Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in router-processor (npm) MAL-2026-10453 | Malicious | Not scored | 13 Jul, 2026 | npm router-processor |
Malicious release: Malicious code in font-hub (npm) MAL-2026-10450 | Malicious | Not scored | 13 Jul, 2026 | npm font-hub |
Malicious release: Malicious code in @sqlite-group/schema-generator (npm) GHSA-cf6c-6x68-cf8r, MAL-2026-10448 | Malicious | Not scored | 13 Jul, 2026 | npm @sqlite-group/schema-generator |
Malicious release: Malicious code in gifuct (npm) GHSA-829c-v26f-5g9m, MAL-2026-10451 | Malicious | Not scored | 13 Jul, 2026 | npm gifuct |
Malicious release: Malicious code in auth-gen-next (npm) MAL-2026-10449 | Malicious | Not scored | 13 Jul, 2026 | npm auth-gen-next |
Malicious release: Malicious code in markdown-editable-table (npm) GHSA-jf3r-qgv3-frvm, MAL-2026-10452 | Malicious | Not scored | 13 Jul, 2026 | npm markdown-editable-table |
Malicious release: Malicious code in @oliviamcdaniel12/safer-buffer (npm) GHSA-88h2-qq8c-r5pv, MAL-2026-10442 | Malicious | Not scored | 13 Jul, 2026 | npm @oliviamcdaniel12/safer-buffer |
Malicious release: Malicious code in react-markable-table (npm) GHSA-37wc-pv88-9vwq, MAL-2026-10446 | Malicious | Not scored | 13 Jul, 2026 | npm react-markable-table |
Malicious release: Malicious code in remarkable-table (npm) GHSA-pw78-w6gv-hfcr, MAL-2026-10447 | Malicious | Not scored | 13 Jul, 2026 | npm remarkable-table |
Malicious release: Malicious code in markable-table (npm) GHSA-qc34-pqm6-35rf, MAL-2026-10444 | Malicious | Not scored | 13 Jul, 2026 | npm markable-table |
Malicious release: Malicious code in home-sections-web-ui (npm) GHSA-343f-5692-gj8q, MAL-2026-10443 | Malicious | Not scored | 13 Jul, 2026 | npm home-sections-web-ui |
Malicious release: Malicious code in node-procmetrics (npm) MAL-2026-10445 | Malicious | Not scored | 13 Jul, 2026 | npm node-procmetrics |
Malicious release: Malicious code in fetchcraft (npm) GHSA-fg76-g9g4-9xpr, MAL-2026-10435 | Malicious | Not scored | 13 Jul, 2026 | npm fetchcraft |
Malicious release: Malicious code in netspeedutil (npm) MAL-2026-10438 | Malicious | Not scored | 13 Jul, 2026 | npm netspeedutil |
Malicious release: Malicious code in jest-formatter (npm) MAL-2026-10436 | Malicious | Not scored | 13 Jul, 2026 | npm jest-formatter |
Malicious release: Malicious code in env-fast (npm) MAL-2026-10434 | Malicious | Not scored | 13 Jul, 2026 | npm env-fast |
Malicious release: Malicious code in @tailwind-ts/eslint-plugin (npm) GHSA-26mx-f526-39mh, MAL-2026-10431 | Malicious | Not scored | 13 Jul, 2026 | npm @tailwind-ts/eslint-plugin |
Malicious release: Malicious code in type-context (npm) GHSA-rw86-h32r-9xf5, MAL-2026-10440 | Malicious | Not scored | 13 Jul, 2026 | npm type-context |
Malicious release: Malicious code in react-hot-svg (npm) GHSA-46cj-57m5-r4wc, MAL-2026-10439 | Malicious | Not scored | 13 Jul, 2026 | npm react-hot-svg |
Malicious release: Malicious code in chain-guardian (npm) MAL-2026-10433 | Malicious | Not scored | 13 Jul, 2026 | npm chain-guardian |
Malicious release: Malicious code in animated-css-kit (npm) GHSA-q9x5-95j3-g76v, MAL-2026-10432 | Malicious | Not scored | 13 Jul, 2026 | npm animated-css-kit |
Malicious release: Malicious code in jsonfb (npm) GHSA-86qc-ppwg-mgcj, MAL-2026-10437 | Malicious | Not scored | 13 Jul, 2026 | npm jsonfb |
Malicious release: Malicious code in @nsub/nitxe (npm) GHSA-54gp-rw59-mwf2, MAL-2026-10429 | Malicious | Not scored | 13 Jul, 2026 | npm @nsub/nitxe |
Malicious release: Malicious code in prettier-plugin-base (npm) GHSA-8mq9-26pc-p36f, MAL-2026-10430 | Malicious | Not scored | 13 Jul, 2026 | npm prettier-plugin-base |
Malicious release: Malicious code in sysb1 (npm) MAL-2026-10428 | Malicious | Not scored | 13 Jul, 2026 | npm sysb1 |
Malicious release: Malicious code in svg-fetcher (npm) GHSA-36vw-78q8-pj2r, MAL-2026-10427 | Malicious | Not scored | 13 Jul, 2026 | npm svg-fetcher |
Malicious release: Malicious code in chai-log (npm) GHSA-2534-xr99-f4wh, MAL-2026-10426 | Malicious | Not scored | 13 Jul, 2026 | npm chai-log |
Malicious release: Malicious code in @ica-gaming/slot-engine (npm) MAL-2026-10404 | Malicious | Not scored | 13 Jul, 2026 | npm @ica-gaming/slot-engine |
Malicious release: Malicious code in frontend-regulations (npm) GHSA-hf3r-x49q-fxm2, MAL-2026-10415 | Malicious | Not scored | 13 Jul, 2026 | npm frontend-regulations |
Malicious release: Malicious code in notifications-broadcast (npm) GHSA-hh3x-6gh6-rhxf, MAL-2026-10419 | Malicious | Not scored | 13 Jul, 2026 | npm notifications-broadcast |
Malicious release: Malicious code in portway (npm) GHSA-j5q6-x29x-2v5x, MAL-2026-10421 | Malicious | Not scored | 13 Jul, 2026 | npm portway |
Malicious release: Malicious code in sso-users-detection (npm) GHSA-x9p4-637q-6wjw, MAL-2026-10422 | Malicious | Not scored | 13 Jul, 2026 | npm sso-users-detection |
Malicious release: Malicious code in path-addon-extend (npm) GHSA-8535-q23c-9jr2, MAL-2026-10420 | Malicious | Not scored | 13 Jul, 2026 | npm path-addon-extend |
Malicious release: Malicious code in cold-debug-elevator (npm) GHSA-w47c-q2p5-gq33, MAL-2026-10409 | Malicious | Not scored | 13 Jul, 2026 | npm cold-debug-elevator |
Malicious release: Malicious code in supertokens-web (npm) GHSA-m7xr-6cvv-jm79, MAL-2026-10423 | Malicious | Not scored | 13 Jul, 2026 | npm supertokens-web |
Malicious release: Malicious code in env-stream (npm) MAL-2026-10412 | Malicious | Not scored | 13 Jul, 2026 | npm env-stream |
Malicious release: Malicious code in express-request-engine (npm) GHSA-684q-384r-cr7r, MAL-2026-10414 | Malicious | Not scored | 13 Jul, 2026 | npm express-request-engine |
Malicious release: Malicious code in trinity-scheme (npm) MAL-2026-10425 | Malicious | Not scored | 13 Jul, 2026 | npm trinity-scheme |
Malicious release: Malicious code in minigptcore (npm) MAL-2026-10417 | Malicious | Not scored | 13 Jul, 2026 | npm minigptcore |
Malicious release: Malicious code in @torbeck/heap (npm) GHSA-8vr7-5wqc-fjwv, MAL-2026-10405 | Malicious | Not scored | 13 Jul, 2026 | npm @torbeck/heap |
Malicious release: Malicious code in eth-base (npm) GHSA-26h4-2435-hp66, MAL-2026-10413 | Malicious | Not scored | 13 Jul, 2026 | npm eth-base |
Malicious release: Malicious code in terminal-mascot (npm) GHSA-g2cj-hj2c-phvf, MAL-2026-10424 | Malicious | Not scored | 13 Jul, 2026 | npm terminal-mascot |
Malicious release: Malicious code in awesome-terminal (npm) GHSA-cv56-pvc8-j5rg, MAL-2026-10407 | Malicious | Not scored | 13 Jul, 2026 | npm awesome-terminal |
Malicious release: Malicious code in async-chain-dom (npm) MAL-2026-10406 | Malicious | Not scored | 13 Jul, 2026 | npm async-chain-dom |
Malicious release: Malicious code in chain-js-utils (npm) MAL-2026-10408 | Malicious | Not scored | 13 Jul, 2026 | npm chain-js-utils |
Malicious release: Malicious code in note-utilities (npm) MAL-2026-10418 | Malicious | Not scored | 13 Jul, 2026 | npm note-utilities |
Malicious release: Malicious code in cookie-phase (npm) MAL-2026-10410 | Malicious | Not scored | 13 Jul, 2026 | npm cookie-phase |
Malicious release: Malicious code in cookie-sign (npm) MAL-2026-10411 | Malicious | Not scored | 13 Jul, 2026 | npm cookie-sign |
Malicious release: Malicious code in tipsen-last-pls (npm) GHSA-r7j6-rpc2-h6xh, MAL-2026-10392 | Malicious | Not scored | 13 Jul, 2026 | npm tipsen-last-pls |
Malicious release: Malicious code in tipsen-last (npm) GHSA-83fp-39mc-pvp5, MAL-2026-10391 | Malicious | Not scored | 13 Jul, 2026 | npm tipsen-last |