Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in ssh-common (npm) MAL-2026-2390 | Malicious | Not scored | 24 Mar, 2026 | npm ssh-common |
Malicious release: Malicious code in spectral-module (npm) MAL-2026-2389 | Malicious | Not scored | 24 Mar, 2026 | npm spectral-module |
Malicious release: Malicious code in spectral-engine (npm) MAL-2026-2388 | Malicious | Not scored | 24 Mar, 2026 | npm spectral-engine |
Malicious release: Malicious code in securefiles-common (npm) MAL-2026-2387 | Malicious | Not scored | 24 Mar, 2026 | npm securefiles-common |
Malicious release: Malicious code in react-native-forter (npm) MAL-2026-2386 | Malicious | Not scored | 24 Mar, 2026 | npm react-native-forter |
Malicious release: Malicious code in product-status (npm) MAL-2026-2385 | Malicious | Not scored | 24 Mar, 2026 | npm product-status |
Malicious release: Malicious code in piyush_test_vadapav (npm) MAL-2026-2384 | Malicious | Not scored | 24 Mar, 2026 | npm piyush_test_vadapav |
Malicious release: Malicious code in phantom-module (npm) MAL-2026-2383 | Malicious | Not scored | 24 Mar, 2026 | npm phantom-module |
Malicious release: Malicious code in osc-datagrid-validator (npm) MAL-2026-2382 | Malicious | Not scored | 24 Mar, 2026 | npm osc-datagrid-validator |
Malicious release: Malicious code in onb-enrichment (npm) MAL-2026-2381 | Malicious | Not scored | 24 Mar, 2026 | npm onb-enrichment |
Malicious release: Malicious code in nodecognivault (npm) MAL-2026-2380 | Malicious | Not scored | 24 Mar, 2026 | npm nodecognivault |
Malicious release: Malicious code in node-neurograde (npm) MAL-2026-2379 | Malicious | Not scored | 24 Mar, 2026 | npm node-neurograde |
Malicious release: Malicious code in node-multer (npm) MAL-2026-2378 | Malicious | Not scored | 24 Mar, 2026 | npm node-multer |
Malicious release: Malicious code in no-function-declare-after-return (npm) MAL-2026-2377 | Malicious | Not scored | 24 Mar, 2026 | npm no-function-declare-after-return |
Malicious release: Malicious code in nf-promise-state-machine (npm) MAL-2026-2376 | Malicious | Not scored | 24 Mar, 2026 | npm nf-promise-state-machine |
Malicious release: Malicious code in nf-console (npm) MAL-2026-2375 | Malicious | Not scored | 24 Mar, 2026 | npm nf-console |
Malicious release: Malicious code in my-not-little-durgham (npm) MAL-2026-2374 | Malicious | Not scored | 24 Mar, 2026 | npm my-not-little-durgham |
Malicious release: Malicious code in my-little-durgham (npm) MAL-2026-2373 | Malicious | Not scored | 24 Mar, 2026 | npm my-little-durgham |
Malicious release: Malicious code in mollie-api-adapter-poc (npm) MAL-2026-2372 | Malicious | Not scored | 24 Mar, 2026 | npm mollie-api-adapter-poc |
Malicious release: Malicious code in merchant-rps (npm) MAL-2026-2371 | Malicious | Not scored | 24 Mar, 2026 | npm merchant-rps |
Malicious release: Malicious code in mcc-data (npm) MAL-2026-2370 | Malicious | Not scored | 24 Mar, 2026 | npm mcc-data |
Malicious release: Malicious code in loadshh (npm) MAL-2026-2369 | Malicious | Not scored | 24 Mar, 2026 | npm loadshh |
Malicious release: Malicious code in json-mapping-token (npm) MAL-2026-2368 | Malicious | Not scored | 24 Mar, 2026 | npm json-mapping-token |
Malicious release: Malicious code in json-mapping-fetch (npm) MAL-2026-2367 | Malicious | Not scored | 24 Mar, 2026 | npm json-mapping-fetch |
Malicious release: Malicious code in ghost-module (npm) MAL-2026-2366 | Malicious | Not scored | 24 Mar, 2026 | npm ghost-module |
Malicious release: Malicious code in env-node-cli (npm) MAL-2026-2364 | Malicious | Not scored | 24 Mar, 2026 | npm env-node-cli |
Malicious release: Malicious code in env-nodejs (npm) MAL-2026-2365 | Malicious | Not scored | 24 Mar, 2026 | npm env-nodejs |
Malicious release: Malicious code in env-extend (npm) MAL-2026-2363 | Malicious | Not scored | 24 Mar, 2026 | npm env-extend |
Malicious release: Malicious code in env-express-cli (npm) MAL-2026-2362 | Malicious | Not scored | 24 Mar, 2026 | npm env-express-cli |
Malicious release: Malicious code in env-expanded (npm) MAL-2026-2360 | Malicious | Not scored | 24 Mar, 2026 | npm env-expanded |
Malicious release: Malicious code in env-express (npm) MAL-2026-2361 | Malicious | Not scored | 24 Mar, 2026 | npm env-express |
Malicious release: Malicious code in env-embed (npm) MAL-2026-2359 | Malicious | Not scored | 24 Mar, 2026 | npm env-embed |
Malicious release: Malicious code in env-cli-express (npm) MAL-2026-2358 | Malicious | Not scored | 24 Mar, 2026 | npm env-cli-express |
Malicious release: Malicious code in ectoplast-spirit (npm) MAL-2026-2357 | Malicious | Not scored | 24 Mar, 2026 | npm ectoplast-spirit |
Malicious release: Malicious code in ecto-spirit (npm) MAL-2026-2355 | Malicious | Not scored | 24 Mar, 2026 | npm ecto-spirit |
Malicious release: Malicious code in ecto-spirit-core (npm) MAL-2026-2356 | Malicious | Not scored | 24 Mar, 2026 | npm ecto-spirit-core |
Malicious release: Malicious code in ecto-registry (npm) MAL-2026-2354 | Malicious | Not scored | 24 Mar, 2026 | npm ecto-registry |
Malicious release: Malicious code in ecto-corsair-lwirz (npm) MAL-2026-2352 | Malicious | Not scored | 24 Mar, 2026 | npm ecto-corsair-lwirz |
Malicious release: Malicious code in ecto-engine (npm) MAL-2026-2353 | Malicious | Not scored | 24 Mar, 2026 | npm ecto-engine |
Malicious release: Malicious code in dotenv-xtend (npm) MAL-2026-2351 | Malicious | Not scored | 24 Mar, 2026 | npm dotenv-xtend |
Malicious release: Malicious code in dotenv-express (npm) GHSA-hmr7-9h9c-5m6q, MAL-2026-2350 | Malicious | Not scored | 24 Mar, 2026 | npm dotenv-express |
Malicious release: Malicious code in deriv_ppetest (npm) MAL-2026-2349 | Malicious | Not scored | 24 Mar, 2026 | npm deriv_ppetest |
Malicious release: Malicious code in cursed-module (npm) MAL-2026-2348 | Malicious | Not scored | 24 Mar, 2026 | npm cursed-module |
Malicious release: Malicious code in ctf-package-onetimeuseforctf (npm) MAL-2026-2347 | Malicious | Not scored | 24 Mar, 2026 | npm ctf-package-onetimeuseforctf |
Malicious release: Malicious code in corsair-module (npm) MAL-2026-2346 | Malicious | Not scored | 24 Mar, 2026 | npm corsair-module |
Malicious release: Malicious code in codecoverage-tools (npm) MAL-2026-2345 | Malicious | Not scored | 24 Mar, 2026 | npm codecoverage-tools |
Malicious release: Malicious code in codeanalysis-common (npm) MAL-2026-2344 | Malicious | Not scored | 24 Mar, 2026 | npm codeanalysis-common |
Malicious release: Malicious code in chain-multer (npm) MAL-2026-2343 | Malicious | Not scored | 24 Mar, 2026 | npm chain-multer |
Malicious release: Malicious code in chai-set (npm) MAL-2026-2342 | Malicious | Not scored | 24 Mar, 2026 | npm chai-set |
Malicious release: Malicious code in chai-chain-cognivault (npm) MAL-2026-2341 | Malicious | Not scored | 24 Mar, 2026 | npm chai-chain-cognivault |