Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in js-nodecat (npm) GHSA-m3qj-483q-v65m, MAL-2026-1116 | Malicious | Not scored | 02 Mar, 2026 | npm js-nodecat |
Malicious release: Malicious code in hapi-lint (npm) GHSA-3xx3-79g2-hg8f, MAL-2026-1108 | Malicious | Not scored | 02 Mar, 2026 | npm hapi-lint |
Malicious release: Malicious code in bcryptance (npm) GHSA-ww49-jmx8-mjg8, MAL-2026-1102 | Malicious | Not scored | 02 Mar, 2026 | npm bcryptance |
Malicious release: Malicious code in argonist (npm) GHSA-29c7-mqr6-w382, MAL-2026-1101 | Malicious | Not scored | 02 Mar, 2026 | npm argonist |
Malicious release: Malicious code in typoriem (npm) GHSA-c8hp-3fmr-c3r5, MAL-2026-1113 | Malicious | Not scored | 02 Mar, 2026 | npm typoriem |
Malicious release: Malicious code in vitetest-lint (npm) GHSA-rg84-2gf4-9cj4, MAL-2026-1114 | Malicious | Not scored | 02 Mar, 2026 | npm vitetest-lint |
Malicious release: Malicious code in loadash-lint (npm) GHSA-mq8x-7m3h-wgw6, MAL-2026-1110 | Malicious | Not scored | 02 Mar, 2026 | npm loadash-lint |
Malicious release: Malicious code in expressjs-lint (npm) GHSA-9w37-v3hq-ppfh, MAL-2026-1106 | Malicious | Not scored | 02 Mar, 2026 | npm expressjs-lint |
Malicious release: Malicious code in sequelization (npm) GHSA-fwf9-p2gv-vrvx, MAL-2026-1112 | Malicious | Not scored | 02 Mar, 2026 | npm sequelization |
Malicious release: Malicious code in jsnwebapptoken (npm) GHSA-22m6-pxx8-9vgj, MAL-2026-1109 | Malicious | Not scored | 02 Mar, 2026 | npm jsnwebapptoken |
Malicious release: Malicious code in daytonjs (npm) GHSA-3x7f-5p6c-rx9x, MAL-2026-1105 | Malicious | Not scored | 02 Mar, 2026 | npm daytonjs |
Malicious release: Malicious code in bee-quarl (npm) GHSA-vfq3-hxh4-3m5j, MAL-2026-1103 | Malicious | Not scored | 02 Mar, 2026 | npm bee-quarl |
Malicious release: Malicious code in mqttoken (npm) GHSA-qv65-57f4-3x87, MAL-2026-1111 | Malicious | Not scored | 02 Mar, 2026 | npm mqttoken |
Malicious release: Malicious code in bubble-core (npm) GHSA-8vf5-3mff-8gfp, MAL-2026-1104 | Malicious | Not scored | 02 Mar, 2026 | npm bubble-core |
Malicious release: Malicious code in formmiderable (npm) GHSA-frrp-vmmx-gr3c, MAL-2026-1107 | Malicious | Not scored | 02 Mar, 2026 | npm formmiderable |
Malicious release: Malicious code in ng-vzbootstrap (npm) GHSA-25jj-4j8c-cgrq, MAL-2026-1100 | Malicious | Not scored | 01 Mar, 2026 | npm ng-vzbootstrap |
Malicious release: Malicious code in sketch-measure (npm) MAL-2026-1096 | Malicious | Not scored | 01 Mar, 2026 | npm sketch-measure |
Malicious release: Malicious code in jquery-display (npm) MAL-2026-1095 | Malicious | Not scored | 01 Mar, 2026 | npm jquery-display |
Malicious release: Malicious code in dc-web-app (npm) GHSA-29rq-p698-29cj, MAL-2026-1094 | Malicious | Not scored | 01 Mar, 2026 | npm dc-web-app |
Malicious release: Malicious code in naughty-package (npm) MAL-2026-1093 | Malicious | Not scored | 01 Mar, 2026 | npm naughty-package |
Malicious release: Malicious code in bps-design-system (npm) MAL-2026-1087 | Malicious | Not scored | 28 Feb, 2026 | npm bps-design-system |
Malicious release: Malicious code in dc-mobx (npm) GHSA-rm4v-p5gj-p92w, MAL-2026-1083 | Malicious | Not scored | 28 Feb, 2026 | npm dc-mobx |
Malicious release: Malicious code in marionette-react-view (npm) GHSA-xqmc-68vr-gq64, MAL-2026-1081 | Malicious | Not scored | 27 Feb, 2026 | npm marionette-react-view |
Malicious release: Malicious code in @dgxeon/libsignal-node (npm) GHSA-34p6-99h9-93p8, MAL-2026-1072 | Malicious | Not scored | 27 Feb, 2026 | npm @dgxeon/libsignal-node |
Malicious release: Malicious code in socket-dgxeon (npm) GHSA-rjr7-mc49-vw8f, MAL-2026-1078 | Malicious | Not scored | 27 Feb, 2026 | npm socket-dgxeon |
Malicious release: Malicious code in sokettry (npm) GHSA-69j8-jrgj-x492, MAL-2026-1079 | Malicious | Not scored | 27 Feb, 2026 | npm sokettry |
Malicious release: Malicious code in dgxeon-soket (npm) GHSA-838q-63vp-c27h, MAL-2026-1074 | Malicious | Not scored | 27 Feb, 2026 | npm dgxeon-soket |
Malicious release: Malicious code in dgxeon-soket3 (npm) GHSA-8766-24pj-cr9x, MAL-2026-1076 | Malicious | Not scored | 27 Feb, 2026 | npm dgxeon-soket3 |
Malicious release: Malicious code in dgxeon-soket4 (npm) GHSA-9rff-9hmx-c2wr, MAL-2026-1077 | Malicious | Not scored | 27 Feb, 2026 | npm dgxeon-soket4 |
Malicious release: Malicious code in baileys-xeonbot (npm) GHSA-g44v-v77q-7jpq, MAL-2026-1073 | Malicious | Not scored | 27 Feb, 2026 | npm baileys-xeonbot |
Malicious release: Malicious code in dgxeon-soket2 (npm) GHSA-r65g-wqxj-p5pp, MAL-2026-1075 | Malicious | Not scored | 27 Feb, 2026 | npm dgxeon-soket2 |
Malicious release: Malicious code in @skyzopedia/baileys (npm) GHSA-65cp-mv9p-hrfx, MAL-2026-1065 | Malicious | Not scored | 27 Feb, 2026 | npm @skyzopedia/baileys |
Malicious release: Malicious code in @skyzopedia/baileys-pro (npm) GHSA-9543-wpp8-34w3, MAL-2026-1067 | Malicious | Not scored | 27 Feb, 2026 | npm @skyzopedia/baileys-pro |
Malicious release: Malicious code in @skyzopedia/libsignal-node (npm) GHSA-ccmw-784p-h6x6, MAL-2026-1069 | Malicious | Not scored | 27 Feb, 2026 | npm @skyzopedia/libsignal-node |
Malicious release: Malicious code in libsignal-skyzopedia (npm) GHSA-f6mr-6f43-m4cr, MAL-2026-1071 | Malicious | Not scored | 27 Feb, 2026 | npm libsignal-skyzopedia |
Malicious release: Malicious code in @skyzopedia/baileys-mod (npm) GHSA-gg4c-g7hp-rgp8, MAL-2026-1066 | Malicious | Not scored | 27 Feb, 2026 | npm @skyzopedia/baileys-mod |
Malicious release: Malicious code in @skyzopedia/ubot (npm) GHSA-mw93-6xm9-4mxq, MAL-2026-1070 | Malicious | Not scored | 27 Feb, 2026 | npm @skyzopedia/ubot |
Malicious release: Malicious code in @skyzopedia/brat (npm) GHSA-prrf-qx8x-3283, MAL-2026-1068 | Malicious | Not scored | 27 Feb, 2026 | npm @skyzopedia/brat |
Malicious release: Malicious code in @zinley/orion (npm) MAL-2026-1060 | Malicious | Not scored | 27 Feb, 2026 | npm @zinley/orion |
Malicious release: Malicious code in newman-reporter-genuinepoc (npm) MAL-2026-1061 | Malicious | Not scored | 27 Feb, 2026 | npm newman-reporter-genuinepoc |
Malicious release: Malicious code in express-core-validator (npm) GHSA-pqqv-f6rm-588j, MAL-2026-1062 | Malicious | Not scored | 27 Feb, 2026 | npm express-core-validator |
Malicious release: Malicious code in nuget-task-common (npm) MAL-2026-1059 | Malicious | Not scored | 27 Feb, 2026 | npm nuget-task-common |
Malicious release: Malicious code in foundry-toolkit (npm) MAL-2026-1052 | Malicious | Not scored | 26 Feb, 2026 | npm foundry-toolkit |
Malicious release: Malicious code in launch-darkly-js (npm) GHSA-g8jj-44f9-c9rv, MAL-2026-1050 | Malicious | Not scored | 26 Feb, 2026 | npm launch-darkly-js |
Malicious release: Malicious code in windowston (npm) GHSA-5xm7-fvcm-hr3f, MAL-2026-1057 | Malicious | Not scored | 26 Feb, 2026 | npm windowston |
Malicious release: Malicious code in jslint-config (npm) GHSA-39pg-5x8j-wg53, MAL-2026-1055 | Malicious | Not scored | 26 Feb, 2026 | npm jslint-config |
Malicious release: Malicious code in hardhat-node (npm) MAL-2026-1053 | Malicious | Not scored | 26 Feb, 2026 | npm hardhat-node |
Malicious release: Malicious code in zoddle (npm) GHSA-rrcm-fmc5-5m45, MAL-2026-1058 | Malicious | Not scored | 26 Feb, 2026 | npm zoddle |
Malicious release: Malicious code in jest-param-validator (npm) GHSA-48qg-xrrh-4cv3, MAL-2026-1046 | Malicious | Not scored | 26 Feb, 2026 | npm jest-param-validator |
Malicious release: Malicious code in jest-node-paramset (npm) GHSA-jwcf-6pvx-4cwr, MAL-2026-1045 | Malicious | Not scored | 26 Feb, 2026 | npm jest-node-paramset |