Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @bellaxchuu/xtrxbails (npm) GHSA-5f6x-qj83-2895, MAL-2026-17350 | Malicious | Not scored | 22 days ago | npm @bellaxchuu/xtrxbails |
Malicious release: Malicious code in @bellaxchuu/skyblue (npm) GHSA-5x7v-4r7v-353c, MAL-2026-17347 | Malicious | Not scored | 22 days ago | npm @bellaxchuu/skyblue |
Malicious release: Malicious code in @bellaxchuu/velvetry (npm) GHSA-9jwq-m497-mcq5, MAL-2026-17349 | Malicious | Not scored | 22 days ago | npm @bellaxchuu/velvetry |
Malicious release: Malicious code in @bellaxchuu/xbailey (npm) GHSA-rq65-h2vx-ww39, MAL-2026-17678 | Malicious | Not scored | 22 days ago | npm @bellaxchuu/xbailey |
Malicious release: Malicious code in @bellaxchuu/yarnbails (npm) GHSA-mff5-fqw5-7vhj, MAL-2026-17680 | Malicious | Not scored | 22 days ago | npm @bellaxchuu/yarnbails |
Malicious release: Malicious code in @bellaxchuu/xbails (npm) GHSA-mwq7-c4ww-fpfq, MAL-2026-17679 | Malicious | Not scored | 22 days ago | npm @bellaxchuu/xbails |
Malicious release: Malicious code in @bellaxchuu/bails (npm) GHSA-pxp7-vhfv-j52j, MAL-2026-17675 | Malicious | Not scored | 22 days ago | npm @bellaxchuu/bails |
Malicious release: Malicious code in @xayz/brat-generator (npm) GHSA-566x-rwjp-9274, MAL-2026-17671 | Malicious | Not scored | 22 days ago | npm @xayz/brat-generator |
Malicious release: Malicious code in my-baileys (npm) GHSA-6v2q-p64f-6cp6, MAL-2026-17400 | Malicious | Not scored | 22 days ago | npm my-baileys |
Malicious release: Malicious code in @xayz/libsignal-node (npm) GHSA-f748-f8w7-hf22, MAL-2026-17672 | Malicious | Not scored | 22 days ago | npm @xayz/libsignal-node |
Malicious release: Malicious code in @xayz/baileys (npm) GHSA-fwcp-q8x6-4fc2, MAL-2026-17384 | Malicious | Not scored | 22 days ago | npm @xayz/baileys |
Malicious release: Malicious code in brat-generator (npm) GHSA-m45c-2rh6-33g6, MAL-2026-17674 | Malicious | Not scored | 22 days ago | npm brat-generator |
Malicious release: Malicious code in bottino-baileys (npm) GHSA-5f2x-3c4c-wh5p, MAL-2026-17673 | Malicious | Not scored | 22 days ago | npm bottino-baileys |
Malicious release: Malicious code in @itsmee_aizat.id/baileys (npm) GHSA-rm53-f4h3-h259, MAL-2026-17669 | Malicious | Not scored | 22 days ago | npm @itsmee_aizat.id/baileys |
Malicious release: Malicious code in @itsmee_aizat.id/baileys2 (npm) GHSA-g6w5-p954-xcfr, MAL-2026-17670 | Malicious | Not scored | 22 days ago | npm @itsmee_aizat.id/baileys2 |
Malicious release: Malicious code in albert-anitabaileys (npm) GHSA-r5fr-r88h-prv3, MAL-2026-17385 | Malicious | Not scored | 22 days ago | npm albert-anitabaileys |
Malicious release: Malicious code in cantarella-baileys (npm) GHSA-w79v-3845-fc9f, MAL-2026-17390 | Malicious | Not scored | 22 days ago | npm cantarella-baileys |
Malicious release: Malicious code in @nyzzpediaa/baileys-new (npm) GHSA-xf66-63xx-4682, MAL-2026-17371 | Malicious | Not scored | 22 days ago | npm @nyzzpediaa/baileys-new |
Malicious release: Malicious code in dransay (npm) MAL-2026-17700 | Malicious | Not scored | 22 days ago | npm dransay |
Malicious release: Malicious code in @dransay/address-validation (npm) MAL-2026-17668 | Malicious | Not scored | 22 days ago | npm @dransay/address-validation |
Malicious release: Malicious code in @dransay/feature-flags (npm) MAL-2026-17696 | Malicious | Not scored | 22 days ago | npm @dransay/feature-flags |
Malicious release: Malicious code in @dransay/logger (npm) MAL-2026-17697 | Malicious | Not scored | 22 days ago | npm @dransay/logger |
Malicious release: Malicious code in @dransay/phone-fix-test (npm) MAL-2026-17698 | Malicious | Not scored | 22 days ago | npm @dransay/phone-fix-test |
Malicious release: Malicious code in @dransay/api (npm) MAL-2026-17805 | Malicious | Not scored | 22 days ago | npm @dransay/api |
Malicious release: Malicious code in @dransay/secrets (npm) MAL-2026-17699 | Malicious | Not scored | 22 days ago | npm @dransay/secrets |
Malicious release: Malicious code in @dransay/db (npm) MAL-2026-17695 | Malicious | Not scored | 22 days ago | npm @dransay/db |
Malicious release: Malicious code in css-nesting-transform (npm) MAL-2026-17804 | Malicious | Not scored | 22 days ago | npm css-nesting-transform |
Malicious release: Malicious code in @bellaxchuu/belbails (npm) MAL-2026-17342 | Malicious | Not scored | 22 days ago | npm @bellaxchuu/belbails |
Malicious release: Malicious code in @lendxntaa/baileys (npm) GHSA-cqcv-g3vq-g6wr, MAL-2026-17365 | Malicious | Not scored | 22 days ago | npm @lendxntaa/baileys |
Malicious release: Malicious code in kiyoramarkets (npm) GHSA-23wg-cgvp-f8w7, MAL-2026-17396 | Malicious | Not scored | 22 days ago | npm kiyoramarkets |
Malicious release: Malicious code in mfasolver (npm) MAL-2026-17663 | Malicious | Not scored | 22 days ago | npm mfasolver |
Malicious release: Malicious code in hardhat-promised (npm) MAL-2026-17662 | Malicious | Not scored | 22 days ago | npm hardhat-promised |
Malicious release: Malicious code in hardhat-pack (npm) MAL-2026-17661 | Malicious | Not scored | 22 days ago | npm hardhat-pack |
Malicious release: Malicious code in hardhat-deep (npm) MAL-2026-17659 | Malicious | Not scored | 22 days ago | npm hardhat-deep |
Malicious release: Malicious code in abbishal-poc2 (npm) MAL-2026-17654 | Malicious | Not scored | 22 days ago | npm abbishal-poc2 |
Malicious release: Malicious code in hardhat-bits (npm) MAL-2026-17658 | Malicious | Not scored | 22 days ago | npm hardhat-bits |
Malicious release: Malicious code in hardhat-option (npm) MAL-2026-17660 | Malicious | Not scored | 22 days ago | npm hardhat-option |
Malicious release: Malicious code in dotenv-runtime (npm) MAL-2026-17657 | Malicious | Not scored | 22 days ago | npm dotenv-runtime |
Malicious release: Malicious code in css-flow-render-shim (npm) MAL-2026-17655 | Malicious | Not scored | 22 days ago | npm css-flow-render-shim |
Malicious release: Malicious code in css-reading-display-polyfill (npm) MAL-2026-17656 | Malicious | Not scored | 22 days ago | npm css-reading-display-polyfill |
Malicious release: Malicious code in wix-ssr-thunderbolt-grid-polyfill (npm) MAL-2026-17664 | Malicious | Not scored | 22 days ago | npm wix-ssr-thunderbolt-grid-polyfill |
Malicious release: Malicious code in @ziedzzz/demo-canary (npm) GHSA-p7gq-mvm4-4cw4, MAL-2026-17652 | Malicious | Not scored | 22 days ago | npm @ziedzzz/demo-canary |
Malicious release: Malicious code in abbishal-poc-as-dependency (npm) GHSA-pj66-3vwh-cgm2, MAL-2026-17653 | Malicious | Not scored | 22 days ago | npm abbishal-poc-as-dependency |
Malicious release: Malicious code in @praveenvjpm/color-utils-7210 (npm) MAL-2026-17651 | Malicious | Not scored | 22 days ago | npm @praveenvjpm/color-utils-7210 |
Malicious release: Malicious code in tensorlake (npm) GHSA-rqxj-g25x-4v9v, MAL-2026-17650 | Malicious | Not scored | 22 days ago | npm tensorlake |
Malicious release: Malicious code in internallib_v788 (npm) GHSA-8pvp-4qvp-26m7, MAL-2026-17649 | Malicious | Not scored | 22 days ago | npm internallib_v788 |
Malicious release: Malicious code in function-color (npm) GHSA-m6cg-6crx-mggv, MAL-2026-17647 | Malicious | Not scored | 22 days ago | npm function-color |
Malicious release: Malicious code in function-flag (npm) GHSA-ggcg-4pv7-wf9m, MAL-2026-17648 | Malicious | Not scored | 22 days ago | npm function-flag |
Payload: SQL injection in SQLite/Postgres CVE-2026-105856, CVE-2026-63316, GHSA-pj7x-6wpf-pgvp | High | 0.3% | 22 days ago | npm @payloadcms/db-d1-sqlite npm @payloadcms/db-postgres npm @payloadcms/db-sqlite npm @payloadcms/db-vercel-postgres |
Malicious release: Malicious code in animatecss-tailwind-bridge (npm) GHSA-3h7p-p7hr-fqf7, MAL-2026-17666 | Malicious | Not scored | 22 days ago | npm animatecss-tailwind-bridge |