Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @vivaux/telemetry (npm) GHSA-hq2r-xw8m-v4q8, MAL-2026-4463 | Malicious | Not scored | 20 May, 2026 | npm @vivaux/telemetry |
Malicious release: Malicious code in cb-wallet-http (npm) GHSA-mv3f-92cr-83h7, MAL-2026-4507 | Malicious | Not scored | 20 May, 2026 | npm cb-wallet-http |
Malicious release: Malicious code in ethers-wallet-package (npm) GHSA-7pvf-g7jg-rxpj, MAL-2026-4553 | Malicious | Not scored | 20 May, 2026 | npm ethers-wallet-package |
Malicious release: Malicious code in private-next-pages (npm) MAL-2026-4193 | Malicious | Not scored | 20 May, 2026 | npm private-next-pages |
Malicious release: Malicious code in iv-stubborn (npm) GHSA-g54w-82gq-9mwp, MAL-2026-4192 | Malicious | Not scored | 20 May, 2026 | npm iv-stubborn |
Malicious release: Malicious code in @doctolib-apps/native-personalized-services (npm) GHSA-hgpx-hj7x-3cx9, MAL-2026-4186 | Malicious | Not scored | 20 May, 2026 | npm @doctolib-apps/native-personalized-services |
Malicious release: Malicious code in iv-bloomfilter (npm) GHSA-wxq4-7mxh-8jpq, MAL-2026-4191 | Malicious | Not scored | 20 May, 2026 | npm iv-bloomfilter |
Malicious release: Malicious code in uolcs-host-uol-anuncios-fe (npm) GHSA-p4vr-mx6g-r574, MAL-2026-4185 | Malicious | Not scored | 20 May, 2026 | npm uolcs-host-uol-anuncios-fe |
Malicious release: Malicious code in stripe-internal-utils (npm) MAL-2026-4184 | Malicious | Not scored | 20 May, 2026 | npm stripe-internal-utils |
Malicious release: Malicious code in @limebike/frontend-core-api (npm) GHSA-89wg-7gqg-72xf, MAL-2026-4187 | Malicious | Not scored | 20 May, 2026 | npm @limebike/frontend-core-api |
Malicious release: Malicious code in mamadoos-test (npm) GHSA-qwhw-2wfv-rv3r, MAL-2026-4605 | Malicious | Not scored | 20 May, 2026 | npm mamadoos-test |
Malicious release: Malicious code in randomlogs (npm) GHSA-6x8j-5cx8-5qv6, MAL-2026-4657 | Malicious | Not scored | 20 May, 2026 | npm randomlogs |
Malicious release: Malicious code in @limebike/supreme-data-grid (npm) GHSA-5jxw-6cjm-j5cf, MAL-2026-4189 | Malicious | Not scored | 20 May, 2026 | npm @limebike/supreme-data-grid |
Malicious release: Malicious code in gator-client (npm) GHSA-jrf3-vfx4-8vqh, GHSA-r569-8mc4-rfp6, MAL-2026-4569 | Malicious | Not scored | 20 May, 2026 | npm gator-client |
Malicious release: Malicious code in rendezvous-js (npm) GHSA-cj5p-rpr4-5cvh, GHSA-q26f-8xxj-pwwf, MAL-2026-4662 | Malicious | Not scored | 20 May, 2026 | npm rendezvous-js |
Malicious release: Malicious code in banana-stand (npm) GHSA-m27g-5q57-x86r, GHSA-x4gx-rrjg-5rrh, MAL-2026-4495 | Malicious | Not scored | 20 May, 2026 | npm banana-stand |
Malicious release: Malicious code in @limebike/supreme-date-pickers (npm) GHSA-9r56-r4mm-h4p3, MAL-2026-4190 | Malicious | Not scored | 20 May, 2026 | npm @limebike/supreme-date-pickers |
Malicious release: Malicious code in lynx-keeper (npm) GHSA-x7hr-g7qr-7j7p, MAL-2026-4603 | Malicious | Not scored | 20 May, 2026 | npm lynx-keeper |
Malicious release: Malicious code in @limebike/supreme (npm) GHSA-9x95-pwr5-8g32, MAL-2026-4188 | Malicious | Not scored | 20 May, 2026 | npm @limebike/supreme |
Malicious release: Malicious code in web3-secrets-detector (npm) GHSA-qc99-w9r4-jrg5, MAL-2026-4220 | Malicious | Not scored | 20 May, 2026 | npm web3-secrets-detector |
Malicious release: Malicious code in wallet-backup-verifier (npm) GHSA-jq6x-r6vm-vwrx, MAL-2026-4250 | Malicious | Not scored | 20 May, 2026 | npm wallet-backup-verifier |
Malicious release: Malicious code in encrata-cli (npm) MAL-2026-4551 | Malicious | Not scored | 20 May, 2026 | npm encrata-cli |
Malicious release: Malicious code in bitrix24-tasks-mcp-server (npm) MAL-2026-4498 | Malicious | Not scored | 20 May, 2026 | npm bitrix24-tasks-mcp-server |
Malicious release: Malicious code in yessir-node (npm) MAL-2026-4736 | Malicious | Not scored | 20 May, 2026 | npm yessir-node |
Malicious release: Malicious code in svharness (npm) MAL-2026-4676 | Malicious | Not scored | 20 May, 2026 | npm svharness |
Malicious release: Malicious code in gm-kilo (npm) MAL-2026-4574 | Malicious | Not scored | 20 May, 2026 | npm gm-kilo |
Malicious release: Malicious code in nw-demo (npm) GHSA-hmxw-6c9h-v2h2, MAL-2026-4624 | Malicious | Not scored | 20 May, 2026 | npm nw-demo |
Malicious release: Malicious code in nolimit-x (npm) GHSA-cp8c-2xwh-q227, MAL-2026-4621 | Malicious | Not scored | 20 May, 2026 | npm nolimit-x |
Malicious release: Malicious code in pinno-loggers (npm) MAL-2026-4196 | Malicious | Not scored | 20 May, 2026 | npm pinno-loggers |
Malicious release: Malicious code in pretty-logger-utils (npm) MAL-2026-4197 | Malicious | Not scored | 20 May, 2026 | npm pretty-logger-utils |
Malicious release: Malicious code in bricks-builder-mcp (npm) MAL-2026-4500 | Malicious | Not scored | 20 May, 2026 | npm bricks-builder-mcp |
Malicious release: Malicious code in pino-formatter (npm) GHSA-gg8p-hh3f-m2vx, MAL-2026-4640 | Malicious | Not scored | 20 May, 2026 | npm pino-formatter |
Malicious release: Malicious code in idlidosa (npm) MAL-2026-4581 | Malicious | Not scored | 20 May, 2026 | npm idlidosa |
Malicious release: Malicious code in @weirdorg/config (npm) GHSA-qj44-mw8g-p27p, MAL-2026-4466 | Malicious | Not scored | 20 May, 2026 | npm @weirdorg/config |
Malicious release: Malicious code in arc-diag-util (npm) GHSA-wx2g-gmxq-vvqv, MAL-2026-4481 | Malicious | Not scored | 20 May, 2026 | npm arc-diag-util |
Malicious release: Malicious code in @weirdorg/dotenv (npm) GHSA-p44j-chjm-p4wj, MAL-2026-4467 | Malicious | Not scored | 20 May, 2026 | npm @weirdorg/dotenv |
Malicious release: Malicious code in seekcode (npm) MAL-2026-4667 | Malicious | Not scored | 20 May, 2026 | npm seekcode |
Malicious release: Malicious code in @qwedqwed/axios (npm) GHSA-3gw3-hvvw-mp2h, MAL-2026-4422 | Malicious | Not scored | 20 May, 2026 | npm @qwedqwed/axios |
Malicious release: Malicious code in ts-logger-pack (npm) GHSA-8w97-mwv3-cwx3, MAL-2026-4199 | Malicious | Not scored | 20 May, 2026 | npm ts-logger-pack |
Malicious release: Malicious code in terminal-logger-utils (npm) GHSA-h9jr-prgp-c322, MAL-2026-4198 | Malicious | Not scored | 20 May, 2026 | npm terminal-logger-utils |
Malicious release: Malicious code in @sec-loans-ui/utils (npm) GHSA-vw7r-pxm7-p56f, MAL-2026-4432 | Malicious | Not scored | 20 May, 2026 | npm @sec-loans-ui/utils |
Malicious release: Malicious code in @riskine-frontend/design-elements (npm) GHSA-4576-fp54-qqfc, MAL-2026-4425 | Malicious | Not scored | 20 May, 2026 | npm @riskine-frontend/design-elements |
Malicious release: Malicious code in react-tracked-tony (npm) GHSA-6734-623v-3p4r, MAL-2026-4661 | Malicious | Not scored | 20 May, 2026 | npm react-tracked-tony |
Malicious release: Malicious code in qazaq-cli (npm) MAL-2026-4654 | Malicious | Not scored | 20 May, 2026 | npm qazaq-cli |
Malicious release: Malicious code in security-env-loader (npm) GHSA-rv4w-rvp6-p6rg, MAL-2026-4665 | Malicious | Not scored | 20 May, 2026 | npm security-env-loader |
Malicious release: Malicious code in fulcrum-sessions (npm) MAL-2026-4568 | Malicious | Not scored | 20 May, 2026 | npm fulcrum-sessions |
Malicious release: Malicious code in axiosqqq (npm) MAL-2026-4493 | Malicious | Not scored | 20 May, 2026 | npm axiosqqq |
Malicious release: Malicious code in bucket-protocol-sdk-v2 (npm) GHSA-23pf-2cqf-xh64, MAL-2026-4502 | Malicious | Not scored | 20 May, 2026 | npm bucket-protocol-sdk-v2 |
Malicious release: Malicious code in @pluxee-connect/api-client (npm) GHSA-wpmr-hxhp-4h27, MAL-2026-4418 | Malicious | Not scored | 20 May, 2026 | npm @pluxee-connect/api-client |
Malicious release: Malicious code in @web-3d-tool/sdk (npm) GHSA-qmfq-m796-v557, MAL-2026-4465 | Malicious | Not scored | 20 May, 2026 | npm @web-3d-tool/sdk |