Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in dspmobile (npm) GHSA-x9fp-x6pr-v3wx, MAL-2026-750 | Malicious | Not scored | 05 Feb, 2026 | npm dspmobile |
Malicious release: Malicious code in tailwindcss-animation-modern (npm) GHSA-w9j5-g394-3q5c, MAL-2026-754 | Malicious | Not scored | 05 Feb, 2026 | npm tailwindcss-animation-modern |
Malicious release: Malicious code in react-vite-sync (npm) GHSA-6c8f-x4v8-69pr, MAL-2026-747 | Malicious | Not scored | 04 Feb, 2026 | npm react-vite-sync |
Malicious release: Malicious code in react-count-sync (npm) GHSA-g8h5-29pj-64xq, MAL-2026-746 | Malicious | Not scored | 04 Feb, 2026 | npm react-count-sync |
Malicious release: Malicious code in web3-chain-sync (npm) GHSA-p3xm-qpjg-2gg8, MAL-2026-748 | Malicious | Not scored | 04 Feb, 2026 | npm web3-chain-sync |
Malicious release: Malicious code in dcf-commons (npm) GHSA-qc9j-cjcm-p53g, MAL-2026-742 | Malicious | Not scored | 04 Feb, 2026 | npm dcf-commons |
Malicious release: Malicious code in @msecscc/gaia (npm) GHSA-9m24-6v7q-pffv, MAL-2026-740 | Malicious | Not scored | 04 Feb, 2026 | npm @msecscc/gaia |
Malicious release: Malicious code in internationalized (npm) GHSA-2f47-cw56-c2fv, MAL-2026-743 | Malicious | Not scored | 04 Feb, 2026 | npm internationalized |
Malicious release: Malicious code in confluence-analytics-support (npm) GHSA-4j65-m9j3-4wrc, MAL-2026-741 | Malicious | Not scored | 04 Feb, 2026 | npm confluence-analytics-support |
Malicious release: Malicious code in mdp-client-web (npm) GHSA-crrc-9hrh-2pgh, MAL-2026-744 | Malicious | Not scored | 04 Feb, 2026 | npm mdp-client-web |
Malicious release: Malicious code in ggajsvjsg (npm) GHSA-jv7m-6p34-m7xf, MAL-2026-736 | Malicious | Not scored | 04 Feb, 2026 | npm ggajsvjsg |
Malicious release: Malicious code in docusaurus-plugin-launchdarkly (npm) GHSA-q8cq-3xjx-954v, MAL-2026-735 | Malicious | Not scored | 04 Feb, 2026 | npm docusaurus-plugin-launchdarkly |
Malicious release: Malicious code in remark-gfm-v4 (npm) GHSA-xpfh-2xjg-cgvr, MAL-2026-737 | Malicious | Not scored | 04 Feb, 2026 | npm remark-gfm-v4 |
Malicious release: Malicious code in xpack-subscription-test (npm) GHSA-cjg3-62x9-48px, MAL-2026-734 | Malicious | Not scored | 04 Feb, 2026 | npm xpack-subscription-test |
Malicious release: Malicious code in deuro-landing-page (npm) MAL-2026-733 | Malicious | Not scored | 04 Feb, 2026 | npm deuro-landing-page |
Malicious release: Malicious code in partnerss (npm) MAL-2026-717 | Malicious | Not scored | 04 Feb, 2026 | npm partnerss |
Malicious release: Malicious code in json-mapping-source (npm) GHSA-mh9w-jmxc-c3wj, MAL-2026-725 | Malicious | Not scored | 04 Feb, 2026 | npm json-mapping-source |
Malicious release: Malicious code in chai-grab (npm) GHSA-j4cp-89ch-6hv7, MAL-2026-720 | Malicious | Not scored | 04 Feb, 2026 | npm chai-grab |
Malicious release: Malicious code in zappr (npm) GHSA-6cp7-hh84-q43w, MAL-2026-730 | Malicious | Not scored | 04 Feb, 2026 | npm zappr |
Malicious release: Malicious code in z-shop-js-env (npm) GHSA-6hph-mcq5-c6c3, MAL-2026-727 | Malicious | Not scored | 04 Feb, 2026 | npm z-shop-js-env |
Malicious release: Malicious code in z-shop-ui (npm) GHSA-hrr6-55jh-6cvv, MAL-2026-728 | Malicious | Not scored | 04 Feb, 2026 | npm z-shop-ui |
Malicious release: Malicious code in zalando-consent-api (npm) GHSA-r6c3-cmw7-p4qr, MAL-2026-729 | Malicious | Not scored | 04 Feb, 2026 | npm zalando-consent-api |
Malicious release: Malicious code in z-shop-event-bus (npm) GHSA-xfv7-mr73-872w, MAL-2026-726 | Malicious | Not scored | 04 Feb, 2026 | npm z-shop-event-bus |
Malicious release: Malicious code in chai-async-promised (npm) GHSA-37qg-vpf9-mc8h, MAL-2026-719 | Malicious | Not scored | 04 Feb, 2026 | npm chai-async-promised |
Malicious release: Malicious code in dotenv-embedded (npm) GHSA-v736-fhq8-mxhm, MAL-2026-721 | Malicious | Not scored | 04 Feb, 2026 | npm dotenv-embedded |
Malicious release: Malicious code in https-emailjs (npm) GHSA-3gjc-g7m2-vjf4, MAL-2026-724 | Malicious | Not scored | 04 Feb, 2026 | npm https-emailjs |
Malicious release: Malicious code in http-emailjs (npm) GHSA-8g4f-5rq7-4g8h, MAL-2026-723 | Malicious | Not scored | 04 Feb, 2026 | npm http-emailjs |
Malicious release: Malicious code in @fxinternal/netdiagnostics (npm) GHSA-83x6-432q-hpcf, MAL-2026-718 | Malicious | Not scored | 04 Feb, 2026 | npm @fxinternal/netdiagnostics |
Malicious release: Malicious code in express-groups-routes (npm) GHSA-v866-jcq6-8pmv, MAL-2026-722 | Malicious | Not scored | 04 Feb, 2026 | npm express-groups-routes |
Malicious release: Malicious code in ongose (npm) GHSA-3r27-rv87-43w9, MAL-2026-712 | Malicious | Not scored | 04 Feb, 2026 | npm ongose |
Malicious release: Malicious code in reactt-sdkk (npm) GHSA-4hx3-gphj-r9hr, MAL-2026-714 | Malicious | Not scored | 04 Feb, 2026 | npm reactt-sdkk |
Malicious release: Malicious code in mongooose_update (npm) GHSA-626w-9prr-rwc6, MAL-2026-709 | Malicious | Not scored | 04 Feb, 2026 | npm mongooose_update |
Malicious release: Malicious code in mongoose_update (npm) GHSA-g9f3-5423-w9c8, MAL-2026-711 | Malicious | Not scored | 04 Feb, 2026 | npm mongoose_update |
Malicious release: Malicious code in react-sdkk (npm) GHSA-gvm7-w8rj-q842, MAL-2026-713 | Malicious | Not scored | 04 Feb, 2026 | npm react-sdkk |
Malicious release: Malicious code in si-wsl (npm) GHSA-qc6m-55v7-26x2, MAL-2026-716 | Malicious | Not scored | 04 Feb, 2026 | npm si-wsl |
Malicious release: Malicious code in rreact-sdk (npm) GHSA-v42r-whqq-4prv, MAL-2026-715 | Malicious | Not scored | 04 Feb, 2026 | npm rreact-sdk |
Malicious release: Malicious code in mongooose_updated (npm) GHSA-x2r8-ggc3-9654, MAL-2026-710 | Malicious | Not scored | 04 Feb, 2026 | npm mongooose_updated |
Malicious release: Malicious code in incode-kyc-backend (npm) GHSA-3gwm-923q-5fmw, MAL-2026-708 | Malicious | Not scored | 03 Feb, 2026 | npm incode-kyc-backend |
Malicious release: Malicious code in js-unpack (npm) GHSA-6444-v9wg-78rr, MAL-2026-707 | Malicious | Not scored | 03 Feb, 2026 | npm js-unpack |
Malicious release: Malicious code in @devgandhi/healthpulse (npm) GHSA-m56w-m3fj-frgc, MAL-2026-706 | Malicious | Not scored | 03 Feb, 2026 | npm @devgandhi/healthpulse |
Malicious release: Malicious code in @devgandhi/cpp (npm) GHSA-qc7c-jwxx-8xm4, MAL-2026-705 | Malicious | Not scored | 03 Feb, 2026 | npm @devgandhi/cpp |
Malicious release: Malicious code in testing-package-xdsfdsfsc (npm) GHSA-g689-p7j3-98f4, MAL-2026-704 | Malicious | Not scored | 03 Feb, 2026 | npm testing-package-xdsfdsfsc |
Malicious release: Malicious code in @x-clients/features (npm) MAL-2026-703 | Malicious | Not scored | 03 Feb, 2026 | npm @x-clients/features |
Malicious release: Malicious code in fileupload-util (npm) GHSA-jmrr-h39h-r9g2, MAL-2026-690 | Malicious | Not scored | 03 Feb, 2026 | npm fileupload-util |
Malicious release: Malicious code in tailwindcss-forms-kit (npm) GHSA-pj8r-8q3r-5ph7, MAL-2026-693 | Malicious | Not scored | 03 Feb, 2026 | npm tailwindcss-forms-kit |
Malicious release: Malicious code in eslint-config-nlx (npm) GHSA-454v-pj98-2gmp, MAL-2026-688 | Malicious | Not scored | 03 Feb, 2026 | npm eslint-config-nlx |
Malicious release: Malicious code in fingerprint-stitch (npm) GHSA-6h22-pfff-vf2m, MAL-2026-691 | Malicious | Not scored | 03 Feb, 2026 | npm fingerprint-stitch |
Malicious release: Malicious code in eslint-config-stitch (npm) GHSA-7583-6vm2-9c8v, MAL-2026-689 | Malicious | Not scored | 03 Feb, 2026 | npm eslint-config-stitch |
Malicious release: Malicious code in tsconfig-stitch (npm) GHSA-pfpv-rmhq-q3pm, MAL-2026-695 | Malicious | Not scored | 03 Feb, 2026 | npm tsconfig-stitch |
Malicious release: Malicious code in graphrix (npm) GHSA-257q-hjm7-v3pp, MAL-2026-692 | Malicious | Not scored | 03 Feb, 2026 | npm graphrix |