Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in clob-utils-sdks (npm) GHSA-vrqq-pxvj-f2mg, MAL-2026-1943 | Malicious | Not scored | 20 Mar, 2026 | npm clob-utils-sdks |
Malicious release: Malicious code in wildhunter (npm) GHSA-mqvj-42pf-qv58, MAL-2026-1972 | Malicious | Not scored | 20 Mar, 2026 | npm wildhunter |
Malicious release: Malicious code in supportgameapp (npm) GHSA-87mp-vrm9-h8r5, MAL-2026-1970 | Malicious | Not scored | 20 Mar, 2026 | npm supportgameapp |
Malicious release: Malicious code in restaking-apy-module (npm) GHSA-4gc2-gg24-6qf6, MAL-2026-1966 | Malicious | Not scored | 20 Mar, 2026 | npm restaking-apy-module |
Malicious release: Malicious code in json-parse-genie (npm) GHSA-mwq7-2fm8-vc4q, MAL-2026-1952 | Malicious | Not scored | 20 Mar, 2026 | npm json-parse-genie |
Malicious release: Malicious code in interface-builder-kit (npm) GHSA-82f5-93r9-hhwq, MAL-2026-1951 | Malicious | Not scored | 20 Mar, 2026 | npm interface-builder-kit |
Malicious release: Malicious code in jsonify-bundler (npm) GHSA-wv5m-jqq3-c22x, MAL-2026-1935 | Malicious | Not scored | 20 Mar, 2026 | npm jsonify-bundler |
Malicious release: Malicious code in lint-builder (npm) GHSA-5p7c-2c97-fjpm, MAL-2026-1936 | Malicious | Not scored | 20 Mar, 2026 | npm lint-builder |
Malicious release: Malicious code in big-nunber (npm) GHSA-jq28-7779-5hp9, MAL-2026-1934 | Malicious | Not scored | 20 Mar, 2026 | npm big-nunber |
Malicious release: Malicious code in react-native-country-select (npm) GHSA-vf6p-p33f-3cjv, MAL-2026-1931 | Malicious | Not scored | 19 Mar, 2026 | npm react-native-country-select |
Malicious release: Malicious code in react-native-international-phone-number (npm) GHSA-69cx-hr8r-mc9j, MAL-2026-1932 | Malicious | Not scored | 19 Mar, 2026 | npm react-native-international-phone-number |
Malicious release: Malicious code in @iflow-mcp/watercrawl-watercrawl-mcp (npm) GHSA-rg84-r52h-2rgw, MAL-2026-1930 | Malicious | Not scored | 19 Mar, 2026 | npm @iflow-mcp/watercrawl-watercrawl-mcp |
Malicious release: Malicious code in @aifabrix/miso-client (npm) GHSA-5w47-93jc-5w3g, MAL-2026-1929 | Malicious | Not scored | 19 Mar, 2026 | npm @aifabrix/miso-client |
Malicious release: Malicious code in changelog-logger-wrap (npm) GHSA-59ff-98r4-m9mp, MAL-2026-1928 | Malicious | Not scored | 19 Mar, 2026 | npm changelog-logger-wrap |
Malicious release: Malicious code in changelog-logger-utils (npm) GHSA-7fr9-gw6v-q3mw, MAL-2026-1927 | Malicious | Not scored | 19 Mar, 2026 | npm changelog-logger-utils |
Malicious release: Malicious code in tokenshower (npm) GHSA-jcwx-28x8-jf6f, MAL-2026-1926 | Malicious | Not scored | 19 Mar, 2026 | npm tokenshower |
Malicious release: Malicious code in jsonify-parser (npm) GHSA-hqf3-9jfp-qgh9, MAL-2026-1925 | Malicious | Not scored | 19 Mar, 2026 | npm jsonify-parser |
Malicious release: Malicious code in nflx-release (npm) MAL-2026-1580 | Malicious | Not scored | 19 Mar, 2026 | npm nflx-release |
Malicious release: Malicious code in wn-idv-persona-client (npm) MAL-2026-1584 | Malicious | Not scored | 19 Mar, 2026 | npm wn-idv-persona-client |
Malicious release: Malicious code in whatnot-web (npm) MAL-2026-1583 | Malicious | Not scored | 19 Mar, 2026 | npm whatnot-web |
Malicious release: Malicious code in whatnot-events (npm) MAL-2026-1581 | Malicious | Not scored | 19 Mar, 2026 | npm whatnot-events |
Malicious release: Malicious code in whatnot-manifests (npm) MAL-2026-1582 | Malicious | Not scored | 19 Mar, 2026 | npm whatnot-manifests |
Malicious release: Malicious code in browser-gaming-client (npm) MAL-2026-1578 | Malicious | Not scored | 19 Mar, 2026 | npm browser-gaming-client |
Malicious release: Malicious code in nf-cl-ls (npm) MAL-2026-1579 | Malicious | Not scored | 19 Mar, 2026 | npm nf-cl-ls |
Malicious release: Malicious code in chai-as-constrained (npm) GHSA-mwp5-h2j4-x4f3, MAL-2026-1576 | Malicious | Not scored | 18 Mar, 2026 | npm chai-as-constrained |
Malicious release: Malicious code in zip.js-2.8.2 (npm) MAL-2026-1881 | Malicious | Not scored | 18 Mar, 2026 | npm zip.js-2.8.2 |
Malicious release: Malicious code in zero-develop-component-library (npm) MAL-2026-1880 | Malicious | Not scored | 18 Mar, 2026 | npm zero-develop-component-library |
Malicious release: Malicious code in yahoo-commerce (npm) MAL-2026-1879 | Malicious | Not scored | 18 Mar, 2026 | npm yahoo-commerce |
Malicious release: Malicious code in wpt-client (npm) MAL-2026-1878 | Malicious | Not scored | 18 Mar, 2026 | npm wpt-client |
Malicious release: Malicious code in wiz-redirects (npm) MAL-2026-1877 | Malicious | Not scored | 18 Mar, 2026 | npm wiz-redirects |
Malicious release: Malicious code in wiz-production (npm) MAL-2026-1876 | Malicious | Not scored | 18 Mar, 2026 | npm wiz-production |
Malicious release: Malicious code in wiz-prod (npm) MAL-2026-1875 | Malicious | Not scored | 18 Mar, 2026 | npm wiz-prod |
Malicious release: Malicious code in wiz-dev (npm) MAL-2026-1874 | Malicious | Not scored | 18 Mar, 2026 | npm wiz-dev |
Malicious release: Malicious code in vvvv4234 (npm) MAL-2026-1873 | Malicious | Not scored | 18 Mar, 2026 | npm vvvv4234 |
Malicious release: Malicious code in user_migration (npm) MAL-2026-1872 | Malicious | Not scored | 18 Mar, 2026 | npm user_migration |
Malicious release: Malicious code in urti (npm) MAL-2026-1871 | Malicious | Not scored | 18 Mar, 2026 | npm urti |
Malicious release: Malicious code in ui-core_mal (npm) MAL-2026-1870 | Malicious | Not scored | 18 Mar, 2026 | npm ui-core_mal |
Malicious release: Malicious code in tss12111 (npm) MAL-2026-1869 | Malicious | Not scored | 18 Mar, 2026 | npm tss12111 |
Malicious release: Malicious code in tscom-geo (npm) MAL-2026-1868 | Malicious | Not scored | 18 Mar, 2026 | npm tscom-geo |
Malicious release: Malicious code in thread_ppe-test (npm) MAL-2026-1867 | Malicious | Not scored | 18 Mar, 2026 | npm thread_ppe-test |
Malicious release: Malicious code in testctfproject3 (npm) MAL-2026-1866 | Malicious | Not scored | 18 Mar, 2026 | npm testctfproject3 |
Malicious release: Malicious code in testctfproject2 (npm) MAL-2026-1865 | Malicious | Not scored | 18 Mar, 2026 | npm testctfproject2 |
Malicious release: Malicious code in testctfproject1 (npm) MAL-2026-1864 | Malicious | Not scored | 18 Mar, 2026 | npm testctfproject1 |
Malicious release: Malicious code in test-bugbounty-package-6 (npm) MAL-2026-1862 | Malicious | Not scored | 18 Mar, 2026 | npm test-bugbounty-package-6 |
Malicious release: Malicious code in test-bugbounty-package-9 (npm) MAL-2026-1863 | Malicious | Not scored | 18 Mar, 2026 | npm test-bugbounty-package-9 |
Malicious release: Malicious code in technical-assignment (npm) MAL-2026-1861 | Malicious | Not scored | 18 Mar, 2026 | npm technical-assignment |
Malicious release: Malicious code in tdangularjs (npm) MAL-2026-1860 | Malicious | Not scored | 18 Mar, 2026 | npm tdangularjs |
Malicious release: Malicious code in stylelint-preference (npm) MAL-2026-1859 | Malicious | Not scored | 18 Mar, 2026 | npm stylelint-preference |
Malicious release: Malicious code in stnsxmp3 (npm) MAL-2026-1858 | Malicious | Not scored | 18 Mar, 2026 | npm stnsxmp3 |
Malicious release: Malicious code in stnsxmp (npm) MAL-2026-1857 | Malicious | Not scored | 18 Mar, 2026 | npm stnsxmp |