Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @noobaihome/amis-uni-area-widget (npm) MAL-2026-13690 | Malicious | Not scored | 10 Aug, 2026 | npm @noobaihome/amis-uni-area-widget |
Malicious release: Malicious code in cryptostock (npm) MAL-2026-13693 | Malicious | Not scored | 10 Aug, 2026 | npm cryptostock |
Malicious release: Malicious code in env-local (npm) MAL-2026-13694 | Malicious | Not scored | 10 Aug, 2026 | npm env-local |
Malicious release: Malicious code in simple-date-formatter-new-9 (npm) MAL-2026-13698 | Malicious | Not scored | 10 Aug, 2026 | npm simple-date-formatter-new-9 |
Malicious release: Malicious code in simple-date-formatter-new-10 (npm) MAL-2026-13697 | Malicious | Not scored | 10 Aug, 2026 | npm simple-date-formatter-new-10 |
Malicious release: Malicious code in tokocrytodev (npm) MAL-2026-13687 | Malicious | Not scored | 10 Aug, 2026 | npm tokocrytodev |
Malicious release: Malicious code in @ssgw/icon (npm) MAL-2026-13684 | Malicious | Not scored | 10 Aug, 2026 | npm @ssgw/icon |
Malicious release: Malicious code in hex-encode-utils (npm) MAL-2026-13695 | Malicious | Not scored | 10 Aug, 2026 | npm hex-encode-utils |
Malicious release: Malicious code in statist-browser-typed-client-eventea.projects.pwakasko (npm) GHSA-4fvg-gp6j-v2qm, MAL-2026-13673 | Malicious | Not scored | 08 Aug, 2026 | npm statist-browser-typed-client-eventea.projects.pwakasko |
Malicious release: Malicious code in test-noexist-xyz-99 (npm) GHSA-682j-6frp-w6rq, MAL-2026-13680 | Malicious | Not scored | 08 Aug, 2026 | npm test-noexist-xyz-99 |
Malicious release: Malicious code in statist-browser-typed-client-eventea.projects.tdeal (npm) GHSA-966c-8786-6cx7, MAL-2026-13674 | Malicious | Not scored | 08 Aug, 2026 | npm statist-browser-typed-client-eventea.projects.tdeal |
Malicious release: Malicious code in specials-resources-server (npm) GHSA-9wh2-7j4m-r43r, MAL-2026-13669 | Malicious | Not scored | 08 Aug, 2026 | npm specials-resources-server |
Malicious release: Malicious code in statist-browser-typed-client-eventea.projects.pwainsurance (npm) GHSA-hm23-rg8r-xhmg, MAL-2026-13672 | Malicious | Not scored | 08 Aug, 2026 | npm statist-browser-typed-client-eventea.projects.pwainsurance |
Malicious release: Malicious code in statist-browser-typed-client-eventea.projects.pwafamily (npm) GHSA-qmv3-2w4r-rwwq, MAL-2026-13670 | Malicious | Not scored | 08 Aug, 2026 | npm statist-browser-typed-client-eventea.projects.pwafamily |
Malicious release: Malicious code in statist-browser-typed-client-eventea.projects.tdevice (npm) GHSA-rrvf-xjx8-gmjh, MAL-2026-13675 | Malicious | Not scored | 08 Aug, 2026 | npm statist-browser-typed-client-eventea.projects.tdevice |
Malicious release: Malicious code in statist-browser-typed-client-eventea.projects.pwahelp (npm) GHSA-wvc6-wpjx-jgx8, MAL-2026-13671 | Malicious | Not scored | 08 Aug, 2026 | npm statist-browser-typed-client-eventea.projects.pwahelp |
Malicious release: Malicious code in svelte-kit-cache (npm) GHSA-9fg7-rqp2-7hpg, MAL-2026-13677 | Malicious | Not scored | 08 Aug, 2026 | npm svelte-kit-cache |
Malicious release: Malicious code in svelte-streak-kit (npm) GHSA-2w6v-q693-8jjm, MAL-2026-13679 | Malicious | Not scored | 08 Aug, 2026 | npm svelte-streak-kit |
Malicious release: Malicious code in @coralxyz/anchor (npm) MAL-2026-13629 | Malicious | Not scored | 08 Aug, 2026 | npm @coralxyz/anchor |
Malicious release: Malicious code in titan-exchange-shared-permissions (npm) MAL-2026-13664 | Malicious | Not scored | 08 Aug, 2026 | npm titan-exchange-shared-permissions |
Malicious release: Malicious code in modern-localization (npm) MAL-2026-13633 | Malicious | Not scored | 08 Aug, 2026 | npm modern-localization |
Malicious release: Malicious code in localization-fixer (npm) MAL-2026-13631 | Malicious | Not scored | 08 Aug, 2026 | npm localization-fixer |
Malicious release: Malicious code in @rbx-ts/services (npm) MAL-2026-13630 | Malicious | Not scored | 08 Aug, 2026 | npm @rbx-ts/services |
Malicious release: Malicious code in map-streak-kit (npm) GHSA-m55q-8hc5-f46f, MAL-2026-13632 | Malicious | Not scored | 08 Aug, 2026 | npm map-streak-kit |
Malicious release: Malicious code in sme-rko-finance-front-operations-notifications-impl (npm) MAL-2026-13640 | Malicious | Not scored | 08 Aug, 2026 | npm sme-rko-finance-front-operations-notifications-impl |
Malicious release: Malicious code in sme-rko-finance-front-operations-tax (npm) MAL-2026-13649 | Malicious | Not scored | 08 Aug, 2026 | npm sme-rko-finance-front-operations-tax |
Malicious release: Malicious code in sme-rko-finance-front-payments-domain (npm) MAL-2026-13660 | Malicious | Not scored | 08 Aug, 2026 | npm sme-rko-finance-front-payments-domain |
Malicious release: Malicious code in sme-rko-finance-front-payments-feed-adapter (npm) MAL-2026-13661 | Malicious | Not scored | 08 Aug, 2026 | npm sme-rko-finance-front-payments-feed-adapter |
Malicious release: Malicious code in sme-rko-finance-front-payments-currency-payment-domain (npm) MAL-2026-13659 | Malicious | Not scored | 08 Aug, 2026 | npm sme-rko-finance-front-payments-currency-payment-domain |
Malicious release: Malicious code in sme-rko-finance-front-operations-domain (npm) MAL-2026-13634 | Malicious | Not scored | 08 Aug, 2026 | npm sme-rko-finance-front-operations-domain |
Malicious release: Malicious code in sme-rko-finance-front-operations-other (npm) MAL-2026-13642 | Malicious | Not scored | 08 Aug, 2026 | npm sme-rko-finance-front-operations-other |
Malicious release: Malicious code in sme-rko-finance-front-operations-fee (npm) MAL-2026-13635 | Malicious | Not scored | 08 Aug, 2026 | npm sme-rko-finance-front-operations-fee |
Malicious release: Malicious code in sme-rko-finance-front-operations-widget-domain (npm) MAL-2026-13650 | Malicious | Not scored | 08 Aug, 2026 | npm sme-rko-finance-front-operations-widget-domain |
Malicious release: Malicious code in sme-rko-finance-front-operations-pegasus (npm) MAL-2026-13644 | Malicious | Not scored | 08 Aug, 2026 | npm sme-rko-finance-front-operations-pegasus |
Malicious release: Malicious code in sme-rko-finance-front-operations-widget-models (npm) MAL-2026-13652 | Malicious | Not scored | 08 Aug, 2026 | npm sme-rko-finance-front-operations-widget-models |
Malicious release: Malicious code in sme-rko-finance-front-payments-feed-display-list-impl (npm) MAL-2026-13663 | Malicious | Not scored | 08 Aug, 2026 | npm sme-rko-finance-front-payments-feed-display-list-impl |
Malicious release: Malicious code in sme-rko-finance-front-operations-widget-impl (npm) MAL-2026-13651 | Malicious | Not scored | 08 Aug, 2026 | npm sme-rko-finance-front-operations-widget-impl |
Malicious release: Malicious code in sme-rko-finance-front-operations-holding-domain (npm) MAL-2026-13638 | Malicious | Not scored | 08 Aug, 2026 | npm sme-rko-finance-front-operations-holding-domain |
Malicious release: Malicious code in sme-rko-finance-front-operations-providers (npm) MAL-2026-13646 | Malicious | Not scored | 08 Aug, 2026 | npm sme-rko-finance-front-operations-providers |
Malicious release: Malicious code in sme-rko-finance-front-payments-feed-display-list (npm) MAL-2026-13662 | Malicious | Not scored | 08 Aug, 2026 | npm sme-rko-finance-front-payments-feed-display-list |
Malicious release: Malicious code in sme-rko-finance-front-operations-special-payments (npm) MAL-2026-13648 | Malicious | Not scored | 08 Aug, 2026 | npm sme-rko-finance-front-operations-special-payments |
Malicious release: Malicious code in sme-rko-finance-front-payments-currency-payment-actions-operations-repeat-impl (npm) MAL-2026-13657 | Malicious | Not scored | 08 Aug, 2026 | npm sme-rko-finance-front-payments-currency-payment-actions-operations-repeat-impl |
Malicious release: Malicious code in sme-rko-finance-front-operations-notifications-models (npm) MAL-2026-13641 | Malicious | Not scored | 08 Aug, 2026 | npm sme-rko-finance-front-operations-notifications-models |
Malicious release: Malicious code in sme-rko-finance-front-payments-currency-payment-actions-operations-repeat-models (npm) MAL-2026-13658 | Malicious | Not scored | 08 Aug, 2026 | npm sme-rko-finance-front-payments-currency-payment-actions-operations-repeat-models |
Malicious release: Malicious code in sme-rko-finance-front-payments-allowed-tariffs-filter (npm) MAL-2026-13654 | Malicious | Not scored | 08 Aug, 2026 | npm sme-rko-finance-front-payments-allowed-tariffs-filter |
Malicious release: Malicious code in sme-rko-finance-front-operations-shared (npm) MAL-2026-13647 | Malicious | Not scored | 08 Aug, 2026 | npm sme-rko-finance-front-operations-shared |
Malicious release: Malicious code in sme-rko-finance-front-operations-overnight (npm) MAL-2026-13643 | Malicious | Not scored | 08 Aug, 2026 | npm sme-rko-finance-front-operations-overnight |
Malicious release: Malicious code in sme-rko-finance-front-payment-registers-operations-domain (npm) MAL-2026-13653 | Malicious | Not scored | 08 Aug, 2026 | npm sme-rko-finance-front-payment-registers-operations-domain |
Malicious release: Malicious code in sme-rko-finance-front-payments-classic-payment-actions-operations-repeat-models (npm) MAL-2026-13656 | Malicious | Not scored | 08 Aug, 2026 | npm sme-rko-finance-front-payments-classic-payment-actions-operations-repeat-models |
Malicious release: Malicious code in sme-rko-finance-front-operations-income (npm) MAL-2026-13639 | Malicious | Not scored | 08 Aug, 2026 | npm sme-rko-finance-front-operations-income |