Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in sparkling-cli (npm) GHSA-vf56-rcrw-rmqw, MAL-2026-156 | Malicious | Not scored | 08 Jan, 2026 | npm sparkling-cli |
Malicious release: Malicious code in bnia-work (npm) GHSA-99cj-5xg8-p68g, MAL-2026-149 | Malicious | Not scored | 08 Jan, 2026 | npm bnia-work |
Malicious release: Malicious code in week-4-node-modularization (npm) GHSA-gx4r-79mc-gpvf, MAL-2026-152 | Malicious | Not scored | 08 Jan, 2026 | npm week-4-node-modularization |
Malicious release: Malicious code in hoppscotch-agent (npm) GHSA-mcvr-f6p2-ppr3, MAL-2026-150 | Malicious | Not scored | 08 Jan, 2026 | npm hoppscotch-agent |
Malicious release: Malicious code in svelte-monorepo (npm) GHSA-v98m-m7mc-g24r, MAL-2026-151 | Malicious | Not scored | 08 Jan, 2026 | npm svelte-monorepo |
Malicious release: Malicious code in @testfeii/hallo-word (npm) GHSA-vr52-p84w-52jv, MAL-2026-192 | Malicious | Not scored | 08 Jan, 2026 | npm @testfeii/hallo-word |
Malicious release: Malicious code in rt-live-hero (npm) GHSA-27hr-2hrw-j6c6, MAL-2026-140 | Malicious | Not scored | 07 Jan, 2026 | npm rt-live-hero |
Malicious release: Malicious code in awsm-acslibs (npm) GHSA-2f6g-98j7-c42m, MAL-2026-130 | Malicious | Not scored | 07 Jan, 2026 | npm awsm-acslibs |
Malicious release: Malicious code in language-capirca (npm) GHSA-2v35-f9xm-rh9x, MAL-2026-133 | Malicious | Not scored | 07 Jan, 2026 | npm language-capirca |
Malicious release: Malicious code in rt-long-form-content (npm) GHSA-4335-9p5j-227w, MAL-2026-141 | Malicious | Not scored | 07 Jan, 2026 | npm rt-long-form-content |
Malicious release: Malicious code in spark-ar-dynamic-mocks (npm) GHSA-49hr-49hg-g9cp, MAL-2026-146 | Malicious | Not scored | 07 Jan, 2026 | npm spark-ar-dynamic-mocks |
Malicious release: Malicious code in npe-toolkit-server-deps (npm) GHSA-5g5g-r8fj-hhx8, MAL-2026-136 | Malicious | Not scored | 07 Jan, 2026 | npm npe-toolkit-server-deps |
Malicious release: Malicious code in create-react-app-lambda (npm) GHSA-63fr-4847-v74w, MAL-2026-132 | Malicious | Not scored | 07 Jan, 2026 | npm create-react-app-lambda |
Malicious release: Malicious code in npe-toolkit-faves (npm) GHSA-65j4-84gr-p696, MAL-2026-135 | Malicious | Not scored | 07 Jan, 2026 | npm npe-toolkit-faves |
Malicious release: Malicious code in spark-ar-core-libs (npm) GHSA-9mx5-3qr6-486f, MAL-2026-145 | Malicious | Not scored | 07 Jan, 2026 | npm spark-ar-core-libs |
Malicious release: Malicious code in aws-target-mediator (npm) GHSA-c9gm-cjj9-6rxh, MAL-2026-129 | Malicious | Not scored | 07 Jan, 2026 | npm aws-target-mediator |
Malicious release: Malicious code in rt-global-nav (npm) GHSA-g3vm-hj67-w973, MAL-2026-139 | Malicious | Not scored | 07 Jan, 2026 | npm rt-global-nav |
Malicious release: Malicious code in rt-da-classic-card-collection (npm) GHSA-j58j-xg89-q4hq, MAL-2026-137 | Malicious | Not scored | 07 Jan, 2026 | npm rt-da-classic-card-collection |
Malicious release: Malicious code in spark-ar-jest-mocks (npm) GHSA-m2pg-m276-vcjg, MAL-2026-147 | Malicious | Not scored | 07 Jan, 2026 | npm spark-ar-jest-mocks |
Malicious release: Malicious code in rt-footer (npm) GHSA-pm9v-3jmc-jh7g, MAL-2026-138 | Malicious | Not scored | 07 Jan, 2026 | npm rt-footer |
Malicious release: Malicious code in rt-qa-sampler (npm) GHSA-qhhm-464c-xmwg, MAL-2026-142 | Malicious | Not scored | 07 Jan, 2026 | npm rt-qa-sampler |
Malicious release: Malicious code in awsm-core (npm) GHSA-vg8m-cc62-9rfj, MAL-2026-131 | Malicious | Not scored | 07 Jan, 2026 | npm awsm-core |
Malicious release: Malicious code in rt-text-media-grid-collection (npm) GHSA-wwf9-54mp-94mh, MAL-2026-143 | Malicious | Not scored | 07 Jan, 2026 | npm rt-text-media-grid-collection |
Malicious release: Malicious code in scrollbar-stylecss (npm) GHSA-vmfh-wx67-675j, MAL-2026-144 | Malicious | Not scored | 07 Jan, 2026 | npm scrollbar-stylecss |
Malicious release: Malicious code in tailwind-autoanimation (npm) GHSA-pw37-854x-rf46, MAL-2026-148 | Malicious | Not scored | 07 Jan, 2026 | npm tailwind-autoanimation |
Malicious release: Malicious code in cko-ui-toolkit (npm) GHSA-wrmj-53cj-p8pj, MAL-2026-193 | Malicious | Not scored | 07 Jan, 2026 | npm cko-ui-toolkit |
Malicious release: Malicious code in @bingads-webui-component-legacy/storage (npm) MAL-2026-127 | Malicious | Not scored | 07 Jan, 2026 | npm @bingads-webui-component-legacy/storage |
Malicious release: Malicious code in kmeet (npm) MAL-2026-125 | Malicious | Not scored | 07 Jan, 2026 | npm kmeet |
Malicious release: Malicious code in garfield000 (npm) GHSA-377q-vgp4-qxgm, MAL-2026-113 | Malicious | Not scored | 07 Jan, 2026 | npm garfield000 |
Malicious release: Malicious code in wwwt (npm) GHSA-3rh2-443w-cw39, MAL-2026-124 | Malicious | Not scored | 07 Jan, 2026 | npm wwwt |
Malicious release: Malicious code in @nestor_hexom/garfield1 (npm) GHSA-764p-6xwr-97gc, MAL-2026-109 | Malicious | Not scored | 07 Jan, 2026 | npm @nestor_hexom/garfield1 |
Malicious release: Malicious code in klywarns (npm) GHSA-86fq-5pcc-9v5g, MAL-2026-119 | Malicious | Not scored | 07 Jan, 2026 | npm klywarns |
Malicious release: Malicious code in @nestor_hexom/qyxb (npm) GHSA-873w-7m5r-r4m4, MAL-2026-110 | Malicious | Not scored | 07 Jan, 2026 | npm @nestor_hexom/qyxb |
Malicious release: Malicious code in vjri (npm) GHSA-8c45-7hqf-gqqq, MAL-2026-122 | Malicious | Not scored | 07 Jan, 2026 | npm vjri |
Malicious release: Malicious code in wifzap (npm) GHSA-c735-rg96-8gg7, MAL-2026-123 | Malicious | Not scored | 07 Jan, 2026 | npm wifzap |
Malicious release: Malicious code in klywarn (npm) GHSA-cm27-c6rj-v9v7, MAL-2026-118 | Malicious | Not scored | 07 Jan, 2026 | npm klywarn |
Malicious release: Malicious code in @nestor_hexom/garfield (npm) GHSA-cq46-x67r-674j, MAL-2026-108 | Malicious | Not scored | 07 Jan, 2026 | npm @nestor_hexom/garfield |
Malicious release: Malicious code in hiqomu (npm) GHSA-fm6f-5g7r-cm54, MAL-2026-115 | Malicious | Not scored | 07 Jan, 2026 | npm hiqomu |
Malicious release: Malicious code in garfield777 (npm) GHSA-q84f-j4jm-fr42, MAL-2026-114 | Malicious | Not scored | 07 Jan, 2026 | npm garfield777 |
Malicious release: Malicious code in syqara (npm) GHSA-qpqp-c5jx-hw5x, MAL-2026-121 | Malicious | Not scored | 07 Jan, 2026 | npm syqara |
Malicious release: Malicious code in jh5o (npm) GHSA-rp2f-3wxj-cm3p, MAL-2026-116 | Malicious | Not scored | 07 Jan, 2026 | npm jh5o |
Malicious release: Malicious code in aog3 (npm) GHSA-v39f-m426-rpq7, MAL-2026-111 | Malicious | Not scored | 07 Jan, 2026 | npm aog3 |
Malicious release: Malicious code in qyxb (npm) GHSA-wf4w-9mhw-5h55, MAL-2026-120 | Malicious | Not scored | 07 Jan, 2026 | npm qyxb |
Malicious release: Malicious code in kdb1-demo-v2 (npm) GHSA-2c3x-8jx5-g4wg, MAL-2026-117 | Malicious | Not scored | 07 Jan, 2026 | npm kdb1-demo-v2 |
Malicious release: Malicious code in fbfu (npm) GHSA-33mg-fcjg-m4vc, MAL-2026-112 | Malicious | Not scored | 07 Jan, 2026 | npm fbfu |
Malicious release: Malicious code in 1kzr (npm) GHSA-9vv2-wr7x-g95p, MAL-2026-107 | Malicious | Not scored | 07 Jan, 2026 | npm 1kzr |
Malicious release: Malicious code in syntax-class-properties (npm) GHSA-4mwx-mh36-vm84, MAL-2026-105 | Malicious | Not scored | 07 Jan, 2026 | npm syntax-class-properties |
Malicious release: Malicious code in sort-imports-es6-autofix (npm) GHSA-9w4p-mhx9-rcmp, MAL-2026-104 | Malicious | Not scored | 07 Jan, 2026 | npm sort-imports-es6-autofix |
Malicious release: Malicious code in transform-decorators-legacy (npm) GHSA-cfv7-hfm3-27qf, MAL-2026-106 | Malicious | Not scored | 07 Jan, 2026 | npm transform-decorators-legacy |
Malicious release: Malicious code in const-enum (npm) GHSA-pwjh-p895-7767, MAL-2026-103 | Malicious | Not scored | 07 Jan, 2026 | npm const-enum |