Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @antv/gi-sdk-app (npm) MAL-2026-4016 | Malicious | Not scored | 19 May, 2026 | npm @antv/gi-sdk-app |
Malicious release: Malicious code in @antv/gi-theme-antd (npm) MAL-2026-4017 | Malicious | Not scored | 19 May, 2026 | npm @antv/gi-theme-antd |
Malicious release: Malicious code in @antv/github-config-cli (npm) MAL-2026-4018 | Malicious | Not scored | 19 May, 2026 | npm @antv/github-config-cli |
Malicious release: Malicious code in @antv/hierarchy (npm) MAL-2026-4027 | Malicious | Not scored | 19 May, 2026 | npm @antv/hierarchy |
Malicious release: Malicious code in @antv/interaction (npm) MAL-2026-4030 | Malicious | Not scored | 19 May, 2026 | npm @antv/interaction |
Malicious release: Malicious code in @antv/l7-editor (npm) MAL-2026-4039 | Malicious | Not scored | 19 May, 2026 | npm @antv/l7-editor |
Malicious release: Malicious code in @antv/l7-extension-g-layer (npm) MAL-2026-4040 | Malicious | Not scored | 19 May, 2026 | npm @antv/l7-extension-g-layer |
Malicious release: Malicious code in @antv/l7-map (npm) MAL-2026-4043 | Malicious | Not scored | 19 May, 2026 | npm @antv/l7-map |
Malicious release: Malicious code in @antv/l7-mapkit (npm) MAL-2026-4044 | Malicious | Not scored | 19 May, 2026 | npm @antv/l7-mapkit |
Malicious release: Malicious code in @antv/l7-mini (npm) MAL-2026-4046 | Malicious | Not scored | 19 May, 2026 | npm @antv/l7-mini |
Malicious release: Malicious code in @antv/l7-pass (npm) MAL-2026-4047 | Malicious | Not scored | 19 May, 2026 | npm @antv/l7-pass |
Malicious release: Malicious code in @antv/l7-scene (npm) MAL-2026-4050 | Malicious | Not scored | 19 May, 2026 | npm @antv/l7-scene |
Malicious release: Malicious code in @antv/l7-three (npm) MAL-2026-4052 | Malicious | Not scored | 19 May, 2026 | npm @antv/l7-three |
Malicious release: Malicious code in @antv/li-aiearth-assets (npm) MAL-2026-4059 | Malicious | Not scored | 19 May, 2026 | npm @antv/li-aiearth-assets |
Malicious release: Malicious code in @antv/li-editor (npm) MAL-2026-4062 | Malicious | Not scored | 19 May, 2026 | npm @antv/li-editor |
Malicious release: Malicious code in @antv/matrix-util (npm) MAL-2026-4067 | Malicious | Not scored | 19 May, 2026 | npm @antv/matrix-util |
Malicious release: Malicious code in @antv/mcp-server-antv (npm) MAL-2026-4068 | Malicious | Not scored | 19 May, 2026 | npm @antv/mcp-server-antv |
Malicious release: Malicious code in @antv/my-f2-pc (npm) MAL-2026-4071 | Malicious | Not scored | 19 May, 2026 | npm @antv/my-f2-pc |
Malicious release: Malicious code in @antv/narrative-text-editor (npm) MAL-2026-4072 | Malicious | Not scored | 19 May, 2026 | npm @antv/narrative-text-editor |
Malicious release: Malicious code in @antv/react-g (npm) MAL-2026-4076 | Malicious | Not scored | 19 May, 2026 | npm @antv/react-g |
Malicious release: Malicious code in @antv/s2-react-components (npm) MAL-2026-4079 | Malicious | Not scored | 19 May, 2026 | npm @antv/s2-react-components |
Malicious release: Malicious code in @antv/scale (npm) MAL-2026-4083 | Malicious | Not scored | 19 May, 2026 | npm @antv/scale |
Malicious release: Malicious code in @antv/semantic-release-pnpm (npm) MAL-2026-4084 | Malicious | Not scored | 19 May, 2026 | npm @antv/semantic-release-pnpm |
Malicious release: Malicious code in @antv/stat (npm) MAL-2026-4086 | Malicious | Not scored | 19 May, 2026 | npm @antv/stat |
Malicious release: Malicious code in @antv/webgpu-graph (npm) MAL-2026-4095 | Malicious | Not scored | 19 May, 2026 | npm @antv/webgpu-graph |
Malicious release: Malicious code in @antv/word-scale-chart (npm) MAL-2026-4096 | Malicious | Not scored | 19 May, 2026 | npm @antv/word-scale-chart |
Malicious release: Malicious code in @antv/x6-angular-shape (npm) MAL-2026-4098 | Malicious | Not scored | 19 May, 2026 | npm @antv/x6-angular-shape |
Malicious release: Malicious code in @antv/x6-components (npm) MAL-2026-4100 | Malicious | Not scored | 19 May, 2026 | npm @antv/x6-components |
Malicious release: Malicious code in @antv/x6-react (npm) MAL-2026-4112 | Malicious | Not scored | 19 May, 2026 | npm @antv/x6-react |
Malicious release: Malicious code in @antv/x6-vector (npm) MAL-2026-4115 | Malicious | Not scored | 19 May, 2026 | npm @antv/x6-vector |
Malicious release: Malicious code in @antv/xflow-core (npm) MAL-2026-4119 | Malicious | Not scored | 19 May, 2026 | npm @antv/xflow-core |
Malicious release: Malicious code in @antv/xflow-diff (npm) MAL-2026-4120 | Malicious | Not scored | 19 May, 2026 | npm @antv/xflow-diff |
Malicious release: Malicious code in ai-figure (npm) MAL-2026-4126 | Malicious | Not scored | 19 May, 2026 | npm ai-figure |
Malicious release: Malicious code in amapcn (npm) MAL-2026-4127 | Malicious | Not scored | 19 May, 2026 | npm amapcn |
Malicious release: Malicious code in boring-avatars-vanilla (npm) MAL-2026-4130 | Malicious | Not scored | 19 May, 2026 | npm boring-avatars-vanilla |
Malicious release: Malicious code in gantt-for-react (npm) MAL-2026-4135 | Malicious | Not scored | 19 May, 2026 | npm gantt-for-react |
Malicious release: Malicious code in jest-canvas-mock (npm) MAL-2026-4136 | Malicious | Not scored | 19 May, 2026 | npm jest-canvas-mock |
Malicious release: Malicious code in mcp-echarts (npm) MAL-2026-4146 | Malicious | Not scored | 19 May, 2026 | npm mcp-echarts |
Malicious release: Malicious code in mcp-mermaid (npm) MAL-2026-4147 | Malicious | Not scored | 19 May, 2026 | npm mcp-mermaid |
Malicious release: Malicious code in citrea-utils (npm) GHSA-49ww-ghvm-gxjq, MAL-2026-3831 | Malicious | Not scored | 18 May, 2026 | npm citrea-utils |
Malicious release: Malicious code in @zentrafinance/contracts (npm) GHSA-vcjx-wh23-jc6g, MAL-2026-3830 | Malicious | Not scored | 18 May, 2026 | npm @zentrafinance/contracts |
Malicious release: Malicious code in zentra-finance (npm) GHSA-5jpc-xr43-hmqj, MAL-2026-3832 | Malicious | Not scored | 18 May, 2026 | npm zentra-finance |
Malicious release: Malicious code in zentra-sdk (npm) GHSA-8f7q-w3m8-867m, MAL-2026-3833 | Malicious | Not scored | 18 May, 2026 | npm zentra-sdk |
Malicious release: Malicious code in ctf-flare (npm) MAL-2026-3836 | Malicious | Not scored | 18 May, 2026 | npm ctf-flare |
Malicious release: Malicious code in safe-env-reader (npm) GHSA-h48h-6qwg-6fwg, MAL-2026-3825 | Malicious | Not scored | 18 May, 2026 | npm safe-env-reader |
Malicious release: Malicious code in parse-escape-regex-string (npm) GHSA-7539-9rfq-wvx7, MAL-2026-3823 | Malicious | Not scored | 18 May, 2026 | npm parse-escape-regex-string |
Malicious release: Malicious code in string-manipulation-typescript (npm) GHSA-hg9f-779j-m788, MAL-2026-3827 | Malicious | Not scored | 18 May, 2026 | npm string-manipulation-typescript |
Malicious release: Malicious code in parse-regex-string (npm) GHSA-qr8m-9gqh-9r3f, MAL-2026-3824 | Malicious | Not scored | 18 May, 2026 | npm parse-regex-string |
Malicious release: Malicious code in secure-env-loader (npm) GHSA-qv2f-j4wq-jrvg, MAL-2026-3826 | Malicious | Not scored | 18 May, 2026 | npm secure-env-loader |
Malicious release: Malicious code in validate-api-key (npm) GHSA-v2g5-p8g8-3q37, MAL-2026-3828 | Malicious | Not scored | 18 May, 2026 | npm validate-api-key |