Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in tetomood (npm) MAL-2026-16216 | Malicious | Not scored | 16 Sep, 2026 | npm tetomood |
Malicious release: Malicious code in tetotest (npm) MAL-2026-16217 | Malicious | Not scored | 16 Sep, 2026 | npm tetotest |
Malicious release: Malicious code in engin1 (npm) MAL-2026-16215 | Malicious | Not scored | 16 Sep, 2026 | npm engin1 |
Malicious release: Malicious code in chai-as-agile (npm) MAL-2026-16207 | Malicious | Not scored | 16 Sep, 2026 | npm chai-as-agile |
Malicious release: Malicious code in strapi-plugin-pencc-meeb (npm) MAL-2026-16210 | Malicious | Not scored | 16 Sep, 2026 | npm strapi-plugin-pencc-meeb |
Malicious release: Malicious code in strapi-plugin-ccsuc-meeb (npm) MAL-2026-16209 | Malicious | Not scored | 16 Sep, 2026 | npm strapi-plugin-ccsuc-meeb |
Malicious release: Malicious code in otel-span-adapter (npm) MAL-2026-16208 | Malicious | Not scored | 16 Sep, 2026 | npm otel-span-adapter |
Malicious release: Malicious code in swnwall (npm) MAL-2026-16211 | Malicious | Not scored | 16 Sep, 2026 | npm swnwall |
Malicious release: Malicious code in @prime0/inimatch (npm) MAL-2026-16205 | Malicious | Not scored | 16 Sep, 2026 | npm @prime0/inimatch |
Malicious release: Malicious code in @prime0/pcomatch (npm) MAL-2026-16206 | Malicious | Not scored | 16 Sep, 2026 | npm @prime0/pcomatch |
Malicious release: Malicious code in @prime0/alanced-match (npm) MAL-2026-16204 | Malicious | Not scored | 16 Sep, 2026 | npm @prime0/alanced-match |
Malicious release: Malicious code in jexkcode (npm) GHSA-j72h-3h5h-43v5, MAL-2026-16220 | Malicious | Not scored | 16 Sep, 2026 | npm jexkcode |
Malicious release: Malicious code in kartykp-prod-oidc-test-pkg (npm) GHSA-v7jq-fcmp-3w93, MAL-2026-16197 | Malicious | Not scored | 15 Sep, 2026 | npm kartykp-prod-oidc-test-pkg |
Malicious release: Malicious code in kartykp-token-pkg (npm) GHSA-6qx5-2w7p-cf29, MAL-2026-16198 | Malicious | Not scored | 15 Sep, 2026 | npm kartykp-token-pkg |
Malicious release: Malicious code in tol8t (npm) MAL-2026-16218 | Malicious | Not scored | 15 Sep, 2026 | npm tol8t |
Malicious release: Malicious code in bender-rspack-config (npm) MAL-2026-16221 | Malicious | Not scored | 15 Sep, 2026 | npm bender-rspack-config |
Malicious release: Malicious code in chai-as-crack (npm) MAL-2026-16196 | Malicious | Not scored | 15 Sep, 2026 | npm chai-as-crack |
Malicious release: Malicious code in alkajsdfoiwqeusdflkjsdf (npm) MAL-2026-16174 | Malicious | Not scored | 15 Sep, 2026 | npm alkajsdfoiwqeusdflkjsdf |
Malicious release: Malicious code in fulfillment-cuprum-auth-widget (npm) MAL-2026-16176 | Malicious | Not scored | 15 Sep, 2026 | npm fulfillment-cuprum-auth-widget |
Malicious release: Malicious code in strapi-plugin-weccresh-meeb (npm) MAL-2026-16192 | Malicious | Not scored | 15 Sep, 2026 | npm strapi-plugin-weccresh-meeb |
Malicious release: Malicious code in process-tailwind (npm) MAL-2026-16179 | Malicious | Not scored | 15 Sep, 2026 | npm process-tailwind |
Malicious release: Malicious code in process-lhpm (npm) MAL-2026-16178 | Malicious | Not scored | 15 Sep, 2026 | npm process-lhpm |
Malicious release: Malicious code in strapi-plugin-uicc-meeb (npm) MAL-2026-16191 | Malicious | Not scored | 15 Sep, 2026 | npm strapi-plugin-uicc-meeb |
Malicious release: Malicious code in tailwind-forms-styles (npm) GHSA-q8wp-7xrg-83rx, MAL-2026-16195 | Malicious | Not scored | 15 Sep, 2026 | npm tailwind-forms-styles |
Malicious release: Malicious code in strapi-plugin-revs-meeb322k (npm) MAL-2026-16184 | Malicious | Not scored | 15 Sep, 2026 | npm strapi-plugin-revs-meeb322k |
Malicious release: Malicious code in strapi-plugin-yesccresh-meeb (npm) MAL-2026-16194 | Malicious | Not scored | 15 Sep, 2026 | npm strapi-plugin-yesccresh-meeb |
Malicious release: Malicious code in strapi-plugin-revsh-meeb322k (npm) MAL-2026-16187 | Malicious | Not scored | 15 Sep, 2026 | npm strapi-plugin-revsh-meeb322k |
Malicious release: Malicious code in strapi-plugin-sucresh-meeb (npm) MAL-2026-16189 | Malicious | Not scored | 15 Sep, 2026 | npm strapi-plugin-sucresh-meeb |
Malicious release: Malicious code in strapi-plugin-yayccresh-meeb (npm) MAL-2026-16193 | Malicious | Not scored | 15 Sep, 2026 | npm strapi-plugin-yayccresh-meeb |
Malicious release: Malicious code in strapi-plugin-revs02-meeb322k (npm) MAL-2026-16186 | Malicious | Not scored | 15 Sep, 2026 | npm strapi-plugin-revs02-meeb322k |
Malicious release: Malicious code in strapi-plugin-revs01-meeb322k (npm) MAL-2026-16185 | Malicious | Not scored | 15 Sep, 2026 | npm strapi-plugin-revs01-meeb322k |
Malicious release: Malicious code in strapi-plugin-proccresh-meeb (npm) MAL-2026-16182 | Malicious | Not scored | 15 Sep, 2026 | npm strapi-plugin-proccresh-meeb |
Malicious release: Malicious code in n8n-nodes-buildcheck (npm) MAL-2026-16177 | Malicious | Not scored | 15 Sep, 2026 | npm n8n-nodes-buildcheck |
Malicious release: Malicious code in strapi-plugin-resh-meeb322k (npm) MAL-2026-16183 | Malicious | Not scored | 15 Sep, 2026 | npm strapi-plugin-resh-meeb322k |
Malicious release: Malicious code in strapi-plugin-tryccresh-meeb (npm) MAL-2026-16190 | Malicious | Not scored | 15 Sep, 2026 | npm strapi-plugin-tryccresh-meeb |
Malicious release: Malicious code in strapi-plugin-rs-meeb322k (npm) MAL-2026-16188 | Malicious | Not scored | 15 Sep, 2026 | npm strapi-plugin-rs-meeb322k |
Malicious release: Malicious code in strapi-plugin-plsresh-meeb (npm) MAL-2026-16181 | Malicious | Not scored | 15 Sep, 2026 | npm strapi-plugin-plsresh-meeb |
Malicious release: Malicious code in strapi-plugin-ccresh-meeb (npm) MAL-2026-16180 | Malicious | Not scored | 15 Sep, 2026 | npm strapi-plugin-ccresh-meeb |
Malicious release: Malicious code in csa-mfa (npm) MAL-2026-16175 | Malicious | Not scored | 15 Sep, 2026 | npm csa-mfa |
Malicious release: Malicious code in n8n-nodes-sysdiag2 (npm) MAL-2026-16162 | Malicious | Not scored | 14 Sep, 2026 | npm n8n-nodes-sysdiag2 |
Malicious release: Malicious code in @yggbrasil/api (npm) GHSA-cmxv-8vgc-m43c, MAL-2026-16163 | Malicious | Not scored | 14 Sep, 2026 | npm @yggbrasil/api |
Malicious release: Malicious code in get-power (npm) GHSA-3g9w-hfq8-vr7p, MAL-2026-16156 | Malicious | Not scored | 14 Sep, 2026 | npm get-power |
Malicious release: Malicious code in afhmxiewpsf (npm) GHSA-59f6-ch49-395j, MAL-2026-16158 | Malicious | Not scored | 14 Sep, 2026 | npm afhmxiewpsf |
Malicious release: Malicious code in ultra-ws (npm) GHSA-rwhp-v7w5-c6cc, MAL-2026-16155 | Malicious | Not scored | 14 Sep, 2026 | npm ultra-ws |
Malicious release: Malicious code in noblox-asset.js (npm) MAL-2026-16148 | Malicious | Not scored | 14 Sep, 2026 | npm noblox-asset.js |
Malicious release: Malicious code in postgreesqlhelper (npm) MAL-2026-16150 | Malicious | Not scored | 14 Sep, 2026 | npm postgreesqlhelper |
Malicious release: Malicious code in sql-limit-enforcer (npm) MAL-2026-16151 | Malicious | Not scored | 14 Sep, 2026 | npm sql-limit-enforcer |
Malicious release: Malicious code in n8n-nodes-sysdiag (npm) MAL-2026-16147 | Malicious | Not scored | 14 Sep, 2026 | npm n8n-nodes-sysdiag |
Malicious release: Malicious code in os-info-meeb322k (npm) MAL-2026-16149 | Malicious | Not scored | 14 Sep, 2026 | npm os-info-meeb322k |
Malicious release: Malicious code in strapi-plugin-os-info-meeb322k (npm) MAL-2026-16152 | Malicious | Not scored | 14 Sep, 2026 | npm strapi-plugin-os-info-meeb322k |