Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in developit (npm) GHSA-8rhh-gp98-h7c3, MAL-2026-1515 | Malicious | Not scored | 16 Mar, 2026 | npm developit |
Malicious release: Malicious code in es6-recommended (npm) GHSA-8wmc-9j5p-272c, MAL-2026-1516 | Malicious | Not scored | 16 Mar, 2026 | npm es6-recommended |
Malicious release: Malicious code in syntax-function-bind (npm) GHSA-9676-4h6h-f66c, MAL-2026-1551 | Malicious | Not scored | 16 Mar, 2026 | npm syntax-function-bind |
Malicious release: Malicious code in proposal-typescript (npm) GHSA-9jg5-g7r5-p9f9, MAL-2026-1527 | Malicious | Not scored | 16 Mar, 2026 | npm proposal-typescript |
Malicious release: Malicious code in transform-dynamic-import (npm) GHSA-9xfj-83q4-hxj6, MAL-2026-1560 | Malicious | Not scored | 16 Mar, 2026 | npm transform-dynamic-import |
Malicious release: Malicious code in minify-replace (npm) GHSA-c4qg-vqr5-vwq8, MAL-2026-1503 | Malicious | Not scored | 16 Mar, 2026 | npm minify-replace |
Malicious release: Malicious code in yoshi-base (npm) GHSA-c6p6-pv5c-m895, MAL-2026-1556 | Malicious | Not scored | 16 Mar, 2026 | npm yoshi-base |
Malicious release: Malicious code in transform-jsbi-to-bigint (npm) GHSA-cg5f-wc33-48fx, MAL-2026-1504 | Malicious | Not scored | 16 Mar, 2026 | npm transform-jsbi-to-bigint |
Malicious release: Malicious code in peer-deps-external (npm) GHSA-cp73-78rw-jwx8, MAL-2026-1525 | Malicious | Not scored | 16 Mar, 2026 | npm peer-deps-external |
Malicious release: Malicious code in add-react-displayname (npm) GHSA-f582-qpjg-gx9h, MAL-2026-1557 | Malicious | Not scored | 16 Mar, 2026 | npm add-react-displayname |
Malicious release: Malicious code in urql-introspection (npm) GHSA-f844-vh2c-g959, MAL-2026-1541 | Malicious | Not scored | 16 Mar, 2026 | npm urql-introspection |
Malicious release: Malicious code in transform-function-bind (npm) GHSA-fgvm-3g6v-ppjf, MAL-2026-1567 | Malicious | Not scored | 16 Mar, 2026 | npm transform-function-bind |
Malicious release: Malicious code in typescript-react-query (npm) GHSA-fj6q-vgx9-hr52, MAL-2026-1553 | Malicious | Not scored | 16 Mar, 2026 | npm typescript-react-query |
Malicious release: Malicious code in filenames-simple (npm) GHSA-fm43-2f72-p329, MAL-2026-1517 | Malicious | Not scored | 16 Mar, 2026 | npm filenames-simple |
Malicious release: Malicious code in vue-scoped-css (npm) GHSA-g4q9-p378-mc3g, MAL-2026-1538 | Malicious | Not scored | 16 Mar, 2026 | npm vue-scoped-css |
Malicious release: Malicious code in dazaar-payment (npm) GHSA-g9pf-gwx4-x568, MAL-2026-1546 | Malicious | Not scored | 16 Mar, 2026 | npm dazaar-payment |
Malicious release: Malicious code in react-you-might-not-need-an-effect (npm) GHSA-ghf2-4c5x-7jh3, MAL-2026-1528 | Malicious | Not scored | 16 Mar, 2026 | npm react-you-might-not-need-an-effect |
Malicious release: Malicious code in transform-dev (npm) GHSA-gqcg-fhwr-45c8, MAL-2026-1534 | Malicious | Not scored | 16 Mar, 2026 | npm transform-dev |
Malicious release: Malicious code in better-styled-components (npm) GHSA-h4ff-5jjf-rqxr, MAL-2026-1502 | Malicious | Not scored | 16 Mar, 2026 | npm better-styled-components |
Malicious release: Malicious code in transform-dev-warning (npm) GHSA-h78m-c55g-qqwc, MAL-2026-1535 | Malicious | Not scored | 16 Mar, 2026 | npm transform-dev-warning |
Malicious release: Malicious code in transform-proto-to-assign (npm) GHSA-h95x-pph2-h496, MAL-2026-1573 | Malicious | Not scored | 16 Mar, 2026 | npm transform-proto-to-assign |
Malicious release: Malicious code in syntax-do-expressions (npm) GHSA-hjqm-4p7q-4wg6, MAL-2026-1549 | Malicious | Not scored | 16 Mar, 2026 | npm syntax-do-expressions |
Malicious release: Malicious code in transform-property-literals (npm) GHSA-hq5h-wj2c-3mhf, MAL-2026-1507 | Malicious | Not scored | 16 Mar, 2026 | npm transform-property-literals |
Malicious release: Malicious code in transform-typescript (npm) GHSA-j74c-w64f-9wg5, MAL-2026-1575 | Malicious | Not scored | 16 Mar, 2026 | npm transform-typescript |
Malicious release: Malicious code in @storylane/shared-packages (npm) GHSA-j7r9-77fw-4wx4, MAL-2026-1500 | Malicious | Not scored | 16 Mar, 2026 | npm @storylane/shared-packages |
Malicious release: Malicious code in syntax-decorators (npm) GHSA-jmf7-h988-c98c, MAL-2026-1531 | Malicious | Not scored | 16 Mar, 2026 | npm syntax-decorators |
Malicious release: Malicious code in transform-jscript (npm) GHSA-jrmp-x4fh-9fwr, MAL-2026-1505 | Malicious | Not scored | 16 Mar, 2026 | npm transform-jscript |
Malicious release: Malicious code in declaration-block-no-ignored-properties (npm) GHSA-jx3f-48fj-jgmw, MAL-2026-1514 | Malicious | Not scored | 16 Mar, 2026 | npm declaration-block-no-ignored-properties |
Malicious release: Malicious code in @storylane/uikit (npm) GHSA-m2gh-pw4c-p8f6, MAL-2026-1501 | Malicious | Not scored | 16 Mar, 2026 | npm @storylane/uikit |
Malicious release: Malicious code in transform-json-strings (npm) GHSA-m6hv-9gh4-4c85, MAL-2026-1569 | Malicious | Not scored | 16 Mar, 2026 | npm transform-json-strings |
Malicious release: Malicious code in undeclared-variables-check (npm) GHSA-mj24-hqwm-h9vr, MAL-2026-1512 | Malicious | Not scored | 16 Mar, 2026 | npm undeclared-variables-check |
Malicious release: Malicious code in typescript-nhost (npm) GHSA-mm3f-jjww-x883, MAL-2026-1552 | Malicious | Not scored | 16 Mar, 2026 | npm typescript-nhost |
Malicious release: Malicious code in import-newlines (npm) GHSA-mqq4-c9r8-wr6r, MAL-2026-1519 | Malicious | Not scored | 16 Mar, 2026 | npm import-newlines |
Malicious release: Malicious code in lit-a11y (npm) GHSA-p2f8-jq4c-jj37, MAL-2026-1521 | Malicious | Not scored | 16 Mar, 2026 | npm lit-a11y |
Malicious release: Malicious code in ignore-html-and-css-imports (npm) GHSA-p5q7-6jvf-626x, MAL-2026-1518 | Malicious | Not scored | 16 Mar, 2026 | npm ignore-html-and-css-imports |
Malicious release: Malicious code in vitest-globals (npm) GHSA-p89j-34hq-pxq7, MAL-2026-1513 | Malicious | Not scored | 16 Mar, 2026 | npm vitest-globals |
Malicious release: Malicious code in dazaar-cli (npm) GHSA-px23-hx8x-3mm4, MAL-2026-1545 | Malicious | Not scored | 16 Mar, 2026 | npm dazaar-cli |
Malicious release: Malicious code in jam3 (npm) GHSA-q264-gcg5-jqww, MAL-2026-1520 | Malicious | Not scored | 16 Mar, 2026 | npm jam3 |
Malicious release: Malicious code in todo-plz (npm) GHSA-q93m-663h-q987, MAL-2026-1533 | Malicious | Not scored | 16 Mar, 2026 | npm todo-plz |
Malicious release: Malicious code in transform-undefined-to-void (npm) GHSA-qw7p-5225-6543, MAL-2026-1511 | Malicious | Not scored | 16 Mar, 2026 | npm transform-undefined-to-void |
Malicious release: Malicious code in syntax-exponentiation-operator (npm) GHSA-qxc7-5ccf-87rp, MAL-2026-1532 | Malicious | Not scored | 16 Mar, 2026 | npm syntax-exponentiation-operator |
Malicious release: Malicious code in no-type-assertion (npm) GHSA-qxf6-x9c5-qxr4, MAL-2026-1524 | Malicious | Not scored | 16 Mar, 2026 | npm no-type-assertion |
Malicious release: Malicious code in typescript-rtk-query (npm) GHSA-r4j3-rfqp-vmpm, MAL-2026-1537 | Malicious | Not scored | 16 Mar, 2026 | npm typescript-rtk-query |
Malicious release: Malicious code in transform-react-jsx (npm) GHSA-r5j4-qcgp-2hrj, MAL-2026-1508 | Malicious | Not scored | 16 Mar, 2026 | npm transform-react-jsx |
Malicious release: Malicious code in transform-export-extensions (npm) GHSA-r6qh-rm6v-7pvx, MAL-2026-1565 | Malicious | Not scored | 16 Mar, 2026 | npm transform-export-extensions |
Malicious release: Malicious code in transform-simplify-comparison-operators (npm) GHSA-r9vm-77cr-58hj, MAL-2026-1510 | Malicious | Not scored | 16 Mar, 2026 | npm transform-simplify-comparison-operators |
Malicious release: Malicious code in prefer-let (npm) GHSA-rc2x-j8vj-mr6f, MAL-2026-1526 | Malicious | Not scored | 16 Mar, 2026 | npm prefer-let |
Malicious release: Malicious code in transform-member-expression-literals (npm) GHSA-rm67-f2rf-9fwf, MAL-2026-1570 | Malicious | Not scored | 16 Mar, 2026 | npm transform-member-expression-literals |
Malicious release: Malicious code in minify-mangle-names (npm) GHSA-v3vq-pp56-3jx5, MAL-2026-1522 | Malicious | Not scored | 16 Mar, 2026 | npm minify-mangle-names |
Malicious release: Malicious code in transform-new-target (npm) GHSA-vpx7-g2h6-rq6c, MAL-2026-1572 | Malicious | Not scored | 16 Mar, 2026 | npm transform-new-target |