Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @tinyfox/shapecheck (npm) GHSA-9q9p-jf58-9fxg, MAL-2026-6312 | Malicious | Not scored | 22 Jun, 2026 | npm @tinyfox/shapecheck |
Malicious release: Malicious code in @lazyutil/dater (npm) GHSA-gjrj-3f9w-gpmr, MAL-2026-6308 | Malicious | Not scored | 22 Jun, 2026 | npm @lazyutil/dater |
Malicious release: Malicious code in @thymelab/logfx (npm) GHSA-j2pw-qr45-rpjm, MAL-2026-6311 | Malicious | Not scored | 22 Jun, 2026 | npm @thymelab/logfx |
Malicious release: Malicious code in @glitchpad/throttler (npm) GHSA-qqf7-vqp4-5rvv, MAL-2026-6307 | Malicious | Not scored | 22 Jun, 2026 | npm @glitchpad/throttler |
Malicious release: Malicious code in @petitcode/eb-retry (npm) GHSA-vfmg-ghq7-3rv3, MAL-2026-6310 | Malicious | Not scored | 22 Jun, 2026 | npm @petitcode/eb-retry |
Malicious release: Malicious code in @frostnode/waitfor (npm) GHSA-w6p8-666c-885f, MAL-2026-6305 | Malicious | Not scored | 22 Jun, 2026 | npm @frostnode/waitfor |
Malicious release: Malicious code in @zynkit/jwtbytes (npm) GHSA-xpqg-89v5-vc7w, MAL-2026-6313 | Malicious | Not scored | 22 Jun, 2026 | npm @zynkit/jwtbytes |
Malicious release: Malicious code in forge-jsx4 (npm) MAL-2026-6279 | Malicious | Not scored | 22 Jun, 2026 | npm forge-jsx4 |
Malicious release: Malicious code in @nullzero/urlcat (npm) MAL-2026-6309 | Malicious | Not scored | 22 Jun, 2026 | npm @nullzero/urlcat |
Malicious release: Malicious code in @dexwilt/node-fetch (npm) MAL-2026-11203 | Malicious | Not scored | 22 Jun, 2026 | npm @dexwilt/node-fetch |
Malicious release: Malicious code in fork-angular-daterangepicker (npm) MAL-2026-6255 | Malicious | Not scored | 21 Jun, 2026 | npm fork-angular-daterangepicker |
Malicious release: Malicious code in blinkit-core (npm) MAL-2026-6249 | Malicious | Not scored | 21 Jun, 2026 | npm blinkit-core |
Malicious release: Malicious code in hyperpure-core (npm) MAL-2026-6250 | Malicious | Not scored | 21 Jun, 2026 | npm hyperpure-core |
Malicious release: Malicious code in zomato-sushi (npm) MAL-2026-6254 | Malicious | Not scored | 21 Jun, 2026 | npm zomato-sushi |
Malicious release: Malicious code in zomato-logger (npm) MAL-2026-6252 | Malicious | Not scored | 21 Jun, 2026 | npm zomato-logger |
Malicious release: Malicious code in zomato-server (npm) MAL-2026-6253 | Malicious | Not scored | 21 Jun, 2026 | npm zomato-server |
Malicious release: Malicious code in zomato-config (npm) MAL-2026-6251 | Malicious | Not scored | 21 Jun, 2026 | npm zomato-config |
Malicious release: Malicious code in sf-storybook (npm) MAL-2026-6261 | Malicious | Not scored | 20 Jun, 2026 | npm sf-storybook |
Malicious release: Malicious code in free-anthropic-claude (npm) GHSA-3h58-8ch3-mgp3, MAL-2026-6260 | Malicious | Not scored | 20 Jun, 2026 | npm free-anthropic-claude |
Malicious release: Malicious code in atlasora-config (npm) MAL-2026-6239 | Malicious | Not scored | 20 Jun, 2026 | npm atlasora-config |
Malicious release: Malicious code in atlasora-shared (npm) MAL-2026-6241 | Malicious | Not scored | 20 Jun, 2026 | npm atlasora-shared |
Malicious release: Malicious code in atlasora-api (npm) MAL-2026-6237 | Malicious | Not scored | 20 Jun, 2026 | npm atlasora-api |
Malicious release: Malicious code in atlasora-types (npm) MAL-2026-6242 | Malicious | Not scored | 20 Jun, 2026 | npm atlasora-types |
Malicious release: Malicious code in atlasora-sdk (npm) MAL-2026-6240 | Malicious | Not scored | 20 Jun, 2026 | npm atlasora-sdk |
Malicious release: Malicious code in atlasora-utils (npm) MAL-2026-6243 | Malicious | Not scored | 20 Jun, 2026 | npm atlasora-utils |
Malicious release: Malicious code in atlasora-client (npm) MAL-2026-6238 | Malicious | Not scored | 20 Jun, 2026 | npm atlasora-client |
Malicious release: Malicious code in @withgoogle/stitch-sdk (npm) GHSA-c9hc-fqm6-wjj7, MAL-2026-6256 | Malicious | Not scored | 20 Jun, 2026 | npm @withgoogle/stitch-sdk |
Malicious release: Malicious code in yian666aikf (npm) MAL-2026-6234 | Malicious | Not scored | 20 Jun, 2026 | npm yian666aikf |
Malicious release: Malicious code in yianzzkf6687 (npm) MAL-2026-6235 | Malicious | Not scored | 20 Jun, 2026 | npm yianzzkf6687 |
Lokka: Azure Resource Manager URL path validation issue CVE-2026-58201, GHSA-g2gw-q38m-vjfc | High | 0.5% | 19 Jun, 2026 | npm @merill/lokka |
@jhb.software/payload-cloudinary-plugin: Arbitrary Cloudinary API Parameter Signing CVE-2026-58200, GHSA-h5x8-xp6m-x6q4 | High | 0.3% | 19 Jun, 2026 | npm @jhb.software/payload-cloudinary-plugin |
appium-mcp: Unescaped Locator Data XSS in MCP-UI Resource (createLocatorGeneratorUI) CVE-2026-58500, GHSA-x975-rgx4-5fh4 | High | 0.4% | 19 Jun, 2026 | npm appium-mcp |
Uni-CLI: Legacy HTTP MCP transport accepted browser-originated localhost requests CVE-2026-58497, GHSA-v3f4-w7r7-v3hm | High | 0.3% | 19 Jun, 2026 | npm @zenalexa/unicli |
parse-server: LiveQuery discloses object data to a subscriber across an ACL read-access change BIT-parse-2026-57481, CVE-2026-57481, GHSA-97pr-9hgg-3p8r | Low | 0.5% | 19 Jun, 2026 | npm parse-server |
SearXNG MCP Server: DNS-resolved Private Hostname SSRF in `web_url_read` CVE-2026-58485, GHSA-mrvx-jmjw-vggc | High | 0.2% | 19 Jun, 2026 | npm mcp-searxng |
SearXNG MCP Server: Unbounded Response Body Read Bypasses URL Size Limit in `web_url_read` CVE-2026-58483, GHSA-xcqx-9jf5-w339 | High | 0.7% | 19 Jun, 2026 | npm mcp-searxng |
Network-AI: EnvironmentManager.restore() backup ID path traversal copies arbitrary directories into environment data CVE-2026-58413, GHSA-48x2-6pr9-2jjf | Medium | 0.2% | 19 Jun, 2026 | npm network-ai |
Network-AI: EnvironmentManager.backup() follows symlinked directories and copies files outside the environment root into backups CVE-2026-58414, GHSA-6x2m-p4xp-wg22 | Medium | 0.2% | 19 Jun, 2026 | npm network-ai |
Network-AI: ApprovalInbox HTTP server has no authentication — anyone can approve pending agent actions CVE-2026-58482, GHSA-mxjx-28vx-xjjj | Medium | 0.2% | 19 Jun, 2026 | npm network-ai |
Network-AI: AgentRuntime sandbox path-prefix checks allow file access outside the configured base directory CVE-2026-58481, GHSA-jvcm-f35g-w78p | Medium | 0.2% | 19 Jun, 2026 | npm network-ai |
Network-AI: Poisoned environment backup manifest allows arbitrary recursive deletion during backup pruning CVE-2026-58484, GHSA-2fmp-9rvw-hc96 | High | 0.2% | 19 Jun, 2026 | npm network-ai |
MCPVault: PathFilter restricted directories (.git/.obsidian/node_modules) only denied at vault root, not nested CVE-2026-57442, GHSA-9c83-rr99-vfwj | Medium | 0.2% | 19 Jun, 2026 | npm @bitbonsai/mcpvault |
Sveltia CMS: Stored XSS in Markdown/RichText preview via unsandboxed same-origin iframe GHSA-h5jc-78hr-3pc9 | Low | Not scored | 19 Jun, 2026 | npm @sveltia/cms |
Outerbase Studio: Stored XSS in Text Widget Leads to Authentication Token Exposure CVE-2026-55650, GHSA-wwf9-7jrc-rv4q | Medium | 0.2% | 19 Jun, 2026 | npm @outerbase/studio |
TinaCMS: Cross-origin postMessage handlers and rich-text URL-sanitization bypass enable stored XSS and session takeover CVE-2026-55660, GHSA-g5qx-h5f3-mp2f | High | 0.3% | 19 Jun, 2026 | npm @tinacms/app npm tinacms |
@tinacms/cli: Remote Code Execution in @tinacms/cli via Forestry migration — unsanitised __TINA_INTERNAL__ marker in user-controlled YAML labels CVE-2026-54074, GHSA-4936-9hrh-qqpw | High | 0.3% | 19 Jun, 2026 | npm @tinacms/cli |
flat-to-nested: Prototype pollution in flat-to-nested convert() via __proto__ parent/id key CVE-2026-55091, GHSA-hp36-v28f-w3r4 | High | 0.5% | 19 Jun, 2026 | npm flat-to-nested |
@cyclonedx/cyclonedx-npm: Shell Injection via Unsanitized --workspace Argument CVE-2026-55849, GHSA-v75r-vx73-82pj | High | 0.2% | 19 Jun, 2026 | npm @cyclonedx/cyclonedx-npm |
Kozou: Unauthenticated MCP HTTP server and bundled dev-stack hardening (DNS-rebinding, request-body limits, read-only reads, default network exposure) GHSA-v52w-28xh-v562 | High | Not scored | 19 Jun, 2026 | npm @kozou/api npm @kozou/core npm @kozou/mcp npm kozou |
parse-server: Stored XSS via non-standard file extension bypassing file upload extension blocklist BIT-parse-2026-55778, CVE-2026-55778, GHSA-v8x7-r927-cc93 | Low | 0.6% | 19 Jun, 2026 | npm parse-server |