Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in js-to-solve (npm) MAL-2026-1756 | Malicious | Not scored | 18 Mar, 2026 | npm js-to-solve |
Malicious release: Malicious code in iron-demo-helpers (npm) MAL-2026-1755 | Malicious | Not scored | 18 Mar, 2026 | npm iron-demo-helpers |
Malicious release: Malicious code in ipherr (npm) MAL-2026-1754 | Malicious | Not scored | 18 Mar, 2026 | npm ipherr |
Malicious release: Malicious code in internal-secret-project-1234 (npm) MAL-2026-1753 | Malicious | Not scored | 18 Mar, 2026 | npm internal-secret-project-1234 |
Malicious release: Malicious code in inter-site-components (npm) MAL-2026-1751 | Malicious | Not scored | 18 Mar, 2026 | npm inter-site-components |
Malicious release: Malicious code in internal-api-insights (npm) MAL-2026-1752 | Malicious | Not scored | 18 Mar, 2026 | npm internal-api-insights |
Malicious release: Malicious code in integration-icons (npm) MAL-2026-1750 | Malicious | Not scored | 18 Mar, 2026 | npm integration-icons |
Malicious release: Malicious code in initial-path32 (npm) MAL-2026-1749 | Malicious | Not scored | 18 Mar, 2026 | npm initial-path32 |
Malicious release: Malicious code in initial-path21 (npm) MAL-2026-1748 | Malicious | Not scored | 18 Mar, 2026 | npm initial-path21 |
Malicious release: Malicious code in iconicwp-website (npm) MAL-2026-1747 | Malicious | Not scored | 18 Mar, 2026 | npm iconicwp-website |
Malicious release: Malicious code in hydra-node-consent-sdk (npm) MAL-2026-1746 | Malicious | Not scored | 18 Mar, 2026 | npm hydra-node-consent-sdk |
Malicious release: Malicious code in hydra-consent-sdk (npm) MAL-2026-1745 | Malicious | Not scored | 18 Mar, 2026 | npm hydra-consent-sdk |
Malicious release: Malicious code in house-click (npm) MAL-2026-1744 | Malicious | Not scored | 18 Mar, 2026 | npm house-click |
Malicious release: Malicious code in haodesk-ui (npm) MAL-2026-1743 | Malicious | Not scored | 18 Mar, 2026 | npm haodesk-ui |
Malicious release: Malicious code in google-audit-tool (npm) MAL-2026-1742 | Malicious | Not scored | 18 Mar, 2026 | npm google-audit-tool |
Malicious release: Malicious code in frontastic (npm) MAL-2026-1741 | Malicious | Not scored | 18 Mar, 2026 | npm frontastic |
Malicious release: Malicious code in fixerpabo_jkbts (npm) MAL-2026-1740 | Malicious | Not scored | 18 Mar, 2026 | npm fixerpabo_jkbts |
Malicious release: Malicious code in fhgfhgfhfghhffhfgh (npm) MAL-2026-1739 | Malicious | Not scored | 18 Mar, 2026 | npm fhgfhgfhfghhffhfgh |
Malicious release: Malicious code in fe-prop-types (npm) MAL-2026-1738 | Malicious | Not scored | 18 Mar, 2026 | npm fe-prop-types |
Malicious release: Malicious code in fe-lib-singleton (npm) MAL-2026-1736 | Malicious | Not scored | 18 Mar, 2026 | npm fe-lib-singleton |
Malicious release: Malicious code in fe-lib-theme (npm) MAL-2026-1737 | Malicious | Not scored | 18 Mar, 2026 | npm fe-lib-theme |
Malicious release: Malicious code in fe-lib-sequences (npm) MAL-2026-1735 | Malicious | Not scored | 18 Mar, 2026 | npm fe-lib-sequences |
Malicious release: Malicious code in fdir3 (npm) MAL-2026-1734 | Malicious | Not scored | 18 Mar, 2026 | npm fdir3 |
Malicious release: Malicious code in express-security-suite-2024 (npm) MAL-2026-1733 | Malicious | Not scored | 18 Mar, 2026 | npm express-security-suite-2024 |
Malicious release: Malicious code in express-ranges (npm) MAL-2026-1732 | Malicious | Not scored | 18 Mar, 2026 | npm express-ranges |
Malicious release: Malicious code in express-http-validator (npm) MAL-2026-1731 | Malicious | Not scored | 18 Mar, 2026 | npm express-http-validator |
Malicious release: Malicious code in express-configers (npm) MAL-2026-1730 | Malicious | Not scored | 18 Mar, 2026 | npm express-configers |
Malicious release: Malicious code in eslint-plugin-superhuman-custom-rules (npm) MAL-2026-1729 | Malicious | Not scored | 18 Mar, 2026 | npm eslint-plugin-superhuman-custom-rules |
Malicious release: Malicious code in escaux (npm) MAL-2026-1728 | Malicious | Not scored | 18 Mar, 2026 | npm escaux |
Malicious release: Malicious code in es1int-configer (npm) MAL-2026-1727 | Malicious | Not scored | 18 Mar, 2026 | npm es1int-configer |
Malicious release: Malicious code in ersagent-frontend (npm) MAL-2026-1726 | Malicious | Not scored | 18 Mar, 2026 | npm ersagent-frontend |
Malicious release: Malicious code in env-workflow-test (npm) MAL-2026-1725 | Malicious | Not scored | 18 Mar, 2026 | npm env-workflow-test |
Malicious release: Malicious code in engineers (npm) MAL-2026-1724 | Malicious | Not scored | 18 Mar, 2026 | npm engineers |
Malicious release: Malicious code in elf-stats-velvet-ledger-928 (npm) MAL-2026-1723 | Malicious | Not scored | 18 Mar, 2026 | npm elf-stats-velvet-ledger-928 |
Malicious release: Malicious code in ehance-assistant (npm) MAL-2026-1721 | Malicious | Not scored | 18 Mar, 2026 | npm ehance-assistant |
Malicious release: Malicious code in ehance-assistant33 (npm) MAL-2026-1722 | Malicious | Not scored | 18 Mar, 2026 | npm ehance-assistant33 |
Malicious release: Malicious code in dubbo-web-example (npm) MAL-2026-1720 | Malicious | Not scored | 18 Mar, 2026 | npm dubbo-web-example |
Malicious release: Malicious code in dstny (npm) MAL-2026-1719 | Malicious | Not scored | 18 Mar, 2026 | npm dstny |
Malicious release: Malicious code in dpc-sign (npm) MAL-2026-1718 | Malicious | Not scored | 18 Mar, 2026 | npm dpc-sign |
Malicious release: Malicious code in dotenvx-int (npm) MAL-2026-1717 | Malicious | Not scored | 18 Mar, 2026 | npm dotenvx-int |
Malicious release: Malicious code in dotenv-plugin (npm) MAL-2026-1716 | Malicious | Not scored | 18 Mar, 2026 | npm dotenv-plugin |
Malicious release: Malicious code in dotenv-nodejs (npm) MAL-2026-1715 | Malicious | Not scored | 18 Mar, 2026 | npm dotenv-nodejs |
Malicious release: Malicious code in dotenv-node-promised (npm) MAL-2026-1714 | Malicious | Not scored | 18 Mar, 2026 | npm dotenv-node-promised |
Malicious release: Malicious code in dotenv-mono-cli (npm) MAL-2026-1712 | Malicious | Not scored | 18 Mar, 2026 | npm dotenv-mono-cli |
Malicious release: Malicious code in dotenv-node-cli (npm) MAL-2026-1713 | Malicious | Not scored | 18 Mar, 2026 | npm dotenv-node-cli |
Malicious release: Malicious code in dotenv-int (npm) MAL-2026-1711 | Malicious | Not scored | 18 Mar, 2026 | npm dotenv-int |
Malicious release: Malicious code in dotenv-cli-node (npm) MAL-2026-1710 | Malicious | Not scored | 18 Mar, 2026 | npm dotenv-cli-node |
Malicious release: Malicious code in dnsfilter-frontend (npm) MAL-2026-1709 | Malicious | Not scored | 18 Mar, 2026 | npm dnsfilter-frontend |
Malicious release: Malicious code in dns-filter-dashboard (npm) MAL-2026-1708 | Malicious | Not scored | 18 Mar, 2026 | npm dns-filter-dashboard |
Malicious release: Malicious code in dev_ppe-test (npm) MAL-2026-1707 | Malicious | Not scored | 18 Mar, 2026 | npm dev_ppe-test |