Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @rexxtheproject/elaina-libsignal (npm) GHSA-3qf5-vfww-7p7g, MAL-2026-2164 | Malicious | Not scored | 25 Mar, 2026 | npm @rexxtheproject/elaina-libsignal |
Malicious release: Malicious code in @rexxtheproject/elaina-baileys (npm) GHSA-pjxj-7mxh-9348, MAL-2026-2163 | Malicious | Not scored | 25 Mar, 2026 | npm @rexxtheproject/elaina-baileys |
Malicious release: Malicious code in chai-as-chain (npm) GHSA-8cpf-9rj8-q68m, MAL-2026-2160 | Malicious | Not scored | 25 Mar, 2026 | npm chai-as-chain |
Malicious release: Malicious code in path-external (npm) GHSA-3j5q-xvjq-rqxq, MAL-2026-2161 | Malicious | Not scored | 25 Mar, 2026 | npm path-external |
Malicious release: Malicious code in @eric-orderbuddyinfo/react-noval (npm) GHSA-82fx-cjgq-fc8v, MAL-2026-2159 | Malicious | Not scored | 25 Mar, 2026 | npm @eric-orderbuddyinfo/react-noval |
Malicious release: Malicious code in svg-sizer-responsive (npm) GHSA-7qgj-3cfq-g4g4, MAL-2026-2162 | Malicious | Not scored | 25 Mar, 2026 | npm svg-sizer-responsive |
Malicious release: Malicious code in chai-as-emitted (npm) GHSA-jffg-8cwf-786h, MAL-2026-2154 | Malicious | Not scored | 25 Mar, 2026 | npm chai-as-emitted |
Malicious release: Malicious code in pino-pretty-log (npm) GHSA-p885-4m86-h35r, MAL-2026-2155 | Malicious | Not scored | 25 Mar, 2026 | npm pino-pretty-log |
Malicious release: Malicious code in tailwind-animationbasis (npm) GHSA-x2c8-m9xp-3qmv, MAL-2026-2156 | Malicious | Not scored | 25 Mar, 2026 | npm tailwind-animationbasis |
Malicious release: Malicious code in transitive_lib (npm) GHSA-76ph-2x99-486x, MAL-2026-2157 | Malicious | Not scored | 25 Mar, 2026 | npm transitive_lib |
Malicious release: Malicious code in @xvortexsockets/baileys (npm) GHSA-p5gg-75q6-vp64, MAL-2026-2153 | Malicious | Not scored | 25 Mar, 2026 | npm @xvortexsockets/baileys |
Malicious release: Malicious code in xrpl-hooks-ide (npm) MAL-2026-2398 | Malicious | Not scored | 24 Mar, 2026 | npm xrpl-hooks-ide |
Malicious release: Malicious code in wraith-module (npm) MAL-2026-2397 | Malicious | Not scored | 24 Mar, 2026 | npm wraith-module |
Malicious release: Malicious code in voodoo-internal-api (npm) MAL-2026-2396 | Malicious | Not scored | 24 Mar, 2026 | npm voodoo-internal-api |
Malicious release: Malicious code in uuidvalidatorarabis (npm) MAL-2026-2395 | Malicious | Not scored | 24 Mar, 2026 | npm uuidvalidatorarabis |
Malicious release: Malicious code in typescript-mock-data (npm) MAL-2026-2394 | Malicious | Not scored | 24 Mar, 2026 | npm typescript-mock-data |
Malicious release: Malicious code in this-is-my-test-package (npm) MAL-2026-2393 | Malicious | Not scored | 24 Mar, 2026 | npm this-is-my-test-package |
Malicious release: Malicious code in stormbreaker-shade (npm) MAL-2026-2392 | Malicious | Not scored | 24 Mar, 2026 | npm stormbreaker-shade |
Malicious release: Malicious code in ssr-catalogue-sfcc (npm) MAL-2026-2391 | Malicious | Not scored | 24 Mar, 2026 | npm ssr-catalogue-sfcc |
Malicious release: Malicious code in ssh-common (npm) MAL-2026-2390 | Malicious | Not scored | 24 Mar, 2026 | npm ssh-common |
Malicious release: Malicious code in spectral-module (npm) MAL-2026-2389 | Malicious | Not scored | 24 Mar, 2026 | npm spectral-module |
Malicious release: Malicious code in spectral-engine (npm) MAL-2026-2388 | Malicious | Not scored | 24 Mar, 2026 | npm spectral-engine |
Malicious release: Malicious code in securefiles-common (npm) MAL-2026-2387 | Malicious | Not scored | 24 Mar, 2026 | npm securefiles-common |
Malicious release: Malicious code in react-native-forter (npm) MAL-2026-2386 | Malicious | Not scored | 24 Mar, 2026 | npm react-native-forter |
Malicious release: Malicious code in product-status (npm) MAL-2026-2385 | Malicious | Not scored | 24 Mar, 2026 | npm product-status |
Malicious release: Malicious code in piyush_test_vadapav (npm) MAL-2026-2384 | Malicious | Not scored | 24 Mar, 2026 | npm piyush_test_vadapav |
Malicious release: Malicious code in phantom-module (npm) MAL-2026-2383 | Malicious | Not scored | 24 Mar, 2026 | npm phantom-module |
Malicious release: Malicious code in osc-datagrid-validator (npm) MAL-2026-2382 | Malicious | Not scored | 24 Mar, 2026 | npm osc-datagrid-validator |
Malicious release: Malicious code in onb-enrichment (npm) MAL-2026-2381 | Malicious | Not scored | 24 Mar, 2026 | npm onb-enrichment |
Malicious release: Malicious code in nodecognivault (npm) MAL-2026-2380 | Malicious | Not scored | 24 Mar, 2026 | npm nodecognivault |
Malicious release: Malicious code in node-neurograde (npm) MAL-2026-2379 | Malicious | Not scored | 24 Mar, 2026 | npm node-neurograde |
Malicious release: Malicious code in node-multer (npm) MAL-2026-2378 | Malicious | Not scored | 24 Mar, 2026 | npm node-multer |
Malicious release: Malicious code in no-function-declare-after-return (npm) MAL-2026-2377 | Malicious | Not scored | 24 Mar, 2026 | npm no-function-declare-after-return |
Malicious release: Malicious code in nf-promise-state-machine (npm) MAL-2026-2376 | Malicious | Not scored | 24 Mar, 2026 | npm nf-promise-state-machine |
Malicious release: Malicious code in nf-console (npm) MAL-2026-2375 | Malicious | Not scored | 24 Mar, 2026 | npm nf-console |
Malicious release: Malicious code in my-not-little-durgham (npm) MAL-2026-2374 | Malicious | Not scored | 24 Mar, 2026 | npm my-not-little-durgham |
Malicious release: Malicious code in my-little-durgham (npm) MAL-2026-2373 | Malicious | Not scored | 24 Mar, 2026 | npm my-little-durgham |
Malicious release: Malicious code in mollie-api-adapter-poc (npm) MAL-2026-2372 | Malicious | Not scored | 24 Mar, 2026 | npm mollie-api-adapter-poc |
Malicious release: Malicious code in merchant-rps (npm) MAL-2026-2371 | Malicious | Not scored | 24 Mar, 2026 | npm merchant-rps |
Malicious release: Malicious code in mcc-data (npm) MAL-2026-2370 | Malicious | Not scored | 24 Mar, 2026 | npm mcc-data |
Malicious release: Malicious code in loadshh (npm) MAL-2026-2369 | Malicious | Not scored | 24 Mar, 2026 | npm loadshh |
Malicious release: Malicious code in json-mapping-token (npm) MAL-2026-2368 | Malicious | Not scored | 24 Mar, 2026 | npm json-mapping-token |
Malicious release: Malicious code in json-mapping-fetch (npm) MAL-2026-2367 | Malicious | Not scored | 24 Mar, 2026 | npm json-mapping-fetch |
Malicious release: Malicious code in ghost-module (npm) MAL-2026-2366 | Malicious | Not scored | 24 Mar, 2026 | npm ghost-module |
Malicious release: Malicious code in env-node-cli (npm) MAL-2026-2364 | Malicious | Not scored | 24 Mar, 2026 | npm env-node-cli |
Malicious release: Malicious code in env-nodejs (npm) MAL-2026-2365 | Malicious | Not scored | 24 Mar, 2026 | npm env-nodejs |
Malicious release: Malicious code in env-extend (npm) MAL-2026-2363 | Malicious | Not scored | 24 Mar, 2026 | npm env-extend |
Malicious release: Malicious code in env-express-cli (npm) MAL-2026-2362 | Malicious | Not scored | 24 Mar, 2026 | npm env-express-cli |
Malicious release: Malicious code in env-expanded (npm) MAL-2026-2360 | Malicious | Not scored | 24 Mar, 2026 | npm env-expanded |
Malicious release: Malicious code in env-express (npm) MAL-2026-2361 | Malicious | Not scored | 24 Mar, 2026 | npm env-express |