Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in ai3 (npm) MAL-2026-4476 | Malicious | Not scored | 26 May, 2026 | npm ai3 |
Malicious release: Malicious code in cwao-units (npm) GHSA-36rh-p4hx-qrr8, MAL-2026-4546 | Malicious | Not scored | 26 May, 2026 | npm cwao-units |
Malicious release: Malicious code in weavedb-exm-sdk-web (npm) MAL-2026-4719 | Malicious | Not scored | 26 May, 2026 | npm weavedb-exm-sdk-web |
Malicious release: Malicious code in weavedb-tools (npm) MAL-2026-4726 | Malicious | Not scored | 26 May, 2026 | npm weavedb-tools |
Malicious release: Malicious code in fpjson-lang (npm) GHSA-vhjh-rmpr-mcqm, MAL-2026-4566 | Malicious | Not scored | 26 May, 2026 | npm fpjson-lang |
Malicious release: Malicious code in wdb-sdk (npm) MAL-2026-4714 | Malicious | Not scored | 26 May, 2026 | npm wdb-sdk |
Malicious release: Malicious code in monade (npm) MAL-2026-4613 | Malicious | Not scored | 26 May, 2026 | npm monade |
Malicious release: Malicious code in wdb-cli (npm) MAL-2026-4713 | Malicious | Not scored | 26 May, 2026 | npm wdb-cli |
Malicious release: Malicious code in cwao-tools (npm) MAL-2026-4545 | Malicious | Not scored | 26 May, 2026 | npm cwao-tools |
Malicious release: Malicious code in warp-contracts-plugin-deploy-test (npm) MAL-2026-4712 | Malicious | Not scored | 26 May, 2026 | npm warp-contracts-plugin-deploy-test |
Malicious release: Malicious code in testnpmnmp (npm) MAL-2026-4691 | Malicious | Not scored | 26 May, 2026 | npm testnpmnmp |
Malicious release: Malicious code in cwao (npm) MAL-2026-4544 | Malicious | Not scored | 26 May, 2026 | npm cwao |
Malicious release: Malicious code in test-ajs (npm) MAL-2026-4689 | Malicious | Not scored | 26 May, 2026 | npm test-ajs |
Malicious release: Malicious code in zkjson (npm) MAL-2026-4739 | Malicious | Not scored | 26 May, 2026 | npm zkjson |
Malicious release: Malicious code in aonote (npm) MAL-2026-4480 | Malicious | Not scored | 26 May, 2026 | npm aonote |
Malicious release: Malicious code in weavedb-sdk (npm) MAL-2026-4723 | Malicious | Not scored | 26 May, 2026 | npm weavedb-sdk |
Malicious release: Malicious code in weavedb-base (npm) GHSA-xj9g-9ff6-g755, MAL-2026-4715 | Malicious | Not scored | 26 May, 2026 | npm weavedb-base |
Malicious release: Malicious code in weavedb-node-client (npm) GHSA-94x8-wq6v-6gwp, MAL-2026-4721 | Malicious | Not scored | 26 May, 2026 | npm weavedb-node-client |
Malicious release: Malicious code in weavedb-sdk-node (npm) MAL-2026-4725 | Malicious | Not scored | 26 May, 2026 | npm weavedb-sdk-node |
Malicious release: Malicious code in fe-utils-core (npm) GHSA-8xf7-7m4f-fgrv, MAL-2026-4561 | Malicious | Not scored | 26 May, 2026 | npm fe-utils-core |
Malicious release: Malicious code in bandkit (npm) GHSA-v69f-q3vh-9qcf, MAL-2026-4496 | Malicious | Not scored | 25 May, 2026 | npm bandkit |
Malicious release: Malicious code in xarc-webpack-cli (npm) GHSA-2xcr-5qfc-fq54, MAL-2026-4352 | Malicious | Not scored | 25 May, 2026 | npm xarc-webpack-cli |
Malicious release: Malicious code in json-to-simple-graphql-schema (npm) GHSA-2qqv-9mw5-52q2, MAL-2026-4590 | Malicious | Not scored | 25 May, 2026 | npm json-to-simple-graphql-schema |
Malicious release: Malicious code in @izumiswap/sdk (npm) GHSA-q782-j24w-vv68, MAL-2026-4396 | Malicious | Not scored | 25 May, 2026 | npm @izumiswap/sdk |
Malicious release: Malicious code in motion-tool (npm) GHSA-hw79-5457-g9c3, MAL-2026-4615 | Malicious | Not scored | 25 May, 2026 | npm motion-tool |
Malicious release: Malicious code in happy-dlscord.js (npm) GHSA-6gjr-97pp-w2cw, MAL-2026-4575 | Malicious | Not scored | 25 May, 2026 | npm happy-dlscord.js |
Malicious release: Malicious code in skills-detector (npm) GHSA-wxv4-4mmm-mmm9, MAL-2026-4670 | Malicious | Not scored | 25 May, 2026 | npm skills-detector |
Malicious release: Malicious code in @databus-service-ui/scroll-up-content (npm) GHSA-6r38-pqqw-473h, MAL-2026-4378 | Malicious | Not scored | 25 May, 2026 | npm @databus-service-ui/scroll-up-content |
Malicious release: Malicious code in @databus-service-ui/ui-event (npm) GHSA-jcmj-fj4g-6rh7, MAL-2026-4351 | Malicious | Not scored | 25 May, 2026 | npm @databus-service-ui/ui-event |
Malicious release: Malicious code in @service-suppliers/suppliers (npm) GHSA-ppcx-6vx9-76mf, MAL-2026-4438 | Malicious | Not scored | 25 May, 2026 | npm @service-suppliers/suppliers |
Malicious release: Malicious code in @service-user-notifications/set_notifications_not_removable (npm) GHSA-r7vx-hgm4-ggqf, MAL-2026-4439 | Malicious | Not scored | 25 May, 2026 | npm @service-user-notifications/set_notifications_not_removable |
Malicious release: Malicious code in @service-suppliers/set_selected_supplier (npm) GHSA-w237-rgwp-fh78, MAL-2026-4437 | Malicious | Not scored | 25 May, 2026 | npm @service-suppliers/set_selected_supplier |
Malicious release: Malicious code in @service-suppliers/select-supplier-watcher-saga (npm) GHSA-3f9q-2rjw-5grc, MAL-2026-4436 | Malicious | Not scored | 25 May, 2026 | npm @service-suppliers/select-supplier-watcher-saga |
Malicious release: Malicious code in @service-suppliers/fetch_suppliers_action_saga (npm) GHSA-2fg8-hcf8-7qjg, MAL-2026-4435 | Malicious | Not scored | 25 May, 2026 | npm @service-suppliers/fetch_suppliers_action_saga |
Malicious release: Malicious code in normalize-path-seq (npm) GHSA-74x9-35vr-vx9c, MAL-2026-4622 | Malicious | Not scored | 25 May, 2026 | npm normalize-path-seq |
Malicious release: Malicious code in api-rs-node (npm) GHSA-r648-cv89-gjg2, MAL-2026-4348 | Malicious | Not scored | 25 May, 2026 | npm api-rs-node |
Malicious release: Malicious code in verify-mycommand (npm) GHSA-cg2p-m899-xgpg, MAL-2026-4344 | Malicious | Not scored | 25 May, 2026 | npm verify-mycommand |
Malicious release: Malicious code in gehneb (npm) GHSA-q9pf-x337-xr68, MAL-2026-4570 | Malicious | Not scored | 25 May, 2026 | npm gehneb |
Malicious release: Malicious code in aes-decode-runner-pro (npm) GHSA-f4hv-x68w-wqr9, MAL-2026-4475 | Malicious | Not scored | 25 May, 2026 | npm aes-decode-runner-pro |
Malicious release: Malicious code in @polka-ui/loader (npm) GHSA-j263-hx4f-ph92, MAL-2026-4420 | Malicious | Not scored | 25 May, 2026 | npm @polka-ui/loader |
Malicious release: Malicious code in @loans/vehicles-api (npm) GHSA-fp77-68vp-78c2, MAL-2026-4404 | Malicious | Not scored | 25 May, 2026 | npm @loans/vehicles-api |
Malicious release: Malicious code in jsontoken-extend (npm) GHSA-v985-2jx7-c35g, MAL-2026-4592 | Malicious | Not scored | 25 May, 2026 | npm jsontoken-extend |
Malicious release: Malicious code in vue-compiler-sfc-plugin (npm) GHSA-v29w-qjvw-fm35, MAL-2026-4707 | Malicious | Not scored | 25 May, 2026 | npm vue-compiler-sfc-plugin |
Malicious release: Malicious code in web-dotenv (npm) GHSA-7x3f-hjp7-r53g, MAL-2026-4728 | Malicious | Not scored | 25 May, 2026 | npm web-dotenv |
Malicious release: Malicious code in wml-components (npm) MAL-2026-4730 | Malicious | Not scored | 25 May, 2026 | npm wml-components |
Malicious release: Malicious code in tempo-modules (npm) MAL-2026-4687 | Malicious | Not scored | 25 May, 2026 | npm tempo-modules |
Malicious release: Malicious code in wml-core (npm) MAL-2026-4731 | Malicious | Not scored | 25 May, 2026 | npm wml-core |
Malicious release: Malicious code in walmart-shared-modules (npm) MAL-2026-4710 | Malicious | Not scored | 25 May, 2026 | npm walmart-shared-modules |
Malicious release: Malicious code in platform-tempo (npm) MAL-2026-4641 | Malicious | Not scored | 25 May, 2026 | npm platform-tempo |
Malicious release: Malicious code in tempo-components (npm) MAL-2026-4685 | Malicious | Not scored | 25 May, 2026 | npm tempo-components |