Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in relion-node (npm) MAL-2026-2797 | Malicious | Not scored | 16 Apr, 2026 | npm relion-node |
Malicious release: Malicious code in relion-chain (npm) MAL-2026-2796 | Malicious | Not scored | 16 Apr, 2026 | npm relion-chain |
Malicious release: Malicious code in react-appfabric-shell (npm) MAL-2026-2795 | Malicious | Not scored | 16 Apr, 2026 | npm react-appfabric-shell |
Malicious release: Malicious code in puzzle-fragment (npm) MAL-2026-2794 | Malicious | Not scored | 16 Apr, 2026 | npm puzzle-fragment |
Malicious release: Malicious code in pil2-stark-js (npm) MAL-2026-2793 | Malicious | Not scored | 16 Apr, 2026 | npm pil2-stark-js |
Malicious release: Malicious code in pil2-proofman-js (npm) MAL-2026-2792 | Malicious | Not scored | 16 Apr, 2026 | npm pil2-proofman-js |
Malicious release: Malicious code in payments-ui (npm) MAL-2026-2791 | Malicious | Not scored | 16 Apr, 2026 | npm payments-ui |
Malicious release: Malicious code in package-with-import-assertions (npm) MAL-2026-2790 | Malicious | Not scored | 16 Apr, 2026 | npm package-with-import-assertions |
Malicious release: Malicious code in otomi-tasks (npm) MAL-2026-2789 | Malicious | Not scored | 16 Apr, 2026 | npm otomi-tasks |
Malicious release: Malicious code in otomi-console (npm) MAL-2026-2788 | Malicious | Not scored | 16 Apr, 2026 | npm otomi-console |
Malicious release: Malicious code in node-syncora (npm) MAL-2026-2787 | Malicious | Not scored | 16 Apr, 2026 | npm node-syncora |
Malicious release: Malicious code in node-metrica (npm) MAL-2026-2786 | Malicious | Not scored | 16 Apr, 2026 | npm node-metrica |
Malicious release: Malicious code in nemo-jaws (npm) GHSA-w22h-mv8v-hqhc, MAL-2026-2785 | Malicious | Not scored | 16 Apr, 2026 | npm nemo-jaws |
Malicious release: Malicious code in nemo-datadrive (npm) MAL-2026-2784 | Malicious | Not scored | 16 Apr, 2026 | npm nemo-datadrive |
Malicious release: Malicious code in mypeopledoc (npm) MAL-2026-2783 | Malicious | Not scored | 16 Apr, 2026 | npm mypeopledoc |
Malicious release: Malicious code in mybibilabu (npm) MAL-2026-2782 | Malicious | Not scored | 16 Apr, 2026 | npm mybibilabu |
Malicious release: Malicious code in minecraft_image_to_blocks (npm) MAL-2026-2781 | Malicious | Not scored | 16 Apr, 2026 | npm minecraft_image_to_blocks |
Malicious release: Malicious code in metrify-node (npm) MAL-2026-2780 | Malicious | Not scored | 16 Apr, 2026 | npm metrify-node |
Malicious release: Malicious code in metrify-chain (npm) MAL-2026-2779 | Malicious | Not scored | 16 Apr, 2026 | npm metrify-chain |
Malicious release: Malicious code in marketing-analytics (npm) MAL-2026-2778 | Malicious | Not scored | 16 Apr, 2026 | npm marketing-analytics |
Malicious release: Malicious code in linode-developers (npm) MAL-2026-2777 | Malicious | Not scored | 16 Apr, 2026 | npm linode-developers |
Malicious release: Malicious code in int-browsing-gateway (npm) MAL-2026-2776 | Malicious | Not scored | 16 Apr, 2026 | npm int-browsing-gateway |
Malicious release: Malicious code in insomnia-smoke-test (npm) MAL-2026-2775 | Malicious | Not scored | 16 Apr, 2026 | npm insomnia-smoke-test |
Malicious release: Malicious code in insomnia-scripting-environment (npm) MAL-2026-2774 | Malicious | Not scored | 16 Apr, 2026 | npm insomnia-scripting-environment |
Malicious release: Malicious code in insomnia-api (npm) MAL-2026-2773 | Malicious | Not scored | 16 Apr, 2026 | npm insomnia-api |
Malicious release: Malicious code in idaasfinancialnodeserv (npm) MAL-2026-2772 | Malicious | Not scored | 16 Apr, 2026 | npm idaasfinancialnodeserv |
Malicious release: Malicious code in icims-express-dot-engine (npm) MAL-2026-2771 | Malicious | Not scored | 16 Apr, 2026 | npm icims-express-dot-engine |
Malicious release: Malicious code in helios-components (npm) MAL-2026-2770 | Malicious | Not scored | 16 Apr, 2026 | npm helios-components |
Malicious release: Malicious code in hardhat-starter-kit (npm) MAL-2026-2769 | Malicious | Not scored | 16 Apr, 2026 | npm hardhat-starter-kit |
Malicious release: Malicious code in h3-next (npm) MAL-2026-2768 | Malicious | Not scored | 16 Apr, 2026 | npm h3-next |
Malicious release: Malicious code in ground-platform (npm) MAL-2026-2767 | Malicious | Not scored | 16 Apr, 2026 | npm ground-platform |
Malicious release: Malicious code in gke-net (npm) MAL-2026-2766 | Malicious | Not scored | 16 Apr, 2026 | npm gke-net |
Malicious release: Malicious code in ghscan-pkgcheck-test-001 (npm) MAL-2026-2765 | Malicious | Not scored | 16 Apr, 2026 | npm ghscan-pkgcheck-test-001 |
Malicious release: Malicious code in gemini-cli-vscode-ide-companion (npm) MAL-2026-2764 | Malicious | Not scored | 16 Apr, 2026 | npm gemini-cli-vscode-ide-companion |
Malicious release: Malicious code in gemini-ai-checker (npm) MAL-2026-2763 | Malicious | Not scored | 16 Apr, 2026 | npm gemini-ai-checker |
Malicious release: Malicious code in farikku-util (npm) GHSA-98g7-3vh4-ww58, MAL-2026-2762 | Malicious | Not scored | 16 Apr, 2026 | npm farikku-util |
Malicious release: Malicious code in f0-fpti-tracking (npm) MAL-2026-2761 | Malicious | Not scored | 16 Apr, 2026 | npm f0-fpti-tracking |
Malicious release: Malicious code in f0-email-verification (npm) MAL-2026-2760 | Malicious | Not scored | 16 Apr, 2026 | npm f0-email-verification |
Malicious release: Malicious code in express-auth-basic (npm) MAL-2026-2759 | Malicious | Not scored | 16 Apr, 2026 | npm express-auth-basic |
Malicious release: Malicious code in estaspnet (npm) MAL-2026-2758 | Malicious | Not scored | 16 Apr, 2026 | npm estaspnet |
Malicious release: Malicious code in docai-sheets (npm) MAL-2026-2757 | Malicious | Not scored | 16 Apr, 2026 | npm docai-sheets |
Malicious release: Malicious code in digitallogger (npm) MAL-2026-2756 | Malicious | Not scored | 16 Apr, 2026 | npm digitallogger |
Malicious release: Malicious code in devops-debug-tool-ctf (npm) MAL-2026-2755 | Malicious | Not scored | 16 Apr, 2026 | npm devops-debug-tool-ctf |
Malicious release: Malicious code in deployer-kit (npm) MAL-2026-2754 | Malicious | Not scored | 16 Apr, 2026 | npm deployer-kit |
Malicious release: Malicious code in declarative-tracker (npm) MAL-2026-2753 | Malicious | Not scored | 16 Apr, 2026 | npm declarative-tracker |
Malicious release: Malicious code in country-specialization (npm) MAL-2026-2752 | Malicious | Not scored | 16 Apr, 2026 | npm country-specialization |
Malicious release: Malicious code in coremeshnode (npm) MAL-2026-2751 | Malicious | Not scored | 16 Apr, 2026 | npm coremeshnode |
Malicious release: Malicious code in coremesh (npm) MAL-2026-2750 | Malicious | Not scored | 16 Apr, 2026 | npm coremesh |
Malicious release: Malicious code in conversation-relay (npm) MAL-2026-2749 | Malicious | Not scored | 16 Apr, 2026 | npm conversation-relay |
Malicious release: Malicious code in collect-rangers (npm) MAL-2026-2748 | Malicious | Not scored | 16 Apr, 2026 | npm collect-rangers |