Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in portloop (npm) MAL-2026-6194 | Malicious | Not scored | 19 Jun, 2026 | npm portloop |
Malicious release: Malicious code in ts-linter-builders (npm) GHSA-4g6m-jp93-p5x7, MAL-2026-6195 | Malicious | Not scored | 19 Jun, 2026 | npm ts-linter-builders |
Malicious release: Malicious code in eslint-helper-1 (npm) GHSA-35c7-535m-jhv6, MAL-2026-6188 | Malicious | Not scored | 19 Jun, 2026 | npm eslint-helper-1 |
Malicious release: Malicious code in mjs-eslint-helper (npm) GHSA-qhjh-jf49-fm8p, MAL-2026-6190 | Malicious | Not scored | 19 Jun, 2026 | npm mjs-eslint-helper |
Malicious release: Malicious code in eslint-helper (npm) GHSA-m23v-7h8v-6mp4, MAL-2026-6187 | Malicious | Not scored | 19 Jun, 2026 | npm eslint-helper |
Malicious release: Malicious code in node-vfs-polyfill (npm) GHSA-89vx-wfvc-j58f, MAL-2026-6143 | Malicious | Not scored | 18 Jun, 2026 | npm node-vfs-polyfill |
Malicious release: Malicious code in db-connector-log (npm) GHSA-w7hw-9wmw-hj5w, MAL-2026-6142 | Malicious | Not scored | 18 Jun, 2026 | npm db-connector-log |
Malicious release: Malicious code in runtime-query (npm) GHSA-vh6x-853w-4qvp, MAL-2026-6144 | Malicious | Not scored | 18 Jun, 2026 | npm runtime-query |
Malicious release: Malicious code in clx-cookie-signature (npm) GHSA-vwwm-x6xj-cfmf, MAL-2026-6141 | Malicious | Not scored | 18 Jun, 2026 | npm clx-cookie-signature |
deepstream is vulnerable to prototype pollution CVE-2026-49252, GHSA-9v98-6g37-x9g6 | Critical | 0.5% | 18 Jun, 2026 | npm @deepstream/server |
Signal K Server: Server-Side Request Forgery via Remote Connection Endpoints CVE-2026-55591, GHSA-q59x-jc9f-gfqf | Medium | 0.3% | 18 Jun, 2026 | npm signalk-server |
Malicious release: Malicious code in @httpactions/strict-uri-encode (npm) MAL-2026-6140 | Malicious | Not scored | 18 Jun, 2026 | npm @httpactions/strict-uri-encode |
Malicious release: Malicious code in @httpactions/encode-url (npm) MAL-2026-6139 | Malicious | Not scored | 18 Jun, 2026 | npm @httpactions/encode-url |
budibase: Database Connector SQL Injections in PostgreSQL, MS SQL, and MySQL CVE-2026-64657, GHSA-qqf5-x7mj-v43p | High | 0.4% | 18 Jun, 2026 | npm budibase |
@acastellon/auth: Authentication bypass via spoofable headers in validateToken() CVE-2026-58399, GHSA-gfj5-979r-92pw | Critical | 1.0% | 18 Jun, 2026 | npm @acastellon/auth |
AgenticMail: Unauthenticated inbound mail triggers bypassPermissions resume of the operator's Claude Code session (bridge-wake) CVE-2026-57495, GHSA-fq4x-789w-jg5h | High | 0.4% | 18 Jun, 2026 | npm @agenticmail/claudecode npm @agenticmail/codex npm @agenticmail/core npm @agenticmail/openclaw |
AgenticMail: Cross-agent task authorization bypass in AgenticMail API CVE-2026-57494, GHSA-hjwc-26pj-v3pm | High | 0.3% | 18 Jun, 2026 | npm @agenticmail/api |
Malicious release: Malicious code in @gbrlxvi/ts-project-lint (npm) GHSA-m526-p8gm-4wxg, MAL-2026-6121 | Malicious | Not scored | 18 Jun, 2026 | npm @gbrlxvi/ts-project-lint |
Malicious release: Malicious code in react-error-lint (npm) MAL-2026-6137 | Malicious | Not scored | 18 Jun, 2026 | npm react-error-lint |
Malicious release: Malicious code in ratelimitsucks (npm) GHSA-x94f-fgw2-crm2, MAL-2026-6135 | Malicious | Not scored | 18 Jun, 2026 | npm ratelimitsucks |
Malicious release: Malicious code in ratelimitsucks6 (npm) GHSA-h4fw-phfm-q23v, MAL-2026-6136 | Malicious | Not scored | 18 Jun, 2026 | npm ratelimitsucks6 |
Malicious release: Malicious code in abuden221 (npm) GHSA-3w26-cvrp-g5hj, MAL-2026-6130 | Malicious | Not scored | 18 Jun, 2026 | npm abuden221 |
Malicious release: Malicious code in abuden22 (npm) GHSA-x2v8-78v8-9pq4, MAL-2026-6129 | Malicious | Not scored | 18 Jun, 2026 | npm abuden22 |
Malicious release: Malicious code in abuden218 (npm) GHSA-rjwh-287v-qm8m, MAL-2026-6128 | Malicious | Not scored | 18 Jun, 2026 | npm abuden218 |
Malicious release: Malicious code in panrouter-admin (npm) MAL-2026-6134 | Malicious | Not scored | 18 Jun, 2026 | npm panrouter-admin |
Malicious release: Malicious code in panrouter (npm) MAL-2026-6133 | Malicious | Not scored | 18 Jun, 2026 | npm panrouter |
[Eclipse Theia] Indirect Prompt Injection via Auto-Loaded Workspace Prompt Template Files in AI Chat CVE-2026-46580, GHSA-m973-pr9r-hp2w | High | 0.5% | 18 Jun, 2026 | npm @theia/ai-chat npm @theia/ai-chat-ui npm @theia/ai-claude-code npm @theia/ai-code-completion +2 more |
[Eclipse Theia] Arbitrary Command Execution via Untrusted Workspace Task Definitions CVE-2026-44691, GHSA-g9jw-92q7-g7fj | High | 0.4% | 18 Jun, 2026 | npm @theia/debug npm @theia/task npm @theia/workspace |
[Eclipse Theia] Indirect Prompt Injection via Adversarial Workspace File and Directory Names in AI Chat CVE-2026-44688, GHSA-3jww-hxqj-wfq2 | High | 0.5% | 18 Jun, 2026 | npm @theia/ai-chat npm @theia/ai-chat-ui npm @theia/ai-claude-code npm @theia/ai-code-completion +3 more |
[Eclipse Theia] Data Exfiltration via Markdown Image Rendering in AI Chat CVE-2026-22551, GHSA-qwjm-9c66-w4q4 | Medium | 0.3% | 18 Jun, 2026 | npm @theia/ai-chat npm @theia/ai-chat-ui npm @theia/ai-claude-code npm @theia/ai-code-completion +3 more |
Malicious release: Malicious code in @onum-releases/utils (npm) MAL-2026-6127 | Malicious | Not scored | 18 Jun, 2026 | npm @onum-releases/utils |
Malicious release: Malicious code in @onum-releases/shared-components (npm) MAL-2026-6126 | Malicious | Not scored | 18 Jun, 2026 | npm @onum-releases/shared-components |
Malicious release: Malicious code in @onum-releases/ixel (npm) MAL-2026-6124 | Malicious | Not scored | 18 Jun, 2026 | npm @onum-releases/ixel |
Malicious release: Malicious code in @onum-releases/sdk (npm) MAL-2026-6125 | Malicious | Not scored | 18 Jun, 2026 | npm @onum-releases/sdk |
Malicious release: Malicious code in @onum-releases/auth (npm) MAL-2026-6123 | Malicious | Not scored | 18 Jun, 2026 | npm @onum-releases/auth |
Malicious release: Malicious code in @onum-releases/api-client (npm) MAL-2026-6122 | Malicious | Not scored | 18 Jun, 2026 | npm @onum-releases/api-client |
Malicious release: Malicious code in @caspianph/storyteller (npm) MAL-2026-6120 | Malicious | Not scored | 18 Jun, 2026 | npm @caspianph/storyteller |
Malicious release: Malicious code in computerrock-babel-preset-react-app (npm) MAL-2026-6131 | Malicious | Not scored | 18 Jun, 2026 | npm computerrock-babel-preset-react-app |
Malicious release: Malicious code in metavu (npm) MAL-2026-6132 | Malicious | Not scored | 18 Jun, 2026 | npm metavu |
Malicious release: Malicious code in parket-helper (npm) GHSA-w6cg-2gpv-j66m, MAL-2026-6119 | Malicious | Not scored | 18 Jun, 2026 | npm parket-helper |
MCPVault: PathFilter restricted-directory deny-list bypass via case and trailing dot/space equivalence CVE-2026-57441, GHSA-j99q-93c9-h869 | High | 0.2% | 18 Jun, 2026 | npm @bitbonsai/mcpvault |
Nodemailer: Message-level raw option bypasses disableFileAccess/disableUrlAccess, enabling arbitrary file read and full-response SSRF in the delivered message CVE-2026-82659, GHSA-p6gq-j5cr-w38f | High | 0.3% | 18 Jun, 2026 | npm nodemailer |
DOMPurify: Permanent `ALLOWED_ATTR` pollution via `setConfig()` bypassing the hook clone-guard (incomplete fix of the 3.4.7 hook-pollution patch) CVE-2026-65898, GHSA-cmwh-pvxp-8882 | Medium | 0.2% | 18 Jun, 2026 | npm dompurify |
npm PraisonAI utility shell safe-command wrapper allowlist bypass via shell chaining CVE-2026-57133, GHSA-5jv7-2mjm-h6qj | High | 0.8% | 18 Jun, 2026 | npm praisonai |
npm PraisonAI AgentLoop onToolCall approval runs after tool execution CVE-2026-57137, GHSA-h2w2-v7j6-xqm4 | High | 0.5% | 18 Jun, 2026 | npm praisonai |
npm PraisonAI MCPServer exposes unauthenticated HTTP tools/call CVE-2026-57139, GHSA-j4f3-55x4-r6q2 | Critical | 0.8% | 18 Jun, 2026 | npm praisonai |
npm PraisonAI AgentOS exposes unauthenticated agent listing and invocation CVE-2026-57140, GHSA-9752-mhqh-h34f | Critical | 0.6% | 18 Jun, 2026 | npm praisonai |
PraisonAI: Remote Code Execution via Sandbox Escape in `codeMode` Tool CVE-2026-57141, GHSA-p69m-4f92-2v84 | Critical | 0.7% | 18 Jun, 2026 | npm praisonai |
npm PraisonAI SandboxExecutor allowedCommands bypass via shell chaining CVE-2026-57136, GHSA-vjv9-7m7j-h833 | High | 0.5% | 18 Jun, 2026 | npm praisonai |
npm PraisonAI codeMode sandbox escape via Function constructor CVE-2026-57138, GHSA-vmmj-pfw7-fjwp | Critical | 0.7% | 18 Jun, 2026 | npm praisonai |