolor-logger (npm) GHSA-jp9j-33xg-wvpq, MAL-2026-6861 | Malicious | Not scored | 06 Jul, 2026 | npm picocolor-logger |
Malicious release: Malicious code in peptideenv (npm) GHSA-x6qh-369w-8jhf, MAL-2026-6860 | Malicious | Not scored | 06 Jul, 2026 | npm peptideenv |
Malicious release: Malicious code in lint-builds (npm) GHSA-3cjq-q62g-3hf2, MAL-2026-6843 | Malicious | Not scored | 06 Jul, 2026 | npm lint-builds |
Malicious release: Malicious code in older_morgan (npm) GHSA-3h54-5c65-vwjj, MAL-2026-6859 | Malicious | Not scored | 06 Jul, 2026 | npm older_morgan |
Malicious release: Malicious code in npm-eslint-helper (npm) GHSA-74p5-mhgm-r8hr, MAL-2026-6858 | Malicious | Not scored | 06 Jul, 2026 | npm npm-eslint-helper |
Malicious release: Malicious code in npm-doc-dev (npm) GHSA-m89x-q3jv-q5q2, MAL-2026-6857 | Malicious | Not scored | 06 Jul, 2026 | npm npm-doc-dev |
Malicious release: Malicious code in node-env-detector (npm) GHSA-q48r-9hm8-j2j5, MAL-2026-6856 | Malicious | Not scored | 06 Jul, 2026 | npm node-env-detector |
Malicious release: Malicious code in df-vision (npm) GHSA-wvvx-jr39-8g7j, MAL-2026-6834 | Malicious | Not scored | 06 Jul, 2026 | npm df-vision |
Malicious release: Malicious code in debug-glitzs (npm) GHSA-f862-62jq-qjhx, MAL-2026-6833 | Malicious | Not scored | 06 Jul, 2026 | npm debug-glitzs |
Malicious release: Malicious code in next-bignumber.js (npm) GHSA-8vr6-7cjp-qgrj, MAL-2026-6855 | Malicious | Not scored | 06 Jul, 2026 | npm next-bignumber.js |
Malicious release: Malicious code in color-logger-console (npm) GHSA-f8q4-69r9-2qv9, MAL-2026-6831 | Malicious | Not scored | 06 Jul, 2026 | npm color-logger-console |
Malicious release: Malicious code in lint-null (npm) GHSA-vp9h-qwwx-q9rx, MAL-2026-6846 | Malicious | Not scored | 06 Jul, 2026 | npm lint-null |
Malicious release: Malicious code in linter-entry (npm) GHSA-wf2v-82jg-mw7v, MAL-2026-6847 | Malicious | Not scored | 06 Jul, 2026 | npm linter-entry |
Malicious release: Malicious code in modulyn (npm) GHSA-465x-gj74-mw3m, MAL-2026-6854 | Malicious | Not scored | 06 Jul, 2026 | npm modulyn |
Malicious release: Malicious code in chalki-pretty (npm) GHSA-7fqr-fv9q-43p6, MAL-2026-6829 | Malicious | Not scored | 06 Jul, 2026 | npm chalki-pretty |
Malicious release: Malicious code in metrica-node (npm) GHSA-9qp6-pr3p-mm88, MAL-2026-6852 | Malicious | Not scored | 06 Jul, 2026 | npm metrica-node |
Malicious release: Malicious code in chalk-pro-logger (npm) GHSA-h8jx-qfr4-5q9r, MAL-2026-6828 | Malicious | Not scored | 06 Jul, 2026 | npm chalk-pro-logger |
Malicious release: Malicious code in js-unimode (npm) GHSA-q6h9-xqgf-q8rp, MAL-2026-6840 | Malicious | Not scored | 06 Jul, 2026 | npm js-unimode |
Malicious release: Malicious code in chai-guard (npm) GHSA-29vw-5q5r-8jpw, MAL-2026-6827 | Malicious | Not scored | 06 Jul, 2026 | npm chai-guard |
Malicious release: Malicious code in hjs-biginteger (npm) GHSA-375r-m6vq-m5qp, MAL-2026-6838 | Malicious | Not scored | 06 Jul, 2026 | npm hjs-biginteger |
Malicious release: Malicious code in mjs-biginteger (npm) GHSA-798w-xm3v-cfx3, MAL-2026-6853 | Malicious | Not scored | 06 Jul, 2026 | npm mjs-biginteger |
Malicious release: Malicious code in log-format-thread (npm) GHSA-fw7h-6mmw-4jjr, MAL-2026-6848 | Malicious | Not scored | 06 Jul, 2026 | npm log-format-thread |
Malicious release: Malicious code in logger-beauty (npm) GHSA-x3x7-mgj2-qg5x, MAL-2026-6850 | Malicious | Not scored | 06 Jul, 2026 | npm logger-beauty |
Malicious release: Malicious code in log-upgrade (npm) GHSA-xf9v-w8wv-g9r4, MAL-2026-6849 | Malicious | Not scored | 06 Jul, 2026 | npm log-upgrade |
Malicious release: Malicious code in metrica-chain (npm) GHSA-xwqp-v7wh-px47, MAL-2026-6851 | Malicious | Not scored | 06 Jul, 2026 | npm metrica-chain |
Malicious release: Malicious code in lint-builders (npm) GHSA-pgr4-r9gw-w9wm, MAL-2026-6842 | Malicious | Not scored | 06 Jul, 2026 | npm lint-builders |
Malicious release: Malicious code in lint-nule (npm) GHSA-2mww-6x37-53g4, MAL-2026-6844 | Malicious | Not scored | 06 Jul, 2026 | npm lint-nule |
Malicious release: Malicious code in lint-nuler (npm) GHSA-g4mq-hwwp-q536, MAL-2026-6845 | Malicious | Not scored | 06 Jul, 2026 | npm lint-nuler |
Malicious release: Malicious code in eth-tick (npm) GHSA-cqqh-cj4r-mwfr, MAL-2026-6837 | Malicious | Not scored | 06 Jul, 2026 | npm eth-tick |
Malicious release: Malicious code in eslint-vite (npm) GHSA-mhv7-p7g8-cwpj, MAL-2026-6836 | Malicious | Not scored | 06 Jul, 2026 | npm eslint-vite |
Malicious release: Malicious code in es-lint-entry (npm) GHSA-pxpm-6pvw-32fv, MAL-2026-6835 | Malicious | Not scored | 06 Jul, 2026 | npm es-lint-entry |
Malicious release: Malicious code in jsonupper (npm) GHSA-7g6j-h5h4-7wjx, MAL-2026-6841 | Malicious | Not scored | 06 Jul, 2026 | npm jsonupper |