Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @global-dax-ad-platform/dax-components (npm) GHSA-5rpp-4wg3-q4ww, MAL-2026-1165 | Malicious | Not scored | 03 Mar, 2026 | npm @global-dax-ad-platform/dax-components |
Malicious release: Malicious code in @global-dax-ad-platform/dax-modules (npm) GHSA-rqrg-p585-r9f4, MAL-2026-1167 | Malicious | Not scored | 03 Mar, 2026 | npm @global-dax-ad-platform/dax-modules |
Malicious release: Malicious code in @global-dax-ad-platform/dax-hooks (npm) GHSA-vp7m-93c4-5992, MAL-2026-1166 | Malicious | Not scored | 03 Mar, 2026 | npm @global-dax-ad-platform/dax-hooks |
Malicious release: Malicious code in @global-dax-ad-platform/dax-types (npm) GHSA-w8f2-jmmq-3g88, MAL-2026-1169 | Malicious | Not scored | 03 Mar, 2026 | npm @global-dax-ad-platform/dax-types |
Malicious release: Malicious code in @global-dax-ad-platform/dax-styles (npm) GHSA-x3c2-xw79-63qf, MAL-2026-1168 | Malicious | Not scored | 03 Mar, 2026 | npm @global-dax-ad-platform/dax-styles |
Malicious release: Malicious code in hiagentevilmcp (npm) GHSA-9264-q4hp-q57g, MAL-2026-1178 | Malicious | Not scored | 03 Mar, 2026 | npm hiagentevilmcp |
Malicious release: Malicious code in @zakhaevv/envai (npm) GHSA-33h9-mg87-vq25, MAL-2026-1172 | Malicious | Not scored | 03 Mar, 2026 | npm @zakhaevv/envai |
Malicious release: Malicious code in @snazaah/davey (npm) GHSA-q84c-f2pg-2gh7, MAL-2026-1171 | Malicious | Not scored | 03 Mar, 2026 | npm @snazaah/davey |
Malicious release: Malicious code in graph-dynamic (npm) GHSA-6q72-5cph-5xxf, MAL-2026-1177 | Malicious | Not scored | 03 Mar, 2026 | npm graph-dynamic |
Malicious release: Malicious code in magala (npm) GHSA-vcvv-6hch-f873, MAL-2026-1179 | Malicious | Not scored | 03 Mar, 2026 | npm magala |
Malicious release: Malicious code in openclaw-droid (npm) GHSA-q7p3-59wr-r6f3, MAL-2026-1151 | Malicious | Not scored | 03 Mar, 2026 | npm openclaw-droid |
Malicious release: Malicious code in token-discord-encryptation (npm) GHSA-q5w4-82wp-c3hp, MAL-2026-1157 | Malicious | Not scored | 03 Mar, 2026 | npm token-discord-encryptation |
Malicious release: Malicious code in solongnerds (npm) GHSA-rvxr-rg3g-gqfr, MAL-2026-1156 | Malicious | Not scored | 03 Mar, 2026 | npm solongnerds |
Malicious release: Malicious code in yazxzpedia-libsignal (npm) GHSA-2wr8-68wx-vgr7, MAL-2026-1164 | Malicious | Not scored | 03 Mar, 2026 | npm yazxzpedia-libsignal |
Malicious release: Malicious code in primexuu-libsignal (npm) GHSA-6w7r-jw92-pfjf, MAL-2026-1153 | Malicious | Not scored | 03 Mar, 2026 | npm primexuu-libsignal |
Malicious release: Malicious code in libsignal-yazxz (npm) GHSA-75f2-3rh8-f2rr, MAL-2026-1150 | Malicious | Not scored | 03 Mar, 2026 | npm libsignal-yazxz |
Malicious release: Malicious code in rullzdigital-libsignal (npm) GHSA-jgfp-q988-vx26, MAL-2026-1155 | Malicious | Not scored | 03 Mar, 2026 | npm rullzdigital-libsignal |
Malicious release: Malicious code in danzxoffc74-libsignal (npm) GHSA-p3mp-4w28-j2fj, MAL-2026-1147 | Malicious | Not scored | 03 Mar, 2026 | npm danzxoffc74-libsignal |
Malicious release: Malicious code in @yazxzpedia/baileys (npm) GHSA-q2g5-7g7x-28xp, MAL-2026-1145 | Malicious | Not scored | 03 Mar, 2026 | npm @yazxzpedia/baileys |
Malicious release: Malicious code in rullzdigital (npm) GHSA-vv3p-5rm5-qxrc, MAL-2026-1154 | Malicious | Not scored | 03 Mar, 2026 | npm rullzdigital |
Malicious release: Malicious code in danzxoffc74 (npm) GHSA-wq3m-3fq3-4w5v, MAL-2026-1146 | Malicious | Not scored | 03 Mar, 2026 | npm danzxoffc74 |
Malicious release: Malicious code in xpack-video-submission (npm) GHSA-3mrc-3vpq-5qc6, MAL-2026-1163 | Malicious | Not scored | 03 Mar, 2026 | npm xpack-video-submission |
Malicious release: Malicious code in xpack-test-3.0 (npm) GHSA-8cfx-xvvc-pc4x, MAL-2026-1162 | Malicious | Not scored | 03 Mar, 2026 | npm xpack-test-3.0 |
Malicious release: Malicious code in xpack-arc-gateway (npm) GHSA-gh92-xxgg-6g98, MAL-2026-1158 | Malicious | Not scored | 03 Mar, 2026 | npm xpack-arc-gateway |
Malicious release: Malicious code in ethglobal-finale (npm) GHSA-x78f-q722-m5v6, MAL-2026-1148 | Malicious | Not scored | 03 Mar, 2026 | npm ethglobal-finale |
Malicious release: Malicious code in xpack-per-device (npm) GHSA-9629-h7qc-p57c, MAL-2026-1159 | Malicious | Not scored | 03 Mar, 2026 | npm xpack-per-device |
Malicious release: Malicious code in xpack-subscription (npm) GHSA-9f55-3p24-3r9c, MAL-2026-1160 | Malicious | Not scored | 03 Mar, 2026 | npm xpack-subscription |
Malicious release: Malicious code in xpack-sui (npm) GHSA-9rq2-6v86-w222, MAL-2026-1161 | Malicious | Not scored | 03 Mar, 2026 | npm xpack-sui |
Malicious release: Malicious code in pool-check (npm) GHSA-vgpx-x7hq-m4fx, MAL-2026-1152 | Malicious | Not scored | 03 Mar, 2026 | npm pool-check |
Malicious release: Malicious code in hackpreinstall (npm) GHSA-34f9-x3r7-8wjj, MAL-2026-1149 | Malicious | Not scored | 03 Mar, 2026 | npm hackpreinstall |
Malicious release: Malicious code in colorize-console (npm) GHSA-g58r-8w2m-744m, MAL-2026-1128 | Malicious | Not scored | 02 Mar, 2026 | npm colorize-console |
Malicious release: Malicious code in @nazi-team/libsignal-node (npm) GHSA-h265-qvfj-vp46, MAL-2026-1120 | Malicious | Not scored | 02 Mar, 2026 | npm @nazi-team/libsignal-node |
Malicious release: Malicious code in @nazi-team/baileys (npm) GHSA-m2fq-rwf5-8c25, MAL-2026-1119 | Malicious | Not scored | 02 Mar, 2026 | npm @nazi-team/baileys |
Malicious release: Malicious code in @sanzxcode/baileys (npm) GHSA-mqv3-h8qx-p79f, MAL-2026-1121 | Malicious | Not scored | 02 Mar, 2026 | npm @sanzxcode/baileys |
Malicious release: Malicious code in @sanzxcode/libsignal-node (npm) GHSA-q649-w96f-433p, MAL-2026-1122 | Malicious | Not scored | 02 Mar, 2026 | npm @sanzxcode/libsignal-node |
Malicious release: Malicious code in @daffadeveloper/baileys (npm) GHSA-6f99-hrgr-8q4r, MAL-2026-1117 | Malicious | Not scored | 02 Mar, 2026 | npm @daffadeveloper/baileys |
Malicious release: Malicious code in @daffadeveloper/libsignal-node (npm) GHSA-m3xr-v9g3-m4pp, MAL-2026-1118 | Malicious | Not scored | 02 Mar, 2026 | npm @daffadeveloper/libsignal-node |
Malicious release: Malicious code in danzxz (npm) GHSA-58fh-489v-mr28, MAL-2026-1129 | Malicious | Not scored | 02 Mar, 2026 | npm danzxz |
Malicious release: Malicious code in ngaturkids (npm) GHSA-5vg4-hrfg-7vvv, MAL-2026-1131 | Malicious | Not scored | 02 Mar, 2026 | npm ngaturkids |
Malicious release: Malicious code in sukuna-baileys (npm) GHSA-m5x3-m9w7-v86p, MAL-2026-1133 | Malicious | Not scored | 02 Mar, 2026 | npm sukuna-baileys |
Malicious release: Malicious code in yuji-baileys (npm) GHSA-r56q-r5p2-x734, MAL-2026-1135 | Malicious | Not scored | 02 Mar, 2026 | npm yuji-baileys |
Malicious release: Malicious code in kazumarii (npm) GHSA-2rpw-36c3-xcvm, MAL-2026-1130 | Malicious | Not scored | 02 Mar, 2026 | npm kazumarii |
Malicious release: Malicious code in ts-big-number (npm) GHSA-v4cj-rqxr-fp7c, MAL-2026-1134 | Malicious | Not scored | 02 Mar, 2026 | npm ts-big-number |
Malicious release: Malicious code in npm-doc-builder (npm) GHSA-xmrq-xc4p-4552, MAL-2026-1132 | Malicious | Not scored | 02 Mar, 2026 | npm npm-doc-builder |
Malicious release: Malicious code in @yaoii-bails/libsignal-node (npm) GHSA-8m8v-2xpf-gfwq, MAL-2026-1124 | Malicious | Not scored | 02 Mar, 2026 | npm @yaoii-bails/libsignal-node |
Malicious release: Malicious code in @yaoii-bails/socket (npm) GHSA-cwj6-86q5-p4hm, MAL-2026-1126 | Malicious | Not scored | 02 Mar, 2026 | npm @yaoii-bails/socket |
Malicious release: Malicious code in @yaoii-bails/baileys (npm) GHSA-jgwm-f38r-hqj6, MAL-2026-1123 | Malicious | Not scored | 02 Mar, 2026 | npm @yaoii-bails/baileys |
Malicious release: Malicious code in @yaoii-bails/libsignall-node (npm) GHSA-pj6v-c99q-p649, MAL-2026-1125 | Malicious | Not scored | 02 Mar, 2026 | npm @yaoii-bails/libsignall-node |
Malicious release: Malicious code in @yaoii-bails/yaoii-baileys (npm) GHSA-w4wq-33rw-2mxr, MAL-2026-1127 | Malicious | Not scored | 02 Mar, 2026 | npm @yaoii-bails/yaoii-baileys |
Malicious release: Malicious code in chai-vest (npm) GHSA-j383-j4m3-9c75, MAL-2026-1115 | Malicious | Not scored | 02 Mar, 2026 | npm chai-vest |