Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in chain-cli-promised (npm) MAL-2026-1687 | Malicious | Not scored | 18 Mar, 2026 | npm chain-cli-promised |
Malicious release: Malicious code in chain-promised (npm) MAL-2026-1688 | Malicious | Not scored | 18 Mar, 2026 | npm chain-promised |
Malicious release: Malicious code in chain-argon (npm) MAL-2026-1686 | Malicious | Not scored | 18 Mar, 2026 | npm chain-argon |
Malicious release: Malicious code in chai-types (npm) MAL-2026-1685 | Malicious | Not scored | 18 Mar, 2026 | npm chai-types |
Malicious release: Malicious code in chai-proxy (npm) MAL-2026-1684 | Malicious | Not scored | 18 Mar, 2026 | npm chai-proxy |
Malicious release: Malicious code in chai-promised-tools (npm) MAL-2026-1683 | Malicious | Not scored | 18 Mar, 2026 | npm chai-promised-tools |
Malicious release: Malicious code in chai-promised-plugin (npm) MAL-2026-1682 | Malicious | Not scored | 18 Mar, 2026 | npm chai-promised-plugin |
Malicious release: Malicious code in chai-promised-cli (npm) MAL-2026-1681 | Malicious | Not scored | 18 Mar, 2026 | npm chai-promised-cli |
Malicious release: Malicious code in chai-promised-await (npm) MAL-2026-1680 | Malicious | Not scored | 18 Mar, 2026 | npm chai-promised-await |
Malicious release: Malicious code in chai-promised-async (npm) MAL-2026-1679 | Malicious | Not scored | 18 Mar, 2026 | npm chai-promised-async |
Malicious release: Malicious code in chai-cli-async (npm) MAL-2026-1677 | Malicious | Not scored | 18 Mar, 2026 | npm chai-cli-async |
Malicious release: Malicious code in chai-conf (npm) MAL-2026-1678 | Malicious | Not scored | 18 Mar, 2026 | npm chai-conf |
Malicious release: Malicious code in chai-chai-chain-promised (npm) MAL-2026-1676 | Malicious | Not scored | 18 Mar, 2026 | npm chai-chai-chain-promised |
Malicious release: Malicious code in chai-await-promised (npm) MAL-2026-1675 | Malicious | Not scored | 18 Mar, 2026 | npm chai-await-promised |
Malicious release: Malicious code in chai-await-cli (npm) MAL-2026-1674 | Malicious | Not scored | 18 Mar, 2026 | npm chai-await-cli |
Malicious release: Malicious code in chai-await-chain (npm) MAL-2026-1673 | Malicious | Not scored | 18 Mar, 2026 | npm chai-await-chain |
Malicious release: Malicious code in chai-as-resolved (npm) MAL-2026-1671 | Malicious | Not scored | 18 Mar, 2026 | npm chai-as-resolved |
Malicious release: Malicious code in chai-as-sync (npm) MAL-2026-1672 | Malicious | Not scored | 18 Mar, 2026 | npm chai-as-sync |
Malicious release: Malicious code in chai-as-prop (npm) MAL-2026-1670 | Malicious | Not scored | 18 Mar, 2026 | npm chai-as-prop |
Malicious release: Malicious code in chai-as-prompt (npm) MAL-2026-1669 | Malicious | Not scored | 18 Mar, 2026 | npm chai-as-prompt |
Malicious release: Malicious code in chai-as-produced (npm) MAL-2026-1668 | Malicious | Not scored | 18 Mar, 2026 | npm chai-as-produced |
Malicious release: Malicious code in cat-ecommerce-alloy (npm) MAL-2026-1667 | Malicious | Not scored | 18 Mar, 2026 | npm cat-ecommerce-alloy |
Malicious release: Malicious code in carbon-mac-copy-cloner (npm) MAL-2026-1666 | Malicious | Not scored | 18 Mar, 2026 | npm carbon-mac-copy-cloner |
Malicious release: Malicious code in browser-compat-data (npm) MAL-2026-1665 | Malicious | Not scored | 18 Mar, 2026 | npm browser-compat-data |
Malicious release: Malicious code in braze-content-card-island (npm) MAL-2026-1663 | Malicious | Not scored | 18 Mar, 2026 | npm braze-content-card-island |
Malicious release: Malicious code in brisk-web-ssr (npm) MAL-2026-1664 | Malicious | Not scored | 18 Mar, 2026 | npm brisk-web-ssr |
Malicious release: Malicious code in blob-internal-security-test-f63eabf7 (npm) MAL-2026-1662 | Malicious | Not scored | 18 Mar, 2026 | npm blob-internal-security-test-f63eabf7 |
Malicious release: Malicious code in blackstone-core (npm) MAL-2026-1661 | Malicious | Not scored | 18 Mar, 2026 | npm blackstone-core |
Malicious release: Malicious code in bis-schemas (npm) MAL-2026-1660 | Malicious | Not scored | 18 Mar, 2026 | npm bis-schemas |
Malicious release: Malicious code in bcp-security-update (npm) MAL-2026-1658 | Malicious | Not scored | 18 Mar, 2026 | npm bcp-security-update |
Malicious release: Malicious code in bcp-security-updates (npm) MAL-2026-1659 | Malicious | Not scored | 18 Mar, 2026 | npm bcp-security-updates |
Malicious release: Malicious code in backstage-plugin-wpe-catalog (npm) MAL-2026-1657 | Malicious | Not scored | 18 Mar, 2026 | npm backstage-plugin-wpe-catalog |
Malicious release: Malicious code in argonnode (npm) MAL-2026-1656 | Malicious | Not scored | 18 Mar, 2026 | npm argonnode |
Malicious release: Malicious code in aligntyper (npm) MAL-2026-1655 | Malicious | Not scored | 18 Mar, 2026 | npm aligntyper |
Malicious release: Malicious code in aligntypeer (npm) MAL-2026-1654 | Malicious | Not scored | 18 Mar, 2026 | npm aligntypeer |
Malicious release: Malicious code in align-configer (npm) MAL-2026-1653 | Malicious | Not scored | 18 Mar, 2026 | npm align-configer |
Malicious release: Malicious code in alfasec (npm) MAL-2026-1652 | Malicious | Not scored | 18 Mar, 2026 | npm alfasec |
Malicious release: Malicious code in ai-fast-auto-trader (npm) MAL-2026-1651 | Malicious | Not scored | 18 Mar, 2026 | npm ai-fast-auto-trader |
Malicious release: Malicious code in advertising-shared (npm) MAL-2026-1650 | Malicious | Not scored | 18 Mar, 2026 | npm advertising-shared |
Malicious release: Malicious code in advertising-podlet (npm) MAL-2026-1649 | Malicious | Not scored | 18 Mar, 2026 | npm advertising-podlet |
Malicious release: Malicious code in advertising-events (npm) MAL-2026-1648 | Malicious | Not scored | 18 Mar, 2026 | npm advertising-events |
Malicious release: Malicious code in adobe-tracking (npm) MAL-2026-1647 | Malicious | Not scored | 18 Mar, 2026 | npm adobe-tracking |
Malicious release: Malicious code in abstract-http-request (npm) MAL-2026-1646 | Malicious | Not scored | 18 Mar, 2026 | npm abstract-http-request |
Malicious release: Malicious code in aboba-initial (npm) MAL-2026-1645 | Malicious | Not scored | 18 Mar, 2026 | npm aboba-initial |
Malicious release: Malicious code in aboba-docker-check (npm) MAL-2026-1644 | Malicious | Not scored | 18 Mar, 2026 | npm aboba-docker-check |
Malicious release: Malicious code in @vampirchik147/libxmljs2 (npm) MAL-2026-1643 | Malicious | Not scored | 18 Mar, 2026 | npm @vampirchik147/libxmljs2 |
Malicious release: Malicious code in @upstashed/context7-mcp (npm) MAL-2026-1642 | Malicious | Not scored | 18 Mar, 2026 | npm @upstashed/context7-mcp |
Malicious release: Malicious code in @uc-platform/auth (npm) MAL-2026-1640 | Malicious | Not scored | 18 Mar, 2026 | npm @uc-platform/auth |
Malicious release: Malicious code in @uc-platform/user-service-client-ts (npm) MAL-2026-1641 | Malicious | Not scored | 18 Mar, 2026 | npm @uc-platform/user-service-client-ts |
Malicious release: Malicious code in @uc-platform/advertisement-service-client (npm) MAL-2026-1639 | Malicious | Not scored | 18 Mar, 2026 | npm @uc-platform/advertisement-service-client |