Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @easytipsportal/node-helper (npm) GHSA-fc66-pv68-7v7r, MAL-2026-3812 | Malicious | Not scored | 17 May, 2026 | npm @easytipsportal/node-helper |
Malicious release: Malicious code in claude-code-base-action (npm) MAL-2026-3811 | Malicious | Not scored | 17 May, 2026 | npm claude-code-base-action |
Malicious release: Malicious code in @pluxee-connect/account-db-api-client (npm) MAL-2026-3810 | Malicious | Not scored | 17 May, 2026 | npm @pluxee-connect/account-db-api-client |
Malicious release: Malicious code in clementine-sdk (npm) GHSA-fc9m-mqj9-8j3r, MAL-2026-3822 | Malicious | Not scored | 17 May, 2026 | npm clementine-sdk |
Malicious release: Malicious code in @zentrafinance/protocol-config (npm) GHSA-p397-q58c-mw7p, MAL-2026-3813 | Malicious | Not scored | 17 May, 2026 | npm @zentrafinance/protocol-config |
Malicious release: Malicious code in citrea-sdk (npm) GHSA-hxr2-2gjf-vmwq, MAL-2026-3821 | Malicious | Not scored | 17 May, 2026 | npm citrea-sdk |
Malicious release: Malicious code in citrea-bridge (npm) GHSA-jh4j-2cx5-78p2, MAL-2026-3820 | Malicious | Not scored | 17 May, 2026 | npm citrea-bridge |
Malicious release: Malicious code in @tc-core/campus-service (npm) MAL-2026-3809 | Malicious | Not scored | 16 May, 2026 | npm @tc-core/campus-service |
Malicious release: Malicious code in @citi-icg-158830/icgds-react-css (npm) GHSA-729h-2x9h-56v4, MAL-2026-3808 | Malicious | Not scored | 16 May, 2026 | npm @citi-icg-158830/icgds-react-css |
Malicious release: Malicious code in @citi-icg-158830/elemental-ui-react (npm) GHSA-gw7h-mv77-3wv8, MAL-2026-3807 | Malicious | Not scored | 16 May, 2026 | npm @citi-icg-158830/elemental-ui-react |
Malicious release: Malicious code in @citi-icg-158830/elemental-chameleon (npm) MAL-2026-3806 | Malicious | Not scored | 16 May, 2026 | npm @citi-icg-158830/elemental-chameleon |
Malicious release: Malicious code in bui-react-10components (npm) MAL-2026-3804 | Malicious | Not scored | 16 May, 2026 | npm bui-react-10components |
Malicious release: Malicious code in @zentrafinance/types (npm) GHSA-f5rj-fcq3-x58f, MAL-2026-3815 | Malicious | Not scored | 16 May, 2026 | npm @zentrafinance/types |
Malicious release: Malicious code in @zentrafinance/sdk (npm) GHSA-pxcx-j83m-gc4x, MAL-2026-3814 | Malicious | Not scored | 16 May, 2026 | npm @zentrafinance/sdk |
Malicious release: Malicious code in apexpro-node (npm) GHSA-m598-5772-88pg, MAL-2026-3819 | Malicious | Not scored | 16 May, 2026 | npm apexpro-node |
Malicious release: Malicious code in apex-connector (npm) MAL-2026-3816 | Malicious | Not scored | 16 May, 2026 | npm apex-connector |
Malicious release: Malicious code in apexomni-node (npm) GHSA-qgpx-ffgh-93qv, MAL-2026-3818 | Malicious | Not scored | 16 May, 2026 | npm apexomni-node |
Malicious release: Malicious code in apex-trading (npm) MAL-2026-3817 | Malicious | Not scored | 16 May, 2026 | npm apex-trading |
Malicious release: Malicious code in @datatrain/passenger-v3 (npm) MAL-2026-3802 | Malicious | Not scored | 15 May, 2026 | npm @datatrain/passenger-v3 |
Malicious release: Malicious code in dowload_ebok_como_leer_el_futbol_by_ruud_gullit_8qd97 (npm) GHSA-26wq-8rv4-pr98, MAL-2026-3795 | Malicious | Not scored | 15 May, 2026 | npm dowload_ebok_como_leer_el_futbol_by_ruud_gullit_8qd97 |
Malicious release: Malicious code in dowload_ebok_terra_incognita_urania_by_ian_mcdonald_um4vu (npm) GHSA-46mf-fcf5-frhf, MAL-2026-3798 | Malicious | Not scored | 15 May, 2026 | npm dowload_ebok_terra_incognita_urania_by_ian_mcdonald_um4vu |
Malicious release: Malicious code in dowload_ebok_also_an_octopus_by_maggie_tokuda_hall_ah2ip (npm) GHSA-5h56-6f6c-4m4f, MAL-2026-3794 | Malicious | Not scored | 15 May, 2026 | npm dowload_ebok_also_an_octopus_by_maggie_tokuda_hall_ah2ip |
Malicious release: Malicious code in dowload_ebok_the_testament_of_solomon_by_king_solomon_frederick_cornwallis_conybeare_5201c (npm) GHSA-cgc9-hq34-3978, MAL-2026-3799 | Malicious | Not scored | 15 May, 2026 | npm dowload_ebok_the_testament_of_solomon_by_king_solomon_frederick_cornwallis_conybeare_5201c |
Malicious release: Malicious code in the_secret_of_running_by_hans_van_dijk_ron_van_megen_02jsk (npm) GHSA-gqq6-4xhc-x38f, MAL-2026-3801 | Malicious | Not scored | 15 May, 2026 | npm the_secret_of_running_by_hans_van_dijk_ron_van_megen_02jsk |
Malicious release: Malicious code in dowload_ebok_stalking_jack_the_ripper_by_kerri_maniscalco_james_patterson_b529t (npm) GHSA-gx89-7jf6-wf89, MAL-2026-3797 | Malicious | Not scored | 15 May, 2026 | npm dowload_ebok_stalking_jack_the_ripper_by_kerri_maniscalco_james_patterson_b529t |
Malicious release: Malicious code in dowload_ebok_the_upside_of_unrequited_by_becky_albertalli_2jgmw (npm) GHSA-p3hv-ff6m-fcxx, MAL-2026-3800 | Malicious | Not scored | 15 May, 2026 | npm dowload_ebok_the_upside_of_unrequited_by_becky_albertalli_2jgmw |
Malicious release: Malicious code in dowload_ebok_los_enemigos_del_comercio_by_antonio_escohotado_6t2l4 (npm) GHSA-r33v-27px-qhf6, MAL-2026-3796 | Malicious | Not scored | 15 May, 2026 | npm dowload_ebok_los_enemigos_del_comercio_by_antonio_escohotado_6t2l4 |
Malicious release: Malicious code in browser-interaction-time-utils (npm) GHSA-39gr-8vr4-pr2p, MAL-2026-3786 | Malicious | Not scored | 15 May, 2026 | npm browser-interaction-time-utils |
Malicious release: Malicious code in jenkins-forge-utils (npm) GHSA-4w53-v6c9-xmmg, MAL-2026-3790 | Malicious | Not scored | 15 May, 2026 | npm jenkins-forge-utils |
Malicious release: Malicious code in jenkins-for-jira (npm) GHSA-5wcf-4xgg-jf7f, MAL-2026-3788 | Malicious | Not scored | 15 May, 2026 | npm jenkins-for-jira |
Malicious release: Malicious code in browser-interaction-time-demo (npm) GHSA-664m-cw9c-fqgv, MAL-2026-3785 | Malicious | Not scored | 15 May, 2026 | npm browser-interaction-time-demo |
Malicious release: Malicious code in atlassian-marathon-asset-pipeline (npm) GHSA-9gpq-xqfp-fc5x, MAL-2026-3782 | Malicious | Not scored | 15 May, 2026 | npm atlassian-marathon-asset-pipeline |
Malicious release: Malicious code in atlassian-jenkins-helper-utils (npm) GHSA-fv63-2mmg-59wx, MAL-2026-3781 | Malicious | Not scored | 15 May, 2026 | npm atlassian-jenkins-helper-utils |
Malicious release: Malicious code in marathon-assets (npm) GHSA-vm5r-rvm8-p85f, MAL-2026-3792 | Malicious | Not scored | 15 May, 2026 | npm marathon-assets |
Malicious release: Malicious code in jenkins-forge-app (npm) GHSA-vx6x-92w6-f9gc, MAL-2026-3789 | Malicious | Not scored | 15 May, 2026 | npm jenkins-forge-app |
Malicious release: Malicious code in json-pretty-logs (npm) GHSA-4gww-8cvc-jcx5, MAL-2026-3791 | Malicious | Not scored | 15 May, 2026 | npm json-pretty-logs |
Malicious release: Malicious code in babel-6-compatibility (npm) GHSA-g73c-gvfg-p745, MAL-2026-3783 | Malicious | Not scored | 15 May, 2026 | npm babel-6-compatibility |
Malicious release: Malicious code in babel-6-compatibility-utils (npm) GHSA-v7j4-27f9-8w4v, MAL-2026-3784 | Malicious | Not scored | 15 May, 2026 | npm babel-6-compatibility-utils |
Malicious release: Malicious code in simple-date-diff-utils (npm) GHSA-v86f-6r8q-pw54, MAL-2026-3793 | Malicious | Not scored | 15 May, 2026 | npm simple-date-diff-utils |
Malicious release: Malicious code in aliyun-internal-config (npm) GHSA-67cr-79v2-fp32, MAL-2026-3780 | Malicious | Not scored | 15 May, 2026 | npm aliyun-internal-config |
Malicious release: Malicious code in frank-at-alibaba-internal (npm) GHSA-hgq6-j7x3-3p37, MAL-2026-3787 | Malicious | Not scored | 15 May, 2026 | npm frank-at-alibaba-internal |
Malicious release: Malicious code in alicloud-pop-core (npm) GHSA-mm75-x3w9-c25r, MAL-2026-3779 | Malicious | Not scored | 15 May, 2026 | npm alicloud-pop-core |
Malicious release: Malicious code in cdp-core (npm) MAL-2026-3752 | Malicious | Not scored | 15 May, 2026 | npm cdp-core |
Malicious release: Malicious code in deepl-sync (npm) GHSA-qvrg-265v-cqvc, MAL-2026-3745 | Malicious | Not scored | 14 May, 2026 | npm deepl-sync |
Malicious release: Malicious code in @pelmnaads/naads-common-logger (npm) MAL-2026-3748 | Malicious | Not scored | 14 May, 2026 | npm @pelmnaads/naads-common-logger |
Malicious release: Malicious code in exxpress-tool (npm) MAL-2026-3762 | Malicious | Not scored | 14 May, 2026 | npm exxpress-tool |
Malicious release: Malicious code in sysbin (npm) MAL-2026-3773 | Malicious | Not scored | 14 May, 2026 | npm sysbin |
Malicious release: Malicious code in tsliverhome (npm) GHSA-pchc-8c97-59c8, MAL-2026-3775 | Malicious | Not scored | 14 May, 2026 | npm tsliverhome |
Malicious release: Malicious code in @webapp-next/store (npm) MAL-2026-3749 | Malicious | Not scored | 14 May, 2026 | npm @webapp-next/store |
Malicious release: Malicious code in request-logger-canary (npm) GHSA-hvf9-xwj5-pqqj, MAL-2026-3771 | Malicious | Not scored | 14 May, 2026 | npm request-logger-canary |