Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in joi-pack (npm) MAL-2026-3765 | Malicious | Not scored | 14 May, 2026 | npm joi-pack |
Malicious release: Malicious code in chai-as-regulated (npm) MAL-2026-3753 | Malicious | Not scored | 14 May, 2026 | npm chai-as-regulated |
Malicious release: Malicious code in prisma-callback (npm) GHSA-rj6f-xp57-j95c, MAL-2026-3770 | Malicious | Not scored | 14 May, 2026 | npm prisma-callback |
Malicious release: Malicious code in node-ci-utils (npm) MAL-2026-3767 | Malicious | Not scored | 14 May, 2026 | npm node-ci-utils |
Malicious release: Malicious code in ethers-abstract-signer (npm) GHSA-2f7m-g9qw-8288, MAL-2026-3760 | Malicious | Not scored | 14 May, 2026 | npm ethers-abstract-signer |
Malicious release: Malicious code in typography-stylecss (npm) MAL-2026-3776 | Malicious | Not scored | 14 May, 2026 | npm typography-stylecss |
Malicious release: Malicious code in claw-subagent-service (npm) MAL-2026-3757 | Malicious | Not scored | 14 May, 2026 | npm claw-subagent-service |
Malicious release: Malicious code in prettier-lint-lenz (npm) GHSA-8558-w8j5-67wq, MAL-2026-3769 | Malicious | Not scored | 14 May, 2026 | npm prettier-lint-lenz |
Malicious release: Malicious code in glob-helper (npm) MAL-2026-3764 | Malicious | Not scored | 14 May, 2026 | npm glob-helper |
Malicious release: Malicious code in cache-poisoning-pwn-demo (npm) MAL-2026-3751 | Malicious | Not scored | 14 May, 2026 | npm cache-poisoning-pwn-demo |
Malicious release: Malicious code in ethers-signing-key (npm) GHSA-4h8m-265v-jp4c, MAL-2026-3761 | Malicious | Not scored | 14 May, 2026 | npm ethers-signing-key |
Malicious release: Malicious code in exxpress-utils (npm) MAL-2026-3763 | Malicious | Not scored | 14 May, 2026 | npm exxpress-utils |
Malicious release: Malicious code in ts-build-optimize (npm) GHSA-c22w-53x6-4jf5, MAL-2026-3774 | Malicious | Not scored | 14 May, 2026 | npm ts-build-optimize |
Malicious release: Malicious code in rimraf-utils (npm) MAL-2026-3772 | Malicious | Not scored | 14 May, 2026 | npm rimraf-utils |
Malicious release: Malicious code in nock-helper (npm) MAL-2026-3766 | Malicious | Not scored | 14 May, 2026 | npm nock-helper |
Malicious release: Malicious code in npmjs_web3-util (npm) GHSA-qjvc-v9v6-xh96, MAL-2026-3768 | Malicious | Not scored | 14 May, 2026 | npm npmjs_web3-util |
Malicious release: Malicious code in chalk-utils (npm) MAL-2026-3755 | Malicious | Not scored | 14 May, 2026 | npm chalk-utils |
Malicious release: Malicious code in bigint.fs (npm) GHSA-pcvf-7w5m-j39j, MAL-2026-3750 | Malicious | Not scored | 14 May, 2026 | npm bigint.fs |
Malicious release: Malicious code in cheerio-tool (npm) MAL-2026-3756 | Malicious | Not scored | 14 May, 2026 | npm cheerio-tool |
Malicious release: Malicious code in chalk-pack (npm) MAL-2026-3754 | Malicious | Not scored | 14 May, 2026 | npm chalk-pack |
Malicious release: Malicious code in env-threads (npm) MAL-2026-3759 | Malicious | Not scored | 14 May, 2026 | npm env-threads |
Malicious release: Malicious code in dotenvv-tool (npm) MAL-2026-3758 | Malicious | Not scored | 14 May, 2026 | npm dotenvv-tool |
Malicious release: Malicious code in @aiscene/aiserver (npm) MAL-2026-3747 | Malicious | Not scored | 14 May, 2026 | npm @aiscene/aiserver |
Malicious release: Malicious code in node-ipc (npm) GHSA-pvh2-rg5g-69v7, MAL-2026-3744 | Malicious | Not scored | 14 May, 2026 | npm node-ipc |
Malicious release: Malicious code in sol-coverage (npm) GHSA-2vvj-3f2x-2mc8, MAL-2026-3734 | Malicious | Not scored | 14 May, 2026 | npm sol-coverage |
Malicious release: Malicious code in deltaprime-primeloans (npm) GHSA-6g47-m62r-7wj3, MAL-2026-3725 | Malicious | Not scored | 14 May, 2026 | npm deltaprime-primeloans |
Malicious release: Malicious code in viem-helpers (npm) GHSA-6j7v-gxjq-5vcx, MAL-2026-3738 | Malicious | Not scored | 14 May, 2026 | npm viem-helpers |
Malicious release: Malicious code in solidity-linter (npm) GHSA-92cg-ff5w-63xq, MAL-2026-3736 | Malicious | Not scored | 14 May, 2026 | npm solidity-linter |
Malicious release: Malicious code in mrgn-utils (npm) GHSA-99vf-q329-gx7v, MAL-2026-3733 | Malicious | Not scored | 14 May, 2026 | npm mrgn-utils |
Malicious release: Malicious code in mrgn-ui (npm) GHSA-f57p-w8xr-mc5m, MAL-2026-3732 | Malicious | Not scored | 14 May, 2026 | npm mrgn-ui |
Malicious release: Malicious code in mrgn-common (npm) GHSA-gf4w-q3vx-9xj2, MAL-2026-3731 | Malicious | Not scored | 14 May, 2026 | npm mrgn-common |
Malicious release: Malicious code in marginfi-client-v2 (npm) GHSA-mg4f-cqgw-456w, MAL-2026-3729 | Malicious | Not scored | 14 May, 2026 | npm marginfi-client-v2 |
Malicious release: Malicious code in marginfi-v2-ui-state (npm) GHSA-wqj8-2fc2-qmv5, MAL-2026-3730 | Malicious | Not scored | 14 May, 2026 | npm marginfi-v2-ui-state |
Malicious release: Malicious code in hardhat-core-utils (npm) GHSA-h9fg-9ffp-7m86, MAL-2026-3728 | Malicious | Not scored | 14 May, 2026 | npm hardhat-core-utils |
Malicious release: Malicious code in evm-utils (npm) GHSA-pg4w-crfc-wrmq, MAL-2026-3726 | Malicious | Not scored | 14 May, 2026 | npm evm-utils |
Malicious release: Malicious code in solidity-lib (npm) GHSA-rmqj-f2pw-q258, MAL-2026-3735 | Malicious | Not scored | 14 May, 2026 | npm solidity-lib |
Malicious release: Malicious code in web3-utils-core (npm) GHSA-xmv4-ff4p-v7fp, MAL-2026-3740 | Malicious | Not scored | 14 May, 2026 | npm web3-utils-core |
Malicious release: Malicious code in foundry-utils (npm) GHSA-2v87-4h57-69g2, MAL-2026-3727 | Malicious | Not scored | 14 May, 2026 | npm foundry-utils |
Malicious release: Malicious code in viem-utils-core (npm) GHSA-8fj3-3mhp-6qr2, MAL-2026-3739 | Malicious | Not scored | 14 May, 2026 | npm viem-utils-core |
Malicious release: Malicious code in viem-core (npm) GHSA-v37v-hv8c-27c6, MAL-2026-3737 | Malicious | Not scored | 14 May, 2026 | npm viem-core |
Malicious release: Malicious code in @convera/ui-shared (npm) GHSA-wc9j-96q7-v8pq, MAL-2026-3724 | Malicious | Not scored | 14 May, 2026 | npm @convera/ui-shared |
Malicious release: Malicious code in npmjs_ethers-common (npm) GHSA-xjqh-ppr3-mrhj, MAL-2026-3721 | Malicious | Not scored | 13 May, 2026 | npm npmjs_ethers-common |
Malicious release: Malicious code in npmjs_solc-helper (npm) GHSA-83h3-h848-fqr8, MAL-2026-3723 | Malicious | Not scored | 13 May, 2026 | npm npmjs_solc-helper |
Malicious release: Malicious code in npmjs_hardhat-common (npm) GHSA-6w5w-56vc-rg6h, MAL-2026-3722 | Malicious | Not scored | 13 May, 2026 | npm npmjs_hardhat-common |
Malicious release: Malicious code in ethers-wordlist (npm) GHSA-jrxm-h3fx-2p68, MAL-2026-3720 | Malicious | Not scored | 13 May, 2026 | npm ethers-wordlist |
Malicious release: Malicious code in ethers-web (npm) MAL-2026-3711 | Malicious | Not scored | 13 May, 2026 | npm ethers-web |
Malicious release: Malicious code in ethers-json-wallet (npm) MAL-2026-3709 | Malicious | Not scored | 13 May, 2026 | npm ethers-json-wallet |
Malicious release: Malicious code in ethers-logger (npm) MAL-2026-3710 | Malicious | Not scored | 13 May, 2026 | npm ethers-logger |
Malicious release: Malicious code in chia-network (npm) MAL-2026-3663 | Malicious | Not scored | 13 May, 2026 | npm chia-network |
Malicious release: Malicious code in load-bufferjs (npm) GHSA-95gm-9mgw-p2cf, MAL-2026-3658 | Malicious | Not scored | 13 May, 2026 | npm load-bufferjs |