Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @hrmony/benefit-sachbezug (npm) GHSA-jr8j-48fj-734v, MAL-2026-17256 | Malicious | Not scored | 29 Sep, 2026 | npm @hrmony/benefit-sachbezug |
Malicious release: Malicious code in @hrmony/benefitverwaltung (npm) GHSA-xvwj-8x3p-gr7w, MAL-2026-17257 | Malicious | Not scored | 29 Sep, 2026 | npm @hrmony/benefitverwaltung |
Malicious release: Malicious code in @hrmony/pladddform-application (npm) GHSA-wrw4-45wp-75v5, MAL-2026-17271 | Malicious | Not scored | 29 Sep, 2026 | npm @hrmony/pladddform-application |
Malicious release: Malicious code in @hrmony/middlewares (npm) GHSA-5cwm-5j38-r753, MAL-2026-17269 | Malicious | Not scored | 29 Sep, 2026 | npm @hrmony/middlewares |
Malicious release: Malicious code in @hrmony/mailer-pladddform (npm) GHSA-75mr-rmf4-wr8j, MAL-2026-17268 | Malicious | Not scored | 29 Sep, 2026 | npm @hrmony/mailer-pladddform |
Malicious release: Malicious code in @hrmony/component-library (npm) GHSA-cjfr-hq8x-q26q, MAL-2026-17259 | Malicious | Not scored | 29 Sep, 2026 | npm @hrmony/component-library |
Malicious release: Malicious code in @hrmony/pladddform-codegen (npm) GHSA-4jh6-g3hw-7qjc, MAL-2026-17273 | Malicious | Not scored | 29 Sep, 2026 | npm @hrmony/pladddform-codegen |
Malicious release: Malicious code in @hrmony/pladddform-config (npm) GHSA-pgw6-px39-j8m8, MAL-2026-17274 | Malicious | Not scored | 29 Sep, 2026 | npm @hrmony/pladddform-config |
Malicious release: Malicious code in @hrmony/pladddform-cli (npm) GHSA-7j4w-rjm5-96qj, MAL-2026-17272 | Malicious | Not scored | 29 Sep, 2026 | npm @hrmony/pladddform-cli |
Malicious release: Malicious code in @hrmony/pladddform-shared-infrastructure (npm) GHSA-xvjm-3hmh-7v4h, MAL-2026-17279 | Malicious | Not scored | 29 Sep, 2026 | npm @hrmony/pladddform-shared-infrastructure |
Malicious release: Malicious code in @hrmony/pladddform-partner-registry (npm) GHSA-757q-42rv-qjcf, MAL-2026-17278 | Malicious | Not scored | 29 Sep, 2026 | npm @hrmony/pladddform-partner-registry |
Malicious release: Malicious code in @hrmony/pladddform-testing (npm) GHSA-wc37-mwww-8cwr, MAL-2026-17280 | Malicious | Not scored | 29 Sep, 2026 | npm @hrmony/pladddform-testing |
Malicious release: Malicious code in @hrmony/api-gateway-service-config (npm) GHSA-36rr-7v5c-qjqv, MAL-2026-17250 | Malicious | Not scored | 29 Sep, 2026 | npm @hrmony/api-gateway-service-config |
Malicious release: Malicious code in @hrmony/valuenet (npm) GHSA-5958-mpfq-wfrj, MAL-2026-17281 | Malicious | Not scored | 29 Sep, 2026 | npm @hrmony/valuenet |
Malicious release: Malicious code in @hrmony/pladddform-infrastructure (npm) GHSA-rvhw-f5hm-gj2w, MAL-2026-17277 | Malicious | Not scored | 29 Sep, 2026 | npm @hrmony/pladddform-infrastructure |
Malicious release: Malicious code in @hrmony/belegerfassung-pladddform (npm) GHSA-5hfp-jjv9-69q8, MAL-2026-17252 | Malicious | Not scored | 29 Sep, 2026 | npm @hrmony/belegerfassung-pladddform |
Malicious release: Malicious code in @hrmony/devtool-configuration (npm) GHSA-qh4w-rc3m-9898, MAL-2026-17260 | Malicious | Not scored | 29 Sep, 2026 | npm @hrmony/devtool-configuration |
Malicious release: Malicious code in @hrmony/lohndateien (npm) GHSA-xq9r-4rp7-86c2, MAL-2026-17267 | Malicious | Not scored | 29 Sep, 2026 | npm @hrmony/lohndateien |
Malicious release: Malicious code in @hrmony/pladddform-frontend (npm) GHSA-53w6-j9gv-cv5w, MAL-2026-17276 | Malicious | Not scored | 29 Sep, 2026 | npm @hrmony/pladddform-frontend |
Malicious release: Malicious code in @hrmony/pladddform-core (npm) GHSA-qgqg-65m8-gvwg, MAL-2026-17275 | Malicious | Not scored | 29 Sep, 2026 | npm @hrmony/pladddform-core |
Malicious release: Malicious code in @hrmony/gutscheinverwaltung (npm) GHSA-g4hp-22g7-9hf5, MAL-2026-17261 | Malicious | Not scored | 29 Sep, 2026 | npm @hrmony/gutscheinverwaltung |
Malicious release: Malicious code in dotenv-precheck (npm) MAL-2026-17304 | Malicious | Not scored | 29 Sep, 2026 | npm dotenv-precheck |
Malicious release: Malicious code in dotenv-preflight (npm) MAL-2026-17324 | Malicious | Not scored | 29 Sep, 2026 | npm dotenv-preflight |
Malicious release: Malicious code in exprdd (npm) MAL-2026-17241 | Malicious | Not scored | 29 Sep, 2026 | npm exprdd |
Malicious release: Malicious code in express-javascript (npm) MAL-2026-17242 | Malicious | Not scored | 29 Sep, 2026 | npm express-javascript |
Malicious release: Malicious code in express-nodejs (npm) MAL-2026-17243 | Malicious | Not scored | 29 Sep, 2026 | npm express-nodejs |
Malicious release: Malicious code in exprrdd (npm) MAL-2026-17244 | Malicious | Not scored | 29 Sep, 2026 | npm exprrdd |
Malicious release: Malicious code in exptrdd (npm) MAL-2026-17245 | Malicious | Not scored | 29 Sep, 2026 | npm exptrdd |
Malicious release: Malicious code in exptred (npm) MAL-2026-17246 | Malicious | Not scored | 29 Sep, 2026 | npm exptred |
Malicious release: Malicious code in exptredd (npm) MAL-2026-17247 | Malicious | Not scored | 29 Sep, 2026 | npm exptredd |
Malicious release: Malicious code in xeprews (npm) MAL-2026-17248 | Malicious | Not scored | 29 Sep, 2026 | npm xeprews |
Malicious release: Malicious code in react-nodejs (npm) MAL-2026-17294 | Malicious | Not scored | 29 Sep, 2026 | npm react-nodejs |
Malicious release: Malicious code in rai6jaisahthaghee5ou-loader-package (npm) MAL-2026-17238 | Malicious | Not scored | 28 Sep, 2026 | npm rai6jaisahthaghee5ou-loader-package |
Malicious release: Malicious code in hardhat-zet (npm) GHSA-mw8r-6m3f-qmg8, MAL-2026-17234 | Malicious | Not scored | 28 Sep, 2026 | npm hardhat-zet |
Malicious release: Malicious code in hardhat-lock (npm) MAL-2026-17233 | Malicious | Not scored | 28 Sep, 2026 | npm hardhat-lock |
Malicious release: Malicious code in mini-hardhat (npm) MAL-2026-17236 | Malicious | Not scored | 28 Sep, 2026 | npm mini-hardhat |
Malicious release: Malicious code in native-env (npm) MAL-2026-17237 | Malicious | Not scored | 28 Sep, 2026 | npm native-env |
Malicious release: Malicious code in dotenv-native (npm) MAL-2026-17231 | Malicious | Not scored | 28 Sep, 2026 | npm dotenv-native |
Malicious release: Malicious code in fabric-native-loader (npm) MAL-2026-17232 | Malicious | Not scored | 28 Sep, 2026 | npm fabric-native-loader |
Malicious release: Malicious code in items-validator (npm) GHSA-rpgc-c7g7-g8fh, MAL-2026-17235 | Malicious | Not scored | 28 Sep, 2026 | npm items-validator |
Malicious release: Malicious code in test-agency-assignment (npm) MAL-2026-17239 | Malicious | Not scored | 28 Sep, 2026 | npm test-agency-assignment |
Malicious release: Malicious code in llm-nebula (npm) GHSA-w7wp-5j6j-rgg5, MAL-2026-17230 | Malicious | Not scored | 28 Sep, 2026 | npm llm-nebula |
Malicious release: Malicious code in simple-date-formatter-new-12 (npm) MAL-2026-17229 | Malicious | Not scored | 28 Sep, 2026 | npm simple-date-formatter-new-12 |
Malicious release: Malicious code in nebulaai-sdk (npm) MAL-2026-17228 | Malicious | Not scored | 28 Sep, 2026 | npm nebulaai-sdk |
Malicious release: Malicious code in figlet-chalk-render (npm) MAL-2026-17226 | Malicious | Not scored | 28 Sep, 2026 | npm figlet-chalk-render |
Malicious release: Malicious code in chalk-figlet (npm) MAL-2026-17223 | Malicious | Not scored | 28 Sep, 2026 | npm chalk-figlet |
Malicious release: Malicious code in nebula-llm (npm) MAL-2026-17227 | Malicious | Not scored | 28 Sep, 2026 | npm nebula-llm |
Malicious release: Malicious code in fabric-render-bridge (npm) MAL-2026-17225 | Malicious | Not scored | 28 Sep, 2026 | npm fabric-render-bridge |
Malicious release: Malicious code in fabric-asset-pipeline (npm) MAL-2026-17224 | Malicious | Not scored | 28 Sep, 2026 | npm fabric-asset-pipeline |
Malicious release: Malicious code in img-to-native (npm) GHSA-pv7p-ghgv-268x, MAL-2026-17216 | Malicious | Not scored | 28 Sep, 2026 | npm img-to-native |