Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @sudobility/testomniac_client (npm) GHSA-g7cj-274j-rxqw, MAL-2026-18129 | Malicious | Not scored | 9 days ago | npm @sudobility/testomniac_client |
Malicious release: Malicious code in @sudobility/indexer_client (npm) GHSA-xfvr-39v2-q24q, MAL-2026-18127 | Malicious | Not scored | 9 days ago | npm @sudobility/indexer_client |
Malicious release: Malicious code in @sudobility/wildduck_client (npm) GHSA-5ff7-5w72-hm63, MAL-2026-18130 | Malicious | Not scored | 9 days ago | npm @sudobility/wildduck_client |
Malicious release: Malicious code in @sudobility/shaperouter_client (npm) GHSA-x7g4-jh5c-33xr, MAL-2026-18128 | Malicious | Not scored | 9 days ago | npm @sudobility/shaperouter_client |
Malicious release: Malicious code in @worrisome/aaaa (npm) GHSA-fxf3-w84v-3v6g, MAL-2026-18125 | Malicious | Not scored | 9 days ago | npm @worrisome/aaaa |
Malicious release: Malicious code in pixel-map-testmetest (npm) MAL-2026-18180 | Malicious | Not scored | 9 days ago | npm pixel-map-testmetest |
Malicious release: Malicious code in test-brotli-testmetest (npm) MAL-2026-18181 | Malicious | Not scored | 9 days ago | npm test-brotli-testmetest |
Malicious release: Malicious code in test-brotli2-testmetest (npm) MAL-2026-18182 | Malicious | Not scored | 9 days ago | npm test-brotli2-testmetest |
Malicious release: Malicious code in log-sink-testmetest (npm) MAL-2026-18179 | Malicious | Not scored | 9 days ago | npm log-sink-testmetest |
Malicious release: Malicious code in data-pipeline-testmetest (npm) MAL-2026-18177 | Malicious | Not scored | 9 days ago | npm data-pipeline-testmetest |
Malicious release: Malicious code in event-emitter-testmetest (npm) MAL-2026-18178 | Malicious | Not scored | 9 days ago | npm event-emitter-testmetest |
Malicious release: Malicious code in peptide-modify (npm) GHSA-h643-5mcg-c726, MAL-2026-18123 | Malicious | Not scored | 9 days ago | npm peptide-modify |
Malicious release: Malicious code in my-auto-follow-eltio (npm) GHSA-xw7m-xxch-j3hp, MAL-2026-18121 | Malicious | Not scored | 9 days ago | npm my-auto-follow-eltio |
Malicious release: Malicious code in @alannxd/baileys (npm) GHSA-7345-fjw8-x55w, MAL-2026-18120 | Malicious | Not scored | 9 days ago | npm @alannxd/baileys |
Malicious release: Malicious code in tellyo-colours (npm) GHSA-4q6x-w65x-677r, MAL-2026-18115 | Malicious | Not scored | 10 days ago | npm tellyo-colours |
Malicious release: Malicious code in @securihackbot/depconf-stage-1792484738 (npm) MAL-2026-18105 | Malicious | Not scored | 10 days ago | npm @securihackbot/depconf-stage-1792484738 |
Malicious release: Malicious code in rs-lookout-sandbox-poc (npm) MAL-2026-18109 | Malicious | Not scored | 10 days ago | npm rs-lookout-sandbox-poc |
Malicious release: Malicious code in memories-core-web (npm) MAL-2026-18106 | Malicious | Not scored | 10 days ago | npm memories-core-web |
Malicious release: Malicious code in nwfp-build-config (npm) GHSA-fj85-27r8-hgfg, MAL-2026-18107 | Malicious | Not scored | 10 days ago | npm nwfp-build-config |
Malicious release: Malicious code in unicode-title-normalizer (npm) GHSA-66rv-6q99-h89g, MAL-2026-18100 | Malicious | Not scored | 10 days ago | npm unicode-title-normalizer |
Malicious release: Malicious code in formatting-subtitles-for-claude (npm) GHSA-xxr7-33gg-pcg6, MAL-2026-18099 | Malicious | Not scored | 10 days ago | npm formatting-subtitles-for-claude |
Malicious release: Malicious code in @platform-services/hrm-mfe-core (npm) MAL-2026-18091 | Malicious | Not scored | 10 days ago | npm @platform-services/hrm-mfe-core |
Malicious release: Malicious code in sc-announcer (npm) GHSA-fxw2-4j5q-6hwg, MAL-2026-18064 | Malicious | Not scored | 10 days ago | npm sc-announcer |
Malicious release: Malicious code in fanarena-common (npm) MAL-2026-18063 | Malicious | Not scored | 10 days ago | npm fanarena-common |
Malicious release: Malicious code in ccl-global-shopping (npm) GHSA-hh3m-f424-g8v5, MAL-2026-18061 | Malicious | Not scored | 10 days ago | npm ccl-global-shopping |
Malicious release: Malicious code in sc-wizard (npm) MAL-2026-18062 | Malicious | Not scored | 10 days ago | npm sc-wizard |
Malicious release: Malicious code in @an1mshnpmb9c84920/pipe-dns-m19t2 (npm) GHSA-3xpj-mfqg-v52m, MAL-2026-18049 | Malicious | Not scored | 11 days ago | npm @an1mshnpmb9c84920/pipe-dns-m19t2 |
Malicious release: Malicious code in @an1mshnpmb9c84920/stage-repo-m19g7 (npm) GHSA-42h4-pvwr-r87v, MAL-2026-18052 | Malicious | Not scored | 11 days ago | npm @an1mshnpmb9c84920/stage-repo-m19g7 |
Malicious release: Malicious code in @an1mshnpmb9c84920/stage-outer-m19s5 (npm) GHSA-6grm-8w52-497r, MAL-2026-18051 | Malicious | Not scored | 11 days ago | npm @an1mshnpmb9c84920/stage-outer-m19s5 |
Malicious release: Malicious code in @an1mshnpmb9c84920/gat-scope-target-125ec19a (npm) GHSA-87gv-mmww-whrr, MAL-2026-18046 | Malicious | Not scored | 11 days ago | npm @an1mshnpmb9c84920/gat-scope-target-125ec19a |
Malicious release: Malicious code in @an1mshnpmb9c84920/stage-fn-m19p2 (npm) GHSA-h79g-mv9q-7p44, MAL-2026-18050 | Malicious | Not scored | 11 days ago | npm @an1mshnpmb9c84920/stage-fn-m19p2 |
Malicious release: Malicious code in @an1mshnpmb9c84920/pipe-compat-m19r8 (npm) GHSA-hxmq-p768-mjhf, MAL-2026-18048 | Malicious | Not scored | 11 days ago | npm @an1mshnpmb9c84920/pipe-compat-m19r8 |
Malicious release: Malicious code in @an1mshnpmb9c84920/oidc-cross-cafb9d929e (npm) GHSA-mmr7-9m67-9qh5, MAL-2026-18047 | Malicious | Not scored | 11 days ago | npm @an1mshnpmb9c84920/oidc-cross-cafb9d929e |
Malicious release: Malicious code in @decoopus/chatgpt-setup (npm) GHSA-4632-2g34-4r9w, MAL-2026-18053 | Malicious | Not scored | 11 days ago | npm @decoopus/chatgpt-setup |
Malicious release: Malicious code in api-anthropic (npm) GHSA-cj9w-7h22-q93g, MAL-2026-18055 | Malicious | Not scored | 11 days ago | npm api-anthropic |
Malicious release: Malicious code in claude-desktop-setup (npm) GHSA-f4mf-vhm8-xxqc, MAL-2026-18059 | Malicious | Not scored | 11 days ago | npm claude-desktop-setup |
Malicious release: Malicious code in codex-setup (npm) GHSA-h8cg-xwfv-9x77, MAL-2026-18060 | Malicious | Not scored | 11 days ago | npm codex-setup |
Malicious release: Malicious code in @decoopus/claude-setup (npm) GHSA-p7p5-jrq5-q47x, MAL-2026-18054 | Malicious | Not scored | 11 days ago | npm @decoopus/claude-setup |
Malicious release: Malicious code in chatgpt-desktop-setup (npm) GHSA-pgq5-xq28-533m, MAL-2026-18056 | Malicious | Not scored | 11 days ago | npm chatgpt-desktop-setup |
Malicious release: Malicious code in chatgpt-pro-activator (npm) GHSA-qp43-mgx6-56x2, MAL-2026-18057 | Malicious | Not scored | 11 days ago | npm chatgpt-pro-activator |
Malicious release: Malicious code in chatgpt-pro-setup-tool (npm) GHSA-xwx3-5h3q-2v8r, MAL-2026-18058 | Malicious | Not scored | 11 days ago | npm chatgpt-pro-setup-tool |
Malicious release: Malicious code in esgbz5 (npm) GHSA-25f9-m2r5-6fcq, MAL-2026-18009 | Malicious | Not scored | 11 days ago | npm esgbz5 |
Malicious release: Malicious code in tkacg3 (npm) GHSA-27jv-jmw5-c2v5, MAL-2026-18037 | Malicious | Not scored | 11 days ago | npm tkacg3 |
Malicious release: Malicious code in v49yzy (npm) GHSA-299j-xhj5-p4mq, MAL-2026-18038 | Malicious | Not scored | 11 days ago | npm v49yzy |
Malicious release: Malicious code in 3gr841 (npm) GHSA-3268-6cgx-qmp3, MAL-2026-17946 | Malicious | Not scored | 11 days ago | npm 3gr841 |
Malicious release: Malicious code in 4p9kgm (npm) GHSA-37g4-578m-87mr, MAL-2026-17948 | Malicious | Not scored | 11 days ago | npm 4p9kgm |
Malicious release: Malicious code in j019qc (npm) GHSA-3c65-77q8-3cv8, MAL-2026-18018 | Malicious | Not scored | 11 days ago | npm j019qc |
Malicious release: Malicious code in noe77e (npm) GHSA-3f7v-wqcp-rcj5, MAL-2026-18033 | Malicious | Not scored | 11 days ago | npm noe77e |
Malicious release: Malicious code in 8h66ok (npm) GHSA-4755-8q82-c3cq, MAL-2026-17951 | Malicious | Not scored | 11 days ago | npm 8h66ok |
Malicious release: Malicious code in ju0oud (npm) GHSA-4vwp-4cgf-q7hm, MAL-2026-18020 | Malicious | Not scored | 11 days ago | npm ju0oud |