Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in path-internal-util (npm) GHSA-c267-q765-387r, MAL-2026-3312 | Malicious | Not scored | 01 May, 2026 | npm path-internal-util |
Malicious release: Malicious code in path-addon (npm) GHSA-hqv8-vf3j-m8q6, MAL-2026-3311 | Malicious | Not scored | 01 May, 2026 | npm path-addon |
Malicious release: Malicious code in gweb-build-system (npm) GHSA-4jrp-wqpx-xfgc, MAL-2026-3310 | Malicious | Not scored | 01 May, 2026 | npm gweb-build-system |
Malicious release: Malicious code in service-gateway (npm) GHSA-6vc9-m5v7-7m4f, MAL-2026-3313 | Malicious | Not scored | 30 Apr, 2026 | npm service-gateway |
Malicious release: Malicious code in intercom-client (npm) GHSA-4594-wxqv-j3pm, MAL-2026-3204 | Malicious | Not scored | 30 Apr, 2026 | npm intercom-client |
Malicious release: Malicious code in eslint-plugin-skyscanner-dates (npm) GHSA-29h9-fw37-6xhc, MAL-2026-3202 | Malicious | Not scored | 30 Apr, 2026 | npm eslint-plugin-skyscanner-dates |
Malicious release: Malicious code in sirens-lament (npm) GHSA-j844-qq6j-rj39, MAL-2026-3200 | Malicious | Not scored | 30 Apr, 2026 | npm sirens-lament |
Malicious release: Malicious code in blackbeards-navigator (npm) GHSA-cfpj-hqgr-45g3, MAL-2026-3199 | Malicious | Not scored | 30 Apr, 2026 | npm blackbeards-navigator |
Malicious release: Malicious code in apple-internal-security-audit-v99 (npm) GHSA-66w7-4qx2-62w2, MAL-2026-3305 | Malicious | Not scored | 30 Apr, 2026 | npm apple-internal-security-audit-v99 |
Malicious release: Malicious code in react-dnd-14 (npm) MAL-2026-3196 | Malicious | Not scored | 30 Apr, 2026 | npm react-dnd-14 |
Malicious release: Malicious code in tanstack (npm) GHSA-5w4c-85pv-cwhv, MAL-2026-3190 | Malicious | Not scored | 29 Apr, 2026 | npm tanstack |
Malicious release: Malicious code in @breezeai-frontend/cargo-ui (npm) GHSA-648m-8w8j-gqr3, MAL-2026-3183 | Malicious | Not scored | 29 Apr, 2026 | npm @breezeai-frontend/cargo-ui |
Malicious release: Malicious code in @breezeai-frontend/tailwind-config (npm) GHSA-2vqh-whcm-r27x, MAL-2026-3184 | Malicious | Not scored | 29 Apr, 2026 | npm @breezeai-frontend/tailwind-config |
Malicious release: Malicious code in ac-sasskit-beta (npm) GHSA-3v69-72f9-jpjc, MAL-2026-3186 | Malicious | Not scored | 29 Apr, 2026 | npm ac-sasskit-beta |
Malicious release: Malicious code in apple-appstore-full-library-utility (npm) GHSA-jqp6-fcpv-q663, MAL-2026-3187 | Malicious | Not scored | 29 Apr, 2026 | npm apple-appstore-full-library-utility |
Malicious release: Malicious code in apple-security-internal-scanner-v3 (npm) GHSA-fqqh-jjx6-5vcg, MAL-2026-3188 | Malicious | Not scored | 29 Apr, 2026 | npm apple-security-internal-scanner-v3 |
Malicious release: Malicious code in apple-infra-stealth-audit (npm) GHSA-54w7-66gf-95g9, MAL-2026-3167 | Malicious | Not scored | 29 Apr, 2026 | npm apple-infra-stealth-audit |
Malicious release: Malicious code in internal-sys-audit-check (npm) GHSA-5wqf-mvwr-p55r, MAL-2026-3174 | Malicious | Not scored | 29 Apr, 2026 | npm internal-sys-audit-check |
Malicious release: Malicious code in apple-internal-config (npm) GHSA-66g4-jx7f-f88p, MAL-2026-3168 | Malicious | Not scored | 29 Apr, 2026 | npm apple-internal-config |
Malicious release: Malicious code in frank-newton3-final-audit (npm) GHSA-f8rm-m6f5-6gcv, MAL-2026-3171 | Malicious | Not scored | 29 Apr, 2026 | npm frank-newton3-final-audit |
Malicious release: Malicious code in frank-newton3-user-hunt (npm) GHSA-g86r-cgww-vqq4, MAL-2026-3172 | Malicious | Not scored | 29 Apr, 2026 | npm frank-newton3-user-hunt |
Malicious release: Malicious code in gcp-internal-research-poc (npm) GHSA-hrw3-c2cr-c3gv, MAL-2026-3173 | Malicious | Not scored | 29 Apr, 2026 | npm gcp-internal-research-poc |
Malicious release: Malicious code in frank-newton3-db-final (npm) GHSA-qjhq-w9mx-q3p5, MAL-2026-3169 | Malicious | Not scored | 29 Apr, 2026 | npm frank-newton3-db-final |
Malicious release: Malicious code in apple-infra-escape-audit (npm) GHSA-vghq-gwcj-xxxw, MAL-2026-3166 | Malicious | Not scored | 29 Apr, 2026 | npm apple-infra-escape-audit |
Malicious release: Malicious code in frank-newton3-db-poc (npm) GHSA-x8j3-v2c6-jxwj, MAL-2026-3170 | Malicious | Not scored | 29 Apr, 2026 | npm frank-newton3-db-poc |
Malicious release: Malicious code in react-native-parallax-scroll-view-updated (npm) GHSA-482r-xhg9-23r3, MAL-2026-3262 | Malicious | Not scored | 29 Apr, 2026 | npm react-native-parallax-scroll-view-updated |
Malicious release: Malicious code in enterprise-auth-gateway-core (npm) GHSA-55c3-wf4r-225q, MAL-2026-3259 | Malicious | Not scored | 29 Apr, 2026 | npm enterprise-auth-gateway-core |
Malicious release: Malicious code in @corp-infra/sso-gateway-core (npm) GHSA-563q-j42j-86qv, MAL-2026-3254 | Malicious | Not scored | 29 Apr, 2026 | npm @corp-infra/sso-gateway-core |
Malicious release: Malicious code in @enterprise-core/auth-gateway-bridge (npm) GHSA-627r-xf4j-2cqq, MAL-2026-3255 | Malicious | Not scored | 29 Apr, 2026 | npm @enterprise-core/auth-gateway-bridge |
Malicious release: Malicious code in @internal-infra/core-sso-bridge (npm) GHSA-67rg-vhjj-qrqq, MAL-2026-3256 | Malicious | Not scored | 29 Apr, 2026 | npm @internal-infra/core-sso-bridge |
Malicious release: Malicious code in @tech-global/internal-gateway-core (npm) GHSA-cpv8-2wx4-xfvv, MAL-2026-3258 | Malicious | Not scored | 29 Apr, 2026 | npm @tech-global/internal-gateway-core |
Malicious release: Malicious code in secrets-manager-wrapper (npm) GHSA-fmm2-56pg-g4g7, MAL-2026-3195 | Malicious | Not scored | 29 Apr, 2026 | npm secrets-manager-wrapper |
Malicious release: Malicious code in @omni-corp-infra/sso-bridge-core (npm) GHSA-pfh5-gh42-c5ff, MAL-2026-3257 | Malicious | Not scored | 29 Apr, 2026 | npm @omni-corp-infra/sso-bridge-core |
Malicious release: Malicious code in @saif777/codemirror5 (npm) GHSA-pm5r-8qx2-2m4r, MAL-2026-3185 | Malicious | Not scored | 29 Apr, 2026 | npm @saif777/codemirror5 |
Malicious release: Malicious code in react-video-canvas (npm) GHSA-pqv4-74gv-v429, MAL-2026-3189 | Malicious | Not scored | 29 Apr, 2026 | npm react-video-canvas |
Malicious release: Malicious code in google-storage-cloud (npm) GHSA-qpwh-x85m-v7j9, MAL-2026-3260 | Malicious | Not scored | 29 Apr, 2026 | npm google-storage-cloud |
Malicious release: Malicious code in internal-auth-provider (npm) GHSA-w76m-ffcr-5rfm, MAL-2026-3261 | Malicious | Not scored | 29 Apr, 2026 | npm internal-auth-provider |
Malicious release: Malicious code in chai-as-char (npm) GHSA-jhr8-c8fj-ccwc, MAL-2026-3164 | Malicious | Not scored | 29 Apr, 2026 | npm chai-as-char |
Malicious release: Malicious code in chai-as-redeployed (npm) GHSA-4cp9-q8r9-2227, MAL-2026-3165 | Malicious | Not scored | 29 Apr, 2026 | npm chai-as-redeployed |
Malicious release: Malicious code in nicegui (npm) MAL-2026-3180 | Malicious | Not scored | 29 Apr, 2026 | npm nicegui |
Malicious release: Malicious code in period-newline (npm) MAL-2026-3181 | Malicious | Not scored | 29 Apr, 2026 | npm period-newline |
Malicious release: Malicious code in redeem-onchain-sdk (npm) MAL-2026-3182 | Malicious | Not scored | 29 Apr, 2026 | npm redeem-onchain-sdk |
Malicious release: Malicious code in @cap-js/sqlite (npm) GHSA-2h7r-x9v2-q52f, MAL-2026-3178 | Malicious | Not scored | 29 Apr, 2026 | npm @cap-js/sqlite |
Malicious release: Malicious code in @cap-js/db-service (npm) GHSA-72vc-j35j-p28h, MAL-2026-3176 | Malicious | Not scored | 29 Apr, 2026 | npm @cap-js/db-service |
Malicious release: Malicious code in @cap-js/postgres (npm) GHSA-7vv3-r527-wvjr, MAL-2026-3177 | Malicious | Not scored | 29 Apr, 2026 | npm @cap-js/postgres |
Malicious release: Malicious code in mbt (npm) MAL-2026-3179 | Malicious | Not scored | 29 Apr, 2026 | npm mbt |
Malicious release: Malicious code in apple-infra-network-v2 (npm) GHSA-4mpf-c2vv-xfj5, MAL-2026-3155 | Malicious | Not scored | 29 Apr, 2026 | npm apple-infra-network-v2 |
Malicious release: Malicious code in npm-global-util (npm) GHSA-56m6-68r8-r7p4, MAL-2026-3163 | Malicious | Not scored | 29 Apr, 2026 | npm npm-global-util |
Malicious release: Malicious code in agents-a365-runtime (npm) GHSA-98v9-9pjp-6p9m, MAL-2026-3149 | Malicious | Not scored | 29 Apr, 2026 | npm agents-a365-runtime |
Malicious release: Malicious code in apple-pki-cert-validator (npm) GHSA-9rmm-mp3q-456f, MAL-2026-3162 | Malicious | Not scored | 29 Apr, 2026 | npm apple-pki-cert-validator |