Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in fe-prop-types (npm) MAL-2026-1738 | Malicious | Not scored | 18 Mar, 2026 | npm fe-prop-types |
Malicious release: Malicious code in fe-lib-singleton (npm) MAL-2026-1736 | Malicious | Not scored | 18 Mar, 2026 | npm fe-lib-singleton |
Malicious release: Malicious code in fe-lib-theme (npm) MAL-2026-1737 | Malicious | Not scored | 18 Mar, 2026 | npm fe-lib-theme |
Malicious release: Malicious code in fe-lib-sequences (npm) MAL-2026-1735 | Malicious | Not scored | 18 Mar, 2026 | npm fe-lib-sequences |
Malicious release: Malicious code in fdir3 (npm) MAL-2026-1734 | Malicious | Not scored | 18 Mar, 2026 | npm fdir3 |
Malicious release: Malicious code in express-security-suite-2024 (npm) MAL-2026-1733 | Malicious | Not scored | 18 Mar, 2026 | npm express-security-suite-2024 |
Malicious release: Malicious code in express-ranges (npm) MAL-2026-1732 | Malicious | Not scored | 18 Mar, 2026 | npm express-ranges |
Malicious release: Malicious code in express-http-validator (npm) MAL-2026-1731 | Malicious | Not scored | 18 Mar, 2026 | npm express-http-validator |
Malicious release: Malicious code in express-configers (npm) MAL-2026-1730 | Malicious | Not scored | 18 Mar, 2026 | npm express-configers |
Malicious release: Malicious code in eslint-plugin-superhuman-custom-rules (npm) MAL-2026-1729 | Malicious | Not scored | 18 Mar, 2026 | npm eslint-plugin-superhuman-custom-rules |
Malicious release: Malicious code in escaux (npm) MAL-2026-1728 | Malicious | Not scored | 18 Mar, 2026 | npm escaux |
Malicious release: Malicious code in es1int-configer (npm) MAL-2026-1727 | Malicious | Not scored | 18 Mar, 2026 | npm es1int-configer |
Malicious release: Malicious code in ersagent-frontend (npm) MAL-2026-1726 | Malicious | Not scored | 18 Mar, 2026 | npm ersagent-frontend |
Malicious release: Malicious code in env-workflow-test (npm) MAL-2026-1725 | Malicious | Not scored | 18 Mar, 2026 | npm env-workflow-test |
Malicious release: Malicious code in engineers (npm) MAL-2026-1724 | Malicious | Not scored | 18 Mar, 2026 | npm engineers |
Malicious release: Malicious code in elf-stats-velvet-ledger-928 (npm) MAL-2026-1723 | Malicious | Not scored | 18 Mar, 2026 | npm elf-stats-velvet-ledger-928 |
Malicious release: Malicious code in ehance-assistant (npm) MAL-2026-1721 | Malicious | Not scored | 18 Mar, 2026 | npm ehance-assistant |
Malicious release: Malicious code in ehance-assistant33 (npm) MAL-2026-1722 | Malicious | Not scored | 18 Mar, 2026 | npm ehance-assistant33 |
Malicious release: Malicious code in dubbo-web-example (npm) MAL-2026-1720 | Malicious | Not scored | 18 Mar, 2026 | npm dubbo-web-example |
Malicious release: Malicious code in dstny (npm) MAL-2026-1719 | Malicious | Not scored | 18 Mar, 2026 | npm dstny |
Malicious release: Malicious code in dpc-sign (npm) MAL-2026-1718 | Malicious | Not scored | 18 Mar, 2026 | npm dpc-sign |
Malicious release: Malicious code in dotenvx-int (npm) MAL-2026-1717 | Malicious | Not scored | 18 Mar, 2026 | npm dotenvx-int |
Malicious release: Malicious code in dotenv-plugin (npm) MAL-2026-1716 | Malicious | Not scored | 18 Mar, 2026 | npm dotenv-plugin |
Malicious release: Malicious code in dotenv-nodejs (npm) MAL-2026-1715 | Malicious | Not scored | 18 Mar, 2026 | npm dotenv-nodejs |
Malicious release: Malicious code in dotenv-node-promised (npm) MAL-2026-1714 | Malicious | Not scored | 18 Mar, 2026 | npm dotenv-node-promised |
Malicious release: Malicious code in dotenv-mono-cli (npm) MAL-2026-1712 | Malicious | Not scored | 18 Mar, 2026 | npm dotenv-mono-cli |
Malicious release: Malicious code in dotenv-node-cli (npm) MAL-2026-1713 | Malicious | Not scored | 18 Mar, 2026 | npm dotenv-node-cli |
Malicious release: Malicious code in dotenv-int (npm) MAL-2026-1711 | Malicious | Not scored | 18 Mar, 2026 | npm dotenv-int |
Malicious release: Malicious code in dotenv-cli-node (npm) MAL-2026-1710 | Malicious | Not scored | 18 Mar, 2026 | npm dotenv-cli-node |
Malicious release: Malicious code in dnsfilter-frontend (npm) MAL-2026-1709 | Malicious | Not scored | 18 Mar, 2026 | npm dnsfilter-frontend |
Malicious release: Malicious code in dns-filter-dashboard (npm) MAL-2026-1708 | Malicious | Not scored | 18 Mar, 2026 | npm dns-filter-dashboard |
Malicious release: Malicious code in dev_ppe-test (npm) MAL-2026-1707 | Malicious | Not scored | 18 Mar, 2026 | npm dev_ppe-test |
Malicious release: Malicious code in ddddddd1d (npm) MAL-2026-1706 | Malicious | Not scored | 18 Mar, 2026 | npm ddddddd1d |
Malicious release: Malicious code in dazz-redirects (npm) MAL-2026-1705 | Malicious | Not scored | 18 Mar, 2026 | npm dazz-redirects |
Malicious release: Malicious code in date-fns-scripts (npm) MAL-2026-1704 | Malicious | Not scored | 18 Mar, 2026 | npm date-fns-scripts |
Malicious release: Malicious code in dataterminal-ui (npm) MAL-2026-1703 | Malicious | Not scored | 18 Mar, 2026 | npm dataterminal-ui |
Malicious release: Malicious code in d4sp (npm) MAL-2026-1702 | Malicious | Not scored | 18 Mar, 2026 | npm d4sp |
Malicious release: Malicious code in corp-sign-core-js (npm) MAL-2026-1701 | Malicious | Not scored | 18 Mar, 2026 | npm corp-sign-core-js |
Malicious release: Malicious code in corp-internal-logger (npm) MAL-2026-1700 | Malicious | Not scored | 18 Mar, 2026 | npm corp-internal-logger |
Malicious release: Malicious code in constant-values (npm) MAL-2026-1699 | Malicious | Not scored | 18 Mar, 2026 | npm constant-values |
Malicious release: Malicious code in connect-me-icon (npm) MAL-2026-1698 | Malicious | Not scored | 18 Mar, 2026 | npm connect-me-icon |
Malicious release: Malicious code in conduit-core (npm) MAL-2026-1697 | Malicious | Not scored | 18 Mar, 2026 | npm conduit-core |
Malicious release: Malicious code in components-design-system (npm) MAL-2026-1696 | Malicious | Not scored | 18 Mar, 2026 | npm components-design-system |
Malicious release: Malicious code in company-billing-sdk-bugbounty (npm) MAL-2026-1695 | Malicious | Not scored | 18 Mar, 2026 | npm company-billing-sdk-bugbounty |
Malicious release: Malicious code in collabs-merchants (npm) MAL-2026-1694 | Malicious | Not scored | 18 Mar, 2026 | npm collabs-merchants |
Malicious release: Malicious code in coinbase-desktop-sdk (npm) MAL-2026-1693 | Malicious | Not scored | 18 Mar, 2026 | npm coinbase-desktop-sdk |
Malicious release: Malicious code in circuit-playground (npm) MAL-2026-1692 | Malicious | Not scored | 18 Mar, 2026 | npm circuit-playground |
Malicious release: Malicious code in chromecast-receiver (npm) MAL-2026-1691 | Malicious | Not scored | 18 Mar, 2026 | npm chromecast-receiver |
Malicious release: Malicious code in chain-promised-cli (npm) MAL-2026-1690 | Malicious | Not scored | 18 Mar, 2026 | npm chain-promised-cli |
Malicious release: Malicious code in chain-promised-async (npm) MAL-2026-1689 | Malicious | Not scored | 18 Mar, 2026 | npm chain-promised-async |