Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in wcag-color-a11y-helpers (npm) MAL-2026-17530 | Malicious | Not scored | 26 days ago | npm wcag-color-a11y-helpers |
Malicious release: Malicious code in ultimate-websocket (npm) MAL-2026-17529 | Malicious | Not scored | 26 days ago | npm ultimate-websocket |
Malicious release: Malicious code in @bellaxchuu/crystalred (npm) GHSA-862w-53p5-jcpx, MAL-2026-17343 | Malicious | Not scored | 26 days ago | npm @bellaxchuu/crystalred |
Malicious release: Malicious code in @xatancchii/velycxbail (npm) MAL-2026-17383 | Malicious | Not scored | 26 days ago | npm @xatancchii/velycxbail |
Malicious release: Malicious code in saturn-baileys (npm) MAL-2026-17404 | Malicious | Not scored | 26 days ago | npm saturn-baileys |
Malicious release: Malicious code in shadowmd (npm) MAL-2026-17405 | Malicious | Not scored | 26 days ago | npm shadowmd |
Malicious release: Malicious code in @kibt/www-nuxt-i18n (npm) GHSA-2c7v-rmgw-3xrp, MAL-2026-17498 | Malicious | Not scored | 26 days ago | npm @kibt/www-nuxt-i18n |
Malicious release: Malicious code in @angulra/core (npm) MAL-2026-17496 | Malicious | Not scored | 26 days ago | npm @angulra/core |
Malicious release: Malicious code in @angulra/cli (npm) MAL-2026-17495 | Malicious | Not scored | 26 days ago | npm @angulra/cli |
Malicious release: Malicious code in botmaker-cli (npm) MAL-2026-17502 | Malicious | Not scored | 26 days ago | npm botmaker-cli |
Malicious release: Malicious code in chai-as-testmode (npm) MAL-2026-17473 | Malicious | Not scored | 26 days ago | npm chai-as-testmode |
Malicious release: Malicious code in css-scroll-state-polyfill (npm) MAL-2026-17486 | Malicious | Not scored | 26 days ago | npm css-scroll-state-polyfill |
Malicious release: Malicious code in css-snap-target-polyfill (npm) MAL-2026-17487 | Malicious | Not scored | 26 days ago | npm css-snap-target-polyfill |
Malicious release: Malicious code in css-starting-style-polyfill (npm) MAL-2026-17488 | Malicious | Not scored | 26 days ago | npm css-starting-style-polyfill |
Malicious release: Malicious code in core-js-gnz (npm) MAL-2026-17474 | Malicious | Not scored | 26 days ago | npm core-js-gnz |
Malicious release: Malicious code in css-reading-flow-polyfill (npm) MAL-2026-17483 | Malicious | Not scored | 26 days ago | npm css-reading-flow-polyfill |
Malicious release: Malicious code in css-scroll-anchor-polyfill (npm) MAL-2026-17485 | Malicious | Not scored | 26 days ago | npm css-scroll-anchor-polyfill |
Malicious release: Malicious code in css-light-dark-polyfill (npm) MAL-2026-17481 | Malicious | Not scored | 26 days ago | npm css-light-dark-polyfill |
Malicious release: Malicious code in css-interop-observer-polyfill (npm) MAL-2026-17480 | Malicious | Not scored | 26 days ago | npm css-interop-observer-polyfill |
Malicious release: Malicious code in css-relative-color-util (npm) MAL-2026-17484 | Malicious | Not scored | 26 days ago | npm css-relative-color-util |
Malicious release: Malicious code in css-logical-prop-shim (npm) MAL-2026-17482 | Malicious | Not scored | 26 days ago | npm css-logical-prop-shim |
Malicious release: Malicious code in css-field-sizing-polyfill (npm) MAL-2026-17478 | Malicious | Not scored | 26 days ago | npm css-field-sizing-polyfill |
Malicious release: Malicious code in css-env-function-shim (npm) MAL-2026-17477 | Malicious | Not scored | 26 days ago | npm css-env-function-shim |
Malicious release: Malicious code in css-gap-decorations-polyfill (npm) MAL-2026-17479 | Malicious | Not scored | 26 days ago | npm css-gap-decorations-polyfill |
Malicious release: Malicious code in css-anchor-pos-fallback (npm) MAL-2026-17476 | Malicious | Not scored | 26 days ago | npm css-anchor-pos-fallback |
Malicious release: Malicious code in css-a11y-contrast-utils (npm) MAL-2026-17475 | Malicious | Not scored | 26 days ago | npm css-a11y-contrast-utils |
Malicious release: Malicious code in focus-visible-polyfill-lite (npm) MAL-2026-17491 | Malicious | Not scored | 26 days ago | npm focus-visible-polyfill-lite |
Malicious release: Malicious code in virgil-cli (npm) MAL-2026-17630 | Malicious | Not scored | 27 days ago | npm virgil-cli |
Malicious release: Malicious code in @nagular/router (npm) MAL-2026-17500 | Malicious | Not scored | 28 days ago | npm @nagular/router |
Malicious release: Malicious code in @angularr/router (npm) MAL-2026-17494 | Malicious | Not scored | 28 days ago | npm @angularr/router |
Malicious release: Malicious code in @babell/core (npm) MAL-2026-17497 | Malicious | Not scored | 28 days ago | npm @babell/core |
Malicious release: Malicious code in @nagular/core (npm) MAL-2026-17499 | Malicious | Not scored | 28 days ago | npm @nagular/core |
Malicious release: Malicious code in @angularr/core (npm) MAL-2026-17493 | Malicious | Not scored | 28 days ago | npm @angularr/core |
Malicious release: Malicious code in @angularr/cli (npm) MAL-2026-17492 | Malicious | Not scored | 28 days ago | npm @angularr/cli |
Malicious release: Malicious code in express-enhanced (npm) MAL-2026-17489 | Malicious | Not scored | 28 days ago | npm express-enhanced |
Malicious release: Malicious code in express-fork (npm) MAL-2026-17490 | Malicious | Not scored | 28 days ago | npm express-fork |
Malicious release: Malicious code in ui.dist.min.js (npm) GHSA-325f-rjxf-3gm9, MAL-2026-17460 | Malicious | Not scored | 28 days ago | npm ui.dist.min.js |
Malicious release: Malicious code in translate-base-font (npm) GHSA-grv5-7wp6-vw6h, MAL-2026-17458 | Malicious | Not scored | 28 days ago | npm translate-base-font |
Malicious release: Malicious code in ui-base-colors (npm) GHSA-qgqx-3mhx-jwx3, MAL-2026-17459 | Malicious | Not scored | 28 days ago | npm ui-base-colors |
Malicious release: Malicious code in @smwebserver/static (npm) GHSA-qhx4-m546-6w2x, MAL-2026-17456 | Malicious | Not scored | 28 days ago | npm @smwebserver/static |
Malicious release: Malicious code in kartykgithub-ph-f (npm) GHSA-x2m2-w3gv-m5wg, MAL-2026-17426 | Malicious | Not scored | 29 days ago | npm kartykgithub-ph-f |
Malicious release: Malicious code in kartykgithub-ph-e (npm) GHSA-7hq7-x7ww-7cxr, MAL-2026-17425 | Malicious | Not scored | 29 days ago | npm kartykgithub-ph-e |
Malicious release: Malicious code in kartykgithub-ph-b (npm) GHSA-27m4-jjxc-69wf, MAL-2026-17424 | Malicious | Not scored | 29 days ago | npm kartykgithub-ph-b |
Malicious release: Malicious code in @erlanzz/baileys (npm) MAL-2026-17440 | Malicious | Not scored | 29 days ago | npm @erlanzz/baileys |
Malicious release: Malicious code in @smart-dev-wa/baileys (npm) MAL-2026-17442 | Malicious | Not scored | 29 days ago | npm @smart-dev-wa/baileys |
Malicious release: Malicious code in danz-bails (npm) MAL-2026-17444 | Malicious | Not scored | 29 days ago | npm danz-bails |
Malicious release: Malicious code in mikuhostt-baileys (npm) MAL-2026-17447 | Malicious | Not scored | 29 days ago | npm mikuhostt-baileys |
Malicious release: Malicious code in wailib (npm) MAL-2026-17451 | Malicious | Not scored | 29 days ago | npm wailib |
Malicious release: Malicious code in illusion-datalab (npm) GHSA-834w-x8gq-8rmx, MAL-2026-17423 | Malicious | Not scored | 29 days ago | npm illusion-datalab |
Malicious release: Malicious code in @kelvdra/baileys (npm) MAL-2026-17362 | Malicious | Not scored | 29 days ago | npm @kelvdra/baileys |