Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in contoso-login-sim-loader (npm) MAL-2026-17322 | Malicious | Not scored | 30 Sep, 2026 | npm contoso-login-sim-loader |
Malicious release: Malicious code in cdn-img-fetch (npm) GHSA-v3rj-w7v4-jcfx, MAL-2026-17320 | Malicious | Not scored | 30 Sep, 2026 | npm cdn-img-fetch |
Malicious release: Malicious code in cortana-md-engine (npm) MAL-2026-17323 | Malicious | Not scored | 30 Sep, 2026 | npm cortana-md-engine |
Malicious release: Malicious code in chaienv (npm) MAL-2026-17321 | Malicious | Not scored | 30 Sep, 2026 | npm chaienv |
Malicious release: Malicious code in booking-eligibility (npm) MAL-2026-17316 | Malicious | Not scored | 30 Sep, 2026 | npm booking-eligibility |
Malicious release: Malicious code in developmentstelemetry (npm) MAL-2026-17318 | Malicious | Not scored | 30 Sep, 2026 | npm developmentstelemetry |
Malicious release: Malicious code in booking-tasks (npm) MAL-2026-17317 | Malicious | Not scored | 30 Sep, 2026 | npm booking-tasks |
Malicious release: Malicious code in pixsvg (npm) MAL-2026-17313 | Malicious | Not scored | 30 Sep, 2026 | npm pixsvg |
Malicious release: Malicious code in json-bigint-rs (npm) MAL-2026-17312 | Malicious | Not scored | 30 Sep, 2026 | npm json-bigint-rs |
Malicious release: Malicious code in test-supply-npm-lib-4 (npm) MAL-2026-17314 | Malicious | Not scored | 30 Sep, 2026 | npm test-supply-npm-lib-4 |
Malicious release: Malicious code in itsmeeaizat-bailey (npm) GHSA-r64h-xc26-m8ww, MAL-2026-17311 | Malicious | Not scored | 30 Sep, 2026 | npm itsmeeaizat-bailey |
Malicious release: Malicious code in esm-dotenv (npm) MAL-2026-17305 | Malicious | Not scored | 30 Sep, 2026 | npm esm-dotenv |
Malicious release: Malicious code in stestenv (npm) MAL-2026-17309 | Malicious | Not scored | 30 Sep, 2026 | npm stestenv |
Malicious release: Malicious code in tailwind-forms-kit (npm) MAL-2026-17310 | Malicious | Not scored | 30 Sep, 2026 | npm tailwind-forms-kit |
Malicious release: Malicious code in fabric-mod-utils (npm) MAL-2026-17307 | Malicious | Not scored | 30 Sep, 2026 | npm fabric-mod-utils |
Malicious release: Malicious code in mfahelper (npm) GHSA-9f55-6cf9-3pgw, MAL-2026-17308 | Malicious | Not scored | 30 Sep, 2026 | npm mfahelper |
Malicious release: Malicious code in solidity-lock (npm) MAL-2026-17302 | Malicious | Not scored | 30 Sep, 2026 | npm solidity-lock |
Malicious release: Malicious code in web-vitals-polyfill-core-v1 (npm) GHSA-h475-44q2-vfjx, MAL-2026-17303 | Malicious | Not scored | 30 Sep, 2026 | npm web-vitals-polyfill-core-v1 |
Malicious release: Malicious code in future-scripts (npm) MAL-2026-17418 | Malicious | Not scored | 30 Sep, 2026 | npm future-scripts |
Malicious release: Malicious code in fs-commons (npm) MAL-2026-17301 | Malicious | Not scored | 29 Sep, 2026 | npm fs-commons |
Malicious release: Malicious code in common-fs (npm) MAL-2026-17300 | Malicious | Not scored | 29 Sep, 2026 | npm common-fs |
Malicious release: Malicious code in test-agency-assignment-01 (npm) MAL-2026-17296 | Malicious | Not scored | 29 Sep, 2026 | npm test-agency-assignment-01 |
Malicious release: Malicious code in test-agency-assignment-02 (npm) MAL-2026-17297 | Malicious | Not scored | 29 Sep, 2026 | npm test-agency-assignment-02 |
Malicious release: Malicious code in test-agency-assign (npm) MAL-2026-17295 | Malicious | Not scored | 29 Sep, 2026 | npm test-agency-assign |
Malicious release: Malicious code in testosu8887 (npm) MAL-2026-17299 | Malicious | Not scored | 29 Sep, 2026 | npm testosu8887 |
Malicious release: Malicious code in testosu888 (npm) MAL-2026-17298 | Malicious | Not scored | 29 Sep, 2026 | npm testosu888 |
Malicious release: Malicious code in @selfpentest/eslint-pentest-plugin (npm) MAL-2026-17293 | Malicious | Not scored | 29 Sep, 2026 | npm @selfpentest/eslint-pentest-plugin |
Malicious release: Malicious code in @selfpentest/bin-confusion (npm) MAL-2026-17292 | Malicious | Not scored | 29 Sep, 2026 | npm @selfpentest/bin-confusion |
Malicious release: Malicious code in @rutxploit-sec/waves-icons (npm) MAL-2026-17291 | Malicious | Not scored | 29 Sep, 2026 | npm @rutxploit-sec/waves-icons |
Malicious release: Malicious code in @rutxploit-sec/subsplash-google-tag-manager (npm) MAL-2026-17289 | Malicious | Not scored | 29 Sep, 2026 | npm @rutxploit-sec/subsplash-google-tag-manager |
Malicious release: Malicious code in @rutxploit-sec/subsplash-canny (npm) MAL-2026-17288 | Malicious | Not scored | 29 Sep, 2026 | npm @rutxploit-sec/subsplash-canny |
Malicious release: Malicious code in @rutxploit-sec/waves-button-poc (npm) MAL-2026-17290 | Malicious | Not scored | 29 Sep, 2026 | npm @rutxploit-sec/waves-button-poc |
Malicious release: Malicious code in @chatunity/baileys (npm) GHSA-2vxg-pmhf-2c8r, MAL-2026-17287 | Malicious | Not scored | 29 Sep, 2026 | npm @chatunity/baileys |
Malicious release: Malicious code in @akapaki/baileys (npm) GHSA-gxxr-g857-qmrh, MAL-2026-17285 | Malicious | Not scored | 29 Sep, 2026 | npm @akapaki/baileys |
Malicious release: Malicious code in fabric-loader-core (npm) MAL-2026-17306 | Malicious | Not scored | 29 Sep, 2026 | npm fabric-loader-core |
Malicious release: Malicious code in sk-lib-enc (npm) GHSA-jcvm-p983-rr37, MAL-2026-17284 | Malicious | Not scored | 29 Sep, 2026 | npm sk-lib-enc |
Malicious release: Malicious code in @xoxo-momo/kit (npm) GHSA-668x-2p2f-6963, MAL-2026-17283 | Malicious | Not scored | 29 Sep, 2026 | npm @xoxo-momo/kit |
Malicious release: Malicious code in @hrmony/hyper-json-builder (npm) GHSA-r476-wfgx-8rc7, MAL-2026-17282 | Malicious | Not scored | 29 Sep, 2026 | npm @hrmony/hyper-json-builder |
Malicious release: Malicious code in @hrmony/kit-1 (npm) MAL-2026-17264 | Malicious | Not scored | 29 Sep, 2026 | npm @hrmony/kit-1 |
Malicious release: Malicious code in @hrmony/kit (npm) MAL-2026-17263 | Malicious | Not scored | 29 Sep, 2026 | npm @hrmony/kit |
Malicious release: Malicious code in @hrmony/kit-4 (npm) MAL-2026-17265 | Malicious | Not scored | 29 Sep, 2026 | npm @hrmony/kit-4 |
Malicious release: Malicious code in @hrmony/kit-5 (npm) GHSA-96c4-q73c-c32q, MAL-2026-17266 | Malicious | Not scored | 29 Sep, 2026 | npm @hrmony/kit-5 |
Malicious release: Malicious code in @hrmony/benefit-essenszuschuss (npm) GHSA-2c72-pm8g-m65j, MAL-2026-17253 | Malicious | Not scored | 29 Sep, 2026 | npm @hrmony/benefit-essenszuschuss |
Malicious release: Malicious code in @hrmony/account-management (npm) GHSA-ppvh-5qcf-3gvr, MAL-2026-17249 | Malicious | Not scored | 29 Sep, 2026 | npm @hrmony/account-management |
Malicious release: Malicious code in @hrmony/app-gateway-templates (npm) GHSA-52pw-jwv9-q65v, MAL-2026-17251 | Malicious | Not scored | 29 Sep, 2026 | npm @hrmony/app-gateway-templates |
Malicious release: Malicious code in @hrmony/interfaces (npm) GHSA-h2q3-6wwv-v7c8, MAL-2026-17262 | Malicious | Not scored | 29 Sep, 2026 | npm @hrmony/interfaces |
Malicious release: Malicious code in @hrmony/benefit-internetzuschuss (npm) GHSA-784r-8wmx-42h3, MAL-2026-17254 | Malicious | Not scored | 29 Sep, 2026 | npm @hrmony/benefit-internetzuschuss |
Malicious release: Malicious code in @hrmony/cdk-constructs (npm) GHSA-h9qw-wcm3-qrr8, MAL-2026-17258 | Malicious | Not scored | 29 Sep, 2026 | npm @hrmony/cdk-constructs |
Malicious release: Malicious code in @hrmony/benefit-mobilitaet (npm) GHSA-87h6-fqj7-r5rw, MAL-2026-17255 | Malicious | Not scored | 29 Sep, 2026 | npm @hrmony/benefit-mobilitaet |
Malicious release: Malicious code in @hrmony/organisationsverwaltung (npm) GHSA-gxrr-r3q5-4429, MAL-2026-17270 | Malicious | Not scored | 29 Sep, 2026 | npm @hrmony/organisationsverwaltung |