Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in hjs-lint-builders (npm) GHSA-q5hg-f596-vmc7, MAL-2026-6839 | Malicious | Not scored | 06 Jul, 2026 | npm hjs-lint-builders |
Malicious release: Malicious code in express-guardrail (npm) GHSA-62qq-cf7w-23hx, MAL-2026-6821 | Malicious | Not scored | 06 Jul, 2026 | npm express-guardrail |
Malicious release: Malicious code in grid-settings-align (npm) GHSA-83fv-8xwv-vc39, MAL-2026-6824 | Malicious | Not scored | 06 Jul, 2026 | npm grid-settings-align |
Malicious release: Malicious code in fastnodemailer (npm) GHSA-9w84-x6cf-c2vq, MAL-2026-6822 | Malicious | Not scored | 06 Jul, 2026 | npm fastnodemailer |
Malicious release: Malicious code in graphpilot (npm) GHSA-whwc-xphc-9237, MAL-2026-6823 | Malicious | Not scored | 06 Jul, 2026 | npm graphpilot |
Malicious release: Malicious code in env-axios (npm) GHSA-jm6w-g7wc-hq29, MAL-2026-6818 | Malicious | Not scored | 06 Jul, 2026 | npm env-axios |
Malicious release: Malicious code in elevate-log (npm) GHSA-79rp-3jfj-qmwv, MAL-2026-6815 | Malicious | Not scored | 06 Jul, 2026 | npm elevate-log |
Malicious release: Malicious code in express-dotenv (npm) GHSA-f463-5xm8-8r3r, MAL-2026-6820 | Malicious | Not scored | 06 Jul, 2026 | npm express-dotenv |
Malicious release: Malicious code in custom-log-viewer (npm) GHSA-55vw-c9x7-q7fh, MAL-2026-6813 | Malicious | Not scored | 06 Jul, 2026 | npm custom-log-viewer |
Malicious release: Malicious code in es-lint-builders (npm) GHSA-qw6m-j4m4-cqcg, MAL-2026-6819 | Malicious | Not scored | 06 Jul, 2026 | npm es-lint-builders |
Malicious release: Malicious code in emojiprint-prettier (npm) GHSA-8hhq-mc35-6xjv, MAL-2026-6817 | Malicious | Not scored | 06 Jul, 2026 | npm emojiprint-prettier |
Malicious release: Malicious code in bootstrap-utils (npm) GHSA-jgjc-8w9g-8wmq, MAL-2026-6807 | Malicious | Not scored | 06 Jul, 2026 | npm bootstrap-utils |
Malicious release: Malicious code in emojiprint-logger (npm) GHSA-8hx2-v9q6-66vf, MAL-2026-6816 | Malicious | Not scored | 06 Jul, 2026 | npm emojiprint-logger |
Malicious release: Malicious code in devkit-scripts (npm) GHSA-r39w-2c8m-qcw8, MAL-2026-6814 | Malicious | Not scored | 06 Jul, 2026 | npm devkit-scripts |
Malicious release: Malicious code in chain-await-test (npm) GHSA-qvfh-cwr9-576c, MAL-2026-6808 | Malicious | Not scored | 06 Jul, 2026 | npm chain-await-test |
Malicious release: Malicious code in cookie-ease (npm) GHSA-prqq-9q57-x2pq, MAL-2026-6812 | Malicious | Not scored | 06 Jul, 2026 | npm cookie-ease |
Malicious release: Malicious code in chalks-logger (npm) GHSA-vc46-r5xf-fw6g, MAL-2026-6811 | Malicious | Not scored | 06 Jul, 2026 | npm chalks-logger |
Malicious release: Malicious code in chalk-logger-prettier (npm) GHSA-5qw7-4jj7-j7vf, MAL-2026-6809 | Malicious | Not scored | 06 Jul, 2026 | npm chalk-logger-prettier |
Malicious release: Malicious code in chalk-prettier (npm) GHSA-29vc-mxj2-mvrg, MAL-2026-6810 | Malicious | Not scored | 06 Jul, 2026 | npm chalk-prettier |
Malicious release: Malicious code in bn-eslint.js (npm) GHSA-r34w-457x-jvh6, MAL-2026-6805 | Malicious | Not scored | 06 Jul, 2026 | npm bn-eslint.js |
Malicious release: Malicious code in bigint.os (npm) GHSA-p7gp-vr2w-gxcq, MAL-2026-6804 | Malicious | Not scored | 06 Jul, 2026 | npm bigint.os |
Malicious release: Malicious code in bn-math (npm) GHSA-mwmc-95gf-x6p2, MAL-2026-6806 | Malicious | Not scored | 06 Jul, 2026 | npm bn-math |
Malicious release: Malicious code in big256-ts (npm) GHSA-3w5h-8px3-5vhp, MAL-2026-6803 | Malicious | Not scored | 06 Jul, 2026 | npm big256-ts |
Malicious release: Malicious code in big-numerator (npm) GHSA-72c2-45g2-2948, MAL-2026-6802 | Malicious | Not scored | 06 Jul, 2026 | npm big-numerator |
Malicious release: Malicious code in big-numer (npm) GHSA-j5jp-xc7m-26vm, MAL-2026-6800 | Malicious | Not scored | 06 Jul, 2026 | npm big-numer |
Malicious release: Malicious code in big-numerate (npm) GHSA-wv8c-r64j-wqqm, MAL-2026-6801 | Malicious | Not scored | 06 Jul, 2026 | npm big-numerate |
Malicious release: Malicious code in argonflux (npm) GHSA-5x7q-hcgw-g7x2, MAL-2026-6798 | Malicious | Not scored | 06 Jul, 2026 | npm argonflux |
Malicious release: Malicious code in awesome-cli-logger (npm) GHSA-4j38-wfq5-cfxw, MAL-2026-6799 | Malicious | Not scored | 06 Jul, 2026 | npm awesome-cli-logger |
Malicious release: Malicious code in rollup-plugin-polyfill-handler (npm) GHSA-h89m-q7rj-4hxm, MAL-2026-6826 | Malicious | Not scored | 06 Jul, 2026 | npm rollup-plugin-polyfill-handler |
Malicious release: Malicious code in react-next-dom (npm) GHSA-99rj-fjph-w44m, MAL-2026-6825 | Malicious | Not scored | 06 Jul, 2026 | npm react-next-dom |
Malicious release: Malicious code in mongoose-lean-hooks (npm) GHSA-98h3-p825-wwhh, MAL-2026-6797 | Malicious | Not scored | 06 Jul, 2026 | npm mongoose-lean-hooks |
Malicious release: Malicious code in internallib_v234 (npm) MAL-2026-6796 | Malicious | Not scored | 06 Jul, 2026 | npm internallib_v234 |
Malicious release: Malicious code in neon-terminal (npm) MAL-2026-6793 | Malicious | Not scored | 06 Jul, 2026 | npm neon-terminal |
Malicious release: Malicious code in zod-pino434 (npm) GHSA-p9vh-jrw3-gv43, MAL-2026-6794 | Malicious | Not scored | 06 Jul, 2026 | npm zod-pino434 |
Malicious release: Malicious code in zod-pino444 (npm) GHSA-74m6-53cg-5gp3, MAL-2026-6795 | Malicious | Not scored | 06 Jul, 2026 | npm zod-pino444 |
Malicious release: Malicious code in @idms-corp/auth-ui (npm) GHSA-33w2-g8q6-86xm, MAL-2026-10224 | Malicious | Not scored | 06 Jul, 2026 | npm @idms-corp/auth-ui |
Malicious release: Malicious code in pinokio-redis (npm) GHSA-3gfp-7x5j-mp63, MAL-2026-6938 | Malicious | Not scored | 06 Jul, 2026 | npm pinokio-redis |
Malicious release: Malicious code in sams-sr-sdk-h5 (npm) GHSA-3r2r-29px-gqp6, MAL-2026-10233 | Malicious | Not scored | 06 Jul, 2026 | npm sams-sr-sdk-h5 |
Malicious release: Malicious code in @flex-ng/filter-pipe (npm) GHSA-4wmg-pwv3-88v4, MAL-2026-10222 | Malicious | Not scored | 06 Jul, 2026 | npm @flex-ng/filter-pipe |
Malicious release: Malicious code in @flex-ng/header-component (npm) GHSA-4xgj-9m4q-8g8v, MAL-2026-10223 | Malicious | Not scored | 06 Jul, 2026 | npm @flex-ng/header-component |
Malicious release: Malicious code in tme-error (npm) GHSA-89rr-3jxw-7hhm, MAL-2026-10235 | Malicious | Not scored | 06 Jul, 2026 | npm tme-error |
Malicious release: Malicious code in enbd-react-lib (npm) GHSA-8g7r-j4vg-8w9q, MAL-2026-10230 | Malicious | Not scored | 06 Jul, 2026 | npm enbd-react-lib |
Malicious release: Malicious code in enbd-react-logger (npm) GHSA-96hr-p56w-4x2m, MAL-2026-10231 | Malicious | Not scored | 06 Jul, 2026 | npm enbd-react-logger |
Malicious release: Malicious code in box-react-uix (npm) GHSA-f4fv-qwcg-667v, MAL-2026-10227 | Malicious | Not scored | 06 Jul, 2026 | npm box-react-uix |
Malicious release: Malicious code in tme-xca-react (npm) GHSA-fh7f-j6p7-m9h7, MAL-2026-10237 | Malicious | Not scored | 06 Jul, 2026 | npm tme-xca-react |
Malicious release: Malicious code in @logdna-web/shared (npm) GHSA-fhg5-c6x3-mx25, MAL-2026-10225 | Malicious | Not scored | 06 Jul, 2026 | npm @logdna-web/shared |
Malicious release: Malicious code in enbd-react-error-boundry (npm) GHSA-jffm-72cc-xcwv, MAL-2026-10229 | Malicious | Not scored | 06 Jul, 2026 | npm enbd-react-error-boundry |
Malicious release: Malicious code in @flex-ng/error-component (npm) GHSA-pw64-8rr7-9h66, MAL-2026-10221 | Malicious | Not scored | 06 Jul, 2026 | npm @flex-ng/error-component |
Malicious release: Malicious code in @logdna-web/styles (npm) GHSA-qcrg-93h5-r265, MAL-2026-10226 | Malicious | Not scored | 06 Jul, 2026 | npm @logdna-web/styles |
Malicious release: Malicious code in zredis-typed (npm) GHSA-rmhj-j5m8-3cxj, MAL-2026-6944 | Malicious | Not scored | 06 Jul, 2026 | npm zredis-typed |