Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @ethlete/cdk (npm) MAL-2026-5196 | Malicious | Not scored | 05 Jun, 2026 | npm @ethlete/cdk |
Malicious release: Malicious code in @ethlete/cli (npm) MAL-2026-5197 | Malicious | Not scored | 05 Jun, 2026 | npm @ethlete/cli |
Malicious release: Malicious code in @ethlete/components (npm) MAL-2026-5198 | Malicious | Not scored | 05 Jun, 2026 | npm @ethlete/components |
Malicious release: Malicious code in @ethlete/contentful (npm) MAL-2026-5199 | Malicious | Not scored | 05 Jun, 2026 | npm @ethlete/contentful |
Malicious release: Malicious code in @ethlete/core (npm) MAL-2026-5200 | Malicious | Not scored | 05 Jun, 2026 | npm @ethlete/core |
Malicious release: Malicious code in @ethlete/dsp (npm) MAL-2026-5201 | Malicious | Not scored | 05 Jun, 2026 | npm @ethlete/dsp |
Malicious release: Malicious code in @ethlete/query (npm) MAL-2026-5202 | Malicious | Not scored | 05 Jun, 2026 | npm @ethlete/query |
Malicious release: Malicious code in @ethlete/theming (npm) MAL-2026-5203 | Malicious | Not scored | 05 Jun, 2026 | npm @ethlete/theming |
Malicious release: Malicious code in @ethlete/types (npm) MAL-2026-5204 | Malicious | Not scored | 05 Jun, 2026 | npm @ethlete/types |
Malicious release: Malicious code in @forjacms/analytics (npm) MAL-2026-5205 | Malicious | Not scored | 05 Jun, 2026 | npm @forjacms/analytics |
Malicious release: Malicious code in @forjacms/client (npm) MAL-2026-5206 | Malicious | Not scored | 05 Jun, 2026 | npm @forjacms/client |
Malicious release: Malicious code in @forjacms/sections (npm) MAL-2026-5207 | Malicious | Not scored | 05 Jun, 2026 | npm @forjacms/sections |
Malicious release: Malicious code in @forjacms/sections-react (npm) MAL-2026-5208 | Malicious | Not scored | 05 Jun, 2026 | npm @forjacms/sections-react |
Malicious release: Malicious code in autotel (npm) MAL-2026-5211 | Malicious | Not scored | 05 Jun, 2026 | npm autotel |
Malicious release: Malicious code in autotel-adapters (npm) MAL-2026-5212 | Malicious | Not scored | 05 Jun, 2026 | npm autotel-adapters |
Malicious release: Malicious code in autotel-audit (npm) MAL-2026-5213 | Malicious | Not scored | 05 Jun, 2026 | npm autotel-audit |
Malicious release: Malicious code in autotel-aws (npm) MAL-2026-5214 | Malicious | Not scored | 05 Jun, 2026 | npm autotel-aws |
Malicious release: Malicious code in autotel-edge (npm) MAL-2026-5220 | Malicious | Not scored | 05 Jun, 2026 | npm autotel-edge |
Malicious release: Malicious code in effect-analyzer (npm) MAL-2026-5245 | Malicious | Not scored | 05 Jun, 2026 | npm effect-analyzer |
Malicious release: Malicious code in eslint-plugin-awaitly (npm) MAL-2026-5246 | Malicious | Not scored | 05 Jun, 2026 | npm eslint-plugin-awaitly |
Malicious release: Malicious code in eslint-plugin-executable-stories-jest (npm) MAL-2026-5247 | Malicious | Not scored | 05 Jun, 2026 | npm eslint-plugin-executable-stories-jest |
Malicious release: Malicious code in eslint-plugin-executable-stories-vitest (npm) MAL-2026-5249 | Malicious | Not scored | 05 Jun, 2026 | npm eslint-plugin-executable-stories-vitest |
Malicious release: Malicious code in executable-stories-cypress (npm) MAL-2026-5250 | Malicious | Not scored | 05 Jun, 2026 | npm executable-stories-cypress |
Malicious release: Malicious code in executable-stories-demo (npm) MAL-2026-5251 | Malicious | Not scored | 05 Jun, 2026 | npm executable-stories-demo |
Malicious release: Malicious code in executable-stories-formatters (npm) MAL-2026-5252 | Malicious | Not scored | 05 Jun, 2026 | npm executable-stories-formatters |
Malicious release: Malicious code in executable-stories-init (npm) MAL-2026-5253 | Malicious | Not scored | 05 Jun, 2026 | npm executable-stories-init |
Malicious release: Malicious code in executable-stories-jest (npm) MAL-2026-5254 | Malicious | Not scored | 05 Jun, 2026 | npm executable-stories-jest |
Malicious release: Malicious code in executable-stories-mcp (npm) MAL-2026-5255 | Malicious | Not scored | 05 Jun, 2026 | npm executable-stories-mcp |
Malicious release: Malicious code in executable-stories-react (npm) MAL-2026-5257 | Malicious | Not scored | 05 Jun, 2026 | npm executable-stories-react |
Malicious release: Malicious code in mountly-tailwind (npm) MAL-2026-5261 | Malicious | Not scored | 05 Jun, 2026 | npm mountly-tailwind |
Malicious release: Malicious code in node-env-resolver (npm) MAL-2026-5262 | Malicious | Not scored | 05 Jun, 2026 | npm node-env-resolver |
Malicious release: Malicious code in node-env-resolver-aws (npm) MAL-2026-5263 | Malicious | Not scored | 05 Jun, 2026 | npm node-env-resolver-aws |
Malicious release: Malicious code in node-env-resolver-dotenvx (npm) MAL-2026-5264 | Malicious | Not scored | 05 Jun, 2026 | npm node-env-resolver-dotenvx |
Malicious release: Malicious code in node-env-resolver-nextjs (npm) MAL-2026-5265 | Malicious | Not scored | 05 Jun, 2026 | npm node-env-resolver-nextjs |
Malicious release: Malicious code in node-env-resolver-vite (npm) MAL-2026-5266 | Malicious | Not scored | 05 Jun, 2026 | npm node-env-resolver-vite |
Malicious release: Malicious code in wrangler-deploy (npm) GHSA-5vmf-xjrj-jqhh, MAL-2026-5267 | Malicious | Not scored | 05 Jun, 2026 | npm wrangler-deploy |
Malicious release: Malicious code in hbsig (npm) GHSA-6fwm-7v73-876j, MAL-2026-5190 | Malicious | Not scored | 04 Jun, 2026 | npm hbsig |
Malicious release: Malicious code in weavedb-contracts (npm) GHSA-gg4x-c8wr-53p9, MAL-2026-5192 | Malicious | Not scored | 04 Jun, 2026 | npm weavedb-contracts |
Malicious release: Malicious code in arjson (npm) MAL-2026-5189 | Malicious | Not scored | 04 Jun, 2026 | npm arjson |
Malicious release: Malicious code in wdb-core (npm) MAL-2026-5191 | Malicious | Not scored | 04 Jun, 2026 | npm wdb-core |
Malicious release: Malicious code in javascript-yaml (npm) MAL-2026-5193 | Malicious | Not scored | 04 Jun, 2026 | npm javascript-yaml |
Malicious release: Malicious code in yaml-javascript (npm) MAL-2026-5194 | Malicious | Not scored | 04 Jun, 2026 | npm yaml-javascript |
Malicious release: Malicious code in hello244a (npm) GHSA-fv97-hqvh-jxcm, MAL-2026-5188 | Malicious | Not scored | 04 Jun, 2026 | npm hello244a |
Malicious release: Malicious code in autotel-terminal (npm) GHSA-cw9v-v9rh-r449, MAL-2026-5186 | Malicious | Not scored | 04 Jun, 2026 | npm autotel-terminal |
Malicious release: Malicious code in @jagreehal/workflow (npm) GHSA-6w7v-23mf-65g3, MAL-2026-5185 | Malicious | Not scored | 04 Jun, 2026 | npm @jagreehal/workflow |
Malicious release: Malicious code in cms-store-ren (npm) MAL-2026-5364 | Malicious | Not scored | 04 Jun, 2026 | npm cms-store-ren |
Malicious release: Malicious code in nodemon-webpatch (npm) GHSA-q398-93fh-ghmj, MAL-2026-5180 | Malicious | Not scored | 03 Jun, 2026 | npm nodemon-webpatch |
Malicious release: Malicious code in chai-midpatch (npm) GHSA-qq87-jvv3-6c7r, MAL-2026-5179 | Malicious | Not scored | 03 Jun, 2026 | npm chai-midpatch |
Malicious release: Malicious code in webpack-json (npm) GHSA-69hx-wrc9-h5wq, MAL-2026-5175 | Malicious | Not scored | 03 Jun, 2026 | npm webpack-json |
Malicious release: Malicious code in nodemon-pack (npm) GHSA-pqxq-jw84-3x8f, MAL-2026-5174 | Malicious | Not scored | 03 Jun, 2026 | npm nodemon-pack |