Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in nodemon-copack (npm) GHSA-pw2c-3h97-j57f, MAL-2026-5308 | Malicious | Not scored | 08 Jun, 2026 | npm nodemon-copack |
Malicious release: Malicious code in zer0one-dnslog (npm) MAL-2026-5366 | Malicious | Not scored | 08 Jun, 2026 | npm zer0one-dnslog |
Malicious release: Malicious code in consumerweb-authflow (npm) MAL-2026-5297 | Malicious | Not scored | 07 Jun, 2026 | npm consumerweb-authflow |
Malicious release: Malicious code in sequoia-engineering (npm) GHSA-5r3g-3x22-r8qm, MAL-2026-5291 | Malicious | Not scored | 07 Jun, 2026 | npm sequoia-engineering |
Malicious release: Malicious code in @solana-labs/web3-js (npm) MAL-2026-5363 | Malicious | Not scored | 07 Jun, 2026 | npm @solana-labs/web3-js |
Malicious release: Malicious code in @solana-labs/etherjs (npm) MAL-2026-5362 | Malicious | Not scored | 07 Jun, 2026 | npm @solana-labs/etherjs |
Malicious release: Malicious code in unifi-portal (npm) MAL-2026-5289 | Malicious | Not scored | 06 Jun, 2026 | npm unifi-portal |
Malicious release: Malicious code in encrypted-archive (npm) MAL-2026-5286 | Malicious | Not scored | 06 Jun, 2026 | npm encrypted-archive |
Malicious release: Malicious code in uisp-connector (npm) MAL-2026-5288 | Malicious | Not scored | 06 Jun, 2026 | npm uisp-connector |
Malicious release: Malicious code in uhd-setup (npm) MAL-2026-5287 | Malicious | Not scored | 06 Jun, 2026 | npm uhd-setup |
Malicious release: Malicious code in reactvora (npm) GHSA-x4gw-cjrp-c89f, MAL-2026-5270 | Malicious | Not scored | 05 Jun, 2026 | npm reactvora |
Malicious release: Malicious code in glyphr (npm) GHSA-c988-j68q-h8h4, MAL-2026-5269 | Malicious | Not scored | 05 Jun, 2026 | npm glyphr |
Malicious release: Malicious code in ulid-os (npm) GHSA-fxhm-35h8-7jc7, MAL-2026-5268 | Malicious | Not scored | 05 Jun, 2026 | npm ulid-os |
Malicious release: Malicious code in autotel-vitest (npm) GHSA-2x3q-hrjf-x554, MAL-2026-5232 | Malicious | Not scored | 05 Jun, 2026 | npm autotel-vitest |
Malicious release: Malicious code in autotel-cli (npm) GHSA-3729-344x-9v28, MAL-2026-5216 | Malicious | Not scored | 05 Jun, 2026 | npm autotel-cli |
Malicious release: Malicious code in autotel-subscribers (npm) GHSA-37wr-f689-9c3c, MAL-2026-5230 | Malicious | Not scored | 05 Jun, 2026 | npm autotel-subscribers |
Malicious release: Malicious code in autotel-mcp (npm) GHSA-3wmg-66hp-xhv9, MAL-2026-5223 | Malicious | Not scored | 05 Jun, 2026 | npm autotel-mcp |
Malicious release: Malicious code in autotel-pact (npm) GHSA-43fx-93g7-w27h, MAL-2026-5226 | Malicious | Not scored | 05 Jun, 2026 | npm autotel-pact |
Malicious release: Malicious code in autotel-mongoose (npm) GHSA-4vjc-qq25-pvc4, MAL-2026-5225 | Malicious | Not scored | 05 Jun, 2026 | npm autotel-mongoose |
Malicious release: Malicious code in awaitly-mongo (npm) GHSA-4vpc-g7mx-4m5v, MAL-2026-5237 | Malicious | Not scored | 05 Jun, 2026 | npm awaitly-mongo |
Malicious release: Malicious code in create-wrangler-deploy (npm) GHSA-5pxw-jqgf-87rf, MAL-2026-5241 | Malicious | Not scored | 05 Jun, 2026 | npm create-wrangler-deploy |
Malicious release: Malicious code in dbmux (npm) GHSA-62wx-5f55-w8g2, MAL-2026-5243 | Malicious | Not scored | 05 Jun, 2026 | npm dbmux |
Malicious release: Malicious code in autotel-playwright (npm) GHSA-6pcg-qh3x-h5pg, MAL-2026-5227 | Malicious | Not scored | 05 Jun, 2026 | npm autotel-playwright |
Malicious release: Malicious code in creditcard.js (npm) GHSA-6v78-xg39-f56q, MAL-2026-5242 | Malicious | Not scored | 05 Jun, 2026 | npm creditcard.js |
Malicious release: Malicious code in executable-stories-vitest (npm) GHSA-75mp-q9qh-pc3h, MAL-2026-5258 | Malicious | Not scored | 05 Jun, 2026 | npm executable-stories-vitest |
Malicious release: Malicious code in autotel-web (npm) GHSA-78g2-45pm-5862, MAL-2026-5233 | Malicious | Not scored | 05 Jun, 2026 | npm autotel-web |
Malicious release: Malicious code in autotel-mcp-instrumentation (npm) GHSA-7cv4-gfx4-2c3v, MAL-2026-5224 | Malicious | Not scored | 05 Jun, 2026 | npm autotel-mcp-instrumentation |
Malicious release: Malicious code in awaitly-visualizer (npm) GHSA-7vwj-f8vf-q9jf, MAL-2026-5239 | Malicious | Not scored | 05 Jun, 2026 | npm awaitly-visualizer |
Malicious release: Malicious code in discord-search (npm) GHSA-98mq-hfqh-3rxm, MAL-2026-5244 | Malicious | Not scored | 05 Jun, 2026 | npm discord-search |
Malicious release: Malicious code in autotel-backends (npm) GHSA-9p9m-f2hg-9gxm, MAL-2026-5215 | Malicious | Not scored | 05 Jun, 2026 | npm autotel-backends |
Malicious release: Malicious code in autotel-hono (npm) GHSA-c2jx-wr8m-cv28, MAL-2026-5222 | Malicious | Not scored | 05 Jun, 2026 | npm autotel-hono |
Malicious release: Malicious code in awaitly (npm) GHSA-c8c9-7f3h-7c76, MAL-2026-5234 | Malicious | Not scored | 05 Jun, 2026 | npm awaitly |
Malicious release: Malicious code in create-cf-token (npm) GHSA-cf4c-f3hr-3wh4, MAL-2026-5240 | Malicious | Not scored | 05 Jun, 2026 | npm create-cf-token |
Malicious release: Malicious code in autotel-plugins (npm) GHSA-fgj5-m9vh-ffjw, MAL-2026-5228 | Malicious | Not scored | 05 Jun, 2026 | npm autotel-plugins |
Malicious release: Malicious code in executable-stories-playwright (npm) GHSA-g2qc-jgmc-4956, MAL-2026-5256 | Malicious | Not scored | 05 Jun, 2026 | npm executable-stories-playwright |
Malicious release: Malicious code in autotel-eventcatalog (npm) GHSA-h58c-49hq-mq6c, MAL-2026-5221 | Malicious | Not scored | 05 Jun, 2026 | npm autotel-eventcatalog |
Malicious release: Malicious code in autotel-drizzle (npm) GHSA-hhr2-ppwm-hgqr, MAL-2026-5219 | Malicious | Not scored | 05 Jun, 2026 | npm autotel-drizzle |
Malicious release: Malicious code in awaitly-postgres (npm) GHSA-hpp3-2qqp-gw63, MAL-2026-5238 | Malicious | Not scored | 05 Jun, 2026 | npm awaitly-postgres |
Malicious release: Malicious code in awaitly-analyze (npm) GHSA-hv34-4pjp-j28h, MAL-2026-5235 | Malicious | Not scored | 05 Jun, 2026 | npm awaitly-analyze |
Malicious release: Malicious code in awaitly-libsql (npm) GHSA-j6m2-hp97-pv4j, MAL-2026-5236 | Malicious | Not scored | 05 Jun, 2026 | npm awaitly-libsql |
Malicious release: Malicious code in mountly (npm) GHSA-j9rq-vgj9-94g8, MAL-2026-5260 | Malicious | Not scored | 05 Jun, 2026 | npm mountly |
Malicious release: Malicious code in ai-sdk-ollama (npm) GHSA-m9j7-x8ww-5jwr, MAL-2026-5210 | Malicious | Not scored | 05 Jun, 2026 | npm ai-sdk-ollama |
Malicious release: Malicious code in autotel-tanstack (npm) GHSA-mhh3-45v6-6vmh, MAL-2026-5231 | Malicious | Not scored | 05 Jun, 2026 | npm autotel-tanstack |
Malicious release: Malicious code in @vapi-ai/server-sdk (npm) GHSA-mjhg-2cvf-w2p4, MAL-2026-5209 | Malicious | Not scored | 05 Jun, 2026 | npm @vapi-ai/server-sdk |
Malicious release: Malicious code in autotel-cloudflare (npm) GHSA-q59j-5qp6-4jmh, MAL-2026-5217 | Malicious | Not scored | 05 Jun, 2026 | npm autotel-cloudflare |
Malicious release: Malicious code in autotel-devtools (npm) GHSA-r65m-xcg9-hvfh, MAL-2026-5218 | Malicious | Not scored | 05 Jun, 2026 | npm autotel-devtools |
Malicious release: Malicious code in github-archiver (npm) GHSA-r6pp-cq9f-9j94, MAL-2026-5259 | Malicious | Not scored | 05 Jun, 2026 | npm github-archiver |
Malicious release: Malicious code in autotel-sentry (npm) GHSA-rxgj-x3gg-2fg8, MAL-2026-5229 | Malicious | Not scored | 05 Jun, 2026 | npm autotel-sentry |
Malicious release: Malicious code in eslint-plugin-executable-stories-playwright (npm) GHSA-xqjr-r64q-26cp, MAL-2026-5248 | Malicious | Not scored | 05 Jun, 2026 | npm eslint-plugin-executable-stories-playwright |
Malicious release: Malicious code in @contaazul/n8n-nodes-contaazul (npm) MAL-2026-5195 | Malicious | Not scored | 05 Jun, 2026 | npm @contaazul/n8n-nodes-contaazul |