Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in typescript-react-query (npm) GHSA-fj6q-vgx9-hr52, MAL-2026-1553 | Malicious | Not scored | 16 Mar, 2026 | npm typescript-react-query |
Malicious release: Malicious code in filenames-simple (npm) GHSA-fm43-2f72-p329, MAL-2026-1517 | Malicious | Not scored | 16 Mar, 2026 | npm filenames-simple |
Malicious release: Malicious code in vue-scoped-css (npm) GHSA-g4q9-p378-mc3g, MAL-2026-1538 | Malicious | Not scored | 16 Mar, 2026 | npm vue-scoped-css |
Malicious release: Malicious code in dazaar-payment (npm) GHSA-g9pf-gwx4-x568, MAL-2026-1546 | Malicious | Not scored | 16 Mar, 2026 | npm dazaar-payment |
Malicious release: Malicious code in react-you-might-not-need-an-effect (npm) GHSA-ghf2-4c5x-7jh3, MAL-2026-1528 | Malicious | Not scored | 16 Mar, 2026 | npm react-you-might-not-need-an-effect |
Malicious release: Malicious code in transform-dev (npm) GHSA-gqcg-fhwr-45c8, MAL-2026-1534 | Malicious | Not scored | 16 Mar, 2026 | npm transform-dev |
Malicious release: Malicious code in better-styled-components (npm) GHSA-h4ff-5jjf-rqxr, MAL-2026-1502 | Malicious | Not scored | 16 Mar, 2026 | npm better-styled-components |
Malicious release: Malicious code in transform-dev-warning (npm) GHSA-h78m-c55g-qqwc, MAL-2026-1535 | Malicious | Not scored | 16 Mar, 2026 | npm transform-dev-warning |
Malicious release: Malicious code in transform-proto-to-assign (npm) GHSA-h95x-pph2-h496, MAL-2026-1573 | Malicious | Not scored | 16 Mar, 2026 | npm transform-proto-to-assign |
Malicious release: Malicious code in syntax-do-expressions (npm) GHSA-hjqm-4p7q-4wg6, MAL-2026-1549 | Malicious | Not scored | 16 Mar, 2026 | npm syntax-do-expressions |
Malicious release: Malicious code in transform-property-literals (npm) GHSA-hq5h-wj2c-3mhf, MAL-2026-1507 | Malicious | Not scored | 16 Mar, 2026 | npm transform-property-literals |
Malicious release: Malicious code in transform-typescript (npm) GHSA-j74c-w64f-9wg5, MAL-2026-1575 | Malicious | Not scored | 16 Mar, 2026 | npm transform-typescript |
Malicious release: Malicious code in @storylane/shared-packages (npm) GHSA-j7r9-77fw-4wx4, MAL-2026-1500 | Malicious | Not scored | 16 Mar, 2026 | npm @storylane/shared-packages |
Malicious release: Malicious code in syntax-decorators (npm) GHSA-jmf7-h988-c98c, MAL-2026-1531 | Malicious | Not scored | 16 Mar, 2026 | npm syntax-decorators |
Malicious release: Malicious code in transform-jscript (npm) GHSA-jrmp-x4fh-9fwr, MAL-2026-1505 | Malicious | Not scored | 16 Mar, 2026 | npm transform-jscript |
Malicious release: Malicious code in declaration-block-no-ignored-properties (npm) GHSA-jx3f-48fj-jgmw, MAL-2026-1514 | Malicious | Not scored | 16 Mar, 2026 | npm declaration-block-no-ignored-properties |
Malicious release: Malicious code in @storylane/uikit (npm) GHSA-m2gh-pw4c-p8f6, MAL-2026-1501 | Malicious | Not scored | 16 Mar, 2026 | npm @storylane/uikit |
Malicious release: Malicious code in transform-json-strings (npm) GHSA-m6hv-9gh4-4c85, MAL-2026-1569 | Malicious | Not scored | 16 Mar, 2026 | npm transform-json-strings |
Malicious release: Malicious code in undeclared-variables-check (npm) GHSA-mj24-hqwm-h9vr, MAL-2026-1512 | Malicious | Not scored | 16 Mar, 2026 | npm undeclared-variables-check |
Malicious release: Malicious code in typescript-nhost (npm) GHSA-mm3f-jjww-x883, MAL-2026-1552 | Malicious | Not scored | 16 Mar, 2026 | npm typescript-nhost |
Malicious release: Malicious code in import-newlines (npm) GHSA-mqq4-c9r8-wr6r, MAL-2026-1519 | Malicious | Not scored | 16 Mar, 2026 | npm import-newlines |
Malicious release: Malicious code in lit-a11y (npm) GHSA-p2f8-jq4c-jj37, MAL-2026-1521 | Malicious | Not scored | 16 Mar, 2026 | npm lit-a11y |
Malicious release: Malicious code in ignore-html-and-css-imports (npm) GHSA-p5q7-6jvf-626x, MAL-2026-1518 | Malicious | Not scored | 16 Mar, 2026 | npm ignore-html-and-css-imports |
Malicious release: Malicious code in vitest-globals (npm) GHSA-p89j-34hq-pxq7, MAL-2026-1513 | Malicious | Not scored | 16 Mar, 2026 | npm vitest-globals |
Malicious release: Malicious code in dazaar-cli (npm) GHSA-px23-hx8x-3mm4, MAL-2026-1545 | Malicious | Not scored | 16 Mar, 2026 | npm dazaar-cli |
Malicious release: Malicious code in jam3 (npm) GHSA-q264-gcg5-jqww, MAL-2026-1520 | Malicious | Not scored | 16 Mar, 2026 | npm jam3 |
Malicious release: Malicious code in todo-plz (npm) GHSA-q93m-663h-q987, MAL-2026-1533 | Malicious | Not scored | 16 Mar, 2026 | npm todo-plz |
Malicious release: Malicious code in transform-undefined-to-void (npm) GHSA-qw7p-5225-6543, MAL-2026-1511 | Malicious | Not scored | 16 Mar, 2026 | npm transform-undefined-to-void |
Malicious release: Malicious code in syntax-exponentiation-operator (npm) GHSA-qxc7-5ccf-87rp, MAL-2026-1532 | Malicious | Not scored | 16 Mar, 2026 | npm syntax-exponentiation-operator |
Malicious release: Malicious code in no-type-assertion (npm) GHSA-qxf6-x9c5-qxr4, MAL-2026-1524 | Malicious | Not scored | 16 Mar, 2026 | npm no-type-assertion |
Malicious release: Malicious code in typescript-rtk-query (npm) GHSA-r4j3-rfqp-vmpm, MAL-2026-1537 | Malicious | Not scored | 16 Mar, 2026 | npm typescript-rtk-query |
Malicious release: Malicious code in transform-react-jsx (npm) GHSA-r5j4-qcgp-2hrj, MAL-2026-1508 | Malicious | Not scored | 16 Mar, 2026 | npm transform-react-jsx |
Malicious release: Malicious code in transform-export-extensions (npm) GHSA-r6qh-rm6v-7pvx, MAL-2026-1565 | Malicious | Not scored | 16 Mar, 2026 | npm transform-export-extensions |
Malicious release: Malicious code in transform-simplify-comparison-operators (npm) GHSA-r9vm-77cr-58hj, MAL-2026-1510 | Malicious | Not scored | 16 Mar, 2026 | npm transform-simplify-comparison-operators |
Malicious release: Malicious code in prefer-let (npm) GHSA-rc2x-j8vj-mr6f, MAL-2026-1526 | Malicious | Not scored | 16 Mar, 2026 | npm prefer-let |
Malicious release: Malicious code in transform-member-expression-literals (npm) GHSA-rm67-f2rf-9fwf, MAL-2026-1570 | Malicious | Not scored | 16 Mar, 2026 | npm transform-member-expression-literals |
Malicious release: Malicious code in minify-mangle-names (npm) GHSA-v3vq-pp56-3jx5, MAL-2026-1522 | Malicious | Not scored | 16 Mar, 2026 | npm minify-mangle-names |
Malicious release: Malicious code in transform-new-target (npm) GHSA-vpx7-g2h6-rq6c, MAL-2026-1572 | Malicious | Not scored | 16 Mar, 2026 | npm transform-new-target |
Malicious release: Malicious code in transform-modules-systemjs (npm) GHSA-wc64-r4v7-rjwr, MAL-2026-1571 | Malicious | Not scored | 16 Mar, 2026 | npm transform-modules-systemjs |
Malicious release: Malicious code in transform-es2015-duplicate-keys (npm) GHSA-wgjr-2vhj-qwv7, MAL-2026-1561 | Malicious | Not scored | 16 Mar, 2026 | npm transform-es2015-duplicate-keys |
Malicious release: Malicious code in syntax-export-extensions (npm) GHSA-whjj-mhxg-67rv, MAL-2026-1550 | Malicious | Not scored | 16 Mar, 2026 | npm syntax-export-extensions |
Malicious release: Malicious code in typescript-vue-apollo-smart-ops (npm) GHSA-x3pj-5gcc-j9rh, MAL-2026-1555 | Malicious | Not scored | 16 Mar, 2026 | npm typescript-vue-apollo-smart-ops |
Malicious release: Malicious code in syntax-async-generators (npm) GHSA-x49c-wrwr-8p2q, MAL-2026-1558 | Malicious | Not scored | 16 Mar, 2026 | npm syntax-async-generators |
Malicious release: Malicious code in typescript-type-graphql (npm) GHSA-x56x-pjgc-r3cm, MAL-2026-1540 | Malicious | Not scored | 16 Mar, 2026 | npm typescript-type-graphql |
Malicious release: Malicious code in transform-regexp-constructors (npm) MAL-2026-3125 | Malicious | Not scored | 16 Mar, 2026 | npm transform-regexp-constructors |
Malicious release: Malicious code in @3stripes/common (npm) MAL-2026-1426 | Malicious | Not scored | 15 Mar, 2026 | npm @3stripes/common |
Malicious release: Malicious code in @3stripes/auth (npm) MAL-2026-1425 | Malicious | Not scored | 15 Mar, 2026 | npm @3stripes/auth |
Malicious release: Malicious code in @3stripes/helpers (npm) MAL-2026-1427 | Malicious | Not scored | 15 Mar, 2026 | npm @3stripes/helpers |
Malicious release: Malicious code in @3stripes/api-client (npm) MAL-2026-1424 | Malicious | Not scored | 15 Mar, 2026 | npm @3stripes/api-client |
Malicious release: Malicious code in @3stripes/utils (npm) MAL-2026-1430 | Malicious | Not scored | 15 Mar, 2026 | npm @3stripes/utils |