Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in get-package-lint (npm) MAL-2026-4572 | Malicious | Not scored | 22 May, 2026 | npm get-package-lint |
Malicious release: Malicious code in lynx-keeper-cli (npm) GHSA-3p5r-gmr8-v7mr, MAL-2026-4604 | Malicious | Not scored | 22 May, 2026 | npm lynx-keeper-cli |
Malicious release: Malicious code in xy-ai-chat (npm) MAL-2026-4735 | Malicious | Not scored | 22 May, 2026 | npm xy-ai-chat |
Malicious release: Malicious code in @43uh3ig43/telemetry-client (npm) GHSA-hqc4-gwfr-49r6, MAL-2026-4252 | Malicious | Not scored | 22 May, 2026 | npm @43uh3ig43/telemetry-client |
Malicious release: Malicious code in bingocode (npm) MAL-2026-4497 | Malicious | Not scored | 22 May, 2026 | npm bingocode |
Malicious release: Malicious code in @druids/ui (npm) MAL-2026-4385 | Malicious | Not scored | 22 May, 2026 | npm @druids/ui |
Malicious release: Malicious code in harmony-enablers-test-2026 (npm) GHSA-ghw7-gg88-gpmr, MAL-2026-4251 | Malicious | Not scored | 22 May, 2026 | npm harmony-enablers-test-2026 |
Malicious release: Malicious code in wrld-dev (npm) MAL-2026-4733 | Malicious | Not scored | 22 May, 2026 | npm wrld-dev |
Malicious release: Malicious code in @shwfed/nuxt (npm) MAL-2026-4444 | Malicious | Not scored | 22 May, 2026 | npm @shwfed/nuxt |
Malicious release: Malicious code in pypi-build-verifier (npm) GHSA-4gg7-p7xj-789q, MAL-2026-4245 | Malicious | Not scored | 22 May, 2026 | npm pypi-build-verifier |
Malicious release: Malicious code in env-security-scanner (npm) GHSA-437g-626p-h8fm, MAL-2026-4238 | Malicious | Not scored | 22 May, 2026 | npm env-security-scanner |
Malicious release: Malicious code in mev-shield (npm) GHSA-5973-qc78-hqxv, MAL-2026-4609 | Malicious | Not scored | 22 May, 2026 | npm mev-shield |
Malicious release: Malicious code in deploy-guard-check (npm) GHSA-wpr6-96j5-4p35, MAL-2026-4237 | Malicious | Not scored | 22 May, 2026 | npm deploy-guard-check |
Malicious release: Malicious code in build-integrity-verify (npm) GHSA-39mh-vrfq-8hx7, MAL-2026-4232 | Malicious | Not scored | 22 May, 2026 | npm build-integrity-verify |
Malicious release: Malicious code in dependency-audit-tool (npm) GHSA-xxq2-p383-26rc, MAL-2026-4236 | Malicious | Not scored | 22 May, 2026 | npm dependency-audit-tool |
Malicious release: Malicious code in python-env-auditor (npm) GHSA-939m-5vr8-382c, MAL-2026-4246 | Malicious | Not scored | 22 May, 2026 | npm python-env-auditor |
Malicious release: Malicious code in credential-verification-cli (npm) GHSA-c7hj-r4xg-q237, MAL-2026-4235 | Malicious | Not scored | 22 May, 2026 | npm credential-verification-cli |
Malicious release: Malicious code in compliance-check-runner (npm) GHSA-9gxp-rrm3-qh48, MAL-2026-4234 | Malicious | Not scored | 22 May, 2026 | npm compliance-check-runner |
Malicious release: Malicious code in internallib_v493 (npm) GHSA-cmv7-95wv-gm8h, MAL-2026-4585 | Malicious | Not scored | 22 May, 2026 | npm internallib_v493 |
Malicious release: Malicious code in audit-logsss (npm) GHSA-gcq4-52q3-v4fm, MAL-2026-4487 | Malicious | Not scored | 22 May, 2026 | npm audit-logsss |
Malicious release: Malicious code in allbridge-example-react (npm) MAL-2026-4477 | Malicious | Not scored | 22 May, 2026 | npm allbridge-example-react |
Malicious release: Malicious code in ignite-market-contracts (npm) MAL-2026-4582 | Malicious | Not scored | 22 May, 2026 | npm ignite-market-contracts |
Malicious release: Malicious code in ignite-market-contractstest (npm) MAL-2026-4583 | Malicious | Not scored | 22 May, 2026 | npm ignite-market-contractstest |
Malicious release: Malicious code in crypt0co-walet-poc (npm) MAL-2026-4540 | Malicious | Not scored | 21 May, 2026 | npm crypt0co-walet-poc |
Malicious release: Malicious code in claude-content-writer (npm) MAL-2026-4524 | Malicious | Not scored | 21 May, 2026 | npm claude-content-writer |
Malicious release: Malicious code in search-connector-template (npm) MAL-2026-4664 | Malicious | Not scored | 21 May, 2026 | npm search-connector-template |
Malicious release: Malicious code in configcat-trello-powerup (npm) MAL-2026-4535 | Malicious | Not scored | 21 May, 2026 | npm configcat-trello-powerup |
Malicious release: Malicious code in @remitee-money-transfer/rmt-base (npm) MAL-2026-4424 | Malicious | Not scored | 21 May, 2026 | npm @remitee-money-transfer/rmt-base |
Malicious release: Malicious code in cryptoco-auth (npm) MAL-2026-4230 | Malicious | Not scored | 21 May, 2026 | npm cryptoco-auth |
Malicious release: Malicious code in cloudsmith-vsc (npm) MAL-2026-4530 | Malicious | Not scored | 21 May, 2026 | npm cloudsmith-vsc |
Malicious release: Malicious code in fnd-stores (npm) GHSA-wx9h-pmqq-rcgg, MAL-2026-4565 | Malicious | Not scored | 21 May, 2026 | npm fnd-stores |
Malicious release: Malicious code in pubnub-moderation-tool (npm) MAL-2026-4650 | Malicious | Not scored | 21 May, 2026 | npm pubnub-moderation-tool |
Malicious release: Malicious code in moneykit-cardano-demo (npm) MAL-2026-4614 | Malicious | Not scored | 21 May, 2026 | npm moneykit-cardano-demo |
Malicious release: Malicious code in chai-as-vite (npm) MAL-2026-4514 | Malicious | Not scored | 21 May, 2026 | npm chai-as-vite |
Malicious release: Malicious code in @jaggle/resizeobserves (npm) GHSA-qc6p-vxcj-7r4h, MAL-2026-4288 | Malicious | Not scored | 21 May, 2026 | npm @jaggle/resizeobserves |
Malicious release: Malicious code in maxixy-cli (npm) MAL-2026-4607 | Malicious | Not scored | 21 May, 2026 | npm maxixy-cli |
Malicious release: Malicious code in chai-as-tuned (npm) GHSA-2f37-mh3q-7394, MAL-2026-4513 | Malicious | Not scored | 21 May, 2026 | npm chai-as-tuned |
Malicious release: Malicious code in @pulse-web-platform-core/scripts-loader (npm) GHSA-f75f-hrx6-f8qh, MAL-2026-4421 | Malicious | Not scored | 21 May, 2026 | npm @pulse-web-platform-core/scripts-loader |
Malicious release: Malicious code in veteran (npm) MAL-2026-4703 | Malicious | Not scored | 21 May, 2026 | npm veteran |
Malicious release: Malicious code in tailwindcss-themers (npm) GHSA-6677-qmcf-whxp, MAL-2026-4226 | Malicious | Not scored | 21 May, 2026 | npm tailwindcss-themers |
Malicious release: Malicious code in tailwindcss-theme-custom (npm) GHSA-79mj-3g96-g96c, MAL-2026-4225 | Malicious | Not scored | 21 May, 2026 | npm tailwindcss-theme-custom |
Malicious release: Malicious code in celonix-otp-react (npm) GHSA-873w-7879-qpxv, MAL-2026-4509 | Malicious | Not scored | 21 May, 2026 | npm celonix-otp-react |
Malicious release: Malicious code in json-spectaculation (npm) GHSA-7fg9-5rgv-4rvq, MAL-2026-4224 | Malicious | Not scored | 21 May, 2026 | npm json-spectaculation |
Malicious release: Malicious code in veteran-proxy (npm) MAL-2026-4704 | Malicious | Not scored | 21 May, 2026 | npm veteran-proxy |
Malicious release: Malicious code in utils-mf (npm) GHSA-4c54-hwv9-c5xm, MAL-2026-4699 | Malicious | Not scored | 21 May, 2026 | npm utils-mf |
Malicious release: Malicious code in ihubinternal (npm) MAL-2026-4584 | Malicious | Not scored | 21 May, 2026 | npm ihubinternal |
Malicious release: Malicious code in @luke-101141/nobody (npm) MAL-2026-4229 | Malicious | Not scored | 21 May, 2026 | npm @luke-101141/nobody |
Malicious release: Malicious code in chai-as-afforded (npm) GHSA-55pm-4fm6-3x9v, MAL-2026-4222 | Malicious | Not scored | 21 May, 2026 | npm chai-as-afforded |
Malicious release: Malicious code in zest-product (npm) GHSA-qm6m-33hv-fvwv, MAL-2026-4738 | Malicious | Not scored | 21 May, 2026 | npm zest-product |
Malicious release: Malicious code in autoheal-dev-cli (npm) MAL-2026-4492 | Malicious | Not scored | 21 May, 2026 | npm autoheal-dev-cli |