Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in eth-pino (npm) MAL-2026-15554 | Malicious | Not scored | 29 Aug, 2026 | npm eth-pino |
Malicious release: Malicious code in techportal (npm) MAL-2026-15561 | Malicious | Not scored | 29 Aug, 2026 | npm techportal |
Malicious release: Malicious code in vs-modules (npm) GHSA-8hpw-v4hq-pg99, MAL-2026-15564 | Malicious | Not scored | 29 Aug, 2026 | npm vs-modules |
Malicious release: Malicious code in js-array-tokens (npm) MAL-2026-15555 | Malicious | Not scored | 29 Aug, 2026 | npm js-array-tokens |
Malicious release: Malicious code in es6-migrator (npm) MAL-2026-15553 | Malicious | Not scored | 29 Aug, 2026 | npm es6-migrator |
Malicious release: Malicious code in vitest-chalk-pro (npm) MAL-2026-15563 | Malicious | Not scored | 29 Aug, 2026 | npm vitest-chalk-pro |
Malicious release: Malicious code in mfacord (npm) MAL-2026-15557 | Malicious | Not scored | 29 Aug, 2026 | npm mfacord |
Malicious release: Malicious code in discord-mfa (npm) MAL-2026-15552 | Malicious | Not scored | 29 Aug, 2026 | npm discord-mfa |
Malicious release: Malicious code in test-in-one (npm) MAL-2026-15562 | Malicious | Not scored | 29 Aug, 2026 | npm test-in-one |
Malicious release: Malicious code in mfakit (npm) MAL-2026-15558 | Malicious | Not scored | 29 Aug, 2026 | npm mfakit |
Malicious release: Malicious code in 2fasecretkey (npm) MAL-2026-15548 | Malicious | Not scored | 29 Aug, 2026 | npm 2fasecretkey |
Malicious release: Malicious code in 2fa-secretkey (npm) MAL-2026-15547 | Malicious | Not scored | 29 Aug, 2026 | npm 2fa-secretkey |
Malicious release: Malicious code in sentrykit (npm) GHSA-qq6h-882h-g88f, MAL-2026-15544 | Malicious | Not scored | 28 Aug, 2026 | npm sentrykit |
Malicious release: Malicious code in analytics-web-client (npm) GHSA-5g5q-647h-8vv8, MAL-2026-15526 | Malicious | Not scored | 28 Aug, 2026 | npm analytics-web-client |
Malicious release: Malicious code in confluence-create-content (npm) GHSA-j52x-8r24-hw6x, MAL-2026-15530 | Malicious | Not scored | 28 Aug, 2026 | npm confluence-create-content |
Malicious release: Malicious code in confluence-editor (npm) GHSA-cwcw-cv28-7jfm, MAL-2026-15531 | Malicious | Not scored | 28 Aug, 2026 | npm confluence-editor |
Malicious release: Malicious code in confluence-rest (npm) GHSA-g338-wxvv-vg5q, MAL-2026-15532 | Malicious | Not scored | 28 Aug, 2026 | npm confluence-rest |
Malicious release: Malicious code in prm-bundles (npm) GHSA-g57v-rj8p-j52h, MAL-2026-15543 | Malicious | Not scored | 28 Aug, 2026 | npm prm-bundles |
Malicious release: Malicious code in ir-annuities-client-authentication-module (npm) GHSA-4hpj-q7v8-mjf7, MAL-2026-15536 | Malicious | Not scored | 28 Aug, 2026 | npm ir-annuities-client-authentication-module |
Malicious release: Malicious code in paper-password-input (npm) GHSA-p8fv-qch5-j7m9, MAL-2026-15542 | Malicious | Not scored | 28 Aug, 2026 | npm paper-password-input |
Malicious release: Malicious code in aura-instrumentation (npm) GHSA-p4vf-c829-4m2m, MAL-2026-15527 | Malicious | Not scored | 28 Aug, 2026 | npm aura-instrumentation |
Malicious release: Malicious code in loading-performance-instrumentation (npm) GHSA-hx7g-4f5f-7hq9, MAL-2026-15539 | Malicious | Not scored | 28 Aug, 2026 | npm loading-performance-instrumentation |
Malicious release: Malicious code in axis-datagrid (npm) GHSA-7f64-56gx-r4cm, GHSA-c6gq-r9w4-xg7j, MAL-2026-15528 | Malicious | Not scored | 28 Aug, 2026 | npm axis-datagrid |
Malicious release: Malicious code in ux-metrics-client-interaction-subscriber (npm) GHSA-5v45-27j3-r52f, GHSA-fgwj-qvjx-g92h, MAL-2026-15545 | Malicious | Not scored | 28 Aug, 2026 | npm ux-metrics-client-interaction-subscriber |
Malicious release: Malicious code in bui-react-10themes (npm) GHSA-mj9w-ffv9-m8rf, MAL-2026-15529 | Malicious | Not scored | 28 Aug, 2026 | npm bui-react-10themes |
Malicious release: Malicious code in mkt-ui-library (npm) GHSA-w4pq-8q38-v8jr, MAL-2026-15540 | Malicious | Not scored | 28 Aug, 2026 | npm mkt-ui-library |
Malicious release: Malicious code in firestore-lite (npm) GHSA-q556-gm72-jcp7, MAL-2026-15534 | Malicious | Not scored | 28 Aug, 2026 | npm firestore-lite |
Malicious release: Malicious code in librastandardlib (npm) GHSA-p943-f2p4-7xfx, MAL-2026-15538 | Malicious | Not scored | 28 Aug, 2026 | npm librastandardlib |
Malicious release: Malicious code in vui-gateway (npm) GHSA-69cq-ggff-w363, MAL-2026-15546 | Malicious | Not scored | 28 Aug, 2026 | npm vui-gateway |
Malicious release: Malicious code in jira-projects-backbone (npm) GHSA-8569-7m7w-7gf9, MAL-2026-15537 | Malicious | Not scored | 28 Aug, 2026 | npm jira-projects-backbone |
Malicious release: Malicious code in data-value (npm) GHSA-rq5q-gpqf-p4vp, MAL-2026-15533 | Malicious | Not scored | 28 Aug, 2026 | npm data-value |
Malicious release: Malicious code in oit-lib-oracle-util (npm) GHSA-rqm2-xgr5-297v, MAL-2026-15541 | Malicious | Not scored | 28 Aug, 2026 | npm oit-lib-oracle-util |
Malicious release: Malicious code in gridster-coords (npm) GHSA-fq5c-v7fm-mv99, MAL-2026-15535 | Malicious | Not scored | 28 Aug, 2026 | npm gridster-coords |
Malicious release: Malicious code in amplitude-react-native (npm) GHSA-wxgr-5x7q-cc86, MAL-2026-15525 | Malicious | Not scored | 28 Aug, 2026 | npm amplitude-react-native |
Malicious release: Malicious code in qbo-ui-services (npm) GHSA-j5hx-563p-m829, MAL-2026-15519 | Malicious | Not scored | 28 Aug, 2026 | npm qbo-ui-services |
Malicious release: Malicious code in framework-zero (npm) GHSA-c583-7r3r-x2p8, MAL-2026-15500 | Malicious | Not scored | 28 Aug, 2026 | npm framework-zero |
Malicious release: Malicious code in ring-device-settings-library (npm) GHSA-c9hf-9c62-jcfq, GHSA-f4f7-3wwr-hxfx, MAL-2026-15520 | Malicious | Not scored | 28 Aug, 2026 | npm ring-device-settings-library |
Malicious release: Malicious code in katal-logger (npm) GHSA-f2rf-58x5-5f6w, MAL-2026-15513 | Malicious | Not scored | 28 Aug, 2026 | npm katal-logger |
Malicious release: Malicious code in payments-ui-services (npm) GHSA-jhxr-q6vp-9x3m, MAL-2026-15518 | Malicious | Not scored | 28 Aug, 2026 | npm payments-ui-services |
Malicious release: Malicious code in calcite-web (npm) GHSA-fhxc-p24q-34ch, MAL-2026-15499 | Malicious | Not scored | 28 Aug, 2026 | npm calcite-web |
Malicious release: Malicious code in tabbables (npm) GHSA-4g4c-9232-9cwv, MAL-2026-15524 | Malicious | Not scored | 28 Aug, 2026 | npm tabbables |
Malicious release: Malicious code in jsb-adapter (npm) GHSA-69pf-x798-g22x, MAL-2026-15512 | Malicious | Not scored | 28 Aug, 2026 | npm jsb-adapter |
Malicious release: Malicious code in alimama-minisite (npm) GHSA-q5h9-9fg7-xg2g, MAL-2026-15495 | Malicious | Not scored | 28 Aug, 2026 | npm alimama-minisite |
Malicious release: Malicious code in one-intuit-help-system-utils (npm) GHSA-93c7-v93p-97cw, MAL-2026-15517 | Malicious | Not scored | 28 Aug, 2026 | npm one-intuit-help-system-utils |
Malicious release: Malicious code in npm-extension (npm) GHSA-f2fx-3q3p-v293, MAL-2026-15515 | Malicious | Not scored | 28 Aug, 2026 | npm npm-extension |
Malicious release: Malicious code in mintel-taskbar (npm) GHSA-x2qj-v4rx-3phv, MAL-2026-15514 | Malicious | Not scored | 28 Aug, 2026 | npm mintel-taskbar |
Malicious release: Malicious code in amplitude-session-replay (npm) GHSA-jvwx-f8cc-jjj8, MAL-2026-15497 | Malicious | Not scored | 28 Aug, 2026 | npm amplitude-session-replay |
Malicious release: Malicious code in integration-amplitude (npm) GHSA-m5fj-7mm7-mg9p, MAL-2026-15510 | Malicious | Not scored | 28 Aug, 2026 | npm integration-amplitude |
Malicious release: Malicious code in aws-blog (npm) GHSA-q8ww-mqrw-jq9q, MAL-2026-15498 | Malicious | Not scored | 28 Aug, 2026 | npm aws-blog |
Malicious release: Malicious code in intuit-authz (npm) GHSA-vp52-xxhf-m857, MAL-2026-15511 | Malicious | Not scored | 28 Aug, 2026 | npm intuit-authz |