Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in cjs-biginteger (npm) GHSA-65gr-98mv-9rj5, MAL-2026-2882 | Malicious | Not scored | 14 Apr, 2026 | npm cjs-biginteger |
Malicious release: Malicious code in bjs-lint-builders (npm) GHSA-cv9f-3jc4-hxhv, MAL-2026-2881 | Malicious | Not scored | 14 Apr, 2026 | npm bjs-lint-builders |
Malicious release: Malicious code in bjs-lint-builder (npm) GHSA-m374-prpv-rf26, MAL-2026-2880 | Malicious | Not scored | 14 Apr, 2026 | npm bjs-lint-builder |
Malicious release: Malicious code in bjs-biginteger (npm) GHSA-jjf3-wfhw-qhx4, MAL-2026-2879 | Malicious | Not scored | 14 Apr, 2026 | npm bjs-biginteger |
Malicious release: Malicious code in tailwindcss-style-typography (npm) GHSA-frf3-5rj5-86gh, MAL-2026-2658 | Malicious | Not scored | 14 Apr, 2026 | npm tailwindcss-style-typography |
Malicious release: Malicious code in tailwind-typ (npm) GHSA-6x9q-58gm-32xp, MAL-2026-2657 | Malicious | Not scored | 14 Apr, 2026 | npm tailwind-typ |
Malicious release: Malicious code in tailwind-stylecss-typography (npm) GHSA-mcwq-8vxc-g64c, MAL-2026-2656 | Malicious | Not scored | 14 Apr, 2026 | npm tailwind-stylecss-typography |
Malicious release: Malicious code in chai-as-refined (npm) GHSA-4jgh-4hh7-rpfj, MAL-2026-2641 | Malicious | Not scored | 14 Apr, 2026 | npm chai-as-refined |
Malicious release: Malicious code in node-unpnotifyserv (npm) GHSA-5vp6-xcq2-35fw, MAL-2026-2644 | Malicious | Not scored | 14 Apr, 2026 | npm node-unpnotifyserv |
Malicious release: Malicious code in ui-utils-udhay-alerts (npm) GHSA-w45r-3r6c-6755, MAL-2026-2659 | Malicious | Not scored | 14 Apr, 2026 | npm ui-utils-udhay-alerts |
Malicious release: Malicious code in okxglobal (npm) GHSA-633r-f3rq-76g4, MAL-2026-2649 | Malicious | Not scored | 14 Apr, 2026 | npm okxglobal |
Malicious release: Malicious code in okfe-serverless-conf (npm) GHSA-974m-p83h-567h, MAL-2026-2646 | Malicious | Not scored | 14 Apr, 2026 | npm okfe-serverless-conf |
Malicious release: Malicious code in chatbotloader (npm) GHSA-g7q7-rf3f-vw4h, MAL-2026-2642 | Malicious | Not scored | 14 Apr, 2026 | npm chatbotloader |
Malicious release: Malicious code in okx-nav (npm) GHSA-qgr4-v84c-p4g7, MAL-2026-2648 | Malicious | Not scored | 14 Apr, 2026 | npm okx-nav |
Malicious release: Malicious code in okassistant (npm) GHSA-vcqm-4m6v-428j, MAL-2026-2645 | Malicious | Not scored | 14 Apr, 2026 | npm okassistant |
Malicious release: Malicious code in okx-data (npm) GHSA-whfj-85gw-8h4c, MAL-2026-2647 | Malicious | Not scored | 14 Apr, 2026 | npm okx-data |
Malicious release: Malicious code in apmfe (npm) GHSA-ww7x-jqhv-gqqj, MAL-2026-2637 | Malicious | Not scored | 14 Apr, 2026 | npm apmfe |
Malicious release: Malicious code in billing-paywidget (npm) GHSA-3cww-22qr-fgwc, MAL-2026-2638 | Malicious | Not scored | 14 Apr, 2026 | npm billing-paywidget |
Malicious release: Malicious code in ms-affiliate-links (npm) GHSA-44p5-8q53-5vm5, MAL-2026-2643 | Malicious | Not scored | 14 Apr, 2026 | npm ms-affiliate-links |
Malicious release: Malicious code in onewin-landing (npm) GHSA-6xf2-88r3-x5gr, MAL-2026-2652 | Malicious | Not scored | 14 Apr, 2026 | npm onewin-landing |
Malicious release: Malicious code in vip-landing (npm) GHSA-ggp2-gm9g-8q8q, MAL-2026-2661 | Malicious | Not scored | 14 Apr, 2026 | npm vip-landing |
Malicious release: Malicious code in bytefrontier (npm) GHSA-h4w8-m8m7-x8r8, MAL-2026-2639 | Malicious | Not scored | 14 Apr, 2026 | npm bytefrontier |
Malicious release: Malicious code in use-feature-flags-plugin (npm) GHSA-jccf-63c2-rpf3, MAL-2026-2660 | Malicious | Not scored | 14 Apr, 2026 | npm use-feature-flags-plugin |
Malicious release: Malicious code in bytefrontier-core (npm) GHSA-jq5f-344f-grch, MAL-2026-2640 | Malicious | Not scored | 14 Apr, 2026 | npm bytefrontier-core |
Malicious release: Malicious code in one-sdui (npm) GHSA-p4xf-jh26-qq5c, MAL-2026-2650 | Malicious | Not scored | 14 Apr, 2026 | npm one-sdui |
Malicious release: Malicious code in one-translations (npm) GHSA-98c8-24hp-26m9, MAL-2026-2651 | Malicious | Not scored | 14 Apr, 2026 | npm one-translations |
Malicious release: Malicious code in tailwind-lines-clamp (npm) GHSA-5f6w-9x4v-m9gw, MAL-2026-2655 | Malicious | Not scored | 14 Apr, 2026 | npm tailwind-lines-clamp |
Malicious release: Malicious code in percy-cake-docker (npm) GHSA-5wj3-w66f-5wcx, MAL-2026-2634 | Malicious | Not scored | 14 Apr, 2026 | npm percy-cake-docker |
Malicious release: Malicious code in path-internal (npm) GHSA-55cg-pqmh-hh6w, MAL-2026-2930 | Malicious | Not scored | 14 Apr, 2026 | npm path-internal |
Malicious release: Malicious code in buffer-util-extend (npm) GHSA-g44v-3gq3-j8p6, MAL-2026-2920 | Malicious | Not scored | 14 Apr, 2026 | npm buffer-util-extend |
Malicious release: Malicious code in path-extend (npm) GHSA-qvmc-2hcj-8h4f, MAL-2026-2929 | Malicious | Not scored | 14 Apr, 2026 | npm path-extend |
Malicious release: Malicious code in centralogger (npm) GHSA-wpw7-2rgx-4cfm, MAL-2026-2825 | Malicious | Not scored | 14 Apr, 2026 | npm centralogger |
Malicious release: Malicious code in dom-utils-lite (npm) GHSA-v6fr-pvhf-6rh5, MAL-2026-2826 | Malicious | Not scored | 14 Apr, 2026 | npm dom-utils-lite |
Malicious release: Malicious code in stacks-editor (npm) MAL-2026-2629 | Malicious | Not scored | 14 Apr, 2026 | npm stacks-editor |
Malicious release: Malicious code in getcardslib (npm) GHSA-4xvr-7wr9-qrcg, MAL-2026-2626 | Malicious | Not scored | 14 Apr, 2026 | npm getcardslib |
Malicious release: Malicious code in magentaa11y (npm) GHSA-q8qr-982j-49vc, MAL-2026-2632 | Malicious | Not scored | 13 Apr, 2026 | npm magentaa11y |
Malicious release: Malicious code in walmart-internal (npm) GHSA-99jf-pgvm-hcgv, MAL-2026-2621 | Malicious | Not scored | 13 Apr, 2026 | npm walmart-internal |
Malicious release: Malicious code in @op-microfrontends/config (npm) GHSA-5wh3-m924-8fcv, MAL-2026-2590 | Malicious | Not scored | 13 Apr, 2026 | npm @op-microfrontends/config |
Malicious release: Malicious code in @sports-api/api-sdk (npm) GHSA-9pvf-233v-3fvc, MAL-2026-2595 | Malicious | Not scored | 13 Apr, 2026 | npm @sports-api/api-sdk |
Malicious release: Malicious code in @ids-alpha/theme (npm) GHSA-c58p-p36f-4c6c, MAL-2026-2586 | Malicious | Not scored | 13 Apr, 2026 | npm @ids-alpha/theme |
Malicious release: Malicious code in @mx-shared/utils (npm) GHSA-cgm3-286g-f28r, MAL-2026-2589 | Malicious | Not scored | 13 Apr, 2026 | npm @mx-shared/utils |
Malicious release: Malicious code in @dtc-campaign-wizard/campaign-wizard (npm) GHSA-grww-phc3-vfc4, MAL-2026-2581 | Malicious | Not scored | 13 Apr, 2026 | npm @dtc-campaign-wizard/campaign-wizard |
Malicious release: Malicious code in @sage-active/ui (npm) GHSA-jrjx-8vfw-xg4h, MAL-2026-2593 | Malicious | Not scored | 13 Apr, 2026 | npm @sage-active/ui |
Malicious release: Malicious code in @kucoin-gbiz-next/tools (npm) GHSA-mq43-24p4-jg9f, MAL-2026-2587 | Malicious | Not scored | 13 Apr, 2026 | npm @kucoin-gbiz-next/tools |
Malicious release: Malicious code in @zgny/onboarding-consumer (npm) GHSA-pr9f-7wph-jc3x, MAL-2026-2597 | Malicious | Not scored | 13 Apr, 2026 | npm @zgny/onboarding-consumer |
Malicious release: Malicious code in @spreadjs/js-calc (npm) GHSA-qm3m-hmcx-f8x4, MAL-2026-2596 | Malicious | Not scored | 13 Apr, 2026 | npm @spreadjs/js-calc |
Malicious release: Malicious code in @spoonflower/ui (npm) GHSA-rj3m-9925-f57q, MAL-2026-2594 | Malicious | Not scored | 13 Apr, 2026 | npm @spoonflower/ui |
Malicious release: Malicious code in @relxui/react (npm) GHSA-wpp4-q8gj-wfv9, MAL-2026-2592 | Malicious | Not scored | 13 Apr, 2026 | npm @relxui/react |
Malicious release: Malicious code in @pes-ui/components (npm) GHSA-ww6q-42qg-c93c, MAL-2026-2591 | Malicious | Not scored | 13 Apr, 2026 | npm @pes-ui/components |
Malicious release: Malicious code in @hrb-web/nuxt (npm) GHSA-xqfw-gvgh-hp79, MAL-2026-2585 | Malicious | Not scored | 13 Apr, 2026 | npm @hrb-web/nuxt |