Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in vl-ui-code-preview (npm) MAL-2026-994 | Malicious | Not scored | 22 Feb, 2026 | npm vl-ui-code-preview |
Malicious release: Malicious code in vl-ui-contact-card (npm) MAL-2026-995 | Malicious | Not scored | 22 Feb, 2026 | npm vl-ui-contact-card |
Malicious release: Malicious code in vl-ui-action-group (npm) MAL-2026-988 | Malicious | Not scored | 22 Feb, 2026 | npm vl-ui-action-group |
Malicious release: Malicious code in vl-ui-button (npm) MAL-2026-992 | Malicious | Not scored | 22 Feb, 2026 | npm vl-ui-button |
Malicious release: Malicious code in vl-ui-body (npm) MAL-2026-990 | Malicious | Not scored | 22 Feb, 2026 | npm vl-ui-body |
Malicious release: Malicious code in vl-ui-breadcrumb (npm) MAL-2026-991 | Malicious | Not scored | 22 Feb, 2026 | npm vl-ui-breadcrumb |
Malicious release: Malicious code in vl-ui-checkbox (npm) MAL-2026-993 | Malicious | Not scored | 22 Feb, 2026 | npm vl-ui-checkbox |
Malicious release: Malicious code in vl-ui-accessibility (npm) MAL-2026-987 | Malicious | Not scored | 22 Feb, 2026 | npm vl-ui-accessibility |
Malicious release: Malicious code in vl-ui-alert (npm) MAL-2026-989 | Malicious | Not scored | 22 Feb, 2026 | npm vl-ui-alert |
Malicious release: Malicious code in dt-fe-t2d-marketplace (npm) MAL-2026-981 | Malicious | Not scored | 22 Feb, 2026 | npm dt-fe-t2d-marketplace |
Malicious release: Malicious code in the-storyverse (npm) MAL-2026-980 | Malicious | Not scored | 22 Feb, 2026 | npm the-storyverse |
Malicious release: Malicious code in microsoft-cms-client (npm) GHSA-xcqv-f95p-vrc9, MAL-2026-978 | Malicious | Not scored | 21 Feb, 2026 | npm microsoft-cms-client |
Malicious release: Malicious code in azure-postgresql-auth (npm) MAL-2026-975 | Malicious | Not scored | 20 Feb, 2026 | npm azure-postgresql-auth |
Malicious release: Malicious code in rollup-plugin-polyfill-swc (npm) GHSA-93mq-v792-4x85, MAL-2026-976 | Malicious | Not scored | 20 Feb, 2026 | npm rollup-plugin-polyfill-swc |
Malicious release: Malicious code in parse-compat (npm) GHSA-g2x2-r9hh-73f2, MAL-2026-967 | Malicious | Not scored | 20 Feb, 2026 | npm parse-compat |
Malicious release: Malicious code in crypto-locale (npm) GHSA-55c2-6c39-jrrp, MAL-2026-955 | Malicious | Not scored | 20 Feb, 2026 | npm crypto-locale |
Malicious release: Malicious code in detect-cache (npm) GHSA-87gx-xxm8-25x2, MAL-2026-957 | Malicious | Not scored | 20 Feb, 2026 | npm detect-cache |
Malicious release: Malicious code in naniod (npm) GHSA-p4cj-w7xw-88p3, MAL-2026-964 | Malicious | Not scored | 20 Feb, 2026 | npm naniod |
Malicious release: Malicious code in locale-loader-pro (npm) GHSA-v45c-qjqp-mw3q, MAL-2026-963 | Malicious | Not scored | 20 Feb, 2026 | npm locale-loader-pro |
Malicious release: Malicious code in scan-store (npm) GHSA-v858-hgfg-q94p, MAL-2026-969 | Malicious | Not scored | 20 Feb, 2026 | npm scan-store |
Malicious release: Malicious code in uudi (npm) GHSA-w9hv-7gxr-9f8f, MAL-2026-972 | Malicious | Not scored | 20 Feb, 2026 | npm uudi |
Malicious release: Malicious code in ethres (npm) GHSA-56j5-62q9-cj2c, MAL-2026-958 | Malicious | Not scored | 20 Feb, 2026 | npm ethres |
Malicious release: Malicious code in veim (npm) GHSA-99w5-2gw8-7w8c, MAL-2026-973 | Malicious | Not scored | 20 Feb, 2026 | npm veim |
Malicious release: Malicious code in yarsg (npm) GHSA-xw78-h8vv-phcj, MAL-2026-974 | Malicious | Not scored | 20 Feb, 2026 | npm yarsg |
Malicious release: Malicious code in rimarf (npm) GHSA-2r7f-gcp3-m5jq, MAL-2026-968 | Malicious | Not scored | 20 Feb, 2026 | npm rimarf |
Malicious release: Malicious code in hardhta (npm) GHSA-c597-v633-vcm6, MAL-2026-960 | Malicious | Not scored | 20 Feb, 2026 | npm hardhta |
Malicious release: Malicious code in format-defaults (npm) GHSA-chmw-4pgg-56w6, MAL-2026-959 | Malicious | Not scored | 20 Feb, 2026 | npm format-defaults |
Malicious release: Malicious code in crypto-reader-info (npm) GHSA-mxvw-w9w3-rqc7, MAL-2026-956 | Malicious | Not scored | 20 Feb, 2026 | npm crypto-reader-info |
Malicious release: Malicious code in secp256 (npm) GHSA-p683-99hw-p2fq, MAL-2026-970 | Malicious | Not scored | 20 Feb, 2026 | npm secp256 |
Malicious release: Malicious code in node-native-bridge (npm) GHSA-qgwv-9xxh-fmph, MAL-2026-965 | Malicious | Not scored | 20 Feb, 2026 | npm node-native-bridge |
Malicious release: Malicious code in suport-color (npm) GHSA-5qvc-hmwr-ghj5, MAL-2026-971 | Malicious | Not scored | 20 Feb, 2026 | npm suport-color |
Malicious release: Malicious code in opencraw (npm) GHSA-6v8f-7cjm-f7f8, MAL-2026-966 | Malicious | Not scored | 20 Feb, 2026 | npm opencraw |
Malicious release: Malicious code in cloude-code (npm) GHSA-8vcq-w335-fh83, MAL-2026-954 | Malicious | Not scored | 20 Feb, 2026 | npm cloude-code |
Malicious release: Malicious code in iru-caches (npm) GHSA-9w7p-hqx2-pjjx, MAL-2026-961 | Malicious | Not scored | 20 Feb, 2026 | npm iru-caches |
Malicious release: Malicious code in cloude (npm) GHSA-fw89-7q74-q5p8, MAL-2026-953 | Malicious | Not scored | 20 Feb, 2026 | npm cloude |
Malicious release: Malicious code in iruchache (npm) GHSA-m47j-9qfx-6jh4, MAL-2026-962 | Malicious | Not scored | 20 Feb, 2026 | npm iruchache |
Malicious release: Malicious code in claud-code (npm) GHSA-p2wm-2x3h-8gq6, MAL-2026-952 | Malicious | Not scored | 20 Feb, 2026 | npm claud-code |
Malicious release: Unauthorized npm publish of cline@2.3.0 with modified postinstall script GHSA-9ppg-jx86-fqw7, MAL-2026-1380 | MaliciousLow | Not scored | 19 Feb, 2026 | npm cline |
Malicious release: Malicious code in ably-forks (npm) GHSA-px78-22pw-hx3r, MAL-2026-939 | Malicious | Not scored | 19 Feb, 2026 | npm ably-forks |
Malicious release: Malicious code in ui5-cap-event-app-server (npm) MAL-2026-945 | Malicious | Not scored | 18 Feb, 2026 | npm ui5-cap-event-app-server |
Malicious release: Malicious code in abcxyzz (npm) MAL-2026-940 | Malicious | Not scored | 18 Feb, 2026 | npm abcxyzz |
Malicious release: Malicious code in vds-monarch (npm) GHSA-w2rp-7fhc-hmrm, MAL-2026-929 | Malicious | Not scored | 17 Feb, 2026 | npm vds-monarch |
Malicious release: Malicious code in realestate-ask (npm) GHSA-cq58-2656-w9f6, MAL-2026-944 | Malicious | Not scored | 17 Feb, 2026 | npm realestate-ask |
Malicious release: Malicious code in compass-e2e-tests (npm) GHSA-j29q-8q6j-p7rr, MAL-2026-922 | Malicious | Not scored | 16 Feb, 2026 | npm compass-e2e-tests |
Malicious release: Malicious code in ambar-src (npm) GHSA-qjgj-mrv7-24f7, MAL-2026-920 | Malicious | Not scored | 16 Feb, 2026 | npm ambar-src |
Malicious release: Malicious code in mds-webcomponents (npm) MAL-2026-919 | Malicious | Not scored | 16 Feb, 2026 | npm mds-webcomponents |
Malicious release: Malicious code in webpack-vite (npm) GHSA-pxqh-3wf7-xg38, MAL-2026-918 | Malicious | Not scored | 16 Feb, 2026 | npm webpack-vite |
Malicious release: Malicious code in @qualys/react-web (npm) MAL-2026-914 | Malicious | Not scored | 16 Feb, 2026 | npm @qualys/react-web |
Malicious release: Malicious code in ethereums-lint (npm) GHSA-25vw-q3mm-9qg8, MAL-2026-943 | Malicious | Not scored | 15 Feb, 2026 | npm ethereums-lint |
Malicious release: Malicious code in ethereum-lint (npm) GHSA-x56c-5jr9-m265, MAL-2026-942 | Malicious | Not scored | 15 Feb, 2026 | npm ethereum-lint |