Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in nikou-node (npm) MAL-2026-4620 | Malicious | Not scored | 21 May, 2026 | npm nikou-node |
Malicious release: Malicious code in chai-val (npm) MAL-2026-4515 | Malicious | Not scored | 21 May, 2026 | npm chai-val |
Malicious release: Malicious code in finup-mongo-library (npm) MAL-2026-4564 | Malicious | Not scored | 21 May, 2026 | npm finup-mongo-library |
Malicious release: Malicious code in payment-account-input-selector (npm) MAL-2026-4635 | Malicious | Not scored | 21 May, 2026 | npm payment-account-input-selector |
Malicious release: Malicious code in http-uploader-dev (npm) GHSA-4cmw-88qw-qcpr, MAL-2026-4580 | Malicious | Not scored | 21 May, 2026 | npm http-uploader-dev |
Malicious release: Malicious code in @hanssoft/libsignal-node (npm) GHSA-v265-vv2m-9pgf, MAL-2026-4393 | Malicious | Not scored | 21 May, 2026 | npm @hanssoft/libsignal-node |
Malicious release: Malicious code in ionic-insta-api-wrapper (npm) GHSA-65qr-q8w8-4q7r, MAL-2026-4588 | Malicious | Not scored | 21 May, 2026 | npm ionic-insta-api-wrapper |
Malicious release: Malicious code in oh-langfuse (npm) MAL-2026-4625 | Malicious | Not scored | 21 May, 2026 | npm oh-langfuse |
Malicious release: Malicious code in webservices.rest (npm) GHSA-2qjx-pgq9-vx24, MAL-2026-4335 | Malicious | Not scored | 21 May, 2026 | npm webservices.rest |
Malicious release: Malicious code in webservices.rest-utils (npm) GHSA-v62r-4vqp-f32g, MAL-2026-4336 | Malicious | Not scored | 21 May, 2026 | npm webservices.rest-utils |
Malicious release: Malicious code in @tiledesk/tiledesk-server (npm) GHSA-5vfv-hpg7-77hj, MAL-2026-4228 | Malicious | Not scored | 21 May, 2026 | npm @tiledesk/tiledesk-server |
Malicious release: Malicious code in turing-sdk (npm) MAL-2026-4696 | Malicious | Not scored | 21 May, 2026 | npm turing-sdk |
Malicious release: Malicious code in auth0-templates-scripts-utils (npm) GHSA-ff45-fchw-3969, MAL-2026-4490 | Malicious | Not scored | 21 May, 2026 | npm auth0-templates-scripts-utils |
Malicious release: Malicious code in auth0-templates-scripts (npm) GHSA-748c-3f9q-294w, MAL-2026-4489 | Malicious | Not scored | 21 May, 2026 | npm auth0-templates-scripts |
Malicious release: Malicious code in sparkecoder (npm) MAL-2026-4673 | Malicious | Not scored | 21 May, 2026 | npm sparkecoder |
Malicious release: Malicious code in @zhengshuo888/huoke (npm) MAL-2026-4472 | Malicious | Not scored | 21 May, 2026 | npm @zhengshuo888/huoke |
Malicious release: Malicious code in git-userhub (npm) MAL-2026-4573 | Malicious | Not scored | 21 May, 2026 | npm git-userhub |
Malicious release: Malicious code in claw_messenger (npm) MAL-2026-4526 | Malicious | Not scored | 21 May, 2026 | npm claw_messenger |
Malicious release: Malicious code in dot-utils-plus (npm) MAL-2026-4549 | Malicious | Not scored | 21 May, 2026 | npm dot-utils-plus |
Malicious release: Malicious code in fastgrc-openclaw (npm) MAL-2026-4558 | Malicious | Not scored | 21 May, 2026 | npm fastgrc-openclaw |
Malicious release: Malicious code in polygon-toolkit-validate (npm) GHSA-w4vh-7827-g474, MAL-2026-4642 | Malicious | Not scored | 21 May, 2026 | npm polygon-toolkit-validate |
Malicious release: Malicious code in cerebrum-core (npm) GHSA-7886-2x59-rg2h, MAL-2026-4510 | Malicious | Not scored | 21 May, 2026 | npm cerebrum-core |
Malicious release: Malicious code in @djessicatony/folk-mcp-canary (npm) MAL-2026-4382 | Malicious | Not scored | 21 May, 2026 | npm @djessicatony/folk-mcp-canary |
Malicious release: Malicious code in @gad360/apothem (npm) MAL-2026-4391 | Malicious | Not scored | 21 May, 2026 | npm @gad360/apothem |
Malicious release: Malicious code in n8n-nodes-pentest-rce (npm) GHSA-hrxx-vwgp-4xff, MAL-2026-4617 | Malicious | Not scored | 21 May, 2026 | npm n8n-nodes-pentest-rce |
Malicious release: Malicious code in anthropic-shared-logger (npm) GHSA-4vj8-cm74-gcx3, MAL-2026-4479 | Malicious | Not scored | 21 May, 2026 | npm anthropic-shared-logger |
Malicious release: Malicious code in wallet-security-checker (npm) GHSA-2j9x-hxgf-42vh, MAL-2026-4219 | Malicious | Not scored | 21 May, 2026 | npm wallet-security-checker |
Malicious release: Malicious code in polymarket-auto-trade (npm) GHSA-3j8p-hfj4-j6w6, MAL-2026-4210 | Malicious | Not scored | 21 May, 2026 | npm polymarket-auto-trade |
Malicious release: Malicious code in polymarket-trade (npm) GHSA-5qjv-f5g4-jx7w, MAL-2026-4215 | Malicious | Not scored | 21 May, 2026 | npm polymarket-trade |
Malicious release: Malicious code in eth-wallet-sentinel (npm) GHSA-7r6r-hqg7-f6mq, MAL-2026-4207 | Malicious | Not scored | 21 May, 2026 | npm eth-wallet-sentinel |
Malicious release: Malicious code in mnemonic-safety-check (npm) GHSA-8cjc-h554-gxp5, MAL-2026-4208 | Malicious | Not scored | 21 May, 2026 | npm mnemonic-safety-check |
Malicious release: Malicious code in polymarket-copy-trading (npm) GHSA-9jh7-4779-9m8r, MAL-2026-4213 | Malicious | Not scored | 21 May, 2026 | npm polymarket-copy-trading |
Malicious release: Malicious code in crypto-credential-scanner (npm) GHSA-9vgj-5wvq-cwp6, MAL-2026-4203 | Malicious | Not scored | 21 May, 2026 | npm crypto-credential-scanner |
Malicious release: Malicious code in polymarket-bot (npm) GHSA-9x4c-gq65-ggmc, MAL-2026-4211 | Malicious | Not scored | 21 May, 2026 | npm polymarket-bot |
Malicious release: Malicious code in polymarket-claude-code (npm) GHSA-hqrj-3257-4cwr, MAL-2026-4212 | Malicious | Not scored | 21 May, 2026 | npm polymarket-claude-code |
Malicious release: Malicious code in polymarket-trader (npm) GHSA-jgmf-qv79-wc9f, MAL-2026-4216 | Malicious | Not scored | 21 May, 2026 | npm polymarket-trader |
Malicious release: Malicious code in polymarket-terminal (npm) GHSA-mhqj-q9r5-99vg, MAL-2026-4214 | Malicious | Not scored | 21 May, 2026 | npm polymarket-terminal |
Malicious release: Malicious code in polymarket-ai-agent (npm) GHSA-pm36-9m37-g548, MAL-2026-4209 | Malicious | Not scored | 21 May, 2026 | npm polymarket-ai-agent |
Malicious release: Malicious code in polymarket-trading-cli (npm) GHSA-q888-mwhg-ccmp, MAL-2026-4217 | Malicious | Not scored | 21 May, 2026 | npm polymarket-trading-cli |
Malicious release: Malicious code in defi-threat-scanner (npm) GHSA-q896-rx3q-5794, MAL-2026-4205 | Malicious | Not scored | 21 May, 2026 | npm defi-threat-scanner |
Malicious release: Malicious code in chain-key-validator (npm) GHSA-vpcq-rhwg-qph4, MAL-2026-4202 | Malicious | Not scored | 21 May, 2026 | npm chain-key-validator |
Malicious release: Malicious code in claude-internal-utils (npm) GHSA-jxg3-fwfv-fjwf, MAL-2026-4525 | Malicious | Not scored | 20 May, 2026 | npm claude-internal-utils |
Malicious release: Malicious code in deployment-key-auditor (npm) GHSA-m69v-rchm-xjjp, MAL-2026-4206 | Malicious | Not scored | 20 May, 2026 | npm deployment-key-auditor |
Malicious release: Malicious code in defi-env-auditor (npm) GHSA-3wcx-fvrv-6w6w, MAL-2026-4204 | Malicious | Not scored | 20 May, 2026 | npm defi-env-auditor |
Malicious release: Malicious code in solidity-deploy-guard (npm) GHSA-3r5j-pgc5-q23x, MAL-2026-4218 | Malicious | Not scored | 20 May, 2026 | npm solidity-deploy-guard |
Malicious release: Malicious code in supership-scan (npm) MAL-2026-4675 | Malicious | Not scored | 20 May, 2026 | npm supership-scan |
Malicious release: Malicious code in create-kachow (npm) MAL-2026-4539 | Malicious | Not scored | 20 May, 2026 | npm create-kachow |
Malicious release: Malicious code in chain-async-test (npm) MAL-2026-4516 | Malicious | Not scored | 20 May, 2026 | npm chain-async-test |
Malicious release: Malicious code in vite-json-config (npm) MAL-2026-4705 | Malicious | Not scored | 20 May, 2026 | npm vite-json-config |
Malicious release: Malicious code in bolt-delivery-menu-app (npm) GHSA-75c2-fw59-mg5f, GHSA-pfrq-994m-rxrr, MAL-2026-4499 | Malicious | Not scored | 20 May, 2026 | npm bolt-delivery-menu-app |