Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in mezukabil (npm) GHSA-gx7x-gm3r-rcxv, MAL-2026-1370 | Malicious | Not scored | 12 Mar, 2026 | npm mezukabil |
Malicious release: Malicious code in @kinggupong/baileys (npm) GHSA-786q-6xgv-455x, MAL-2026-1366 | Malicious | Not scored | 12 Mar, 2026 | npm @kinggupong/baileys |
Malicious release: Malicious code in kinggupong (npm) GHSA-953p-rf5p-cp9c, MAL-2026-1369 | Malicious | Not scored | 12 Mar, 2026 | npm kinggupong |
Malicious release: Malicious code in @kinggupong/libsignal-node (npm) GHSA-qjv5-rg93-2qhv, MAL-2026-1367 | Malicious | Not scored | 12 Mar, 2026 | npm @kinggupong/libsignal-node |
Malicious release: Malicious code in praxis-scripts (npm) GHSA-37c2-jh79-3hh6, MAL-2026-1362 | Malicious | Not scored | 12 Mar, 2026 | npm praxis-scripts |
Malicious release: Malicious code in pcl-build-docroot (npm) GHSA-9fgh-86m3-xx7g, MAL-2026-1361 | Malicious | Not scored | 12 Mar, 2026 | npm pcl-build-docroot |
Malicious release: Malicious code in unibody (npm) GHSA-v8gw-679q-2rc3, MAL-2026-1365 | Malicious | Not scored | 12 Mar, 2026 | npm unibody |
Malicious release: Malicious code in libsignal-mod (npm) GHSA-2wrw-p8q7-2vff, MAL-2026-1359 | Malicious | Not scored | 12 Mar, 2026 | npm libsignal-mod |
Malicious release: Malicious code in dappa-libsignal (npm) GHSA-vpw8-364r-vpp5, MAL-2026-1358 | Malicious | Not scored | 12 Mar, 2026 | npm dappa-libsignal |
Malicious release: Malicious code in @dappaoffc/baileys-mod (npm) GHSA-8xvm-wjf7-r5wq, MAL-2026-1355 | Malicious | Not scored | 12 Mar, 2026 | npm @dappaoffc/baileys-mod |
Malicious release: Malicious code in @dappaoffc/baileys (npm) GHSA-x7j8-crq4-jwgr, MAL-2026-1354 | Malicious | Not scored | 12 Mar, 2026 | npm @dappaoffc/baileys |
Malicious release: Malicious code in react-svg-anchor (npm) GHSA-rqq3-hgxg-3j76, MAL-2026-1363 | Malicious | Not scored | 12 Mar, 2026 | npm react-svg-anchor |
Malicious release: Malicious code in bign.ts (npm) GHSA-75ch-f3xh-qrc4, MAL-2026-1357 | Malicious | Not scored | 12 Mar, 2026 | npm bign.ts |
Malicious release: Malicious code in npm-doc-build (npm) GHSA-r89p-9949-2qj7, MAL-2026-1360 | Malicious | Not scored | 12 Mar, 2026 | npm npm-doc-build |
Malicious release: Malicious code in b2b-common-cb-lib (npm) GHSA-3g6j-9975-jm52, MAL-2026-1356 | Malicious | Not scored | 12 Mar, 2026 | npm b2b-common-cb-lib |
Malicious release: Malicious code in svg-safety-tool (npm) GHSA-5wq3-6mmg-x8x9, MAL-2026-1364 | Malicious | Not scored | 12 Mar, 2026 | npm svg-safety-tool |
Malicious release: Malicious code in jinja-template (npm) GHSA-42gx-7w4g-27q2, MAL-2026-1352 | Malicious | Not scored | 12 Mar, 2026 | npm jinja-template |
Malicious release: Malicious code in restrict-imports (npm) GHSA-w874-2fc5-93fx, MAL-2026-1353 | Malicious | Not scored | 12 Mar, 2026 | npm restrict-imports |
Malicious release: Malicious code in f0-abstraction-resolver (npm) MAL-2026-1347 | Malicious | Not scored | 11 Mar, 2026 | npm f0-abstraction-resolver |
Malicious release: Malicious code in locale-clamp-middleware (npm) MAL-2026-1348 | Malicious | Not scored | 11 Mar, 2026 | npm locale-clamp-middleware |
Malicious release: Malicious code in mabibilabub (npm) MAL-2026-1349 | Malicious | Not scored | 11 Mar, 2026 | npm mabibilabub |
Malicious release: Malicious code in bignum-ts (npm) GHSA-3xc3-xrqv-fjx6, MAL-2026-1344 | Malicious | Not scored | 11 Mar, 2026 | npm bignum-ts |
Malicious release: Malicious code in npm-builders (npm) GHSA-fjr5-82h6-f8gr, MAL-2026-1345 | Malicious | Not scored | 11 Mar, 2026 | npm npm-builders |
Malicious release: Malicious code in ts-lint-builder (npm) GHSA-mxvj-m5xp-m9xg, MAL-2026-1346 | Malicious | Not scored | 11 Mar, 2026 | npm ts-lint-builder |
Malicious release: Malicious code in chai-as-flex (npm) GHSA-p3rj-3q6f-wvp8, MAL-2026-1343 | Malicious | Not scored | 11 Mar, 2026 | npm chai-as-flex |
Malicious release: Malicious code in polygon-gamma-api (npm) GHSA-39j3-68gf-vh7w, MAL-2026-1333 | Malicious | Not scored | 11 Mar, 2026 | npm polygon-gamma-api |
Malicious release: Malicious code in tailwindcss-animate-framer (npm) GHSA-6wp3-j2v8-4jg5, MAL-2026-1335 | Malicious | Not scored | 11 Mar, 2026 | npm tailwindcss-animate-framer |
Malicious release: Malicious code in vite-chunker (npm) GHSA-f786-3r3g-h442, MAL-2026-1338 | Malicious | Not scored | 11 Mar, 2026 | npm vite-chunker |
Malicious release: Malicious code in tailwindcss-forms-bundler (npm) GHSA-gm2h-wf73-fxx5, MAL-2026-1336 | Malicious | Not scored | 11 Mar, 2026 | npm tailwindcss-forms-bundler |
Malicious release: Malicious code in gamma-api-provider (npm) GHSA-rp22-7cw9-ph5g, MAL-2026-1328 | Malicious | Not scored | 11 Mar, 2026 | npm gamma-api-provider |
Malicious release: Malicious code in mui-path-imports (npm) GHSA-5gp8-24cq-8q2v, MAL-2026-1332 | Malicious | Not scored | 11 Mar, 2026 | npm mui-path-imports |
Malicious release: Malicious code in typescript-urql (npm) GHSA-g7m7-vfxq-49jh, MAL-2026-1337 | Malicious | Not scored | 11 Mar, 2026 | npm typescript-urql |
Malicious release: Malicious code in clean-order (npm) GHSA-rv53-q5vv-mx3f, MAL-2026-1326 | Malicious | Not scored | 11 Mar, 2026 | npm clean-order |
Malicious release: Malicious code in google-camelcase (npm) GHSA-5w4r-j5gv-rm4x, MAL-2026-1329 | Malicious | Not scored | 11 Mar, 2026 | npm google-camelcase |
Malicious release: Malicious code in sort-export-all (npm) GHSA-h9cm-7hx6-2xcc, MAL-2026-1334 | Malicious | Not scored | 11 Mar, 2026 | npm sort-export-all |
Malicious release: Malicious code in filter-imports (npm) GHSA-j542-xg84-95px, MAL-2026-1327 | Malicious | Not scored | 11 Mar, 2026 | npm filter-imports |
Malicious release: Malicious code in import-zod (npm) GHSA-57v8-4prv-vf9j, MAL-2026-1330 | Malicious | Not scored | 11 Mar, 2026 | npm import-zod |
Malicious release: Malicious code in llm-oracle (npm) GHSA-84fm-x46g-jqx9, MAL-2026-1331 | Malicious | Not scored | 11 Mar, 2026 | npm llm-oracle |
Malicious release: Malicious code in test-logsmodule-v-zisko (npm) GHSA-5c6q-wp3q-gcch, MAL-2026-1324 | Malicious | Not scored | 10 Mar, 2026 | npm test-logsmodule-v-zisko |
Malicious release: Malicious code in bluelite-bot-manager (npm) GHSA-6939-264r-mcp4, MAL-2026-1323 | Malicious | Not scored | 10 Mar, 2026 | npm bluelite-bot-manager |
Malicious release: Malicious code in rtxnode-sass22 (npm) GHSA-gr9m-wqvq-35x3, MAL-2026-1322 | Malicious | Not scored | 10 Mar, 2026 | npm rtxnode-sass22 |
Malicious release: Malicious code in @openclaw-ai/openclawai (npm) GHSA-73px-wj4g-wgwp, MAL-2026-1321 | Malicious | Not scored | 10 Mar, 2026 | npm @openclaw-ai/openclawai |
Malicious release: Malicious code in @web-monorepo/fetchers (npm) MAL-2026-1318 | Malicious | Not scored | 10 Mar, 2026 | npm @web-monorepo/fetchers |
Malicious release: Malicious code in @augmentor/experiences (npm) GHSA-mpxg-x386-qhgr, MAL-2026-1317 | Malicious | Not scored | 10 Mar, 2026 | npm @augmentor/experiences |
Malicious release: Malicious code in alinet-w (npm) GHSA-394g-wvjv-j6mg, MAL-2026-1319 | Malicious | Not scored | 10 Mar, 2026 | npm alinet-w |
Malicious release: Malicious code in chain-promised-await (npm) GHSA-x7f9-fr3r-64w3, MAL-2026-1320 | Malicious | Not scored | 10 Mar, 2026 | npm chain-promised-await |
Malicious release: Malicious code in @mmm-otrade/transaction-adapter (npm) GHSA-2m9p-9969-wqcg, MAL-2026-1301 | Malicious | Not scored | 10 Mar, 2026 | npm @mmm-otrade/transaction-adapter |
Malicious release: Malicious code in collab-library (npm) GHSA-3gp5-v85g-m879, MAL-2026-1305 | Malicious | Not scored | 10 Mar, 2026 | npm collab-library |
Malicious release: Malicious code in @rothaus/falcologgerinternalstate (npm) GHSA-3hwm-q5v7-wc64, MAL-2026-1303 | Malicious | Not scored | 10 Mar, 2026 | npm @rothaus/falcologgerinternalstate |
Malicious release: Malicious code in iron-localstorage (npm) GHSA-5q6j-pgfc-j6hj, MAL-2026-1309 | Malicious | Not scored | 10 Mar, 2026 | npm iron-localstorage |