Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in carousel-controller-mixin (npm) GHSA-cm93-hx95-m69r, MAL-2026-5856 | Malicious | Not scored | 16 Jun, 2026 | npm carousel-controller-mixin |
Malicious release: Malicious code in setka-editor (npm) GHSA-4626-p8q4-554f, MAL-2026-5859 | Malicious | Not scored | 16 Jun, 2026 | npm setka-editor |
Malicious release: Malicious code in event-metrics-q3x7 (npm) GHSA-hw6h-jfr8-q9v4, MAL-2026-5857 | Malicious | Not scored | 16 Jun, 2026 | npm event-metrics-q3x7 |
Malicious release: Malicious code in metrics-pipeline-d8k2 (npm) GHSA-77q5-c2w3-pc44, MAL-2026-5858 | Malicious | Not scored | 16 Jun, 2026 | npm metrics-pipeline-d8k2 |
Malicious release: Malicious code in tailwind-typography-style (npm) GHSA-xw83-9jhm-jj7j, MAL-2026-5854 | Malicious | Not scored | 16 Jun, 2026 | npm tailwind-typography-style |
Malicious release: Malicious code in sp-api-dev-assistant-mcp-server (npm) GHSA-hgm9-w4fm-65m9, MAL-2026-5853 | Malicious | Not scored | 16 Jun, 2026 | npm sp-api-dev-assistant-mcp-server |
Malicious release: Malicious code in epm-service-module-v2 (npm) GHSA-633w-wc3j-7jrf, MAL-2026-5851 | Malicious | Not scored | 16 Jun, 2026 | npm epm-service-module-v2 |
Malicious release: Malicious code in vemos-sdk (npm) GHSA-xfv6-m3cj-53m7, MAL-2026-5855 | Malicious | Not scored | 15 Jun, 2026 | npm vemos-sdk |
Malicious release: Malicious code in richtext-editor-ui (npm) GHSA-fgqx-cjm6-75x2, MAL-2026-5852 | Malicious | Not scored | 15 Jun, 2026 | npm richtext-editor-ui |
Malicious release: Malicious code in reading-cookies (npm) GHSA-mf62-v96j-mg7g, MAL-2026-5847 | Malicious | Not scored | 15 Jun, 2026 | npm reading-cookies |
Malicious release: Malicious code in prettier_v2 (npm) GHSA-cmfj-34j9-8w66, MAL-2026-5846 | Malicious | Not scored | 15 Jun, 2026 | npm prettier_v2 |
Malicious release: Malicious code in browserslist-db-sync (npm) GHSA-mfw9-5hqc-vc53, MAL-2026-5842 | Malicious | Not scored | 15 Jun, 2026 | npm browserslist-db-sync |
Malicious release: Malicious code in prettier_v1 (npm) GHSA-q835-5j9v-22qg, MAL-2026-5845 | Malicious | Not scored | 15 Jun, 2026 | npm prettier_v1 |
Malicious release: Malicious code in slow-surf (npm) GHSA-4qxq-82wv-jq32, MAL-2026-5848 | Malicious | Not scored | 15 Jun, 2026 | npm slow-surf |
Malicious release: Malicious code in numdifftools (npm) GHSA-fv2r-6vq4-5x8r, MAL-2026-5844 | Malicious | Not scored | 15 Jun, 2026 | npm numdifftools |
Malicious release: Malicious code in chai-smart-assert (npm) GHSA-897c-qgxj-rv65, MAL-2026-5843 | Malicious | Not scored | 15 Jun, 2026 | npm chai-smart-assert |
Malicious release: Malicious code in vite-enhancer-config (npm) GHSA-gmwm-6xjg-8wxr, MAL-2026-5850 | Malicious | Not scored | 15 Jun, 2026 | npm vite-enhancer-config |
Malicious release: Malicious code in vite-configu-react (npm) GHSA-rg5g-54x4-p2gg, MAL-2026-5849 | Malicious | Not scored | 15 Jun, 2026 | npm vite-configu-react |
Malicious release: Malicious code in lab-helper (npm) GHSA-gqf6-7j7q-9x94, MAL-2026-5835 | Malicious | Not scored | 15 Jun, 2026 | npm lab-helper |
Malicious release: Malicious code in @wacrot/infra-data-kit (npm) MAL-2026-5834 | Malicious | Not scored | 15 Jun, 2026 | npm @wacrot/infra-data-kit |
Malicious release: Malicious code in tn-advertisement (npm) GHSA-96gg-hmjq-f55m, GHSA-j2c8-6hx3-7994, MAL-2026-5838, SNYK-JS-TNADVERTISEMENT-19003450 | Malicious | Not scored | 15 Jun, 2026 | npm tn-advertisement |
Malicious release: Malicious code in postcss-minify-selector (npm) GHSA-gwv6-f7j6-4xc8, MAL-2026-5837 | Malicious | Not scored | 15 Jun, 2026 | npm postcss-minify-selector |
Malicious release: Malicious code in yunxin-overmind-comment (npm) MAL-2026-5833 | Malicious | Not scored | 15 Jun, 2026 | npm yunxin-overmind-comment |
Malicious release: Malicious code in @intentsolution/database-security-scanner (npm) GHSA-gx76-7hhh-jcj2, MAL-2026-5825 | Malicious | Not scored | 15 Jun, 2026 | npm @intentsolution/database-security-scanner |
Malicious release: Malicious code in index-ulid (npm) GHSA-95pm-8vrw-2wrp, MAL-2026-5827 | Malicious | Not scored | 15 Jun, 2026 | npm index-ulid |
Malicious release: Malicious code in dms-backend (npm) MAL-2026-5826 | Malicious | Not scored | 15 Jun, 2026 | npm dms-backend |
Malicious release: Malicious code in ogd-platform (npm) MAL-2026-5828 | Malicious | Not scored | 15 Jun, 2026 | npm ogd-platform |
Malicious release: Malicious code in vend-utilities (npm) MAL-2026-5832 | Malicious | Not scored | 15 Jun, 2026 | npm vend-utilities |
Malicious release: Malicious code in cardano-addresses-docs (npm) MAL-2026-5802 | Malicious | Not scored | 15 Jun, 2026 | npm cardano-addresses-docs |
Malicious release: Malicious code in @resolvx/core (npm) GHSA-5fvj-272r-496w, MAL-2026-5798 | Malicious | Not scored | 15 Jun, 2026 | npm @resolvx/core |
Malicious release: Malicious code in boardflow (npm) GHSA-38x4-9p94-xg4p, MAL-2026-5799 | Malicious | Not scored | 15 Jun, 2026 | npm boardflow |
Malicious release: Malicious code in boardstep (npm) MAL-2026-5800 | Malicious | Not scored | 15 Jun, 2026 | npm boardstep |
Malicious release: Malicious code in flow-lending (npm) GHSA-pgcr-8w67-72j9, MAL-2026-5803 | Malicious | Not scored | 15 Jun, 2026 | npm flow-lending |
Malicious release: Malicious code in flow-lending-sdk (npm) GHSA-r79w-4mcq-g2fm, MAL-2026-5804 | Malicious | Not scored | 15 Jun, 2026 | npm flow-lending-sdk |
Malicious release: Malicious code in flowdefi (npm) GHSA-24j3-x8g2-c23q, MAL-2026-5806 | Malicious | Not scored | 15 Jun, 2026 | npm flowdefi |
Malicious release: Malicious code in surf-lending (npm) GHSA-6762-f2rg-qwfv, MAL-2026-5808 | Malicious | Not scored | 15 Jun, 2026 | npm surf-lending |
Malicious release: Malicious code in bodega-sdk (npm) GHSA-m774-6g93-j76m, MAL-2026-5801 | Malicious | Not scored | 15 Jun, 2026 | npm bodega-sdk |
Malicious release: Malicious code in flowcardano (npm) GHSA-7wqh-42c8-vqcx, MAL-2026-5805 | Malicious | Not scored | 15 Jun, 2026 | npm flowcardano |
Malicious release: Malicious code in @solana-labs/ancor (npm) GHSA-h2x5-cj9x-hvcc, MAL-2026-5786 | Malicious | Not scored | 15 Jun, 2026 | npm @solana-labs/ancor |
Malicious release: Malicious code in @solana-labs/spl-toke (npm) GHSA-6465-92w6-mgp8, MAL-2026-5787 | Malicious | Not scored | 15 Jun, 2026 | npm @solana-labs/spl-toke |
Malicious release: Malicious code in @solana-labs/web3js (npm) GHSA-pqhf-q5g8-6jpm, MAL-2026-5788 | Malicious | Not scored | 15 Jun, 2026 | npm @solana-labs/web3js |
Malicious release: Malicious code in claude-cup (npm) MAL-2026-5789 | Malicious | Not scored | 15 Jun, 2026 | npm claude-cup |
Malicious release: Malicious code in mddriver (npm) GHSA-75f4-4w6r-vvch, MAL-2026-5791 | Malicious | Not scored | 15 Jun, 2026 | npm mddriver |
Malicious release: Malicious code in neural-network-scan (npm) MAL-2026-5794 | Malicious | Not scored | 15 Jun, 2026 | npm neural-network-scan |
Malicious release: Malicious code in nativescript-swisspost-imagepicker (npm) GHSA-vcxp-rm4v-qh5h, MAL-2026-5792 | Malicious | Not scored | 15 Jun, 2026 | npm nativescript-swisspost-imagepicker |
Malicious release: Malicious code in nativescript-swisspost-pcc-creative-editor (npm) GHSA-h5g9-q449-jr2c, MAL-2026-5793 | Malicious | Not scored | 15 Jun, 2026 | npm nativescript-swisspost-pcc-creative-editor |
Malicious release: Malicious code in ldpbootstrap-jquery (npm) GHSA-2m3g-j8c8-hx83, MAL-2026-5790 | Malicious | Not scored | 15 Jun, 2026 | npm ldpbootstrap-jquery |
Malicious release: Malicious code in sam-package (npm) MAL-2026-5807 | Malicious | Not scored | 15 Jun, 2026 | npm sam-package |
Malicious release: Malicious code in field-plus (npm) GHSA-wcq8-7m2v-8r69, MAL-2026-5777 | Malicious | Not scored | 15 Jun, 2026 | npm field-plus |
Malicious release: Malicious code in ing-feat-itsme-oidc-authentication (npm) MAL-2026-5780 | Malicious | Not scored | 15 Jun, 2026 | npm ing-feat-itsme-oidc-authentication |