Every known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in hardhat-ftp (npm) MAL-2026-17506 | Malicious | Not scored | 25 days ago | npm hardhat-ftp |
Malicious release: Malicious code in hardhat-jsx (npm) MAL-2026-17507 | Malicious | Not scored | 25 days ago | npm hardhat-jsx |
Malicious release: Malicious code in internallib_v275 (npm) GHSA-f6rc-jhj3-4p2w, MAL-2026-17510 | Malicious | Not scored | 25 days ago | npm internallib_v275 |
Malicious release: Malicious code in lite-matte (npm) MAL-2026-17512 | Malicious | Not scored | 25 days ago | npm lite-matte |
Malicious release: Malicious code in lite-matterr (npm) MAL-2026-17513 | Malicious | Not scored | 25 days ago | npm lite-matterr |
Malicious release: Malicious code in lite-mater (npm) MAL-2026-17511 | Malicious | Not scored | 25 days ago | npm lite-mater |
Malicious release: Malicious code in oleh-modal (npm) MAL-2026-17516 | Malicious | Not scored | 25 days ago | npm oleh-modal |
Malicious release: Malicious code in minimal-a11y-contrast-check (npm) MAL-2026-17514 | Malicious | Not scored | 25 days ago | npm minimal-a11y-contrast-check |
Malicious release: Malicious code in monitoring-agent (npm) GHSA-fvjv-j94x-c8wm, MAL-2026-17515 | Malicious | Not scored | 25 days ago | npm monitoring-agent |
Malicious release: Malicious code in postcss-gap-fallback-util (npm) MAL-2026-17518 | Malicious | Not scored | 25 days ago | npm postcss-gap-fallback-util |
Malicious release: Malicious code in popover-anchor-polyfill (npm) MAL-2026-17517 | Malicious | Not scored | 25 days ago | npm popover-anchor-polyfill |
Malicious release: Malicious code in tiny-viewport-unit-calc (npm) MAL-2026-17528 | Malicious | Not scored | 25 days ago | npm tiny-viewport-unit-calc |
Malicious release: Malicious code in promises-dotenv3 (npm) MAL-2026-17519 | Malicious | Not scored | 25 days ago | npm promises-dotenv3 |
Malicious release: Malicious code in rgx33-css-grid-utils (npm) MAL-2026-17520 | Malicious | Not scored | 25 days ago | npm rgx33-css-grid-utils |
Malicious release: Malicious code in studiocode_tools (npm) MAL-2026-17523 | Malicious | Not scored | 25 days ago | npm studiocode_tools |
Malicious release: Malicious code in studiocode_eligibility (npm) MAL-2026-17522 | Malicious | Not scored | 25 days ago | npm studiocode_eligibility |
Malicious release: Malicious code in rgx33-flex-layout-core (npm) MAL-2026-17521 | Malicious | Not scored | 25 days ago | npm rgx33-flex-layout-core |
Malicious release: Malicious code in tiny-css-token-parser (npm) MAL-2026-17525 | Malicious | Not scored | 25 days ago | npm tiny-css-token-parser |
Malicious release: Malicious code in tiny-dom-focus-trap (npm) MAL-2026-17526 | Malicious | Not scored | 25 days ago | npm tiny-dom-focus-trap |
Malicious release: Malicious code in tailwindcss-forms-styles (npm) MAL-2026-17524 | Malicious | Not scored | 25 days ago | npm tailwindcss-forms-styles |
Malicious release: Malicious code in tiny-focusgroup-helper (npm) MAL-2026-17527 | Malicious | Not scored | 25 days ago | npm tiny-focusgroup-helper |
Malicious release: Malicious code in wcag-color-a11y-helpers (npm) MAL-2026-17530 | Malicious | Not scored | 25 days ago | npm wcag-color-a11y-helpers |
Malicious release: Malicious code in ultimate-websocket (npm) MAL-2026-17529 | Malicious | Not scored | 25 days ago | npm ultimate-websocket |
Malicious release: Malicious code in @bellaxchuu/crystalred (npm) GHSA-862w-53p5-jcpx, MAL-2026-17343 | Malicious | Not scored | 25 days ago | npm @bellaxchuu/crystalred |
Malicious release: Malicious code in @xatancchii/velycxbail (npm) MAL-2026-17383 | Malicious | Not scored | 25 days ago | npm @xatancchii/velycxbail |
Malicious release: Malicious code in saturn-baileys (npm) MAL-2026-17404 | Malicious | Not scored | 25 days ago | npm saturn-baileys |
Malicious release: Malicious code in shadowmd (npm) MAL-2026-17405 | Malicious | Not scored | 25 days ago | npm shadowmd |
Malicious release: Malicious code in @kibt/www-nuxt-i18n (npm) GHSA-2c7v-rmgw-3xrp, MAL-2026-17498 | Malicious | Not scored | 25 days ago | npm @kibt/www-nuxt-i18n |
Malicious release: Malicious code in @angulra/core (npm) MAL-2026-17496 | Malicious | Not scored | 25 days ago | npm @angulra/core |
Malicious release: Malicious code in @angulra/cli (npm) MAL-2026-17495 | Malicious | Not scored | 25 days ago | npm @angulra/cli |
Malicious release: Malicious code in botmaker-cli (npm) MAL-2026-17502 | Malicious | Not scored | 25 days ago | npm botmaker-cli |
Malicious release: Malicious code in chai-as-testmode (npm) MAL-2026-17473 | Malicious | Not scored | 25 days ago | npm chai-as-testmode |
Malicious release: Malicious code in css-scroll-state-polyfill (npm) MAL-2026-17486 | Malicious | Not scored | 25 days ago | npm css-scroll-state-polyfill |
Malicious release: Malicious code in css-snap-target-polyfill (npm) MAL-2026-17487 | Malicious | Not scored | 25 days ago | npm css-snap-target-polyfill |
Malicious release: Malicious code in css-starting-style-polyfill (npm) MAL-2026-17488 | Malicious | Not scored | 25 days ago | npm css-starting-style-polyfill |
Malicious release: Malicious code in core-js-gnz (npm) MAL-2026-17474 | Malicious | Not scored | 25 days ago | npm core-js-gnz |
Malicious release: Malicious code in css-reading-flow-polyfill (npm) MAL-2026-17483 | Malicious | Not scored | 25 days ago | npm css-reading-flow-polyfill |
Malicious release: Malicious code in css-scroll-anchor-polyfill (npm) MAL-2026-17485 | Malicious | Not scored | 25 days ago | npm css-scroll-anchor-polyfill |
Malicious release: Malicious code in css-light-dark-polyfill (npm) MAL-2026-17481 | Malicious | Not scored | 25 days ago | npm css-light-dark-polyfill |
Malicious release: Malicious code in css-interop-observer-polyfill (npm) MAL-2026-17480 | Malicious | Not scored | 25 days ago | npm css-interop-observer-polyfill |
Malicious release: Malicious code in css-relative-color-util (npm) MAL-2026-17484 | Malicious | Not scored | 25 days ago | npm css-relative-color-util |
Malicious release: Malicious code in css-logical-prop-shim (npm) MAL-2026-17482 | Malicious | Not scored | 25 days ago | npm css-logical-prop-shim |
Malicious release: Malicious code in css-field-sizing-polyfill (npm) MAL-2026-17478 | Malicious | Not scored | 25 days ago | npm css-field-sizing-polyfill |
Malicious release: Malicious code in css-env-function-shim (npm) MAL-2026-17477 | Malicious | Not scored | 25 days ago | npm css-env-function-shim |
Malicious release: Malicious code in css-gap-decorations-polyfill (npm) MAL-2026-17479 | Malicious | Not scored | 25 days ago | npm css-gap-decorations-polyfill |
Malicious release: Malicious code in css-anchor-pos-fallback (npm) MAL-2026-17476 | Malicious | Not scored | 25 days ago | npm css-anchor-pos-fallback |
Malicious release: Malicious code in css-a11y-contrast-utils (npm) MAL-2026-17475 | Malicious | Not scored | 25 days ago | npm css-a11y-contrast-utils |
Malicious release: Malicious code in focus-visible-polyfill-lite (npm) MAL-2026-17491 | Malicious | Not scored | 25 days ago | npm focus-visible-polyfill-lite |
Malicious release: Malicious code in virgil-cli (npm) MAL-2026-17630 | Malicious | Not scored | 26 days ago | npm virgil-cli |
Malicious release: Malicious code in @nagular/router (npm) MAL-2026-17500 | Malicious | Not scored | 27 days ago | npm @nagular/router |