Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @tl-icons/core (npm) MAL-2026-1638 | Malicious | Not scored | 18 Mar, 2026 | npm @tl-icons/core |
Malicious release: Malicious code in @spot-dapp/web (npm) MAL-2026-1637 | Malicious | Not scored | 18 Mar, 2026 | npm @spot-dapp/web |
Malicious release: Malicious code in @sommos/create-leaverule-or-terminationrule-form-data (npm) MAL-2026-1636 | Malicious | Not scored | 18 Mar, 2026 | npm @sommos/create-leaverule-or-terminationrule-form-data |
Malicious release: Malicious code in @polymarket-developers/clob-client (npm) MAL-2026-1635 | Malicious | Not scored | 18 Mar, 2026 | npm @polymarket-developers/clob-client |
Malicious release: Malicious code in @panopto/api-core (npm) MAL-2026-1634 | Malicious | Not scored | 18 Mar, 2026 | npm @panopto/api-core |
Malicious release: Malicious code in @nxt-costco-com/forge-icons (npm) MAL-2026-1633 | Malicious | Not scored | 18 Mar, 2026 | npm @nxt-costco-com/forge-icons |
Malicious release: Malicious code in @nxt-costco-com/forge-design-tokens (npm) MAL-2026-1632 | Malicious | Not scored | 18 Mar, 2026 | npm @nxt-costco-com/forge-design-tokens |
Malicious release: Malicious code in @nxt-costco-com/forge-components (npm) MAL-2026-1631 | Malicious | Not scored | 18 Mar, 2026 | npm @nxt-costco-com/forge-components |
Malicious release: Malicious code in @measures/responsive (npm) MAL-2026-1630 | Malicious | Not scored | 18 Mar, 2026 | npm @measures/responsive |
Malicious release: Malicious code in @legacy-utils/core (npm) MAL-2026-1629 | Malicious | Not scored | 18 Mar, 2026 | npm @legacy-utils/core |
Malicious release: Malicious code in @legacy-ui/core (npm) MAL-2026-1628 | Malicious | Not scored | 18 Mar, 2026 | npm @legacy-ui/core |
Malicious release: Malicious code in @legacy-components/core (npm) MAL-2026-1627 | Malicious | Not scored | 18 Mar, 2026 | npm @legacy-components/core |
Malicious release: Malicious code in @kui-react/table (npm) MAL-2026-1626 | Malicious | Not scored | 18 Mar, 2026 | npm @kui-react/table |
Malicious release: Malicious code in @kui-react/button (npm) MAL-2026-1625 | Malicious | Not scored | 18 Mar, 2026 | npm @kui-react/button |
Malicious release: Malicious code in @inter-ikea-gallery/integration (npm) MAL-2026-1624 | Malicious | Not scored | 18 Mar, 2026 | npm @inter-ikea-gallery/integration |
Malicious release: Malicious code in @f5rest/odata-v4-service-metadata (npm) MAL-2026-1623 | Malicious | Not scored | 18 Mar, 2026 | npm @f5rest/odata-v4-service-metadata |
Malicious release: Malicious code in @f5rest/odata-v4-server (npm) MAL-2026-1622 | Malicious | Not scored | 18 Mar, 2026 | npm @f5rest/odata-v4-server |
Malicious release: Malicious code in @f5rest/odata-v4-metadata (npm) MAL-2026-1620 | Malicious | Not scored | 18 Mar, 2026 | npm @f5rest/odata-v4-metadata |
Malicious release: Malicious code in @f5rest/odata-v4-parser (npm) MAL-2026-1621 | Malicious | Not scored | 18 Mar, 2026 | npm @f5rest/odata-v4-parser |
Malicious release: Malicious code in @f5rest/odata-v4-inmemory (npm) MAL-2026-1619 | Malicious | Not scored | 18 Mar, 2026 | npm @f5rest/odata-v4-inmemory |
Malicious release: Malicious code in @f5rest/odata-lens (npm) MAL-2026-1618 | Malicious | Not scored | 18 Mar, 2026 | npm @f5rest/odata-lens |
Malicious release: Malicious code in @f5rest/icr-odata-adapter (npm) MAL-2026-1617 | Malicious | Not scored | 18 Mar, 2026 | npm @f5rest/icr-odata-adapter |
Malicious release: Malicious code in @f5rest/icr-metadata-generator (npm) MAL-2026-1616 | Malicious | Not scored | 18 Mar, 2026 | npm @f5rest/icr-metadata-generator |
Malicious release: Malicious code in @emerald-react/menu (npm) MAL-2026-1615 | Malicious | Not scored | 18 Mar, 2026 | npm @emerald-react/menu |
Malicious release: Malicious code in @emerald-react/list (npm) MAL-2026-1614 | Malicious | Not scored | 18 Mar, 2026 | npm @emerald-react/list |
Malicious release: Malicious code in @emerald-react/input (npm) MAL-2026-1612 | Malicious | Not scored | 18 Mar, 2026 | npm @emerald-react/input |
Malicious release: Malicious code in @emerald-react/label (npm) MAL-2026-1613 | Malicious | Not scored | 18 Mar, 2026 | npm @emerald-react/label |
Malicious release: Malicious code in @emerald-react/icon-button (npm) MAL-2026-1611 | Malicious | Not scored | 18 Mar, 2026 | npm @emerald-react/icon-button |
Malicious release: Malicious code in @emerald-react/icon (npm) MAL-2026-1610 | Malicious | Not scored | 18 Mar, 2026 | npm @emerald-react/icon |
Malicious release: Malicious code in @emerald-react/ellis-ai-icon (npm) MAL-2026-1609 | Malicious | Not scored | 18 Mar, 2026 | npm @emerald-react/ellis-ai-icon |
Malicious release: Malicious code in @emerald-react/dropdown (npm) MAL-2026-1608 | Malicious | Not scored | 18 Mar, 2026 | npm @emerald-react/dropdown |
Malicious release: Malicious code in @emerald-react/divider (npm) MAL-2026-1607 | Malicious | Not scored | 18 Mar, 2026 | npm @emerald-react/divider |
Malicious release: Malicious code in @emerald-react/datepicker (npm) MAL-2026-1606 | Malicious | Not scored | 18 Mar, 2026 | npm @emerald-react/datepicker |
Malicious release: Malicious code in @emerald-react/data-table (npm) MAL-2026-1605 | Malicious | Not scored | 18 Mar, 2026 | npm @emerald-react/data-table |
Malicious release: Malicious code in @emerald-react/core (npm) MAL-2026-1604 | Malicious | Not scored | 18 Mar, 2026 | npm @emerald-react/core |
Malicious release: Malicious code in @emerald-react/checkbox (npm) MAL-2026-1603 | Malicious | Not scored | 18 Mar, 2026 | npm @emerald-react/checkbox |
Malicious release: Malicious code in @emerald-react/chat-bot (npm) MAL-2026-1602 | Malicious | Not scored | 18 Mar, 2026 | npm @emerald-react/chat-bot |
Malicious release: Malicious code in @emerald-react/button (npm) MAL-2026-1601 | Malicious | Not scored | 18 Mar, 2026 | npm @emerald-react/button |
Malicious release: Malicious code in @emerald-react/banner (npm) MAL-2026-1600 | Malicious | Not scored | 18 Mar, 2026 | npm @emerald-react/banner |
Malicious release: Malicious code in @emerald-react/badge (npm) MAL-2026-1599 | Malicious | Not scored | 18 Mar, 2026 | npm @emerald-react/badge |
Malicious release: Malicious code in @emerald-react/avatar (npm) MAL-2026-1598 | Malicious | Not scored | 18 Mar, 2026 | npm @emerald-react/avatar |
Malicious release: Malicious code in @emerald-react/autocomplete (npm) MAL-2026-1597 | Malicious | Not scored | 18 Mar, 2026 | npm @emerald-react/autocomplete |
Malicious release: Malicious code in @emerald-react/app-header (npm) MAL-2026-1596 | Malicious | Not scored | 18 Mar, 2026 | npm @emerald-react/app-header |
Malicious release: Malicious code in @commonschema/blackstone-core (npm) MAL-2026-1595 | Malicious | Not scored | 18 Mar, 2026 | npm @commonschema/blackstone-core |
Malicious release: Malicious code in @cewe-onsitesearch/schemas (npm) MAL-2026-1594 | Malicious | Not scored | 18 Mar, 2026 | npm @cewe-onsitesearch/schemas |
Malicious release: Malicious code in @cbreone/utilities (npm) MAL-2026-1593 | Malicious | Not scored | 18 Mar, 2026 | npm @cbreone/utilities |
Malicious release: Malicious code in @cbreone/survey-ui (npm) MAL-2026-1592 | Malicious | Not scored | 18 Mar, 2026 | npm @cbreone/survey-ui |
Malicious release: Malicious code in @cbreone/micro-ui-survey (npm) MAL-2026-1591 | Malicious | Not scored | 18 Mar, 2026 | npm @cbreone/micro-ui-survey |
Malicious release: Malicious code in @cbreone/core-ui (npm) MAL-2026-1590 | Malicious | Not scored | 18 Mar, 2026 | npm @cbreone/core-ui |
Malicious release: Malicious code in @cbreone/core-services (npm) MAL-2026-1589 | Malicious | Not scored | 18 Mar, 2026 | npm @cbreone/core-services |