Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in spr-i18n-labels (npm) GHSA-6j5m-xf2c-cx8x, MAL-2026-2238 | Malicious | Not scored | 26 Mar, 2026 | npm spr-i18n-labels |
Malicious release: Malicious code in jsonify-builder (npm) GHSA-2qfm-86gm-fpjc, MAL-2026-2237 | Malicious | Not scored | 26 Mar, 2026 | npm jsonify-builder |
Malicious release: Malicious code in onboarding-server (npm) MAL-2026-2236 | Malicious | Not scored | 26 Mar, 2026 | npm onboarding-server |
Malicious release: Malicious code in srcsrctest (npm) MAL-2026-2235 | Malicious | Not scored | 26 Mar, 2026 | npm srcsrctest |
Malicious release: Malicious code in security-install-analytics (npm) MAL-2026-2234 | Malicious | Not scored | 26 Mar, 2026 | npm security-install-analytics |
Malicious release: Malicious code in @zecho/libsignal (npm) GHSA-53rc-g3gw-946r, MAL-2026-2229 | Malicious | Not scored | 26 Mar, 2026 | npm @zecho/libsignal |
Malicious release: Malicious code in @zecho/baileys-mod (npm) GHSA-887f-wrq6-j685, MAL-2026-2228 | Malicious | Not scored | 26 Mar, 2026 | npm @zecho/baileys-mod |
Malicious release: Malicious code in @validator-lut-sdk/v3 (npm) GHSA-5g7h-cvvx-x96c, MAL-2026-2221 | Malicious | Not scored | 26 Mar, 2026 | npm @validator-lut-sdk/v3 |
Malicious release: Malicious code in @solmasterv3/solana-metadata-sdk (npm) GHSA-4wgw-h2cc-rpv6, MAL-2026-2219 | Malicious | Not scored | 26 Mar, 2026 | npm @solmasterv3/solana-metadata-sdk |
Malicious release: Malicious code in validator-lut-sdk (npm) GHSA-6m48-c744-9q65, MAL-2026-2227 | Malicious | Not scored | 26 Mar, 2026 | npm validator-lut-sdk |
Malicious release: Malicious code in @solana-ipfs/sdk (npm) GHSA-8f57-hh49-gmqf, MAL-2026-2218 | Malicious | Not scored | 26 Mar, 2026 | npm @solana-ipfs/sdk |
Malicious release: Malicious code in neanderthal-validator (npm) GHSA-f8qc-h6gw-x2vm, MAL-2026-2225 | Malicious | Not scored | 26 Mar, 2026 | npm neanderthal-validator |
Malicious release: Malicious code in jito-validator-sdk (npm) GHSA-r6f4-p397-5xrj, MAL-2026-2224 | Malicious | Not scored | 26 Mar, 2026 | npm jito-validator-sdk |
Malicious release: Malicious code in @pumpfun-ipfs/sdk (npm) GHSA-wwjg-c6fp-6648, MAL-2026-2216 | Malicious | Not scored | 26 Mar, 2026 | npm @pumpfun-ipfs/sdk |
Malicious release: Malicious code in node-coremesh (npm) GHSA-c5x7-f6qj-gc77, MAL-2026-2226 | Malicious | Not scored | 26 Mar, 2026 | npm node-coremesh |
Malicious release: Malicious code in chain-coremesh (npm) GHSA-mgm3-4q53-38p5, MAL-2026-2222 | Malicious | Not scored | 26 Mar, 2026 | npm chain-coremesh |
Malicious release: Malicious code in @opengov/form-renderer (npm) GHSA-j3x7-94xp-wf43, MAL-2026-2211 | Malicious | Not scored | 26 Mar, 2026 | npm @opengov/form-renderer |
Malicious release: Malicious code in @emilgroup/commission-sdk (npm) MAL-2026-2202 | Malicious | Not scored | 26 Mar, 2026 | npm @emilgroup/commission-sdk |
Malicious release: Malicious code in @emilgroup/discount-sdk-node (npm) MAL-2026-2203 | Malicious | Not scored | 26 Mar, 2026 | npm @emilgroup/discount-sdk-node |
Malicious release: Malicious code in @emilgroup/numbergenerator-sdk-node (npm) MAL-2026-2204 | Malicious | Not scored | 26 Mar, 2026 | npm @emilgroup/numbergenerator-sdk-node |
Malicious release: Malicious code in @emilgroup/partner-sdk (npm) MAL-2026-2205 | Malicious | Not scored | 26 Mar, 2026 | npm @emilgroup/partner-sdk |
Malicious release: Malicious code in @emilgroup/process-manager-sdk (npm) MAL-2026-2206 | Malicious | Not scored | 26 Mar, 2026 | npm @emilgroup/process-manager-sdk |
Malicious release: Malicious code in @emilgroup/process-manager-sdk-node (npm) MAL-2026-2207 | Malicious | Not scored | 26 Mar, 2026 | npm @emilgroup/process-manager-sdk-node |
Malicious release: Malicious code in @emilgroup/setting-sdk (npm) MAL-2026-2208 | Malicious | Not scored | 26 Mar, 2026 | npm @emilgroup/setting-sdk |
Malicious release: Malicious code in @emilgroup/translation-sdk-node (npm) MAL-2026-2209 | Malicious | Not scored | 26 Mar, 2026 | npm @emilgroup/translation-sdk-node |
Malicious release: Malicious code in @opengov/form-builder (npm) MAL-2026-2210 | Malicious | Not scored | 26 Mar, 2026 | npm @opengov/form-builder |
Malicious release: Malicious code in @opengov/qa-record-types-api (npm) MAL-2026-2212 | Malicious | Not scored | 26 Mar, 2026 | npm @opengov/qa-record-types-api |
Malicious release: Malicious code in @virtahealth/substrate-root (npm) MAL-2026-2213 | Malicious | Not scored | 26 Mar, 2026 | npm @virtahealth/substrate-root |
Malicious release: Malicious code in react-autolink-text (npm) MAL-2026-2214 | Malicious | Not scored | 26 Mar, 2026 | npm react-autolink-text |
Malicious release: Malicious code in react-leaflet-marker-layer (npm) MAL-2026-2215 | Malicious | Not scored | 26 Mar, 2026 | npm react-leaflet-marker-layer |
Malicious release: Malicious code in @universeorg/dotenv (npm) GHSA-vvwp-x2vx-wxpf, MAL-2026-2220 | Malicious | Not scored | 26 Mar, 2026 | npm @universeorg/dotenv |
Malicious release: Malicious code in @rexorg/config (npm) GHSA-xpmv-42gw-w7wc, MAL-2026-2217 | Malicious | Not scored | 26 Mar, 2026 | npm @rexorg/config |
Malicious release: Malicious code in json-lucide (npm) GHSA-7x8p-2g3v-pwqp, MAL-2026-2200 | Malicious | Not scored | 25 Mar, 2026 | npm json-lucide |
Malicious release: Malicious code in omicnavigatorwebapp (npm) GHSA-7r3j-rgcw-3jgq, MAL-2026-2199 | Malicious | Not scored | 25 Mar, 2026 | npm omicnavigatorwebapp |
Malicious release: Malicious code in omaronsec (npm) GHSA-9wmg-m3mr-xx93, MAL-2026-2198 | Malicious | Not scored | 25 Mar, 2026 | npm omaronsec |
Malicious release: Malicious code in tailwind-compile (npm) GHSA-5w5v-cvxh-55vq, MAL-2026-2196 | Malicious | Not scored | 25 Mar, 2026 | npm tailwind-compile |
Malicious release: Malicious code in @sixcore/baileys (npm) GHSA-347h-frw7-j9f5, MAL-2026-2193 | Malicious | Not scored | 25 Mar, 2026 | npm @sixcore/baileys |
Malicious release: Malicious code in super-alias (npm) GHSA-5w92-jfv8-ppvx, MAL-2026-2195 | Malicious | Not scored | 25 Mar, 2026 | npm super-alias |
Malicious release: Malicious code in ffsixx (npm) GHSA-r8j3-m86x-q66x, MAL-2026-2194 | Malicious | Not scored | 25 Mar, 2026 | npm ffsixx |
Malicious release: Malicious code in changelog-utils-wrapper (npm) GHSA-6jcw-rcqg-wmmf, MAL-2026-2192 | Malicious | Not scored | 25 Mar, 2026 | npm changelog-utils-wrapper |
Malicious release: Malicious code in changelog-utils-logger (npm) GHSA-7g9x-834j-4788, MAL-2026-2191 | Malicious | Not scored | 25 Mar, 2026 | npm changelog-utils-logger |
Malicious release: Malicious code in ts-bign (npm) GHSA-r54j-4cj8-jf2v, MAL-2026-2190 | Malicious | Not scored | 25 Mar, 2026 | npm ts-bign |
Malicious release: Malicious code in levex-refa (npm) GHSA-w977-mj56-jpc7, MAL-2026-2188 | Malicious | Not scored | 25 Mar, 2026 | npm levex-refa |
Malicious release: Malicious code in simple-util-kit (npm) GHSA-rjc8-xw63-3j4j, MAL-2026-2189 | Malicious | Not scored | 25 Mar, 2026 | npm simple-util-kit |
Malicious release: Malicious code in @shennmine/libsignal-node (npm) GHSA-6w26-75vp-gf97, MAL-2026-2167 | Malicious | Not scored | 25 Mar, 2026 | npm @shennmine/libsignal-node |
Malicious release: Malicious code in @shennmine/baileys (npm) GHSA-p4gv-m838-2xq9, MAL-2026-2166 | Malicious | Not scored | 25 Mar, 2026 | npm @shennmine/baileys |
Malicious release: Malicious code in allergan (npm) GHSA-pjwm-q9hh-23wj, MAL-2026-2197 | Malicious | Not scored | 25 Mar, 2026 | npm allergan |
Malicious release: Malicious code in console-loggers (npm) GHSA-ppr8-pvc2-8f99, MAL-2026-2169 | Malicious | Not scored | 25 Mar, 2026 | npm console-loggers |
Malicious release: Malicious code in chai-patch (npm) GHSA-h2h6-q29m-3mm3, MAL-2026-2168 | Malicious | Not scored | 25 Mar, 2026 | npm chai-patch |
Malicious release: Malicious code in @rexxtheproject/keyed-db (npm) GHSA-38c4-cmg5-vpvc, MAL-2026-2165 | Malicious | Not scored | 25 Mar, 2026 | npm @rexxtheproject/keyed-db |