Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in iron-selector (npm) GHSA-95jf-557m-8wf3, MAL-2026-1314 | Malicious | Not scored | 10 Mar, 2026 | npm iron-selector |
Malicious release: Malicious code in iron-overlay-behavior (npm) GHSA-cx53-g4g3-wmcj, MAL-2026-1312 | Malicious | Not scored | 10 Mar, 2026 | npm iron-overlay-behavior |
Malicious release: Malicious code in iron-fit-behavior (npm) GHSA-f874-c2w3-388v, MAL-2026-1307 | Malicious | Not scored | 10 Mar, 2026 | npm iron-fit-behavior |
Malicious release: Malicious code in iron-menu-behavior (npm) GHSA-h9gw-qwfq-q74c, MAL-2026-1311 | Malicious | Not scored | 10 Mar, 2026 | npm iron-menu-behavior |
Malicious release: Malicious code in iron-pages (npm) GHSA-hphv-rwc2-7gp4, MAL-2026-1313 | Malicious | Not scored | 10 Mar, 2026 | npm iron-pages |
Malicious release: Malicious code in falcologgerinternalstate (npm) GHSA-hr5p-8hqc-wcm6, MAL-2026-1306 | Malicious | Not scored | 10 Mar, 2026 | npm falcologgerinternalstate |
Malicious release: Malicious code in @platform-growth/guidance-channel-provider (npm) GHSA-m84f-rg3g-9pvw, MAL-2026-1302 | Malicious | Not scored | 10 Mar, 2026 | npm @platform-growth/guidance-channel-provider |
Malicious release: Malicious code in @mmm-otrade/transaction (npm) GHSA-m8gv-h3cq-3grx, MAL-2026-1300 | Malicious | Not scored | 10 Mar, 2026 | npm @mmm-otrade/transaction |
Malicious release: Malicious code in iron-signals (npm) GHSA-qjw5-fmpc-w42r, MAL-2026-1315 | Malicious | Not scored | 10 Mar, 2026 | npm iron-signals |
Malicious release: Malicious code in amt-package-united-icons (npm) GHSA-rjmf-gw43-xhq4, MAL-2026-1304 | Malicious | Not scored | 10 Mar, 2026 | npm amt-package-united-icons |
Malicious release: Malicious code in iron-image (npm) GHSA-2ggx-x8w4-989p, MAL-2026-1308 | Malicious | Not scored | 10 Mar, 2026 | npm iron-image |
Malicious release: Malicious code in xc-input-toggle (npm) GHSA-9mxj-qv8w-v2qx, MAL-2026-1316 | Malicious | Not scored | 10 Mar, 2026 | npm xc-input-toggle |
Malicious release: Malicious code in iron-media-query (npm) GHSA-c62p-2739-c88f, MAL-2026-1310 | Malicious | Not scored | 10 Mar, 2026 | npm iron-media-query |
Malicious release: Malicious code in monoping (npm) GHSA-mq8p-wfj2-j6cq, MAL-2026-1299 | Malicious | Not scored | 10 Mar, 2026 | npm monoping |
Malicious release: Malicious code in jsonify-core (npm) GHSA-865m-mjxh-x6h8, MAL-2026-1298 | Malicious | Not scored | 09 Mar, 2026 | npm jsonify-core |
Malicious release: Malicious code in json-merge-tool (npm) GHSA-cpf2-rx79-x333, MAL-2026-1297 | Malicious | Not scored | 09 Mar, 2026 | npm json-merge-tool |
Malicious release: Malicious code in odds-analyzer (npm) GHSA-89vf-5w9c-qf87, MAL-2026-1292 | Malicious | Not scored | 09 Mar, 2026 | npm odds-analyzer |
Malicious release: Malicious code in tw-modern-ui (npm) GHSA-m4gf-v2v4-3qh2, MAL-2026-1293 | Malicious | Not scored | 09 Mar, 2026 | npm tw-modern-ui |
Malicious release: Malicious code in qq-console (npm) GHSA-whff-563x-2xmr, MAL-2026-1271 | Malicious | Not scored | 06 Mar, 2026 | npm qq-console |
Malicious release: Malicious code in @wgu-edu/wgu-core (npm) GHSA-9pc5-g685-53f7, MAL-2026-1269 | Malicious | Not scored | 06 Mar, 2026 | npm @wgu-edu/wgu-core |
Malicious release: Malicious code in @wgu-edu/wgu-icons (npm) GHSA-r3w8-f4f4-mvvw, MAL-2026-1270 | Malicious | Not scored | 06 Mar, 2026 | npm @wgu-edu/wgu-icons |
Malicious release: Malicious code in @shenira/baileysx (npm) GHSA-24xg-rj5c-2r2c, MAL-2026-1267 | Malicious | Not scored | 06 Mar, 2026 | npm @shenira/baileysx |
Malicious release: Malicious code in @shenira/baileys (npm) GHSA-gwh9-jq72-g4mw, MAL-2026-1266 | Malicious | Not scored | 06 Mar, 2026 | npm @shenira/baileys |
Malicious release: Malicious code in @shenira/libsignal-node (npm) GHSA-vr9m-wh7r-4xfx, MAL-2026-1268 | Malicious | Not scored | 06 Mar, 2026 | npm @shenira/libsignal-node |
Malicious release: Malicious code in test-mal-npm-pkg-not-local (npm) GHSA-5q4h-v7c2-v9r2, MAL-2026-1274 | Malicious | Not scored | 06 Mar, 2026 | npm test-mal-npm-pkg-not-local |
Malicious release: Malicious code in test-mal-npm-pkg-local (npm) GHSA-6258-pr46-j4rc, MAL-2026-1273 | Malicious | Not scored | 06 Mar, 2026 | npm test-mal-npm-pkg-local |
Malicious release: Malicious code in test-mal-npm-pkg-2 (npm) GHSA-855h-6c4m-f9m7, MAL-2026-1272 | Malicious | Not scored | 06 Mar, 2026 | npm test-mal-npm-pkg-2 |
Malicious release: Malicious code in aaaaaxxxxx (npm) GHSA-w24m-g68p-7wmq, MAL-2026-1265 | Malicious | Not scored | 06 Mar, 2026 | npm aaaaaxxxxx |
Malicious release: Malicious code in webmd-url (npm) GHSA-853v-5vhr-jmpc, MAL-2026-1260 | Malicious | Not scored | 06 Mar, 2026 | npm webmd-url |
Malicious release: Malicious code in pino-sdk-v2 (npm) GHSA-h6xh-3v8c-jhjf, MAL-2026-1259 | Malicious | Not scored | 06 Mar, 2026 | npm pino-sdk-v2 |
Malicious release: Malicious code in tether-dev-docs (npm) GHSA-6c8j-272h-r6h7, MAL-2026-1258 | Malicious | Not scored | 06 Mar, 2026 | npm tether-dev-docs |
Malicious release: Malicious code in pdfjs-dist-fourth (npm) MAL-2026-1257 | Malicious | Not scored | 05 Mar, 2026 | npm pdfjs-dist-fourth |
Malicious release: Malicious code in @imhuman/corp-build-utils-poc (npm) GHSA-53gc-6rwm-8qvx, MAL-2026-1247 | Malicious | Not scored | 05 Mar, 2026 | npm @imhuman/corp-build-utils-poc |
Malicious release: Malicious code in @imhuman/fw-logger (npm) GHSA-6qpc-26c3-fqx4, MAL-2026-1248 | Malicious | Not scored | 05 Mar, 2026 | npm @imhuman/fw-logger |
Malicious release: Malicious code in imhuman-fw-logger (npm) GHSA-v8g3-qq8j-v4hp, MAL-2026-1249 | Malicious | Not scored | 05 Mar, 2026 | npm imhuman-fw-logger |
Malicious release: Malicious code in pear-apps-lib-ui-react-hooks (npm) GHSA-8332-hw5x-q6rx, MAL-2026-1251 | Malicious | Not scored | 05 Mar, 2026 | npm pear-apps-lib-ui-react-hooks |
Malicious release: Malicious code in pear-apps-utils-avatar-initials (npm) GHSA-g582-vfxj-j9qp, MAL-2026-1252 | Malicious | Not scored | 05 Mar, 2026 | npm pear-apps-utils-avatar-initials |
Malicious release: Malicious code in pear-apps-utils-date (npm) GHSA-j8cc-p8rq-xhvh, MAL-2026-1253 | Malicious | Not scored | 05 Mar, 2026 | npm pear-apps-utils-date |
Malicious release: Malicious code in pear-apps-utils-qr (npm) GHSA-jxj8-p2mm-gjr9, MAL-2026-1254 | Malicious | Not scored | 05 Mar, 2026 | npm pear-apps-utils-qr |
Malicious release: Malicious code in pearpass-lib-data-export (npm) GHSA-h3vq-4m22-hrmf, MAL-2026-1255 | Malicious | Not scored | 05 Mar, 2026 | npm pearpass-lib-data-export |
Malicious release: Malicious code in pear-apps-lib-feedback (npm) GHSA-64j5-x9g6-59pm, MAL-2026-1250 | Malicious | Not scored | 05 Mar, 2026 | npm pear-apps-lib-feedback |
Malicious release: Malicious code in pearpass-lib-data-import (npm) GHSA-xrpx-878r-jfmq, MAL-2026-1256 | Malicious | Not scored | 05 Mar, 2026 | npm pearpass-lib-data-import |
Malicious release: Malicious code in pearpass-utils-password-check (npm) GHSA-pjg5-rffv-3xj5, MAL-2026-1246 | Malicious | Not scored | 05 Mar, 2026 | npm pearpass-utils-password-check |
Malicious release: Malicious code in nf-referral-backend-placeholder (npm) GHSA-g4g8-rr9p-7rcm, MAL-2026-1245 | Malicious | Not scored | 05 Mar, 2026 | npm nf-referral-backend-placeholder |
Malicious release: Malicious code in spectral-corsair-navigator (npm) GHSA-g844-gph2-p427, MAL-2026-1244 | Malicious | Not scored | 05 Mar, 2026 | npm spectral-corsair-navigator |
Malicious release: Malicious code in nf-referral-backend (npm) GHSA-7fwh-38h4-x929, MAL-2026-1243 | Malicious | Not scored | 05 Mar, 2026 | npm nf-referral-backend |
Malicious release: Malicious code in yaml-manifest-utils-mynarratorai (npm) MAL-2026-1242 | Malicious | Not scored | 04 Mar, 2026 | npm yaml-manifest-utils-mynarratorai |
Malicious release: Malicious code in pearpass-lib-vault (npm) GHSA-h4ch-r74v-826j, MAL-2026-1238 | Malicious | Not scored | 04 Mar, 2026 | npm pearpass-lib-vault |
Malicious release: Malicious code in pearpass-lib-vault-core (npm) GHSA-2ghq-7hh3-2x5g, MAL-2026-1239 | Malicious | Not scored | 04 Mar, 2026 | npm pearpass-lib-vault-core |
Malicious release: Malicious code in pearpass-lib-ui-theme-provider (npm) GHSA-vqrg-7m7p-6r59, MAL-2026-1237 | Malicious | Not scored | 04 Mar, 2026 | npm pearpass-lib-ui-theme-provider |