Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @baipiaodajun/podman_env (npm) GHSA-p684-v3gf-5wj2, MAL-2026-15642 | Malicious | Not scored | 31 Aug, 2026 | npm @baipiaodajun/podman_env |
Malicious release: Malicious code in kisama-js (npm) GHSA-vqwx-8v7g-55j3, MAL-2026-15645 | Malicious | Not scored | 31 Aug, 2026 | npm kisama-js |
Malicious release: Malicious code in @baipiaodajun/mcbot (npm) GHSA-wfgg-7wr2-9fwc, MAL-2026-15639 | Malicious | Not scored | 31 Aug, 2026 | npm @baipiaodajun/mcbot |
Malicious release: Malicious code in @pipi596888/ccursor (npm) GHSA-46qc-q49r-c3q4, MAL-2026-15644 | Malicious | Not scored | 31 Aug, 2026 | npm @pipi596888/ccursor |
Malicious release: Malicious code in pig-ui-first (npm) GHSA-cj5g-xq95-52x6, MAL-2026-15646 | Malicious | Not scored | 31 Aug, 2026 | npm pig-ui-first |
Malicious release: Malicious code in selfsigned-certificate (npm) GHSA-3whj-3fjw-x5w8, MAL-2026-15623 | Malicious | Not scored | 31 Aug, 2026 | npm selfsigned-certificate |
Malicious release: Malicious code in spc_login (npm) MAL-2026-15622 | Malicious | Not scored | 31 Aug, 2026 | npm spc_login |
Malicious release: Malicious code in gas-monitor (npm) MAL-2026-15621 | Malicious | Not scored | 31 Aug, 2026 | npm gas-monitor |
Malicious release: Malicious code in evilpostinstall (npm) MAL-2026-15625 | Malicious | Not scored | 31 Aug, 2026 | npm evilpostinstall |
Malicious release: Malicious code in eslint-prettier-js (npm) GHSA-fp43-fcrg-6w93, MAL-2026-15601 | Malicious | Not scored | 31 Aug, 2026 | npm eslint-prettier-js |
Malicious release: Malicious code in redis-cookie-server (npm) GHSA-jgx3-v64x-v2w5, MAL-2026-15602 | Malicious | Not scored | 31 Aug, 2026 | npm redis-cookie-server |
Malicious release: Malicious code in fuels-versions (npm) GHSA-7478-v9hq-9835, MAL-2026-15673 | Malicious | Not scored | 31 Aug, 2026 | npm fuels-versions |
Malicious release: Malicious code in fuels-forc (npm) GHSA-h4w6-844f-2fxw, MAL-2026-15626 | Malicious | Not scored | 31 Aug, 2026 | npm fuels-forc |
Malicious release: Malicious code in @lucideproxy/svg (npm) GHSA-6j97-93gg-j7r8, MAL-2026-15600 | Malicious | Not scored | 30 Aug, 2026 | npm @lucideproxy/svg |
Malicious release: Malicious code in cloudfcrxz (npm) GHSA-p375-pmrj-262v, MAL-2026-15581 | Malicious | Not scored | 30 Aug, 2026 | npm cloudfcrxz |
Malicious release: Malicious code in @fidzzhost/baileys (npm) GHSA-vc2v-c8j2-qxg9, MAL-2026-15579 | Malicious | Not scored | 30 Aug, 2026 | npm @fidzzhost/baileys |
Malicious release: Malicious code in brat-codex (npm) GHSA-63wg-22hx-h5q4, MAL-2026-15580 | Malicious | Not scored | 30 Aug, 2026 | npm brat-codex |
Malicious release: Malicious code in h3client (npm) GHSA-89vf-5xgx-fhq7, MAL-2026-15585 | Malicious | Not scored | 30 Aug, 2026 | npm h3client |
Malicious release: Malicious code in h2-codex (npm) GHSA-8h78-gfj3-qrp2, MAL-2026-15583 | Malicious | Not scored | 30 Aug, 2026 | npm h2-codex |
Malicious release: Malicious code in real-browser-plus (npm) GHSA-ffvr-gx62-j45m, MAL-2026-15587 | Malicious | Not scored | 30 Aug, 2026 | npm real-browser-plus |
Malicious release: Malicious code in cloufcrxz (npm) GHSA-gxpc-36pf-vcrw, MAL-2026-15582 | Malicious | Not scored | 30 Aug, 2026 | npm cloufcrxz |
Malicious release: Malicious code in h3-codex (npm) GHSA-w6m7-6jhr-mfjc, MAL-2026-15584 | Malicious | Not scored | 30 Aug, 2026 | npm h3-codex |
Malicious release: Malicious code in originaldevelopmentstelemetry (npm) GHSA-m8hq-jrvf-g8xm, MAL-2026-15586 | Malicious | Not scored | 30 Aug, 2026 | npm originaldevelopmentstelemetry |
Malicious release: Malicious code in verify-contract-ethers (npm) GHSA-cvw4-2h4c-hm3f, MAL-2026-15598 | Malicious | Not scored | 30 Aug, 2026 | npm verify-contract-ethers |
Malicious release: Malicious code in fuels-typegen (npm) GHSA-c4wf-579x-f397, MAL-2026-15593 | Malicious | Not scored | 30 Aug, 2026 | npm fuels-typegen |
Malicious release: Malicious code in cre-setup (npm) GHSA-4894-fvv8-2p2j, MAL-2026-15591 | Malicious | Not scored | 30 Aug, 2026 | npm cre-setup |
Malicious release: Malicious code in verify-contract-viem (npm) GHSA-rhm2-cc4p-vfxq, MAL-2026-15599 | Malicious | Not scored | 30 Aug, 2026 | npm verify-contract-viem |
Malicious release: Malicious code in generate-schema-viem (npm) GHSA-72cf-ghpg-mj8h, MAL-2026-15595 | Malicious | Not scored | 30 Aug, 2026 | npm generate-schema-viem |
Malicious release: Malicious code in fuels-core (npm) GHSA-82rr-x2r8-gjhm, MAL-2026-15592 | Malicious | Not scored | 30 Aug, 2026 | npm fuels-core |
Malicious release: Malicious code in generate-schema-ethers (npm) GHSA-3c7v-grhq-3m56, MAL-2026-15594 | Malicious | Not scored | 30 Aug, 2026 | npm generate-schema-ethers |
Malicious release: Malicious code in gclassroom (npm) GHSA-6c25-pq89-3m9w, MAL-2026-15574 | Malicious | Not scored | 30 Aug, 2026 | npm gclassroom |
Malicious release: Malicious code in quesoeducation (npm) GHSA-mm9m-8q5p-fxwx, MAL-2026-15576 | Malicious | Not scored | 30 Aug, 2026 | npm quesoeducation |
Malicious release: Malicious code in opiumbest (npm) GHSA-pwqr-5gcr-9rc4, MAL-2026-15575 | Malicious | Not scored | 30 Aug, 2026 | npm opiumbest |
Malicious release: Malicious code in com.db.autobahn.notification-center-electron (npm) MAL-2026-15590 | Malicious | Not scored | 30 Aug, 2026 | npm com.db.autobahn.notification-center-electron |
Malicious release: Malicious code in autobahn-electron-probe (npm) MAL-2026-15589 | Malicious | Not scored | 30 Aug, 2026 | npm autobahn-electron-probe |
Malicious release: Malicious code in grafeno-webhook (npm) MAL-2026-15573 | Malicious | Not scored | 29 Aug, 2026 | npm grafeno-webhook |
Malicious release: Malicious code in grafeno-billing (npm) MAL-2026-15571 | Malicious | Not scored | 29 Aug, 2026 | npm grafeno-billing |
Malicious release: Malicious code in grafeno-payments (npm) MAL-2026-15572 | Malicious | Not scored | 29 Aug, 2026 | npm grafeno-payments |
Malicious release: Malicious code in node-net-pool (npm) GHSA-vm9g-mp9v-6q5p, MAL-2026-15570 | Malicious | Not scored | 29 Aug, 2026 | npm node-net-pool |
Malicious release: Malicious code in npx-oob-package (npm) GHSA-95gx-59fv-gfg6, MAL-2026-15597 | Malicious | Not scored | 29 Aug, 2026 | npm npx-oob-package |
Malicious release: Malicious code in manager-thedate (npm) GHSA-3rww-v3p8-fw9p, MAL-2026-15568 | Malicious | Not scored | 29 Aug, 2026 | npm manager-thedate |
Malicious release: Malicious code in htps-provider (npm) GHSA-gcqr-3vw3-7fqm, MAL-2026-15567 | Malicious | Not scored | 29 Aug, 2026 | npm htps-provider |
Malicious release: Malicious code in nuvyra-marketplace-sdk (npm) GHSA-rq2p-956p-32h6, MAL-2026-15569 | Malicious | Not scored | 29 Aug, 2026 | npm nuvyra-marketplace-sdk |
Malicious release: Malicious code in @testrelic/playwright-analytics (npm) MAL-2026-15565 | Malicious | Not scored | 29 Aug, 2026 | npm @testrelic/playwright-analytics |
Malicious release: Malicious code in ckeditor5-ckbox (npm) MAL-2026-15549 | Malicious | Not scored | 29 Aug, 2026 | npm ckeditor5-ckbox |
Malicious release: Malicious code in common-array-token (npm) MAL-2026-15550 | Malicious | Not scored | 29 Aug, 2026 | npm common-array-token |
Malicious release: Malicious code in supersignaturenature (npm) GHSA-x67q-xvcf-f2rw, MAL-2026-15560 | Malicious | Not scored | 29 Aug, 2026 | npm supersignaturenature |
Malicious release: Malicious code in secretkey2fa (npm) MAL-2026-15559 | Malicious | Not scored | 29 Aug, 2026 | npm secretkey2fa |
Malicious release: Malicious code in js-tokens-array (npm) MAL-2026-15556 | Malicious | Not scored | 29 Aug, 2026 | npm js-tokens-array |
Malicious release: Malicious code in date-fns-sync (npm) MAL-2026-15551 | Malicious | Not scored | 29 Aug, 2026 | npm date-fns-sync |