Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in weavedb-exm-sdk (npm) MAL-2026-4718 | Malicious | Not scored | 26 May, 2026 | npm weavedb-exm-sdk |
Malicious release: Malicious code in arnext-arkb (npm) MAL-2026-4483 | Malicious | Not scored | 26 May, 2026 | npm arnext-arkb |
Malicious release: Malicious code in create-arnext-app (npm) MAL-2026-4538 | Malicious | Not scored | 26 May, 2026 | npm create-arnext-app |
Malicious release: Malicious code in roidjs (npm) MAL-2026-4663 | Malicious | Not scored | 26 May, 2026 | npm roidjs |
Malicious release: Malicious code in test-weavedb-sdk (npm) MAL-2026-4690 | Malicious | Not scored | 26 May, 2026 | npm test-weavedb-sdk |
Malicious release: Malicious code in arnext (npm) MAL-2026-4482 | Malicious | Not scored | 26 May, 2026 | npm arnext |
Malicious release: Malicious code in weavedb-client (npm) GHSA-6fj3-894w-h3x9, MAL-2026-4716 | Malicious | Not scored | 26 May, 2026 | npm weavedb-client |
Malicious release: Malicious code in atomic-notes (npm) MAL-2026-4486 | Malicious | Not scored | 26 May, 2026 | npm atomic-notes |
Malicious release: Malicious code in weavedb-offchain (npm) GHSA-pxrc-4fpx-c74r, MAL-2026-4722 | Malicious | Not scored | 26 May, 2026 | npm weavedb-offchain |
Malicious release: Malicious code in ai3 (npm) MAL-2026-4476 | Malicious | Not scored | 26 May, 2026 | npm ai3 |
Malicious release: Malicious code in cwao-units (npm) GHSA-36rh-p4hx-qrr8, MAL-2026-4546 | Malicious | Not scored | 26 May, 2026 | npm cwao-units |
Malicious release: Malicious code in weavedb-exm-sdk-web (npm) MAL-2026-4719 | Malicious | Not scored | 26 May, 2026 | npm weavedb-exm-sdk-web |
Malicious release: Malicious code in weavedb-tools (npm) MAL-2026-4726 | Malicious | Not scored | 26 May, 2026 | npm weavedb-tools |
Malicious release: Malicious code in fpjson-lang (npm) GHSA-vhjh-rmpr-mcqm, MAL-2026-4566 | Malicious | Not scored | 26 May, 2026 | npm fpjson-lang |
Malicious release: Malicious code in wdb-sdk (npm) MAL-2026-4714 | Malicious | Not scored | 26 May, 2026 | npm wdb-sdk |
Malicious release: Malicious code in monade (npm) MAL-2026-4613 | Malicious | Not scored | 26 May, 2026 | npm monade |
Malicious release: Malicious code in wdb-cli (npm) MAL-2026-4713 | Malicious | Not scored | 26 May, 2026 | npm wdb-cli |
Malicious release: Malicious code in cwao-tools (npm) MAL-2026-4545 | Malicious | Not scored | 26 May, 2026 | npm cwao-tools |
Malicious release: Malicious code in warp-contracts-plugin-deploy-test (npm) MAL-2026-4712 | Malicious | Not scored | 26 May, 2026 | npm warp-contracts-plugin-deploy-test |
Malicious release: Malicious code in testnpmnmp (npm) MAL-2026-4691 | Malicious | Not scored | 26 May, 2026 | npm testnpmnmp |
Malicious release: Malicious code in cwao (npm) MAL-2026-4544 | Malicious | Not scored | 26 May, 2026 | npm cwao |
Malicious release: Malicious code in test-ajs (npm) MAL-2026-4689 | Malicious | Not scored | 26 May, 2026 | npm test-ajs |
Malicious release: Malicious code in zkjson (npm) MAL-2026-4739 | Malicious | Not scored | 26 May, 2026 | npm zkjson |
Malicious release: Malicious code in aonote (npm) MAL-2026-4480 | Malicious | Not scored | 26 May, 2026 | npm aonote |
Malicious release: Malicious code in weavedb-sdk (npm) MAL-2026-4723 | Malicious | Not scored | 26 May, 2026 | npm weavedb-sdk |
Malicious release: Malicious code in weavedb-base (npm) GHSA-xj9g-9ff6-g755, MAL-2026-4715 | Malicious | Not scored | 26 May, 2026 | npm weavedb-base |
Malicious release: Malicious code in weavedb-node-client (npm) GHSA-94x8-wq6v-6gwp, MAL-2026-4721 | Malicious | Not scored | 26 May, 2026 | npm weavedb-node-client |
Malicious release: Malicious code in weavedb-sdk-node (npm) MAL-2026-4725 | Malicious | Not scored | 26 May, 2026 | npm weavedb-sdk-node |
Malicious release: Malicious code in fe-utils-core (npm) GHSA-8xf7-7m4f-fgrv, MAL-2026-4561 | Malicious | Not scored | 26 May, 2026 | npm fe-utils-core |
Malicious release: Malicious code in bandkit (npm) GHSA-v69f-q3vh-9qcf, MAL-2026-4496 | Malicious | Not scored | 25 May, 2026 | npm bandkit |
Malicious release: Malicious code in xarc-webpack-cli (npm) GHSA-2xcr-5qfc-fq54, MAL-2026-4352 | Malicious | Not scored | 25 May, 2026 | npm xarc-webpack-cli |
Malicious release: Malicious code in json-to-simple-graphql-schema (npm) GHSA-2qqv-9mw5-52q2, MAL-2026-4590 | Malicious | Not scored | 25 May, 2026 | npm json-to-simple-graphql-schema |
Malicious release: Malicious code in @izumiswap/sdk (npm) GHSA-q782-j24w-vv68, MAL-2026-4396 | Malicious | Not scored | 25 May, 2026 | npm @izumiswap/sdk |
Malicious release: Malicious code in motion-tool (npm) GHSA-hw79-5457-g9c3, MAL-2026-4615 | Malicious | Not scored | 25 May, 2026 | npm motion-tool |
Malicious release: Malicious code in happy-dlscord.js (npm) GHSA-6gjr-97pp-w2cw, MAL-2026-4575 | Malicious | Not scored | 25 May, 2026 | npm happy-dlscord.js |
Malicious release: Malicious code in skills-detector (npm) GHSA-wxv4-4mmm-mmm9, MAL-2026-4670 | Malicious | Not scored | 25 May, 2026 | npm skills-detector |
Malicious release: Malicious code in @databus-service-ui/scroll-up-content (npm) GHSA-6r38-pqqw-473h, MAL-2026-4378 | Malicious | Not scored | 25 May, 2026 | npm @databus-service-ui/scroll-up-content |
Malicious release: Malicious code in @databus-service-ui/ui-event (npm) GHSA-jcmj-fj4g-6rh7, MAL-2026-4351 | Malicious | Not scored | 25 May, 2026 | npm @databus-service-ui/ui-event |
Malicious release: Malicious code in @service-suppliers/suppliers (npm) GHSA-ppcx-6vx9-76mf, MAL-2026-4438 | Malicious | Not scored | 25 May, 2026 | npm @service-suppliers/suppliers |
Malicious release: Malicious code in @service-user-notifications/set_notifications_not_removable (npm) GHSA-r7vx-hgm4-ggqf, MAL-2026-4439 | Malicious | Not scored | 25 May, 2026 | npm @service-user-notifications/set_notifications_not_removable |
Malicious release: Malicious code in @service-suppliers/set_selected_supplier (npm) GHSA-w237-rgwp-fh78, MAL-2026-4437 | Malicious | Not scored | 25 May, 2026 | npm @service-suppliers/set_selected_supplier |
Malicious release: Malicious code in @service-suppliers/select-supplier-watcher-saga (npm) GHSA-3f9q-2rjw-5grc, MAL-2026-4436 | Malicious | Not scored | 25 May, 2026 | npm @service-suppliers/select-supplier-watcher-saga |
Malicious release: Malicious code in @service-suppliers/fetch_suppliers_action_saga (npm) GHSA-2fg8-hcf8-7qjg, MAL-2026-4435 | Malicious | Not scored | 25 May, 2026 | npm @service-suppliers/fetch_suppliers_action_saga |
Malicious release: Malicious code in normalize-path-seq (npm) GHSA-74x9-35vr-vx9c, MAL-2026-4622 | Malicious | Not scored | 25 May, 2026 | npm normalize-path-seq |
Malicious release: Malicious code in api-rs-node (npm) GHSA-r648-cv89-gjg2, MAL-2026-4348 | Malicious | Not scored | 25 May, 2026 | npm api-rs-node |
Malicious release: Malicious code in verify-mycommand (npm) GHSA-cg2p-m899-xgpg, MAL-2026-4344 | Malicious | Not scored | 25 May, 2026 | npm verify-mycommand |
Malicious release: Malicious code in gehneb (npm) GHSA-q9pf-x337-xr68, MAL-2026-4570 | Malicious | Not scored | 25 May, 2026 | npm gehneb |
Malicious release: Malicious code in aes-decode-runner-pro (npm) GHSA-f4hv-x68w-wqr9, MAL-2026-4475 | Malicious | Not scored | 25 May, 2026 | npm aes-decode-runner-pro |
Malicious release: Malicious code in @polka-ui/loader (npm) GHSA-j263-hx4f-ph92, MAL-2026-4420 | Malicious | Not scored | 25 May, 2026 | npm @polka-ui/loader |
Malicious release: Malicious code in @loans/vehicles-api (npm) GHSA-fp77-68vp-78c2, MAL-2026-4404 | Malicious | Not scored | 25 May, 2026 | npm @loans/vehicles-api |