Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in unisys-sdk (npm) MAL-2026-2878 | Malicious | Not scored | 11 Apr, 2026 | npm unisys-sdk |
Malicious release: Malicious code in unisys-core (npm) MAL-2026-2877 | Malicious | Not scored | 11 Apr, 2026 | npm unisys-core |
Malicious release: Malicious code in unisys-auth (npm) MAL-2026-2875 | Malicious | Not scored | 11 Apr, 2026 | npm unisys-auth |
Malicious release: Malicious code in unisys-agentic-ai-playground (npm) MAL-2026-2874 | Malicious | Not scored | 11 Apr, 2026 | npm unisys-agentic-ai-playground |
Malicious release: Malicious code in arlo-meeting-assistant-rtms (npm) MAL-2026-2869 | Malicious | Not scored | 11 Apr, 2026 | npm arlo-meeting-assistant-rtms |
Malicious release: Malicious code in arlo-meeting-assistant-frontend (npm) MAL-2026-2868 | Malicious | Not scored | 11 Apr, 2026 | npm arlo-meeting-assistant-frontend |
Malicious release: Malicious code in arlo-meeting-assistant-backend (npm) MAL-2026-2867 | Malicious | Not scored | 11 Apr, 2026 | npm arlo-meeting-assistant-backend |
Malicious release: Malicious code in @b2b-portal/uch (npm) GHSA-86jx-983h-h77x, MAL-2026-2560 | Malicious | Not scored | 11 Apr, 2026 | npm @b2b-portal/uch |
Malicious release: Malicious code in ts-form-helpers (npm) MAL-2026-2872 | Malicious | Not scored | 11 Apr, 2026 | npm ts-form-helpers |
Malicious release: Malicious code in paysafe-card-payments (npm) GHSA-9c83-p69j-8r99, MAL-2026-2551 | Malicious | Not scored | 11 Apr, 2026 | npm paysafe-card-payments |
Malicious release: Malicious code in paysafe-apple-pay (npm) GHSA-8h4g-8hgw-x4gw, MAL-2026-2550 | Malicious | Not scored | 11 Apr, 2026 | npm paysafe-apple-pay |
Malicious release: Malicious code in paysafe-google-pay (npm) GHSA-v6gg-22rj-hjmc, MAL-2026-2552 | Malicious | Not scored | 11 Apr, 2026 | npm paysafe-google-pay |
Malicious release: Malicious code in paysafe-venmo (npm) GHSA-5rh7-2mgf-g569, MAL-2026-2554 | Malicious | Not scored | 11 Apr, 2026 | npm paysafe-venmo |
Malicious release: Malicious code in paysafe-payments-sdk-common (npm) GHSA-x8ch-r2x5-mwmh, MAL-2026-2553 | Malicious | Not scored | 11 Apr, 2026 | npm paysafe-payments-sdk-common |
Malicious release: Malicious code in @sap-px/pxapi (npm) GHSA-h45p-wmcx-qr4h, MAL-2026-2545 | Malicious | Not scored | 11 Apr, 2026 | npm @sap-px/pxapi |
Malicious release: Malicious code in @b2b-portal/form (npm) GHSA-7rrw-hm44-329g, MAL-2026-2537 | Malicious | Not scored | 10 Apr, 2026 | npm @b2b-portal/form |
Malicious release: Malicious code in @lamoda/seller-ui-kit (npm) GHSA-hcfw-75mq-x3wr, MAL-2026-2588 | Malicious | Not scored | 10 Apr, 2026 | npm @lamoda/seller-ui-kit |
Malicious release: Malicious code in @genoma-ui/components (npm) GHSA-rxx8-qh66-9vfr, MAL-2026-2823 | Malicious | Not scored | 10 Apr, 2026 | npm @genoma-ui/components |
Malicious release: Malicious code in sjs-biginteger (npm) GHSA-38ww-f26r-f8w7, MAL-2026-2527 | Malicious | Not scored | 09 Apr, 2026 | npm sjs-biginteger |
Malicious release: Malicious code in sjs-lint-build1 (npm) GHSA-g48w-hprp-f478, MAL-2026-2528 | Malicious | Not scored | 09 Apr, 2026 | npm sjs-lint-build1 |
Malicious release: Malicious code in @signals-notebook/utils (npm) MAL-2026-2520 | Malicious | Not scored | 09 Apr, 2026 | npm @signals-notebook/utils |
Malicious release: Malicious code in @tableau__catalog-messages/database_lower (npm) GHSA-wmfr-2pvv-wmf3, MAL-2026-2866 | Malicious | Not scored | 09 Apr, 2026 | npm @tableau__catalog-messages/database_lower |
Malicious release: Malicious code in @telekom-wfa/auth-core (npm) GHSA-gg3w-7mmm-rv8g, MAL-2026-2523 | Malicious | Not scored | 09 Apr, 2026 | npm @telekom-wfa/auth-core |
Malicious release: Malicious code in viewer-assets-generator (npm) GHSA-w3wf-wfpv-gh73, MAL-2026-2518 | Malicious | Not scored | 09 Apr, 2026 | npm viewer-assets-generator |
Malicious release: Malicious code in black-moon-js (npm) MAL-2026-2870 | Malicious | Not scored | 08 Apr, 2026 | npm black-moon-js |
Malicious release: Malicious code in gprofiler (npm) GHSA-rcp3-qprr-jrh3, MAL-2026-2513 | Malicious | Not scored | 08 Apr, 2026 | npm gprofiler |
Malicious release: Malicious code in @fairwords/encryption (npm) GHSA-6rgf-v8fm-jf4g, MAL-2026-2506 | Malicious | Not scored | 08 Apr, 2026 | npm @fairwords/encryption |
Malicious release: Malicious code in @fairwords/loopback-connector-es (npm) MAL-2026-2507 | Malicious | Not scored | 08 Apr, 2026 | npm @fairwords/loopback-connector-es |
Malicious release: Malicious code in @fairwords/websocket (npm) GHSA-wr82-83f6-47v8, MAL-2026-2508 | Malicious | Not scored | 08 Apr, 2026 | npm @fairwords/websocket |
Malicious release: Malicious code in @sie-ppr-web-checkout/app (npm) GHSA-qvjv-fpr5-2fmm, MAL-2026-2865 | Malicious | Not scored | 07 Apr, 2026 | npm @sie-ppr-web-checkout/app |
Malicious release: Malicious code in @velora-dex/sdk (npm) MAL-2026-2510 | Malicious | Not scored | 07 Apr, 2026 | npm @velora-dex/sdk |
Malicious release: Malicious code in strapi-plugin-cache (npm) GHSA-389c-9hmg-qfx5, MAL-2026-2504 | Malicious | Not scored | 07 Apr, 2026 | npm strapi-plugin-cache |
Malicious release: Malicious code in @aspect-security/argon2 (npm) GHSA-4fc4-v9cp-846x, MAL-2026-2505 | Malicious | Not scored | 07 Apr, 2026 | npm @aspect-security/argon2 |
Malicious release: Malicious code in argon2-napi (npm) MAL-2026-2511 | Malicious | Not scored | 07 Apr, 2026 | npm argon2-napi |
Malicious release: Malicious code in @langgraphjs/toolkit (npm) GHSA-pq32-2vxj-cr62, MAL-2026-2509 | Malicious | Not scored | 07 Apr, 2026 | npm @langgraphjs/toolkit |
Malicious release: Malicious code in devkitx (npm) GHSA-x77g-g3p5-frhh, MAL-2026-2871 | Malicious | Not scored | 07 Apr, 2026 | npm devkitx |
Malicious release: Malicious code in frontend-backoffice (npm) MAL-2026-2525 | Malicious | Not scored | 06 Apr, 2026 | npm frontend-backoffice |
Malicious release: Malicious code in use-form-builder-plugin (npm) GHSA-pj48-5mp2-8r94, MAL-2026-2529 | Malicious | Not scored | 06 Apr, 2026 | npm use-form-builder-plugin |
Malicious release: Malicious code in a2a-chat-canvas (npm) GHSA-pf4w-8h65-5h66, MAL-2026-2524 | Malicious | Not scored | 06 Apr, 2026 | npm a2a-chat-canvas |
Malicious release: Malicious code in request-js-validator (npm) GHSA-wrcq-4545-xm9w, MAL-2026-2526 | Malicious | Not scored | 06 Apr, 2026 | npm request-js-validator |
Malicious release: Malicious code in nerite-security-audit (npm) MAL-2026-2499 | Malicious | Not scored | 06 Apr, 2026 | npm nerite-security-audit |
Malicious release: Malicious code in totally-safe-util (npm) MAL-2026-2500 | Malicious | Not scored | 06 Apr, 2026 | npm totally-safe-util |
Malicious release: Malicious code in df-sandbox-test (npm) GHSA-89fq-wqxj-rcpg, MAL-2026-2498 | Malicious | Not scored | 06 Apr, 2026 | npm df-sandbox-test |
Malicious release: Malicious code in commerce-utils (npm) MAL-2026-2497 | Malicious | Not scored | 06 Apr, 2026 | npm commerce-utils |
Malicious release: Malicious code in chess-sec-ssrf1 (npm) MAL-2026-2496 | Malicious | Not scored | 06 Apr, 2026 | npm chess-sec-ssrf1 |
Malicious release: Malicious code in cloudera (npm) MAL-2026-2495 | Malicious | Not scored | 05 Apr, 2026 | npm cloudera |
Malicious release: Malicious code in cloudera-poc (npm) MAL-2026-2493 | Malicious | Not scored | 05 Apr, 2026 | npm cloudera-poc |
Malicious release: Malicious code in admin0911 (npm) GHSA-hr5g-wqxg-m42m, MAL-2026-2492 | Malicious | Not scored | 05 Apr, 2026 | npm admin0911 |
Malicious release: Malicious code in @not-nemo/crypto-tracker (npm) GHSA-hv5v-f7p3-36rp, MAL-2026-2491 | Malicious | Not scored | 05 Apr, 2026 | npm @not-nemo/crypto-tracker |
Malicious release: Malicious code in @needl-ai/common (npm) MAL-2026-2716 | Malicious | Not scored | 05 Apr, 2026 | npm @needl-ai/common |