Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in coinbase-wallet-utils (npm) GHSA-6228-p677-g9p7, MAL-2026-5499 | Malicious | Not scored | 10 Jun, 2026 | npm coinbase-wallet-utils |
Malicious release: Malicious code in ethers-jss (npm) GHSA-xh65-7qcm-493w, MAL-2026-5501 | Malicious | Not scored | 10 Jun, 2026 | npm ethers-jss |
Malicious release: Malicious code in csc154-internall-depend (npm) GHSA-m3gw-x6rc-fp3r, MAL-2026-5500 | Malicious | Not scored | 10 Jun, 2026 | npm csc154-internall-depend |
Malicious release: Malicious code in @builder.io/dev-tools (npm) GHSA-4fm3-j964-p869, MAL-2026-5493 | Malicious | Not scored | 10 Jun, 2026 | npm @builder.io/dev-tools |
Malicious release: Malicious code in xnder-sdk (npm) GHSA-5vr8-6v9x-3vxm, MAL-2026-5491 | Malicious | Not scored | 10 Jun, 2026 | npm xnder-sdk |
Malicious release: Malicious code in xnder-wrapper-module (npm) GHSA-jxcv-3994-r8xf, MAL-2026-5492 | Malicious | Not scored | 10 Jun, 2026 | npm xnder-wrapper-module |
Malicious release: Malicious code in sb-original (npm) GHSA-wv26-jcfp-4phh, MAL-2026-5490 | Malicious | Not scored | 09 Jun, 2026 | npm sb-original |
Malicious release: Malicious code in react-pinojs (npm) GHSA-3w28-cv4q-v393, MAL-2026-5488 | Malicious | Not scored | 09 Jun, 2026 | npm react-pinojs |
Malicious release: Malicious code in menu-filter-widget-web (npm) MAL-2026-5486 | Malicious | Not scored | 09 Jun, 2026 | npm menu-filter-widget-web |
Malicious release: Malicious code in mcp-server-git (npm) GHSA-prf3-6rx4-9h5f, MAL-2026-5478 | Malicious | Not scored | 09 Jun, 2026 | npm mcp-server-git |
Malicious release: Malicious code in mcp-server-fetch (npm) GHSA-rh9p-4pg3-8628, MAL-2026-5476 | Malicious | Not scored | 09 Jun, 2026 | npm mcp-server-fetch |
Malicious release: Malicious code in mcp-server-postgres (npm) GHSA-vm2g-qj5x-x234, MAL-2026-5481 | Malicious | Not scored | 09 Jun, 2026 | npm mcp-server-postgres |
Malicious release: Malicious code in mcp-server-redis (npm) GHSA-wrqr-prmr-6x32, MAL-2026-5482 | Malicious | Not scored | 09 Jun, 2026 | npm mcp-server-redis |
Malicious release: Malicious code in mcp-server-sequential-thinking (npm) GHSA-hrmj-jj6j-m2m2, GHSA-w69h-vf37-j4w6, MAL-2026-5484 | Malicious | Not scored | 09 Jun, 2026 | npm mcp-server-sequential-thinking |
Malicious release: Malicious code in mcp-server-figma (npm) GHSA-8j33-qh42-vjc6, MAL-2026-5477 | Malicious | Not scored | 09 Jun, 2026 | npm mcp-server-figma |
Malicious release: Malicious code in mcp-server-notion (npm) GHSA-56wr-9mvj-77pf, GHSA-mx42-9xv4-vm87, MAL-2026-5480, SNYK-JS-MCPSERVERNOTION-19161387 | Malicious | Not scored | 09 Jun, 2026 | npm mcp-server-notion |
Malicious release: Malicious code in mcp-server-sentry (npm) GHSA-m5mm-f722-7vcq, MAL-2026-5483 | Malicious | Not scored | 09 Jun, 2026 | npm mcp-server-sentry |
Malicious release: Malicious code in mcp-server-github (npm) GHSA-95pj-hrh5-27gq, MAL-2026-5479 | Malicious | Not scored | 09 Jun, 2026 | npm mcp-server-github |
Malicious release: Malicious code in mcp-server-supabase (npm) GHSA-m633-5vq7-98qx, MAL-2026-5485 | Malicious | Not scored | 09 Jun, 2026 | npm mcp-server-supabase |
Malicious release: Malicious code in getd-eslint-rules (npm) GHSA-jqwv-7cxv-rhvm, MAL-2026-5466 | Malicious | Not scored | 09 Jun, 2026 | npm getd-eslint-rules |
Malicious release: Malicious code in getd-pantallas-cliente (npm) GHSA-jgp5-45jr-pqpc, MAL-2026-5468 | Malicious | Not scored | 09 Jun, 2026 | npm getd-pantallas-cliente |
Malicious release: Malicious code in getd-typescript-eslint-rules (npm) GHSA-v3g3-ppm6-4vqp, MAL-2026-5470 | Malicious | Not scored | 09 Jun, 2026 | npm getd-typescript-eslint-rules |
Malicious release: Malicious code in gethandler-api (npm) GHSA-92ff-fv46-jh35, MAL-2026-5473 | Malicious | Not scored | 09 Jun, 2026 | npm gethandler-api |
Malicious release: Malicious code in getd-transactional-web (npm) GHSA-7f9r-465j-5hj6, MAL-2026-5469 | Malicious | Not scored | 09 Jun, 2026 | npm getd-transactional-web |
Malicious release: Malicious code in getd-handler-api (npm) GHSA-wgvw-wjqc-rg8w, MAL-2026-5467 | Malicious | Not scored | 09 Jun, 2026 | npm getd-handler-api |
Malicious release: Malicious code in getd-ui-library (npm) GHSA-8h8q-6m6x-v8vv, MAL-2026-5471 | Malicious | Not scored | 09 Jun, 2026 | npm getd-ui-library |
Malicious release: Malicious code in getui-library (npm) GHSA-g3m4-7rp4-85gj, MAL-2026-5474 | Malicious | Not scored | 09 Jun, 2026 | npm getui-library |
Malicious release: Malicious code in getd-content-management (npm) GHSA-q9wx-x6cr-5wg7, MAL-2026-5465 | Malicious | Not scored | 09 Jun, 2026 | npm getd-content-management |
Malicious release: Malicious code in getd-web-corporativa (npm) GHSA-vvxq-5r9v-3xw6, MAL-2026-5472 | Malicious | Not scored | 09 Jun, 2026 | npm getd-web-corporativa |
Malicious release: Malicious code in @rockawayx/utils (npm) GHSA-gj9m-m6gg-c8cx, MAL-2026-5462 | Malicious | Not scored | 09 Jun, 2026 | npm @rockawayx/utils |
Malicious release: Malicious code in ipy-rev-proxy (npm) MAL-2026-5475 | Malicious | Not scored | 09 Jun, 2026 | npm ipy-rev-proxy |
Malicious release: Malicious code in db-xorma (npm) MAL-2026-5464 | Malicious | Not scored | 09 Jun, 2026 | npm db-xorma |
Malicious release: Malicious code in db-dx-connector (npm) MAL-2026-5463 | Malicious | Not scored | 09 Jun, 2026 | npm db-dx-connector |
Malicious release: Malicious code in tailwind-form (npm) GHSA-2529-w5xc-r266, MAL-2026-5487 | Malicious | Not scored | 09 Jun, 2026 | npm tailwind-form |
Malicious release: Malicious code in fhirproxy-utils (npm) GHSA-cw9q-6cmp-p38r, MAL-2026-5461 | Malicious | Not scored | 09 Jun, 2026 | npm fhirproxy-utils |
Malicious release: Malicious code in fhirproxy (npm) GHSA-g7wh-3cfq-x8m2, MAL-2026-5460 | Malicious | Not scored | 09 Jun, 2026 | npm fhirproxy |
Malicious release: Malicious code in @dktunited/anly-tracker-v2 (npm) MAL-2026-5459 | Malicious | Not scored | 09 Jun, 2026 | npm @dktunited/anly-tracker-v2 |
Malicious release: Malicious code in exodus-checkout-signer (npm) MAL-2026-5439 | Malicious | Not scored | 09 Jun, 2026 | npm exodus-checkout-signer |
Malicious release: Malicious code in grateful-checkout (npm) MAL-2026-5444 | Malicious | Not scored | 09 Jun, 2026 | npm grateful-checkout |
Malicious release: Malicious code in checkout-signer (npm) MAL-2026-5436 | Malicious | Not scored | 09 Jun, 2026 | npm checkout-signer |
Malicious release: Malicious code in exodus-wallet-core (npm) MAL-2026-5443 | Malicious | Not scored | 09 Jun, 2026 | npm exodus-wallet-core |
Malicious release: Malicious code in grateful-payments (npm) MAL-2026-5445 | Malicious | Not scored | 09 Jun, 2026 | npm grateful-payments |
Malicious release: Malicious code in exodus-solana-sdk (npm) MAL-2026-5442 | Malicious | Not scored | 09 Jun, 2026 | npm exodus-solana-sdk |
Malicious release: Malicious code in exodus-ethereum-sdk (npm) MAL-2026-5440 | Malicious | Not scored | 09 Jun, 2026 | npm exodus-ethereum-sdk |
Malicious release: Malicious code in exodus-secure-container (npm) MAL-2026-5441 | Malicious | Not scored | 09 Jun, 2026 | npm exodus-secure-container |
Malicious release: Malicious code in @nstrlabs/utils (npm) MAL-2026-5423 | Malicious | Not scored | 09 Jun, 2026 | npm @nstrlabs/utils |
Malicious release: Malicious code in @klapp-otp/routes (npm) MAL-2026-5416 | Malicious | Not scored | 09 Jun, 2026 | npm @klapp-otp/routes |
Malicious release: Malicious code in @nstrlabs/api-client (npm) MAL-2026-5418 | Malicious | Not scored | 09 Jun, 2026 | npm @nstrlabs/api-client |
Malicious release: Malicious code in @nstrlabs/ixel (npm) MAL-2026-5420 | Malicious | Not scored | 09 Jun, 2026 | npm @nstrlabs/ixel |
Malicious release: Malicious code in @nstrlabs/sdk (npm) MAL-2026-5421 | Malicious | Not scored | 09 Jun, 2026 | npm @nstrlabs/sdk |