Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in gpt-sdk (npm) GHSA-wrmh-73gr-22fc, MAL-2026-5612 | Malicious | Not scored | 11 Jun, 2026 | npm gpt-sdk |
Malicious release: Malicious code in telebot-server (npm) MAL-2026-5620 | Malicious | Not scored | 11 Jun, 2026 | npm telebot-server |
Malicious release: Malicious code in twilio-sdk (npm) GHSA-889w-p55g-884m, MAL-2026-5621 | Malicious | Not scored | 11 Jun, 2026 | npm twilio-sdk |
Malicious release: Malicious code in vite-tsconfig (npm) MAL-2026-5576 | Malicious | Not scored | 11 Jun, 2026 | npm vite-tsconfig |
Malicious release: Malicious code in ai-sdk-helpers (npm) GHSA-w43g-ccrm-v8xv, MAL-2026-5565 | Malicious | Not scored | 11 Jun, 2026 | npm ai-sdk-helpers |
Malicious release: Malicious code in fastify-addon (npm) GHSA-3237-pr3f-cm2g, MAL-2026-5566 | Malicious | Not scored | 11 Jun, 2026 | npm fastify-addon |
Malicious release: Malicious code in web-pool (npm) GHSA-x58x-qmg9-8q8v, MAL-2026-5577 | Malicious | Not scored | 11 Jun, 2026 | npm web-pool |
Malicious release: Malicious code in sendgrid-sdk (npm) GHSA-3cvf-g4vx-wgr3, MAL-2026-5572 | Malicious | Not scored | 11 Jun, 2026 | npm sendgrid-sdk |
Malicious release: Malicious code in webpack-cache-cycle (npm) GHSA-2p34-5qgm-wr3f, MAL-2026-5579 | Malicious | Not scored | 11 Jun, 2026 | npm webpack-cache-cycle |
Malicious release: Malicious code in webpack-patch (npm) GHSA-3hxr-3hxr-pqq4, MAL-2026-5581 | Malicious | Not scored | 11 Jun, 2026 | npm webpack-patch |
Malicious release: Malicious code in webpack-cache-clean (npm) GHSA-82q4-cw9w-vjj4, MAL-2026-5578 | Malicious | Not scored | 11 Jun, 2026 | npm webpack-cache-clean |
Malicious release: Malicious code in webpack-cache-reset (npm) GHSA-x29m-589q-wmg6, MAL-2026-5580 | Malicious | Not scored | 11 Jun, 2026 | npm webpack-cache-reset |
Malicious release: Malicious code in wp-env (npm) MAL-2026-5582 | Malicious | Not scored | 11 Jun, 2026 | npm wp-env |
Malicious release: Malicious code in @bestlzk/sectest (npm) MAL-2026-5561 | Malicious | Not scored | 11 Jun, 2026 | npm @bestlzk/sectest |
Malicious release: Malicious code in @tonsdk/core (npm) GHSA-hw5x-gw43-m4mx, MAL-2026-5564 | Malicious | Not scored | 11 Jun, 2026 | npm @tonsdk/core |
Malicious release: Malicious code in js-crypto-promise (npm) GHSA-hj2h-j6cr-5mq8, MAL-2026-5569 | Malicious | Not scored | 11 Jun, 2026 | npm js-crypto-promise |
Malicious release: Malicious code in @sentry-internal-sdk/profiling-node (npm) MAL-2026-5563 | Malicious | Not scored | 11 Jun, 2026 | npm @sentry-internal-sdk/profiling-node |
Malicious release: Malicious code in forge-jsx2 (npm) GHSA-hqj4-8wc5-r66r, MAL-2026-5568 | Malicious | Not scored | 11 Jun, 2026 | npm forge-jsx2 |
Malicious release: Malicious code in nim-submit-for-test (npm) MAL-2026-5570 | Malicious | Not scored | 11 Jun, 2026 | npm nim-submit-for-test |
Malicious release: Malicious code in @koadz/sso (npm) MAL-2026-5562 | Malicious | Not scored | 11 Jun, 2026 | npm @koadz/sso |
Malicious release: Malicious code in field-upload-tool (npm) MAL-2026-5567 | Malicious | Not scored | 11 Jun, 2026 | npm field-upload-tool |
Malicious release: Malicious code in solana-rpc-pool (npm) GHSA-2mh6-844f-vpmp, MAL-2026-5573 | Malicious | Not scored | 11 Jun, 2026 | npm solana-rpc-pool |
Malicious release: Malicious code in spotify-url-resolver (npm) GHSA-2xx5-g7pf-q356, MAL-2026-5574 | Malicious | Not scored | 11 Jun, 2026 | npm spotify-url-resolver |
Malicious release: Malicious code in testzapier (npm) GHSA-5ppv-rxq4-cf57, MAL-2026-5575 | Malicious | Not scored | 11 Jun, 2026 | npm testzapier |
Malicious release: Malicious code in qa-handoff (npm) MAL-2026-5571 | Malicious | Not scored | 11 Jun, 2026 | npm qa-handoff |
Malicious release: Malicious code in tailwind-dark-mode-kit (npm) GHSA-63rx-hcxw-wmpq, MAL-2026-5586 | Malicious | Not scored | 11 Jun, 2026 | npm tailwind-dark-mode-kit |
Malicious release: Malicious code in polymarket-clob-api (npm) GHSA-95f6-59wp-jpv8, MAL-2026-5585 | Malicious | Not scored | 11 Jun, 2026 | npm polymarket-clob-api |
Malicious release: Malicious code in emittery_styled (npm) GHSA-j6hp-9w2p-jwpw, MAL-2026-5583 | Malicious | Not scored | 11 Jun, 2026 | npm emittery_styled |
Malicious release: Malicious code in justgetit (npm) GHSA-4qrx-h7cq-cqh6, MAL-2026-5584 | Malicious | Not scored | 11 Jun, 2026 | npm justgetit |
Malicious release: Malicious code in @403name/electron-buidler (npm) GHSA-h23r-x34f-p95m, MAL-2026-5547 | Malicious | Not scored | 11 Jun, 2026 | npm @403name/electron-buidler |
Malicious release: Malicious code in @403name/fsevent (npm) GHSA-hp95-92q5-xfvc, MAL-2026-5549 | Malicious | Not scored | 11 Jun, 2026 | npm @403name/fsevent |
Malicious release: Malicious code in @403name/ether-js (npm) GHSA-qgxg-2j6w-jmpx, MAL-2026-5548 | Malicious | Not scored | 11 Jun, 2026 | npm @403name/ether-js |
Malicious release: Malicious code in solana-dev-tools (npm) GHSA-85ph-3qr8-3q2q, MAL-2026-5559 | Malicious | Not scored | 11 Jun, 2026 | npm solana-dev-tools |
Malicious release: Malicious code in sensivity (npm) GHSA-f4f4-69p9-w9f9, MAL-2026-5558 | Malicious | Not scored | 11 Jun, 2026 | npm sensivity |
Malicious release: Malicious code in solana-web3-community (npm) GHSA-hrhj-mh9v-hvr8, MAL-2026-5560 | Malicious | Not scored | 11 Jun, 2026 | npm solana-web3-community |
Malicious release: Malicious code in janus-flow (npm) GHSA-pcx2-ghwc-5cp6, MAL-2026-5556 | Malicious | Not scored | 11 Jun, 2026 | npm janus-flow |
Malicious release: Malicious code in janus-ft (npm) GHSA-9pc7-vjjr-gxpr, MAL-2026-5557 | Malicious | Not scored | 11 Jun, 2026 | npm janus-ft |
Malicious release: Malicious code in @my_name_is_khn/express-security-tool-v1 (npm) GHSA-v624-m435-vmfx, MAL-2026-5551 | Malicious | Not scored | 11 Jun, 2026 | npm @my_name_is_khn/express-security-tool-v1 |
Malicious release: Malicious code in @my_name_is_khn/express-security-tool-v3 (npm) GHSA-pf66-w9wm-c932, MAL-2026-5552 | Malicious | Not scored | 11 Jun, 2026 | npm @my_name_is_khn/express-security-tool-v3 |
Malicious release: Malicious code in @my_name_is_khn/express-security-tool (npm) GHSA-pmmq-vq8x-p92v, MAL-2026-5550 | Malicious | Not scored | 11 Jun, 2026 | npm @my_name_is_khn/express-security-tool |
Malicious release: Malicious code in express-timer (npm) GHSA-9vgr-cqvw-qwhx, MAL-2026-5555 | Malicious | Not scored | 11 Jun, 2026 | npm express-timer |
Malicious release: Malicious code in express-self-destruct2 (npm) GHSA-rjp6-jx87-x8x8, MAL-2026-5554 | Malicious | Not scored | 11 Jun, 2026 | npm express-self-destruct2 |
Malicious release: Malicious code in express-self-destruct (npm) GHSA-wqrx-jfhq-5hx7, MAL-2026-5553 | Malicious | Not scored | 11 Jun, 2026 | npm express-self-destruct |
Malicious release: Malicious code in india-map-react (npm) MAL-2026-5542 | Malicious | Not scored | 11 Jun, 2026 | npm india-map-react |
Malicious release: Malicious code in @w2d/web-components (npm) MAL-2026-5541 | Malicious | Not scored | 11 Jun, 2026 | npm @w2d/web-components |
Malicious release: Malicious code in jailbreak-code (npm) GHSA-fmpq-536x-fhwq, MAL-2026-5543 | Malicious | Not scored | 11 Jun, 2026 | npm jailbreak-code |
Malicious release: Malicious code in pocteszep (npm) MAL-2026-5544 | Malicious | Not scored | 11 Jun, 2026 | npm pocteszep |
Malicious release: Malicious code in @monitoring-lib/error-tracking (npm) GHSA-5g45-cfrj-qc64, MAL-2026-5540 | Malicious | Not scored | 11 Jun, 2026 | npm @monitoring-lib/error-tracking |
Malicious release: Malicious code in mermaid-v11 (npm) GHSA-xmj9-vhj4-8q6c, MAL-2026-5539 | Malicious | Not scored | 11 Jun, 2026 | npm mermaid-v11 |
Malicious release: Malicious code in @common-stack/generate-plugin (npm) GHSA-6p55-6hvr-3xmg, MAL-2026-5546 | Malicious | Not scored | 11 Jun, 2026 | npm @common-stack/generate-plugin |