Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in ddddddd1d (npm) MAL-2026-1706 | Malicious | Not scored | 18 Mar, 2026 | npm ddddddd1d |
Malicious release: Malicious code in dazz-redirects (npm) MAL-2026-1705 | Malicious | Not scored | 18 Mar, 2026 | npm dazz-redirects |
Malicious release: Malicious code in date-fns-scripts (npm) MAL-2026-1704 | Malicious | Not scored | 18 Mar, 2026 | npm date-fns-scripts |
Malicious release: Malicious code in dataterminal-ui (npm) MAL-2026-1703 | Malicious | Not scored | 18 Mar, 2026 | npm dataterminal-ui |
Malicious release: Malicious code in d4sp (npm) MAL-2026-1702 | Malicious | Not scored | 18 Mar, 2026 | npm d4sp |
Malicious release: Malicious code in corp-sign-core-js (npm) MAL-2026-1701 | Malicious | Not scored | 18 Mar, 2026 | npm corp-sign-core-js |
Malicious release: Malicious code in corp-internal-logger (npm) MAL-2026-1700 | Malicious | Not scored | 18 Mar, 2026 | npm corp-internal-logger |
Malicious release: Malicious code in constant-values (npm) MAL-2026-1699 | Malicious | Not scored | 18 Mar, 2026 | npm constant-values |
Malicious release: Malicious code in connect-me-icon (npm) MAL-2026-1698 | Malicious | Not scored | 18 Mar, 2026 | npm connect-me-icon |
Malicious release: Malicious code in conduit-core (npm) MAL-2026-1697 | Malicious | Not scored | 18 Mar, 2026 | npm conduit-core |
Malicious release: Malicious code in components-design-system (npm) MAL-2026-1696 | Malicious | Not scored | 18 Mar, 2026 | npm components-design-system |
Malicious release: Malicious code in company-billing-sdk-bugbounty (npm) MAL-2026-1695 | Malicious | Not scored | 18 Mar, 2026 | npm company-billing-sdk-bugbounty |
Malicious release: Malicious code in collabs-merchants (npm) MAL-2026-1694 | Malicious | Not scored | 18 Mar, 2026 | npm collabs-merchants |
Malicious release: Malicious code in coinbase-desktop-sdk (npm) MAL-2026-1693 | Malicious | Not scored | 18 Mar, 2026 | npm coinbase-desktop-sdk |
Malicious release: Malicious code in circuit-playground (npm) MAL-2026-1692 | Malicious | Not scored | 18 Mar, 2026 | npm circuit-playground |
Malicious release: Malicious code in chromecast-receiver (npm) MAL-2026-1691 | Malicious | Not scored | 18 Mar, 2026 | npm chromecast-receiver |
Malicious release: Malicious code in chain-promised-cli (npm) MAL-2026-1690 | Malicious | Not scored | 18 Mar, 2026 | npm chain-promised-cli |
Malicious release: Malicious code in chain-promised-async (npm) MAL-2026-1689 | Malicious | Not scored | 18 Mar, 2026 | npm chain-promised-async |
Malicious release: Malicious code in chain-cli-promised (npm) MAL-2026-1687 | Malicious | Not scored | 18 Mar, 2026 | npm chain-cli-promised |
Malicious release: Malicious code in chain-promised (npm) MAL-2026-1688 | Malicious | Not scored | 18 Mar, 2026 | npm chain-promised |
Malicious release: Malicious code in chain-argon (npm) MAL-2026-1686 | Malicious | Not scored | 18 Mar, 2026 | npm chain-argon |
Malicious release: Malicious code in chai-types (npm) MAL-2026-1685 | Malicious | Not scored | 18 Mar, 2026 | npm chai-types |
Malicious release: Malicious code in chai-proxy (npm) MAL-2026-1684 | Malicious | Not scored | 18 Mar, 2026 | npm chai-proxy |
Malicious release: Malicious code in chai-promised-tools (npm) MAL-2026-1683 | Malicious | Not scored | 18 Mar, 2026 | npm chai-promised-tools |
Malicious release: Malicious code in chai-promised-plugin (npm) MAL-2026-1682 | Malicious | Not scored | 18 Mar, 2026 | npm chai-promised-plugin |
Malicious release: Malicious code in chai-promised-cli (npm) MAL-2026-1681 | Malicious | Not scored | 18 Mar, 2026 | npm chai-promised-cli |
Malicious release: Malicious code in chai-promised-await (npm) MAL-2026-1680 | Malicious | Not scored | 18 Mar, 2026 | npm chai-promised-await |
Malicious release: Malicious code in chai-promised-async (npm) MAL-2026-1679 | Malicious | Not scored | 18 Mar, 2026 | npm chai-promised-async |
Malicious release: Malicious code in chai-cli-async (npm) MAL-2026-1677 | Malicious | Not scored | 18 Mar, 2026 | npm chai-cli-async |
Malicious release: Malicious code in chai-conf (npm) MAL-2026-1678 | Malicious | Not scored | 18 Mar, 2026 | npm chai-conf |
Malicious release: Malicious code in chai-chai-chain-promised (npm) MAL-2026-1676 | Malicious | Not scored | 18 Mar, 2026 | npm chai-chai-chain-promised |
Malicious release: Malicious code in chai-await-promised (npm) MAL-2026-1675 | Malicious | Not scored | 18 Mar, 2026 | npm chai-await-promised |
Malicious release: Malicious code in chai-await-cli (npm) MAL-2026-1674 | Malicious | Not scored | 18 Mar, 2026 | npm chai-await-cli |
Malicious release: Malicious code in chai-await-chain (npm) MAL-2026-1673 | Malicious | Not scored | 18 Mar, 2026 | npm chai-await-chain |
Malicious release: Malicious code in chai-as-resolved (npm) MAL-2026-1671 | Malicious | Not scored | 18 Mar, 2026 | npm chai-as-resolved |
Malicious release: Malicious code in chai-as-sync (npm) MAL-2026-1672 | Malicious | Not scored | 18 Mar, 2026 | npm chai-as-sync |
Malicious release: Malicious code in chai-as-prop (npm) MAL-2026-1670 | Malicious | Not scored | 18 Mar, 2026 | npm chai-as-prop |
Malicious release: Malicious code in chai-as-prompt (npm) MAL-2026-1669 | Malicious | Not scored | 18 Mar, 2026 | npm chai-as-prompt |
Malicious release: Malicious code in chai-as-produced (npm) MAL-2026-1668 | Malicious | Not scored | 18 Mar, 2026 | npm chai-as-produced |
Malicious release: Malicious code in cat-ecommerce-alloy (npm) MAL-2026-1667 | Malicious | Not scored | 18 Mar, 2026 | npm cat-ecommerce-alloy |
Malicious release: Malicious code in carbon-mac-copy-cloner (npm) MAL-2026-1666 | Malicious | Not scored | 18 Mar, 2026 | npm carbon-mac-copy-cloner |
Malicious release: Malicious code in browser-compat-data (npm) MAL-2026-1665 | Malicious | Not scored | 18 Mar, 2026 | npm browser-compat-data |
Malicious release: Malicious code in braze-content-card-island (npm) MAL-2026-1663 | Malicious | Not scored | 18 Mar, 2026 | npm braze-content-card-island |
Malicious release: Malicious code in brisk-web-ssr (npm) MAL-2026-1664 | Malicious | Not scored | 18 Mar, 2026 | npm brisk-web-ssr |
Malicious release: Malicious code in blob-internal-security-test-f63eabf7 (npm) MAL-2026-1662 | Malicious | Not scored | 18 Mar, 2026 | npm blob-internal-security-test-f63eabf7 |
Malicious release: Malicious code in blackstone-core (npm) MAL-2026-1661 | Malicious | Not scored | 18 Mar, 2026 | npm blackstone-core |
Malicious release: Malicious code in bis-schemas (npm) MAL-2026-1660 | Malicious | Not scored | 18 Mar, 2026 | npm bis-schemas |
Malicious release: Malicious code in bcp-security-update (npm) MAL-2026-1658 | Malicious | Not scored | 18 Mar, 2026 | npm bcp-security-update |
Malicious release: Malicious code in bcp-security-updates (npm) MAL-2026-1659 | Malicious | Not scored | 18 Mar, 2026 | npm bcp-security-updates |
Malicious release: Malicious code in backstage-plugin-wpe-catalog (npm) MAL-2026-1657 | Malicious | Not scored | 18 Mar, 2026 | npm backstage-plugin-wpe-catalog |