Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in array-frames (npm) GHSA-24hx-4mc8-g9q7, MAL-2026-15969 | Malicious | Not scored | 06 Sep, 2026 | npm array-frames |
Malicious release: Malicious code in node-helper (npm) GHSA-2ggc-wmq2-3whp, MAL-2026-15997 | Malicious | Not scored | 06 Sep, 2026 | npm node-helper |
Malicious release: Malicious code in jwt-logger (npm) GHSA-rpqx-cp2g-55w5, MAL-2026-15991 | Malicious | Not scored | 05 Sep, 2026 | npm jwt-logger |
Malicious release: Malicious code in array-scala (npm) GHSA-rx3f-9hxc-773g, MAL-2026-15970 | Malicious | Not scored | 05 Sep, 2026 | npm array-scala |
Malicious release: Malicious code in @domyjs/i18n (npm) GHSA-22jr-v88r-5cj6, MAL-2026-15951 | Malicious | Not scored | 05 Sep, 2026 | npm @domyjs/i18n |
Malicious release: Malicious code in @domyjs/reactive (npm) GHSA-3ggc-3pw2-c9v9, MAL-2026-15954 | Malicious | Not scored | 05 Sep, 2026 | npm @domyjs/reactive |
Malicious release: Malicious code in @domyjs/mask (npm) GHSA-93j2-q7r7-7qhh, MAL-2026-15953 | Malicious | Not scored | 05 Sep, 2026 | npm @domyjs/mask |
Malicious release: Malicious code in @domyjs/throttle (npm) GHSA-fr62-p59g-hr9f, MAL-2026-15956 | Malicious | Not scored | 05 Sep, 2026 | npm @domyjs/throttle |
Malicious release: Malicious code in @domyjs/router (npm) GHSA-j7wp-3648-mh57, MAL-2026-15955 | Malicious | Not scored | 05 Sep, 2026 | npm @domyjs/router |
Malicious release: Malicious code in @domyjs/intersect (npm) GHSA-v8xv-9q46-8h3x, MAL-2026-15952 | Malicious | Not scored | 05 Sep, 2026 | npm @domyjs/intersect |
Malicious release: Malicious code in muswish (npm) GHSA-295f-26rf-f8f4, MAL-2026-15996 | Malicious | Not scored | 05 Sep, 2026 | npm muswish |
Malicious release: Malicious code in enqueu (npm) GHSA-352p-f6j8-qxxh, MAL-2026-15979 | Malicious | Not scored | 05 Sep, 2026 | npm enqueu |
Malicious release: Malicious code in infinity-grid (npm) GHSA-39fr-j2vr-r24p, MAL-2026-15987 | Malicious | Not scored | 05 Sep, 2026 | npm infinity-grid |
Malicious release: Malicious code in @domyjs/collapse (npm) GHSA-39q9-7vqg-3m6w, MAL-2026-15948 | Malicious | Not scored | 05 Sep, 2026 | npm @domyjs/collapse |
Malicious release: Malicious code in @yoannchb/tokenize (npm) GHSA-4qx6-wqw8-r2qr, MAL-2026-15966 | Malicious | Not scored | 05 Sep, 2026 | npm @yoannchb/tokenize |
Malicious release: Malicious code in fast-html-dom-parser (npm) GHSA-4wcx-wjq9-25cr, MAL-2026-15983 | Malicious | Not scored | 05 Sep, 2026 | npm fast-html-dom-parser |
Malicious release: Malicious code in jimg (npm) GHSA-53xc-j4p4-52q3, MAL-2026-15989 | Malicious | Not scored | 05 Sep, 2026 | npm jimg |
Malicious release: Malicious code in onetime-rnd (npm) GHSA-55h6-2qxg-jvqv, MAL-2026-15998 | Malicious | Not scored | 05 Sep, 2026 | npm onetime-rnd |
Malicious release: Malicious code in tempjs-template (npm) GHSA-5x3v-r6fj-vf2p, MAL-2026-16002 | Malicious | Not scored | 05 Sep, 2026 | npm tempjs-template |
Malicious release: Malicious code in memov (npm) GHSA-6q78-8863-ww8m, MAL-2026-15994 | Malicious | Not scored | 05 Sep, 2026 | npm memov |
Malicious release: Malicious code in btn-particles (npm) GHSA-6w56-62pq-vhph, MAL-2026-15971 | Malicious | Not scored | 05 Sep, 2026 | npm btn-particles |
Malicious release: Malicious code in discord-phub (npm) GHSA-7693-gh38-7wmj, MAL-2026-15976 | Malicious | Not scored | 05 Sep, 2026 | npm discord-phub |
Malicious release: Malicious code in @yoannchb/cattract (npm) GHSA-76pv-jq47-p439, MAL-2026-15964 | Malicious | Not scored | 05 Sep, 2026 | npm @yoannchb/cattract |
Malicious release: Malicious code in @yoannchb/wtf-json (npm) GHSA-82x7-44x9-7295, MAL-2026-15967 | Malicious | Not scored | 05 Sep, 2026 | npm @yoannchb/wtf-json |
Malicious release: Malicious code in @yoannchb/langy (npm) GHSA-92qv-fgvj-ccf4, MAL-2026-15965 | Malicious | Not scored | 05 Sep, 2026 | npm @yoannchb/langy |
Malicious release: Malicious code in puppeteer-obscura (npm) GHSA-cxwq-q9c5-424v, MAL-2026-16001 | Malicious | Not scored | 05 Sep, 2026 | npm puppeteer-obscura |
Malicious release: Malicious code in @domyjs/domy (npm) GHSA-f553-q356-4cmc, MAL-2026-15950 | Malicious | Not scored | 05 Sep, 2026 | npm @domyjs/domy |
Malicious release: Malicious code in anime-vostfr (npm) GHSA-f6c5-36x2-p79p, MAL-2026-15968 | Malicious | Not scored | 05 Sep, 2026 | npm anime-vostfr |
Malicious release: Malicious code in card3d (npm) GHSA-gggp-h9vj-pw3p, MAL-2026-15972 | Malicious | Not scored | 05 Sep, 2026 | npm card3d |
Malicious release: Malicious code in iframe-to-video (npm) GHSA-hh9g-3hm5-vcch, MAL-2026-15986 | Malicious | Not scored | 05 Sep, 2026 | npm iframe-to-video |
Malicious release: Malicious code in parallaxy-img (npm) GHSA-mhp3-rpvj-vrpx, MAL-2026-15999 | Malicious | Not scored | 05 Sep, 2026 | npm parallaxy-img |
Malicious release: Malicious code in google-img-scrap (npm) GHSA-mwh7-p59x-2f4g, MAL-2026-15985 | Malicious | Not scored | 05 Sep, 2026 | npm google-img-scrap |
Malicious release: Malicious code in lazy-attr (npm) GHSA-pm6r-2g8f-89qh, MAL-2026-15992 | Malicious | Not scored | 05 Sep, 2026 | npm lazy-attr |
Malicious release: Malicious code in pipipe (npm) GHSA-pmm9-p62g-hvp5, MAL-2026-16000 | Malicious | Not scored | 05 Sep, 2026 | npm pipipe |
Malicious release: Malicious code in @domyjs/debounce (npm) GHSA-pp6m-2fxr-qjhf, MAL-2026-15949 | Malicious | Not scored | 05 Sep, 2026 | npm @domyjs/debounce |
Malicious release: Malicious code in inner-svg-ts (npm) GHSA-rx43-xhjx-3xq6, MAL-2026-15988 | Malicious | Not scored | 05 Sep, 2026 | npm inner-svg-ts |
Malicious release: Malicious code in linkpreview-simple (npm) GHSA-w9q9-gr86-rr73, MAL-2026-15993 | Malicious | Not scored | 05 Sep, 2026 | npm linkpreview-simple |
Malicious release: Malicious code in chrome-speech-recognition (npm) GHSA-wvfg-ghw3-64q7, MAL-2026-15973 | Malicious | Not scored | 05 Sep, 2026 | npm chrome-speech-recognition |
Malicious release: Malicious code in @domyjs/anchor (npm) GHSA-x2rm-5qrx-62mg, MAL-2026-15947 | Malicious | Not scored | 05 Sep, 2026 | npm @domyjs/anchor |
Malicious release: Malicious code in discord-tqr (npm) GHSA-xp88-72h6-mw9r, MAL-2026-15977 | Malicious | Not scored | 05 Sep, 2026 | npm discord-tqr |
Malicious release: Malicious code in json-into-html (npm) GHSA-xvrp-hmjm-74qr, MAL-2026-15990 | Malicious | Not scored | 05 Sep, 2026 | npm json-into-html |
Malicious release: Malicious code in drive-album (npm) GHSA-xwpg-4hvv-jxjq, MAL-2026-15978 | Malicious | Not scored | 05 Sep, 2026 | npm drive-album |
Malicious release: Malicious code in trading-bot-utils (npm) GHSA-2h3c-rw6j-mpq7, MAL-2026-16003 | Malicious | Not scored | 05 Sep, 2026 | npm trading-bot-utils |
Malicious release: Malicious code in eth-query-utils (npm) GHSA-c33f-ppxr-8r7j, MAL-2026-15982 | Malicious | Not scored | 05 Sep, 2026 | npm eth-query-utils |
Malicious release: Malicious code in gas-price-checker (npm) GHSA-fw8f-xwq4-q3v8, MAL-2026-15984 | Malicious | Not scored | 05 Sep, 2026 | npm gas-price-checker |
Malicious release: Malicious code in eth-lib-helpers (npm) GHSA-h3xf-4f7r-v9xf, MAL-2026-15981 | Malicious | Not scored | 05 Sep, 2026 | npm eth-lib-helpers |
Malicious release: Malicious code in ens-namehash-utils (npm) GHSA-qfrg-2m38-35gp, MAL-2026-15980 | Malicious | Not scored | 05 Sep, 2026 | npm ens-namehash-utils |
Malicious release: Malicious code in ulid-intel (npm) GHSA-h48j-674x-299v, MAL-2026-16004 | Malicious | Not scored | 04 Sep, 2026 | npm ulid-intel |
Malicious release: Malicious code in @crysnovax/baileys-fixed (npm) GHSA-262v-p7h8-9574, MAL-2026-15944 | Malicious | Not scored | 04 Sep, 2026 | npm @crysnovax/baileys-fixed |
Malicious release: Malicious code in @crysnovax/baileys-stable (npm) GHSA-p579-542j-6v98, MAL-2026-15945 | Malicious | Not scored | 04 Sep, 2026 | npm @crysnovax/baileys-stable |