Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in layer2-sdk (npm) MAL-2026-14278 | Malicious | Not scored | 19 Aug, 2026 | npm layer2-sdk |
Malicious release: Malicious code in neverthrow-core (npm) MAL-2026-14283 | Malicious | Not scored | 19 Aug, 2026 | npm neverthrow-core |
Malicious release: Malicious code in localize-translate (npm) MAL-2026-14279 | Malicious | Not scored | 19 Aug, 2026 | npm localize-translate |
Malicious release: Malicious code in mutex-plus (npm) MAL-2026-14282 | Malicious | Not scored | 19 Aug, 2026 | npm mutex-plus |
Malicious release: Malicious code in mutex-lite (npm) MAL-2026-14281 | Malicious | Not scored | 19 Aug, 2026 | npm mutex-lite |
Malicious release: Malicious code in mutex-core (npm) MAL-2026-14280 | Malicious | Not scored | 19 Aug, 2026 | npm mutex-core |
Malicious release: Malicious code in nibra1 (npm) MAL-2026-14284 | Malicious | Not scored | 19 Aug, 2026 | npm nibra1 |
Malicious release: Malicious code in node_cryptography (npm) MAL-2026-14276 | Malicious | Not scored | 19 Aug, 2026 | npm node_cryptography |
Malicious release: Malicious code in minequest (npm) MAL-2026-14275 | Malicious | Not scored | 19 Aug, 2026 | npm minequest |
Malicious release: Malicious code in o0o9 (npm) GHSA-5f5h-pg84-39h4, MAL-2026-14277 | Malicious | Not scored | 19 Aug, 2026 | npm o0o9 |
Malicious release: Malicious code in nodealpha (npm) MAL-2026-14270 | Malicious | Not scored | 19 Aug, 2026 | npm nodealpha |
Malicious release: Malicious code in nodeberlin (npm) MAL-2026-14271 | Malicious | Not scored | 19 Aug, 2026 | npm nodeberlin |
Malicious release: Malicious code in price-scripping-js (npm) MAL-2026-14272 | Malicious | Not scored | 19 Aug, 2026 | npm price-scripping-js |
Malicious release: Malicious code in rand-txs-sdk (npm) MAL-2026-14273 | Malicious | Not scored | 19 Aug, 2026 | npm rand-txs-sdk |
Malicious release: Malicious code in karma-proxy (npm) MAL-2026-14267 | Malicious | Not scored | 19 Aug, 2026 | npm karma-proxy |
Malicious release: Malicious code in easydsbots (npm) MAL-2026-14265 | Malicious | Not scored | 19 Aug, 2026 | npm easydsbots |
Malicious release: Malicious code in no-for-of-loops (npm) GHSA-hfg2-857w-8wm9, MAL-2026-14268 | Malicious | Not scored | 19 Aug, 2026 | npm no-for-of-loops |
Malicious release: Malicious code in novel-suduko (npm) MAL-2026-14269 | Malicious | Not scored | 19 Aug, 2026 | npm novel-suduko |
Malicious release: Malicious code in de-morgan (npm) GHSA-2vc2-gwg3-2gpx, MAL-2026-14264 | Malicious | Not scored | 19 Aug, 2026 | npm de-morgan |
Malicious release: Malicious code in electron-sessions (npm) MAL-2026-14266 | Malicious | Not scored | 19 Aug, 2026 | npm electron-sessions |
Malicious release: Malicious code in arb-kit (npm) MAL-2026-14263 | Malicious | Not scored | 19 Aug, 2026 | npm arb-kit |
Malicious release: Malicious code in postcss-initialize-provider (npm) MAL-2026-14261 | Malicious | Not scored | 19 Aug, 2026 | npm postcss-initialize-provider |
Malicious release: Malicious code in pump-fun-skills (npm) MAL-2026-14262 | Malicious | Not scored | 19 Aug, 2026 | npm pump-fun-skills |
Malicious release: Malicious code in modsync (npm) MAL-2026-14257 | Malicious | Not scored | 19 Aug, 2026 | npm modsync |
Malicious release: Malicious code in api-rs-tuils (npm) MAL-2026-14256 | Malicious | Not scored | 19 Aug, 2026 | npm api-rs-tuils |
Malicious release: Malicious code in ranux-dev (npm) MAL-2026-14259 | Malicious | Not scored | 19 Aug, 2026 | npm ranux-dev |
Malicious release: Malicious code in ranux-cloud (npm) MAL-2026-14258 | Malicious | Not scored | 19 Aug, 2026 | npm ranux-cloud |
Malicious release: Malicious code in ranux-pro (npm) MAL-2026-14260 | Malicious | Not scored | 19 Aug, 2026 | npm ranux-pro |
Malicious release: Malicious code in react-dom-helpers (npm) MAL-2026-14253 | Malicious | Not scored | 19 Aug, 2026 | npm react-dom-helpers |
Malicious release: Malicious code in saaa9 (npm) MAL-2026-14254 | Malicious | Not scored | 19 Aug, 2026 | npm saaa9 |
Malicious release: Malicious code in secp256k1-lib (npm) MAL-2026-14255 | Malicious | Not scored | 19 Aug, 2026 | npm secp256k1-lib |
Malicious release: Malicious code in localize-extract (npm) MAL-2026-14249 | Malicious | Not scored | 19 Aug, 2026 | npm localize-extract |
Malicious release: Malicious code in luluking1 (npm) MAL-2026-14250 | Malicious | Not scored | 19 Aug, 2026 | npm luluking1 |
Malicious release: Malicious code in npm-wold (npm) MAL-2026-14252 | Malicious | Not scored | 19 Aug, 2026 | npm npm-wold |
Malicious release: Malicious code in ngsw-config (npm) MAL-2026-14251 | Malicious | Not scored | 19 Aug, 2026 | npm ngsw-config |
Malicious release: Malicious code in nice-utils-helper (npm) MAL-2026-14248 | Malicious | Not scored | 19 Aug, 2026 | npm nice-utils-helper |
Malicious release: Malicious code in flydev (npm) MAL-2026-14243 | Malicious | Not scored | 19 Aug, 2026 | npm flydev |
Malicious release: Malicious code in dxrs-dos (npm) MAL-2026-14241 | Malicious | Not scored | 19 Aug, 2026 | npm dxrs-dos |
Malicious release: Malicious code in dxr-dos (npm) MAL-2026-14240 | Malicious | Not scored | 19 Aug, 2026 | npm dxr-dos |
Malicious release: Malicious code in electro-session (npm) MAL-2026-14242 | Malicious | Not scored | 19 Aug, 2026 | npm electro-session |
Malicious release: Malicious code in magika-js (npm) MAL-2026-14247 | Malicious | Not scored | 19 Aug, 2026 | npm magika-js |
Malicious release: Malicious code in hardhat-hold (npm) GHSA-f33v-qqxm-m6m9, MAL-2026-14246 | Malicious | Not scored | 19 Aug, 2026 | npm hardhat-hold |
Malicious release: Malicious code in github-policy-bot (npm) MAL-2026-14245 | Malicious | Not scored | 19 Aug, 2026 | npm github-policy-bot |
Malicious release: Malicious code in gemini-cli-a2a-server (npm) MAL-2026-14244 | Malicious | Not scored | 19 Aug, 2026 | npm gemini-cli-a2a-server |
Malicious release: Malicious code in gaarf-node-bq (npm) MAL-2026-14239 | Malicious | Not scored | 19 Aug, 2026 | npm gaarf-node-bq |
Malicious release: Malicious code in gaarf-node (npm) MAL-2026-14238 | Malicious | Not scored | 19 Aug, 2026 | npm gaarf-node |
Malicious release: Malicious code in gaarf-bq (npm) MAL-2026-14237 | Malicious | Not scored | 19 Aug, 2026 | npm gaarf-bq |
Malicious release: Malicious code in gaarf (npm) MAL-2026-14236 | Malicious | Not scored | 19 Aug, 2026 | npm gaarf |
Malicious release: Malicious code in config-helper-kit (npm) MAL-2026-14235 | Malicious | Not scored | 19 Aug, 2026 | npm config-helper-kit |
Malicious release: Malicious code in commandor-lib (npm) MAL-2026-14234 | Malicious | Not scored | 19 Aug, 2026 | npm commandor-lib |