Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in simple-auth-basic (npm) GHSA-4v3c-c5pj-m2qq, MAL-2026-2905 | Malicious | Not scored | 15 Apr, 2026 | npm simple-auth-basic |
Malicious release: Malicious code in swplayer-react-sl (npm) GHSA-959p-q4g9-cc8r, MAL-2026-2906 | Malicious | Not scored | 15 Apr, 2026 | npm swplayer-react-sl |
Malicious release: Malicious code in chai-str (npm) GHSA-286p-r2qw-c6p5, MAL-2026-2898 | Malicious | Not scored | 15 Apr, 2026 | npm chai-str |
Malicious release: Malicious code in chai-as-adapter (npm) GHSA-38vm-pgm6-6g7p, MAL-2026-2885 | Malicious | Not scored | 15 Apr, 2026 | npm chai-as-adapter |
Malicious release: Malicious code in chai-as-type (npm) GHSA-38w3-8j54-936j, MAL-2026-2740 | Malicious | Not scored | 15 Apr, 2026 | npm chai-as-type |
Malicious release: Malicious code in chai-as-mobj (npm) GHSA-3q98-w67h-r2cr, MAL-2026-2893 | Malicious | Not scored | 15 Apr, 2026 | npm chai-as-mobj |
Malicious release: Malicious code in chai-as-inserted (npm) GHSA-472w-9h7g-j276, MAL-2026-2892 | Malicious | Not scored | 15 Apr, 2026 | npm chai-as-inserted |
Malicious release: Malicious code in chai-as-encrypted (npm) GHSA-5m93-37pp-5rc3, MAL-2026-2888 | Malicious | Not scored | 15 Apr, 2026 | npm chai-as-encrypted |
Malicious release: Malicious code in chai-as-stream (npm) GHSA-6xjm-3c84-552p, MAL-2026-2896 | Malicious | Not scored | 15 Apr, 2026 | npm chai-as-stream |
Malicious release: Malicious code in chai-as-evm (npm) GHSA-826h-2vvx-vf77, MAL-2026-2889 | Malicious | Not scored | 15 Apr, 2026 | npm chai-as-evm |
Malicious release: Malicious code in trackora-chain (npm) GHSA-874r-5jxm-vm42, MAL-2026-2903 | Malicious | Not scored | 15 Apr, 2026 | npm trackora-chain |
Malicious release: Malicious code in chai-as-chain-v2 (npm) GHSA-89j2-wcf8-hqm3, MAL-2026-2886 | Malicious | Not scored | 15 Apr, 2026 | npm chai-as-chain-v2 |
Malicious release: Malicious code in trackora-node (npm) GHSA-98cf-4fx3-32vx, MAL-2026-2904 | Malicious | Not scored | 15 Apr, 2026 | npm trackora-node |
Malicious release: Malicious code in chai-beta (npm) GHSA-c6w2-3qw2-g5fm, MAL-2026-2897 | Malicious | Not scored | 15 Apr, 2026 | npm chai-beta |
Malicious release: Malicious code in env_express (npm) GHSA-gw3g-c463-2jw5, MAL-2026-2901 | Malicious | Not scored | 15 Apr, 2026 | npm env_express |
Malicious release: Malicious code in chai-as-elevated (npm) GHSA-p5jq-3963-9qmx, MAL-2026-2887 | Malicious | Not scored | 15 Apr, 2026 | npm chai-as-elevated |
Malicious release: Malicious code in lockedin-chai-chain (npm) GHSA-x4j5-4v2p-qc2g, MAL-2026-2902 | Malicious | Not scored | 15 Apr, 2026 | npm lockedin-chai-chain |
Malicious release: Malicious code in chai-use-chains (npm) GHSA-x74q-vqg8-cc8f, MAL-2026-2899 | Malicious | Not scored | 15 Apr, 2026 | npm chai-use-chains |
Malicious release: Malicious code in chai-as-nobj (npm) MAL-2026-2894 | Malicious | Not scored | 15 Apr, 2026 | npm chai-as-nobj |
Malicious release: Malicious code in dotenv-pack (npm) MAL-2026-2900 | Malicious | Not scored | 15 Apr, 2026 | npm dotenv-pack |
Malicious release: Malicious code in forge-jsx (npm) GHSA-6j9q-8g4r-fm8q, MAL-2026-2884 | Malicious | Not scored | 15 Apr, 2026 | npm forge-jsx |
Malicious release: Malicious code in bfx-hf-strategy-perf (npm) MAL-2026-2696 | Malicious | Not scored | 15 Apr, 2026 | npm bfx-hf-strategy-perf |
Malicious release: Malicious code in vs-supplier-portal-web (npm) GHSA-c7cf-pp98-5r8p, MAL-2026-2693 | Malicious | Not scored | 15 Apr, 2026 | npm vs-supplier-portal-web |
Malicious release: Malicious code in fusion-events (npm) GHSA-qg2w-933f-v9hx, MAL-2026-2692 | Malicious | Not scored | 15 Apr, 2026 | npm fusion-events |
Malicious release: Malicious code in base-counter-web (npm) GHSA-v6g6-6wv3-vv4r, MAL-2026-2691 | Malicious | Not scored | 15 Apr, 2026 | npm base-counter-web |
Malicious release: Malicious code in @pnc-cib/cib-core-lib (npm) GHSA-3f99-p7c4-qvhm, MAL-2026-2688 | Malicious | Not scored | 15 Apr, 2026 | npm @pnc-cib/cib-core-lib |
Malicious release: Malicious code in @pnc-ref/harmony-core-v18 (npm) GHSA-886p-c4rr-2269, MAL-2026-2689 | Malicious | Not scored | 15 Apr, 2026 | npm @pnc-ref/harmony-core-v18 |
Malicious release: Malicious code in @pnc-ref/harmony-support-v18 (npm) GHSA-rwxj-hrxv-283c, MAL-2026-2690 | Malicious | Not scored | 15 Apr, 2026 | npm @pnc-ref/harmony-support-v18 |
Malicious release: Malicious code in com.baogong.app_push_permission (npm) GHSA-pxg6-jw7c-gfmg, MAL-2026-2687 | Malicious | Not scored | 15 Apr, 2026 | npm com.baogong.app_push_permission |
Malicious release: Malicious code in react-dom-19 (npm) MAL-2026-2685 | Malicious | Not scored | 15 Apr, 2026 | npm react-dom-19 |
Malicious release: Malicious code in tensorzero-node (npm) GHSA-g3vv-q9j6-pw39, MAL-2026-2684 | Malicious | Not scored | 15 Apr, 2026 | npm tensorzero-node |
Malicious release: Malicious code in @athena-ui-components/axios (npm) MAL-2026-2683 | Malicious | Not scored | 15 Apr, 2026 | npm @athena-ui-components/axios |
Malicious release: Malicious code in @athena-ui-components/dashboard-widget (npm) MAL-2026-2681 | Malicious | Not scored | 15 Apr, 2026 | npm @athena-ui-components/dashboard-widget |
Malicious release: Malicious code in @athena-ui-components/deeplink (npm) MAL-2026-2682 | Malicious | Not scored | 15 Apr, 2026 | npm @athena-ui-components/deeplink |
Malicious release: Malicious code in @jesusvizcaino2021/com.baogong.app-push-permission (npm) MAL-2026-2916 | Malicious | Not scored | 15 Apr, 2026 | npm @jesusvizcaino2021/com.baogong.app-push-permission |
Malicious release: Malicious code in js-logger-pack (npm) GHSA-mj89-jrhm-qxhc, MAL-2026-2827 | Malicious | Not scored | 15 Apr, 2026 | npm js-logger-pack |
Malicious release: Malicious code in @veygo/component-library (npm) MAL-2026-2680 | Malicious | Not scored | 15 Apr, 2026 | npm @veygo/component-library |
Malicious release: Malicious code in chief-proxy-out (npm) GHSA-86cf-7fc5-p98v, MAL-2026-2674 | Malicious | Not scored | 15 Apr, 2026 | npm chief-proxy-out |
Malicious release: Malicious code in chief-documentation (npm) GHSA-8r2m-gvh8-jfqm, MAL-2026-2673 | Malicious | Not scored | 15 Apr, 2026 | npm chief-documentation |
Malicious release: Malicious code in moscova-plural-json-parser (npm) GHSA-gr87-65fp-9qwv, MAL-2026-2676 | Malicious | Not scored | 15 Apr, 2026 | npm moscova-plural-json-parser |
Malicious release: Malicious code in snitz-chief-cloud (npm) GHSA-mqcw-j566-9hqh, MAL-2026-2678 | Malicious | Not scored | 15 Apr, 2026 | npm snitz-chief-cloud |
Malicious release: Malicious code in pdf-linker (npm) GHSA-mwqh-c7j6-f7p2, MAL-2026-2677 | Malicious | Not scored | 15 Apr, 2026 | npm pdf-linker |
Malicious release: Malicious code in snitz-chief-cloud-config (npm) GHSA-vc4x-mvfp-p8c8, MAL-2026-2679 | Malicious | Not scored | 15 Apr, 2026 | npm snitz-chief-cloud-config |
Malicious release: Malicious code in mongoose-stamps (npm) GHSA-4cvv-673v-3gjj, MAL-2026-2675 | Malicious | Not scored | 15 Apr, 2026 | npm mongoose-stamps |
Malicious release: Malicious code in ahmed_salem_ph (npm) GHSA-cjwg-37rq-9xwf, MAL-2026-2672 | Malicious | Not scored | 15 Apr, 2026 | npm ahmed_salem_ph |
Malicious release: Malicious code in pnpm-workspaces (npm) MAL-2026-2668 | Malicious | Not scored | 14 Apr, 2026 | npm pnpm-workspaces |
Malicious release: Malicious code in ckeditor5-minimap (npm) MAL-2026-2667 | Malicious | Not scored | 14 Apr, 2026 | npm ckeditor5-minimap |
Malicious release: Malicious code in tether-wrk-base (npm) GHSA-wvh9-3hgj-7f22, MAL-2026-2663 | Malicious | Not scored | 14 Apr, 2026 | npm tether-wrk-base |
Malicious release: Malicious code in @automation-toolchain/f5-cloud-libs (npm) MAL-2026-2662 | Malicious | Not scored | 14 Apr, 2026 | npm @automation-toolchain/f5-cloud-libs |
Malicious release: Malicious code in ts-lint-builds (npm) GHSA-rhr9-fqxc-vwqq, MAL-2026-2883 | Malicious | Not scored | 14 Apr, 2026 | npm ts-lint-builds |