Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @workleap-ai/shared (npm) GHSA-3594-6cm3-gmrr, MAL-2026-210 | Malicious | Not scored | 12 Jan, 2026 | npm @workleap-ai/shared |
Malicious release: Malicious code in @workleap-widgets/client (npm) GHSA-55gm-94x9-jg2r, MAL-2026-211 | Malicious | Not scored | 12 Jan, 2026 | npm @workleap-widgets/client |
Malicious release: Malicious code in lyonscg (npm) GHSA-p8xh-97x2-qrcm, MAL-2026-212 | Malicious | Not scored | 12 Jan, 2026 | npm lyonscg |
Malicious release: Malicious code in @t4i-cms-components/contact-card (npm) GHSA-r269-vxj8-7hg5, MAL-2026-209 | Malicious | Not scored | 12 Jan, 2026 | npm @t4i-cms-components/contact-card |
Malicious release: Malicious code in @gwp-gtmt-components/event-listener (npm) GHSA-x4fv-rfjv-fmxg, MAL-2026-208 | Malicious | Not scored | 12 Jan, 2026 | npm @gwp-gtmt-components/event-listener |
Malicious release: Malicious code in body-parser-js (npm) GHSA-7qgr-25rr-m3wp, MAL-2026-203 | Malicious | Not scored | 12 Jan, 2026 | npm body-parser-js |
Malicious release: Malicious code in terser-js (npm) GHSA-84hm-p25j-g6v9, MAL-2026-206 | Malicious | Not scored | 12 Jan, 2026 | npm terser-js |
Malicious release: Malicious code in yargs-js (npm) GHSA-cphf-84vm-2c35, MAL-2026-207 | Malicious | Not scored | 12 Jan, 2026 | npm yargs-js |
Malicious release: Malicious code in pako-js (npm) GHSA-qj9v-4mmh-fg5v, MAL-2026-204 | Malicious | Not scored | 12 Jan, 2026 | npm pako-js |
Malicious release: Malicious code in rxjs-js (npm) GHSA-qv83-7mq6-fxx4, MAL-2026-205 | Malicious | Not scored | 12 Jan, 2026 | npm rxjs-js |
Malicious release: Malicious code in shopee-chat (npm) GHSA-wp95-qq4v-wmpr, MAL-2026-198 | Malicious | Not scored | 11 Jan, 2026 | npm shopee-chat |
Malicious release: Malicious code in conmiyagi-map (npm) GHSA-wjx6-w662-h65v, MAL-2026-190 | Malicious | Not scored | 11 Jan, 2026 | npm conmiyagi-map |
Malicious release: Malicious code in mui7 (npm) GHSA-h94m-cfr5-p5rq, MAL-2026-194 | Malicious | Not scored | 10 Jan, 2026 | npm mui7 |
Malicious release: Malicious code in oe-oauth (npm) GHSA-7724-j9h5-v5hg, MAL-2026-196 | Malicious | Not scored | 10 Jan, 2026 | npm oe-oauth |
Malicious release: Malicious code in wac-relay-runtime (npm) GHSA-4xcf-f3v9-8hj8, MAL-2026-202 | Malicious | Not scored | 10 Jan, 2026 | npm wac-relay-runtime |
Malicious release: Malicious code in mui7icons (npm) GHSA-4wwj-2cvp-337q, MAL-2026-195 | Malicious | Not scored | 10 Jan, 2026 | npm mui7icons |
Malicious release: Malicious code in vet-bones (npm) GHSA-8hjq-rhjq-69g4, MAL-2026-199 | Malicious | Not scored | 10 Jan, 2026 | npm vet-bones |
Malicious release: Malicious code in wac-react (npm) GHSA-6whj-v3jx-j7r4, MAL-2026-200 | Malicious | Not scored | 10 Jan, 2026 | npm wac-react |
Malicious release: Malicious code in wac-react-dom (npm) GHSA-6w23-3m7m-ffrm, MAL-2026-201 | Malicious | Not scored | 10 Jan, 2026 | npm wac-react-dom |
Malicious release: Malicious code in resto_ui_components (npm) GHSA-w8w9-253c-7fx4, MAL-2026-197 | Malicious | Not scored | 10 Jan, 2026 | npm resto_ui_components |
Malicious release: Malicious code in shopping-cart-service (npm) GHSA-46gh-xv9p-94jc, MAL-2026-188 | Malicious | Not scored | 10 Jan, 2026 | npm shopping-cart-service |
Malicious release: Malicious code in n8n-nodes-hfgjf-irtuinvcm-lasdqewriit (npm) GHSA-77g5-qpc3-x24r, MAL-2026-178 | Malicious | Not scored | 09 Jan, 2026 | npm n8n-nodes-hfgjf-irtuinvcm-lasdqewriit |
Malicious release: Malicious code in n8n-nodes-vbmkajdsa-uehfitvv-ueqjhhhksdlkkmz (npm) GHSA-h97w-mg4r-5r4j, MAL-2026-179 | Malicious | Not scored | 09 Jan, 2026 | npm n8n-nodes-vbmkajdsa-uehfitvv-ueqjhhhksdlkkmz |
Malicious release: Malicious code in n8n-nodes-ggdv-hdfvcnnje-uyrokvbkl (npm) GHSA-vcf2-c6m4-cxvw, MAL-2026-177 | Malicious | Not scored | 09 Jan, 2026 | npm n8n-nodes-ggdv-hdfvcnnje-uyrokvbkl |
Malicious release: Malicious code in yunxohang10 (npm) GHSA-6w59-qrq3-26r2, MAL-2026-182 | Malicious | Not scored | 09 Jan, 2026 | npm yunxohang10 |
Malicious release: Malicious code in yunxohang6 (npm) GHSA-9c94-wvj8-727x, MAL-2026-186 | Malicious | Not scored | 09 Jan, 2026 | npm yunxohang6 |
Malicious release: Malicious code in yunxohang11 (npm) GHSA-g83m-jwqh-vh49, MAL-2026-183 | Malicious | Not scored | 09 Jan, 2026 | npm yunxohang11 |
Malicious release: Malicious code in shreddit.styles (npm) GHSA-jfvh-jh3m-75wr, MAL-2026-180 | Malicious | Not scored | 09 Jan, 2026 | npm shreddit.styles |
Malicious release: Malicious code in yunxohang7 (npm) GHSA-m6hc-9484-pxmw, MAL-2026-187 | Malicious | Not scored | 09 Jan, 2026 | npm yunxohang7 |
Malicious release: Malicious code in yunxohang5 (npm) GHSA-v4rg-gvp2-j668, MAL-2026-185 | Malicious | Not scored | 09 Jan, 2026 | npm yunxohang5 |
Malicious release: Malicious code in chai-tests-async (npm) GHSA-cprx-7wv5-xx9f, MAL-2026-172 | Malicious | Not scored | 09 Jan, 2026 | npm chai-tests-async |
Malicious release: Malicious code in dotenv-intended (npm) GHSA-wrjh-25x7-qpfv, MAL-2026-174 | Malicious | Not scored | 09 Jan, 2026 | npm dotenv-intended |
Malicious release: Malicious code in jwtdapp (npm) GHSA-vh46-5jmf-4vf9, MAL-2026-175 | Malicious | Not scored | 09 Jan, 2026 | npm jwtdapp |
Malicious release: Malicious code in mixpanel-lib (npm) GHSA-cghh-vxg3-pmq9, MAL-2026-176 | Malicious | Not scored | 09 Jan, 2026 | npm mixpanel-lib |
Malicious release: Malicious code in smintio-portals-component-sdk (npm) GHSA-fr88-v524-h4f5, MAL-2026-181 | Malicious | Not scored | 09 Jan, 2026 | npm smintio-portals-component-sdk |
Malicious release: Malicious code in cng-web-lib (npm) GHSA-jxj2-8hv9-xgqf, MAL-2026-173 | Malicious | Not scored | 09 Jan, 2026 | npm cng-web-lib |
Malicious release: Malicious code in amdocs-core (npm) GHSA-q69g-cfhr-mwjg, MAL-2026-171 | Malicious | Not scored | 09 Jan, 2026 | npm amdocs-core |
Malicious release: Malicious code in @zuora-marketing/linting (npm) MAL-2026-168 | Malicious | Not scored | 08 Jan, 2026 | npm @zuora-marketing/linting |
Malicious release: Malicious code in icon-service (npm) MAL-2026-167 | Malicious | Not scored | 08 Jan, 2026 | npm icon-service |
Malicious release: Malicious code in @kyriba/mf-kit (npm) GHSA-vm49-whhj-p386, MAL-2026-165 | Malicious | Not scored | 08 Jan, 2026 | npm @kyriba/mf-kit |
Malicious release: Malicious code in @kyriba/ui-workspace (npm) GHSA-q8wh-fgpf-f5w2, MAL-2026-166 | Malicious | Not scored | 08 Jan, 2026 | npm @kyriba/ui-workspace |
Malicious release: Malicious code in @kyriba/data-frontend (npm) GHSA-hgcp-m893-66q4, MAL-2026-164 | Malicious | Not scored | 08 Jan, 2026 | npm @kyriba/data-frontend |
Malicious release: Malicious code in chai-min (npm) GHSA-hj2h-8cm5-mh8x, MAL-2026-159 | Malicious | Not scored | 08 Jan, 2026 | npm chai-min |
Malicious release: Malicious code in jsonify-setting (npm) GHSA-34cc-8h54-969x, MAL-2026-161 | Malicious | Not scored | 08 Jan, 2026 | npm jsonify-setting |
Malicious release: Malicious code in json-mappings (npm) GHSA-jjf5-hhf5-4mcc, MAL-2026-160 | Malicious | Not scored | 08 Jan, 2026 | npm json-mappings |
Malicious release: Malicious code in shaktihacker2026 (npm) GHSA-rfvh-x7m8-8fj8, MAL-2026-155 | Malicious | Not scored | 08 Jan, 2026 | npm shaktihacker2026 |
Malicious release: Malicious code in ncodeauth (npm) GHSA-fg7g-mvgf-7r6v, MAL-2026-154 | Malicious | Not scored | 08 Jan, 2026 | npm ncodeauth |
Malicious release: Malicious code in darknet-dispatches-internal (npm) GHSA-3ph9-jq3j-rmqq, MAL-2026-153 | Malicious | Not scored | 08 Jan, 2026 | npm darknet-dispatches-internal |
Malicious release: Malicious code in test-thegenetic-module (npm) GHSA-c9xw-qqgr-5v3w, MAL-2026-157 | Malicious | Not scored | 08 Jan, 2026 | npm test-thegenetic-module |
Malicious release: Malicious code in timeout-ts (npm) GHSA-38gr-j9wx-947f, MAL-2026-158 | Malicious | Not scored | 08 Jan, 2026 | npm timeout-ts |