Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in static-content-cannabis (npm) MAL-2026-1856 | Malicious | Not scored | 18 Mar, 2026 | npm static-content-cannabis |
Malicious release: Malicious code in ssf-desktop-api-specification (npm) MAL-2026-1855 | Malicious | Not scored | 18 Mar, 2026 | npm ssf-desktop-api-specification |
Malicious release: Malicious code in ssf-desktop-api-electron (npm) MAL-2026-1854 | Malicious | Not scored | 18 Mar, 2026 | npm ssf-desktop-api-electron |
Malicious release: Malicious code in solana-gateway-contracts-private (npm) MAL-2026-1853 | Malicious | Not scored | 18 Mar, 2026 | npm solana-gateway-contracts-private |
Malicious release: Malicious code in soft-nav (npm) MAL-2026-1852 | Malicious | Not scored | 18 Mar, 2026 | npm soft-nav |
Malicious release: Malicious code in snort-security-tool (npm) MAL-2026-1851 | Malicious | Not scored | 18 Mar, 2026 | npm snort-security-tool |
Malicious release: Malicious code in smm-yt (npm) MAL-2026-1850 | Malicious | Not scored | 18 Mar, 2026 | npm smm-yt |
Malicious release: Malicious code in skyoauth2 (npm) MAL-2026-1849 | Malicious | Not scored | 18 Mar, 2026 | npm skyoauth2 |
Malicious release: Malicious code in sky-enablement (npm) MAL-2026-1848 | Malicious | Not scored | 18 Mar, 2026 | npm sky-enablement |
Malicious release: Malicious code in signer-app (npm) MAL-2026-1847 | Malicious | Not scored | 18 Mar, 2026 | npm signer-app |
Malicious release: Malicious code in signalk-poc-bug (npm) MAL-2026-1846 | Malicious | Not scored | 18 Mar, 2026 | npm signalk-poc-bug |
Malicious release: Malicious code in signalk-bug-poc (npm) MAL-2026-1845 | Malicious | Not scored | 18 Mar, 2026 | npm signalk-bug-poc |
Malicious release: Malicious code in shopify-ping-web (npm) MAL-2026-1844 | Malicious | Not scored | 18 Mar, 2026 | npm shopify-ping-web |
Malicious release: Malicious code in shopify-admin-web (npm) MAL-2026-1843 | Malicious | Not scored | 18 Mar, 2026 | npm shopify-admin-web |
Malicious release: Malicious code in sheinx (npm) MAL-2026-1842 | Malicious | Not scored | 18 Mar, 2026 | npm sheinx |
Malicious release: Malicious code in safeness-sb-new (npm) MAL-2026-1841 | Malicious | Not scored | 18 Mar, 2026 | npm safeness-sb-new |
Malicious release: Malicious code in ref-selector (npm) MAL-2026-1840 | Malicious | Not scored | 18 Mar, 2026 | npm ref-selector |
Malicious release: Malicious code in react-router-on-navigation (npm) MAL-2026-1838 | Malicious | Not scored | 18 Mar, 2026 | npm react-router-on-navigation |
Malicious release: Malicious code in react-state-optimizer-core (npm) MAL-2026-1839 | Malicious | Not scored | 18 Mar, 2026 | npm react-state-optimizer-core |
Malicious release: Malicious code in react-query-core-utils (npm) MAL-2026-1837 | Malicious | Not scored | 18 Mar, 2026 | npm react-query-core-utils |
Malicious release: Malicious code in react-performance-suite (npm) MAL-2026-1836 | Malicious | Not scored | 18 Mar, 2026 | npm react-performance-suite |
Malicious release: Malicious code in react-fast-utilsa (npm) MAL-2026-1835 | Malicious | Not scored | 18 Mar, 2026 | npm react-fast-utilsa |
Malicious release: Malicious code in rce-pkg-1 (npm) MAL-2026-1833 | Malicious | Not scored | 18 Mar, 2026 | npm rce-pkg-1 |
Malicious release: Malicious code in rce-pkg-2 (npm) MAL-2026-1834 | Malicious | Not scored | 18 Mar, 2026 | npm rce-pkg-2 |
Malicious release: Malicious code in ranko887 (npm) MAL-2026-1832 | Malicious | Not scored | 18 Mar, 2026 | npm ranko887 |
Malicious release: Malicious code in rabbitmq-sdk (npm) MAL-2026-1831 | Malicious | Not scored | 18 Mar, 2026 | npm rabbitmq-sdk |
Malicious release: Malicious code in r1dfg6789 (npm) MAL-2026-1830 | Malicious | Not scored | 18 Mar, 2026 | npm r1dfg6789 |
Malicious release: Malicious code in pru-lib-ng (npm) MAL-2026-1829 | Malicious | Not scored | 18 Mar, 2026 | npm pru-lib-ng |
Malicious release: Malicious code in proleis-web-scanner (npm) MAL-2026-1828 | Malicious | Not scored | 18 Mar, 2026 | npm proleis-web-scanner |
Malicious release: Malicious code in proleis-web-gallery (npm) MAL-2026-1827 | Malicious | Not scored | 18 Mar, 2026 | npm proleis-web-gallery |
Malicious release: Malicious code in proleis-web-file-input (npm) MAL-2026-1826 | Malicious | Not scored | 18 Mar, 2026 | npm proleis-web-file-input |
Malicious release: Malicious code in proleis-web-animations (npm) MAL-2026-1824 | Malicious | Not scored | 18 Mar, 2026 | npm proleis-web-animations |
Malicious release: Malicious code in proleis-web-app (npm) MAL-2026-1825 | Malicious | Not scored | 18 Mar, 2026 | npm proleis-web-app |
Malicious release: Malicious code in proleis-rest-client (npm) MAL-2026-1823 | Malicious | Not scored | 18 Mar, 2026 | npm proleis-rest-client |
Malicious release: Malicious code in postcss-hotfix (npm) MAL-2026-1822 | Malicious | Not scored | 18 Mar, 2026 | npm postcss-hotfix |
Malicious release: Malicious code in portal-lime (npm) MAL-2026-1821 | Malicious | Not scored | 18 Mar, 2026 | npm portal-lime |
Malicious release: Malicious code in player-common-controls (npm) MAL-2026-1820 | Malicious | Not scored | 18 Mar, 2026 | npm player-common-controls |
Malicious release: Malicious code in player-common-composites (npm) MAL-2026-1819 | Malicious | Not scored | 18 Mar, 2026 | npm player-common-composites |
Malicious release: Malicious code in player-button (npm) MAL-2026-1818 | Malicious | Not scored | 18 Mar, 2026 | npm player-button |
Malicious release: Malicious code in plate-playground-template (npm) MAL-2026-1817 | Malicious | Not scored | 18 Mar, 2026 | npm plate-playground-template |
Malicious release: Malicious code in pkgnewfefame1 (npm) MAL-2026-1816 | Malicious | Not scored | 18 Mar, 2026 | npm pkgnewfefame1 |
Malicious release: Malicious code in pkg1511222 (npm) MAL-2026-1815 | Malicious | Not scored | 18 Mar, 2026 | npm pkg1511222 |
Malicious release: Malicious code in phx-core5 (npm) MAL-2026-1814 | Malicious | Not scored | 18 Mar, 2026 | npm phx-core5 |
Malicious release: Malicious code in phx-core4 (npm) MAL-2026-1813 | Malicious | Not scored | 18 Mar, 2026 | npm phx-core4 |
Malicious release: Malicious code in phx-core3 (npm) MAL-2026-1812 | Malicious | Not scored | 18 Mar, 2026 | npm phx-core3 |
Malicious release: Malicious code in phx-core2 (npm) MAL-2026-1811 | Malicious | Not scored | 18 Mar, 2026 | npm phx-core2 |
Malicious release: Malicious code in phx-core1 (npm) MAL-2026-1810 | Malicious | Not scored | 18 Mar, 2026 | npm phx-core1 |
Malicious release: Malicious code in ph-common (npm) MAL-2026-1809 | Malicious | Not scored | 18 Mar, 2026 | npm ph-common |
Malicious release: Malicious code in path-to-regexp-updated (npm) MAL-2026-1808 | Malicious | Not scored | 18 Mar, 2026 | npm path-to-regexp-updated |
Malicious release: Malicious code in paramount-cmp-html5 (npm) MAL-2026-1807 | Malicious | Not scored | 18 Mar, 2026 | npm paramount-cmp-html5 |