Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @viertechjs/wb (npm) GHSA-3f73-cx58-g87j, MAL-2026-15832 | Malicious | Not scored | 01 Sep, 2026 | npm @viertechjs/wb |
Malicious release: Malicious code in @viertechjs/api (npm) GHSA-62qr-2m9g-fm38, MAL-2026-15830 | Malicious | Not scored | 01 Sep, 2026 | npm @viertechjs/api |
Malicious release: Malicious code in @viertechjs/baileys (npm) GHSA-wcqj-8x6x-4pxr, MAL-2026-15831 | Malicious | Not scored | 01 Sep, 2026 | npm @viertechjs/baileys |
Malicious release: Malicious code in order-package-saas (npm) MAL-2026-15816 | Malicious | Not scored | 01 Sep, 2026 | npm order-package-saas |
Malicious release: Malicious code in bt2-api-gateway-node-js (npm) MAL-2026-15813 | Malicious | Not scored | 01 Sep, 2026 | npm bt2-api-gateway-node-js |
Malicious release: Malicious code in react-mongoose (npm) GHSA-wvgj-m2p9-jf3c, MAL-2026-15845 | Malicious | Not scored | 01 Sep, 2026 | npm react-mongoose |
Malicious release: Malicious code in @yane88/ripgrep-win (npm) GHSA-274r-44qv-6xwc, MAL-2026-15660 | Malicious | Not scored | 01 Sep, 2026 | npm @yane88/ripgrep-win |
Malicious release: Malicious code in @yane88/workbuddy-01 (npm) GHSA-2w3r-v82c-4rvg, MAL-2026-15665 | Malicious | Not scored | 01 Sep, 2026 | npm @yane88/workbuddy-01 |
Malicious release: Malicious code in @yane88/listary-01 (npm) GHSA-46j3-wfp2-66m2, MAL-2026-15658 | Malicious | Not scored | 01 Sep, 2026 | npm @yane88/listary-01 |
Malicious release: Malicious code in @yane88/workbuddy-02 (npm) GHSA-677c-x838-7qj5, MAL-2026-15666 | Malicious | Not scored | 01 Sep, 2026 | npm @yane88/workbuddy-02 |
Malicious release: Malicious code in @yane88/listary (npm) GHSA-6qjf-3c98-5gr7, MAL-2026-15657 | Malicious | Not scored | 01 Sep, 2026 | npm @yane88/listary |
Malicious release: Malicious code in @yane88/hexhub-client (npm) GHSA-75h3-gh74-47p2, MAL-2026-15649 | Malicious | Not scored | 01 Sep, 2026 | npm @yane88/hexhub-client |
Malicious release: Malicious code in @yane88/term-reqable-01 (npm) GHSA-m76v-4h4c-w693, MAL-2026-15662 | Malicious | Not scored | 01 Sep, 2026 | npm @yane88/term-reqable-01 |
Malicious release: Malicious code in @yane88/workbuddy-03 (npm) GHSA-qpjf-29xc-g688, MAL-2026-15667 | Malicious | Not scored | 01 Sep, 2026 | npm @yane88/workbuddy-03 |
Malicious release: Malicious code in @yane88/listary-02 (npm) GHSA-rg2v-g672-8773, MAL-2026-15659 | Malicious | Not scored | 01 Sep, 2026 | npm @yane88/listary-02 |
Malicious release: Malicious code in @yane88/workbuddy (npm) GHSA-v22h-4j6c-58cm, MAL-2026-15664 | Malicious | Not scored | 01 Sep, 2026 | npm @yane88/workbuddy |
Malicious release: Malicious code in @yane88/term-reqable-02 (npm) GHSA-vq2v-vw6h-9g9f, MAL-2026-15663 | Malicious | Not scored | 01 Sep, 2026 | npm @yane88/term-reqable-02 |
Malicious release: Malicious code in @yane88/term-reqable (npm) GHSA-xx48-j637-66x2, MAL-2026-15661 | Malicious | Not scored | 01 Sep, 2026 | npm @yane88/term-reqable |
Malicious release: Malicious code in @yane88/idea-2026.2-01 (npm) GHSA-2fmg-86jf-r56c, MAL-2026-15651 | Malicious | Not scored | 01 Sep, 2026 | npm @yane88/idea-2026.2-01 |
Malicious release: Malicious code in @yane88/idea-2026.2 (npm) GHSA-5qw7-3hqh-q33m, MAL-2026-15650 | Malicious | Not scored | 01 Sep, 2026 | npm @yane88/idea-2026.2 |
Malicious release: Malicious code in @yane88/idea-2026.2-02 (npm) GHSA-fgwh-qm8c-9mv8, MAL-2026-15652 | Malicious | Not scored | 01 Sep, 2026 | npm @yane88/idea-2026.2-02 |
Malicious release: Malicious code in @yane88/idea-2026.2-03 (npm) GHSA-fw5q-2vvv-w862, MAL-2026-15653 | Malicious | Not scored | 01 Sep, 2026 | npm @yane88/idea-2026.2-03 |
Malicious release: Malicious code in @yane88/idea-2026.2-06 (npm) GHSA-j62v-qq84-cr9v, MAL-2026-15656 | Malicious | Not scored | 01 Sep, 2026 | npm @yane88/idea-2026.2-06 |
Malicious release: Malicious code in @yane88/idea-2026.2-05 (npm) GHSA-mv54-8cx5-2fc9, MAL-2026-15655 | Malicious | Not scored | 01 Sep, 2026 | npm @yane88/idea-2026.2-05 |
Malicious release: Malicious code in @yane88/idea-2026.2-04 (npm) GHSA-xpjx-pwwq-qg46, MAL-2026-15654 | Malicious | Not scored | 01 Sep, 2026 | npm @yane88/idea-2026.2-04 |
Malicious release: Malicious code in matrix-by-lmx (npm) GHSA-jhgv-vh9h-q3r9, MAL-2026-15670 | Malicious | Not scored | 01 Sep, 2026 | npm matrix-by-lmx |
Malicious release: Malicious code in randomunblockedwebsite (npm) GHSA-5x4x-f7h5-6p47, MAL-2026-15672 | Malicious | Not scored | 01 Sep, 2026 | npm randomunblockedwebsite |
Malicious release: Malicious code in @fdr-mar/promos-types (npm) GHSA-gj3w-q938-w6m6, MAL-2026-15648 | Malicious | Not scored | 01 Sep, 2026 | npm @fdr-mar/promos-types |
Malicious release: Malicious code in kendo-angular-window (npm) GHSA-jjx4-p3qc-rhrq, MAL-2026-15669 | Malicious | Not scored | 01 Sep, 2026 | npm kendo-angular-window |
Malicious release: Malicious code in core_main (npm) GHSA-rxjr-qr5x-q4q7, MAL-2026-15668 | Malicious | Not scored | 01 Sep, 2026 | npm core_main |
Malicious release: Malicious code in quartz-core (npm) GHSA-w63g-6crc-rq2w, MAL-2026-15671 | Malicious | Not scored | 01 Sep, 2026 | npm quartz-core |
Malicious release: Malicious code in @mrlegendbot/baileys (npm) MAL-2026-15819 | Malicious | Not scored | 01 Sep, 2026 | npm @mrlegendbot/baileys |
Malicious release: Malicious code in @systemzero/baileys (npm) MAL-2026-15820 | Malicious | Not scored | 01 Sep, 2026 | npm @systemzero/baileys |
Malicious release: Malicious code in @testrelic/appium-analytics (npm) GHSA-6cpr-jwvc-jhg7, MAL-2026-15647 | Malicious | Not scored | 31 Aug, 2026 | npm @testrelic/appium-analytics |
Malicious release: Malicious code in claude-channel-telegram (npm) MAL-2026-15624 | Malicious | Not scored | 31 Aug, 2026 | npm claude-channel-telegram |
Malicious release: Malicious code in nextjsupdater (npm) MAL-2026-15631 | Malicious | Not scored | 31 Aug, 2026 | npm nextjsupdater |
Malicious release: Malicious code in mfaatest (npm) MAL-2026-15629 | Malicious | Not scored | 31 Aug, 2026 | npm mfaatest |
Malicious release: Malicious code in hyperliquid-composer (npm) GHSA-5v7v-27c5-fr8q, MAL-2026-15627 | Malicious | Not scored | 31 Aug, 2026 | npm hyperliquid-composer |
Malicious release: Malicious code in test__123q2 (npm) MAL-2026-15638 | Malicious | Not scored | 31 Aug, 2026 | npm test__123q2 |
Malicious release: Malicious code in spc-grafeno-login (npm) MAL-2026-15633 | Malicious | Not scored | 31 Aug, 2026 | npm spc-grafeno-login |
Malicious release: Malicious code in node-request-utils (npm) MAL-2026-15632 | Malicious | Not scored | 31 Aug, 2026 | npm node-request-utils |
Malicious release: Malicious code in tailwind-minanimated (npm) MAL-2026-15634 | Malicious | Not scored | 31 Aug, 2026 | npm tailwind-minanimated |
Malicious release: Malicious code in mfafix (npm) MAL-2026-15630 | Malicious | Not scored | 31 Aug, 2026 | npm mfafix |
Malicious release: Malicious code in tailwind-modernanimation (npm) MAL-2026-15635 | Malicious | Not scored | 31 Aug, 2026 | npm tailwind-modernanimation |
Malicious release: Malicious code in mfa.io (npm) MAL-2026-15628 | Malicious | Not scored | 31 Aug, 2026 | npm mfa.io |
Malicious release: Malicious code in tailwindcss-forms-style (npm) MAL-2026-15636 | Malicious | Not scored | 31 Aug, 2026 | npm tailwindcss-forms-style |
Malicious release: Malicious code in test__123q1 (npm) MAL-2026-15637 | Malicious | Not scored | 31 Aug, 2026 | npm test__123q1 |
Malicious release: Malicious code in @baipiaodajun/npmsshx (npm) GHSA-g966-5c49-vx6m, MAL-2026-15641 | Malicious | Not scored | 31 Aug, 2026 | npm @baipiaodajun/npmsshx |
Malicious release: Malicious code in @baipiaodajun/reverseproxy-fm (npm) GHSA-gfhr-qx4h-34fv, MAL-2026-15643 | Malicious | Not scored | 31 Aug, 2026 | npm @baipiaodajun/reverseproxy-fm |
Malicious release: Malicious code in @baipiaodajun/mcbots (npm) GHSA-j3fw-7753-9v62, MAL-2026-15640 | Malicious | Not scored | 31 Aug, 2026 | npm @baipiaodajun/mcbots |