Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in buffer-export (npm) GHSA-w8m4-mmqv-qq77, MAL-2026-3656 | Malicious | Not scored | 13 May, 2026 | npm buffer-export |
Malicious release: Malicious code in chai-as-streamed (npm) GHSA-r2pr-8h52-3v7x, MAL-2026-3657 | Malicious | Not scored | 13 May, 2026 | npm chai-as-streamed |
Malicious release: Malicious code in hello-world-pkg-value-value-p (npm) MAL-2026-3714 | Malicious | Not scored | 13 May, 2026 | npm hello-world-pkg-value-value-p |
Malicious release: Malicious code in truffle-js (npm) MAL-2026-3717 | Malicious | Not scored | 13 May, 2026 | npm truffle-js |
Malicious release: Malicious code in hardhat-common (npm) MAL-2026-3712 | Malicious | Not scored | 13 May, 2026 | npm hardhat-common |
Malicious release: Malicious code in hardhat-core (npm) MAL-2026-3713 | Malicious | Not scored | 13 May, 2026 | npm hardhat-core |
Malicious release: Malicious code in ethers-io (npm) MAL-2026-3708 | Malicious | Not scored | 13 May, 2026 | npm ethers-io |
Malicious release: Malicious code in solc-helper (npm) MAL-2026-3715 | Malicious | Not scored | 13 May, 2026 | npm solc-helper |
Malicious release: Malicious code in ethers-common (npm) MAL-2026-3707 | Malicious | Not scored | 13 May, 2026 | npm ethers-common |
Malicious release: Malicious code in truffle-helper (npm) MAL-2026-3716 | Malicious | Not scored | 13 May, 2026 | npm truffle-helper |
Malicious release: Malicious code in web3-common (npm) MAL-2026-3718 | Malicious | Not scored | 13 May, 2026 | npm web3-common |
Malicious release: Malicious code in web3-core-js (npm) MAL-2026-3719 | Malicious | Not scored | 13 May, 2026 | npm web3-core-js |
Malicious release: Malicious code in vue-template-compiler-plugin (npm) GHSA-gvmg-cf54-7769, MAL-2026-3777 | Malicious | Not scored | 13 May, 2026 | npm vue-template-compiler-plugin |
Malicious release: Malicious code in @dropout-ai/runtime (npm) MAL-2026-3683 | Malicious | Not scored | 13 May, 2026 | npm @dropout-ai/runtime |
Malicious release: Malicious code in @design-system-coopeuch/web (npm) GHSA-vhjp-6vjm-vq35, MAL-2026-3653 | Malicious | Not scored | 13 May, 2026 | npm @design-system-coopeuch/web |
Malicious release: Malicious code in auth-javascript (npm) MAL-2026-3648 | Malicious | Not scored | 13 May, 2026 | npm auth-javascript |
Malicious release: Malicious code in iceberg-javascript (npm) MAL-2026-3649 | Malicious | Not scored | 13 May, 2026 | npm iceberg-javascript |
Malicious release: Malicious code in microsoft-applicationinsights-common (npm) MAL-2026-3650 | Malicious | Not scored | 13 May, 2026 | npm microsoft-applicationinsights-common |
Malicious release: Malicious code in ms-graph-types (npm) MAL-2026-3651 | Malicious | Not scored | 13 May, 2026 | npm ms-graph-types |
Malicious release: Malicious code in supabase-javascript (npm) MAL-2026-3652 | Malicious | Not scored | 13 May, 2026 | npm supabase-javascript |
Malicious release: Malicious code in @gusmano/reext (npm) MAL-2026-3684 | Malicious | Not scored | 12 May, 2026 | npm @gusmano/reext |
Malicious release: Malicious code in afk-react-intl (npm) MAL-2026-3616 | Malicious | Not scored | 12 May, 2026 | npm afk-react-intl |
Malicious release: Malicious code in katal-platform-versions (npm) MAL-2026-3617 | Malicious | Not scored | 12 May, 2026 | npm katal-platform-versions |
Malicious release: Malicious code in @a91082900/test_package (npm) MAL-2026-3680 | Malicious | Not scored | 12 May, 2026 | npm @a91082900/test_package |
Malicious release: Malicious code in aoflmkt (npm) MAL-2026-3614 | Malicious | Not scored | 12 May, 2026 | npm aoflmkt |
Malicious release: Malicious code in aoflcorp (npm) MAL-2026-3613 | Malicious | Not scored | 12 May, 2026 | npm aoflcorp |
Malicious release: Malicious code in jwscube (npm) GHSA-69rh-554m-m3w8, MAL-2026-3612 | Malicious | Not scored | 12 May, 2026 | npm jwscube |
Malicious release: Malicious code in justenv (npm) GHSA-fm9w-85jx-h7r4, MAL-2026-3611 | Malicious | Not scored | 12 May, 2026 | npm justenv |
Malicious release: Malicious code in mimecast-web-components (npm) MAL-2026-3618 | Malicious | Not scored | 12 May, 2026 | npm mimecast-web-components |
Malicious release: Malicious code in 88q (npm) MAL-2026-3676 | Malicious | Not scored | 12 May, 2026 | npm 88q |
Malicious release: Malicious code in 66o (npm) MAL-2026-3674 | Malicious | Not scored | 12 May, 2026 | npm 66o |
Malicious release: Malicious code in 6cc (npm) MAL-2026-3675 | Malicious | Not scored | 12 May, 2026 | npm 6cc |
Malicious release: Malicious code in 0xegg2024 (npm) MAL-2026-3668 | Malicious | Not scored | 12 May, 2026 | npm 0xegg2024 |
Malicious release: Malicious code in @catamania/ui-components (npm) MAL-2026-3681 | Malicious | Not scored | 12 May, 2026 | npm @catamania/ui-components |
Malicious release: Malicious code in 01-0redi7qgbz0uv (npm) MAL-2026-3666 | Malicious | Not scored | 12 May, 2026 | npm 01-0redi7qgbz0uv |
Malicious release: Malicious code in 8q (npm) MAL-2026-3678 | Malicious | Not scored | 12 May, 2026 | npm 8q |
Malicious release: Malicious code in 100jsss (npm) MAL-2026-3669 | Malicious | Not scored | 12 May, 2026 | npm 100jsss |
Malicious release: Malicious code in 1mi (npm) MAL-2026-3672 | Malicious | Not scored | 12 May, 2026 | npm 1mi |
Malicious release: Malicious code in 1co (npm) MAL-2026-3671 | Malicious | Not scored | 12 May, 2026 | npm 1co |
Malicious release: Malicious code in @2oolkit/hyperliquid-cli (npm) MAL-2026-3679 | Malicious | Not scored | 12 May, 2026 | npm @2oolkit/hyperliquid-cli |
Malicious release: Malicious code in @chahuadev/junk-sweeper-app (npm) MAL-2026-3682 | Malicious | Not scored | 12 May, 2026 | npm @chahuadev/junk-sweeper-app |
Malicious release: Malicious code in 8oo (npm) MAL-2026-3677 | Malicious | Not scored | 12 May, 2026 | npm 8oo |
Malicious release: Malicious code in 11j (npm) MAL-2026-3670 | Malicious | Not scored | 12 May, 2026 | npm 11j |
Malicious release: Malicious code in 3pool-sushibar (npm) MAL-2026-3673 | Malicious | Not scored | 12 May, 2026 | npm 3pool-sushibar |
Malicious release: Malicious code in 0ctf-chalweb (npm) MAL-2026-3667 | Malicious | Not scored | 12 May, 2026 | npm 0ctf-chalweb |
Malicious release: Malicious code in housecallpro (npm) MAL-2026-3610 | Malicious | Not scored | 12 May, 2026 | npm housecallpro |
Malicious release: Malicious code in @tallyui/storage-sqlite (npm) GHSA-9w67-pvq7-x7hj, MAL-2026-3604 | Malicious | Not scored | 12 May, 2026 | npm @tallyui/storage-sqlite |
Malicious release: Malicious code in @dirigible-ai/sdk (npm) MAL-2026-3593 | Malicious | Not scored | 12 May, 2026 | npm @dirigible-ai/sdk |
Malicious release: Malicious code in @draftauth/client (npm) MAL-2026-3594 | Malicious | Not scored | 12 May, 2026 | npm @draftauth/client |
Malicious release: Malicious code in @draftauth/core (npm) MAL-2026-3595 | Malicious | Not scored | 12 May, 2026 | npm @draftauth/core |