Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in spire.officejs-common (npm) MAL-2026-39 | Malicious | Not scored | 05 Jan, 2026 | npm spire.officejs-common |
Malicious release: Malicious code in spire.officejs-editors (npm) MAL-2026-40 | Malicious | Not scored | 05 Jan, 2026 | npm spire.officejs-editors |
Malicious release: Malicious code in atm_bmw (npm) GHSA-r7mc-c86h-c2h3, MAL-2026-34 | Malicious | Not scored | 04 Jan, 2026 | npm atm_bmw |
Malicious release: Malicious code in blobhunter-depconf-poc (npm) GHSA-qm8x-x4wp-qmmw, MAL-2026-32 | Malicious | Not scored | 04 Jan, 2026 | npm blobhunter-depconf-poc |
Malicious release: Malicious code in dstny-utils (npm) MAL-2026-30 | Malicious | Not scored | 03 Jan, 2026 | npm dstny-utils |
Malicious release: Malicious code in ipvision-selfcare (npm) MAL-2026-29 | Malicious | Not scored | 03 Jan, 2026 | npm ipvision-selfcare |
Malicious release: Malicious code in orchestration-node-common-errors (npm) GHSA-6944-qjj4-p4pp, MAL-2026-21 | Malicious | Not scored | 02 Jan, 2026 | npm orchestration-node-common-errors |
Malicious release: Malicious code in fix-cc-raiesy (npm) GHSA-7q6m-qvfp-37hm, MAL-2026-16 | Malicious | Not scored | 02 Jan, 2026 | npm fix-cc-raiesy |
Malicious release: Malicious code in initializers (npm) GHSA-8jc9-28hh-6773, MAL-2026-18 | Malicious | Not scored | 02 Jan, 2026 | npm initializers |
Malicious release: Malicious code in 511fola (npm) GHSA-9m43-q5hv-rc36, MAL-2026-9 | Malicious | Not scored | 02 Jan, 2026 | npm 511fola |
Malicious release: Malicious code in tickncook-robot (npm) GHSA-p52r-cmjv-v6mr, MAL-2026-24 | Malicious | Not scored | 02 Jan, 2026 | npm tickncook-robot |
Malicious release: Malicious code in ent-file-upload-widget-v2 (npm) GHSA-pqqf-r5w3-jqc2, MAL-2026-13 | Malicious | Not scored | 02 Jan, 2026 | npm ent-file-upload-widget-v2 |
Malicious release: Malicious code in datatables-editor (npm) GHSA-q7mc-g6jm-8pjq, MAL-2026-12 | Malicious | Not scored | 02 Jan, 2026 | npm datatables-editor |
Malicious release: Malicious code in ent-profile-unauth-msr-stop (npm) GHSA-qvgq-rj55-h35g, MAL-2026-14 | Malicious | Not scored | 02 Jan, 2026 | npm ent-profile-unauth-msr-stop |
Malicious release: Malicious code in usaa-authentication-mocks (npm) GHSA-x9pm-m7hq-f2q8, MAL-2026-25 | Malicious | Not scored | 02 Jan, 2026 | npm usaa-authentication-mocks |
Malicious release: Malicious code in babel-preset-ibm-cloud-cognitive (npm) MAL-2026-10 | Malicious | Not scored | 02 Jan, 2026 | npm babel-preset-ibm-cloud-cognitive |
Malicious release: Malicious code in cc-double-1 (npm) MAL-2026-11 | Malicious | Not scored | 02 Jan, 2026 | npm cc-double-1 |
Malicious release: Malicious code in eslint-config-skynet (npm) MAL-2026-15 | Malicious | Not scored | 02 Jan, 2026 | npm eslint-config-skynet |
Malicious release: Malicious code in identity-emitter (npm) MAL-2026-17 | Malicious | Not scored | 02 Jan, 2026 | npm identity-emitter |
Malicious release: Malicious code in jest-config-ibm-cloud-cognitive (npm) MAL-2026-19 | Malicious | Not scored | 02 Jan, 2026 | npm jest-config-ibm-cloud-cognitive |
Malicious release: Malicious code in kid-api (npm) MAL-2026-20 | Malicious | Not scored | 02 Jan, 2026 | npm kid-api |
Malicious release: Malicious code in pkg1bate5apg1 (npm) MAL-2026-22 | Malicious | Not scored | 02 Jan, 2026 | npm pkg1bate5apg1 |
Malicious release: Malicious code in showdownxss (npm) MAL-2026-23 | Malicious | Not scored | 02 Jan, 2026 | npm showdownxss |
Malicious release: Malicious code in @nitaiapiiro/rand_emoji (npm) MAL-2026-8 | Malicious | Not scored | 02 Jan, 2026 | npm @nitaiapiiro/rand_emoji |
Malicious release: Malicious code in rules-playground (npm) MAL-2026-4 | Malicious | Not scored | 01 Jan, 2026 | npm rules-playground |
Malicious release: Malicious code in rules-deployer (npm) MAL-2026-3 | Malicious | Not scored | 01 Jan, 2026 | npm rules-deployer |
Malicious release: Malicious code in common-cli-utils (npm) MAL-2026-2 | Malicious | Not scored | 01 Jan, 2026 | npm common-cli-utils |
Malicious release: Malicious code in @polystream/streaming (npm) GHSA-fw93-78h7-rwpv, MAL-2025-193009 | Malicious | Not scored | 31 Dec, 2025 | npm @polystream/streaming |
Malicious release: Malicious code in @vietmoney/react-big-calendar (npm) GHSA-2w42-mjvc-7mgq, MAL-2025-192994 | Malicious | Not scored | 31 Dec, 2025 | npm @vietmoney/react-big-calendar |
Malicious release: Malicious code in @vietmoney/vietmoneywork (npm) GHSA-58jp-97fm-4xq3, MAL-2025-193003 | Malicious | Not scored | 31 Dec, 2025 | npm @vietmoney/vietmoneywork |
Malicious release: Malicious code in @vietmoney/react-native-true-id (npm) GHSA-94j6-x699-jcc3, MAL-2025-193001 | Malicious | Not scored | 31 Dec, 2025 | npm @vietmoney/react-native-true-id |
Malicious release: Malicious code in @vietmoney/react-native-image-transformer (npm) GHSA-c475-w7cw-vjcc, MAL-2025-192997 | Malicious | Not scored | 31 Dec, 2025 | npm @vietmoney/react-native-image-transformer |
Malicious release: Malicious code in @vietmoney/react-native-smart-page (npm) GHSA-f7qx-mq63-fxcr, MAL-2025-192999 | Malicious | Not scored | 31 Dec, 2025 | npm @vietmoney/react-native-smart-page |
Malicious release: Malicious code in @vietmoney/vision-camera-code-scanner (npm) GHSA-gmq9-cfc9-7w39, MAL-2025-193004 | Malicious | Not scored | 31 Dec, 2025 | npm @vietmoney/vision-camera-code-scanner |
Malicious release: Malicious code in @vietmoney/react-native-smart-gallery (npm) GHSA-jpfq-j254-3ppf, MAL-2025-192998 | Malicious | Not scored | 31 Dec, 2025 | npm @vietmoney/react-native-smart-gallery |
Malicious release: Malicious code in landingpage-service (npm) GHSA-mhgg-gv4f-whxg, MAL-2025-193005 | Malicious | Not scored | 31 Dec, 2025 | npm landingpage-service |
Malicious release: Malicious code in @vietmoney/react-native-vnpay-merchant (npm) GHSA-pwm4-mv3r-mpx3, MAL-2025-193002 | Malicious | Not scored | 31 Dec, 2025 | npm @vietmoney/react-native-vnpay-merchant |
Malicious release: Malicious code in @vietmoney/react-native-action-button (npm) GHSA-rjr7-qcfc-hjcv, MAL-2025-192995 | Malicious | Not scored | 31 Dec, 2025 | npm @vietmoney/react-native-action-button |
Malicious release: Malicious code in @vietmoney/react-native-tags-input (npm) GHSA-vc6p-43hp-v2xf, MAL-2025-193000 | Malicious | Not scored | 31 Dec, 2025 | npm @vietmoney/react-native-tags-input |
Malicious release: Malicious code in @vietmoney/react-native-htmlview (npm) GHSA-wv3x-qp6r-29w6, MAL-2025-192996 | Malicious | Not scored | 31 Dec, 2025 | npm @vietmoney/react-native-htmlview |
Malicious release: Malicious code in nbugs-video (npm) GHSA-g2c8-q7fr-7gx3, MAL-2025-192986 | Malicious | Not scored | 30 Dec, 2025 | npm nbugs-video |
Malicious release: Malicious code in npm-xmt (npm) GHSA-2fqg-43mh-6h87, MAL-2025-192987 | Malicious | Not scored | 30 Dec, 2025 | npm npm-xmt |
Malicious release: Malicious code in error-fallback (npm) GHSA-3pfc-mwg4-r94r, MAL-2025-192985 | Malicious | Not scored | 30 Dec, 2025 | npm error-fallback |
Malicious release: Malicious code in chai-promised-chains (npm) GHSA-ccjq-68q9-54h9, MAL-2025-192984 | Malicious | Not scored | 30 Dec, 2025 | npm chai-promised-chains |
Malicious release: Malicious code in @ptest2535/ui-core_mal (npm) GHSA-85qg-c3xq-4w49, MAL-2025-192982 | Malicious | Not scored | 30 Dec, 2025 | npm @ptest2535/ui-core_mal |
Malicious release: Malicious code in @ptest2535/artifactory-demo-ptest (npm) GHSA-9hr6-h5xf-hp2v, MAL-2025-192979 | Malicious | Not scored | 30 Dec, 2025 | npm @ptest2535/artifactory-demo-ptest |
Malicious release: Malicious code in @ptest2535/l_woker_mal (npm) GHSA-q8m4-6xmm-4234, MAL-2025-192980 | Malicious | Not scored | 30 Dec, 2025 | npm @ptest2535/l_woker_mal |
Malicious release: Malicious code in @ptest2535/test_package (npm) GHSA-r34w-369w-v8w9, MAL-2025-192981 | Malicious | Not scored | 30 Dec, 2025 | npm @ptest2535/test_package |
Malicious release: Malicious code in yellowdiscordlookup (npm) GHSA-87w3-vjjr-47gf, MAL-2025-192988 | Malicious | Not scored | 30 Dec, 2025 | npm yellowdiscordlookup |
Malicious release: Malicious code in bigmathex (npm) GHSA-4v7j-fv5q-vv2q, MAL-2025-192983 | Malicious | Not scored | 30 Dec, 2025 | npm bigmathex |