Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @liuliang520500/sinataoke_cn (npm) GHSA-jjx2-vpx2-qp32, MAL-2026-15960 | Malicious | Not scored | 06 Sep, 2026 | npm @liuliang520500/sinataoke_cn |
Malicious release: Malicious code in @liuliang520500/pdd-sdk (npm) GHSA-g9hc-xr9f-27g4, MAL-2026-15958 | Malicious | Not scored | 06 Sep, 2026 | npm @liuliang520500/pdd-sdk |
Malicious release: Malicious code in @liuliang520500/jd-sdk (npm) GHSA-j849-992g-rggr, MAL-2026-15957 | Malicious | Not scored | 06 Sep, 2026 | npm @liuliang520500/jd-sdk |
Malicious release: Malicious code in @liuliang520500/pdd-sdk-new (npm) GHSA-jp84-gqp2-j9qq, MAL-2026-15959 | Malicious | Not scored | 06 Sep, 2026 | npm @liuliang520500/pdd-sdk-new |
Malicious release: Malicious code in @liuliang520500/taobao-topclient (npm) GHSA-75r6-9fpm-rf6j, MAL-2026-15962 | Malicious | Not scored | 06 Sep, 2026 | npm @liuliang520500/taobao-topclient |
Malicious release: Malicious code in @pilllesss/yorn (npm) GHSA-rghh-4gfg-jvqc, MAL-2026-15963 | Malicious | Not scored | 06 Sep, 2026 | npm @pilllesss/yorn |
Malicious release: Malicious code in dcftunnel (npm) GHSA-4c2f-x64v-297x, MAL-2026-15975 | Malicious | Not scored | 06 Sep, 2026 | npm dcftunnel |
Malicious release: Malicious code in 1cattunnel (npm) GHSA-r35j-cv2x-mm7h, MAL-2026-15943 | Malicious | Not scored | 06 Sep, 2026 | npm 1cattunnel |
Malicious release: Malicious code in multicore-kit (npm) GHSA-q588-cfvg-8346, MAL-2026-15995 | Malicious | Not scored | 06 Sep, 2026 | npm multicore-kit |
Malicious release: Malicious code in date-fns-formatter (npm) GHSA-h258-m2gc-2p4q, MAL-2026-15974 | Malicious | Not scored | 06 Sep, 2026 | npm date-fns-formatter |
Malicious release: Malicious code in array-frames (npm) GHSA-24hx-4mc8-g9q7, MAL-2026-15969 | Malicious | Not scored | 06 Sep, 2026 | npm array-frames |
Malicious release: Malicious code in node-helper (npm) GHSA-2ggc-wmq2-3whp, MAL-2026-15997 | Malicious | Not scored | 06 Sep, 2026 | npm node-helper |
Malicious release: Malicious code in jwt-logger (npm) GHSA-rpqx-cp2g-55w5, MAL-2026-15991 | Malicious | Not scored | 05 Sep, 2026 | npm jwt-logger |
Malicious release: Malicious code in array-scala (npm) GHSA-rx3f-9hxc-773g, MAL-2026-15970 | Malicious | Not scored | 05 Sep, 2026 | npm array-scala |
Malicious release: Malicious code in @domyjs/i18n (npm) GHSA-22jr-v88r-5cj6, MAL-2026-15951 | Malicious | Not scored | 05 Sep, 2026 | npm @domyjs/i18n |
Malicious release: Malicious code in @domyjs/reactive (npm) GHSA-3ggc-3pw2-c9v9, MAL-2026-15954 | Malicious | Not scored | 05 Sep, 2026 | npm @domyjs/reactive |
Malicious release: Malicious code in @domyjs/mask (npm) GHSA-93j2-q7r7-7qhh, MAL-2026-15953 | Malicious | Not scored | 05 Sep, 2026 | npm @domyjs/mask |
Malicious release: Malicious code in @domyjs/throttle (npm) GHSA-fr62-p59g-hr9f, MAL-2026-15956 | Malicious | Not scored | 05 Sep, 2026 | npm @domyjs/throttle |
Malicious release: Malicious code in @domyjs/router (npm) GHSA-j7wp-3648-mh57, MAL-2026-15955 | Malicious | Not scored | 05 Sep, 2026 | npm @domyjs/router |
Malicious release: Malicious code in @domyjs/intersect (npm) GHSA-v8xv-9q46-8h3x, MAL-2026-15952 | Malicious | Not scored | 05 Sep, 2026 | npm @domyjs/intersect |
Malicious release: Malicious code in muswish (npm) GHSA-295f-26rf-f8f4, MAL-2026-15996 | Malicious | Not scored | 05 Sep, 2026 | npm muswish |
Malicious release: Malicious code in enqueu (npm) GHSA-352p-f6j8-qxxh, MAL-2026-15979 | Malicious | Not scored | 05 Sep, 2026 | npm enqueu |
Malicious release: Malicious code in infinity-grid (npm) GHSA-39fr-j2vr-r24p, MAL-2026-15987 | Malicious | Not scored | 05 Sep, 2026 | npm infinity-grid |
Malicious release: Malicious code in @domyjs/collapse (npm) GHSA-39q9-7vqg-3m6w, MAL-2026-15948 | Malicious | Not scored | 05 Sep, 2026 | npm @domyjs/collapse |
Malicious release: Malicious code in @yoannchb/tokenize (npm) GHSA-4qx6-wqw8-r2qr, MAL-2026-15966 | Malicious | Not scored | 05 Sep, 2026 | npm @yoannchb/tokenize |
Malicious release: Malicious code in fast-html-dom-parser (npm) GHSA-4wcx-wjq9-25cr, MAL-2026-15983 | Malicious | Not scored | 05 Sep, 2026 | npm fast-html-dom-parser |
Malicious release: Malicious code in jimg (npm) GHSA-53xc-j4p4-52q3, MAL-2026-15989 | Malicious | Not scored | 05 Sep, 2026 | npm jimg |
Malicious release: Malicious code in onetime-rnd (npm) GHSA-55h6-2qxg-jvqv, MAL-2026-15998 | Malicious | Not scored | 05 Sep, 2026 | npm onetime-rnd |
Malicious release: Malicious code in tempjs-template (npm) GHSA-5x3v-r6fj-vf2p, MAL-2026-16002 | Malicious | Not scored | 05 Sep, 2026 | npm tempjs-template |
Malicious release: Malicious code in memov (npm) GHSA-6q78-8863-ww8m, MAL-2026-15994 | Malicious | Not scored | 05 Sep, 2026 | npm memov |
Malicious release: Malicious code in btn-particles (npm) GHSA-6w56-62pq-vhph, MAL-2026-15971 | Malicious | Not scored | 05 Sep, 2026 | npm btn-particles |
Malicious release: Malicious code in discord-phub (npm) GHSA-7693-gh38-7wmj, MAL-2026-15976 | Malicious | Not scored | 05 Sep, 2026 | npm discord-phub |
Malicious release: Malicious code in @yoannchb/cattract (npm) GHSA-76pv-jq47-p439, MAL-2026-15964 | Malicious | Not scored | 05 Sep, 2026 | npm @yoannchb/cattract |
Malicious release: Malicious code in @yoannchb/wtf-json (npm) GHSA-82x7-44x9-7295, MAL-2026-15967 | Malicious | Not scored | 05 Sep, 2026 | npm @yoannchb/wtf-json |
Malicious release: Malicious code in @yoannchb/langy (npm) GHSA-92qv-fgvj-ccf4, MAL-2026-15965 | Malicious | Not scored | 05 Sep, 2026 | npm @yoannchb/langy |
Malicious release: Malicious code in puppeteer-obscura (npm) GHSA-cxwq-q9c5-424v, MAL-2026-16001 | Malicious | Not scored | 05 Sep, 2026 | npm puppeteer-obscura |
Malicious release: Malicious code in @domyjs/domy (npm) GHSA-f553-q356-4cmc, MAL-2026-15950 | Malicious | Not scored | 05 Sep, 2026 | npm @domyjs/domy |
Malicious release: Malicious code in anime-vostfr (npm) GHSA-f6c5-36x2-p79p, MAL-2026-15968 | Malicious | Not scored | 05 Sep, 2026 | npm anime-vostfr |
Malicious release: Malicious code in card3d (npm) GHSA-gggp-h9vj-pw3p, MAL-2026-15972 | Malicious | Not scored | 05 Sep, 2026 | npm card3d |
Malicious release: Malicious code in iframe-to-video (npm) GHSA-hh9g-3hm5-vcch, MAL-2026-15986 | Malicious | Not scored | 05 Sep, 2026 | npm iframe-to-video |
Malicious release: Malicious code in parallaxy-img (npm) GHSA-mhp3-rpvj-vrpx, MAL-2026-15999 | Malicious | Not scored | 05 Sep, 2026 | npm parallaxy-img |
Malicious release: Malicious code in google-img-scrap (npm) GHSA-mwh7-p59x-2f4g, MAL-2026-15985 | Malicious | Not scored | 05 Sep, 2026 | npm google-img-scrap |
Malicious release: Malicious code in lazy-attr (npm) GHSA-pm6r-2g8f-89qh, MAL-2026-15992 | Malicious | Not scored | 05 Sep, 2026 | npm lazy-attr |
Malicious release: Malicious code in pipipe (npm) GHSA-pmm9-p62g-hvp5, MAL-2026-16000 | Malicious | Not scored | 05 Sep, 2026 | npm pipipe |
Malicious release: Malicious code in @domyjs/debounce (npm) GHSA-pp6m-2fxr-qjhf, MAL-2026-15949 | Malicious | Not scored | 05 Sep, 2026 | npm @domyjs/debounce |
Malicious release: Malicious code in inner-svg-ts (npm) GHSA-rx43-xhjx-3xq6, MAL-2026-15988 | Malicious | Not scored | 05 Sep, 2026 | npm inner-svg-ts |
Malicious release: Malicious code in linkpreview-simple (npm) GHSA-w9q9-gr86-rr73, MAL-2026-15993 | Malicious | Not scored | 05 Sep, 2026 | npm linkpreview-simple |
Malicious release: Malicious code in chrome-speech-recognition (npm) GHSA-wvfg-ghw3-64q7, MAL-2026-15973 | Malicious | Not scored | 05 Sep, 2026 | npm chrome-speech-recognition |
Malicious release: Malicious code in @domyjs/anchor (npm) GHSA-x2rm-5qrx-62mg, MAL-2026-15947 | Malicious | Not scored | 05 Sep, 2026 | npm @domyjs/anchor |
Malicious release: Malicious code in discord-tqr (npm) GHSA-xp88-72h6-mw9r, MAL-2026-15977 | Malicious | Not scored | 05 Sep, 2026 | npm discord-tqr |