Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in tme-xca (npm) GHSA-w846-5p2c-7hwq, MAL-2026-10236 | Malicious | Not scored | 06 Jul, 2026 | npm tme-xca |
Malicious release: Malicious code in gen-ai-opt-in (npm) GHSA-jwrj-q2c7-8g47, MAL-2026-6761 | Malicious | Not scored | 05 Jul, 2026 | npm gen-ai-opt-in |
Malicious release: Malicious code in wsh4-nmp (npm) GHSA-3wv5-4p57-2v5q, MAL-2026-6792 | Malicious | Not scored | 05 Jul, 2026 | npm wsh4-nmp |
Malicious release: Malicious code in @adobesign/as-dev-tools (npm) MAL-2026-6760 | Malicious | Not scored | 05 Jul, 2026 | npm @adobesign/as-dev-tools |
Malicious release: Malicious code in fmt-date-lite (npm) MAL-2026-10115 | Malicious | Not scored | 05 Jul, 2026 | npm fmt-date-lite |
Malicious release: Malicious code in logger-daemon-regex (npm) MAL-2026-7017 | Malicious | Not scored | 05 Jul, 2026 | npm logger-daemon-regex |
Malicious release: Malicious code in vps-maintenance (npm) GHSA-qc5h-v3rf-5x95, MAL-2026-6756 | Malicious | Not scored | 04 Jul, 2026 | npm vps-maintenance |
Malicious release: Malicious code in vps-maintenance-paperclip-adapter (npm) GHSA-p3g7-2j36-j99x, MAL-2026-6757 | Malicious | Not scored | 04 Jul, 2026 | npm vps-maintenance-paperclip-adapter |
Malicious release: Malicious code in paperclip2 (npm) GHSA-27r8-2rjc-75rv, MAL-2026-6755 | Malicious | Not scored | 04 Jul, 2026 | npm paperclip2 |
Malicious release: Malicious code in datefmt-helper (npm) GHSA-ch48-496p-pfv8, MAL-2026-6788 | Malicious | Not scored | 04 Jul, 2026 | npm datefmt-helper |
Malicious release: Malicious code in debugcli (npm) GHSA-86fh-6m37-f9v4, MAL-2026-6790 | Malicious | Not scored | 03 Jul, 2026 | npm debugcli |
Malicious release: Malicious code in typescript-util-core (npm) GHSA-84mg-p866-528x, MAL-2026-6746 | Malicious | Not scored | 03 Jul, 2026 | npm typescript-util-core |
Malicious release: Malicious code in web-api-node (npm) GHSA-j69c-7q52-h87f, MAL-2026-6747 | Malicious | Not scored | 03 Jul, 2026 | npm web-api-node |
Malicious release: Malicious code in ts-node-utils (npm) GHSA-mjvg-2r5j-mg76, MAL-2026-6745 | Malicious | Not scored | 03 Jul, 2026 | npm ts-node-utils |
Malicious release: Malicious code in api-ts-utils (npm) GHSA-3w2r-9f5g-prj8, MAL-2026-6744 | Malicious | Not scored | 03 Jul, 2026 | npm api-ts-utils |
Malicious release: Malicious code in api-node-utils (npm) GHSA-wj6w-3grq-735j, MAL-2026-6743 | Malicious | Not scored | 03 Jul, 2026 | npm api-node-utils |
Malicious release: Malicious code in alder_morrgan (npm) GHSA-j23f-jg9h-gjmc, MAL-2026-6742 | Malicious | Not scored | 03 Jul, 2026 | npm alder_morrgan |
Malicious release: Malicious code in @node-cloud/create (npm) GHSA-558p-3gxf-hm84, MAL-2026-6741 | Malicious | Not scored | 03 Jul, 2026 | npm @node-cloud/create |
Malicious release: Malicious code in @lodash-en/lodash-en (npm) GHSA-37qp-frv4-562v, MAL-2026-6739 | Malicious | Not scored | 03 Jul, 2026 | npm @lodash-en/lodash-en |
Malicious release: Malicious code in decode-sdks (npm) GHSA-gv37-287r-g9vx, MAL-2026-6740 | Malicious | Not scored | 03 Jul, 2026 | npm decode-sdks |
Malicious release: Malicious code in @jacobtan/decode-sdk (npm) GHSA-3mg6-vg6x-m62v, MAL-2026-6738 | Malicious | Not scored | 03 Jul, 2026 | npm @jacobtan/decode-sdk |
Malicious release: Malicious code in epic-internal-tools (npm) GHSA-wx8q-h5p5-9hcf, MAL-2026-6737 | Malicious | Not scored | 02 Jul, 2026 | npm epic-internal-tools |
Malicious release: Malicious code in ue-automation-scripts (npm) GHSA-g68g-mm68-67f5, MAL-2026-6730 | Malicious | Not scored | 02 Jul, 2026 | npm ue-automation-scripts |
Malicious release: Malicious code in robomerge (npm) GHSA-x22f-73cv-vccx, MAL-2026-6729 | Malicious | Not scored | 02 Jul, 2026 | npm robomerge |
Malicious release: Malicious code in unreal-horde-dashboard (npm) GHSA-vwh3-m8vq-24r2, MAL-2026-6732 | Malicious | Not scored | 02 Jul, 2026 | npm unreal-horde-dashboard |
Malicious release: Malicious code in ue-jenkins-buildkite (npm) GHSA-8gxq-wrp7-qqv8, MAL-2026-6731 | Malicious | Not scored | 02 Jul, 2026 | npm ue-jenkins-buildkite |
Malicious release: Malicious code in @checkrhq/adjudication-api-client (npm) MAL-2026-6789 | Malicious | Not scored | 02 Jul, 2026 | npm @checkrhq/adjudication-api-client |
Malicious release: Malicious code in tailwind-animates (npm) GHSA-3cr6-gpr8-pjfm, MAL-2026-6727 | Malicious | Not scored | 02 Jul, 2026 | npm tailwind-animates |
Malicious release: Malicious code in db-convertor (npm) GHSA-p467-3jcx-48q5, MAL-2026-6726 | Malicious | Not scored | 02 Jul, 2026 | npm db-convertor |
Malicious release: Malicious code in @modhamanish/rn-mm-template (npm) GHSA-7v96-p295-826q, MAL-2026-6725 | Malicious | Not scored | 02 Jul, 2026 | npm @modhamanish/rn-mm-template |
Malicious release: Malicious code in @marketfront/actualordersnippetpopup (npm) MAL-2026-6763 | Malicious | Not scored | 02 Jul, 2026 | npm @marketfront/actualordersnippetpopup |
Malicious release: Malicious code in @marketfront/advertisingdevtool (npm) MAL-2026-6764 | Malicious | Not scored | 02 Jul, 2026 | npm @marketfront/advertisingdevtool |
Malicious release: Malicious code in @marketfront/bannerpopup (npm) MAL-2026-6765 | Malicious | Not scored | 02 Jul, 2026 | npm @marketfront/bannerpopup |
Malicious release: Malicious code in @marketfront/baobabtech (npm) MAL-2026-6766 | Malicious | Not scored | 02 Jul, 2026 | npm @marketfront/baobabtech |
Malicious release: Malicious code in @marketfront/basemarkettemplate (npm) MAL-2026-6767 | Malicious | Not scored | 02 Jul, 2026 | npm @marketfront/basemarkettemplate |
Malicious release: Malicious code in @marketfront/blenderdevtool (npm) MAL-2026-6768 | Malicious | Not scored | 02 Jul, 2026 | npm @marketfront/blenderdevtool |
Malicious release: Malicious code in @marketfront/captchaservice (npm) MAL-2026-6769 | Malicious | Not scored | 02 Jul, 2026 | npm @marketfront/captchaservice |
Malicious release: Malicious code in @marketfront/changefilter (npm) MAL-2026-6770 | Malicious | Not scored | 02 Jul, 2026 | npm @marketfront/changefilter |
Malicious release: Malicious code in @marketfront/commonecommerce (npm) MAL-2026-6771 | Malicious | Not scored | 02 Jul, 2026 | npm @marketfront/commonecommerce |
Malicious release: Malicious code in @marketfront/customdealsfeed (npm) MAL-2026-6772 | Malicious | Not scored | 02 Jul, 2026 | npm @marketfront/customdealsfeed |
Malicious release: Malicious code in @marketfront/designsystemdevtool (npm) MAL-2026-6773 | Malicious | Not scored | 02 Jul, 2026 | npm @marketfront/designsystemdevtool |
Malicious release: Malicious code in @marketfront/devtoolsloader (npm) MAL-2026-6774 | Malicious | Not scored | 02 Jul, 2026 | npm @marketfront/devtoolsloader |
Malicious release: Malicious code in @marketfront/digitalherobannercarousel (npm) MAL-2026-6775 | Malicious | Not scored | 02 Jul, 2026 | npm @marketfront/digitalherobannercarousel |
Malicious release: Malicious code in @marketfront/dynamicpageparams (npm) MAL-2026-6776 | Malicious | Not scored | 02 Jul, 2026 | npm @marketfront/dynamicpageparams |
Malicious release: Malicious code in @marketfront/errorcounter (npm) MAL-2026-6777 | Malicious | Not scored | 02 Jul, 2026 | npm @marketfront/errorcounter |
Malicious release: Malicious code in @marketfront/fashiononboardingpopup (npm) MAL-2026-6778 | Malicious | Not scored | 02 Jul, 2026 | npm @marketfront/fashiononboardingpopup |
Malicious release: Malicious code in @marketfront/fingerprint (npm) MAL-2026-6779 | Malicious | Not scored | 02 Jul, 2026 | npm @marketfront/fingerprint |
Malicious release: Malicious code in @marketfront/footer (npm) MAL-2026-6780 | Malicious | Not scored | 02 Jul, 2026 | npm @marketfront/footer |
Malicious release: Malicious code in @marketfront/gotoauthpopup (npm) MAL-2026-6781 | Malicious | Not scored | 02 Jul, 2026 | npm @marketfront/gotoauthpopup |
Malicious release: Malicious code in @marketfront/header (npm) MAL-2026-6782 | Malicious | Not scored | 02 Jul, 2026 | npm @marketfront/header |