Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in xzvbailey (npm) MAL-2026-16278 | Malicious | Not scored | 18 Sep, 2026 | npm xzvbailey |
Malicious release: Malicious code in xa424234657567 (npm) MAL-2026-16277 | Malicious | Not scored | 18 Sep, 2026 | npm xa424234657567 |
Malicious release: Malicious code in zero-baileys (npm) GHSA-v486-jrrq-rhwx, MAL-2026-16280 | Malicious | Not scored | 18 Sep, 2026 | npm zero-baileys |
Malicious release: Malicious code in @lekzo/baileys (npm) GHSA-jv7g-wqqq-m6gm, MAL-2026-16276 | Malicious | Not scored | 18 Sep, 2026 | npm @lekzo/baileys |
Malicious release: Malicious code in blue-string-formatter-utils (npm) MAL-2026-16273 | Malicious | Not scored | 17 Sep, 2026 | npm blue-string-formatter-utils |
Malicious release: Malicious code in @tink/tink-link-core (npm) MAL-2026-16270 | Malicious | Not scored | 17 Sep, 2026 | npm @tink/tink-link-core |
Malicious release: Malicious code in test89078-auth (npm) MAL-2026-16271 | Malicious | Not scored | 17 Sep, 2026 | npm test89078-auth |
Malicious release: Malicious code in kartykgithub-multiversion-a (npm) GHSA-p957-4pc7-x6hp, MAL-2026-16272 | Malicious | Not scored | 17 Sep, 2026 | npm kartykgithub-multiversion-a |
Malicious release: Malicious code in @kartyk-github-org/takedown-b (npm) GHSA-q83w-3hvr-fgg7, MAL-2026-16266 | Malicious | Not scored | 17 Sep, 2026 | npm @kartyk-github-org/takedown-b |
Malicious release: Malicious code in @kartyk-github-org/takedown-a (npm) GHSA-rx76-mcg9-gqc5, MAL-2026-16265 | Malicious | Not scored | 17 Sep, 2026 | npm @kartyk-github-org/takedown-a |
Malicious release: Malicious code in tailwindcss-form-ui (npm) MAL-2026-16262 | Malicious | Not scored | 17 Sep, 2026 | npm tailwindcss-form-ui |
Malicious release: Malicious code in tailwindcss-form-utils (npm) MAL-2026-16263 | Malicious | Not scored | 17 Sep, 2026 | npm tailwindcss-form-utils |
Malicious release: Malicious code in @railone/image-utils (npm) MAL-2026-16261 | Malicious | Not scored | 17 Sep, 2026 | npm @railone/image-utils |
Malicious release: Malicious code in confx1789550882 (npm) MAL-2026-16260 | Malicious | Not scored | 17 Sep, 2026 | npm confx1789550882 |
Malicious release: Malicious code in randompkga (npm) GHSA-532p-c872-3926, MAL-2026-16255 | Malicious | Not scored | 17 Sep, 2026 | npm randompkga |
Malicious release: Malicious code in randompkgd (npm) GHSA-cqc9-f5fp-r45q, MAL-2026-16258 | Malicious | Not scored | 17 Sep, 2026 | npm randompkgd |
Malicious release: Malicious code in randompkgc (npm) GHSA-p8m5-fmxm-99f6, MAL-2026-16257 | Malicious | Not scored | 17 Sep, 2026 | npm randompkgc |
Malicious release: Malicious code in randompkge (npm) GHSA-rc4q-v4pf-8j7x, MAL-2026-16259 | Malicious | Not scored | 17 Sep, 2026 | npm randompkge |
Malicious release: Malicious code in randompkgb (npm) GHSA-vxvv-gh3g-35pj, MAL-2026-16256 | Malicious | Not scored | 17 Sep, 2026 | npm randompkgb |
Malicious release: Malicious code in pulse-pwn-9f3a2 (npm) GHSA-fwr5-cj49-cq4h, MAL-2026-16254 | Malicious | Not scored | 17 Sep, 2026 | npm pulse-pwn-9f3a2 |
Malicious release: Malicious code in ragacateslikodi (npm) GHSA-mjhw-5x2v-v3wg, MAL-2026-16252 | Malicious | Not scored | 17 Sep, 2026 | npm ragacateslikodi |
Malicious release: Malicious code in tailwindcss-contact-form (npm) MAL-2026-16251 | Malicious | Not scored | 17 Sep, 2026 | npm tailwindcss-contact-form |
Malicious release: Malicious code in kartykgithub-takedown-b (npm) GHSA-f8wr-9w83-7gmw, MAL-2026-16249 | Malicious | Not scored | 17 Sep, 2026 | npm kartykgithub-takedown-b |
Malicious release: Malicious code in kartykgithub-takedown-a (npm) GHSA-5r64-rpvg-q9rr, MAL-2026-16248 | Malicious | Not scored | 17 Sep, 2026 | npm kartykgithub-takedown-a |
Malicious release: Malicious code in laycot (npm) MAL-2026-16253 | Malicious | Not scored | 16 Sep, 2026 | npm laycot |
Malicious release: Malicious code in kartyk-github-token-pkg (npm) GHSA-4rmp-vchm-9gvg, MAL-2026-16246 | Malicious | Not scored | 16 Sep, 2026 | npm kartyk-github-token-pkg |
Malicious release: Malicious code in kartyk-github-single-ver-pkg (npm) GHSA-4vpr-3r9p-p9fh, MAL-2026-16245 | Malicious | Not scored | 16 Sep, 2026 | npm kartyk-github-single-ver-pkg |
Malicious release: Malicious code in pkg-rollback-dreed-viced-sonic-ponds (npm) GHSA-63f3-rmrf-6m9q, MAL-2026-16247 | Malicious | Not scored | 16 Sep, 2026 | npm pkg-rollback-dreed-viced-sonic-ponds |
Malicious release: Malicious code in kartyk-github-oidc-test-pkg (npm) GHSA-4vxh-7998-9h4g, MAL-2026-16244 | Malicious | Not scored | 16 Sep, 2026 | npm kartyk-github-oidc-test-pkg |
Malicious release: Malicious code in idx_form_script (npm) MAL-2026-16243 | Malicious | Not scored | 16 Sep, 2026 | npm idx_form_script |
Malicious release: Malicious code in @traktis/core (npm) MAL-2026-16222 | Malicious | Not scored | 16 Sep, 2026 | npm @traktis/core |
Malicious release: Malicious code in @traktis/environment (npm) MAL-2026-16223 | Malicious | Not scored | 16 Sep, 2026 | npm @traktis/environment |
Malicious release: Malicious code in strapi-plugin-os-rec (npm) MAL-2026-16234 | Malicious | Not scored | 16 Sep, 2026 | npm strapi-plugin-os-rec |
Malicious release: Malicious code in strapi-plugin-ccrev-meeb (npm) MAL-2026-16228 | Malicious | Not scored | 16 Sep, 2026 | npm strapi-plugin-ccrev-meeb |
Malicious release: Malicious code in strapi-plugin-osag (npm) MAL-2026-16235 | Malicious | Not scored | 16 Sep, 2026 | npm strapi-plugin-osag |
Malicious release: Malicious code in strapi-plugin-ccrec-meeb (npm) MAL-2026-16227 | Malicious | Not scored | 16 Sep, 2026 | npm strapi-plugin-ccrec-meeb |
Malicious release: Malicious code in strapi-plugin-cccon-meeb (npm) MAL-2026-16225 | Malicious | Not scored | 16 Sep, 2026 | npm strapi-plugin-cccon-meeb |
Malicious release: Malicious code in strapi-plugin-persh-meeb (npm) MAL-2026-16237 | Malicious | Not scored | 16 Sep, 2026 | npm strapi-plugin-persh-meeb |
Malicious release: Malicious code in strapi-plugin-pysh-meeb (npm) MAL-2026-16239 | Malicious | Not scored | 16 Sep, 2026 | npm strapi-plugin-pysh-meeb |
Malicious release: Malicious code in strapi-plugin-perev-meeb (npm) MAL-2026-16236 | Malicious | Not scored | 16 Sep, 2026 | npm strapi-plugin-perev-meeb |
Malicious release: Malicious code in strapi-plugin-ccip-meeb (npm) MAL-2026-16226 | Malicious | Not scored | 16 Sep, 2026 | npm strapi-plugin-ccip-meeb |
Malicious release: Malicious code in strapi-plugin-honey-meeb (npm) MAL-2026-16231 | Malicious | Not scored | 16 Sep, 2026 | npm strapi-plugin-honey-meeb |
Malicious release: Malicious code in strapi-plugin-conresh-meeb (npm) MAL-2026-16229 | Malicious | Not scored | 16 Sep, 2026 | npm strapi-plugin-conresh-meeb |
Malicious release: Malicious code in strapi-plugin-feedmeeb (npm) MAL-2026-16230 | Malicious | Not scored | 16 Sep, 2026 | npm strapi-plugin-feedmeeb |
Malicious release: Malicious code in strapi-plugin-portcc-meeb (npm) MAL-2026-16238 | Malicious | Not scored | 16 Sep, 2026 | npm strapi-plugin-portcc-meeb |
Malicious release: Malicious code in strapi-plugin-maylog-meeb (npm) MAL-2026-16233 | Malicious | Not scored | 16 Sep, 2026 | npm strapi-plugin-maylog-meeb |
Malicious release: Malicious code in strapi-plugin-listcc-meeb (npm) MAL-2026-16232 | Malicious | Not scored | 16 Sep, 2026 | npm strapi-plugin-listcc-meeb |
Malicious release: Malicious code in process-mite (npm) MAL-2026-16224 | Malicious | Not scored | 16 Sep, 2026 | npm process-mite |
Malicious release: Malicious code in discord-resolvers (npm) GHSA-whmq-ffxc-4jpc, MAL-2026-16214 | Malicious | Not scored | 16 Sep, 2026 | npm discord-resolvers |
Malicious release: Malicious code in discord-players (npm) GHSA-mvg6-qj9g-3j3j, MAL-2026-16213 | Malicious | Not scored | 16 Sep, 2026 | npm discord-players |