Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in web-main (npm) MAL-2026-16153 | Malicious | Not scored | 14 Sep, 2026 | npm web-main |
Malicious release: Malicious code in @aiwfm/communitywfm.scripts.api (npm) MAL-2026-16146 | Malicious | Not scored | 14 Sep, 2026 | npm @aiwfm/communitywfm.scripts.api |
Malicious release: Malicious code in concierge-sdk (npm) MAL-2026-16145 | Malicious | Not scored | 14 Sep, 2026 | npm concierge-sdk |
Malicious release: Malicious code in app-rrhh (npm) MAL-2026-16144 | Malicious | Not scored | 14 Sep, 2026 | npm app-rrhh |
Malicious release: Malicious code in meraz-project-tracker (npm) GHSA-54v8-j59m-366h, MAL-2026-16161 | Malicious | Not scored | 14 Sep, 2026 | npm meraz-project-tracker |
Malicious release: Malicious code in lpulogin (npm) GHSA-5823-3hg3-27v8, MAL-2026-16160 | Malicious | Not scored | 14 Sep, 2026 | npm lpulogin |
Malicious release: Malicious code in @merazmz/project-tracker (npm) GHSA-x98w-cqq8-v3q2, MAL-2026-16157 | Malicious | Not scored | 14 Sep, 2026 | npm @merazmz/project-tracker |
Malicious release: Malicious code in dilxztech (npm) GHSA-5wh2-j94m-rwpf, MAL-2026-16159 | Malicious | Not scored | 14 Sep, 2026 | npm dilxztech |
Malicious release: Malicious code in @biz44/process-runtime-utils (npm) MAL-2026-16171 | Malicious | Not scored | 14 Sep, 2026 | npm @biz44/process-runtime-utils |
Malicious release: Malicious code in @biz44/runtime-utils (npm) MAL-2026-16172 | Malicious | Not scored | 14 Sep, 2026 | npm @biz44/runtime-utils |
Malicious release: Malicious code in webpackbootstrap5 (npm) GHSA-2q27-vrr7-584g, MAL-2026-16201 | Malicious | Not scored | 14 Sep, 2026 | npm webpackbootstrap5 |
Malicious release: Malicious code in @zaka13/thing (npm) GHSA-fxc7-fpjq-q7vf, MAL-2026-16200 | Malicious | Not scored | 14 Sep, 2026 | npm @zaka13/thing |
Malicious release: Malicious code in pino-ulid (npm) MAL-2026-16154 | Malicious | Not scored | 14 Sep, 2026 | npm pino-ulid |
Malicious release: Malicious code in webpackbootstrapscripts (npm) MAL-2026-16202 | Malicious | Not scored | 14 Sep, 2026 | npm webpackbootstrapscripts |
Malicious release: Malicious code in @biz44/id79-client (npm) MAL-2026-16168 | Malicious | Not scored | 12 Sep, 2026 | npm @biz44/id79-client |
Malicious release: Malicious code in @biz44/id12-client (npm) MAL-2026-16166 | Malicious | Not scored | 12 Sep, 2026 | npm @biz44/id12-client |
Malicious release: Malicious code in @biz44/id10-client (npm) MAL-2026-16165 | Malicious | Not scored | 12 Sep, 2026 | npm @biz44/id10-client |
Malicious release: Malicious code in @biz44/id95-client (npm) MAL-2026-16169 | Malicious | Not scored | 12 Sep, 2026 | npm @biz44/id95-client |
Malicious release: Malicious code in @biz44/id99-client (npm) MAL-2026-16170 | Malicious | Not scored | 12 Sep, 2026 | npm @biz44/id99-client |
Malicious release: Malicious code in id79-client (npm) MAL-2026-16173 | Malicious | Not scored | 12 Sep, 2026 | npm id79-client |
Malicious release: Malicious code in @biz44/id44-client (npm) MAL-2026-16167 | Malicious | Not scored | 12 Sep, 2026 | npm @biz44/id44-client |
Malicious release: Malicious code in greensaver (npm) MAL-2026-16138 | Malicious | Not scored | 11 Sep, 2026 | npm greensaver |
Malicious release: Malicious code in cr-bot-common (npm) MAL-2026-16137 | Malicious | Not scored | 11 Sep, 2026 | npm cr-bot-common |
Malicious release: Malicious code in tracker-cloudflare (npm) MAL-2026-16140 | Malicious | Not scored | 11 Sep, 2026 | npm tracker-cloudflare |
Malicious release: Malicious code in @nimbusedge/auth (npm) MAL-2026-16132 | Malicious | Not scored | 11 Sep, 2026 | npm @nimbusedge/auth |
Malicious release: Malicious code in tailwind-form-kit (npm) GHSA-8p5f-pjcw-69mw, MAL-2026-16139 | Malicious | Not scored | 11 Sep, 2026 | npm tailwind-form-kit |
Malicious release: Malicious code in strapi-plugin-vinsoc-1109 (npm) MAL-2026-16126 | Malicious | Not scored | 11 Sep, 2026 | npm strapi-plugin-vinsoc-1109 |
Malicious release: Malicious code in pinochiomathm (npm) MAL-2026-16123 | Malicious | Not scored | 10 Sep, 2026 | npm pinochiomathm |
Malicious release: Malicious code in tailwindcss-contact-forms (npm) MAL-2026-16124 | Malicious | Not scored | 10 Sep, 2026 | npm tailwindcss-contact-forms |
Malicious release: Malicious code in etoro-cashout (npm) MAL-2026-16117 | Malicious | Not scored | 10 Sep, 2026 | npm etoro-cashout |
Malicious release: Malicious code in etoro-builders (npm) MAL-2026-16116 | Malicious | Not scored | 10 Sep, 2026 | npm etoro-builders |
Malicious release: Malicious code in etoro-aggregator (npm) MAL-2026-16111 | Malicious | Not scored | 10 Sep, 2026 | npm etoro-aggregator |
Malicious release: Malicious code in etoro-analytics (npm) MAL-2026-16112 | Malicious | Not scored | 10 Sep, 2026 | npm etoro-analytics |
Malicious release: Malicious code in etoro-api (npm) MAL-2026-16113 | Malicious | Not scored | 10 Sep, 2026 | npm etoro-api |
Malicious release: Malicious code in etoro-client (npm) MAL-2026-16119 | Malicious | Not scored | 10 Sep, 2026 | npm etoro-client |
Malicious release: Malicious code in etoro-core (npm) MAL-2026-16120 | Malicious | Not scored | 10 Sep, 2026 | npm etoro-core |
Malicious release: Malicious code in etoro-charts (npm) MAL-2026-16118 | Malicious | Not scored | 10 Sep, 2026 | npm etoro-charts |
Malicious release: Malicious code in etoro-auth (npm) MAL-2026-16114 | Malicious | Not scored | 10 Sep, 2026 | npm etoro-auth |
Malicious release: Malicious code in etoro-billing (npm) MAL-2026-16115 | Malicious | Not scored | 10 Sep, 2026 | npm etoro-billing |
Malicious release: Malicious code in @nexustechpro/baileys (npm) GHSA-8w6v-4xp9-rvrr, MAL-2026-16104 | Malicious | Not scored | 09 Sep, 2026 | npm @nexustechpro/baileys |
Malicious release: Malicious code in @neroxkira/vangal-baileys (npm) MAL-2026-16103 | Malicious | Not scored | 09 Sep, 2026 | npm @neroxkira/vangal-baileys |
Malicious release: Malicious code in @sahril2nd/baileys (npm) MAL-2026-16105 | Malicious | Not scored | 09 Sep, 2026 | npm @sahril2nd/baileys |
Malicious release: Malicious code in @auction-fe/ui-kit (npm) GHSA-2r37-886p-hj65, MAL-2026-16109 | Malicious | Not scored | 09 Sep, 2026 | npm @auction-fe/ui-kit |
Malicious release: Malicious code in @auction-fe/reporting-system (npm) GHSA-4x79-pcqv-r9rf, MAL-2026-16108 | Malicious | Not scored | 09 Sep, 2026 | npm @auction-fe/reporting-system |
Malicious release: Malicious code in @auction-fe/portal (npm) GHSA-qmw2-mp2f-cgg3, MAL-2026-16107 | Malicious | Not scored | 09 Sep, 2026 | npm @auction-fe/portal |
Malicious release: Malicious code in @auction-fe/base (npm) GHSA-w6hj-c25h-wgh7, MAL-2026-16106 | Malicious | Not scored | 09 Sep, 2026 | npm @auction-fe/base |
Malicious release: Malicious code in @convertics/script (npm) GHSA-c74p-4c5p-6v9r, MAL-2026-16110 | Malicious | Not scored | 09 Sep, 2026 | npm @convertics/script |
Malicious release: Malicious code in mfatest2 (npm) MAL-2026-16102 | Malicious | Not scored | 09 Sep, 2026 | npm mfatest2 |
Malicious release: Malicious code in mfaby (npm) MAL-2026-16101 | Malicious | Not scored | 09 Sep, 2026 | npm mfaby |
Malicious release: Malicious code in discord-mfa-solver (npm) GHSA-vf4w-775x-ccfh, MAL-2026-16100 | Malicious | Not scored | 09 Sep, 2026 | npm discord-mfa-solver |