Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in ts-packer (npm) GHSA-rqxr-2phg-q2jr, MAL-2026-1047 | Malicious | Not scored | 26 Feb, 2026 | npm ts-packer |
Malicious release: Malicious code in corstoken (npm) GHSA-4857-6w35-8677, MAL-2026-1051 | Malicious | Not scored | 26 Feb, 2026 | npm corstoken |
Malicious release: Malicious code in iosysredis (npm) GHSA-jqx9-7jq8-cq9x, MAL-2026-1054 | Malicious | Not scored | 26 Feb, 2026 | npm iosysredis |
Malicious release: Malicious code in undicy-lint (npm) GHSA-g752-q3r2-xhrj, MAL-2026-1056 | Malicious | Not scored | 26 Feb, 2026 | npm undicy-lint |
Malicious release: Malicious code in promanage (npm) GHSA-mcg5-r97j-83h6, MAL-2026-1038 | Malicious | Not scored | 25 Feb, 2026 | npm promanage |
Malicious release: Malicious code in uuindex (npm) GHSA-8h8j-w8xj-5g4c, MAL-2026-1043 | Malicious | Not scored | 25 Feb, 2026 | npm uuindex |
Malicious release: Malicious code in chai-lite-lib (npm) GHSA-c692-r7hw-33w6, MAL-2026-1034 | Malicious | Not scored | 25 Feb, 2026 | npm chai-lite-lib |
Malicious release: Malicious code in duer-js (npm) GHSA-8cqh-92f8-vrg4, MAL-2026-1033 | Malicious | Not scored | 25 Feb, 2026 | npm duer-js |
Malicious release: Malicious code in react-svg-helper-fast (npm) GHSA-vcw9-rvcg-7922, MAL-2026-1031 | Malicious | Not scored | 25 Feb, 2026 | npm react-svg-helper-fast |
Malicious release: Malicious code in chai-as-utils (npm) GHSA-x93r-8pwh-v64c, MAL-2026-1030 | Malicious | Not scored | 25 Feb, 2026 | npm chai-as-utils |
Malicious release: Malicious code in sample-custom-component (npm) GHSA-p3mp-3xxq-692w, MAL-2026-1032 | Malicious | Not scored | 25 Feb, 2026 | npm sample-custom-component |
Malicious release: Malicious code in @schedaero/react-core (npm) MAL-2026-1230 | Malicious | Not scored | 25 Feb, 2026 | npm @schedaero/react-core |
Malicious release: Malicious code in @schedaero/yukon (npm) MAL-2026-1232 | Malicious | Not scored | 25 Feb, 2026 | npm @schedaero/yukon |
Malicious release: Malicious code in @schedaero/bacon (npm) MAL-2026-1228 | Malicious | Not scored | 25 Feb, 2026 | npm @schedaero/bacon |
Malicious release: Malicious code in @schedaero/net-common (npm) MAL-2026-1229 | Malicious | Not scored | 25 Feb, 2026 | npm @schedaero/net-common |
Malicious release: Malicious code in uxproject11 (npm) GHSA-vvjv-x5r6-jrrr, MAL-2026-1234 | Malicious | Not scored | 25 Feb, 2026 | npm uxproject11 |
Malicious release: Malicious code in projectrtert (npm) GHSA-m97j-c9c8-qv27, MAL-2026-1233 | Malicious | Not scored | 25 Feb, 2026 | npm projectrtert |
Malicious release: Malicious code in @schedaero/shared (npm) MAL-2026-1231 | Malicious | Not scored | 25 Feb, 2026 | npm @schedaero/shared |
Malicious release: Malicious code in react-devtools-raycast (npm) MAL-2026-1039 | Malicious | Not scored | 25 Feb, 2026 | npm react-devtools-raycast |
Malicious release: Malicious code in get-fonts (npm) MAL-2026-1037 | Malicious | Not scored | 25 Feb, 2026 | npm get-fonts |
Malicious release: Malicious code in trae-browser-inspect (npm) MAL-2026-1042 | Malicious | Not scored | 25 Feb, 2026 | npm trae-browser-inspect |
Malicious release: Malicious code in examplereactnative76 (npm) MAL-2026-1028 | Malicious | Not scored | 24 Feb, 2026 | npm examplereactnative76 |
Malicious release: Malicious code in rncalendareventsexample (npm) MAL-2026-1026 | Malicious | Not scored | 24 Feb, 2026 | npm rncalendareventsexample |
Malicious release: Malicious code in rtxbbtyols (npm) GHSA-ggfg-9547-fcfq, MAL-2026-1027 | Malicious | Not scored | 24 Feb, 2026 | npm rtxbbtyols |
Malicious release: Malicious code in @protonme/routing (npm) GHSA-3mh5-3cjj-x4vw, MAL-2026-1024 | Malicious | Not scored | 24 Feb, 2026 | npm @protonme/routing |
Malicious release: Malicious code in @unitedcapitalfinancialadvisors/finlife-component-library (npm) GHSA-x5wf-632x-8qp6, MAL-2026-1025 | Malicious | Not scored | 24 Feb, 2026 | npm @unitedcapitalfinancialadvisors/finlife-component-library |
Malicious release: Malicious code in @kiukicom/sidebar (npm) GHSA-7gh6-h93x-hcxc, MAL-2026-1023 | Malicious | Not scored | 24 Feb, 2026 | npm @kiukicom/sidebar |
Malicious release: Malicious code in @atg-aml-shared/kyc-domain (npm) GHSA-h8q9-h9jg-cg4q, MAL-2026-1021 | Malicious | Not scored | 24 Feb, 2026 | npm @atg-aml-shared/kyc-domain |
Malicious release: Malicious code in @coinmetro/app (npm) GHSA-q2w3-mv8h-gpvm, MAL-2026-1022 | Malicious | Not scored | 24 Feb, 2026 | npm @coinmetro/app |
Malicious release: Malicious code in @ai-studio-web/app (npm) GHSA-q326-5gvm-75w3, MAL-2026-1020 | Malicious | Not scored | 24 Feb, 2026 | npm @ai-studio-web/app |
Malicious release: Malicious code in js-multer (npm) GHSA-qr75-8mp9-xxfp, MAL-2026-1016 | Malicious | Not scored | 24 Feb, 2026 | npm js-multer |
Malicious release: Malicious code in chai-iotype (npm) GHSA-v9mr-v6fw-ggjc, MAL-2026-1014 | Malicious | Not scored | 24 Feb, 2026 | npm chai-iotype |
Malicious release: Malicious code in chai-as-pause (npm) GHSA-mg4g-8xgc-p8xw, MAL-2026-1013 | Malicious | Not scored | 24 Feb, 2026 | npm chai-as-pause |
Malicious release: Malicious code in json-mapping-srcs (npm) GHSA-rxgp-367w-gq5f, MAL-2026-1017 | Malicious | Not scored | 24 Feb, 2026 | npm json-mapping-srcs |
Malicious release: Malicious code in es1int-config (npm) GHSA-r6q4-75xr-48pp, MAL-2026-1015 | Malicious | Not scored | 24 Feb, 2026 | npm es1int-config |
Malicious release: Malicious code in chai-tools (npm) GHSA-xp8h-j8vg-rffx, MAL-2026-1006 | Malicious | Not scored | 24 Feb, 2026 | npm chai-tools |
Malicious release: Malicious code in node-argon (npm) GHSA-67jr-g8v2-qg88, MAL-2026-1011 | Malicious | Not scored | 24 Feb, 2026 | npm node-argon |
Malicious release: Malicious code in argon-web3-chain (npm) GHSA-xcr9-755c-623c, MAL-2026-1005 | Malicious | Not scored | 24 Feb, 2026 | npm argon-web3-chain |
Malicious release: Malicious code in dotenvx-ext (npm) GHSA-rggj-8jcg-33c7, MAL-2026-1007 | Malicious | Not scored | 24 Feb, 2026 | npm dotenvx-ext |
Malicious release: Malicious code in modify-setting (npm) GHSA-p88w-8j5m-hjw2, MAL-2026-1010 | Malicious | Not scored | 24 Feb, 2026 | npm modify-setting |
Malicious release: Malicious code in es1int-re1ease (npm) GHSA-6hqv-jvhr-wvcc, MAL-2026-1008 | Malicious | Not scored | 24 Feb, 2026 | npm es1int-re1ease |
Malicious release: Malicious code in ultimates-express (npm) GHSA-mgfx-pg8p-7m76, MAL-2026-1012 | Malicious | Not scored | 24 Feb, 2026 | npm ultimates-express |
Malicious release: Malicious code in express-soaps (npm) GHSA-p445-jp29-c22j, MAL-2026-1009 | Malicious | Not scored | 24 Feb, 2026 | npm express-soaps |
Malicious release: Malicious code in react-markdown-canvas (npm) MAL-2026-1040 | Malicious | Not scored | 23 Feb, 2026 | npm react-markdown-canvas |
Malicious release: Malicious code in secure-monkey (npm) MAL-2026-1041 | Malicious | Not scored | 23 Feb, 2026 | npm secure-monkey |
Malicious release: Malicious code in react-dropzone-truffle (npm) GHSA-h362-pxfp-fmhj, MAL-2026-999 | Malicious | Not scored | 23 Feb, 2026 | npm react-dropzone-truffle |
Malicious release: Malicious code in npm-security-testing (npm) GHSA-mfx5-vj54-ccc2, MAL-2026-997 | Malicious | Not scored | 23 Feb, 2026 | npm npm-security-testing |
Malicious release: Malicious code in rbxm-tools (npm) GHSA-qjfg-ppv8-33mh, MAL-2026-998 | Malicious | Not scored | 23 Feb, 2026 | npm rbxm-tools |
Malicious release: Malicious code in en-thrift-internal (npm) GHSA-r6q9-qcrw-mc6m, MAL-2026-986 | Malicious | Not scored | 22 Feb, 2026 | npm en-thrift-internal |
Malicious release: Malicious code in conduit-utils (npm) MAL-2026-985 | Malicious | Not scored | 22 Feb, 2026 | npm conduit-utils |