Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in express-timer (npm) GHSA-9vgr-cqvw-qwhx, MAL-2026-5555 | Malicious | Not scored | 11 Jun, 2026 | npm express-timer |
Malicious release: Malicious code in express-self-destruct2 (npm) GHSA-rjp6-jx87-x8x8, MAL-2026-5554 | Malicious | Not scored | 11 Jun, 2026 | npm express-self-destruct2 |
Malicious release: Malicious code in express-self-destruct (npm) GHSA-wqrx-jfhq-5hx7, MAL-2026-5553 | Malicious | Not scored | 11 Jun, 2026 | npm express-self-destruct |
Malicious release: Malicious code in india-map-react (npm) MAL-2026-5542 | Malicious | Not scored | 11 Jun, 2026 | npm india-map-react |
Malicious release: Malicious code in @w2d/web-components (npm) MAL-2026-5541 | Malicious | Not scored | 11 Jun, 2026 | npm @w2d/web-components |
Malicious release: Malicious code in jailbreak-code (npm) GHSA-fmpq-536x-fhwq, MAL-2026-5543 | Malicious | Not scored | 11 Jun, 2026 | npm jailbreak-code |
Malicious release: Malicious code in pocteszep (npm) MAL-2026-5544 | Malicious | Not scored | 11 Jun, 2026 | npm pocteszep |
Malicious release: Malicious code in @monitoring-lib/error-tracking (npm) GHSA-5g45-cfrj-qc64, MAL-2026-5540 | Malicious | Not scored | 11 Jun, 2026 | npm @monitoring-lib/error-tracking |
Malicious release: Malicious code in mermaid-v11 (npm) GHSA-xmj9-vhj4-8q6c, MAL-2026-5539 | Malicious | Not scored | 11 Jun, 2026 | npm mermaid-v11 |
Malicious release: Malicious code in @common-stack/generate-plugin (npm) GHSA-6p55-6hvr-3xmg, MAL-2026-5546 | Malicious | Not scored | 11 Jun, 2026 | npm @common-stack/generate-plugin |
Malicious release: Malicious code in @entos-ems/xerxes-client-js (npm) MAL-2026-5537 | Malicious | Not scored | 11 Jun, 2026 | npm @entos-ems/xerxes-client-js |
Malicious release: Malicious code in hex-type (npm) GHSA-jc42-pxfc-29x3, MAL-2026-5538 | Malicious | Not scored | 11 Jun, 2026 | npm hex-type |
Malicious release: Malicious code in zer0onedate (npm) MAL-2026-5535 | Malicious | Not scored | 10 Jun, 2026 | npm zer0onedate |
Malicious release: Malicious code in zer0onedatetool (npm) MAL-2026-5536 | Malicious | Not scored | 10 Jun, 2026 | npm zer0onedatetool |
Malicious release: Malicious code in @thomlecter1122/lab-helper-test (npm) GHSA-223m-fcr3-c5gg, MAL-2026-5534 | Malicious | Not scored | 10 Jun, 2026 | npm @thomlecter1122/lab-helper-test |
Malicious release: Malicious code in @coze-common/chat-area (npm) MAL-2026-5533 | Malicious | Not scored | 10 Jun, 2026 | npm @coze-common/chat-area |
Malicious release: Malicious code in chai-check-error (npm) MAL-2026-5526 | Malicious | Not scored | 10 Jun, 2026 | npm chai-check-error |
Malicious release: Malicious code in check-error-util (npm) MAL-2026-5527 | Malicious | Not scored | 10 Jun, 2026 | npm check-error-util |
Malicious release: Malicious code in websocket-slot (npm) GHSA-27vg-w6vw-2rq8, MAL-2026-5530 | Malicious | Not scored | 10 Jun, 2026 | npm websocket-slot |
Malicious release: Malicious code in @solana-labs/web3.js (npm) GHSA-v45f-fr53-php7, MAL-2026-5525 | Malicious | Not scored | 10 Jun, 2026 | npm @solana-labs/web3.js |
Malicious release: Malicious code in v018-axios-cdntest (npm) GHSA-cw6g-r53q-23c2, MAL-2026-5529 | Malicious | Not scored | 10 Jun, 2026 | npm v018-axios-cdntest |
Malicious release: Malicious code in @access-risk/browser-remedy-react (npm) MAL-2026-5520 | Malicious | Not scored | 10 Jun, 2026 | npm @access-risk/browser-remedy-react |
Malicious release: Malicious code in @helpcentre/tesco-help (npm) GHSA-5cff-qhhv-cxxw, MAL-2026-5521 | Malicious | Not scored | 10 Jun, 2026 | npm @helpcentre/tesco-help |
Malicious release: Malicious code in @orion-design-system/foundation (npm) MAL-2026-5523 | Malicious | Not scored | 10 Jun, 2026 | npm @orion-design-system/foundation |
Malicious release: Malicious code in @orion-design-system/components (npm) MAL-2026-5522 | Malicious | Not scored | 10 Jun, 2026 | npm @orion-design-system/components |
Malicious release: Malicious code in @orion-design-system/store (npm) MAL-2026-5524 | Malicious | Not scored | 10 Jun, 2026 | npm @orion-design-system/store |
Malicious release: Malicious code in events-runtime (npm) MAL-2026-5528 | Malicious | Not scored | 10 Jun, 2026 | npm events-runtime |
Malicious release: Malicious code in firefly-utilities-helper (npm) GHSA-rr4c-xp44-vvf4, MAL-2026-5517 | Malicious | Not scored | 10 Jun, 2026 | npm firefly-utilities-helper |
Malicious release: Malicious code in yelp-react-component-chaos (npm) GHSA-3chg-w9g2-778v, MAL-2026-5515 | Malicious | Not scored | 10 Jun, 2026 | npm yelp-react-component-chaos |
Malicious release: Malicious code in tailwind-animator (npm) GHSA-5hg6-wrf8-9hhr, MAL-2026-5516 | Malicious | Not scored | 10 Jun, 2026 | npm tailwind-animator |
Malicious release: Malicious code in crypto-promise-js (npm) GHSA-qjp2-ccc7-vjv9, MAL-2026-5507 | Malicious | Not scored | 10 Jun, 2026 | npm crypto-promise-js |
Malicious release: Malicious code in anaylze-json (npm) GHSA-wjgw-rm6m-wgr3, MAL-2026-5505 | Malicious | Not scored | 10 Jun, 2026 | npm anaylze-json |
Malicious release: Malicious code in nw-demo-utils (npm) GHSA-q849-7xxq-hh4g, MAL-2026-5511 | Malicious | Not scored | 10 Jun, 2026 | npm nw-demo-utils |
Malicious release: Malicious code in @easytipsportal/pos-adapters (npm) GHSA-8qfp-2r92-r39w, MAL-2026-5504 | Malicious | Not scored | 10 Jun, 2026 | npm @easytipsportal/pos-adapters |
Malicious release: Malicious code in argoncrypt (npm) GHSA-h3m2-g8jh-9p37, MAL-2026-5506 | Malicious | Not scored | 10 Jun, 2026 | npm argoncrypt |
Malicious release: Malicious code in martinez-polygon-clipping-simul-dalton (npm) GHSA-ggqm-v4hp-cw69, MAL-2026-5508 | Malicious | Not scored | 10 Jun, 2026 | npm martinez-polygon-clipping-simul-dalton |
Malicious release: Malicious code in solc-compiler (npm) GHSA-3gmv-4hp4-87jq, MAL-2026-5513 | Malicious | Not scored | 10 Jun, 2026 | npm solc-compiler |
Malicious release: Malicious code in npmjs_web3-common (npm) GHSA-56rf-jfpx-gqf8, MAL-2026-5510 | Malicious | Not scored | 10 Jun, 2026 | npm npmjs_web3-common |
Malicious release: Malicious code in solc-abi (npm) GHSA-5rjr-r82r-343m, MAL-2026-5512 | Malicious | Not scored | 10 Jun, 2026 | npm solc-abi |
Malicious release: Malicious code in npmjs_truffle-helper (npm) GHSA-6qhx-9853-hxm6, MAL-2026-5509 | Malicious | Not scored | 10 Jun, 2026 | npm npmjs_truffle-helper |
Malicious release: Malicious code in solidity-abi (npm) GHSA-4pr4-9j3x-h243, MAL-2026-5514 | Malicious | Not scored | 10 Jun, 2026 | npm solidity-abi |
Malicious release: Malicious code in plugin-fastify (npm) GHSA-3g8q-cxq6-9f6c, MAL-2026-5503 | Malicious | Not scored | 10 Jun, 2026 | npm plugin-fastify |
Malicious release: Malicious code in graphbase-js (npm) GHSA-29w9-hfv4-jjxh, MAL-2026-5502 | Malicious | Not scored | 10 Jun, 2026 | npm graphbase-js |
Malicious release: Malicious code in @validate-ethereum-address/core (npm) GHSA-c29q-842f-rcjc, MAL-2026-5496 | Malicious | Not scored | 10 Jun, 2026 | npm @validate-ethereum-address/core |
Malicious release: Malicious code in @validator-sdk/pubkey (npm) GHSA-w9ch-gj3p-2cj9, MAL-2026-5498 | Malicious | Not scored | 10 Jun, 2026 | npm @validator-sdk/pubkey |
Malicious release: Malicious code in @solana-launchpad/sdk (npm) GHSA-364r-rq62-6gx5, MAL-2026-5495 | Malicious | Not scored | 10 Jun, 2026 | npm @solana-launchpad/sdk |
Malicious release: Malicious code in @meme-sdk/trade (npm) GHSA-4c2m-9v9c-75xv, MAL-2026-5494 | Malicious | Not scored | 10 Jun, 2026 | npm @meme-sdk/trade |
Malicious release: Malicious code in @validate-sdk/v2 (npm) GHSA-vqg9-785x-8j39, MAL-2026-5497 | Malicious | Not scored | 10 Jun, 2026 | npm @validate-sdk/v2 |
Malicious release: Malicious code in coinbase-wallet-utils (npm) GHSA-6228-p677-g9p7, MAL-2026-5499 | Malicious | Not scored | 10 Jun, 2026 | npm coinbase-wallet-utils |
Malicious release: Malicious code in ethers-jss (npm) GHSA-xh65-7qcm-493w, MAL-2026-5501 | Malicious | Not scored | 10 Jun, 2026 | npm ethers-jss |