Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in tarax (npm) GHSA-977v-pjj7-wg54, MAL-2026-694 | Malicious | Not scored | 03 Feb, 2026 | npm tarax |
Malicious release: Malicious code in @uselagoon/ui-library (npm) GHSA-32mg-49pf-3c7v, MAL-2026-687 | Malicious | Not scored | 03 Feb, 2026 | npm @uselagoon/ui-library |
Malicious release: Malicious code in internallib_v782 (npm) GHSA-64mm-mg79-hvm8, MAL-2026-681 | Malicious | Not scored | 03 Feb, 2026 | npm internallib_v782 |
Malicious release: Malicious code in epic-admin-ui (npm) GHSA-28p2-g59r-757w, MAL-2026-679 | Malicious | Not scored | 03 Feb, 2026 | npm epic-admin-ui |
Malicious release: Malicious code in strengthifys (npm) GHSA-5wwj-79v9-g888, MAL-2026-685 | Malicious | Not scored | 03 Feb, 2026 | npm strengthifys |
Malicious release: Malicious code in react-responsive-carousel-v4 (npm) GHSA-qq97-6wv4-mc44, MAL-2026-684 | Malicious | Not scored | 03 Feb, 2026 | npm react-responsive-carousel-v4 |
Malicious release: Malicious code in frontend-js-state-web (npm) GHSA-xj8r-jcfw-rgh6, MAL-2026-680 | Malicious | Not scored | 03 Feb, 2026 | npm frontend-js-state-web |
Malicious release: Malicious code in l2-contracts (npm) GHSA-vpf8-7r9r-xj4q, MAL-2026-683 | Malicious | Not scored | 03 Feb, 2026 | npm l2-contracts |
Malicious release: Malicious code in kwp-analytics (npm) GHSA-5j5h-h973-m92m, MAL-2026-682 | Malicious | Not scored | 03 Feb, 2026 | npm kwp-analytics |
Malicious release: Malicious code in chai-promise-tools (npm) GHSA-2737-5rcq-jwmj, MAL-2026-677 | Malicious | Not scored | 03 Feb, 2026 | npm chai-promise-tools |
Malicious release: Malicious code in cookie-parsers-env (npm) GHSA-6895-8x2m-4vgj, MAL-2026-678 | Malicious | Not scored | 03 Feb, 2026 | npm cookie-parsers-env |
Malicious release: Malicious code in @ikeacnalan/icons (npm) GHSA-4prp-gwjj-hvcx, MAL-2026-676 | Malicious | Not scored | 03 Feb, 2026 | npm @ikeacnalan/icons |
Malicious release: Malicious code in freedom-baileys (npm) GHSA-fxh3-4mx2-wr7c, MAL-2026-674 | Malicious | Not scored | 03 Feb, 2026 | npm freedom-baileys |
Malicious release: Malicious code in baileys-ud (npm) GHSA-x3qj-8mg5-454f, MAL-2026-673 | Malicious | Not scored | 03 Feb, 2026 | npm baileys-ud |
Malicious release: Malicious code in supun-baileys (npm) GHSA-8pm4-268p-f52g, MAL-2026-675 | Malicious | Not scored | 03 Feb, 2026 | npm supun-baileys |
Malicious release: Malicious code in baileys-dtz (npm) GHSA-cj3x-rfp6-hvpq, MAL-2026-672 | Malicious | Not scored | 03 Feb, 2026 | npm baileys-dtz |
Malicious release: Malicious code in cheerio-core (npm) GHSA-cf89-f5f4-vjmf, MAL-2026-671 | Malicious | Not scored | 03 Feb, 2026 | npm cheerio-core |
Malicious release: Malicious code in aligned-array (npm) GHSA-j7qj-j3fg-5xc8, MAL-2026-670 | Malicious | Not scored | 03 Feb, 2026 | npm aligned-array |
Malicious release: Malicious code in transform-exponentiation-operator (npm) GHSA-9wj6-743f-j243, MAL-2026-665 | Malicious | Not scored | 03 Feb, 2026 | npm transform-exponentiation-operator |
Malicious release: Malicious code in transform-es2015-modules-amd (npm) GHSA-c3j3-4q92-2fmj, MAL-2026-664 | Malicious | Not scored | 03 Feb, 2026 | npm transform-es2015-modules-amd |
Malicious release: Malicious code in transform-async-generator-functions (npm) GHSA-c676-937q-qchw, MAL-2026-663 | Malicious | Not scored | 03 Feb, 2026 | npm transform-async-generator-functions |
Malicious release: Malicious code in typed-document-node (npm) GHSA-g72g-cjcm-9rqx, MAL-2026-667 | Malicious | Not scored | 03 Feb, 2026 | npm typed-document-node |
Malicious release: Malicious code in transform-react-display-name (npm) GHSA-q5v2-pv3p-r942, MAL-2026-666 | Malicious | Not scored | 03 Feb, 2026 | npm transform-react-display-name |
Malicious release: Malicious code in typescript-react-apollo (npm) GHSA-r75h-h4r8-v8mp, MAL-2026-668 | Malicious | Not scored | 03 Feb, 2026 | npm typescript-react-apollo |
Malicious release: Malicious code in netlify-project-helper (npm) GHSA-c7jj-qv39-h43c, MAL-2026-661 | Malicious | Not scored | 03 Feb, 2026 | npm netlify-project-helper |
Malicious release: Malicious code in dns-troubleshoot-toolkit-xyz123 (npm) GHSA-fr66-mh5r-h32m, MAL-2026-660 | Malicious | Not scored | 03 Feb, 2026 | npm dns-troubleshoot-toolkit-xyz123 |
Malicious release: Malicious code in vite-ui-components (npm) GHSA-ghx7-rp3h-537v, MAL-2026-669 | Malicious | Not scored | 03 Feb, 2026 | npm vite-ui-components |
Malicious release: Malicious code in ansi-universal-ui (npm) GHSA-j2cw-hc39-qrw9, MAL-2026-658 | Malicious | Not scored | 03 Feb, 2026 | npm ansi-universal-ui |
Malicious release: Malicious code in atg-atgse (npm) GHSA-xfh5-c4pm-5p96, MAL-2026-659 | Malicious | Not scored | 03 Feb, 2026 | npm atg-atgse |
Malicious release: Malicious code in researchpoc (npm) GHSA-pvcf-c7x9-273f, MAL-2026-662 | Malicious | Not scored | 03 Feb, 2026 | npm researchpoc |
Malicious release: Malicious code in react-dnd-legacy-html5-backend (npm) GHSA-3g83-5rw5-fhpw, MAL-2026-657 | Malicious | Not scored | 03 Feb, 2026 | npm react-dnd-legacy-html5-backend |
Malicious release: Malicious code in jshint-groups (npm) GHSA-f2cq-h2rx-cjw6, MAL-2026-656 | Malicious | Not scored | 03 Feb, 2026 | npm jshint-groups |
Malicious release: Malicious code in picking-miniapp (npm) GHSA-8fp4-7xff-mpwm, MAL-2026-646 | Malicious | Not scored | 02 Feb, 2026 | npm picking-miniapp |
Malicious release: Malicious code in react-native-expofp (npm) GHSA-326q-pfrf-3f2v, MAL-2026-647 | Malicious | Not scored | 02 Feb, 2026 | npm react-native-expofp |
Malicious release: Malicious code in dise-pkt (npm) GHSA-jgcj-pm32-hmcj, MAL-2026-644 | Malicious | Not scored | 02 Feb, 2026 | npm dise-pkt |
Malicious release: Malicious code in @hemanshu_patil/xcode (npm) GHSA-7jjv-6pgj-6rv7, MAL-2026-642 | Malicious | Not scored | 02 Feb, 2026 | npm @hemanshu_patil/xcode |
Malicious release: Malicious code in @hemanshu_patil/xcode-windows-x64 (npm) GHSA-p6w8-c7rw-69c8, MAL-2026-643 | Malicious | Not scored | 02 Feb, 2026 | npm @hemanshu_patil/xcode-windows-x64 |
Malicious release: Malicious code in yazxzpedia (npm) GHSA-765g-mfj4-v8fw, MAL-2026-648 | Malicious | Not scored | 02 Feb, 2026 | npm yazxzpedia |
Malicious release: Malicious code in libsignal-yazxzpedia (npm) GHSA-vxf9-w3qp-wrwm, MAL-2026-645 | Malicious | Not scored | 02 Feb, 2026 | npm libsignal-yazxzpedia |
Malicious release: Malicious code in idv-script (npm) GHSA-2pq9-mrgm-gmmx, MAL-2026-636 | Malicious | Not scored | 02 Feb, 2026 | npm idv-script |
Malicious release: Malicious code in launchdarkly-cpp-networking (npm) GHSA-6pxm-pv2w-jh33, MAL-2026-637 | Malicious | Not scored | 02 Feb, 2026 | npm launchdarkly-cpp-networking |
Malicious release: Malicious code in solhint-plugin-hyperlane (npm) GHSA-mp62-7w25-x8jm, MAL-2026-638 | Malicious | Not scored | 02 Feb, 2026 | npm solhint-plugin-hyperlane |
Malicious release: Malicious code in eslint-config-minecraft-scripting (npm) GHSA-rh9x-2vc7-83hh, MAL-2026-634 | Malicious | Not scored | 02 Feb, 2026 | npm eslint-config-minecraft-scripting |
Malicious release: Malicious code in @casaverso/frontend-core (npm) GHSA-x9r9-7gv6-vrfh, MAL-2026-628 | Malicious | Not scored | 02 Feb, 2026 | npm @casaverso/frontend-core |
Malicious release: Malicious code in client-desktop-web-installer (npm) MAL-2026-629 | Malicious | Not scored | 02 Feb, 2026 | npm client-desktop-web-installer |
Malicious release: Malicious code in cowsay-allcaps (npm) MAL-2026-630 | Malicious | Not scored | 02 Feb, 2026 | npm cowsay-allcaps |
Malicious release: Malicious code in cowsay-caps (npm) MAL-2026-631 | Malicious | Not scored | 02 Feb, 2026 | npm cowsay-caps |
Malicious release: Malicious code in cowsay-deluxe (npm) MAL-2026-632 | Malicious | Not scored | 02 Feb, 2026 | npm cowsay-deluxe |
Malicious release: Malicious code in cowsay-fancy (npm) MAL-2026-633 | Malicious | Not scored | 02 Feb, 2026 | npm cowsay-fancy |
Malicious release: Malicious code in finnairshop (npm) MAL-2026-635 | Malicious | Not scored | 02 Feb, 2026 | npm finnairshop |