Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in wm-plugin-wm-smart-tip-dont-embed-tooltip (npm) GHSA-463v-xhcf-mqpw, MAL-2026-2622 | Malicious | Not scored | 13 Apr, 2026 | npm wm-plugin-wm-smart-tip-dont-embed-tooltip |
Malicious release: Malicious code in @guards-lib/auth (npm) GHSA-649h-jv39-hh5v, MAL-2026-2582 | Malicious | Not scored | 13 Apr, 2026 | npm @guards-lib/auth |
Malicious release: Malicious code in @bookiply/core (npm) GHSA-8mf9-v5mc-4ch3, MAL-2026-2579 | Malicious | Not scored | 13 Apr, 2026 | npm @bookiply/core |
Malicious release: Malicious code in @amplify-js/datastore (npm) GHSA-cqpc-xhmp-qr76, MAL-2026-2574 | Malicious | Not scored | 13 Apr, 2026 | npm @amplify-js/datastore |
Malicious release: Malicious code in @hpcc/js-api (npm) GHSA-fgh2-xw72-9637, MAL-2026-2584 | Malicious | Not scored | 13 Apr, 2026 | npm @hpcc/js-api |
Malicious release: Malicious code in @bokehjs/core (npm) GHSA-j77c-vj44-wvq4, MAL-2026-2578 | Malicious | Not scored | 13 Apr, 2026 | npm @bokehjs/core |
Malicious release: Malicious code in @hmm-app/api (npm) GHSA-j8vp-wwjq-48wg, MAL-2026-2583 | Malicious | Not scored | 13 Apr, 2026 | npm @hmm-app/api |
Malicious release: Malicious code in @ascend-ops/web-client (npm) GHSA-pqfr-rjg4-pjg3, MAL-2026-2575 | Malicious | Not scored | 13 Apr, 2026 | npm @ascend-ops/web-client |
Malicious release: Malicious code in @aircall-ecosystem/integrations-msteams-frontend (npm) GHSA-rcxh-h57p-p3vc, MAL-2026-2573 | Malicious | Not scored | 13 Apr, 2026 | npm @aircall-ecosystem/integrations-msteams-frontend |
Malicious release: Malicious code in @cash-web/no-hardcoded-font-styles (npm) GHSA-vr8g-rf3p-m3gw, MAL-2026-2580 | Malicious | Not scored | 13 Apr, 2026 | npm @cash-web/no-hardcoded-font-styles |
Malicious release: Malicious code in stats-api-js-client (npm) GHSA-7vg9-wgj5-3cpj, MAL-2026-2607 | Malicious | Not scored | 13 Apr, 2026 | npm stats-api-js-client |
Malicious release: Malicious code in twilio-video.js (npm) GHSA-j373-p8fj-3gfq, MAL-2026-2610 | Malicious | Not scored | 13 Apr, 2026 | npm twilio-video.js |
Malicious release: Malicious code in trade-in-lib (npm) GHSA-m6r9-8g63-rpqp, MAL-2026-2609 | Malicious | Not scored | 13 Apr, 2026 | npm trade-in-lib |
Malicious release: Malicious code in ih-icon (npm) GHSA-mgvv-m58f-pv4w, MAL-2026-2604 | Malicious | Not scored | 13 Apr, 2026 | npm ih-icon |
Malicious release: Malicious code in ccn-common-react-library (npm) GHSA-p4qp-5cq3-7wp3, MAL-2026-2599 | Malicious | Not scored | 13 Apr, 2026 | npm ccn-common-react-library |
Malicious release: Malicious code in cms-site-api-js-client (npm) GHSA-q428-3gx7-pq9x, MAL-2026-2600 | Malicious | Not scored | 13 Apr, 2026 | npm cms-site-api-js-client |
Malicious release: Malicious code in babel-plugin-fbtee (npm) GHSA-q9p9-vqx4-g8jq, MAL-2026-2598 | Malicious | Not scored | 13 Apr, 2026 | npm babel-plugin-fbtee |
Malicious release: Malicious code in etsy-advocacy (npm) GHSA-rm5h-fvwx-q9x4, MAL-2026-2602 | Malicious | Not scored | 13 Apr, 2026 | npm etsy-advocacy |
Malicious release: Malicious code in kaltura-ngx-client (npm) GHSA-2cfm-8wwp-vpfx, MAL-2026-2605 | Malicious | Not scored | 13 Apr, 2026 | npm kaltura-ngx-client |
Malicious release: Malicious code in symphony-core (npm) GHSA-6vc2-8rcw-cxg8, MAL-2026-2608 | Malicious | Not scored | 13 Apr, 2026 | npm symphony-core |
Malicious release: Malicious code in mdb-react-sortable (npm) GHSA-99fw-xhm5-2382, MAL-2026-2606 | Malicious | Not scored | 13 Apr, 2026 | npm mdb-react-sortable |
Malicious release: Malicious code in experian-design-system-themes (npm) GHSA-qqrr-w9xm-5w7g, MAL-2026-2603 | Malicious | Not scored | 13 Apr, 2026 | npm experian-design-system-themes |
Malicious release: Malicious code in dwaiter-company-web (npm) GHSA-rv36-9mrp-x3ch, MAL-2026-2601 | Malicious | Not scored | 13 Apr, 2026 | npm dwaiter-company-web |
Malicious release: Malicious code in @b2b-portal/core (npm) GHSA-jj8x-58xf-9jwx, MAL-2026-2576 | Malicious | Not scored | 13 Apr, 2026 | npm @b2b-portal/core |
Malicious release: Malicious code in @b2b-portal/kit (npm) GHSA-rpg7-m5pq-947p, MAL-2026-2577 | Malicious | Not scored | 13 Apr, 2026 | npm @b2b-portal/kit |
Malicious release: Malicious code in pubnub-element (npm) GHSA-pccr-9vgc-6fx6, MAL-2026-2635 | Malicious | Not scored | 13 Apr, 2026 | npm pubnub-element |
Malicious release: Malicious code in babel-plugin-blocks (npm) GHSA-9h8x-6qpc-9v5g, MAL-2026-2631 | Malicious | Not scored | 13 Apr, 2026 | npm babel-plugin-blocks |
Malicious release: Malicious code in seaport-core-16 (npm) GHSA-xwxq-h8q6-2494, MAL-2026-2636 | Malicious | Not scored | 13 Apr, 2026 | npm seaport-core-16 |
Malicious release: Malicious code in markdownlint-rule-link-pattern (npm) GHSA-q3xp-j858-q9xf, MAL-2026-2633 | Malicious | Not scored | 13 Apr, 2026 | npm markdownlint-rule-link-pattern |
Malicious release: Malicious code in bitu-staking (npm) MAL-2026-2915 | Malicious | Not scored | 12 Apr, 2026 | npm bitu-staking |
Malicious release: Malicious code in pt-sc-demo-app (npm) GHSA-wxxw-8cpf-6fv5, MAL-2026-2567 | Malicious | Not scored | 12 Apr, 2026 | npm pt-sc-demo-app |
Malicious release: Malicious code in pt-sc-logger (npm) GHSA-c9cq-89w9-78h3, MAL-2026-2568 | Malicious | Not scored | 12 Apr, 2026 | npm pt-sc-logger |
Malicious release: Malicious code in upstart-offer-container (npm) GHSA-232r-w3h2-2hv5, MAL-2026-2613 | Malicious | Not scored | 12 Apr, 2026 | npm upstart-offer-container |
Malicious release: Malicious code in upstartautoretailadmin (npm) GHSA-5vc6-vrhq-w4h9, MAL-2026-2617 | Malicious | Not scored | 12 Apr, 2026 | npm upstartautoretailadmin |
Malicious release: Malicious code in upstartportal (npm) GHSA-q4fh-w299-f753, MAL-2026-2620 | Malicious | Not scored | 12 Apr, 2026 | npm upstartportal |
Malicious release: Malicious code in upstartdr (npm) GHSA-7vv7-22qp-3mj7, MAL-2026-2618 | Malicious | Not scored | 12 Apr, 2026 | npm upstartdr |
Malicious release: Malicious code in upstartadmindashboard- (npm) GHSA-m873-wm98-r6vj, MAL-2026-2615 | Malicious | Not scored | 12 Apr, 2026 | npm upstartadmindashboard- |
Malicious release: Malicious code in upstartloans (npm) GHSA-4jhq-f342-5773, MAL-2026-2619 | Malicious | Not scored | 12 Apr, 2026 | npm upstartloans |
Malicious release: Malicious code in upstart-lending-status (npm) GHSA-w3xp-4hxm-c484, MAL-2026-2611 | Malicious | Not scored | 12 Apr, 2026 | npm upstart-lending-status |
Malicious release: Malicious code in upstartapplicationstatus (npm) GHSA-9hj7-rh99-qm24, MAL-2026-2616 | Malicious | Not scored | 12 Apr, 2026 | npm upstartapplicationstatus |
Malicious release: Malicious code in upstart-loan-status (npm) GHSA-97h2-g27p-2m54, MAL-2026-2612 | Malicious | Not scored | 12 Apr, 2026 | npm upstart-loan-status |
Malicious release: Malicious code in upstart.previewcss (npm) GHSA-g8xh-53qm-mc7m, MAL-2026-2614 | Malicious | Not scored | 12 Apr, 2026 | npm upstart.previewcss |
Malicious release: Malicious code in pinstatsd (npm) GHSA-mwj4-gvm3-8rmh, MAL-2026-2654 | Malicious | Not scored | 12 Apr, 2026 | npm pinstatsd |
Malicious release: Malicious code in pinlogger (npm) GHSA-fw76-452q-hgcm, MAL-2026-2653 | Malicious | Not scored | 12 Apr, 2026 | npm pinlogger |
Malicious release: Malicious code in wm-plugin-visions-recorder (npm) GHSA-x6cr-7xwj-965h, MAL-2026-2566 | Malicious | Not scored | 12 Apr, 2026 | npm wm-plugin-visions-recorder |
Malicious release: Malicious code in gp-auth-lib (npm) GHSA-24hv-mhfh-jc6q, MAL-2026-2564 | Malicious | Not scored | 12 Apr, 2026 | npm gp-auth-lib |
Malicious release: Malicious code in portal-common-ui (npm) GHSA-jfpv-r33m-g47p, MAL-2026-2565 | Malicious | Not scored | 12 Apr, 2026 | npm portal-common-ui |
Malicious release: Malicious code in ts-schema-helpers (npm) MAL-2026-2873 | Malicious | Not scored | 12 Apr, 2026 | npm ts-schema-helpers |
Malicious release: Malicious code in unisys-uka (npm) MAL-2026-2824 | Malicious | Not scored | 11 Apr, 2026 | npm unisys-uka |
Malicious release: Malicious code in unisys-common (npm) MAL-2026-2876 | Malicious | Not scored | 11 Apr, 2026 | npm unisys-common |