Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in logger-beauty (npm) GHSA-x3x7-mgj2-qg5x, MAL-2026-6850 | Malicious | Not scored | 06 Jul, 2026 | npm logger-beauty |
Malicious release: Malicious code in log-upgrade (npm) GHSA-xf9v-w8wv-g9r4, MAL-2026-6849 | Malicious | Not scored | 06 Jul, 2026 | npm log-upgrade |
Malicious release: Malicious code in metrica-chain (npm) GHSA-xwqp-v7wh-px47, MAL-2026-6851 | Malicious | Not scored | 06 Jul, 2026 | npm metrica-chain |
Malicious release: Malicious code in lint-builders (npm) GHSA-pgr4-r9gw-w9wm, MAL-2026-6842 | Malicious | Not scored | 06 Jul, 2026 | npm lint-builders |
Malicious release: Malicious code in lint-nule (npm) GHSA-2mww-6x37-53g4, MAL-2026-6844 | Malicious | Not scored | 06 Jul, 2026 | npm lint-nule |
Malicious release: Malicious code in lint-nuler (npm) GHSA-g4mq-hwwp-q536, MAL-2026-6845 | Malicious | Not scored | 06 Jul, 2026 | npm lint-nuler |
Malicious release: Malicious code in eth-tick (npm) GHSA-cqqh-cj4r-mwfr, MAL-2026-6837 | Malicious | Not scored | 06 Jul, 2026 | npm eth-tick |
Malicious release: Malicious code in eslint-vite (npm) GHSA-mhv7-p7g8-cwpj, MAL-2026-6836 | Malicious | Not scored | 06 Jul, 2026 | npm eslint-vite |
Malicious release: Malicious code in es-lint-entry (npm) GHSA-pxpm-6pvw-32fv, MAL-2026-6835 | Malicious | Not scored | 06 Jul, 2026 | npm es-lint-entry |
Malicious release: Malicious code in jsonupper (npm) GHSA-7g6j-h5h4-7wjx, MAL-2026-6841 | Malicious | Not scored | 06 Jul, 2026 | npm jsonupper |
Malicious release: Malicious code in hjs-lint-builders (npm) GHSA-q5hg-f596-vmc7, MAL-2026-6839 | Malicious | Not scored | 06 Jul, 2026 | npm hjs-lint-builders |
Malicious release: Malicious code in express-guardrail (npm) GHSA-62qq-cf7w-23hx, MAL-2026-6821 | Malicious | Not scored | 06 Jul, 2026 | npm express-guardrail |
Malicious release: Malicious code in grid-settings-align (npm) GHSA-83fv-8xwv-vc39, MAL-2026-6824 | Malicious | Not scored | 06 Jul, 2026 | npm grid-settings-align |
Malicious release: Malicious code in fastnodemailer (npm) GHSA-9w84-x6cf-c2vq, MAL-2026-6822 | Malicious | Not scored | 06 Jul, 2026 | npm fastnodemailer |
Malicious release: Malicious code in graphpilot (npm) GHSA-whwc-xphc-9237, MAL-2026-6823 | Malicious | Not scored | 06 Jul, 2026 | npm graphpilot |
Malicious release: Malicious code in env-axios (npm) GHSA-jm6w-g7wc-hq29, MAL-2026-6818 | Malicious | Not scored | 06 Jul, 2026 | npm env-axios |
Malicious release: Malicious code in elevate-log (npm) GHSA-79rp-3jfj-qmwv, MAL-2026-6815 | Malicious | Not scored | 06 Jul, 2026 | npm elevate-log |
Malicious release: Malicious code in express-dotenv (npm) GHSA-f463-5xm8-8r3r, MAL-2026-6820 | Malicious | Not scored | 06 Jul, 2026 | npm express-dotenv |
Malicious release: Malicious code in custom-log-viewer (npm) GHSA-55vw-c9x7-q7fh, MAL-2026-6813 | Malicious | Not scored | 06 Jul, 2026 | npm custom-log-viewer |
Malicious release: Malicious code in es-lint-builders (npm) GHSA-qw6m-j4m4-cqcg, MAL-2026-6819 | Malicious | Not scored | 06 Jul, 2026 | npm es-lint-builders |
Malicious release: Malicious code in emojiprint-prettier (npm) GHSA-8hhq-mc35-6xjv, MAL-2026-6817 | Malicious | Not scored | 06 Jul, 2026 | npm emojiprint-prettier |
Malicious release: Malicious code in bootstrap-utils (npm) GHSA-jgjc-8w9g-8wmq, MAL-2026-6807 | Malicious | Not scored | 06 Jul, 2026 | npm bootstrap-utils |
Malicious release: Malicious code in emojiprint-logger (npm) GHSA-8hx2-v9q6-66vf, MAL-2026-6816 | Malicious | Not scored | 06 Jul, 2026 | npm emojiprint-logger |
Malicious release: Malicious code in devkit-scripts (npm) GHSA-r39w-2c8m-qcw8, MAL-2026-6814 | Malicious | Not scored | 06 Jul, 2026 | npm devkit-scripts |
Malicious release: Malicious code in chain-await-test (npm) GHSA-qvfh-cwr9-576c, MAL-2026-6808 | Malicious | Not scored | 06 Jul, 2026 | npm chain-await-test |
Malicious release: Malicious code in cookie-ease (npm) GHSA-prqq-9q57-x2pq, MAL-2026-6812 | Malicious | Not scored | 06 Jul, 2026 | npm cookie-ease |
Malicious release: Malicious code in chalks-logger (npm) GHSA-vc46-r5xf-fw6g, MAL-2026-6811 | Malicious | Not scored | 06 Jul, 2026 | npm chalks-logger |
Malicious release: Malicious code in chalk-logger-prettier (npm) GHSA-5qw7-4jj7-j7vf, MAL-2026-6809 | Malicious | Not scored | 06 Jul, 2026 | npm chalk-logger-prettier |
Malicious release: Malicious code in chalk-prettier (npm) GHSA-29vc-mxj2-mvrg, MAL-2026-6810 | Malicious | Not scored | 06 Jul, 2026 | npm chalk-prettier |
Malicious release: Malicious code in bn-eslint.js (npm) GHSA-r34w-457x-jvh6, MAL-2026-6805 | Malicious | Not scored | 06 Jul, 2026 | npm bn-eslint.js |
Malicious release: Malicious code in bigint.os (npm) GHSA-p7gp-vr2w-gxcq, MAL-2026-6804 | Malicious | Not scored | 06 Jul, 2026 | npm bigint.os |
Malicious release: Malicious code in bn-math (npm) GHSA-mwmc-95gf-x6p2, MAL-2026-6806 | Malicious | Not scored | 06 Jul, 2026 | npm bn-math |
Malicious release: Malicious code in big256-ts (npm) GHSA-3w5h-8px3-5vhp, MAL-2026-6803 | Malicious | Not scored | 06 Jul, 2026 | npm big256-ts |
Malicious release: Malicious code in big-numerator (npm) GHSA-72c2-45g2-2948, MAL-2026-6802 | Malicious | Not scored | 06 Jul, 2026 | npm big-numerator |
Malicious release: Malicious code in big-numer (npm) GHSA-j5jp-xc7m-26vm, MAL-2026-6800 | Malicious | Not scored | 06 Jul, 2026 | npm big-numer |
Malicious release: Malicious code in big-numerate (npm) GHSA-wv8c-r64j-wqqm, MAL-2026-6801 | Malicious | Not scored | 06 Jul, 2026 | npm big-numerate |
Malicious release: Malicious code in argonflux (npm) GHSA-5x7q-hcgw-g7x2, MAL-2026-6798 | Malicious | Not scored | 06 Jul, 2026 | npm argonflux |
Malicious release: Malicious code in awesome-cli-logger (npm) GHSA-4j38-wfq5-cfxw, MAL-2026-6799 | Malicious | Not scored | 06 Jul, 2026 | npm awesome-cli-logger |
Malicious release: Malicious code in rollup-plugin-polyfill-handler (npm) GHSA-h89m-q7rj-4hxm, MAL-2026-6826 | Malicious | Not scored | 06 Jul, 2026 | npm rollup-plugin-polyfill-handler |
Malicious release: Malicious code in react-next-dom (npm) GHSA-99rj-fjph-w44m, MAL-2026-6825 | Malicious | Not scored | 06 Jul, 2026 | npm react-next-dom |
Malicious release: Malicious code in mongoose-lean-hooks (npm) GHSA-98h3-p825-wwhh, MAL-2026-6797 | Malicious | Not scored | 06 Jul, 2026 | npm mongoose-lean-hooks |
react-dev-utils openBrowser permits command injection on macOS CVE-2026-14802, GHSA-g9g6-gvq9-j4vp | Medium | 2.1% | 06 Jul, 2026 | npm react-dev-utils |
Malicious release: Malicious code in internallib_v234 (npm) MAL-2026-6796 | Malicious | Not scored | 06 Jul, 2026 | npm internallib_v234 |
Malicious release: Malicious code in neon-terminal (npm) MAL-2026-6793 | Malicious | Not scored | 06 Jul, 2026 | npm neon-terminal |
Malicious release: Malicious code in zod-pino434 (npm) GHSA-p9vh-jrw3-gv43, MAL-2026-6794 | Malicious | Not scored | 06 Jul, 2026 | npm zod-pino434 |
Malicious release: Malicious code in zod-pino444 (npm) GHSA-74m6-53cg-5gp3, MAL-2026-6795 | Malicious | Not scored | 06 Jul, 2026 | npm zod-pino444 |
Malicious release: Malicious code in @idms-corp/auth-ui (npm) GHSA-33w2-g8q6-86xm, MAL-2026-10224 | Malicious | Not scored | 06 Jul, 2026 | npm @idms-corp/auth-ui |
Malicious release: Malicious code in pinokio-redis (npm) GHSA-3gfp-7x5j-mp63, MAL-2026-6938 | Malicious | Not scored | 06 Jul, 2026 | npm pinokio-redis |
Malicious release: Malicious code in sams-sr-sdk-h5 (npm) GHSA-3r2r-29px-gqp6, MAL-2026-10233 | Malicious | Not scored | 06 Jul, 2026 | npm sams-sr-sdk-h5 |
Malicious release: Malicious code in @flex-ng/filter-pipe (npm) GHSA-4wmg-pwv3-88v4, MAL-2026-10222 | Malicious | Not scored | 06 Jul, 2026 | npm @flex-ng/filter-pipe |