Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in roots-cms-client (npm) GHSA-q57g-x3rh-xj4x, MAL-2026-617 | Malicious | Not scored | 31 Jan, 2026 | npm roots-cms-client |
Malicious release: Malicious code in c11dff444 (npm) GHSA-cpcr-74hm-pg3c, MAL-2026-616 | Malicious | Not scored | 31 Jan, 2026 | npm c11dff444 |
Malicious release: Malicious code in teaser-nav (npm) MAL-2026-615 | Malicious | Not scored | 31 Jan, 2026 | npm teaser-nav |
Malicious release: Malicious code in sharedclasses (npm) MAL-2026-612 | Malicious | Not scored | 30 Jan, 2026 | npm sharedclasses |
Malicious release: Malicious code in mbo-letters-cl (npm) MAL-2026-611 | Malicious | Not scored | 30 Jan, 2026 | npm mbo-letters-cl |
Malicious release: Malicious code in euskalplantxa (npm) MAL-2026-609 | Malicious | Not scored | 30 Jan, 2026 | npm euskalplantxa |
Malicious release: Malicious code in ezviz-shop-mall (npm) MAL-2026-608 | Malicious | Not scored | 30 Jan, 2026 | npm ezviz-shop-mall |
Malicious release: Malicious code in banquet-runtime-modules (npm) GHSA-2mrq-r658-h2pp, MAL-2026-607 | Malicious | Not scored | 30 Jan, 2026 | npm banquet-runtime-modules |
Malicious release: Malicious code in dhgshop (npm) MAL-2026-605 | Malicious | Not scored | 29 Jan, 2026 | npm dhgshop |
Malicious release: Malicious code in researchpoc2 (npm) GHSA-mq4c-jcxh-3w9f, MAL-2026-600 | Malicious | Not scored | 29 Jan, 2026 | npm researchpoc2 |
Malicious release: Malicious code in jwt-pack (npm) GHSA-grxm-6mcc-6f63, MAL-2026-599 | Malicious | Not scored | 29 Jan, 2026 | npm jwt-pack |
Malicious release: Malicious code in n8n-nodes-comfyui-illu (npm) GHSA-h3jq-3362-m28h, MAL-2026-597 | Malicious | Not scored | 29 Jan, 2026 | npm n8n-nodes-comfyui-illu |
Malicious release: Malicious code in wallet-icon-font (npm) GHSA-cf83-6cqr-9pfj, MAL-2026-598 | Malicious | Not scored | 29 Jan, 2026 | npm wallet-icon-font |
Malicious release: Malicious code in turbotax (npm) MAL-2026-596 | Malicious | Not scored | 29 Jan, 2026 | npm turbotax |
Malicious release: Malicious code in epic-asset-uploader (npm) GHSA-ph6h-g4vx-mhcw, MAL-2026-594 | Malicious | Not scored | 28 Jan, 2026 | npm epic-asset-uploader |
Malicious release: Malicious code in lvldragdrop (npm) GHSA-4mpr-9v4m-36mr, MAL-2026-592 | Malicious | Not scored | 28 Jan, 2026 | npm lvldragdrop |
Malicious release: Malicious code in kol7a (npm) GHSA-gjfm-7vq2-6xxm, MAL-2026-591 | Malicious | Not scored | 28 Jan, 2026 | npm kol7a |
Malicious release: Malicious code in chai-as-extended (npm) GHSA-f2gq-x6pw-gx86, MAL-2026-584 | Malicious | Not scored | 28 Jan, 2026 | npm chai-as-extended |
Malicious release: Malicious code in chai-async-tests (npm) GHSA-7rw2-vmhh-r49r, MAL-2026-585 | Malicious | Not scored | 28 Jan, 2026 | npm chai-async-tests |
Malicious release: Malicious code in dotenv-embed (npm) GHSA-g7gf-xv5g-23vj, MAL-2026-589 | Malicious | Not scored | 28 Jan, 2026 | npm dotenv-embed |
Malicious release: Malicious code in chai-sub (npm) GHSA-jqjg-xrc8-j5wp, MAL-2026-588 | Malicious | Not scored | 28 Jan, 2026 | npm chai-sub |
Malicious release: Malicious code in chai-px (npm) GHSA-pxqc-p784-gwcv, MAL-2026-587 | Malicious | Not scored | 28 Jan, 2026 | npm chai-px |
Malicious release: Malicious code in chai-chains-async (npm) GHSA-2jj5-mpwm-2r3q, MAL-2026-586 | Malicious | Not scored | 28 Jan, 2026 | npm chai-chains-async |
Malicious release: Malicious code in vuejavascript (npm) GHSA-343p-7f7g-4fc5, MAL-2026-583 | Malicious | Not scored | 28 Jan, 2026 | npm vuejavascript |
Malicious release: Malicious code in skndkjasndkjan (npm) GHSA-4wq8-r5qp-h22x, MAL-2026-579 | Malicious | Not scored | 28 Jan, 2026 | npm skndkjasndkjan |
Malicious release: Malicious code in somesomesome (npm) GHSA-4x3j-x4rf-gpwm, MAL-2026-580 | Malicious | Not scored | 28 Jan, 2026 | npm somesomesome |
Malicious release: Malicious code in somesomesomesome (npm) GHSA-fvr5-73f4-24ff, MAL-2026-581 | Malicious | Not scored | 28 Jan, 2026 | npm somesomesomesome |
Malicious release: Malicious code in somsodamsd (npm) GHSA-gf2v-h9fx-4c26, MAL-2026-582 | Malicious | Not scored | 28 Jan, 2026 | npm somsodamsd |
Malicious release: Malicious code in @pukpuk1/somsodamsd (npm) GHSA-gh8h-whjm-r7xr, MAL-2026-578 | Malicious | Not scored | 28 Jan, 2026 | npm @pukpuk1/somsodamsd |
Malicious release: Malicious code in react-toast-cold (npm) GHSA-p975-whf2-4298, MAL-2026-626 | Malicious | Not scored | 28 Jan, 2026 | npm react-toast-cold |
Malicious release: Malicious code in lyatly-utils (npm) GHSA-q5j5-vc8g-m882, MAL-2026-570 | Malicious | Not scored | 28 Jan, 2026 | npm lyatly-utils |
Malicious release: Malicious code in okijuh (npm) GHSA-hwjx-5cwx-rh26, MAL-2026-571 | Malicious | Not scored | 28 Jan, 2026 | npm okijuh |
Malicious release: Malicious code in chai-as-hashed (npm) GHSA-xq26-9mh8-r598, MAL-2026-564 | Malicious | Not scored | 28 Jan, 2026 | npm chai-as-hashed |
Malicious release: Malicious code in converse-rn-lib (npm) GHSA-fj2c-wgqv-w8v4, MAL-2026-565 | Malicious | Not scored | 28 Jan, 2026 | npm converse-rn-lib |
Malicious release: Malicious code in teslaone (npm) GHSA-2q8p-9v46-43cq, MAL-2026-576 | Malicious | Not scored | 28 Jan, 2026 | npm teslaone |
Malicious release: Malicious code in ern-picking2-api (npm) GHSA-3783-qwgq-rp7r, MAL-2026-569 | Malicious | Not scored | 28 Jan, 2026 | npm ern-picking2-api |
Malicious release: Malicious code in syntax-flow (npm) GHSA-jmgr-j34v-w55f, MAL-2026-574 | Malicious | Not scored | 28 Jan, 2026 | npm syntax-flow |
Malicious release: Malicious code in transform-vue-jsx (npm) GHSA-rcwh-hv2v-4qph, MAL-2026-577 | Malicious | Not scored | 28 Jan, 2026 | npm transform-vue-jsx |
Malicious release: Malicious code in syntax-jsx (npm) GHSA-x6qc-f5wc-vg8v, MAL-2026-575 | Malicious | Not scored | 28 Jan, 2026 | npm syntax-jsx |
Malicious release: Malicious code in equimper (npm) GHSA-26g8-qc5w-6c85, MAL-2026-568 | Malicious | Not scored | 28 Jan, 2026 | npm equimper |
Malicious release: Malicious code in pino-debugger (npm) GHSA-567m-jw3g-vq3f, MAL-2026-572 | Malicious | Not scored | 28 Jan, 2026 | npm pino-debugger |
Malicious release: Malicious code in debug-glitz (npm) GHSA-hp56-hf27-83mh, MAL-2026-567 | Malicious | Not scored | 28 Jan, 2026 | npm debug-glitz |
Malicious release: Malicious code in debug-fmt (npm) GHSA-hvhh-9q7c-6g8m, MAL-2026-566 | Malicious | Not scored | 28 Jan, 2026 | npm debug-fmt |
Malicious release: Malicious code in @nayzak51/primebeem-db (npm) GHSA-frcp-w72c-22w9, MAL-2026-563 | Malicious | Not scored | 28 Jan, 2026 | npm @nayzak51/primebeem-db |
Malicious release: Malicious code in primebeem-db (npm) GHSA-h78x-qfxq-8h87, MAL-2026-573 | Malicious | Not scored | 28 Jan, 2026 | npm primebeem-db |
Malicious release: Malicious code in acuitymobileapp (npm) GHSA-hmgh-7h9h-prmj, MAL-2026-555 | Malicious | Not scored | 28 Jan, 2026 | npm acuitymobileapp |
Malicious release: Malicious code in n8n-nodes-zalo-fevox (npm) GHSA-v6q8-mf3h-4655, MAL-2026-557 | Malicious | Not scored | 28 Jan, 2026 | npm n8n-nodes-zalo-fevox |
Malicious release: Malicious code in n8n-zalo-fevox (npm) GHSA-xxpx-q438-f7hp, MAL-2026-558 | Malicious | Not scored | 28 Jan, 2026 | npm n8n-zalo-fevox |
Malicious release: Malicious code in digital-music-dynmsg-ribbon (npm) GHSA-3qx7-2mxx-7vvc, MAL-2026-556 | Malicious | Not scored | 28 Jan, 2026 | npm digital-music-dynmsg-ribbon |
Malicious release: Malicious code in transform-async-to-generator (npm) GHSA-cxhp-v2gh-3v7f, MAL-2026-560 | Malicious | Not scored | 28 Jan, 2026 | npm transform-async-to-generator |