Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in tracing-str (npm) GHSA-f25x-c4qf-8xxp, MAL-2026-6894 | Malicious | Not scored | 06 Jul, 2026 | npm tracing-str |
Malicious release: Malicious code in tailwindcss-svg-helper (npm) GHSA-m4rw-xr9m-h8cr, MAL-2026-6892 | Malicious | Not scored | 06 Jul, 2026 | npm tailwindcss-svg-helper |
Malicious release: Malicious code in tailwindcss-fonttype-inter (npm) GHSA-x3c6-5rx7-6c3p, MAL-2026-6889 | Malicious | Not scored | 06 Jul, 2026 | npm tailwindcss-fonttype-inter |
Malicious release: Malicious code in tailwindcss-framer-motion (npm) GHSA-w94v-484j-rqjx, MAL-2026-6891 | Malicious | Not scored | 06 Jul, 2026 | npm tailwindcss-framer-motion |
Malicious release: Malicious code in st-biginteger (npm) GHSA-2652-pqcw-rfg5, MAL-2026-6880 | Malicious | Not scored | 06 Jul, 2026 | npm st-biginteger |
Malicious release: Malicious code in sleek-pretty (npm) GHSA-38w9-552m-96hh, MAL-2026-6878 | Malicious | Not scored | 06 Jul, 2026 | npm sleek-pretty |
Malicious release: Malicious code in stacknova (npm) GHSA-5cpm-r2cm-wpjc, MAL-2026-6882 | Malicious | Not scored | 06 Jul, 2026 | npm stacknova |
Malicious release: Malicious code in sol-sdk (npm) GHSA-j3cf-6g4r-crmv, MAL-2026-6879 | Malicious | Not scored | 06 Jul, 2026 | npm sol-sdk |
Malicious release: Malicious code in tailwind-fonttype-inter (npm) GHSA-4h59-rc9x-8g35, MAL-2026-6886 | Malicious | Not scored | 06 Jul, 2026 | npm tailwind-fonttype-inter |
Malicious release: Malicious code in tailstyle-core (npm) GHSA-6wvg-r7v4-jm68, MAL-2026-6885 | Malicious | Not scored | 06 Jul, 2026 | npm tailstyle-core |
Malicious release: Malicious code in syncora (npm) GHSA-2xgm-25c8-fggh, MAL-2026-6884 | Malicious | Not scored | 06 Jul, 2026 | npm syncora |
Malicious release: Malicious code in styled-text-logger (npm) GHSA-676w-w872-57p4, MAL-2026-6883 | Malicious | Not scored | 06 Jul, 2026 | npm styled-text-logger |
Malicious release: Malicious code in tailwind-scroller (npm) GHSA-x935-j33v-9678, MAL-2026-6887 | Malicious | Not scored | 06 Jul, 2026 | npm tailwind-scroller |
Malicious release: Malicious code in secure-box (npm) GHSA-q75v-v55m-r6v2, MAL-2026-6875 | Malicious | Not scored | 06 Jul, 2026 | npm secure-box |
Malicious release: Malicious code in st-bigintr (npm) GHSA-vvxr-vc6m-w98j, MAL-2026-6881 | Malicious | Not scored | 06 Jul, 2026 | npm st-bigintr |
Malicious release: Malicious code in sjs-builder (npm) GHSA-27jm-f99f-wqr4, MAL-2026-6876 | Malicious | Not scored | 06 Jul, 2026 | npm sjs-builder |
Malicious release: Malicious code in sjs-builders (npm) GHSA-55q4-68jc-wrgw, MAL-2026-6877 | Malicious | Not scored | 06 Jul, 2026 | npm sjs-builders |
Malicious release: Malicious code in router-kit (npm) GHSA-fgc2-8wjr-56hg, MAL-2026-6873 | Malicious | Not scored | 06 Jul, 2026 | npm router-kit |
Malicious release: Malicious code in safe-validate (npm) GHSA-xvj3-jjxg-v74h, MAL-2026-6874 | Malicious | Not scored | 06 Jul, 2026 | npm safe-validate |
Malicious release: Malicious code in react-svg-render (npm) GHSA-h2hr-f82c-f7h5, MAL-2026-6870 | Malicious | Not scored | 06 Jul, 2026 | npm react-svg-render |
Malicious release: Malicious code in react-native-template-my-starter (npm) GHSA-7p9r-785r-fg9p, MAL-2026-6869 | Malicious | Not scored | 06 Jul, 2026 | npm react-native-template-my-starter |
Malicious release: Malicious code in pretty-pino-logger (npm) GHSA-9vrr-rpr8-7hfj, MAL-2026-6867 | Malicious | Not scored | 06 Jul, 2026 | npm pretty-pino-logger |
Malicious release: Malicious code in pretty-pino-loggers (npm) GHSA-vhw2-mvjh-m4gr, MAL-2026-6868 | Malicious | Not scored | 06 Jul, 2026 | npm pretty-pino-loggers |
Malicious release: Malicious code in prettier-logger (npm) GHSA-6wq6-hvcw-xmcx, MAL-2026-6866 | Malicious | Not scored | 06 Jul, 2026 | npm prettier-logger |
Malicious release: Malicious code in polymarket-onchain-plugin (npm) GHSA-29mh-pwqh-6586, MAL-2026-6864 | Malicious | Not scored | 06 Jul, 2026 | npm polymarket-onchain-plugin |
Malicious release: Malicious code in pino-utils (npm) GHSA-jwwm-v6rr-f5cv, MAL-2026-6863 | Malicious | Not scored | 06 Jul, 2026 | npm pino-utils |
Malicious release: Malicious code in pino-pretty-logs (npm) GHSA-7cfh-3cj9-3fc3, MAL-2026-6862 | Malicious | Not scored | 06 Jul, 2026 | npm pino-pretty-logs |
Malicious release: Malicious code in polymarket-onchain-sdk (npm) GHSA-89w2-qgj2-9f2w, MAL-2026-6865 | Malicious | Not scored | 06 Jul, 2026 | npm polymarket-onchain-sdk |
Malicious release: Malicious code in picocolor-logger (npm) GHSA-jp9j-33xg-wvpq, MAL-2026-6861 | Malicious | Not scored | 06 Jul, 2026 | npm picocolor-logger |
Malicious release: Malicious code in peptideenv (npm) GHSA-x6qh-369w-8jhf, MAL-2026-6860 | Malicious | Not scored | 06 Jul, 2026 | npm peptideenv |
Malicious release: Malicious code in lint-builds (npm) GHSA-3cjq-q62g-3hf2, MAL-2026-6843 | Malicious | Not scored | 06 Jul, 2026 | npm lint-builds |
Malicious release: Malicious code in older_morgan (npm) GHSA-3h54-5c65-vwjj, MAL-2026-6859 | Malicious | Not scored | 06 Jul, 2026 | npm older_morgan |
Malicious release: Malicious code in npm-eslint-helper (npm) GHSA-74p5-mhgm-r8hr, MAL-2026-6858 | Malicious | Not scored | 06 Jul, 2026 | npm npm-eslint-helper |
Malicious release: Malicious code in npm-doc-dev (npm) GHSA-m89x-q3jv-q5q2, MAL-2026-6857 | Malicious | Not scored | 06 Jul, 2026 | npm npm-doc-dev |
Malicious release: Malicious code in node-env-detector (npm) GHSA-q48r-9hm8-j2j5, MAL-2026-6856 | Malicious | Not scored | 06 Jul, 2026 | npm node-env-detector |
Malicious release: Malicious code in df-vision (npm) GHSA-wvvx-jr39-8g7j, MAL-2026-6834 | Malicious | Not scored | 06 Jul, 2026 | npm df-vision |
Malicious release: Malicious code in debug-glitzs (npm) GHSA-f862-62jq-qjhx, MAL-2026-6833 | Malicious | Not scored | 06 Jul, 2026 | npm debug-glitzs |
Malicious release: Malicious code in next-bignumber.js (npm) GHSA-8vr6-7cjp-qgrj, MAL-2026-6855 | Malicious | Not scored | 06 Jul, 2026 | npm next-bignumber.js |
Malicious release: Malicious code in color-logger-console (npm) GHSA-f8q4-69r9-2qv9, MAL-2026-6831 | Malicious | Not scored | 06 Jul, 2026 | npm color-logger-console |
Malicious release: Malicious code in lint-null (npm) GHSA-vp9h-qwwx-q9rx, MAL-2026-6846 | Malicious | Not scored | 06 Jul, 2026 | npm lint-null |
Malicious release: Malicious code in linter-entry (npm) GHSA-wf2v-82jg-mw7v, MAL-2026-6847 | Malicious | Not scored | 06 Jul, 2026 | npm linter-entry |
Malicious release: Malicious code in modulyn (npm) GHSA-465x-gj74-mw3m, MAL-2026-6854 | Malicious | Not scored | 06 Jul, 2026 | npm modulyn |
Malicious release: Malicious code in chalki-pretty (npm) GHSA-7fqr-fv9q-43p6, MAL-2026-6829 | Malicious | Not scored | 06 Jul, 2026 | npm chalki-pretty |
Malicious release: Malicious code in metrica-node (npm) GHSA-9qp6-pr3p-mm88, MAL-2026-6852 | Malicious | Not scored | 06 Jul, 2026 | npm metrica-node |
Malicious release: Malicious code in chalk-pro-logger (npm) GHSA-h8jx-qfr4-5q9r, MAL-2026-6828 | Malicious | Not scored | 06 Jul, 2026 | npm chalk-pro-logger |
Malicious release: Malicious code in js-unimode (npm) GHSA-q6h9-xqgf-q8rp, MAL-2026-6840 | Malicious | Not scored | 06 Jul, 2026 | npm js-unimode |
Malicious release: Malicious code in chai-guard (npm) GHSA-29vw-5q5r-8jpw, MAL-2026-6827 | Malicious | Not scored | 06 Jul, 2026 | npm chai-guard |
Malicious release: Malicious code in hjs-biginteger (npm) GHSA-375r-m6vq-m5qp, MAL-2026-6838 | Malicious | Not scored | 06 Jul, 2026 | npm hjs-biginteger |
Malicious release: Malicious code in mjs-biginteger (npm) GHSA-798w-xm3v-cfx3, MAL-2026-6853 | Malicious | Not scored | 06 Jul, 2026 | npm mjs-biginteger |
Malicious release: Malicious code in log-format-thread (npm) GHSA-fw7h-6mmw-4jjr, MAL-2026-6848 | Malicious | Not scored | 06 Jul, 2026 | npm log-format-thread |