Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @antv/x6-plugin-selection (npm) GHSA-w6w6-23x5-qxwg, MAL-2026-4108 | Malicious | Not scored | 19 May, 2026 | npm @antv/x6-plugin-selection |
Malicious release: Malicious code in jest-random-mock (npm) GHSA-wcvg-25qc-qq9q, MAL-2026-4141 | Malicious | Not scored | 19 May, 2026 | npm jest-random-mock |
Malicious release: Malicious code in onfire.js (npm) GHSA-wcw3-5x3x-29vx, MAL-2026-4149 | Malicious | Not scored | 19 May, 2026 | npm onfire.js |
Malicious release: Malicious code in @antv/g2-plugin-slider (npm) GHSA-wcw5-7qcm-248g, MAL-2026-3978 | Malicious | Not scored | 19 May, 2026 | npm @antv/g2-plugin-slider |
Malicious release: Malicious code in byte-parser (npm) GHSA-wfmp-rqvg-5fjr, MAL-2026-3846 | Malicious | Not scored | 19 May, 2026 | npm byte-parser |
Malicious release: Malicious code in @antv/l7-draw (npm) GHSA-wggw-c96j-jjh2, MAL-2026-4038 | Malicious | Not scored | 19 May, 2026 | npm @antv/l7-draw |
Malicious release: Malicious code in @lint-md/parser (npm) GHSA-wghc-m4q5-hw4w, MAL-2026-4125 | Malicious | Not scored | 19 May, 2026 | npm @lint-md/parser |
Malicious release: Malicious code in @antv/g-webgpu (npm) GHSA-whh8-vv58-f333, MAL-2026-3967 | Malicious | Not scored | 19 May, 2026 | npm @antv/g-webgpu |
Malicious release: Malicious code in jest-electron (npm) GHSA-wq4x-c934-57c2, MAL-2026-4138 | Malicious | Not scored | 19 May, 2026 | npm jest-electron |
Malicious release: Malicious code in canvas-nest.js (npm) GHSA-wqg8-rp25-j93m, MAL-2026-4131 | Malicious | Not scored | 19 May, 2026 | npm canvas-nest.js |
Malicious release: Malicious code in @antv/ava-react (npm) GHSA-wwmj-qvv5-xgmv, MAL-2026-3854 | Malicious | Not scored | 19 May, 2026 | npm @antv/ava-react |
Malicious release: Malicious code in @antv/g6-editor (npm) GHSA-wwvj-2296-p2m7, MAL-2026-3986 | Malicious | Not scored | 19 May, 2026 | npm @antv/g6-editor |
Malicious release: Malicious code in react-adsense (npm) GHSA-wwxx-4655-hr65, MAL-2026-4150 | Malicious | Not scored | 19 May, 2026 | npm react-adsense |
Malicious release: Malicious code in miz (npm) GHSA-x35m-m7wx-r75p, MAL-2026-4148 | Malicious | Not scored | 19 May, 2026 | npm miz |
Malicious release: Malicious code in @antv/x6-plugin-stencil (npm) GHSA-x4wx-qwpr-c3gv, MAL-2026-4110 | Malicious | Not scored | 19 May, 2026 | npm @antv/x6-plugin-stencil |
Malicious release: Malicious code in @antv/ava (npm) GHSA-x9px-j6fm-r9pc, MAL-2026-3853 | Malicious | Not scored | 19 May, 2026 | npm @antv/ava |
Malicious release: Malicious code in @antv/thumbnails-component (npm) GHSA-xfrr-6qp2-qgvr, MAL-2026-4089 | Malicious | Not scored | 19 May, 2026 | npm @antv/thumbnails-component |
Malicious release: Malicious code in @antv/knowledge (npm) GHSA-xgv2-r8qq-frf4, MAL-2026-4032 | Malicious | Not scored | 19 May, 2026 | npm @antv/knowledge |
Malicious release: Malicious code in @antv/thumbnails (npm) GHSA-xqrp-xwcg-4wxh, MAL-2026-4088 | Malicious | Not scored | 19 May, 2026 | npm @antv/thumbnails |
Malicious release: Malicious code in @antv/coord (npm) GHSA-xr4v-v47m-547q, MAL-2026-3864 | Malicious | Not scored | 19 May, 2026 | npm @antv/coord |
Malicious release: Malicious code in @antv/g6-extension-react (npm) GHSA-xvcr-rg36-r589, MAL-2026-3989 | Malicious | Not scored | 19 May, 2026 | npm @antv/g6-extension-react |
Malicious release: Malicious code in @antv/narrative-text-schema (npm) GHSA-xx9m-777g-8mph, MAL-2026-4073 | Malicious | Not scored | 19 May, 2026 | npm @antv/narrative-text-schema |
Malicious release: Malicious code in @antv/awards (npm) MAL-2026-3855 | Malicious | Not scored | 19 May, 2026 | npm @antv/awards |
Malicious release: Malicious code in @antv/calendar-heatmap (npm) MAL-2026-3856 | Malicious | Not scored | 19 May, 2026 | npm @antv/calendar-heatmap |
Malicious release: Malicious code in @antv/chart-linter (npm) MAL-2026-3857 | Malicious | Not scored | 19 May, 2026 | npm @antv/chart-linter |
Malicious release: Malicious code in @antv/chart-visualization-skills (npm) MAL-2026-3859 | Malicious | Not scored | 19 May, 2026 | npm @antv/chart-visualization-skills |
Malicious release: Malicious code in @antv/d3-interpolate (npm) MAL-2026-3866 | Malicious | Not scored | 19 May, 2026 | npm @antv/d3-interpolate |
Malicious release: Malicious code in @antv/data-samples (npm) MAL-2026-3867 | Malicious | Not scored | 19 May, 2026 | npm @antv/data-samples |
Malicious release: Malicious code in @antv/data-set (npm) MAL-2026-3868 | Malicious | Not scored | 19 May, 2026 | npm @antv/data-set |
Malicious release: Malicious code in @antv/data-wizard (npm) MAL-2026-3869 | Malicious | Not scored | 19 May, 2026 | npm @antv/data-wizard |
Malicious release: Malicious code in @antv/dipper-component (npm) MAL-2026-3870 | Malicious | Not scored | 19 May, 2026 | npm @antv/dipper-component |
Malicious release: Malicious code in @antv/dipper-hooks (npm) MAL-2026-3871 | Malicious | Not scored | 19 May, 2026 | npm @antv/dipper-hooks |
Malicious release: Malicious code in @antv/dipper-map (npm) MAL-2026-3872 | Malicious | Not scored | 19 May, 2026 | npm @antv/dipper-map |
Malicious release: Malicious code in @antv/dw-transform (npm) MAL-2026-3877 | Malicious | Not scored | 19 May, 2026 | npm @antv/dw-transform |
Malicious release: Malicious code in @antv/dw-util (npm) MAL-2026-3878 | Malicious | Not scored | 19 May, 2026 | npm @antv/dw-util |
Malicious release: Malicious code in @antv/f-charts (npm) MAL-2026-3881 | Malicious | Not scored | 19 May, 2026 | npm @antv/f-charts |
Malicious release: Malicious code in @antv/f-my (npm) MAL-2026-3884 | Malicious | Not scored | 19 May, 2026 | npm @antv/f-my |
Malicious release: Malicious code in @antv/f-wx (npm) MAL-2026-3888 | Malicious | Not scored | 19 May, 2026 | npm @antv/f-wx |
Malicious release: Malicious code in @antv/f2-algorithm (npm) MAL-2026-3890 | Malicious | Not scored | 19 May, 2026 | npm @antv/f2-algorithm |
Malicious release: Malicious code in @antv/f2-canvas (npm) MAL-2026-3891 | Malicious | Not scored | 19 May, 2026 | npm @antv/f2-canvas |
Malicious release: Malicious code in @antv/f2-my (npm) MAL-2026-3894 | Malicious | Not scored | 19 May, 2026 | npm @antv/f2-my |
Malicious release: Malicious code in @antv/f2-site (npm) MAL-2026-3896 | Malicious | Not scored | 19 May, 2026 | npm @antv/f2-site |
Malicious release: Malicious code in @antv/f2-wordcloud (npm) MAL-2026-3898 | Malicious | Not scored | 19 May, 2026 | npm @antv/f2-wordcloud |
Malicious release: Malicious code in @antv/f2-wx (npm) MAL-2026-3899 | Malicious | Not scored | 19 May, 2026 | npm @antv/f2-wx |
Malicious release: Malicious code in @antv/f6-alipay (npm) MAL-2026-3901 | Malicious | Not scored | 19 May, 2026 | npm @antv/f6-alipay |
Malicious release: Malicious code in @antv/f6-hammerjs (npm) MAL-2026-3904 | Malicious | Not scored | 19 May, 2026 | npm @antv/f6-hammerjs |
Malicious release: Malicious code in @antv/f6-wx (npm) MAL-2026-3907 | Malicious | Not scored | 19 May, 2026 | npm @antv/f6-wx |
Malicious release: Malicious code in @antv/g-camera-api (npm) MAL-2026-3910 | Malicious | Not scored | 19 May, 2026 | npm @antv/g-camera-api |
Malicious release: Malicious code in @antv/g-compat (npm) MAL-2026-3913 | Malicious | Not scored | 19 May, 2026 | npm @antv/g-compat |
Malicious release: Malicious code in @antv/g-css-layout-api (npm) MAL-2026-3915 | Malicious | Not scored | 19 May, 2026 | npm @antv/g-css-layout-api |