Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in portal-backend (npm) GHSA-6j4w-8j7h-8c6c, MAL-2026-5781 | Malicious | Not scored | 15 Jun, 2026 | npm portal-backend |
Malicious release: Malicious code in token-prices-cron (npm) GHSA-qp5c-f568-8r3h, MAL-2026-5782 | Malicious | Not scored | 15 Jun, 2026 | npm token-prices-cron |
Malicious release: Malicious code in vaults-monitor-cron (npm) GHSA-7ff8-rw9g-fj84, MAL-2026-5784 | Malicious | Not scored | 15 Jun, 2026 | npm vaults-monitor-cron |
Malicious release: Malicious code in hemi-supply-cron (npm) GHSA-49hx-4cwp-rqgh, MAL-2026-5779 | Malicious | Not scored | 15 Jun, 2026 | npm hemi-supply-cron |
Malicious release: Malicious code in hemi-earn-actions (npm) GHSA-hjwc-fchg-m65q, MAL-2026-5778 | Malicious | Not scored | 15 Jun, 2026 | npm hemi-earn-actions |
Malicious release: Malicious code in vault-strategies (npm) GHSA-43qg-3v2q-g62x, MAL-2026-5783 | Malicious | Not scored | 15 Jun, 2026 | npm vault-strategies |
Malicious release: Malicious code in ve-hemi-rewards (npm) GHSA-wx43-hfx3-xw46, MAL-2026-5785 | Malicious | Not scored | 15 Jun, 2026 | npm ve-hemi-rewards |
Malicious release: Malicious code in unico-android (npm) MAL-2026-5829 | Malicious | Not scored | 15 Jun, 2026 | npm unico-android |
Malicious release: Malicious code in unicocheck-ios (npm) MAL-2026-5831 | Malicious | Not scored | 15 Jun, 2026 | npm unicocheck-ios |
Malicious release: Malicious code in unico-check (npm) MAL-2026-5830 | Malicious | Not scored | 15 Jun, 2026 | npm unico-check |
Malicious release: Malicious code in nic-datagov (npm) MAL-2026-5836 | Malicious | Not scored | 15 Jun, 2026 | npm nic-datagov |
Malicious release: Malicious code in um4r719-baileys (npm) GHSA-cfvv-rh9x-qqvj, MAL-2026-5774 | Malicious | Not scored | 15 Jun, 2026 | npm um4r719-baileys |
Malicious release: Malicious code in npx-whoami-demo (npm) GHSA-3mmq-8798-7f4v, MAL-2026-5772 | Malicious | Not scored | 14 Jun, 2026 | npm npx-whoami-demo |
Malicious release: Malicious code in ltidiconf (npm) GHSA-qv73-635h-wqmp, MAL-2026-5767 | Malicious | Not scored | 14 Jun, 2026 | npm ltidiconf |
Malicious release: Malicious code in npm-sandbox-research-e9f0 (npm) GHSA-76w8-rxxx-vjcg, MAL-2026-5762 | Malicious | Not scored | 14 Jun, 2026 | npm npm-sandbox-research-e9f0 |
Malicious release: Malicious code in npm-sandbox-ping-c8f2a (npm) GHSA-w249-c3rp-ffwq, MAL-2026-5757 | Malicious | Not scored | 14 Jun, 2026 | npm npm-sandbox-ping-c8f2a |
Malicious release: Malicious code in npm-sandbox-research-c5d6 (npm) GHSA-54f7-37vp-p38f, MAL-2026-5760 | Malicious | Not scored | 14 Jun, 2026 | npm npm-sandbox-research-c5d6 |
Malicious release: Malicious code in npm-sandbox-research-8b2f (npm) GHSA-qxgv-pg7p-c4qr, MAL-2026-5758 | Malicious | Not scored | 14 Jun, 2026 | npm npm-sandbox-research-8b2f |
Malicious release: Malicious code in npm-sandbox-research-d7e8 (npm) GHSA-r53w-2vfx-w3p4, MAL-2026-5761 | Malicious | Not scored | 14 Jun, 2026 | npm npm-sandbox-research-d7e8 |
Malicious release: Malicious code in npm-sandbox-research-g3h4 (npm) GHSA-p2j4-q5x6-2gc4, MAL-2026-5763 | Malicious | Not scored | 14 Jun, 2026 | npm npm-sandbox-research-g3h4 |
Malicious release: Malicious code in npm-sandbox-research-9c4e (npm) GHSA-rfp8-4gmx-2fhj, MAL-2026-5759 | Malicious | Not scored | 14 Jun, 2026 | npm npm-sandbox-research-9c4e |
Malicious release: Malicious code in sys-info-cli-app (npm) MAL-2026-5764 | Malicious | Not scored | 14 Jun, 2026 | npm sys-info-cli-app |
Malicious release: Malicious code in @gbrlxvi/ts-form-utils (npm) GHSA-587p-qfc4-5c3c, MAL-2026-5753 | Malicious | Not scored | 13 Jun, 2026 | npm @gbrlxvi/ts-form-utils |
Malicious release: Malicious code in patientdocuments (npm) GHSA-28q9-vg2f-r5m7, MAL-2026-5752 | Malicious | Not scored | 13 Jun, 2026 | npm patientdocuments |
Malicious release: Malicious code in mailconfirmer (npm) GHSA-4rw6-v77j-67gx, MAL-2026-5750 | Malicious | Not scored | 13 Jun, 2026 | npm mailconfirmer |
Malicious release: Malicious code in @giftyhq/widget-components (npm) MAL-2026-5747 | Malicious | Not scored | 13 Jun, 2026 | npm @giftyhq/widget-components |
Malicious release: Malicious code in oh-my-ashclaw (npm) MAL-2026-5751 | Malicious | Not scored | 13 Jun, 2026 | npm oh-my-ashclaw |
Malicious release: Malicious code in chai-utils-test (npm) MAL-2026-5748 | Malicious | Not scored | 13 Jun, 2026 | npm chai-utils-test |
Malicious release: Malicious code in @achuthvp/postinstall-poc (npm) GHSA-rpc3-vhwp-44cv, MAL-2026-5741 | Malicious | Not scored | 13 Jun, 2026 | npm @achuthvp/postinstall-poc |
Malicious release: Malicious code in 2fa-exe (npm) MAL-2026-5740 | Malicious | Not scored | 13 Jun, 2026 | npm 2fa-exe |
Malicious release: Malicious code in environment-gate (npm) GHSA-7h69-vjfv-w92w, MAL-2026-5743 | Malicious | Not scored | 13 Jun, 2026 | npm environment-gate |
Malicious release: Malicious code in oa-crm-webapi (npm) MAL-2026-5745 | Malicious | Not scored | 13 Jun, 2026 | npm oa-crm-webapi |
Malicious release: Malicious code in axl-ui (npm) GHSA-f4w9-3fvx-q5xw, MAL-2026-5742 | Malicious | Not scored | 13 Jun, 2026 | npm axl-ui |
Malicious release: Malicious code in xy-shared (npm) MAL-2026-5746 | Malicious | Not scored | 13 Jun, 2026 | npm xy-shared |
Malicious release: Malicious code in loadninja-shared (npm) GHSA-q764-9h8c-8jfr, MAL-2026-5744 | Malicious | Not scored | 13 Jun, 2026 | npm loadninja-shared |
Malicious release: Malicious code in easy-time666 (npm) GHSA-wfff-g64j-qx73, MAL-2026-5749 | Malicious | Not scored | 13 Jun, 2026 | npm easy-time666 |
Malicious release: Malicious code in sheratan_haha (npm) MAL-2026-5739 | Malicious | Not scored | 13 Jun, 2026 | npm sheratan_haha |
Malicious release: Malicious code in postcss-minify-selector-parser (npm) GHSA-3m8w-m4vc-8f58, MAL-2026-5737 | Malicious | Not scored | 13 Jun, 2026 | npm postcss-minify-selector-parser |
Malicious release: Malicious code in postinstall-logger-7x9z (npm) GHSA-j5hw-j4vj-f38v, MAL-2026-5738 | Malicious | Not scored | 13 Jun, 2026 | npm postinstall-logger-7x9z |
Malicious release: Malicious code in class-synth (npm) GHSA-c6cg-h94m-mv67, MAL-2026-5730 | Malicious | Not scored | 13 Jun, 2026 | npm class-synth |
Malicious release: Malicious code in node-multi-downloader (npm) GHSA-hmxh-99g9-4v4j, MAL-2026-5735 | Malicious | Not scored | 13 Jun, 2026 | npm node-multi-downloader |
Malicious release: Malicious code in node-denv (npm) GHSA-8mfj-gmpr-xqqr, MAL-2026-5734 | Malicious | Not scored | 13 Jun, 2026 | npm node-denv |
Malicious release: Malicious code in node-stack-frames (npm) MAL-2026-5736 | Malicious | Not scored | 13 Jun, 2026 | npm node-stack-frames |
Malicious release: Malicious code in node-app-doctor (npm) MAL-2026-5733 | Malicious | Not scored | 13 Jun, 2026 | npm node-app-doctor |
Malicious release: Malicious code in houzidawang807 (npm) GHSA-f2g2-48mf-957v, MAL-2026-5731 | Malicious | Not scored | 13 Jun, 2026 | npm houzidawang807 |
Malicious release: Malicious code in houzidawang808 (npm) GHSA-4qvg-392x-j32q, MAL-2026-5732 | Malicious | Not scored | 13 Jun, 2026 | npm houzidawang808 |
Malicious release: Malicious code in houzidawang806 (npm) GHSA-7gf8-h22p-4qr4, MAL-2026-5729 | Malicious | Not scored | 13 Jun, 2026 | npm houzidawang806 |
Malicious release: Malicious code in ecto_module (npm) GHSA-qj3m-j6gv-53pg, MAL-2026-5726 | Malicious | Not scored | 13 Jun, 2026 | npm ecto_module |
Malicious release: Malicious code in vite-config-react (npm) GHSA-9j99-p89c-pjwq, MAL-2026-5728 | Malicious | Not scored | 13 Jun, 2026 | npm vite-config-react |
Malicious release: Malicious code in vite-config-optimizer (npm) GHSA-5rwj-cgwr-q954, MAL-2026-5727 | Malicious | Not scored | 13 Jun, 2026 | npm vite-config-optimizer |