Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in ts-einkle-slot (npm) GHSA-8cxx-rp6g-mcr9, MAL-2026-6525 | Malicious | Not scored | 26 Jun, 2026 | npm ts-einkle-slot |
Malicious release: Malicious code in @epsteinlovekids483/crossmint-wallets-sdk-pentest (npm) GHSA-x7jg-w433-8q2r, MAL-2026-6522 | Malicious | Not scored | 26 Jun, 2026 | npm @epsteinlovekids483/crossmint-wallets-sdk-pentest |
Malicious release: Malicious code in react-icon-svgs (npm) GHSA-3462-7h42-6cvg, MAL-2026-6519 | Malicious | Not scored | 26 Jun, 2026 | npm react-icon-svgs |
Malicious release: Malicious code in rollup-plugin-polyfill-connect (npm) GHSA-97cf-xxww-v429, MAL-2026-6520 | Malicious | Not scored | 26 Jun, 2026 | npm rollup-plugin-polyfill-connect |
Malicious release: Malicious code in ai-node-relay (npm) GHSA-25p7-8xj5-25qp, MAL-2026-6518 | Malicious | Not scored | 26 Jun, 2026 | npm ai-node-relay |
Malicious release: Malicious code in ai-node-agent (npm) GHSA-w537-2cgp-4x64, MAL-2026-6517 | Malicious | Not scored | 26 Jun, 2026 | npm ai-node-agent |
Malicious release: Malicious code in dtxto1ols (npm) MAL-2026-6513 | Malicious | Not scored | 26 Jun, 2026 | npm dtxto1ols |
Malicious release: Malicious code in dtxtools (npm) MAL-2026-6514 | Malicious | Not scored | 26 Jun, 2026 | npm dtxtools |
Malicious release: Malicious code in @merceas/cross-fetch (npm) MAL-2026-6510 | Malicious | Not scored | 26 Jun, 2026 | npm @merceas/cross-fetch |
Malicious release: Malicious code in @merceas/anchor (npm) MAL-2026-6509 | Malicious | Not scored | 26 Jun, 2026 | npm @merceas/anchor |
Malicious release: Malicious code in react-context-form-tdsss (npm) GHSA-pg33-6m24-4p63, MAL-2026-6512 | Malicious | Not scored | 26 Jun, 2026 | npm react-context-form-tdsss |
Malicious release: Malicious code in tw-style-utils (npm) GHSA-75cr-ggc5-8h7g, MAL-2026-6508 | Malicious | Not scored | 26 Jun, 2026 | npm tw-style-utils |
Malicious release: Malicious code in pump-stream-logger (npm) GHSA-64m4-w85f-wrjj, MAL-2026-6507 | Malicious | Not scored | 26 Jun, 2026 | npm pump-stream-logger |
Malicious release: Malicious code in pump-laserstream-parser (npm) GHSA-cwr6-c222-8hwf, MAL-2026-6506 | Malicious | Not scored | 26 Jun, 2026 | npm pump-laserstream-parser |
Malicious release: Malicious code in pino-zod (npm) GHSA-j7hj-qc4f-x92f, MAL-2026-6505 | Malicious | Not scored | 26 Jun, 2026 | npm pino-zod |
Malicious release: Malicious code in hydanlabs (npm) MAL-2026-6511 | Malicious | Not scored | 26 Jun, 2026 | npm hydanlabs |
Malicious release: Malicious code in js-price-client-node (npm) MAL-2026-6503 | Malicious | Not scored | 26 Jun, 2026 | npm js-price-client-node |
Malicious release: Malicious code in js-client-node (npm) GHSA-x7hp-6x9v-c662, MAL-2026-6502 | Malicious | Not scored | 26 Jun, 2026 | npm js-client-node |
Malicious release: Malicious code in dttfdsdee (npm) MAL-2026-6498 | Malicious | Not scored | 26 Jun, 2026 | npm dttfdsdee |
Malicious release: Malicious code in chai-as-synced (npm) GHSA-3m37-26mh-fj77, MAL-2026-6497 | Malicious | Not scored | 26 Jun, 2026 | npm chai-as-synced |
Malicious release: Malicious code in set-cookie-ease (npm) MAL-2026-6500 | Malicious | Not scored | 26 Jun, 2026 | npm set-cookie-ease |
Malicious release: Malicious code in mongoose-json-format (npm) GHSA-8fxp-pghh-7w6w, MAL-2026-6499 | Malicious | Not scored | 26 Jun, 2026 | npm mongoose-json-format |
Malicious release: Malicious code in @dervix/ws (npm) GHSA-4mc4-4rf2-2cm6, MAL-2026-6496 | Malicious | Not scored | 26 Jun, 2026 | npm @dervix/ws |
Malicious release: Malicious code in wellnpm (npm) GHSA-2gh4-jhh2-625m, MAL-2026-6501 | Malicious | Not scored | 26 Jun, 2026 | npm wellnpm |
Malicious release: Malicious code in animatecss-postcss-plugin (npm) GHSA-p6ch-cw7w-ff5c, MAL-2026-6495 | Malicious | Not scored | 26 Jun, 2026 | npm animatecss-postcss-plugin |
Malicious release: Malicious code in @help-forms/application-aff (npm) MAL-2026-6494 | Malicious | Not scored | 26 Jun, 2026 | npm @help-forms/application-aff |
Malicious release: Malicious code in data-parser-utils (npm) GHSA-vw6q-xg53-fpxh, MAL-2026-6490 | Malicious | Not scored | 26 Jun, 2026 | npm data-parser-utils |
Malicious release: Malicious code in prism-silq (npm) GHSA-6hp6-2792-v6q5, MAL-2026-6493 | Malicious | Not scored | 26 Jun, 2026 | npm prism-silq |
Malicious release: Malicious code in hexo-shoka-swiper (npm) GHSA-vwrj-pprq-gjvq, MAL-2026-6492 | Malicious | Not scored | 26 Jun, 2026 | npm hexo-shoka-swiper |
Malicious release: Malicious code in hexo-deployer-wrangler (npm) GHSA-vx8x-rr42-fwhx, MAL-2026-6491 | Malicious | Not scored | 26 Jun, 2026 | npm hexo-deployer-wrangler |
Malicious release: Malicious code in random-string-64 (npm) GHSA-jp8q-gmj4-fx77, MAL-2026-6484 | Malicious | Not scored | 25 Jun, 2026 | npm random-string-64 |
Malicious release: Malicious code in kelly-stake (npm) GHSA-9x8c-c54x-vgrv, MAL-2026-6482 | Malicious | Not scored | 25 Jun, 2026 | npm kelly-stake |
Malicious release: Malicious code in gx-npm-lib (npm) GHSA-wcmr-4783-pq3p, MAL-2026-6480 | Malicious | Not scored | 25 Jun, 2026 | npm gx-npm-lib |
Malicious release: Malicious code in gx-npm-ui (npm) GHSA-5jpv-9x2f-72jj, MAL-2026-6481 | Malicious | Not scored | 25 Jun, 2026 | npm gx-npm-ui |
Malicious release: Malicious code in velocityfix (npm) GHSA-2736-v5cj-q9x5, MAL-2026-6487 | Malicious | Not scored | 25 Jun, 2026 | npm velocityfix |
Malicious release: Malicious code in log-update-ts (npm) GHSA-5866-j382-r7g9, MAL-2026-6483 | Malicious | Not scored | 25 Jun, 2026 | npm log-update-ts |
Malicious release: Malicious code in @salem_jalal/osc-components (npm) MAL-2026-6479 | Malicious | Not scored | 25 Jun, 2026 | npm @salem_jalal/osc-components |
Malicious release: Malicious code in unsafe-malicious-package (npm) GHSA-4gj3-wx83-w2hr, MAL-2026-6486 | Malicious | Not scored | 25 Jun, 2026 | npm unsafe-malicious-package |
Malicious release: Malicious code in starship-timeline (npm) GHSA-7c79-95c2-vgwm, MAL-2026-6485 | Malicious | Not scored | 25 Jun, 2026 | npm starship-timeline |
Malicious release: Malicious code in runtimekit (npm) GHSA-v6qq-vq5x-rmxf, MAL-2026-6477 | Malicious | Not scored | 25 Jun, 2026 | npm runtimekit |
Malicious release: Malicious code in ref-slot (npm) GHSA-fm4g-q7h6-hqjw, MAL-2026-6474 | Malicious | Not scored | 25 Jun, 2026 | npm ref-slot |
Malicious release: Malicious code in typedecode (npm) GHSA-wfg2-fj8h-rxj6, MAL-2026-6476 | Malicious | Not scored | 25 Jun, 2026 | npm typedecode |
Malicious release: Malicious code in textshape-css (npm) GHSA-pmmh-8m34-xxwh, MAL-2026-6475 | Malicious | Not scored | 25 Jun, 2026 | npm textshape-css |
Malicious release: Malicious code in colorpicker-ui (npm) MAL-2026-6473 | Malicious | Not scored | 25 Jun, 2026 | npm colorpicker-ui |
Malicious release: Malicious code in tailwind-color-shades (npm) MAL-2026-6471 | Malicious | Not scored | 25 Jun, 2026 | npm tailwind-color-shades |
Malicious release: Malicious code in tailwindcss-effector (npm) GHSA-5xpc-q26w-px3q, MAL-2026-6472 | Malicious | Not scored | 25 Jun, 2026 | npm tailwindcss-effector |
Malicious release: Malicious code in chlklib (npm) GHSA-pw26-7j7h-jhf5, MAL-2026-6470 | Malicious | Not scored | 25 Jun, 2026 | npm chlklib |
Malicious release: Malicious code in ts-precision (npm) GHSA-g38h-2r6h-pwr8, MAL-2026-6469 | Malicious | Not scored | 25 Jun, 2026 | npm ts-precision |
Malicious release: Malicious code in ts-opus (npm) GHSA-xr76-fgrm-h52p, MAL-2026-6468 | Malicious | Not scored | 25 Jun, 2026 | npm ts-opus |
Malicious release: Malicious code in @vpms/design-system (npm) GHSA-43r2-9cx9-pv7f, MAL-2026-6467 | Malicious | Not scored | 25 Jun, 2026 | npm @vpms/design-system |