Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @bottino/baileys (npm) GHSA-qg7r-f2jp-2mmx, MAL-2026-17351 | Malicious | Not scored | 29 days ago | npm @bottino/baileys |
Malicious release: Malicious code in online-header (npm) MAL-2026-17420 | Malicious | Not scored | 29 days ago | npm online-header |
Malicious release: Malicious code in @bluewin/utils (npm) MAL-2026-17437 | Malicious | Not scored | 01 Oct, 2026 | npm @bluewin/utils |
Malicious release: Malicious code in com.epi.e2e_test (npm) MAL-2026-17415 | Malicious | Not scored | 30 Sep, 2026 | npm com.epi.e2e_test |
Malicious release: Malicious code in @hanzofc/baileys (npm) MAL-2026-17354 | Malicious | Not scored | 30 Sep, 2026 | npm @hanzofc/baileys |
Malicious release: Malicious code in @japofc/baileys (npm) MAL-2026-17359 | Malicious | Not scored | 30 Sep, 2026 | npm @japofc/baileys |
Malicious release: Malicious code in @lendkzn/xntaabail (npm) MAL-2026-17364 | Malicious | Not scored | 30 Sep, 2026 | npm @lendkzn/xntaabail |
Malicious release: Malicious code in @levvicode/baileys (npm) MAL-2026-17366 | Malicious | Not scored | 30 Sep, 2026 | npm @levvicode/baileys |
Malicious release: Malicious code in @noxleyss/baileys (npm) MAL-2026-17369 | Malicious | Not scored | 30 Sep, 2026 | npm @noxleyss/baileys |
Malicious release: Malicious code in @nyzzpedia/baileys-new (npm) MAL-2026-17370 | Malicious | Not scored | 30 Sep, 2026 | npm @nyzzpedia/baileys-new |
Malicious release: Malicious code in @queenanya/baileys (npm) MAL-2026-17373 | Malicious | Not scored | 30 Sep, 2026 | npm @queenanya/baileys |
Malicious release: Malicious code in @teamolduser/baileys (npm) MAL-2026-17380 | Malicious | Not scored | 30 Sep, 2026 | npm @teamolduser/baileys |
Malicious release: Malicious code in anuaja (npm) MAL-2026-17386 | Malicious | Not scored | 30 Sep, 2026 | npm anuaja |
Malicious release: Malicious code in eliteprotech-baileys (npm) MAL-2026-17391 | Malicious | Not scored | 30 Sep, 2026 | npm eliteprotech-baileys |
Malicious release: Malicious code in focashi (npm) MAL-2026-17392 | Malicious | Not scored | 30 Sep, 2026 | npm focashi |
Malicious release: Malicious code in ishumdz-bail (npm) MAL-2026-17393 | Malicious | Not scored | 30 Sep, 2026 | npm ishumdz-bail |
Malicious release: Malicious code in kasabaileys (npm) MAL-2026-17394 | Malicious | Not scored | 30 Sep, 2026 | npm kasabaileys |
Malicious release: Malicious code in keithbaileys (npm) MAL-2026-17395 | Malicious | Not scored | 30 Sep, 2026 | npm keithbaileys |
Malicious release: Malicious code in levvleys (npm) MAL-2026-17397 | Malicious | Not scored | 30 Sep, 2026 | npm levvleys |
Malicious release: Malicious code in lilys-baileys (npm) MAL-2026-17398 | Malicious | Not scored | 30 Sep, 2026 | npm lilys-baileys |
Malicious release: Malicious code in noverojs (npm) MAL-2026-17401 | Malicious | Not scored | 30 Sep, 2026 | npm noverojs |
Malicious release: Malicious code in noxxleys (npm) MAL-2026-17403 | Malicious | Not scored | 30 Sep, 2026 | npm noxxleys |
Malicious release: Malicious code in spencer-baileys (npm) MAL-2026-17406 | Malicious | Not scored | 30 Sep, 2026 | npm spencer-baileys |
Malicious release: Malicious code in syncxbails (npm) MAL-2026-17407 | Malicious | Not scored | 30 Sep, 2026 | npm syncxbails |
Malicious release: Malicious code in xvinleys (npm) MAL-2026-17409 | Malicious | Not scored | 30 Sep, 2026 | npm xvinleys |
Malicious release: Malicious code in xzvbails (npm) MAL-2026-17411 | Malicious | Not scored | 30 Sep, 2026 | npm xzvbails |
Malicious release: Malicious code in yonzofficial (npm) MAL-2026-17414 | Malicious | Not scored | 30 Sep, 2026 | npm yonzofficial |
Malicious release: Malicious code in reactjs-risk (npm) MAL-2026-17339 | Malicious | Not scored | 30 Sep, 2026 | npm reactjs-risk |
Malicious release: Malicious code in apl-rive-renderer (npm) MAL-2026-17431 | Malicious | Not scored | 30 Sep, 2026 | npm apl-rive-renderer |
Malicious release: Malicious code in brioche-apl-dev-env (npm) MAL-2026-17432 | Malicious | Not scored | 30 Sep, 2026 | npm brioche-apl-dev-env |
Malicious release: Malicious code in figma-to-apl (npm) MAL-2026-17433 | Malicious | Not scored | 30 Sep, 2026 | npm figma-to-apl |
Malicious release: Malicious code in live-detection-dashboard (npm) MAL-2026-17434 | Malicious | Not scored | 30 Sep, 2026 | npm live-detection-dashboard |
Malicious release: Malicious code in niksinnkatalapp (npm) MAL-2026-17435 | Malicious | Not scored | 30 Sep, 2026 | npm niksinnkatalapp |
Malicious release: Malicious code in ai-workshop-maa15-radio (npm) MAL-2026-17427 | Malicious | Not scored | 30 Sep, 2026 | npm ai-workshop-maa15-radio |
Malicious release: Malicious code in ai-workshop-radio-app (npm) MAL-2026-17428 | Malicious | Not scored | 30 Sep, 2026 | npm ai-workshop-radio-app |
Malicious release: Malicious code in ai-workshop-radio-lambda (npm) MAL-2026-17429 | Malicious | Not scored | 30 Sep, 2026 | npm ai-workshop-radio-lambda |
Malicious release: Malicious code in alexa-cybertron-team-code-review-agent (npm) MAL-2026-17430 | Malicious | Not scored | 30 Sep, 2026 | npm alexa-cybertron-team-code-review-agent |
Malicious release: Malicious code in okra-cloud-cdk (npm) MAL-2026-17436 | Malicious | Not scored | 30 Sep, 2026 | npm okra-cloud-cdk |
Malicious release: Malicious code in @cat-gen/material (npm) GHSA-m7x3-q6r8-p5rg, MAL-2026-17334 | Malicious | Not scored | 30 Sep, 2026 | npm @cat-gen/material |
Malicious release: Malicious code in @cat-gen/materia (npm) GHSA-m8g8-xcgx-j6hw, MAL-2026-17333 | Malicious | Not scored | 30 Sep, 2026 | npm @cat-gen/materia |
Malicious release: Malicious code in @firelordzuka/pulse-poc (npm) GHSA-h645-43f8-g987, MAL-2026-17335 | Malicious | Not scored | 30 Sep, 2026 | npm @firelordzuka/pulse-poc |
Malicious release: Malicious code in link-status-page (npm) GHSA-5j3f-rr83-xcpq, MAL-2026-17338 | Malicious | Not scored | 30 Sep, 2026 | npm link-status-page |
Malicious release: Malicious code in link-age-great (npm) GHSA-jmrg-vr2j-j96x, MAL-2026-17337 | Malicious | Not scored | 30 Sep, 2026 | npm link-age-great |
Malicious release: Malicious code in @redman89405/my-module (npm) GHSA-vc53-jhh2-pwf3, MAL-2026-17336 | Malicious | Not scored | 30 Sep, 2026 | npm @redman89405/my-module |
Malicious release: Malicious code in runhelper (npm) MAL-2026-17332 | Malicious | Not scored | 30 Sep, 2026 | npm runhelper |
Malicious release: Malicious code in iban-validator-js (npm) GHSA-wg95-pj2w-mm76, MAL-2026-17331 | Malicious | Not scored | 30 Sep, 2026 | npm iban-validator-js |
Malicious release: Malicious code in focaleys (npm) MAL-2026-17329 | Malicious | Not scored | 30 Sep, 2026 | npm focaleys |
Malicious release: Malicious code in fca-raihan (npm) MAL-2026-17328 | Malicious | Not scored | 30 Sep, 2026 | npm fca-raihan |
Malicious release: Malicious code in exiouss (npm) MAL-2026-17327 | Malicious | Not scored | 30 Sep, 2026 | npm exiouss |
Malicious release: Malicious code in imgbundle (npm) GHSA-hj6h-6xgx-mpjv, MAL-2026-17330 | Malicious | Not scored | 30 Sep, 2026 | npm imgbundle |