Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @apiwizards/auth-middleware (npm) MAL-2026-6211 | Malicious | Not scored | 19 Jun, 2026 | npm @apiwizards/auth-middleware |
Malicious release: Malicious code in @antoncarlos1/nodelamp (npm) GHSA-c3r7-wcqm-j4v8, MAL-2026-6209 | Malicious | Not scored | 19 Jun, 2026 | npm @antoncarlos1/nodelamp |
Malicious release: Malicious code in chai-assert-kit (npm) MAL-2026-6221 | Malicious | Not scored | 19 Jun, 2026 | npm chai-assert-kit |
Malicious release: Malicious code in chai-as-attested (npm) GHSA-v8fp-q6g9-vj9c, MAL-2026-6218 | Malicious | Not scored | 19 Jun, 2026 | npm chai-as-attested |
Malicious release: Malicious code in chai-as-uphelded (npm) GHSA-9gg4-phm5-h5g9, MAL-2026-6220 | Malicious | Not scored | 19 Jun, 2026 | npm chai-as-uphelded |
Malicious release: Malicious code in new-mjs-eslint (npm) GHSA-m6jq-gwpx-8rj7, MAL-2026-6226 | Malicious | Not scored | 19 Jun, 2026 | npm new-mjs-eslint |
Malicious release: Malicious code in mjs-eslint (npm) GHSA-r6f7-88jj-mg66, MAL-2026-6223 | Malicious | Not scored | 19 Jun, 2026 | npm mjs-eslint |
Malicious release: Malicious code in new-eslint-1 (npm) GHSA-72jg-rrr3-v685, MAL-2026-6225 | Malicious | Not scored | 19 Jun, 2026 | npm new-eslint-1 |
Malicious release: Malicious code in new-eslint (npm) GHSA-8h72-5mvw-5f6r, MAL-2026-6224 | Malicious | Not scored | 19 Jun, 2026 | npm new-eslint |
Malicious release: Malicious code in new-ts-helper (npm) GHSA-g793-594c-6gxf, MAL-2026-6227 | Malicious | Not scored | 19 Jun, 2026 | npm new-ts-helper |
Malicious release: Malicious code in chai-as-forgeted (npm) MAL-2026-6219 | Malicious | Not scored | 19 Jun, 2026 | npm chai-as-forgeted |
Malicious release: Malicious code in ts-esys (npm) GHSA-76f5-jq4m-cjc3, MAL-2026-6205 | Malicious | Not scored | 19 Jun, 2026 | npm ts-esys |
Malicious release: Malicious code in ts-ecro-helper (npm) GHSA-pw67-28xc-x677, MAL-2026-6204 | Malicious | Not scored | 19 Jun, 2026 | npm ts-ecro-helper |
Malicious release: Malicious code in mongoose-jsonify (npm) GHSA-6wmf-9mj4-fx3x, MAL-2026-6203 | Malicious | Not scored | 19 Jun, 2026 | npm mongoose-jsonify |
Malicious release: Malicious code in assert-kit (npm) GHSA-748x-3gxw-v7xv, MAL-2026-6200 | Malicious | Not scored | 19 Jun, 2026 | npm assert-kit |
Malicious release: Malicious code in eth-util (npm) GHSA-fq6v-3gxv-7rjv, MAL-2026-6201 | Malicious | Not scored | 19 Jun, 2026 | npm eth-util |
Malicious release: Malicious code in ethereum-gas-reporter (npm) GHSA-hr44-2g4q-fx38, MAL-2026-6202 | Malicious | Not scored | 19 Jun, 2026 | npm ethereum-gas-reporter |
Malicious release: Malicious code in build-tracker-n5p1 (npm) GHSA-chqj-php6-8x6m, MAL-2026-6196 | Malicious | Not scored | 19 Jun, 2026 | npm build-tracker-n5p1 |
Malicious release: Malicious code in ts-big-ecro (npm) GHSA-3cg2-mrw5-67r6, MAL-2026-6199 | Malicious | Not scored | 19 Jun, 2026 | npm ts-big-ecro |
Malicious release: Malicious code in new-ecro-1 (npm) GHSA-j799-pq44-wq6g, MAL-2026-6198 | Malicious | Not scored | 19 Jun, 2026 | npm new-ecro-1 |
Malicious release: Malicious code in new-ecro (npm) GHSA-chhh-8532-pg35, MAL-2026-6197 | Malicious | Not scored | 19 Jun, 2026 | npm new-ecro |
Malicious release: Malicious code in node-slot (npm) GHSA-9243-vwcg-mpf3, MAL-2026-6191 | Malicious | Not scored | 19 Jun, 2026 | npm node-slot |
Malicious release: Malicious code in ordered-btree (npm) MAL-2026-6193 | Malicious | Not scored | 19 Jun, 2026 | npm ordered-btree |
Malicious release: Malicious code in @mep-exp/api-tools (npm) GHSA-g5jc-gx32-75x7, GHSA-q2pc-rvw2-7v5m, MAL-2026-6183 | Malicious | Not scored | 19 Jun, 2026 | npm @mep-exp/api-tools |
Malicious release: Malicious code in @qlab/component-intelligence (npm) MAL-2026-6184 | Malicious | Not scored | 19 Jun, 2026 | npm @qlab/component-intelligence |
Malicious release: Malicious code in nodepathbalance54 (npm) GHSA-hrp4-xprg-wqxw, MAL-2026-6192 | Malicious | Not scored | 19 Jun, 2026 | npm nodepathbalance54 |
Malicious release: Malicious code in conversa-sdk (npm) GHSA-8m82-6fp4-38m4, MAL-2026-6185 | Malicious | Not scored | 19 Jun, 2026 | npm conversa-sdk |
Malicious release: Malicious code in electron-internal-utils (npm) GHSA-38jw-23hm-vjr5, MAL-2026-6186 | Malicious | Not scored | 19 Jun, 2026 | npm electron-internal-utils |
Malicious release: Malicious code in eyee (npm) MAL-2026-6189 | Malicious | Not scored | 19 Jun, 2026 | npm eyee |
Malicious release: Malicious code in portloop (npm) MAL-2026-6194 | Malicious | Not scored | 19 Jun, 2026 | npm portloop |
Malicious release: Malicious code in ts-linter-builders (npm) GHSA-4g6m-jp93-p5x7, MAL-2026-6195 | Malicious | Not scored | 19 Jun, 2026 | npm ts-linter-builders |
Malicious release: Malicious code in eslint-helper-1 (npm) GHSA-35c7-535m-jhv6, MAL-2026-6188 | Malicious | Not scored | 19 Jun, 2026 | npm eslint-helper-1 |
Malicious release: Malicious code in mjs-eslint-helper (npm) GHSA-qhjh-jf49-fm8p, MAL-2026-6190 | Malicious | Not scored | 19 Jun, 2026 | npm mjs-eslint-helper |
Malicious release: Malicious code in eslint-helper (npm) GHSA-m23v-7h8v-6mp4, MAL-2026-6187 | Malicious | Not scored | 19 Jun, 2026 | npm eslint-helper |
Malicious release: Malicious code in node-vfs-polyfill (npm) GHSA-89vx-wfvc-j58f, MAL-2026-6143 | Malicious | Not scored | 18 Jun, 2026 | npm node-vfs-polyfill |
Malicious release: Malicious code in db-connector-log (npm) GHSA-w7hw-9wmw-hj5w, MAL-2026-6142 | Malicious | Not scored | 18 Jun, 2026 | npm db-connector-log |
Malicious release: Malicious code in runtime-query (npm) GHSA-vh6x-853w-4qvp, MAL-2026-6144 | Malicious | Not scored | 18 Jun, 2026 | npm runtime-query |
Malicious release: Malicious code in clx-cookie-signature (npm) GHSA-vwwm-x6xj-cfmf, MAL-2026-6141 | Malicious | Not scored | 18 Jun, 2026 | npm clx-cookie-signature |
Malicious release: Malicious code in @httpactions/strict-uri-encode (npm) MAL-2026-6140 | Malicious | Not scored | 18 Jun, 2026 | npm @httpactions/strict-uri-encode |
Malicious release: Malicious code in @httpactions/encode-url (npm) MAL-2026-6139 | Malicious | Not scored | 18 Jun, 2026 | npm @httpactions/encode-url |
Malicious release: Malicious code in @gbrlxvi/ts-project-lint (npm) GHSA-m526-p8gm-4wxg, MAL-2026-6121 | Malicious | Not scored | 18 Jun, 2026 | npm @gbrlxvi/ts-project-lint |
Malicious release: Malicious code in react-error-lint (npm) MAL-2026-6137 | Malicious | Not scored | 18 Jun, 2026 | npm react-error-lint |
Malicious release: Malicious code in ratelimitsucks (npm) GHSA-x94f-fgw2-crm2, MAL-2026-6135 | Malicious | Not scored | 18 Jun, 2026 | npm ratelimitsucks |
Malicious release: Malicious code in ratelimitsucks6 (npm) GHSA-h4fw-phfm-q23v, MAL-2026-6136 | Malicious | Not scored | 18 Jun, 2026 | npm ratelimitsucks6 |
Malicious release: Malicious code in abuden221 (npm) GHSA-3w26-cvrp-g5hj, MAL-2026-6130 | Malicious | Not scored | 18 Jun, 2026 | npm abuden221 |
Malicious release: Malicious code in abuden22 (npm) GHSA-x2v8-78v8-9pq4, MAL-2026-6129 | Malicious | Not scored | 18 Jun, 2026 | npm abuden22 |
Malicious release: Malicious code in abuden218 (npm) GHSA-rjwh-287v-qm8m, MAL-2026-6128 | Malicious | Not scored | 18 Jun, 2026 | npm abuden218 |
Malicious release: Malicious code in panrouter-admin (npm) MAL-2026-6134 | Malicious | Not scored | 18 Jun, 2026 | npm panrouter-admin |
Malicious release: Malicious code in panrouter (npm) MAL-2026-6133 | Malicious | Not scored | 18 Jun, 2026 | npm panrouter |
Malicious release: Malicious code in @onum-releases/utils (npm) MAL-2026-6127 | Malicious | Not scored | 18 Jun, 2026 | npm @onum-releases/utils |