Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in argonnode (npm) MAL-2026-1656 | Malicious | Not scored | 18 Mar, 2026 | npm argonnode |
Malicious release: Malicious code in aligntyper (npm) MAL-2026-1655 | Malicious | Not scored | 18 Mar, 2026 | npm aligntyper |
Malicious release: Malicious code in aligntypeer (npm) MAL-2026-1654 | Malicious | Not scored | 18 Mar, 2026 | npm aligntypeer |
Malicious release: Malicious code in align-configer (npm) MAL-2026-1653 | Malicious | Not scored | 18 Mar, 2026 | npm align-configer |
Malicious release: Malicious code in alfasec (npm) MAL-2026-1652 | Malicious | Not scored | 18 Mar, 2026 | npm alfasec |
Malicious release: Malicious code in ai-fast-auto-trader (npm) MAL-2026-1651 | Malicious | Not scored | 18 Mar, 2026 | npm ai-fast-auto-trader |
Malicious release: Malicious code in advertising-shared (npm) MAL-2026-1650 | Malicious | Not scored | 18 Mar, 2026 | npm advertising-shared |
Malicious release: Malicious code in advertising-podlet (npm) MAL-2026-1649 | Malicious | Not scored | 18 Mar, 2026 | npm advertising-podlet |
Malicious release: Malicious code in advertising-events (npm) MAL-2026-1648 | Malicious | Not scored | 18 Mar, 2026 | npm advertising-events |
Malicious release: Malicious code in adobe-tracking (npm) MAL-2026-1647 | Malicious | Not scored | 18 Mar, 2026 | npm adobe-tracking |
Malicious release: Malicious code in abstract-http-request (npm) MAL-2026-1646 | Malicious | Not scored | 18 Mar, 2026 | npm abstract-http-request |
Malicious release: Malicious code in aboba-initial (npm) MAL-2026-1645 | Malicious | Not scored | 18 Mar, 2026 | npm aboba-initial |
Malicious release: Malicious code in aboba-docker-check (npm) MAL-2026-1644 | Malicious | Not scored | 18 Mar, 2026 | npm aboba-docker-check |
Malicious release: Malicious code in @vampirchik147/libxmljs2 (npm) MAL-2026-1643 | Malicious | Not scored | 18 Mar, 2026 | npm @vampirchik147/libxmljs2 |
Malicious release: Malicious code in @upstashed/context7-mcp (npm) MAL-2026-1642 | Malicious | Not scored | 18 Mar, 2026 | npm @upstashed/context7-mcp |
Malicious release: Malicious code in @uc-platform/auth (npm) MAL-2026-1640 | Malicious | Not scored | 18 Mar, 2026 | npm @uc-platform/auth |
Malicious release: Malicious code in @uc-platform/user-service-client-ts (npm) MAL-2026-1641 | Malicious | Not scored | 18 Mar, 2026 | npm @uc-platform/user-service-client-ts |
Malicious release: Malicious code in @uc-platform/advertisement-service-client (npm) MAL-2026-1639 | Malicious | Not scored | 18 Mar, 2026 | npm @uc-platform/advertisement-service-client |
Malicious release: Malicious code in @tl-icons/core (npm) MAL-2026-1638 | Malicious | Not scored | 18 Mar, 2026 | npm @tl-icons/core |
Malicious release: Malicious code in @spot-dapp/web (npm) MAL-2026-1637 | Malicious | Not scored | 18 Mar, 2026 | npm @spot-dapp/web |
Malicious release: Malicious code in @sommos/create-leaverule-or-terminationrule-form-data (npm) MAL-2026-1636 | Malicious | Not scored | 18 Mar, 2026 | npm @sommos/create-leaverule-or-terminationrule-form-data |
Malicious release: Malicious code in @polymarket-developers/clob-client (npm) MAL-2026-1635 | Malicious | Not scored | 18 Mar, 2026 | npm @polymarket-developers/clob-client |
Malicious release: Malicious code in @panopto/api-core (npm) MAL-2026-1634 | Malicious | Not scored | 18 Mar, 2026 | npm @panopto/api-core |
Malicious release: Malicious code in @nxt-costco-com/forge-icons (npm) MAL-2026-1633 | Malicious | Not scored | 18 Mar, 2026 | npm @nxt-costco-com/forge-icons |
Malicious release: Malicious code in @nxt-costco-com/forge-design-tokens (npm) MAL-2026-1632 | Malicious | Not scored | 18 Mar, 2026 | npm @nxt-costco-com/forge-design-tokens |
Malicious release: Malicious code in @nxt-costco-com/forge-components (npm) MAL-2026-1631 | Malicious | Not scored | 18 Mar, 2026 | npm @nxt-costco-com/forge-components |
Malicious release: Malicious code in @measures/responsive (npm) MAL-2026-1630 | Malicious | Not scored | 18 Mar, 2026 | npm @measures/responsive |
Malicious release: Malicious code in @legacy-utils/core (npm) MAL-2026-1629 | Malicious | Not scored | 18 Mar, 2026 | npm @legacy-utils/core |
Malicious release: Malicious code in @legacy-ui/core (npm) MAL-2026-1628 | Malicious | Not scored | 18 Mar, 2026 | npm @legacy-ui/core |
Malicious release: Malicious code in @legacy-components/core (npm) MAL-2026-1627 | Malicious | Not scored | 18 Mar, 2026 | npm @legacy-components/core |
Malicious release: Malicious code in @kui-react/table (npm) MAL-2026-1626 | Malicious | Not scored | 18 Mar, 2026 | npm @kui-react/table |
Malicious release: Malicious code in @kui-react/button (npm) MAL-2026-1625 | Malicious | Not scored | 18 Mar, 2026 | npm @kui-react/button |
Malicious release: Malicious code in @inter-ikea-gallery/integration (npm) MAL-2026-1624 | Malicious | Not scored | 18 Mar, 2026 | npm @inter-ikea-gallery/integration |
Malicious release: Malicious code in @f5rest/odata-v4-service-metadata (npm) MAL-2026-1623 | Malicious | Not scored | 18 Mar, 2026 | npm @f5rest/odata-v4-service-metadata |
Malicious release: Malicious code in @f5rest/odata-v4-server (npm) MAL-2026-1622 | Malicious | Not scored | 18 Mar, 2026 | npm @f5rest/odata-v4-server |
Malicious release: Malicious code in @f5rest/odata-v4-metadata (npm) MAL-2026-1620 | Malicious | Not scored | 18 Mar, 2026 | npm @f5rest/odata-v4-metadata |
Malicious release: Malicious code in @f5rest/odata-v4-parser (npm) MAL-2026-1621 | Malicious | Not scored | 18 Mar, 2026 | npm @f5rest/odata-v4-parser |
Malicious release: Malicious code in @f5rest/odata-v4-inmemory (npm) MAL-2026-1619 | Malicious | Not scored | 18 Mar, 2026 | npm @f5rest/odata-v4-inmemory |
Malicious release: Malicious code in @f5rest/odata-lens (npm) MAL-2026-1618 | Malicious | Not scored | 18 Mar, 2026 | npm @f5rest/odata-lens |
Malicious release: Malicious code in @f5rest/icr-odata-adapter (npm) MAL-2026-1617 | Malicious | Not scored | 18 Mar, 2026 | npm @f5rest/icr-odata-adapter |
Malicious release: Malicious code in @f5rest/icr-metadata-generator (npm) MAL-2026-1616 | Malicious | Not scored | 18 Mar, 2026 | npm @f5rest/icr-metadata-generator |
Malicious release: Malicious code in @emerald-react/menu (npm) MAL-2026-1615 | Malicious | Not scored | 18 Mar, 2026 | npm @emerald-react/menu |
Malicious release: Malicious code in @emerald-react/list (npm) MAL-2026-1614 | Malicious | Not scored | 18 Mar, 2026 | npm @emerald-react/list |
Malicious release: Malicious code in @emerald-react/input (npm) MAL-2026-1612 | Malicious | Not scored | 18 Mar, 2026 | npm @emerald-react/input |
Malicious release: Malicious code in @emerald-react/label (npm) MAL-2026-1613 | Malicious | Not scored | 18 Mar, 2026 | npm @emerald-react/label |
Malicious release: Malicious code in @emerald-react/icon-button (npm) MAL-2026-1611 | Malicious | Not scored | 18 Mar, 2026 | npm @emerald-react/icon-button |
Malicious release: Malicious code in @emerald-react/icon (npm) MAL-2026-1610 | Malicious | Not scored | 18 Mar, 2026 | npm @emerald-react/icon |
Malicious release: Malicious code in @emerald-react/ellis-ai-icon (npm) MAL-2026-1609 | Malicious | Not scored | 18 Mar, 2026 | npm @emerald-react/ellis-ai-icon |
Malicious release: Malicious code in @emerald-react/dropdown (npm) MAL-2026-1608 | Malicious | Not scored | 18 Mar, 2026 | npm @emerald-react/dropdown |
Malicious release: Malicious code in @emerald-react/divider (npm) MAL-2026-1607 | Malicious | Not scored | 18 Mar, 2026 | npm @emerald-react/divider |