Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
pickem vulnerable to terminal escape-sequence injection via unsanitized item text GHSA-8qx3-8gm5-9cj2 | High | Not scored | 25 Aug, 2026 | npm pickem |
Malicious release: Malicious code in svelte-streak-map (npm) GHSA-79hp-j55f-97h5, MAL-2026-14500 | Malicious | Not scored | 25 Aug, 2026 | npm svelte-streak-map |
Malicious release: Malicious code in svelte-map-metric (npm) GHSA-2p6v-xwhm-f5h6, MAL-2026-14499 | Malicious | Not scored | 25 Aug, 2026 | npm svelte-map-metric |
Malicious release: Malicious code in svelte-hydration-streak (npm) GHSA-9jcj-426x-9rmq, MAL-2026-14495 | Malicious | Not scored | 25 Aug, 2026 | npm svelte-hydration-streak |
Malicious release: Malicious code in svelte-intake-streaks (npm) GHSA-hjjx-chqx-6225, MAL-2026-14498 | Malicious | Not scored | 25 Aug, 2026 | npm svelte-intake-streaks |
Malicious release: Malicious code in svelte-goal-streaks (npm) GHSA-jvfh-h9rq-x29f, MAL-2026-14494 | Malicious | Not scored | 25 Aug, 2026 | npm svelte-goal-streaks |
Malicious release: Malicious code in svelte-streak-panel (npm) GHSA-vvc8-cg5m-2pmp, MAL-2026-14501 | Malicious | Not scored | 25 Aug, 2026 | npm svelte-streak-panel |
Malicious release: Malicious code in svelte-streak-tracker (npm) GHSA-mvgf-wmjm-6q56, MAL-2026-14502 | Malicious | Not scored | 25 Aug, 2026 | npm svelte-streak-tracker |
Malicious release: Malicious code in svelte-insights-streak (npm) GHSA-qf7v-g3vj-m3w2, MAL-2026-14497 | Malicious | Not scored | 25 Aug, 2026 | npm svelte-insights-streak |
Malicious release: Malicious code in svelte-insight-streaks (npm) GHSA-m4w5-mww4-j2vr, MAL-2026-14496 | Malicious | Not scored | 25 Aug, 2026 | npm svelte-insight-streaks |
Malicious release: Malicious code in svelte-daily-streaks (npm) GHSA-xvrp-wvcw-8jrp, MAL-2026-14493 | Malicious | Not scored | 25 Aug, 2026 | npm svelte-daily-streaks |
Malicious release: Malicious code in spotify-url-infos (npm) MAL-2026-14492 | Malicious | Not scored | 25 Aug, 2026 | npm spotify-url-infos |
Malicious release: Malicious code in chai-as-otc (npm) MAL-2026-14491 | Malicious | Not scored | 25 Aug, 2026 | npm chai-as-otc |
Malicious release: Malicious code in mkb-manager (npm) GHSA-wvpv-8v52-pgq7, MAL-2026-14490 | Malicious | Not scored | 25 Aug, 2026 | npm mkb-manager |
Malicious release: Malicious code in hydration-cls-ui (npm) GHSA-q635-2q7j-grxm, MAL-2026-14489 | Malicious | Not scored | 25 Aug, 2026 | npm hydration-cls-ui |
Malicious release: Malicious code in modules-newline (npm) MAL-2026-14483 | Malicious | Not scored | 25 Aug, 2026 | npm modules-newline |
Malicious release: Malicious code in react-remove-properties (npm) GHSA-m8m4-9m7c-742j, MAL-2026-14484 | Malicious | Not scored | 25 Aug, 2026 | npm react-remove-properties |
Malicious release: Malicious code in spf-analytics (npm) GHSA-fj97-8h42-crgr, MAL-2026-14486 | Malicious | Not scored | 25 Aug, 2026 | npm spf-analytics |
Malicious release: Malicious code in secretkey-2fa (npm) MAL-2026-14485 | Malicious | Not scored | 25 Aug, 2026 | npm secretkey-2fa |
Malicious release: Malicious code in spotify-url-resolovela (npm) MAL-2026-14487 | Malicious | Not scored | 25 Aug, 2026 | npm spotify-url-resolovela |
Malicious release: Malicious code in vite-plugin-images-analysis (npm) MAL-2026-14482 | Malicious | Not scored | 25 Aug, 2026 | npm vite-plugin-images-analysis |
Malicious release: Malicious code in vite-plugin-image-tracker (npm) MAL-2026-14481 | Malicious | Not scored | 25 Aug, 2026 | npm vite-plugin-image-tracker |
Malicious release: Malicious code in vite-plugin-bug-tracker (npm) MAL-2026-14479 | Malicious | Not scored | 25 Aug, 2026 | npm vite-plugin-bug-tracker |
Malicious release: Malicious code in vite-plugin-image-analysis (npm) MAL-2026-14480 | Malicious | Not scored | 25 Aug, 2026 | npm vite-plugin-image-analysis |
Malicious release: Malicious code in mham-js (npm) MAL-2026-14478 | Malicious | Not scored | 25 Aug, 2026 | npm mham-js |
Malicious release: Malicious code in js-soul (npm) MAL-2026-14477 | Malicious | Not scored | 25 Aug, 2026 | npm js-soul |
Malicious release: Malicious code in ecobee-home (npm) GHSA-fhh5-9f4g-qw3h, MAL-2026-14475 | Malicious | Not scored | 25 Aug, 2026 | npm ecobee-home |
Malicious release: Malicious code in ecobee2 (npm) GHSA-339h-mj38-2p38, MAL-2026-14476 | Malicious | Not scored | 25 Aug, 2026 | npm ecobee2 |
Malicious release: Malicious code in ecobee-api (npm) GHSA-v8ph-958r-cj9q, MAL-2026-14474 | Malicious | Not scored | 25 Aug, 2026 | npm ecobee-api |
Malicious release: Malicious code in css-import-order (npm) MAL-2026-14473 | Malicious | Not scored | 25 Aug, 2026 | npm css-import-order |
Malicious release: Malicious code in cscasereadserv-paypal (npm) MAL-2026-14472 | Malicious | Not scored | 25 Aug, 2026 | npm cscasereadserv-paypal |
Malicious release: Malicious code in cat-embed-i18n-res (npm) MAL-2026-14471 | Malicious | Not scored | 25 Aug, 2026 | npm cat-embed-i18n-res |
Malicious release: Malicious code in whatsgoodlookingbabycreed (npm) GHSA-3jr7-rgw6-prgf, MAL-2026-14470 | Malicious | Not scored | 25 Aug, 2026 | npm whatsgoodlookingbabycreed |
Malicious release: Malicious code in desmosmathwork (npm) GHSA-3vxp-vqwp-3vmh, MAL-2026-14456 | Malicious | Not scored | 25 Aug, 2026 | npm desmosmathwork |
Malicious release: Malicious code in ilovedesmos (npm) GHSA-3wf6-8h38-rvjr, MAL-2026-14460 | Malicious | Not scored | 25 Aug, 2026 | npm ilovedesmos |
Malicious release: Malicious code in schoollesson (npm) GHSA-4q3f-7qxr-pfm4, MAL-2026-14464 | Malicious | Not scored | 25 Aug, 2026 | npm schoollesson |
Malicious release: Malicious code in desmosschoolwork (npm) GHSA-4v42-34fj-5p2w, MAL-2026-14457 | Malicious | Not scored | 25 Aug, 2026 | npm desmosschoolwork |
Malicious release: Malicious code in classhomework (npm) GHSA-5rhm-fgq5-c8mf, MAL-2026-14446 | Malicious | Not scored | 25 Aug, 2026 | npm classhomework |
Malicious release: Malicious code in tungtunggod (npm) GHSA-6h57-7m4x-f6v7, MAL-2026-14468 | Malicious | Not scored | 25 Aug, 2026 | npm tungtunggod |
Malicious release: Malicious code in desmosclasswork (npm) GHSA-752h-3q4v-jhq7, MAL-2026-14452 | Malicious | Not scored | 25 Aug, 2026 | npm desmosclasswork |
Malicious release: Malicious code in classwork (npm) GHSA-776h-qpf5-rx46, MAL-2026-14451 | Malicious | Not scored | 25 Aug, 2026 | npm classwork |
Malicious release: Malicious code in desmoshomework (npm) GHSA-8vvg-qhfh-7h74, MAL-2026-14453 | Malicious | Not scored | 25 Aug, 2026 | npm desmoshomework |
Malicious release: Malicious code in superdupertest111 (npm) GHSA-99f7-924m-fp2c, MAL-2026-14467 | Malicious | Not scored | 25 Aug, 2026 | npm superdupertest111 |
Malicious release: Malicious code in classroomlesson (npm) GHSA-9x5r-mwwj-hpg6, MAL-2026-14449 | Malicious | Not scored | 25 Aug, 2026 | npm classroomlesson |
Malicious release: Malicious code in iamhungryrn (npm) GHSA-chwh-2rv3-4c2f, MAL-2026-14459 | Malicious | Not scored | 25 Aug, 2026 | npm iamhungryrn |
Malicious release: Malicious code in iwantaburger (npm) GHSA-gcgg-jh5v-64hh, MAL-2026-14461 | Malicious | Not scored | 25 Aug, 2026 | npm iwantaburger |
Malicious release: Malicious code in classroomhomework (npm) GHSA-hrpx-q7gr-p9g5, MAL-2026-14448 | Malicious | Not scored | 25 Aug, 2026 | npm classroomhomework |
Malicious release: Malicious code in desmosistuff (npm) GHSA-j367-pvh3-755f, MAL-2026-14455 | Malicious | Not scored | 25 Aug, 2026 | npm desmosistuff |
Malicious release: Malicious code in schoolwork (npm) GHSA-m62q-p4m5-72m6, MAL-2026-14465 | Malicious | Not scored | 25 Aug, 2026 | npm schoolwork |
Malicious release: Malicious code in desmoswork (npm) GHSA-m8cf-32j6-jq72, MAL-2026-14458 | Malicious | Not scored | 25 Aug, 2026 | npm desmoswork |