Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in web3-sinon (npm) GHSA-24w6-mgww-45jc, MAL-2026-807 | Malicious | Not scored | 06 Feb, 2026 | npm web3-sinon |
Malicious release: Malicious code in web3-chain-sinon (npm) GHSA-jq52-9634-mx8p, MAL-2026-806 | Malicious | Not scored | 06 Feb, 2026 | npm web3-chain-sinon |
Malicious release: Malicious code in aligned-arrays (npm) GHSA-vw8w-h7g2-48g9, MAL-2026-805 | Malicious | Not scored | 06 Feb, 2026 | npm aligned-arrays |
Malicious release: Malicious code in breadcrumb-service (npm) MAL-2026-804 | Malicious | Not scored | 06 Feb, 2026 | npm breadcrumb-service |
Malicious release: Malicious code in @rsgweb/utils (npm) GHSA-2q2j-g79q-g7h3, MAL-2026-801 | Malicious | Not scored | 06 Feb, 2026 | npm @rsgweb/utils |
Malicious release: Malicious code in @rsgweb/tina (npm) GHSA-78qc-m7fr-qq7g, MAL-2026-800 | Malicious | Not scored | 06 Feb, 2026 | npm @rsgweb/tina |
Malicious release: Malicious code in @rsgweb/modules-core-feedback (npm) GHSA-93fm-3r2f-cf76, MAL-2026-797 | Malicious | Not scored | 06 Feb, 2026 | npm @rsgweb/modules-core-feedback |
Malicious release: Malicious code in @rdxportal/ui-components (npm) GHSA-m52r-4c3v-2f62, MAL-2026-796 | Malicious | Not scored | 06 Feb, 2026 | npm @rdxportal/ui-components |
Malicious release: Malicious code in @sbseg-plugin/qbo-web-app-ui (npm) GHSA-m67c-8w34-xpjg, MAL-2026-802 | Malicious | Not scored | 06 Feb, 2026 | npm @sbseg-plugin/qbo-web-app-ui |
Malicious release: Malicious code in @rsgweb/rockstar-account (npm) GHSA-m9hg-mwfh-rcp3, MAL-2026-799 | Malicious | Not scored | 06 Feb, 2026 | npm @rsgweb/rockstar-account |
Malicious release: Malicious code in @rsgweb/modules-core-www-page (npm) GHSA-rqwj-m2m4-crj4, MAL-2026-798 | Malicious | Not scored | 06 Feb, 2026 | npm @rsgweb/modules-core-www-page |
Malicious release: Malicious code in @meli-lint/eslint-config-base (npm) GHSA-3hr9-qjx2-7xvf, MAL-2026-792 | Malicious | Not scored | 06 Feb, 2026 | npm @meli-lint/eslint-config-base |
Malicious release: Malicious code in @opposhop/nuxt-ssr-cache (npm) GHSA-48f8-cj2c-h5ph, MAL-2026-795 | Malicious | Not scored | 06 Feb, 2026 | npm @opposhop/nuxt-ssr-cache |
Malicious release: Malicious code in @meli-lint/eslint-config-base-ts (npm) GHSA-hc82-h5cp-3cmr, MAL-2026-793 | Malicious | Not scored | 06 Feb, 2026 | npm @meli-lint/eslint-config-base-ts |
Malicious release: Malicious code in @hashicorp-internal/vault-reporting (npm) GHSA-hcfh-22r5-mc4r, MAL-2026-791 | Malicious | Not scored | 06 Feb, 2026 | npm @hashicorp-internal/vault-reporting |
Malicious release: Malicious code in @meli-lint/eslint-config-tests-jest (npm) GHSA-jjwg-57v8-4486, MAL-2026-794 | Malicious | Not scored | 06 Feb, 2026 | npm @meli-lint/eslint-config-tests-jest |
Malicious release: Malicious code in syf-typings (npm) GHSA-9wwg-6qj9-823h, MAL-2026-789 | Malicious | Not scored | 06 Feb, 2026 | npm syf-typings |
Malicious release: Malicious code in @sporting-life/sportinglife-be (npm) GHSA-gw69-p5jg-cx4f, MAL-2026-787 | Malicious | Not scored | 06 Feb, 2026 | npm @sporting-life/sportinglife-be |
Malicious release: Malicious code in @sporting-life/sportinglife-betslip-sdk (npm) GHSA-h4pp-8q2m-94jf, MAL-2026-788 | Malicious | Not scored | 06 Feb, 2026 | npm @sporting-life/sportinglife-betslip-sdk |
Malicious release: Malicious code in @rsgweb/locale-tools (npm) GHSA-45p4-h5vh-f9rw, MAL-2026-786 | Malicious | Not scored | 06 Feb, 2026 | npm @rsgweb/locale-tools |
Malicious release: Malicious code in ac-element-engagement (npm) GHSA-3r8h-4c8r-pmq7, MAL-2026-780 | Malicious | Not scored | 06 Feb, 2026 | npm ac-element-engagement |
Malicious release: Malicious code in monkey-tags (npm) GHSA-cv2m-pr93-h35c, MAL-2026-784 | Malicious | Not scored | 06 Feb, 2026 | npm monkey-tags |
Malicious release: Malicious code in ac-array (npm) MAL-2026-775 | Malicious | Not scored | 06 Feb, 2026 | npm ac-array |
Malicious release: Malicious code in ac-checksum (npm) MAL-2026-776 | Malicious | Not scored | 06 Feb, 2026 | npm ac-checksum |
Malicious release: Malicious code in ac-dom-events (npm) MAL-2026-777 | Malicious | Not scored | 06 Feb, 2026 | npm ac-dom-events |
Malicious release: Malicious code in ac-dom-nodes (npm) MAL-2026-778 | Malicious | Not scored | 06 Feb, 2026 | npm ac-dom-nodes |
Malicious release: Malicious code in ac-dom-styles (npm) MAL-2026-779 | Malicious | Not scored | 06 Feb, 2026 | npm ac-dom-styles |
Malicious release: Malicious code in ac-feature (npm) MAL-2026-781 | Malicious | Not scored | 06 Feb, 2026 | npm ac-feature |
Malicious release: Malicious code in ac-polyfills (npm) MAL-2026-782 | Malicious | Not scored | 06 Feb, 2026 | npm ac-polyfills |
Malicious release: Malicious code in adobe_pipeline_test (npm) MAL-2026-783 | Malicious | Not scored | 06 Feb, 2026 | npm adobe_pipeline_test |
Malicious release: Malicious code in ppe-test (npm) MAL-2026-785 | Malicious | Not scored | 06 Feb, 2026 | npm ppe-test |
Malicious release: Malicious code in ethers-lint (npm) MAL-2026-773 | Malicious | Not scored | 05 Feb, 2026 | npm ethers-lint |
Malicious release: Malicious code in test-npm-style (npm) GHSA-23p3-w862-22mh, MAL-2026-771 | Malicious | Not scored | 05 Feb, 2026 | npm test-npm-style |
Malicious release: Malicious code in xpack-per-user (npm) GHSA-p3cq-rj28-5hq5, MAL-2026-770 | Malicious | Not scored | 05 Feb, 2026 | npm xpack-per-user |
Malicious release: Malicious code in debug-logger-utils (npm) GHSA-v56v-w5mx-f7pj, MAL-2026-768 | Malicious | Not scored | 05 Feb, 2026 | npm debug-logger-utils |
Malicious release: Malicious code in 0xhash-utils (npm) GHSA-jp2g-vjp5-7pjh, MAL-2026-767 | Malicious | Not scored | 05 Feb, 2026 | npm 0xhash-utils |
Malicious release: Malicious code in https-servers (npm) GHSA-fr3g-46g8-q3gv, MAL-2026-769 | Malicious | Not scored | 05 Feb, 2026 | npm https-servers |
Malicious release: Malicious code in optimizer-cpu (npm) GHSA-x66r-5jww-pf82, MAL-2026-765 | Malicious | Not scored | 05 Feb, 2026 | npm optimizer-cpu |
Malicious release: Malicious code in chai-as-advanced (npm) GHSA-hw5g-4gvf-c7vh, MAL-2026-764 | Malicious | Not scored | 05 Feb, 2026 | npm chai-as-advanced |
Malicious release: Malicious code in digital-checkout (npm) MAL-2026-761 | Malicious | Not scored | 05 Feb, 2026 | npm digital-checkout |
Malicious release: Malicious code in @helloflex/widget-next-sdk (npm) GHSA-h3g9-hf4q-p76h, MAL-2026-760 | Malicious | Not scored | 05 Feb, 2026 | npm @helloflex/widget-next-sdk |
Malicious release: Malicious code in conp-dats-editor (npm) MAL-2026-772 | Malicious | Not scored | 05 Feb, 2026 | npm conp-dats-editor |
Malicious release: Malicious code in internallib_v157 (npm) GHSA-h23p-rf86-54wq, MAL-2026-757 | Malicious | Not scored | 05 Feb, 2026 | npm internallib_v157 |
Malicious release: Malicious code in tailwindcss-forms-starter (npm) GHSA-2rc6-vjw6-pg8x, MAL-2026-758 | Malicious | Not scored | 05 Feb, 2026 | npm tailwindcss-forms-starter |
Malicious release: Malicious code in cat-retail-app (npm) GHSA-c8q4-36x7-q9xp, MAL-2026-756 | Malicious | Not scored | 05 Feb, 2026 | npm cat-retail-app |
Malicious release: Malicious code in @jes4l/react-pkg (npm) GHSA-g32q-5m39-h362, MAL-2026-755 | Malicious | Not scored | 05 Feb, 2026 | npm @jes4l/react-pkg |
Malicious release: Malicious code in express_update (npm) GHSA-w2xr-35pg-j36q, MAL-2026-751 | Malicious | Not scored | 05 Feb, 2026 | npm express_update |
Malicious release: Malicious code in locate-path_updated (npm) GHSA-5h6m-mvmj-68rj, MAL-2026-752 | Malicious | Not scored | 05 Feb, 2026 | npm locate-path_updated |
Malicious release: Malicious code in log-symbols_updated (npm) GHSA-gm92-8pqf-v32m, MAL-2026-753 | Malicious | Not scored | 05 Feb, 2026 | npm log-symbols_updated |
Malicious release: Malicious code in @purecore/rabbitmq (npm) GHSA-5v54-wrvc-9wq7, MAL-2026-749 | Malicious | Not scored | 05 Feb, 2026 | npm @purecore/rabbitmq |