Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in otomi-tasks (npm) MAL-2026-2789 | Malicious | Not scored | 16 Apr, 2026 | npm otomi-tasks |
Malicious release: Malicious code in otomi-console (npm) MAL-2026-2788 | Malicious | Not scored | 16 Apr, 2026 | npm otomi-console |
Malicious release: Malicious code in node-syncora (npm) MAL-2026-2787 | Malicious | Not scored | 16 Apr, 2026 | npm node-syncora |
Malicious release: Malicious code in node-metrica (npm) MAL-2026-2786 | Malicious | Not scored | 16 Apr, 2026 | npm node-metrica |
Malicious release: Malicious code in nemo-jaws (npm) GHSA-w22h-mv8v-hqhc, MAL-2026-2785 | Malicious | Not scored | 16 Apr, 2026 | npm nemo-jaws |
Malicious release: Malicious code in nemo-datadrive (npm) MAL-2026-2784 | Malicious | Not scored | 16 Apr, 2026 | npm nemo-datadrive |
Malicious release: Malicious code in mypeopledoc (npm) MAL-2026-2783 | Malicious | Not scored | 16 Apr, 2026 | npm mypeopledoc |
Malicious release: Malicious code in mybibilabu (npm) MAL-2026-2782 | Malicious | Not scored | 16 Apr, 2026 | npm mybibilabu |
Malicious release: Malicious code in minecraft_image_to_blocks (npm) MAL-2026-2781 | Malicious | Not scored | 16 Apr, 2026 | npm minecraft_image_to_blocks |
Malicious release: Malicious code in metrify-node (npm) MAL-2026-2780 | Malicious | Not scored | 16 Apr, 2026 | npm metrify-node |
Malicious release: Malicious code in metrify-chain (npm) MAL-2026-2779 | Malicious | Not scored | 16 Apr, 2026 | npm metrify-chain |
Malicious release: Malicious code in marketing-analytics (npm) MAL-2026-2778 | Malicious | Not scored | 16 Apr, 2026 | npm marketing-analytics |
Malicious release: Malicious code in linode-developers (npm) MAL-2026-2777 | Malicious | Not scored | 16 Apr, 2026 | npm linode-developers |
Malicious release: Malicious code in int-browsing-gateway (npm) MAL-2026-2776 | Malicious | Not scored | 16 Apr, 2026 | npm int-browsing-gateway |
Malicious release: Malicious code in insomnia-smoke-test (npm) MAL-2026-2775 | Malicious | Not scored | 16 Apr, 2026 | npm insomnia-smoke-test |
Malicious release: Malicious code in insomnia-scripting-environment (npm) MAL-2026-2774 | Malicious | Not scored | 16 Apr, 2026 | npm insomnia-scripting-environment |
Malicious release: Malicious code in insomnia-api (npm) MAL-2026-2773 | Malicious | Not scored | 16 Apr, 2026 | npm insomnia-api |
Malicious release: Malicious code in idaasfinancialnodeserv (npm) MAL-2026-2772 | Malicious | Not scored | 16 Apr, 2026 | npm idaasfinancialnodeserv |
Malicious release: Malicious code in icims-express-dot-engine (npm) MAL-2026-2771 | Malicious | Not scored | 16 Apr, 2026 | npm icims-express-dot-engine |
Malicious release: Malicious code in helios-components (npm) MAL-2026-2770 | Malicious | Not scored | 16 Apr, 2026 | npm helios-components |
Malicious release: Malicious code in hardhat-starter-kit (npm) MAL-2026-2769 | Malicious | Not scored | 16 Apr, 2026 | npm hardhat-starter-kit |
Malicious release: Malicious code in h3-next (npm) MAL-2026-2768 | Malicious | Not scored | 16 Apr, 2026 | npm h3-next |
Malicious release: Malicious code in ground-platform (npm) MAL-2026-2767 | Malicious | Not scored | 16 Apr, 2026 | npm ground-platform |
Malicious release: Malicious code in gke-net (npm) MAL-2026-2766 | Malicious | Not scored | 16 Apr, 2026 | npm gke-net |
Malicious release: Malicious code in ghscan-pkgcheck-test-001 (npm) MAL-2026-2765 | Malicious | Not scored | 16 Apr, 2026 | npm ghscan-pkgcheck-test-001 |
Malicious release: Malicious code in gemini-cli-vscode-ide-companion (npm) MAL-2026-2764 | Malicious | Not scored | 16 Apr, 2026 | npm gemini-cli-vscode-ide-companion |
Malicious release: Malicious code in gemini-ai-checker (npm) MAL-2026-2763 | Malicious | Not scored | 16 Apr, 2026 | npm gemini-ai-checker |
Malicious release: Malicious code in farikku-util (npm) GHSA-98g7-3vh4-ww58, MAL-2026-2762 | Malicious | Not scored | 16 Apr, 2026 | npm farikku-util |
Malicious release: Malicious code in f0-fpti-tracking (npm) MAL-2026-2761 | Malicious | Not scored | 16 Apr, 2026 | npm f0-fpti-tracking |
Malicious release: Malicious code in f0-email-verification (npm) MAL-2026-2760 | Malicious | Not scored | 16 Apr, 2026 | npm f0-email-verification |
Malicious release: Malicious code in express-auth-basic (npm) MAL-2026-2759 | Malicious | Not scored | 16 Apr, 2026 | npm express-auth-basic |
Malicious release: Malicious code in estaspnet (npm) MAL-2026-2758 | Malicious | Not scored | 16 Apr, 2026 | npm estaspnet |
Malicious release: Malicious code in docai-sheets (npm) MAL-2026-2757 | Malicious | Not scored | 16 Apr, 2026 | npm docai-sheets |
Malicious release: Malicious code in digitallogger (npm) MAL-2026-2756 | Malicious | Not scored | 16 Apr, 2026 | npm digitallogger |
Malicious release: Malicious code in devops-debug-tool-ctf (npm) MAL-2026-2755 | Malicious | Not scored | 16 Apr, 2026 | npm devops-debug-tool-ctf |
Malicious release: Malicious code in deployer-kit (npm) MAL-2026-2754 | Malicious | Not scored | 16 Apr, 2026 | npm deployer-kit |
Malicious release: Malicious code in declarative-tracker (npm) MAL-2026-2753 | Malicious | Not scored | 16 Apr, 2026 | npm declarative-tracker |
Malicious release: Malicious code in country-specialization (npm) MAL-2026-2752 | Malicious | Not scored | 16 Apr, 2026 | npm country-specialization |
Malicious release: Malicious code in coremeshnode (npm) MAL-2026-2751 | Malicious | Not scored | 16 Apr, 2026 | npm coremeshnode |
Malicious release: Malicious code in coremesh (npm) MAL-2026-2750 | Malicious | Not scored | 16 Apr, 2026 | npm coremesh |
Malicious release: Malicious code in conversation-relay (npm) MAL-2026-2749 | Malicious | Not scored | 16 Apr, 2026 | npm conversation-relay |
Malicious release: Malicious code in collect-rangers (npm) MAL-2026-2748 | Malicious | Not scored | 16 Apr, 2026 | npm collect-rangers |
Malicious release: Malicious code in cloud-run-microservice-template (npm) MAL-2026-2747 | Malicious | Not scored | 16 Apr, 2026 | npm cloud-run-microservice-template |
Malicious release: Malicious code in chainlink-docs (npm) MAL-2026-2746 | Malicious | Not scored | 16 Apr, 2026 | npm chainlink-docs |
Malicious release: Malicious code in chain-syncora (npm) MAL-2026-2745 | Malicious | Not scored | 16 Apr, 2026 | npm chain-syncora |
Malicious release: Malicious code in chain-metrica (npm) MAL-2026-2744 | Malicious | Not scored | 16 Apr, 2026 | npm chain-metrica |
Malicious release: Malicious code in chai-use-chain (npm) GHSA-77gr-x9m6-cm8g, MAL-2026-2743 | Malicious | Not scored | 16 Apr, 2026 | npm chai-use-chain |
Malicious release: Malicious code in chai-extensions-extra (npm) MAL-2026-2742 | Malicious | Not scored | 16 Apr, 2026 | npm chai-extensions-extra |
Malicious release: Malicious code in chai-chain-coremesh (npm) MAL-2026-2741 | Malicious | Not scored | 16 Apr, 2026 | npm chai-chain-coremesh |
Malicious release: Malicious code in ccip-starter-kit-hardhat (npm) MAL-2026-2739 | Malicious | Not scored | 16 Apr, 2026 | npm ccip-starter-kit-hardhat |