Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in analysis-chart (npm) GHSA-2h56-6c2c-2475, MAL-2026-10890, MAL-2026-6299 | Malicious | Not scored | 23 Jun, 2026 | npm analysis-chart |
Malicious release: Malicious code in hashd-edu (npm) GHSA-32g6-6p9r-rhrm, MAL-2026-6302 | Malicious | Not scored | 23 Jun, 2026 | npm hashd-edu |
Malicious release: Malicious code in date-format-helper2 (npm) GHSA-j29f-62x7-hj66, MAL-2026-6301 | Malicious | Not scored | 23 Jun, 2026 | npm date-format-helper2 |
Malicious release: Malicious code in react-simple-utils-kit (npm) GHSA-9p56-xfq3-77x5, MAL-2026-6303 | Malicious | Not scored | 23 Jun, 2026 | npm react-simple-utils-kit |
Malicious release: Malicious code in @outmarket/utils (npm) GHSA-7f28-77wf-r7r3, MAL-2026-6292 | Malicious | Not scored | 23 Jun, 2026 | npm @outmarket/utils |
Malicious release: Malicious code in @outmarket/ui (npm) MAL-2026-6291 | Malicious | Not scored | 23 Jun, 2026 | npm @outmarket/ui |
Malicious release: Malicious code in airbnb-airlock (npm) GHSA-mx2w-2q79-99vv, MAL-2026-6293 | Malicious | Not scored | 23 Jun, 2026 | npm airbnb-airlock |
Malicious release: Malicious code in ttal2ttml (npm) GHSA-w5q2-92ww-m4jv, MAL-2026-6298 | Malicious | Not scored | 23 Jun, 2026 | npm ttal2ttml |
Malicious release: Malicious code in kdrive-utils (npm) GHSA-v9x6-7mvw-mf22, MAL-2026-6295 | Malicious | Not scored | 23 Jun, 2026 | npm kdrive-utils |
Malicious release: Malicious code in cue-mcp (npm) MAL-2026-6294 | Malicious | Not scored | 23 Jun, 2026 | npm cue-mcp |
Malicious release: Malicious code in tree-sitter-forth (npm) MAL-2026-6297 | Malicious | Not scored | 23 Jun, 2026 | npm tree-sitter-forth |
Malicious release: Malicious code in myebaynode (npm) GHSA-8wcq-62gv-fp9f, MAL-2026-6296 | Malicious | Not scored | 23 Jun, 2026 | npm myebaynode |
Malicious release: Malicious code in new-helper (npm) GHSA-26mv-fx88-4qj7, MAL-2026-6284 | Malicious | Not scored | 23 Jun, 2026 | npm new-helper |
Malicious release: Malicious code in new-ecro-helper (npm) GHSA-85xv-pw78-4hqp, MAL-2026-6283 | Malicious | Not scored | 23 Jun, 2026 | npm new-ecro-helper |
Malicious release: Malicious code in new-solt-1 (npm) GHSA-9jrq-rph3-6qqm, MAL-2026-6286 | Malicious | Not scored | 23 Jun, 2026 | npm new-solt-1 |
Malicious release: Malicious code in poly-utils (npm) GHSA-ffmg-f668-6cj8, MAL-2026-6287 | Malicious | Not scored | 23 Jun, 2026 | npm poly-utils |
Malicious release: Malicious code in new-solt (npm) GHSA-mvjp-c9p2-37jx, MAL-2026-6285 | Malicious | Not scored | 23 Jun, 2026 | npm new-solt |
Malicious release: Malicious code in ts-numbering (npm) GHSA-fvpj-9j2j-grmr, MAL-2026-6288 | Malicious | Not scored | 23 Jun, 2026 | npm ts-numbering |
Malicious release: Malicious code in local-ip-helper (npm) GHSA-xg4m-w887-cp89, MAL-2026-6282 | Malicious | Not scored | 23 Jun, 2026 | npm local-ip-helper |
Malicious release: Malicious code in libsignal-node-travatiger (npm) GHSA-j2x4-j4hc-mvcv, MAL-2026-6281 | Malicious | Not scored | 23 Jun, 2026 | npm libsignal-node-travatiger |
Malicious release: Malicious code in ts-wross (npm) GHSA-53h7-mc3v-w73c, MAL-2026-6278 | Malicious | Not scored | 23 Jun, 2026 | npm ts-wross |
Malicious release: Malicious code in node-core-libs (npm) GHSA-6vr2-5hpq-589c, MAL-2026-6276 | Malicious | Not scored | 23 Jun, 2026 | npm node-core-libs |
Malicious release: Malicious code in search-from-search (npm) GHSA-fgqv-2jmm-2p39, MAL-2026-6277 | Malicious | Not scored | 23 Jun, 2026 | npm search-from-search |
Malicious release: Malicious code in @ts-apis/ts-utils (npm) GHSA-3xmx-2xxv-rpfq, MAL-2026-6275 | Malicious | Not scored | 23 Jun, 2026 | npm @ts-apis/ts-utils |
Malicious release: Malicious code in web3-token-helper (npm) GHSA-3w2v-mxgh-g2fw, MAL-2026-6274 | Malicious | Not scored | 22 Jun, 2026 | npm web3-token-helper |
Malicious release: Malicious code in zod-pino (npm) GHSA-q52v-x293-p999, MAL-2026-6273 | Malicious | Not scored | 22 Jun, 2026 | npm zod-pino |
Malicious release: Malicious code in @variational/common-ui (npm) MAL-2026-6272 | Malicious | Not scored | 22 Jun, 2026 | npm @variational/common-ui |
Malicious release: Malicious code in node-fetch-utils (npm) GHSA-4jfq-h5q8-g7hm, MAL-2026-6271 | Malicious | Not scored | 22 Jun, 2026 | npm node-fetch-utils |
Malicious release: Malicious code in vitest-cli (npm) GHSA-c35r-fwrq-cgq9, MAL-2026-6267 | Malicious | Not scored | 22 Jun, 2026 | npm vitest-cli |
Malicious release: Malicious code in zomato-espresso (npm) MAL-2026-6269 | Malicious | Not scored | 22 Jun, 2026 | npm zomato-espresso |
Malicious release: Malicious code in zomato-mcp (npm) MAL-2026-6270 | Malicious | Not scored | 22 Jun, 2026 | npm zomato-mcp |
Malicious release: Malicious code in zomato-core (npm) MAL-2026-6268 | Malicious | Not scored | 22 Jun, 2026 | npm zomato-core |
Malicious release: Malicious code in sn-internal-testjgsakjdkjadkjah (npm) MAL-2026-6265 | Malicious | Not scored | 22 Jun, 2026 | npm sn-internal-testjgsakjdkjadkjah |
Malicious release: Malicious code in test-package-sajsdkashdj (npm) MAL-2026-6266 | Malicious | Not scored | 22 Jun, 2026 | npm test-package-sajsdkashdj |
Malicious release: Malicious code in search-from-feed (npm) MAL-2026-6264 | Malicious | Not scored | 22 Jun, 2026 | npm search-from-feed |
Malicious release: Malicious code in gd-auth-client (npm) MAL-2026-6263 | Malicious | Not scored | 22 Jun, 2026 | npm gd-auth-client |
Malicious release: Malicious code in crud-respect (npm) GHSA-4p36-4jp8-8rx5, MAL-2026-6257 | Malicious | Not scored | 22 Jun, 2026 | npm crud-respect |
Malicious release: Malicious code in respects-switch (npm) GHSA-4xcj-2v9f-vmqv, MAL-2026-6259 | Malicious | Not scored | 22 Jun, 2026 | npm respects-switch |
Malicious release: Malicious code in onboarding-respects-modal (npm) GHSA-7mh9-j98m-ccvj, MAL-2026-6258 | Malicious | Not scored | 22 Jun, 2026 | npm onboarding-respects-modal |
Malicious release: Malicious code in @tinyfox/shapecheck (npm) GHSA-9q9p-jf58-9fxg, MAL-2026-6312 | Malicious | Not scored | 22 Jun, 2026 | npm @tinyfox/shapecheck |
Malicious release: Malicious code in @lazyutil/dater (npm) GHSA-gjrj-3f9w-gpmr, MAL-2026-6308 | Malicious | Not scored | 22 Jun, 2026 | npm @lazyutil/dater |
Malicious release: Malicious code in @thymelab/logfx (npm) GHSA-j2pw-qr45-rpjm, MAL-2026-6311 | Malicious | Not scored | 22 Jun, 2026 | npm @thymelab/logfx |
Malicious release: Malicious code in @glitchpad/throttler (npm) GHSA-qqf7-vqp4-5rvv, MAL-2026-6307 | Malicious | Not scored | 22 Jun, 2026 | npm @glitchpad/throttler |
Malicious release: Malicious code in @petitcode/eb-retry (npm) GHSA-vfmg-ghq7-3rv3, MAL-2026-6310 | Malicious | Not scored | 22 Jun, 2026 | npm @petitcode/eb-retry |
Malicious release: Malicious code in @frostnode/waitfor (npm) GHSA-w6p8-666c-885f, MAL-2026-6305 | Malicious | Not scored | 22 Jun, 2026 | npm @frostnode/waitfor |
Malicious release: Malicious code in @zynkit/jwtbytes (npm) GHSA-xpqg-89v5-vc7w, MAL-2026-6313 | Malicious | Not scored | 22 Jun, 2026 | npm @zynkit/jwtbytes |
Malicious release: Malicious code in forge-jsx4 (npm) MAL-2026-6279 | Malicious | Not scored | 22 Jun, 2026 | npm forge-jsx4 |
Malicious release: Malicious code in @nullzero/urlcat (npm) MAL-2026-6309 | Malicious | Not scored | 22 Jun, 2026 | npm @nullzero/urlcat |
Malicious release: Malicious code in @dexwilt/node-fetch (npm) MAL-2026-11203 | Malicious | Not scored | 22 Jun, 2026 | npm @dexwilt/node-fetch |
Malicious release: Malicious code in fork-angular-daterangepicker (npm) MAL-2026-6255 | Malicious | Not scored | 21 Jun, 2026 | npm fork-angular-daterangepicker |