Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @emerald-react/datepicker (npm) MAL-2026-1606 | Malicious | Not scored | 18 Mar, 2026 | npm @emerald-react/datepicker |
Malicious release: Malicious code in @emerald-react/data-table (npm) MAL-2026-1605 | Malicious | Not scored | 18 Mar, 2026 | npm @emerald-react/data-table |
Malicious release: Malicious code in @emerald-react/core (npm) MAL-2026-1604 | Malicious | Not scored | 18 Mar, 2026 | npm @emerald-react/core |
Malicious release: Malicious code in @emerald-react/checkbox (npm) MAL-2026-1603 | Malicious | Not scored | 18 Mar, 2026 | npm @emerald-react/checkbox |
Malicious release: Malicious code in @emerald-react/chat-bot (npm) MAL-2026-1602 | Malicious | Not scored | 18 Mar, 2026 | npm @emerald-react/chat-bot |
Malicious release: Malicious code in @emerald-react/button (npm) MAL-2026-1601 | Malicious | Not scored | 18 Mar, 2026 | npm @emerald-react/button |
Malicious release: Malicious code in @emerald-react/banner (npm) MAL-2026-1600 | Malicious | Not scored | 18 Mar, 2026 | npm @emerald-react/banner |
Malicious release: Malicious code in @emerald-react/badge (npm) MAL-2026-1599 | Malicious | Not scored | 18 Mar, 2026 | npm @emerald-react/badge |
Malicious release: Malicious code in @emerald-react/avatar (npm) MAL-2026-1598 | Malicious | Not scored | 18 Mar, 2026 | npm @emerald-react/avatar |
Malicious release: Malicious code in @emerald-react/autocomplete (npm) MAL-2026-1597 | Malicious | Not scored | 18 Mar, 2026 | npm @emerald-react/autocomplete |
Malicious release: Malicious code in @emerald-react/app-header (npm) MAL-2026-1596 | Malicious | Not scored | 18 Mar, 2026 | npm @emerald-react/app-header |
Malicious release: Malicious code in @commonschema/blackstone-core (npm) MAL-2026-1595 | Malicious | Not scored | 18 Mar, 2026 | npm @commonschema/blackstone-core |
Malicious release: Malicious code in @cewe-onsitesearch/schemas (npm) MAL-2026-1594 | Malicious | Not scored | 18 Mar, 2026 | npm @cewe-onsitesearch/schemas |
Malicious release: Malicious code in @cbreone/utilities (npm) MAL-2026-1593 | Malicious | Not scored | 18 Mar, 2026 | npm @cbreone/utilities |
Malicious release: Malicious code in @cbreone/survey-ui (npm) MAL-2026-1592 | Malicious | Not scored | 18 Mar, 2026 | npm @cbreone/survey-ui |
Malicious release: Malicious code in @cbreone/micro-ui-survey (npm) MAL-2026-1591 | Malicious | Not scored | 18 Mar, 2026 | npm @cbreone/micro-ui-survey |
Malicious release: Malicious code in @cbreone/core-ui (npm) MAL-2026-1590 | Malicious | Not scored | 18 Mar, 2026 | npm @cbreone/core-ui |
Malicious release: Malicious code in @cbreone/core-services (npm) MAL-2026-1589 | Malicious | Not scored | 18 Mar, 2026 | npm @cbreone/core-services |
Malicious release: Malicious code in @bingads-webui-help/apex.core.v3.min (npm) MAL-2026-1588 | Malicious | Not scored | 18 Mar, 2026 | npm @bingads-webui-help/apex.core.v3.min |
Malicious release: Malicious code in @bingads-webui-cc-react/edit-primary-contact (npm) MAL-2026-1587 | Malicious | Not scored | 18 Mar, 2026 | npm @bingads-webui-cc-react/edit-primary-contact |
Malicious release: Malicious code in @at-point/valiant-widgets-v2 (npm) MAL-2026-1586 | Malicious | Not scored | 18 Mar, 2026 | npm @at-point/valiant-widgets-v2 |
Malicious release: Malicious code in @anchor-ds/core (npm) GHSA-w4ff-rwjv-9xxj, MAL-2026-1585 | Malicious | Not scored | 18 Mar, 2026 | npm @anchor-ds/core |
Malicious release: Malicious code in bugbounty-test-123 (npm) MAL-2026-1542 | Malicious | Not scored | 18 Mar, 2026 | npm bugbounty-test-123 |
Malicious release: Malicious code in whatfix-icons (npm) MAL-2026-1495 | Malicious | Not scored | 17 Mar, 2026 | npm whatfix-icons |
Malicious release: Malicious code in navi-design-system (npm) MAL-2026-1494 | Malicious | Not scored | 17 Mar, 2026 | npm navi-design-system |
Malicious release: Malicious code in pino-logger-utils (npm) GHSA-9vc6-vqg8-v9x5, MAL-2026-1493 | Malicious | Not scored | 17 Mar, 2026 | npm pino-logger-utils |
Malicious release: Malicious code in strapi-plugin-workspace-plugin (npm) GHSA-7cc2-4g9h-6fxf, MAL-2026-1492 | Malicious | Not scored | 17 Mar, 2026 | npm strapi-plugin-workspace-plugin |
Malicious release: Malicious code in ember-power-calendar-utils (npm) GHSA-mcfw-v5xh-957q, MAL-2026-1490 | Malicious | Not scored | 17 Mar, 2026 | npm ember-power-calendar-utils |
Malicious release: Malicious code in asset-delivery (npm) GHSA-w6x5-44p2-gjvf, MAL-2026-1489 | Malicious | Not scored | 17 Mar, 2026 | npm asset-delivery |
Malicious release: Malicious code in graphlib-js (npm) GHSA-mfcc-4344-rj22, MAL-2026-1491 | Malicious | Not scored | 17 Mar, 2026 | npm graphlib-js |
Malicious release: Malicious code in revolut-merchant-widget (npm) GHSA-gpc2-rm7h-fpc4, MAL-2026-1481 | Malicious | Not scored | 16 Mar, 2026 | npm revolut-merchant-widget |
Malicious release: Malicious code in delta666 (npm) GHSA-4x9x-f5f2-fpw5, MAL-2026-1475 | Malicious | Not scored | 16 Mar, 2026 | npm delta666 |
Malicious release: Malicious code in alinet (npm) GHSA-6cmf-j596-2qj3, MAL-2026-1474 | Malicious | Not scored | 16 Mar, 2026 | npm alinet |
Malicious release: Malicious code in aesdecryptor (npm) GHSA-87mr-4wrw-h27g, MAL-2026-1473 | Malicious | Not scored | 16 Mar, 2026 | npm aesdecryptor |
Malicious release: Malicious code in supply-hx (npm) GHSA-qhvq-pqqm-67f9, MAL-2026-1477 | Malicious | Not scored | 16 Mar, 2026 | npm supply-hx |
Malicious release: Malicious code in jalalstealer (npm) GHSA-rvf8-cxqj-3hgq, MAL-2026-1476 | Malicious | Not scored | 16 Mar, 2026 | npm jalalstealer |
Malicious release: Malicious code in wordpecker-fx (npm) GHSA-vpgj-75r2-c557, MAL-2026-1478 | Malicious | Not scored | 16 Mar, 2026 | npm wordpecker-fx |
Malicious release: Malicious code in n8n-nodes-data-transform (npm) GHSA-247f-gpc6-j9v6, MAL-2026-1468 | Malicious | Not scored | 16 Mar, 2026 | npm n8n-nodes-data-transform |
Malicious release: Malicious code in n8n-nodes-format-utils (npm) GHSA-28fq-xgq3-mpwc, MAL-2026-1469 | Malicious | Not scored | 16 Mar, 2026 | npm n8n-nodes-format-utils |
Malicious release: Malicious code in n8n-nodes-json-helper (npm) GHSA-2grx-v7mh-7qrq, MAL-2026-1470 | Malicious | Not scored | 16 Mar, 2026 | npm n8n-nodes-json-helper |
Malicious release: Malicious code in n8n-nodes-csv-parse (npm) GHSA-ffvh-hxxc-qgqq, MAL-2026-1467 | Malicious | Not scored | 16 Mar, 2026 | npm n8n-nodes-csv-parse |
Malicious release: Malicious code in n8n-nodes-xml-utils (npm) GHSA-fm65-938r-jvjw, MAL-2026-1472 | Malicious | Not scored | 16 Mar, 2026 | npm n8n-nodes-xml-utils |
Malicious release: Malicious code in n8n-nodes-text-utils (npm) GHSA-m4cr-jqq9-pf5g, MAL-2026-1471 | Malicious | Not scored | 16 Mar, 2026 | npm n8n-nodes-text-utils |
Malicious release: Malicious code in hariprasath (npm) GHSA-fm2v-p7vm-ccc3, MAL-2026-1465 | Malicious | Not scored | 16 Mar, 2026 | npm hariprasath |
Malicious release: Malicious code in supplychain-security-demo (npm) GHSA-mcp5-j24x-66wp, MAL-2026-1466 | Malicious | Not scored | 16 Mar, 2026 | npm supplychain-security-demo |
Malicious release: Malicious code in @jaime9008/math-service (npm) GHSA-rg2r-h6hr-96rp, MAL-2026-1483 | Malicious | Not scored | 16 Mar, 2026 | npm @jaime9008/math-service |
Malicious release: Malicious code in pretty-changelog-logger (npm) GHSA-3vhh-6v5q-2pqr, MAL-2026-1464 | Malicious | Not scored | 16 Mar, 2026 | npm pretty-changelog-logger |
Malicious release: Malicious code in changelog-logger-wrapper (npm) GHSA-7mxm-q4r9-c76c, MAL-2026-1460 | Malicious | Not scored | 16 Mar, 2026 | npm changelog-logger-wrapper |
Malicious release: Malicious code in polymarket-validator (npm) GHSA-8gcg-fc8h-ph97, MAL-2026-1463 | Malicious | Not scored | 16 Mar, 2026 | npm polymarket-validator |
Malicious release: Malicious code in changelog-logger-utilities (npm) GHSA-9qjw-vmcc-7pvj, MAL-2026-1459 | Malicious | Not scored | 16 Mar, 2026 | npm changelog-logger-utilities |