Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in apple-internal-pki-trust-v5 (npm) GHSA-cgj9-rq56-vc54, MAL-2026-3159 | Malicious | Not scored | 29 Apr, 2026 | npm apple-internal-pki-trust-v5 |
Malicious release: Malicious code in apple-cktool-api-v2 (npm) GHSA-ff63-6wjc-q735, MAL-2026-3150 | Malicious | Not scored | 29 Apr, 2026 | npm apple-cktool-api-v2 |
Malicious release: Malicious code in apple-internal-telemetry-service (npm) GHSA-g2w3-7m75-fpwv, MAL-2026-3161 | Malicious | Not scored | 29 Apr, 2026 | npm apple-internal-telemetry-service |
Malicious release: Malicious code in apple-cloud-infrastructure-monitor (npm) GHSA-gr3q-f7jp-gr5c, MAL-2026-3151 | Malicious | Not scored | 29 Apr, 2026 | npm apple-cloud-infrastructure-monitor |
Malicious release: Malicious code in apple-coredata-internal-service (npm) GHSA-h7g3-2m9j-5r36, MAL-2026-3152 | Malicious | Not scored | 29 Apr, 2026 | npm apple-coredata-internal-service |
Malicious release: Malicious code in apple-internal-pki-trust (npm) GHSA-mc4h-h4q5-8hw9, MAL-2026-3158 | Malicious | Not scored | 29 Apr, 2026 | npm apple-internal-pki-trust |
Malicious release: Malicious code in apple-internal-auth-v3 (npm) GHSA-r59g-3q6c-f5v6, MAL-2026-3157 | Malicious | Not scored | 29 Apr, 2026 | npm apple-internal-auth-v3 |
Malicious release: Malicious code in apple-infra-final-escape (npm) GHSA-whv7-rqc3-rvhc, MAL-2026-3153 | Malicious | Not scored | 29 Apr, 2026 | npm apple-infra-final-escape |
Malicious release: Malicious code in apple-internal-pki-utils (npm) GHSA-wpjx-fcmm-7p5h, MAL-2026-3160 | Malicious | Not scored | 29 Apr, 2026 | npm apple-internal-pki-utils |
Malicious release: Malicious code in apple-infra-gcp-leak (npm) GHSA-wvgf-2hjr-hcw7, MAL-2026-3154 | Malicious | Not scored | 29 Apr, 2026 | npm apple-infra-gcp-leak |
Malicious release: Malicious code in apple-infra-ultimate-bypass (npm) GHSA-x5g9-r6x2-jpfv, MAL-2026-3156 | Malicious | Not scored | 29 Apr, 2026 | npm apple-infra-ultimate-bypass |
Malicious release: Malicious code in coinmate-typescript-client (npm) MAL-2026-3147 | Malicious | Not scored | 29 Apr, 2026 | npm coinmate-typescript-client |
Malicious release: Malicious code in fivem-monitor (npm) GHSA-fc78-r45j-m7f5, MAL-2026-3140 | Malicious | Not scored | 28 Apr, 2026 | npm fivem-monitor |
Malicious release: Malicious code in wm-plugin-teach-me-widget (npm) GHSA-qgp5-pp55-46vj, MAL-2026-3128 | Malicious | Not scored | 28 Apr, 2026 | npm wm-plugin-teach-me-widget |
Malicious release: Malicious code in apple-app-store-server-library-poc (npm) GHSA-4r99-2267-v7p2, MAL-2026-3123 | Malicious | Not scored | 27 Apr, 2026 | npm apple-app-store-server-library-poc |
Malicious release: Malicious code in @w3m-frame/session_update (npm) GHSA-48cv-82hq-87cc, MAL-2026-3122 | Malicious | Not scored | 27 Apr, 2026 | npm @w3m-frame/session_update |
Malicious release: Malicious code in @pyme-web/web-api (npm) GHSA-q9v2-86j4-4885, MAL-2026-3120 | Malicious | Not scored | 27 Apr, 2026 | npm @pyme-web/web-api |
Malicious release: Malicious code in @pyme-web/ui-widget (npm) GHSA-5x28-2ff3-64cj, MAL-2026-3119 | Malicious | Not scored | 27 Apr, 2026 | npm @pyme-web/ui-widget |
Malicious release: Malicious code in @pyme-web/ui-base (npm) GHSA-8jh8-42h4-gjg5, MAL-2026-3118 | Malicious | Not scored | 27 Apr, 2026 | npm @pyme-web/ui-base |
Malicious release: Malicious code in @taxmoninor/taxmon (npm) GHSA-qpg7-5r8v-6h76, MAL-2026-3121 | Malicious | Not scored | 27 Apr, 2026 | npm @taxmoninor/taxmon |
Malicious release: Malicious code in @apple-pay-trust/authorize-payment (npm) GHSA-3g77-vg2g-7mjv, MAL-2026-3111 | Malicious | Not scored | 27 Apr, 2026 | npm @apple-pay-trust/authorize-payment |
Malicious release: Malicious code in @activation_code/success (npm) GHSA-hq57-73cg-6253, MAL-2026-3108 | Malicious | Not scored | 27 Apr, 2026 | npm @activation_code/success |
Malicious release: Malicious code in @apple-pay-trust/cancelled (npm) GHSA-2v65-5xfv-p42q, MAL-2026-3112 | Malicious | Not scored | 27 Apr, 2026 | npm @apple-pay-trust/cancelled |
Malicious release: Malicious code in @apiary-annex/meta (npm) GHSA-gqjg-5998-3rmq, MAL-2026-3109 | Malicious | Not scored | 27 Apr, 2026 | npm @apiary-annex/meta |
Malicious release: Malicious code in @business_promocode/cancel_promocode (npm) GHSA-5vjv-9xjr-hq87, MAL-2026-3117 | Malicious | Not scored | 27 Apr, 2026 | npm @business_promocode/cancel_promocode |
Malicious release: Malicious code in @activation_code/activate (npm) GHSA-64fm-mh5q-w2rp, MAL-2026-3106 | Malicious | Not scored | 27 Apr, 2026 | npm @activation_code/activate |
Malicious release: Malicious code in @business_promocode/apply_promocode (npm) GHSA-g79w-grhv-qw3m, MAL-2026-3116 | Malicious | Not scored | 27 Apr, 2026 | npm @business_promocode/apply_promocode |
Malicious release: Malicious code in @b2b_blocker/show_activation_error (npm) GHSA-ppx3-ph2c-gqgm, MAL-2026-3115 | Malicious | Not scored | 27 Apr, 2026 | npm @b2b_blocker/show_activation_error |
Malicious release: Malicious code in @activation_code/error (npm) GHSA-hrpv-vm88-vgfx, MAL-2026-3107 | Malicious | Not scored | 27 Apr, 2026 | npm @activation_code/error |
Malicious release: Malicious code in @apple-pay-trust/finish (npm) GHSA-45wm-8rff-vxfr, MAL-2026-3114 | Malicious | Not scored | 27 Apr, 2026 | npm @apple-pay-trust/finish |
Malicious release: Malicious code in @apple-pay-trust/check-apple-pay-result (npm) GHSA-rcv5-83j3-954q, MAL-2026-3113 | Malicious | Not scored | 27 Apr, 2026 | npm @apple-pay-trust/check-apple-pay-result |
Malicious release: Malicious code in @apiary-annex/title (npm) GHSA-mw85-996v-w3pc, MAL-2026-3110 | Malicious | Not scored | 27 Apr, 2026 | npm @apiary-annex/title |
Malicious release: Malicious code in apple-internal-dev-check (npm) GHSA-p9p8-h8cq-mhq7, MAL-2026-3124 | Malicious | Not scored | 27 Apr, 2026 | npm apple-internal-dev-check |
Malicious release: Malicious code in shopify-app-extension-template (npm) MAL-2026-3051 | Malicious | Not scored | 26 Apr, 2026 | npm shopify-app-extension-template |
Malicious release: Malicious code in frank-research-poc-apple (npm) GHSA-78hq-gp8w-grwp, MAL-2026-3081 | Malicious | Not scored | 26 Apr, 2026 | npm frank-research-poc-apple |
Malicious release: Malicious code in @clearpool/streaming (npm) GHSA-m2h2-p59r-798j, MAL-2026-3057 | Malicious | Not scored | 26 Apr, 2026 | npm @clearpool/streaming |
Malicious release: Malicious code in @clearpool/table (npm) GHSA-vxmm-j4j5-8q23, MAL-2026-3058 | Malicious | Not scored | 26 Apr, 2026 | npm @clearpool/table |
Malicious release: Malicious code in @clearpool/comms (npm) GHSA-fr5f-hf7f-p9w9, MAL-2026-3056 | Malicious | Not scored | 26 Apr, 2026 | npm @clearpool/comms |
Malicious release: Malicious code in @clearpool/utils (npm) MAL-2026-3059 | Malicious | Not scored | 26 Apr, 2026 | npm @clearpool/utils |
Malicious release: Malicious code in classlink (npm) MAL-2026-3049 | Malicious | Not scored | 26 Apr, 2026 | npm classlink |
Malicious release: Malicious code in frank-bot-gogle-cloning (npm) GHSA-52j3-fx2q-cqm9, MAL-2026-3080 | Malicious | Not scored | 26 Apr, 2026 | npm frank-bot-gogle-cloning |
Malicious release: Malicious code in @tw-marionette/clipboard (npm) GHSA-64qv-3564-73rg, MAL-2026-3070 | Malicious | Not scored | 26 Apr, 2026 | npm @tw-marionette/clipboard |
Malicious release: Malicious code in @ozon-complt/antibot-handler (npm) GHSA-m2jf-j5v5-wwx9, MAL-2026-3066 | Malicious | Not scored | 26 Apr, 2026 | npm @ozon-complt/antibot-handler |
Malicious release: Malicious code in @ozon-complt/split (npm) GHSA-cvr6-x554-xx2x, MAL-2026-3067 | Malicious | Not scored | 26 Apr, 2026 | npm @ozon-complt/split |
Malicious release: Malicious code in @apple-pay-trust/merchant-session (npm) GHSA-28hg-c8r7-mcvq, MAL-2026-3053 | Malicious | Not scored | 25 Apr, 2026 | npm @apple-pay-trust/merchant-session |
Malicious release: Malicious code in @google-pay-trust/cancelled (npm) GHSA-468m-q27w-9r8c, MAL-2026-3062 | Malicious | Not scored | 25 Apr, 2026 | npm @google-pay-trust/cancelled |
Malicious release: Malicious code in @google-pay-trust/authorize-payment (npm) GHSA-rpp8-r54f-pm33, MAL-2026-3061 | Malicious | Not scored | 25 Apr, 2026 | npm @google-pay-trust/authorize-payment |
Malicious release: Malicious code in @apple-pay-trust/start (npm) GHSA-crv2-p353-52gh, MAL-2026-3054 | Malicious | Not scored | 25 Apr, 2026 | npm @apple-pay-trust/start |
Malicious release: Malicious code in @google-pay-trust/init-google-pay (npm) GHSA-772p-cqpx-g783, MAL-2026-3064 | Malicious | Not scored | 25 Apr, 2026 | npm @google-pay-trust/init-google-pay |
Malicious release: Malicious code in @google-pay-trust/finish (npm) GHSA-g326-rcxw-2m3g, MAL-2026-3063 | Malicious | Not scored | 25 Apr, 2026 | npm @google-pay-trust/finish |