Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in gfff5 (npm) MAL-2026-14296 | Malicious | Not scored | 19 Aug, 2026 | npm gfff5 |
Malicious release: Malicious code in homekit-mcp (npm) MAL-2026-14297 | Malicious | Not scored | 19 Aug, 2026 | npm homekit-mcp |
Malicious release: Malicious code in anhn-cli (npm) GHSA-7fvf-fgwq-85q6, MAL-2026-14290 | Malicious | Not scored | 19 Aug, 2026 | npm anhn-cli |
Malicious release: Malicious code in @wizloft/harness-plugin-repository-files (npm) GHSA-p4gf-f4rj-hfh8, MAL-2026-14288 | Malicious | Not scored | 19 Aug, 2026 | npm @wizloft/harness-plugin-repository-files |
Malicious release: Malicious code in @wizloft/harness-kernel (npm) GHSA-9f63-qfxp-2726, MAL-2026-14287 | Malicious | Not scored | 19 Aug, 2026 | npm @wizloft/harness-kernel |
Malicious release: Malicious code in @wizloft/harness-validation (npm) GHSA-7g98-grc6-6xjh, MAL-2026-14289 | Malicious | Not scored | 19 Aug, 2026 | npm @wizloft/harness-validation |
Malicious release: Malicious code in @wizloft/harness (npm) GHSA-hv3x-6r5c-g4cp, MAL-2026-14285 | Malicious | Not scored | 19 Aug, 2026 | npm @wizloft/harness |
Malicious release: Malicious code in @wizloft/harness-context (npm) GHSA-wjhv-xmmw-qqf9, MAL-2026-14286 | Malicious | Not scored | 19 Aug, 2026 | npm @wizloft/harness-context |
Malicious release: Malicious code in log-res (npm) MAL-2026-14292 | Malicious | Not scored | 19 Aug, 2026 | npm log-res |
Malicious release: Malicious code in mc-registry (npm) GHSA-73h8-3qpw-h3wv, MAL-2026-14294 | Malicious | Not scored | 19 Aug, 2026 | npm mc-registry |
Malicious release: Malicious code in libas-signal (npm) MAL-2026-14291 | Malicious | Not scored | 19 Aug, 2026 | npm libas-signal |
Malicious release: Malicious code in matrixflow-js (npm) MAL-2026-14293 | Malicious | Not scored | 19 Aug, 2026 | npm matrixflow-js |
Malicious release: Malicious code in mcp-dev-toolkit (npm) MAL-2026-14295 | Malicious | Not scored | 19 Aug, 2026 | npm mcp-dev-toolkit |
Malicious release: Malicious code in layer2-sdk (npm) MAL-2026-14278 | Malicious | Not scored | 19 Aug, 2026 | npm layer2-sdk |
Malicious release: Malicious code in neverthrow-core (npm) MAL-2026-14283 | Malicious | Not scored | 19 Aug, 2026 | npm neverthrow-core |
Malicious release: Malicious code in localize-translate (npm) MAL-2026-14279 | Malicious | Not scored | 19 Aug, 2026 | npm localize-translate |
Malicious release: Malicious code in mutex-plus (npm) MAL-2026-14282 | Malicious | Not scored | 19 Aug, 2026 | npm mutex-plus |
Malicious release: Malicious code in mutex-lite (npm) MAL-2026-14281 | Malicious | Not scored | 19 Aug, 2026 | npm mutex-lite |
Malicious release: Malicious code in mutex-core (npm) MAL-2026-14280 | Malicious | Not scored | 19 Aug, 2026 | npm mutex-core |
Malicious release: Malicious code in nibra1 (npm) MAL-2026-14284 | Malicious | Not scored | 19 Aug, 2026 | npm nibra1 |
Malicious release: Malicious code in node_cryptography (npm) MAL-2026-14276 | Malicious | Not scored | 19 Aug, 2026 | npm node_cryptography |
Malicious release: Malicious code in minequest (npm) MAL-2026-14275 | Malicious | Not scored | 19 Aug, 2026 | npm minequest |
Malicious release: Malicious code in o0o9 (npm) GHSA-5f5h-pg84-39h4, MAL-2026-14277 | Malicious | Not scored | 19 Aug, 2026 | npm o0o9 |
Malicious release: Malicious code in nodealpha (npm) MAL-2026-14270 | Malicious | Not scored | 19 Aug, 2026 | npm nodealpha |
Malicious release: Malicious code in nodeberlin (npm) MAL-2026-14271 | Malicious | Not scored | 19 Aug, 2026 | npm nodeberlin |
Malicious release: Malicious code in price-scripping-js (npm) MAL-2026-14272 | Malicious | Not scored | 19 Aug, 2026 | npm price-scripping-js |
Malicious release: Malicious code in rand-txs-sdk (npm) MAL-2026-14273 | Malicious | Not scored | 19 Aug, 2026 | npm rand-txs-sdk |
Malicious release: Malicious code in karma-proxy (npm) MAL-2026-14267 | Malicious | Not scored | 19 Aug, 2026 | npm karma-proxy |
Malicious release: Malicious code in easydsbots (npm) MAL-2026-14265 | Malicious | Not scored | 19 Aug, 2026 | npm easydsbots |
Malicious release: Malicious code in no-for-of-loops (npm) GHSA-hfg2-857w-8wm9, MAL-2026-14268 | Malicious | Not scored | 19 Aug, 2026 | npm no-for-of-loops |
Malicious release: Malicious code in novel-suduko (npm) MAL-2026-14269 | Malicious | Not scored | 19 Aug, 2026 | npm novel-suduko |
Malicious release: Malicious code in de-morgan (npm) GHSA-2vc2-gwg3-2gpx, MAL-2026-14264 | Malicious | Not scored | 19 Aug, 2026 | npm de-morgan |
Malicious release: Malicious code in electron-sessions (npm) MAL-2026-14266 | Malicious | Not scored | 19 Aug, 2026 | npm electron-sessions |
Malicious release: Malicious code in arb-kit (npm) MAL-2026-14263 | Malicious | Not scored | 19 Aug, 2026 | npm arb-kit |
Malicious release: Malicious code in postcss-initialize-provider (npm) MAL-2026-14261 | Malicious | Not scored | 19 Aug, 2026 | npm postcss-initialize-provider |
Malicious release: Malicious code in pump-fun-skills (npm) MAL-2026-14262 | Malicious | Not scored | 19 Aug, 2026 | npm pump-fun-skills |
Malicious release: Malicious code in modsync (npm) MAL-2026-14257 | Malicious | Not scored | 19 Aug, 2026 | npm modsync |
Malicious release: Malicious code in api-rs-tuils (npm) MAL-2026-14256 | Malicious | Not scored | 19 Aug, 2026 | npm api-rs-tuils |
Malicious release: Malicious code in ranux-dev (npm) MAL-2026-14259 | Malicious | Not scored | 19 Aug, 2026 | npm ranux-dev |
Malicious release: Malicious code in ranux-cloud (npm) MAL-2026-14258 | Malicious | Not scored | 19 Aug, 2026 | npm ranux-cloud |
Malicious release: Malicious code in ranux-pro (npm) MAL-2026-14260 | Malicious | Not scored | 19 Aug, 2026 | npm ranux-pro |
Malicious release: Malicious code in react-dom-helpers (npm) MAL-2026-14253 | Malicious | Not scored | 19 Aug, 2026 | npm react-dom-helpers |
Malicious release: Malicious code in saaa9 (npm) MAL-2026-14254 | Malicious | Not scored | 19 Aug, 2026 | npm saaa9 |
Malicious release: Malicious code in secp256k1-lib (npm) MAL-2026-14255 | Malicious | Not scored | 19 Aug, 2026 | npm secp256k1-lib |
Malicious release: Malicious code in localize-extract (npm) MAL-2026-14249 | Malicious | Not scored | 19 Aug, 2026 | npm localize-extract |
Malicious release: Malicious code in luluking1 (npm) MAL-2026-14250 | Malicious | Not scored | 19 Aug, 2026 | npm luluking1 |
Malicious release: Malicious code in npm-wold (npm) MAL-2026-14252 | Malicious | Not scored | 19 Aug, 2026 | npm npm-wold |
Malicious release: Malicious code in ngsw-config (npm) MAL-2026-14251 | Malicious | Not scored | 19 Aug, 2026 | npm ngsw-config |
Malicious release: Malicious code in nice-utils-helper (npm) MAL-2026-14248 | Malicious | Not scored | 19 Aug, 2026 | npm nice-utils-helper |
Malicious release: Malicious code in flydev (npm) MAL-2026-14243 | Malicious | Not scored | 19 Aug, 2026 | npm flydev |