Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @antv/graphin-icons (npm) GHSA-4jm3-r6hq-rwfm, MAL-2026-4025 | Malicious | Not scored | 19 May, 2026 | npm @antv/graphin-icons |
Malicious release: Malicious code in @antv/gl-matrix (npm) GHSA-4qwq-f9rm-q9gv, MAL-2026-4019 | Malicious | Not scored | 19 May, 2026 | npm @antv/gl-matrix |
Malicious release: Malicious code in @antv/vendor (npm) GHSA-598p-cp5q-m489, MAL-2026-4093 | Malicious | Not scored | 19 May, 2026 | npm @antv/vendor |
Malicious release: Malicious code in @antv/l7-maps (npm) GHSA-5c5w-3mg4-4hrp, MAL-2026-4045 | Malicious | Not scored | 19 May, 2026 | npm @antv/l7-maps |
Malicious release: Malicious code in @antv/f6-core (npm) GHSA-5cc2-fc7w-q6vq, MAL-2026-3902 | Malicious | Not scored | 19 May, 2026 | npm @antv/f6-core |
Malicious release: Malicious code in @antv/layout-wasm (npm) GHSA-5gfx-5xg7-mxjq, MAL-2026-4058 | Malicious | Not scored | 19 May, 2026 | npm @antv/layout-wasm |
Malicious release: Malicious code in @antv/x6-vue-shape (npm) GHSA-5h2f-6mhq-3643, MAL-2026-4116 | Malicious | Not scored | 19 May, 2026 | npm @antv/x6-vue-shape |
Malicious release: Malicious code in @antv/xflow-extension (npm) GHSA-5j22-5fh7-frq6, MAL-2026-4121 | Malicious | Not scored | 19 May, 2026 | npm @antv/xflow-extension |
Malicious release: Malicious code in @antv/li-analysis-assets (npm) GHSA-5jcr-x23h-mqf9, MAL-2026-4060 | Malicious | Not scored | 19 May, 2026 | npm @antv/li-analysis-assets |
Malicious release: Malicious code in slice.js (npm) GHSA-5pq6-35rq-m8mh, MAL-2026-4154 | Malicious | Not scored | 19 May, 2026 | npm slice.js |
Malicious release: Malicious code in @antv/s2-react (npm) GHSA-5x6w-grjh-3xv8, MAL-2026-4078 | Malicious | Not scored | 19 May, 2026 | npm @antv/s2-react |
Malicious release: Malicious code in @antv/d3-color (npm) GHSA-64h3-x3fh-6m3v, MAL-2026-3865 | Malicious | Not scored | 19 May, 2026 | npm @antv/d3-color |
Malicious release: Malicious code in @antv/attr (npm) GHSA-67gw-xqjm-h2mx, MAL-2026-3852 | Malicious | Not scored | 19 May, 2026 | npm @antv/attr |
Malicious release: Malicious code in jest-less-loader (npm) GHSA-68gq-2qwr-546j, MAL-2026-4140 | Malicious | Not scored | 19 May, 2026 | npm jest-less-loader |
Malicious release: Malicious code in @antv/x6-react-components (npm) GHSA-69v3-6v74-7gv6, MAL-2026-4113 | Malicious | Not scored | 19 May, 2026 | npm @antv/x6-react-components |
Malicious release: Malicious code in @antv/my-f2 (npm) GHSA-69w2-2xhm-wrqj, MAL-2026-4070 | Malicious | Not scored | 19 May, 2026 | npm @antv/my-f2 |
Malicious release: Malicious code in @antv/g (npm) GHSA-6fr3-r6r6-h4h9, MAL-2026-3908 | Malicious | Not scored | 19 May, 2026 | npm @antv/g |
Malicious release: Malicious code in @antv/graphin (npm) GHSA-6g2p-hpvj-w8f9, MAL-2026-4022 | Malicious | Not scored | 19 May, 2026 | npm @antv/graphin |
Malicious release: Malicious code in @antv/g-plugin-canvas-path-generator (npm) GHSA-6h8x-6x3x-f6mf, MAL-2026-3935 | Malicious | Not scored | 19 May, 2026 | npm @antv/g-plugin-canvas-path-generator |
Malicious release: Malicious code in xmorse (npm) GHSA-6j3g-cqx2-j325, MAL-2026-4159 | Malicious | Not scored | 19 May, 2026 | npm xmorse |
Malicious release: Malicious code in @antv/g6-plugins (npm) GHSA-6jj6-8cw2-5vh8, MAL-2026-3994 | Malicious | Not scored | 19 May, 2026 | npm @antv/g6-plugins |
Malicious release: Malicious code in @antv/g-plugin-3d (npm) GHSA-6p79-pq2m-3537, MAL-2026-3931 | Malicious | Not scored | 19 May, 2026 | npm @antv/g-plugin-3d |
Malicious release: Malicious code in @antv/algorithm (npm) GHSA-6q4c-7vh4-hw87, MAL-2026-3850 | Malicious | Not scored | 19 May, 2026 | npm @antv/algorithm |
Malicious release: Malicious code in @antv/component (npm) GHSA-6vch-5wrx-6pmp, MAL-2026-3863 | Malicious | Not scored | 19 May, 2026 | npm @antv/component |
Malicious release: Malicious code in @antv/g-plugin-gesture (npm) GHSA-6vfh-2qgh-gf48, MAL-2026-3944 | Malicious | Not scored | 19 May, 2026 | npm @antv/g-plugin-gesture |
Malicious release: Malicious code in @antv/gi-common-components (npm) GHSA-74qf-5hfj-fgxr, MAL-2026-4012 | Malicious | Not scored | 19 May, 2026 | npm @antv/gi-common-components |
Malicious release: Malicious code in @antv/li-p2 (npm) GHSA-755r-rmw6-2q7g, MAL-2026-4063 | Malicious | Not scored | 19 May, 2026 | npm @antv/li-p2 |
Malicious release: Malicious code in @antv/g-webgpu-engine (npm) GHSA-777c-ww2h-cgwx, MAL-2026-3970 | Malicious | Not scored | 19 May, 2026 | npm @antv/g-webgpu-engine |
Malicious release: Malicious code in @antv/f6-element (npm) GHSA-79gx-93w7-vjwc, MAL-2026-3903 | Malicious | Not scored | 19 May, 2026 | npm @antv/f6-element |
Malicious release: Malicious code in @lint-md/cli (npm) GHSA-7c54-j876-7f87, MAL-2026-4123 | Malicious | Not scored | 19 May, 2026 | npm @lint-md/cli |
Malicious release: Malicious code in @antv/x6-plugin-history (npm) GHSA-7g4g-rg99-8ppc, MAL-2026-4104 | Malicious | Not scored | 19 May, 2026 | npm @antv/x6-plugin-history |
Malicious release: Malicious code in @antv/g2plot (npm) GHSA-7hp2-36q7-xw66, MAL-2026-3980 | Malicious | Not scored | 19 May, 2026 | npm @antv/g2plot |
Malicious release: Malicious code in @antv/g-lite (npm) GHSA-7px4-955f-q8p5, MAL-2026-3921 | Malicious | Not scored | 19 May, 2026 | npm @antv/g-lite |
Malicious release: Malicious code in @antv/x6-react-shape (npm) GHSA-7q8r-g5r9-rpxv, MAL-2026-4114 | Malicious | Not scored | 19 May, 2026 | npm @antv/x6-react-shape |
Malicious release: Malicious code in @antv/x6-plugin-export (npm) GHSA-7r9r-fh57-jwxh, MAL-2026-4103 | Malicious | Not scored | 19 May, 2026 | npm @antv/x6-plugin-export |
Malicious release: Malicious code in @antv/f-vue (npm) GHSA-7rfp-f25p-c6r9, MAL-2026-3887 | Malicious | Not scored | 19 May, 2026 | npm @antv/f-vue |
Malicious release: Malicious code in @antv/g-canvaskit (npm) GHSA-8272-h58p-9c2q, MAL-2026-3912 | Malicious | Not scored | 19 May, 2026 | npm @antv/g-canvaskit |
Malicious release: Malicious code in @antv/expr (npm) GHSA-84cc-wx9h-mh2c, MAL-2026-3880 | Malicious | Not scored | 19 May, 2026 | npm @antv/expr |
Malicious release: Malicious code in @antv/g-shader-components (npm) GHSA-84fj-f8rm-57v5, MAL-2026-3961 | Malicious | Not scored | 19 May, 2026 | npm @antv/g-shader-components |
Malicious release: Malicious code in ast-plugin (npm) GHSA-853q-8cqf-c8c9, MAL-2026-4128 | Malicious | Not scored | 19 May, 2026 | npm ast-plugin |
Malicious release: Malicious code in timeago-react (npm) GHSA-87hq-4hrg-qwc3, MAL-2026-4155 | Malicious | Not scored | 19 May, 2026 | npm timeago-react |
Malicious release: Malicious code in @antv/f2-graphic (npm) GHSA-89qm-jfqc-9j3c, MAL-2026-3893 | Malicious | Not scored | 19 May, 2026 | npm @antv/f2-graphic |
Malicious release: Malicious code in @antv/x6-plugin-scroller (npm) GHSA-8j66-mwwj-7m2q, MAL-2026-4107 | Malicious | Not scored | 19 May, 2026 | npm @antv/x6-plugin-scroller |
Malicious release: Malicious code in @antv/l7plot-component (npm) GHSA-9425-mfgp-48f9, MAL-2026-4055 | Malicious | Not scored | 19 May, 2026 | npm @antv/l7plot-component |
Malicious release: Malicious code in @antv/g-plugin-svg-renderer (npm) GHSA-96p8-g6rq-c2mf, MAL-2026-3954 | Malicious | Not scored | 19 May, 2026 | npm @antv/g-plugin-svg-renderer |
Malicious release: Malicious code in @antv/xflow-hook (npm) GHSA-987q-7j3m-9vrr, MAL-2026-4122 | Malicious | Not scored | 19 May, 2026 | npm @antv/xflow-hook |
Malicious release: Malicious code in @antv/g6-core (npm) GHSA-9936-7vr2-2g9r, MAL-2026-3985 | Malicious | Not scored | 19 May, 2026 | npm @antv/g6-core |
Malicious release: Malicious code in @antv/f2-react (npm) GHSA-9cjg-796w-2vpp, MAL-2026-3895 | Malicious | Not scored | 19 May, 2026 | npm @antv/f2-react |
Malicious release: Malicious code in @antv/narrative-text-vis (npm) GHSA-9p93-qgj7-rv2w, MAL-2026-4074 | Malicious | Not scored | 19 May, 2026 | npm @antv/narrative-text-vis |
Malicious release: Malicious code in @antv/g-plugin-rough-svg-renderer (npm) GHSA-9qvm-qjq8-wgj3, MAL-2026-3952 | Malicious | Not scored | 19 May, 2026 | npm @antv/g-plugin-rough-svg-renderer |