Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @mlspace/env-jobs (npm) MAL-2026-5016 | Malicious | Not scored | 28 May, 2026 | npm @mlspace/env-jobs |
Malicious release: Malicious code in @mlspace/env-jupyter-server (npm) MAL-2026-5017 | Malicious | Not scored | 28 May, 2026 | npm @mlspace/env-jupyter-server |
Malicious release: Malicious code in @mlspace/experiments (npm) MAL-2026-5018 | Malicious | Not scored | 28 May, 2026 | npm @mlspace/experiments |
Malicious release: Malicious code in @mlspace/experiments-monitoring (npm) MAL-2026-5019 | Malicious | Not scored | 28 May, 2026 | npm @mlspace/experiments-monitoring |
Malicious release: Malicious code in @mlspace/file-manager (npm) MAL-2026-5020 | Malicious | Not scored | 28 May, 2026 | npm @mlspace/file-manager |
Malicious release: Malicious code in @mlspace/inference-build (npm) MAL-2026-5021 | Malicious | Not scored | 28 May, 2026 | npm @mlspace/inference-build |
Malicious release: Malicious code in @mlspace/inference-deploy (npm) MAL-2026-5022 | Malicious | Not scored | 28 May, 2026 | npm @mlspace/inference-deploy |
Malicious release: Malicious code in @mlspace/model-monitoring (npm) MAL-2026-5023 | Malicious | Not scored | 28 May, 2026 | npm @mlspace/model-monitoring |
Malicious release: Malicious code in @mlspace/model-registry (npm) MAL-2026-5024 | Malicious | Not scored | 28 May, 2026 | npm @mlspace/model-registry |
Malicious release: Malicious code in @mlspace/profile (npm) MAL-2026-5025 | Malicious | Not scored | 28 May, 2026 | npm @mlspace/profile |
Malicious release: Malicious code in @mlspace/shared-storage (npm) MAL-2026-5026 | Malicious | Not scored | 28 May, 2026 | npm @mlspace/shared-storage |
Malicious release: Malicious code in @polka-ui/config (npm) GHSA-8pwf-pjp8-jw22, MAL-2026-4834 | Malicious | Not scored | 27 May, 2026 | npm @polka-ui/config |
Malicious release: Malicious code in bulletproof-json (npm) GHSA-w574-hfjv-7w24, MAL-2026-4833 | Malicious | Not scored | 27 May, 2026 | npm bulletproof-json |
Malicious release: Malicious code in editorial-code (npm) MAL-2026-4830 | Malicious | Not scored | 27 May, 2026 | npm editorial-code |
Malicious release: Malicious code in mse-authentication (npm) MAL-2026-4832 | Malicious | Not scored | 27 May, 2026 | npm mse-authentication |
Malicious release: Malicious code in editorial-mse-authentication-ui (npm) MAL-2026-4831 | Malicious | Not scored | 27 May, 2026 | npm editorial-mse-authentication-ui |
Malicious release: Malicious code in unleash-js (npm) GHSA-j5f8-3p7p-5c4c, MAL-2026-4827 | Malicious | Not scored | 26 May, 2026 | npm unleash-js |
Malicious release: Malicious code in wm-mapper (npm) GHSA-vqvw-vx7g-vp4p, MAL-2026-4826 | Malicious | Not scored | 26 May, 2026 | npm wm-mapper |
Malicious release: Malicious code in loadtest-browser-lib (npm) MAL-2026-4822 | Malicious | Not scored | 26 May, 2026 | npm loadtest-browser-lib |
Malicious release: Malicious code in @slipless/sdk (npm) MAL-2026-4815 | Malicious | Not scored | 26 May, 2026 | npm @slipless/sdk |
Malicious release: Malicious code in chainix (npm) GHSA-mrx8-p3w9-5cfm, MAL-2026-4817 | Malicious | Not scored | 26 May, 2026 | npm chainix |
Malicious release: Malicious code in token-me-uk (npm) MAL-2026-4819 | Malicious | Not scored | 26 May, 2026 | npm token-me-uk |
Malicious release: Malicious code in saturn-bail (npm) GHSA-948w-97g3-hvpp, MAL-2026-4818 | Malicious | Not scored | 26 May, 2026 | npm saturn-bail |
Malicious release: Malicious code in metricflow-tracker (npm) MAL-2026-4805 | Malicious | Not scored | 26 May, 2026 | npm metricflow-tracker |
Malicious release: Malicious code in web3-prices (npm) GHSA-g3vg-qhhh-pfv7, MAL-2026-4800 | Malicious | Not scored | 26 May, 2026 | npm web3-prices |
Malicious release: Malicious code in web3.prc (npm) GHSA-r4j3-79hx-xpr6, MAL-2026-4801 | Malicious | Not scored | 26 May, 2026 | npm web3.prc |
Malicious release: Malicious code in int-node (npm) GHSA-r4ww-65gv-rhv8, MAL-2026-4797 | Malicious | Not scored | 26 May, 2026 | npm int-node |
Malicious release: Malicious code in @fhkry/baileys (npm) GHSA-779h-825r-3p44, MAL-2026-4803 | Malicious | Not scored | 26 May, 2026 | npm @fhkry/baileys |
Malicious release: Malicious code in shop-minis (npm) GHSA-ghv6-vv2r-5f8v, MAL-2026-4807 | Malicious | Not scored | 26 May, 2026 | npm shop-minis |
Malicious release: Malicious code in fastjsonlog (npm) GHSA-82gw-34fc-qfwj, MAL-2026-4796 | Malicious | Not scored | 26 May, 2026 | npm fastjsonlog |
Malicious release: Malicious code in jsonlogbundler (npm) GHSA-hhf2-gfcc-vw45, MAL-2026-4798 | Malicious | Not scored | 26 May, 2026 | npm jsonlogbundler |
Malicious release: Malicious code in pdf-lib-enhanced (npm) GHSA-9qcm-qgjc-h848, MAL-2026-4799 | Malicious | Not scored | 26 May, 2026 | npm pdf-lib-enhanced |
Malicious release: Malicious code in xlsx-enhanced (npm) GHSA-j5gx-8qjw-gp5q, MAL-2026-4802 | Malicious | Not scored | 26 May, 2026 | npm xlsx-enhanced |
Malicious release: Malicious code in shizukyu (npm) MAL-2026-4806 | Malicious | Not scored | 26 May, 2026 | npm shizukyu |
Malicious release: Malicious code in wm-idp-sdk (npm) GHSA-hq9q-4jgc-997v, MAL-2026-4808 | Malicious | Not scored | 26 May, 2026 | npm wm-idp-sdk |
Malicious release: Malicious code in react-json-chalk (npm) GHSA-x796-gxxr-pvcr, MAL-2026-4792 | Malicious | Not scored | 26 May, 2026 | npm react-json-chalk |
Malicious release: Malicious code in react-cleaner (npm) MAL-2026-4791 | Malicious | Not scored | 26 May, 2026 | npm react-cleaner |
Malicious release: Malicious code in vxui-react (npm) GHSA-783r-3958-xf8p, MAL-2026-4793 | Malicious | Not scored | 26 May, 2026 | npm vxui-react |
Malicious release: Malicious code in react-ui-polyfills (npm) GHSA-v7mj-pmr3-7x4p, MAL-2026-4784 | Malicious | Not scored | 26 May, 2026 | npm react-ui-polyfills |
Malicious release: Malicious code in test-nonmal-pkg-5 (npm) GHSA-gqhv-x4hg-wqv4, MAL-2026-4785 | Malicious | Not scored | 26 May, 2026 | npm test-nonmal-pkg-5 |
Malicious release: Malicious code in ether-bn.js (npm) GHSA-v3j8-x82x-chvr, MAL-2026-4779 | Malicious | Not scored | 26 May, 2026 | npm ether-bn.js |
Malicious release: Malicious code in reasonix-plugmem (npm) MAL-2026-4780 | Malicious | Not scored | 26 May, 2026 | npm reasonix-plugmem |
Malicious release: Malicious code in unique-id-64 (npm) GHSA-wp6h-8x7v-865g, MAL-2026-4781 | Malicious | Not scored | 26 May, 2026 | npm unique-id-64 |
Malicious release: Malicious code in 1cat-tunnel-client-zx (npm) MAL-2026-4778 | Malicious | Not scored | 26 May, 2026 | npm 1cat-tunnel-client-zx |
Malicious release: Malicious code in testing-on-npmjs (npm) GHSA-4847-p5f9-4366, MAL-2026-4356 | Malicious | Not scored | 26 May, 2026 | npm testing-on-npmjs |
Malicious release: Malicious code in wao (npm) GHSA-hr8w-cxp4-33p7, MAL-2026-4711 | Malicious | Not scored | 26 May, 2026 | npm wao |
Malicious release: Malicious code in weavedb-lite (npm) MAL-2026-4720 | Malicious | Not scored | 26 May, 2026 | npm weavedb-lite |
Malicious release: Malicious code in weavedb-warp-contracts-plugin-deploy (npm) MAL-2026-4727 | Malicious | Not scored | 26 May, 2026 | npm weavedb-warp-contracts-plugin-deploy |
Malicious release: Malicious code in weavedb-console (npm) MAL-2026-4717 | Malicious | Not scored | 26 May, 2026 | npm weavedb-console |
Malicious release: Malicious code in weavedb-sdk-base (npm) MAL-2026-4724 | Malicious | Not scored | 26 May, 2026 | npm weavedb-sdk-base |