Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in experedzss (npm) MAL-2026-2440 | Malicious | Not scored | 02 Apr, 2026 | npm experedzss |
Malicious release: Malicious code in bytefrontier-sdk (npm) GHSA-98jh-wxvx-v78v, MAL-2026-2424 | Malicious | Not scored | 02 Apr, 2026 | npm bytefrontier-sdk |
Malicious release: Malicious code in vv-ftend-api (npm) GHSA-xprf-4c78-3wc4, MAL-2026-2428 | Malicious | Not scored | 02 Apr, 2026 | npm vv-ftend-api |
Malicious release: Malicious code in bytefrontier-tracker (npm) GHSA-xhp5-mvx8-6qh4, MAL-2026-2425 | Malicious | Not scored | 02 Apr, 2026 | npm bytefrontier-tracker |
Malicious release: Malicious code in partner-tracker (npm) GHSA-49v3-3255-4m4h, MAL-2026-2426 | Malicious | Not scored | 02 Apr, 2026 | npm partner-tracker |
Malicious release: Malicious code in bytefrontier-partner (npm) GHSA-9f9x-w4j9-p76g, MAL-2026-2423 | Malicious | Not scored | 02 Apr, 2026 | npm bytefrontier-partner |
Malicious release: Malicious code in bytefrontier-api (npm) GHSA-v8qw-q287-ggh6, MAL-2026-2422 | Malicious | Not scored | 02 Apr, 2026 | npm bytefrontier-api |
Malicious release: Malicious code in partner-tracker-api (npm) GHSA-2fx9-x528-r27g, MAL-2026-2427 | Malicious | Not scored | 02 Apr, 2026 | npm partner-tracker-api |
Malicious release: Malicious code in vv-ftend-core (npm) GHSA-wv4c-3rwx-9p9x, MAL-2026-2429 | Malicious | Not scored | 02 Apr, 2026 | npm vv-ftend-core |
Malicious release: Malicious code in @mgcrae/pino-pretty-logger (npm) GHSA-vm8g-5xgx-c5jx, MAL-2026-2421 | Malicious | Not scored | 02 Apr, 2026 | npm @mgcrae/pino-pretty-logger |
Malicious release: Malicious code in express-session-js (npm) GHSA-2847-rm77-74wh, MAL-2026-2419 | Malicious | Not scored | 02 Apr, 2026 | npm express-session-js |
Malicious release: Malicious code in @_wnpm/wnpm-cli (npm) MAL-2026-2420 | Malicious | Not scored | 02 Apr, 2026 | npm @_wnpm/wnpm-cli |
Malicious release: Malicious code in mcp-server-todo (npm) GHSA-hppm-xxp9-54h7, MAL-2026-2328 | Malicious | Not scored | 01 Apr, 2026 | npm mcp-server-todo |
Malicious release: Malicious code in bs58-basic (npm) GHSA-q3vj-r65j-q4x7, MAL-2026-2322 | Malicious | Not scored | 01 Apr, 2026 | npm bs58-basic |
Malicious release: Malicious code in raydium-bs58 (npm) GHSA-qm27-pj7f-f7jh, MAL-2026-2326 | Malicious | Not scored | 01 Apr, 2026 | npm raydium-bs58 |
Malicious release: Malicious code in ethersproject-wallet (npm) GHSA-wq8j-wv4x-xhh8, MAL-2026-2323 | Malicious | Not scored | 01 Apr, 2026 | npm ethersproject-wallet |
Malicious release: Malicious code in base-x-64 (npm) GHSA-x4xx-m9j7-vf6h, MAL-2026-2320 | Malicious | Not scored | 01 Apr, 2026 | npm base-x-64 |
Malicious release: Malicious code in base-or-engine (npm) GHSA-346p-r96j-6qc2, MAL-2026-2319 | Malicious | Not scored | 01 Apr, 2026 | npm base-or-engine |
Malicious release: Malicious code in @logcore/pino-pretty-logger (npm) GHSA-5rhm-2g6h-55jq, MAL-2026-2318 | Malicious | Not scored | 01 Apr, 2026 | npm @logcore/pino-pretty-logger |
Malicious release: Malicious code in jonas-prettier-logger (npm) GHSA-h9fw-29vc-6g89, MAL-2026-2325 | Malicious | Not scored | 01 Apr, 2026 | npm jonas-prettier-logger |
Malicious release: Malicious code in base58-engine (npm) GHSA-mv42-q6hf-h4c7, MAL-2026-2321 | Malicious | Not scored | 01 Apr, 2026 | npm base58-engine |
Malicious release: Malicious code in jellyfi-pino-pretty-logger (npm) GHSA-qxgw-5fgp-28w8, MAL-2026-2324 | Malicious | Not scored | 01 Apr, 2026 | npm jellyfi-pino-pretty-logger |
Malicious release: Malicious code in @c8o/nimbus-core (npm) GHSA-6p89-h5mp-9cqp, MAL-2026-2314 | Malicious | Not scored | 31 Mar, 2026 | npm @c8o/nimbus-core |
Malicious release: Malicious code in tailwindcss-typeface-inter (npm) GHSA-3cx6-7g5g-3hhp, MAL-2026-2312 | Malicious | Not scored | 31 Mar, 2026 | npm tailwindcss-typeface-inter |
Malicious release: Malicious code in axios (npm) GHSA-fw8c-xr5c-95f9, MAL-2026-2307 | Malicious | Not scored | 31 Mar, 2026 | npm axios |
Malicious release: Malicious code in plain-crypto-js (npm) GHSA-2x9r-6wxq-hrr7, MAL-2026-2306 | Malicious | Not scored | 31 Mar, 2026 | npm plain-crypto-js |
Malicious release: Malicious code in eslint-validator (npm) GHSA-m9ph-m48c-mrq8, MAL-2026-2300 | Malicious | Not scored | 30 Mar, 2026 | npm eslint-validator |
Malicious release: Malicious code in earthengine-api (npm) MAL-2026-2297 | Malicious | Not scored | 30 Mar, 2026 | npm earthengine-api |
Malicious release: Malicious code in bos-decoration-elements (npm) MAL-2026-2296 | Malicious | Not scored | 29 Mar, 2026 | npm bos-decoration-elements |
Malicious release: Malicious code in f0-state-manager (npm) MAL-2026-2287 | Malicious | Not scored | 29 Mar, 2026 | npm f0-state-manager |
Malicious release: Malicious code in merchservicingnodeserv (npm) MAL-2026-2288 | Malicious | Not scored | 29 Mar, 2026 | npm merchservicingnodeserv |
Malicious release: Malicious code in dial-app-version (npm) MAL-2026-2285 | Malicious | Not scored | 29 Mar, 2026 | npm dial-app-version |
Malicious release: Malicious code in bizsignupnodeweb (npm) MAL-2026-2284 | Malicious | Not scored | 29 Mar, 2026 | npm bizsignupnodeweb |
Malicious release: Malicious code in sn3akysnak3-test (npm) MAL-2026-2286 | Malicious | Not scored | 29 Mar, 2026 | npm sn3akysnak3-test |
Malicious release: Malicious code in @adac-fahrzeugplattform/ui (npm) GHSA-96gm-xh35-6xfw, MAL-2026-2282 | Malicious | Not scored | 29 Mar, 2026 | npm @adac-fahrzeugplattform/ui |
Malicious release: Malicious code in payerpath-customer-lib (npm) MAL-2026-2276 | Malicious | Not scored | 28 Mar, 2026 | npm payerpath-customer-lib |
Malicious release: Malicious code in autoshipment-public-front (npm) GHSA-qrhg-p488-7f87, MAL-2026-2274 | Malicious | Not scored | 28 Mar, 2026 | npm autoshipment-public-front |
Malicious release: Malicious code in npmamzs (npm) MAL-2026-2275 | Malicious | Not scored | 28 Mar, 2026 | npm npmamzs |
Malicious release: Malicious code in current-context-urn (npm) MAL-2026-2258 | Malicious | Not scored | 27 Mar, 2026 | npm current-context-urn |
Malicious release: Malicious code in xpna-context (npm) MAL-2026-2257 | Malicious | Not scored | 27 Mar, 2026 | npm xpna-context |
Malicious release: Malicious code in shenxun162938 (npm) GHSA-c8v3-pvm5-9xx2, MAL-2026-2256 | Malicious | Not scored | 27 Mar, 2026 | npm shenxun162938 |
Malicious release: Malicious code in dgxeon-soket-buttonx (npm) GHSA-7xvw-wvqm-q57f, MAL-2026-2253 | Malicious | Not scored | 27 Mar, 2026 | npm dgxeon-soket-buttonx |
Malicious release: Malicious code in dgxeon-baileys (npm) GHSA-fjqf-7gvm-9qrq, MAL-2026-2252 | Malicious | Not scored | 27 Mar, 2026 | npm dgxeon-baileys |
Malicious release: Malicious code in chai-as-added (npm) GHSA-6r6x-95fj-pw48, MAL-2026-2249 | Malicious | Not scored | 27 Mar, 2026 | npm chai-as-added |
Malicious release: Malicious code in testtestsharp (npm) GHSA-7g34-jxp7-g7r3, MAL-2026-2251 | Malicious | Not scored | 27 Mar, 2026 | npm testtestsharp |
Malicious release: Malicious code in test1sharp (npm) GHSA-89p7-jcpx-6x86, MAL-2026-2250 | Malicious | Not scored | 27 Mar, 2026 | npm test1sharp |
Malicious release: Malicious code in @ev-tech/eva-container-api (npm) GHSA-gphq-fq72-qxwr, MAL-2026-2246 | Malicious | Not scored | 27 Mar, 2026 | npm @ev-tech/eva-container-api |
Malicious release: Malicious code in cua-primitives-server (npm) GHSA-jmx7-4g26-qp86, MAL-2026-2247 | Malicious | Not scored | 27 Mar, 2026 | npm cua-primitives-server |
Malicious release: Malicious code in shop-republik-ch (npm) GHSA-pjmv-p8w4-fjq5, MAL-2026-2248 | Malicious | Not scored | 27 Mar, 2026 | npm shop-republik-ch |
Malicious release: Malicious code in browserstack-electron-forge-include-package-plugin (npm) MAL-2026-2243 | Malicious | Not scored | 26 Mar, 2026 | npm browserstack-electron-forge-include-package-plugin |