Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @antv/f-lottie (npm) GHSA-jjpx-h3rw-xgvh, MAL-2026-3883 | Malicious | Not scored | 19 May, 2026 | npm @antv/f-lottie |
Malicious release: Malicious code in @antv/s2 (npm) GHSA-jpg3-5pw2-f3pp, MAL-2026-4077 | Malicious | Not scored | 19 May, 2026 | npm @antv/s2 |
Malicious release: Malicious code in @antv/dom-util (npm) GHSA-jqrf-pgwx-4hmm, MAL-2026-3873 | Malicious | Not scored | 19 May, 2026 | npm @antv/dom-util |
Malicious release: Malicious code in filesize.js (npm) GHSA-jv93-2q75-5qx2, MAL-2026-4133 | Malicious | Not scored | 19 May, 2026 | npm filesize.js |
Malicious release: Malicious code in @antv/f2-context (npm) GHSA-jxcq-94jc-jfh7, MAL-2026-3892 | Malicious | Not scored | 19 May, 2026 | npm @antv/f2-context |
Malicious release: Malicious code in @antv/g-components (npm) GHSA-m46h-3664-4mh5, MAL-2026-3914 | Malicious | Not scored | 19 May, 2026 | npm @antv/g-components |
Malicious release: Malicious code in @antv/l7 (npm) GHSA-m83h-q484-xpvc, MAL-2026-4033 | Malicious | Not scored | 19 May, 2026 | npm @antv/l7 |
Malicious release: Malicious code in @antv/g2-brush (npm) GHSA-m84m-x49h-988x, MAL-2026-3974 | Malicious | Not scored | 19 May, 2026 | npm @antv/g2-brush |
Malicious release: Malicious code in @antv/g2plot-schemas (npm) GHSA-mg3q-v34p-f5vg, MAL-2026-3981 | Malicious | Not scored | 19 May, 2026 | npm @antv/g2plot-schemas |
Malicious release: Malicious code in word-width (npm) GHSA-mvg8-hq8h-58p5, MAL-2026-4158 | Malicious | Not scored | 19 May, 2026 | npm word-width |
Malicious release: Malicious code in jest-url-loader (npm) GHSA-p525-28r8-34vh, MAL-2026-4142 | Malicious | Not scored | 19 May, 2026 | npm jest-url-loader |
Malicious release: Malicious code in @antv/f-react (npm) GHSA-p5mp-8962-jmx3, MAL-2026-3885 | Malicious | Not scored | 19 May, 2026 | npm @antv/f-react |
Malicious release: Malicious code in @antv/g-plugin-rough-canvas-renderer (npm) GHSA-pcx7-h5gg-6fc4, MAL-2026-3951 | Malicious | Not scored | 19 May, 2026 | npm @antv/g-plugin-rough-canvas-renderer |
Malicious release: Malicious code in @antv/path-util (npm) GHSA-pf5j-4636-6rx7, MAL-2026-4075 | Malicious | Not scored | 19 May, 2026 | npm @antv/path-util |
Malicious release: Malicious code in limit-size (npm) GHSA-phpf-jpq8-9v3p, MAL-2026-4143 | Malicious | Not scored | 19 May, 2026 | npm limit-size |
Malicious release: Malicious code in @antv/layout-gpu (npm) GHSA-ppv3-wmcg-rr34, MAL-2026-4057 | Malicious | Not scored | 19 May, 2026 | npm @antv/layout-gpu |
Malicious release: Malicious code in @antv/g-plugin-gpgpu (npm) GHSA-pqcc-hgwf-gprp, MAL-2026-3945 | Malicious | Not scored | 19 May, 2026 | npm @antv/g-plugin-gpgpu |
Malicious release: Malicious code in @antv/g-webgl (npm) GHSA-pv52-x3r3-qqqx, MAL-2026-3965 | Malicious | Not scored | 19 May, 2026 | npm @antv/g-webgl |
Malicious release: Malicious code in @antv/color-schema (npm) GHSA-px5p-fr46-56q3, MAL-2026-3861 | Malicious | Not scored | 19 May, 2026 | npm @antv/color-schema |
Malicious release: Malicious code in @antv/li-sdk (npm) GHSA-pxhx-qqpg-pw7g, MAL-2026-4065 | Malicious | Not scored | 19 May, 2026 | npm @antv/li-sdk |
Malicious release: Malicious code in @lint-md/core (npm) GHSA-pxvh-xmw6-wc5m, MAL-2026-4124 | Malicious | Not scored | 19 May, 2026 | npm @lint-md/core |
Malicious release: Malicious code in babel-plugin-version (npm) GHSA-q294-f83f-877x, MAL-2026-4129 | Malicious | Not scored | 19 May, 2026 | npm babel-plugin-version |
Malicious release: Malicious code in @antv/graphlib (npm) GHSA-q382-p7f2-f69h, MAL-2026-4026 | Malicious | Not scored | 19 May, 2026 | npm @antv/graphlib |
Malicious release: Malicious code in @antv/l7-component (npm) GHSA-q5cr-c8hf-wj6m, MAL-2026-4034 | Malicious | Not scored | 19 May, 2026 | npm @antv/l7-component |
Malicious release: Malicious code in @antv/event-emitter (npm) GHSA-q9w3-3q3j-cmcw, MAL-2026-3879 | Malicious | Not scored | 19 May, 2026 | npm @antv/event-emitter |
Malicious release: Malicious code in @antv/l7-utils (npm) GHSA-qc3r-8r79-xw3f, MAL-2026-4053 | Malicious | Not scored | 19 May, 2026 | npm @antv/l7-utils |
Malicious release: Malicious code in @antv/adjust (npm) GHSA-qcp2-qp9h-qprg, MAL-2026-3849 | Malicious | Not scored | 19 May, 2026 | npm @antv/adjust |
Malicious release: Malicious code in @antv/x6-geometry (npm) GHSA-qf4q-5vcp-73h7, MAL-2026-3840 | Malicious | Not scored | 19 May, 2026 | npm @antv/x6-geometry |
Malicious release: Malicious code in @antv/g-canvas (npm) GHSA-qfx3-gvjj-79vc, MAL-2026-3911 | Malicious | Not scored | 19 May, 2026 | npm @antv/g-canvas |
Malicious release: Malicious code in @antv/mcp-server-chart (npm) GHSA-qgmj-c898-99rq, MAL-2026-4069 | Malicious | Not scored | 19 May, 2026 | npm @antv/mcp-server-chart |
Malicious release: Malicious code in @antv/l7plot (npm) GHSA-qh36-m6j3-2qqj, MAL-2026-4054 | Malicious | Not scored | 19 May, 2026 | npm @antv/l7plot |
Malicious release: Malicious code in @antv/li-core-assets (npm) GHSA-qx42-m25j-5q2g, MAL-2026-4061 | Malicious | Not scored | 19 May, 2026 | npm @antv/li-core-assets |
Malicious release: Malicious code in @antv/g2-extension-ava (npm) GHSA-r3vm-ff6x-84h7, MAL-2026-3976 | Malicious | Not scored | 19 May, 2026 | npm @antv/g2-extension-ava |
Malicious release: Malicious code in @antv/x6-plugin-transform (npm) GHSA-r5j9-ph7p-293w, MAL-2026-4111 | Malicious | Not scored | 19 May, 2026 | npm @antv/x6-plugin-transform |
Malicious release: Malicious code in @antv/g-plugin-a11y (npm) GHSA-r9wm-j6rg-g4f6, MAL-2026-3932 | Malicious | Not scored | 19 May, 2026 | npm @antv/g-plugin-a11y |
Malicious release: Malicious code in @antv/x6-plugin-minimap (npm) GHSA-rcjf-4h3m-7qm7, MAL-2026-4106 | Malicious | Not scored | 19 May, 2026 | npm @antv/x6-plugin-minimap |
Malicious release: Malicious code in @antv/color-util (npm) GHSA-rh6v-hwr4-6jcp, MAL-2026-3862 | Malicious | Not scored | 19 May, 2026 | npm @antv/color-util |
Malicious release: Malicious code in @antv/x6-plugin-dnd (npm) GHSA-rmgf-2g76-6ghh, MAL-2026-4102 | Malicious | Not scored | 19 May, 2026 | npm @antv/x6-plugin-dnd |
Malicious release: Malicious code in @antv/g-mobile (npm) GHSA-rrq4-29fr-r8wj, MAL-2026-3924 | Malicious | Not scored | 19 May, 2026 | npm @antv/g-mobile |
Malicious release: Malicious code in @antv/ckb (npm) GHSA-rx57-h637-696p, MAL-2026-3860 | Malicious | Not scored | 19 May, 2026 | npm @antv/ckb |
Malicious release: Malicious code in @antv/l7-core (npm) GHSA-rxrf-pf3f-w3p5, MAL-2026-4036 | Malicious | Not scored | 19 May, 2026 | npm @antv/l7-core |
Malicious release: Malicious code in @antv/l7-district (npm) GHSA-v7v5-32v3-f6m3, MAL-2026-4037 | Malicious | Not scored | 19 May, 2026 | npm @antv/l7-district |
Malicious release: Malicious code in lint-md-cli (npm) GHSA-vfrr-r2f4-hx7m, MAL-2026-4145 | Malicious | Not scored | 19 May, 2026 | npm lint-md-cli |
Malicious release: Malicious code in @antv/g-mobile-canvas-element (npm) GHSA-vfwr-g2x2-6phq, MAL-2026-3926 | Malicious | Not scored | 19 May, 2026 | npm @antv/g-mobile-canvas-element |
Malicious release: Malicious code in @antv/g-plugin-canvas-renderer (npm) GHSA-vj87-p72m-m8fc, MAL-2026-3937 | Malicious | Not scored | 19 May, 2026 | npm @antv/g-plugin-canvas-renderer |
Malicious release: Malicious code in @antv/x6-plugin-clipboard (npm) GHSA-vqmm-5f3x-x32r, MAL-2026-4101 | Malicious | Not scored | 19 May, 2026 | npm @antv/x6-plugin-clipboard |
Malicious release: Malicious code in fixed-round (npm) GHSA-vrxj-4hcq-xgcv, MAL-2026-4134 | Malicious | Not scored | 19 May, 2026 | npm fixed-round |
Malicious release: Malicious code in @antv/g6-react-node (npm) GHSA-w3gp-q3qh-9q66, MAL-2026-3995 | Malicious | Not scored | 19 May, 2026 | npm @antv/g6-react-node |
Malicious release: Malicious code in @antv/x6-common (npm) GHSA-w5pj-w4r4-pfgf, MAL-2026-4099 | Malicious | Not scored | 19 May, 2026 | npm @antv/x6-common |
Malicious release: Malicious code in @antv/a8 (npm) GHSA-w64q-7g9m-c46x, MAL-2026-3848 | Malicious | Not scored | 19 May, 2026 | npm @antv/a8 |