Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in dxrs-dos (npm) MAL-2026-14241 | Malicious | Not scored | 19 Aug, 2026 | npm dxrs-dos |
Malicious release: Malicious code in dxr-dos (npm) MAL-2026-14240 | Malicious | Not scored | 19 Aug, 2026 | npm dxr-dos |
Malicious release: Malicious code in electro-session (npm) MAL-2026-14242 | Malicious | Not scored | 19 Aug, 2026 | npm electro-session |
Malicious release: Malicious code in magika-js (npm) MAL-2026-14247 | Malicious | Not scored | 19 Aug, 2026 | npm magika-js |
Malicious release: Malicious code in hardhat-hold (npm) GHSA-f33v-qqxm-m6m9, MAL-2026-14246 | Malicious | Not scored | 19 Aug, 2026 | npm hardhat-hold |
Malicious release: Malicious code in github-policy-bot (npm) MAL-2026-14245 | Malicious | Not scored | 19 Aug, 2026 | npm github-policy-bot |
Malicious release: Malicious code in gemini-cli-a2a-server (npm) MAL-2026-14244 | Malicious | Not scored | 19 Aug, 2026 | npm gemini-cli-a2a-server |
Malicious release: Malicious code in gaarf-node-bq (npm) MAL-2026-14239 | Malicious | Not scored | 19 Aug, 2026 | npm gaarf-node-bq |
Malicious release: Malicious code in gaarf-node (npm) MAL-2026-14238 | Malicious | Not scored | 19 Aug, 2026 | npm gaarf-node |
Malicious release: Malicious code in gaarf-bq (npm) MAL-2026-14237 | Malicious | Not scored | 19 Aug, 2026 | npm gaarf-bq |
Malicious release: Malicious code in gaarf (npm) MAL-2026-14236 | Malicious | Not scored | 19 Aug, 2026 | npm gaarf |
Malicious release: Malicious code in config-helper-kit (npm) MAL-2026-14235 | Malicious | Not scored | 19 Aug, 2026 | npm config-helper-kit |
Malicious release: Malicious code in commandor-lib (npm) MAL-2026-14234 | Malicious | Not scored | 19 Aug, 2026 | npm commandor-lib |
Malicious release: Malicious code in code-assist-mcp (npm) MAL-2026-14233 | Malicious | Not scored | 19 Aug, 2026 | npm code-assist-mcp |
Malicious release: Malicious code in chromeos-webdriver-cli (npm) MAL-2026-14232 | Malicious | Not scored | 19 Aug, 2026 | npm chromeos-webdriver-cli |
Malicious release: Malicious code in chromecast-webdriver-cli (npm) MAL-2026-14231 | Malicious | Not scored | 19 Aug, 2026 | npm chromecast-webdriver-cli |
Malicious release: Malicious code in chrome-enterprise-premium-mcp (npm) MAL-2026-14230 | Malicious | Not scored | 19 Aug, 2026 | npm chrome-enterprise-premium-mcp |
Malicious release: Malicious code in carbon-monorepo (npm) MAL-2026-14229 | Malicious | Not scored | 19 Aug, 2026 | npm carbon-monorepo |
Malicious release: Malicious code in broadcast-graphics-mcp (npm) MAL-2026-14228 | Malicious | Not scored | 19 Aug, 2026 | npm broadcast-graphics-mcp |
Malicious release: Malicious code in bazelisk (npm) MAL-2026-14227 | Malicious | Not scored | 19 Aug, 2026 | npm bazelisk |
Malicious release: Malicious code in animate-css-vite (npm) MAL-2026-14226 | Malicious | Not scored | 19 Aug, 2026 | npm animate-css-vite |
Malicious release: Malicious code in ambera (npm) MAL-2026-14225 | Malicious | Not scored | 19 Aug, 2026 | npm ambera |
Malicious release: Malicious code in ai-texts (npm) GHSA-h6w4-w8pj-2pwx, MAL-2026-14217 | Malicious | Not scored | 19 Aug, 2026 | npm ai-texts |
Malicious release: Malicious code in mapkit-loader (npm) MAL-2026-14218 | Malicious | Not scored | 19 Aug, 2026 | npm mapkit-loader |
Malicious release: Malicious code in setup-codex (npm) MAL-2026-14219 | Malicious | Not scored | 19 Aug, 2026 | npm setup-codex |
Malicious release: Malicious code in solidity-hold (npm) MAL-2026-14220 | Malicious | Not scored | 19 Aug, 2026 | npm solidity-hold |
Malicious release: Malicious code in ssb-test-package (npm) MAL-2026-14221 | Malicious | Not scored | 19 Aug, 2026 | npm ssb-test-package |
Malicious release: Malicious code in streak-cal-core (npm) MAL-2026-14222 | Malicious | Not scored | 19 Aug, 2026 | npm streak-cal-core |
Malicious release: Malicious code in streak-key-lib (npm) MAL-2026-14223 | Malicious | Not scored | 19 Aug, 2026 | npm streak-key-lib |
Malicious release: Malicious code in streak-metric-test (npm) MAL-2026-14224 | Malicious | Not scored | 19 Aug, 2026 | npm streak-metric-test |
Malicious release: Malicious code in sui-gql-rpc (npm) MAL-2026-14209 | Malicious | Not scored | 19 Aug, 2026 | npm sui-gql-rpc |
Malicious release: Malicious code in sui-graphql-rpc (npm) MAL-2026-14210 | Malicious | Not scored | 19 Aug, 2026 | npm sui-graphql-rpc |
Malicious release: Malicious code in timed-assess (npm) GHSA-mcq8-jp4r-5846, MAL-2026-14216 | Malicious | Not scored | 19 Aug, 2026 | npm timed-assess |
Malicious release: Malicious code in sysc1 (npm) MAL-2026-14214 | Malicious | Not scored | 19 Aug, 2026 | npm sysc1 |
Malicious release: Malicious code in sysdo (npm) MAL-2026-14215 | Malicious | Not scored | 19 Aug, 2026 | npm sysdo |
Malicious release: Malicious code in syjoy (npm) MAL-2026-14213 | Malicious | Not scored | 19 Aug, 2026 | npm syjoy |
Malicious release: Malicious code in syboy (npm) MAL-2026-14212 | Malicious | Not scored | 19 Aug, 2026 | npm syboy |
Malicious release: Malicious code in sw-pluginer (npm) MAL-2026-14211 | Malicious | Not scored | 19 Aug, 2026 | npm sw-pluginer |
Malicious release: Malicious code in eth-batcher (npm) MAL-2026-14208 | Malicious | Not scored | 19 Aug, 2026 | npm eth-batcher |
Malicious release: Malicious code in @lilsccott6x9/devpipe-connector (npm) MAL-2026-14203 | Malicious | Not scored | 19 Aug, 2026 | npm @lilsccott6x9/devpipe-connector |
Malicious release: Malicious code in @sarex-team/viewer (npm) MAL-2026-14207 | Malicious | Not scored | 19 Aug, 2026 | npm @sarex-team/viewer |
Malicious release: Malicious code in @sarex-team/ui-kit (npm) MAL-2026-14206 | Malicious | Not scored | 19 Aug, 2026 | npm @sarex-team/ui-kit |
Malicious release: Malicious code in @sarex-team/sdk-js (npm) MAL-2026-14204 | Malicious | Not scored | 19 Aug, 2026 | npm @sarex-team/sdk-js |
Malicious release: Malicious code in @sarex-team/translator (npm) MAL-2026-14205 | Malicious | Not scored | 19 Aug, 2026 | npm @sarex-team/translator |
Malicious release: Malicious code in chai-as-gateway (npm) MAL-2026-14200 | Malicious | Not scored | 19 Aug, 2026 | npm chai-as-gateway |
Malicious release: Malicious code in chaikit (npm) GHSA-6c2m-985r-wrwm, MAL-2026-14201 | Malicious | Not scored | 19 Aug, 2026 | npm chaikit |
Malicious release: Malicious code in chameleon-src (npm) MAL-2026-14202 | Malicious | Not scored | 19 Aug, 2026 | npm chameleon-src |
Malicious release: Malicious code in tfjs-custom-module (npm) MAL-2026-14196 | Malicious | Not scored | 19 Aug, 2026 | npm tfjs-custom-module |
Malicious release: Malicious code in txs-lib-sdk (npm) GHSA-g36j-xxq9-x243, MAL-2026-14198 | Malicious | Not scored | 19 Aug, 2026 | npm txs-lib-sdk |
Malicious release: Malicious code in tailwind-custom-templates (npm) MAL-2026-14195 | Malicious | Not scored | 19 Aug, 2026 | npm tailwind-custom-templates |