Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @teamolduser/baileys (npm) MAL-2026-17380 | Malicious | Not scored | 30 Sep, 2026 | npm @teamolduser/baileys |
Malicious release: Malicious code in anuaja (npm) MAL-2026-17386 | Malicious | Not scored | 30 Sep, 2026 | npm anuaja |
Malicious release: Malicious code in eliteprotech-baileys (npm) MAL-2026-17391 | Malicious | Not scored | 30 Sep, 2026 | npm eliteprotech-baileys |
Malicious release: Malicious code in focashi (npm) MAL-2026-17392 | Malicious | Not scored | 30 Sep, 2026 | npm focashi |
Malicious release: Malicious code in ishumdz-bail (npm) MAL-2026-17393 | Malicious | Not scored | 30 Sep, 2026 | npm ishumdz-bail |
Malicious release: Malicious code in kasabaileys (npm) MAL-2026-17394 | Malicious | Not scored | 30 Sep, 2026 | npm kasabaileys |
Malicious release: Malicious code in keithbaileys (npm) MAL-2026-17395 | Malicious | Not scored | 30 Sep, 2026 | npm keithbaileys |
Malicious release: Malicious code in levvleys (npm) MAL-2026-17397 | Malicious | Not scored | 30 Sep, 2026 | npm levvleys |
Malicious release: Malicious code in lilys-baileys (npm) MAL-2026-17398 | Malicious | Not scored | 30 Sep, 2026 | npm lilys-baileys |
Malicious release: Malicious code in noverojs (npm) MAL-2026-17401 | Malicious | Not scored | 30 Sep, 2026 | npm noverojs |
Malicious release: Malicious code in noxxleys (npm) MAL-2026-17403 | Malicious | Not scored | 30 Sep, 2026 | npm noxxleys |
Malicious release: Malicious code in spencer-baileys (npm) MAL-2026-17406 | Malicious | Not scored | 30 Sep, 2026 | npm spencer-baileys |
Malicious release: Malicious code in syncxbails (npm) MAL-2026-17407 | Malicious | Not scored | 30 Sep, 2026 | npm syncxbails |
Malicious release: Malicious code in xvinleys (npm) MAL-2026-17409 | Malicious | Not scored | 30 Sep, 2026 | npm xvinleys |
Malicious release: Malicious code in xzvbails (npm) MAL-2026-17411 | Malicious | Not scored | 30 Sep, 2026 | npm xzvbails |
Malicious release: Malicious code in yonzofficial (npm) MAL-2026-17414 | Malicious | Not scored | 30 Sep, 2026 | npm yonzofficial |
Malicious release: Malicious code in reactjs-risk (npm) MAL-2026-17339 | Malicious | Not scored | 30 Sep, 2026 | npm reactjs-risk |
Malicious release: Malicious code in apl-rive-renderer (npm) MAL-2026-17431 | Malicious | Not scored | 30 Sep, 2026 | npm apl-rive-renderer |
Malicious release: Malicious code in brioche-apl-dev-env (npm) MAL-2026-17432 | Malicious | Not scored | 30 Sep, 2026 | npm brioche-apl-dev-env |
Malicious release: Malicious code in figma-to-apl (npm) MAL-2026-17433 | Malicious | Not scored | 30 Sep, 2026 | npm figma-to-apl |
Malicious release: Malicious code in live-detection-dashboard (npm) MAL-2026-17434 | Malicious | Not scored | 30 Sep, 2026 | npm live-detection-dashboard |
Malicious release: Malicious code in niksinnkatalapp (npm) MAL-2026-17435 | Malicious | Not scored | 30 Sep, 2026 | npm niksinnkatalapp |
Malicious release: Malicious code in ai-workshop-maa15-radio (npm) MAL-2026-17427 | Malicious | Not scored | 30 Sep, 2026 | npm ai-workshop-maa15-radio |
Malicious release: Malicious code in ai-workshop-radio-app (npm) MAL-2026-17428 | Malicious | Not scored | 30 Sep, 2026 | npm ai-workshop-radio-app |
Malicious release: Malicious code in ai-workshop-radio-lambda (npm) MAL-2026-17429 | Malicious | Not scored | 30 Sep, 2026 | npm ai-workshop-radio-lambda |
Malicious release: Malicious code in alexa-cybertron-team-code-review-agent (npm) MAL-2026-17430 | Malicious | Not scored | 30 Sep, 2026 | npm alexa-cybertron-team-code-review-agent |
Malicious release: Malicious code in okra-cloud-cdk (npm) MAL-2026-17436 | Malicious | Not scored | 30 Sep, 2026 | npm okra-cloud-cdk |
Malicious release: Malicious code in @cat-gen/material (npm) GHSA-m7x3-q6r8-p5rg, MAL-2026-17334 | Malicious | Not scored | 30 Sep, 2026 | npm @cat-gen/material |
Malicious release: Malicious code in @cat-gen/materia (npm) GHSA-m8g8-xcgx-j6hw, MAL-2026-17333 | Malicious | Not scored | 30 Sep, 2026 | npm @cat-gen/materia |
Malicious release: Malicious code in @firelordzuka/pulse-poc (npm) GHSA-h645-43f8-g987, MAL-2026-17335 | Malicious | Not scored | 30 Sep, 2026 | npm @firelordzuka/pulse-poc |
Malicious release: Malicious code in link-status-page (npm) GHSA-5j3f-rr83-xcpq, MAL-2026-17338 | Malicious | Not scored | 30 Sep, 2026 | npm link-status-page |
Malicious release: Malicious code in link-age-great (npm) GHSA-jmrg-vr2j-j96x, MAL-2026-17337 | Malicious | Not scored | 30 Sep, 2026 | npm link-age-great |
Malicious release: Malicious code in @redman89405/my-module (npm) GHSA-vc53-jhh2-pwf3, MAL-2026-17336 | Malicious | Not scored | 30 Sep, 2026 | npm @redman89405/my-module |
Malicious release: Malicious code in runhelper (npm) MAL-2026-17332 | Malicious | Not scored | 30 Sep, 2026 | npm runhelper |
Malicious release: Malicious code in iban-validator-js (npm) GHSA-wg95-pj2w-mm76, MAL-2026-17331 | Malicious | Not scored | 30 Sep, 2026 | npm iban-validator-js |
Malicious release: Malicious code in focaleys (npm) MAL-2026-17329 | Malicious | Not scored | 30 Sep, 2026 | npm focaleys |
Malicious release: Malicious code in fca-raihan (npm) MAL-2026-17328 | Malicious | Not scored | 30 Sep, 2026 | npm fca-raihan |
Malicious release: Malicious code in exiouss (npm) MAL-2026-17327 | Malicious | Not scored | 30 Sep, 2026 | npm exiouss |
Malicious release: Malicious code in imgbundle (npm) GHSA-hj6h-6xgx-mpjv, MAL-2026-17330 | Malicious | Not scored | 30 Sep, 2026 | npm imgbundle |
Malicious release: Malicious code in contoso-login-sim-loader (npm) MAL-2026-17322 | Malicious | Not scored | 30 Sep, 2026 | npm contoso-login-sim-loader |
Malicious release: Malicious code in cdn-img-fetch (npm) GHSA-v3rj-w7v4-jcfx, MAL-2026-17320 | Malicious | Not scored | 30 Sep, 2026 | npm cdn-img-fetch |
Malicious release: Malicious code in cortana-md-engine (npm) MAL-2026-17323 | Malicious | Not scored | 30 Sep, 2026 | npm cortana-md-engine |
Malicious release: Malicious code in chaienv (npm) MAL-2026-17321 | Malicious | Not scored | 30 Sep, 2026 | npm chaienv |
Malicious release: Malicious code in booking-eligibility (npm) MAL-2026-17316 | Malicious | Not scored | 30 Sep, 2026 | npm booking-eligibility |
Malicious release: Malicious code in developmentstelemetry (npm) MAL-2026-17318 | Malicious | Not scored | 30 Sep, 2026 | npm developmentstelemetry |
Malicious release: Malicious code in booking-tasks (npm) MAL-2026-17317 | Malicious | Not scored | 30 Sep, 2026 | npm booking-tasks |
Malicious release: Malicious code in pixsvg (npm) MAL-2026-17313 | Malicious | Not scored | 30 Sep, 2026 | npm pixsvg |
Malicious release: Malicious code in json-bigint-rs (npm) MAL-2026-17312 | Malicious | Not scored | 30 Sep, 2026 | npm json-bigint-rs |
Malicious release: Malicious code in test-supply-npm-lib-4 (npm) MAL-2026-17314 | Malicious | Not scored | 30 Sep, 2026 | npm test-supply-npm-lib-4 |
Malicious release: Malicious code in itsmeeaizat-bailey (npm) GHSA-r64h-xc26-m8ww, MAL-2026-17311 | Malicious | Not scored | 30 Sep, 2026 | npm itsmeeaizat-bailey |