Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @nolimit-agent/win32-x64 (npm) GHSA-473g-3cfv-3m59, MAL-2026-13997 | Malicious | Not scored | 13 Aug, 2026 | npm @nolimit-agent/win32-x64 |
Malicious release: Malicious code in @nolimit-agent/linux-x64 (npm) GHSA-x98w-5xvp-qpxj, MAL-2026-13996 | Malicious | Not scored | 13 Aug, 2026 | npm @nolimit-agent/linux-x64 |
Flowise Prompt Injection to RCE and SSRF via CSV/Airtable Agent Python Validator Bypass CVE-2026-73487, GHSA-w7x8-q2gp-5cgg | Critical | 1.0% | 13 Aug, 2026 | npm flowise npm flowise-components |
baseline-browser-mapping process termination on invalid input causes denial of service CVE-2026-45819, GHSA-w5vr-8v7q-w6rv | Medium | 0.5% | 13 Aug, 2026 | npm baseline-browser-mapping |
@fastify/busboy vulnerable to Denial of Service via oversized multipart boundary CVE-2026-19484, GHSA-xjh9-v7x6-24jw | High | 0.6% | 13 Aug, 2026 | npm @fastify/busboy |
@fastify/busboy vulnerable to Denial of Service via prototype-named multipart part header CVE-2026-19481, GHSA-x8mw-p69m-v3mx | High | 0.5% | 13 Aug, 2026 | npm @fastify/busboy |
Malicious release: Malicious code in bs58-15 (npm) MAL-2026-13964 | Malicious | Not scored | 13 Aug, 2026 | npm bs58-15 |
Malicious release: Malicious code in bs58-33 (npm) MAL-2026-14017 | Malicious | Not scored | 13 Aug, 2026 | npm bs58-33 |
Malicious release: Malicious code in bs58-77 (npm) MAL-2026-14018 | Malicious | Not scored | 13 Aug, 2026 | npm bs58-77 |
Malicious release: Malicious code in internallib_v756 (npm) GHSA-933g-5588-v5hp, MAL-2026-13928 | Malicious | Not scored | 12 Aug, 2026 | npm internallib_v756 |
Malicious release: Malicious code in svelte-kit-vim (npm) GHSA-mpgw-38v3-8q5v, MAL-2026-13927 | Malicious | Not scored | 12 Aug, 2026 | npm svelte-kit-vim |
Malicious release: Malicious code in sui-gql (npm) GHSA-4958-mj82-77pj, MAL-2026-13926 | Malicious | Not scored | 12 Aug, 2026 | npm sui-gql |
Malicious release: Malicious code in bcs-compact (npm) GHSA-xr26-x39h-746w, MAL-2026-13925 | Malicious | Not scored | 12 Aug, 2026 | npm bcs-compact |
Malicious release: Malicious code in internallib_v392 (npm) GHSA-j9qq-rx28-vcjh, MAL-2026-13924 | Malicious | Not scored | 12 Aug, 2026 | npm internallib_v392 |
Malicious release: Malicious code in tailwind-form-templates (npm) MAL-2026-13923 | Malicious | Not scored | 12 Aug, 2026 | npm tailwind-form-templates |
Malicious release: Malicious code in passkeys-react (npm) GHSA-j5q8-gq2c-63vq, MAL-2026-13922 | Malicious | Not scored | 12 Aug, 2026 | npm passkeys-react |
Malicious release: Malicious code in bb-twl-k7x2 (npm) MAL-2026-13920 | Malicious | Not scored | 12 Aug, 2026 | npm bb-twl-k7x2 |
Malicious release: Malicious code in @years20/n8n-nodes-utils-helper-g (npm) MAL-2026-13916 | Malicious | Not scored | 12 Aug, 2026 | npm @years20/n8n-nodes-utils-helper-g |
Malicious release: Malicious code in @years20/n8n-nodes-utils-helper-i (npm) MAL-2026-13918 | Malicious | Not scored | 12 Aug, 2026 | npm @years20/n8n-nodes-utils-helper-i |
Malicious release: Malicious code in @years20/n8n-nodes-utils-helper-j (npm) MAL-2026-13919 | Malicious | Not scored | 12 Aug, 2026 | npm @years20/n8n-nodes-utils-helper-j |
Malicious release: Malicious code in @years20/n8n-nodes-utils-helper-h (npm) MAL-2026-13917 | Malicious | Not scored | 12 Aug, 2026 | npm @years20/n8n-nodes-utils-helper-h |
Malicious release: Malicious code in envpack-conf (npm) MAL-2026-13921 | Malicious | Not scored | 12 Aug, 2026 | npm envpack-conf |
Malicious release: Malicious code in kit-map-vim (npm) GHSA-hg96-r46x-6f4w, MAL-2026-13915 | Malicious | Not scored | 12 Aug, 2026 | npm kit-map-vim |
Malicious release: Malicious code in @years19/n8n-nodes-utils-helper-e (npm) MAL-2026-13888 | Malicious | Not scored | 12 Aug, 2026 | npm @years19/n8n-nodes-utils-helper-e |
Malicious release: Malicious code in @years19/n8n-nodes-utils-helper-f (npm) MAL-2026-13889 | Malicious | Not scored | 12 Aug, 2026 | npm @years19/n8n-nodes-utils-helper-f |
Malicious release: Malicious code in @years18/n8n-nodes-utils-helper-y (npm) MAL-2026-13883 | Malicious | Not scored | 12 Aug, 2026 | npm @years18/n8n-nodes-utils-helper-y |
Malicious release: Malicious code in @years19/n8n-nodes-utils-helper-a (npm) MAL-2026-13884 | Malicious | Not scored | 12 Aug, 2026 | npm @years19/n8n-nodes-utils-helper-a |
Malicious release: Malicious code in @years19/n8n-nodes-utils-helper-b (npm) MAL-2026-13885 | Malicious | Not scored | 12 Aug, 2026 | npm @years19/n8n-nodes-utils-helper-b |
Malicious release: Malicious code in @years19/n8n-nodes-utils-helper-d (npm) MAL-2026-13887 | Malicious | Not scored | 12 Aug, 2026 | npm @years19/n8n-nodes-utils-helper-d |
Malicious release: Malicious code in @years19/n8n-nodes-utils-helper-c (npm) MAL-2026-13886 | Malicious | Not scored | 12 Aug, 2026 | npm @years19/n8n-nodes-utils-helper-c |
Malicious release: Malicious code in @years19/n8n-nodes-utils-helper-g (npm) MAL-2026-13890 | Malicious | Not scored | 12 Aug, 2026 | npm @years19/n8n-nodes-utils-helper-g |
Malicious release: Malicious code in @years20/n8n-nodes-utils-helper-c (npm) MAL-2026-13911 | Malicious | Not scored | 12 Aug, 2026 | npm @years20/n8n-nodes-utils-helper-c |
Malicious release: Malicious code in @years20/n8n-nodes-utils-helper-a (npm) MAL-2026-13909 | Malicious | Not scored | 12 Aug, 2026 | npm @years20/n8n-nodes-utils-helper-a |
Malicious release: Malicious code in @years20/n8n-nodes-utils-helper-b (npm) MAL-2026-13910 | Malicious | Not scored | 12 Aug, 2026 | npm @years20/n8n-nodes-utils-helper-b |
Malicious release: Malicious code in @years20/n8n-nodes-utils-helper-f (npm) MAL-2026-13914 | Malicious | Not scored | 12 Aug, 2026 | npm @years20/n8n-nodes-utils-helper-f |
Malicious release: Malicious code in @years19/n8n-nodes-utils-helper-h (npm) MAL-2026-13891 | Malicious | Not scored | 12 Aug, 2026 | npm @years19/n8n-nodes-utils-helper-h |
Malicious release: Malicious code in @years19/n8n-nodes-utils-helper-j (npm) MAL-2026-13893 | Malicious | Not scored | 12 Aug, 2026 | npm @years19/n8n-nodes-utils-helper-j |
Malicious release: Malicious code in @years19/n8n-nodes-utils-helper-i (npm) MAL-2026-13892 | Malicious | Not scored | 12 Aug, 2026 | npm @years19/n8n-nodes-utils-helper-i |
Malicious release: Malicious code in @years19/n8n-nodes-utils-helper-k (npm) MAL-2026-13894 | Malicious | Not scored | 12 Aug, 2026 | npm @years19/n8n-nodes-utils-helper-k |
Malicious release: Malicious code in @years19/n8n-nodes-utils-helper-l (npm) MAL-2026-13895 | Malicious | Not scored | 12 Aug, 2026 | npm @years19/n8n-nodes-utils-helper-l |
Malicious release: Malicious code in @years19/n8n-nodes-utils-helper-n (npm) MAL-2026-13897 | Malicious | Not scored | 12 Aug, 2026 | npm @years19/n8n-nodes-utils-helper-n |
Malicious release: Malicious code in @years19/n8n-nodes-utils-helper-m (npm) MAL-2026-13896 | Malicious | Not scored | 12 Aug, 2026 | npm @years19/n8n-nodes-utils-helper-m |
Malicious release: Malicious code in @years19/n8n-nodes-utils-helper-p (npm) MAL-2026-13899 | Malicious | Not scored | 12 Aug, 2026 | npm @years19/n8n-nodes-utils-helper-p |
Malicious release: Malicious code in @years19/n8n-nodes-utils-helper-r (npm) MAL-2026-13901 | Malicious | Not scored | 12 Aug, 2026 | npm @years19/n8n-nodes-utils-helper-r |
Malicious release: Malicious code in @years19/n8n-nodes-utils-helper-o (npm) MAL-2026-13898 | Malicious | Not scored | 12 Aug, 2026 | npm @years19/n8n-nodes-utils-helper-o |
Malicious release: Malicious code in @years19/n8n-nodes-utils-helper-t (npm) MAL-2026-13903 | Malicious | Not scored | 12 Aug, 2026 | npm @years19/n8n-nodes-utils-helper-t |
Malicious release: Malicious code in @years19/n8n-nodes-utils-helper-v (npm) MAL-2026-13905 | Malicious | Not scored | 12 Aug, 2026 | npm @years19/n8n-nodes-utils-helper-v |
Malicious release: Malicious code in @years19/n8n-nodes-utils-helper-u (npm) MAL-2026-13904 | Malicious | Not scored | 12 Aug, 2026 | npm @years19/n8n-nodes-utils-helper-u |
Malicious release: Malicious code in @years19/n8n-nodes-utils-helper-s (npm) MAL-2026-13902 | Malicious | Not scored | 12 Aug, 2026 | npm @years19/n8n-nodes-utils-helper-s |
Malicious release: Malicious code in @years20/n8n-nodes-utils-helper-e (npm) MAL-2026-13913 | Malicious | Not scored | 12 Aug, 2026 | npm @years20/n8n-nodes-utils-helper-e |