Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in lodsh-cli (npm) MAL-2026-14184 | Malicious | Not scored | 18 Aug, 2026 | npm lodsh-cli |
Malicious release: Malicious code in comand (npm) MAL-2026-14169 | Malicious | Not scored | 18 Aug, 2026 | npm comand |
Malicious release: Malicious code in lodahs-cli (npm) MAL-2026-14180 | Malicious | Not scored | 18 Aug, 2026 | npm lodahs-cli |
Malicious release: Malicious code in chalk-lib (npm) MAL-2026-14167 | Malicious | Not scored | 18 Aug, 2026 | npm chalk-lib |
Malicious release: Malicious code in chalk-util (npm) MAL-2026-14168 | Malicious | Not scored | 18 Aug, 2026 | npm chalk-util |
Malicious release: Malicious code in lodash-lib (npm) MAL-2026-14182 | Malicious | Not scored | 18 Aug, 2026 | npm lodash-lib |
Malicious release: Malicious code in chalk-core (npm) MAL-2026-14165 | Malicious | Not scored | 18 Aug, 2026 | npm chalk-core |
Malicious release: Malicious code in sui-move-gql (npm) MAL-2026-14188 | Malicious | Not scored | 18 Aug, 2026 | npm sui-move-gql |
Malicious release: Malicious code in chalk-es (npm) MAL-2026-14166 | Malicious | Not scored | 18 Aug, 2026 | npm chalk-es |
Malicious release: Malicious code in commandor-core (npm) MAL-2026-14173 | Malicious | Not scored | 18 Aug, 2026 | npm commandor-core |
Malicious release: Malicious code in @evial/runtime-health (npm) MAL-2026-14159 | Malicious | Not scored | 18 Aug, 2026 | npm @evial/runtime-health |
Malicious release: Malicious code in commandor-cli (npm) MAL-2026-14172 | Malicious | Not scored | 18 Aug, 2026 | npm commandor-cli |
Malicious release: Malicious code in comander-lib (npm) MAL-2026-14171 | Malicious | Not scored | 18 Aug, 2026 | npm comander-lib |
Malicious release: Malicious code in dev-env-check (npm) MAL-2026-14176 | Malicious | Not scored | 18 Aug, 2026 | npm dev-env-check |
Malicious release: Malicious code in axois-http (npm) MAL-2026-14163 | Malicious | Not scored | 18 Aug, 2026 | npm axois-http |
Malicious release: Malicious code in loadashjs (npm) MAL-2026-14179 | Malicious | Not scored | 18 Aug, 2026 | npm loadashjs |
Malicious release: Malicious code in ladash-cli (npm) MAL-2026-14178 | Malicious | Not scored | 18 Aug, 2026 | npm ladash-cli |
Malicious release: Malicious code in commandorjs (npm) MAL-2026-14174 | Malicious | Not scored | 18 Aug, 2026 | npm commandorjs |
Malicious release: Malicious code in bqq1 (npm) MAL-2026-14164 | Malicious | Not scored | 18 Aug, 2026 | npm bqq1 |
Malicious release: Malicious code in pump-segments-sdk (npm) MAL-2026-14186 | Malicious | Not scored | 18 Aug, 2026 | npm pump-segments-sdk |
Malicious release: Malicious code in comander-cli (npm) MAL-2026-14170 | Malicious | Not scored | 18 Aug, 2026 | npm comander-cli |
Malicious release: Malicious code in axious-core (npm) MAL-2026-14162 | Malicious | Not scored | 18 Aug, 2026 | npm axious-core |
Malicious release: Malicious code in lodahsjs (npm) MAL-2026-14181 | Malicious | Not scored | 18 Aug, 2026 | npm lodahsjs |
Malicious release: Malicious code in mutex-thread (npm) MAL-2026-14185 | Malicious | Not scored | 18 Aug, 2026 | npm mutex-thread |
Malicious release: Malicious code in @library-dev-team/data-sanitizer (npm) MAL-2026-14160 | Malicious | Not scored | 18 Aug, 2026 | npm @library-dev-team/data-sanitizer |
Malicious release: Malicious code in fast-glob-fast (npm) MAL-2026-14177 | Malicious | Not scored | 18 Aug, 2026 | npm fast-glob-fast |
Malicious release: Malicious code in testingsmthb1g (npm) MAL-2026-14142 | Malicious | Not scored | 18 Aug, 2026 | npm testingsmthb1g |
Malicious release: Malicious code in test-npm-snurkeburk-hackerone (npm) MAL-2026-14141 | Malicious | Not scored | 18 Aug, 2026 | npm test-npm-snurkeburk-hackerone |
Malicious release: Malicious code in typscript-core (npm) MAL-2026-14157 | Malicious | Not scored | 18 Aug, 2026 | npm typscript-core |
Malicious release: Malicious code in typscript-cli (npm) MAL-2026-14156 | Malicious | Not scored | 18 Aug, 2026 | npm typscript-cli |
Malicious release: Malicious code in typesript-cli (npm) MAL-2026-14154 | Malicious | Not scored | 18 Aug, 2026 | npm typesript-cli |
Malicious release: Malicious code in typesript-core (npm) MAL-2026-14155 | Malicious | Not scored | 18 Aug, 2026 | npm typesript-core |
Malicious release: Malicious code in typescrit-cli (npm) MAL-2026-14153 | Malicious | Not scored | 18 Aug, 2026 | npm typescrit-cli |
Malicious release: Malicious code in typescriptt-core (npm) MAL-2026-14152 | Malicious | Not scored | 18 Aug, 2026 | npm typescriptt-core |
Malicious release: Malicious code in typescirpt-core (npm) MAL-2026-14149 | Malicious | Not scored | 18 Aug, 2026 | npm typescirpt-core |
Malicious release: Malicious code in typescrip-cli (npm) MAL-2026-14150 | Malicious | Not scored | 18 Aug, 2026 | npm typescrip-cli |
Malicious release: Malicious code in typescirpt-cli (npm) MAL-2026-14148 | Malicious | Not scored | 18 Aug, 2026 | npm typescirpt-cli |
Malicious release: Malicious code in typescriptt-cli (npm) MAL-2026-14151 | Malicious | Not scored | 18 Aug, 2026 | npm typescriptt-cli |
Malicious release: Malicious code in tyepescript-core (npm) MAL-2026-14144 | Malicious | Not scored | 18 Aug, 2026 | npm tyepescript-core |
Malicious release: Malicious code in typecript-cli (npm) MAL-2026-14145 | Malicious | Not scored | 18 Aug, 2026 | npm typecript-cli |
Malicious release: Malicious code in typescipt-core (npm) MAL-2026-14147 | Malicious | Not scored | 18 Aug, 2026 | npm typescipt-core |
Malicious release: Malicious code in typescipt-cli (npm) MAL-2026-14146 | Malicious | Not scored | 18 Aug, 2026 | npm typescipt-cli |
Malicious release: Malicious code in tyepescript-cli (npm) MAL-2026-14143 | Malicious | Not scored | 18 Aug, 2026 | npm tyepescript-cli |
Malicious release: Malicious code in @mohamed_nowisar/token3-check (npm) MAL-2026-14135 | Malicious | Not scored | 18 Aug, 2026 | npm @mohamed_nowisar/token3-check |
Malicious release: Malicious code in @mohamed_nowisar/depconf-canary-test (npm) MAL-2026-14134 | Malicious | Not scored | 18 Aug, 2026 | npm @mohamed_nowisar/depconf-canary-test |
Malicious release: Malicious code in agora402-payment-utils (npm) GHSA-pvr5-m9hx-xxfr, MAL-2026-14136 | Malicious | Not scored | 18 Aug, 2026 | npm agora402-payment-utils |
Malicious release: Malicious code in mtslink-depconf-probe-profileusername (npm) MAL-2026-14137 | Malicious | Not scored | 18 Aug, 2026 | npm mtslink-depconf-probe-profileusername |
Malicious release: Malicious code in optimizely-starter-kit-for-fastly-compute (npm) GHSA-8pfr-f8q3-mr5x, MAL-2026-14138 | Malicious | Not scored | 18 Aug, 2026 | npm optimizely-starter-kit-for-fastly-compute |
Malicious release: Malicious code in prism-registry (npm) GHSA-gvgw-fqw6-f4rw, MAL-2026-14139 | Malicious | Not scored | 18 Aug, 2026 | npm prism-registry |
Malicious release: Malicious code in vite-svg-config (npm) MAL-2026-14140 | Malicious | Not scored | 18 Aug, 2026 | npm vite-svg-config |