Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @beloved-lenora/opencode-stats (npm) GHSA-f4h2-68pg-ffhj, MAL-2026-17908 | Malicious | Not scored | 14 days ago | npm @beloved-lenora/opencode-stats |
Malicious release: Malicious code in @beloved-lenora/opencode-shell-guard (npm) GHSA-pm76-w63j-7j29, MAL-2026-17907 | Malicious | Not scored | 14 days ago | npm @beloved-lenora/opencode-shell-guard |
Malicious release: Malicious code in @beloved-lenora/opencode-btw (npm) GHSA-xv54-6gmc-3xph, MAL-2026-17903 | Malicious | Not scored | 14 days ago | npm @beloved-lenora/opencode-btw |
Malicious release: Malicious code in @xatancchii/natabaileys (npm) GHSA-cgq9-cff6-pf33, MAL-2026-17901 | Malicious | Not scored | 14 days ago | npm @xatancchii/natabaileys |
Malicious release: Malicious code in parxleys (npm) GHSA-rg3c-8x72-6pmc, MAL-2026-17902 | Malicious | Not scored | 14 days ago | npm parxleys |
Malicious release: Malicious code in @flexmr/survey-conversation (npm) GHSA-hc8w-gq4q-fr74, MAL-2026-17899 | Malicious | Not scored | 14 days ago | npm @flexmr/survey-conversation |
Malicious release: Malicious code in @flexmr/survey-client (npm) GHSA-rh7q-f888-q36c, MAL-2026-17898 | Malicious | Not scored | 14 days ago | npm @flexmr/survey-client |
Malicious release: Malicious code in xmd-baileys (npm) GHSA-m3qf-j9rf-pqrh, MAL-2026-17892 | Malicious | Not scored | 15 days ago | npm xmd-baileys |
Malicious release: Malicious code in @developmentyora/baileyss (npm) GHSA-v8xh-mr86-2fpq, MAL-2026-17439 | Malicious | Not scored | 15 days ago | npm @developmentyora/baileyss |
Malicious release: Malicious code in @developmentyora/yorakids (npm) GHSA-xgr5-84p3-qqmf, MAL-2026-17890 | Malicious | Not scored | 15 days ago | npm @developmentyora/yorakids |
Malicious release: Malicious code in asistenyorstore (npm) GHSA-qgh5-36wr-3vvw, MAL-2026-17891 | Malicious | Not scored | 15 days ago | npm asistenyorstore |
Malicious release: Malicious code in @celestial-community/baileys (npm) GHSA-5ghv-64gv-gv29, MAL-2026-17438 | Malicious | Not scored | 15 days ago | npm @celestial-community/baileys |
Malicious release: Malicious code in @apexacc/audit (npm) MAL-2026-17923 | Malicious | Not scored | 15 days ago | npm @apexacc/audit |
Malicious release: Malicious code in buyerdashboard (npm) MAL-2026-17893 | Malicious | Not scored | 15 days ago | npm buyerdashboard |
Malicious release: Malicious code in xapi-lib (npm) MAL-2026-17896 | Malicious | Not scored | 15 days ago | npm xapi-lib |
Malicious release: Malicious code in web-pixels-manager (npm) MAL-2026-17895 | Malicious | Not scored | 15 days ago | npm web-pixels-manager |
Malicious release: Malicious code in idlive-face-capture-web-development (npm) MAL-2026-17894 | Malicious | Not scored | 15 days ago | npm idlive-face-capture-web-development |
Malicious release: Malicious code in tailwindcss-uniform (npm) GHSA-r7f7-6833-rxh9, MAL-2026-17882 | Malicious | Not scored | 15 days ago | npm tailwindcss-uniform |
Malicious release: Malicious code in @xxxfnbs21/hello-demo (npm) GHSA-hf57-6wg3-343x, MAL-2026-17876 | Malicious | Not scored | 16 days ago | npm @xxxfnbs21/hello-demo |
Malicious release: Malicious code in @flexmr/utils (npm) GHSA-hpc9-fxqh-hhf8, MAL-2026-17888 | Malicious | Not scored | 17 days ago | npm @flexmr/utils |
Malicious release: Malicious code in @kre64/hello-npm-test (npm) GHSA-c43r-xf4h-m548, MAL-2026-17868 | Malicious | Not scored | 17 days ago | npm @kre64/hello-npm-test |
Malicious release: Malicious code in @flexmr/ui (npm) MAL-2026-17879 | Malicious | Not scored | 17 days ago | npm @flexmr/ui |
Malicious release: Malicious code in opencode2-darwin-arm64 (npm) GHSA-36mq-frp2-jc97, MAL-2026-17853 | Malicious | Not scored | 17 days ago | npm opencode2-darwin-arm64 |
Malicious release: Malicious code in opencode2-linux-x64 (npm) GHSA-3jr5-3qvm-r54h, MAL-2026-17857 | Malicious | Not scored | 17 days ago | npm opencode2-linux-x64 |
Malicious release: Malicious code in opencode2-windows-x64 (npm) GHSA-6x5j-r784-fx6j, MAL-2026-17860 | Malicious | Not scored | 17 days ago | npm opencode2-windows-x64 |
Malicious release: Malicious code in opencode2 (npm) GHSA-8w65-j2wh-mqv7, MAL-2026-17852 | Malicious | Not scored | 17 days ago | npm opencode2 |
Malicious release: Malicious code in opencode2-linux-arm64-musl (npm) GHSA-cm8m-24p9-hh65, MAL-2026-17856 | Malicious | Not scored | 17 days ago | npm opencode2-linux-arm64-musl |
Malicious release: Malicious code in opencode2-darwin-x64 (npm) GHSA-pmv2-r2q9-rmg9, MAL-2026-17854 | Malicious | Not scored | 17 days ago | npm opencode2-darwin-x64 |
Malicious release: Malicious code in opencode2-linux-x64-musl (npm) GHSA-qx7m-vw4p-xv3j, MAL-2026-17858 | Malicious | Not scored | 17 days ago | npm opencode2-linux-x64-musl |
Malicious release: Malicious code in opencode2-windows-arm64 (npm) GHSA-xr5m-85hf-27r5, MAL-2026-17859 | Malicious | Not scored | 17 days ago | npm opencode2-windows-arm64 |
Malicious release: Malicious code in opencode2-linux-arm64 (npm) GHSA-xwcq-r6hw-mc5p, MAL-2026-17855 | Malicious | Not scored | 17 days ago | npm opencode2-linux-arm64 |
Malicious release: Malicious code in yoodan-github-single-ver-pkg (npm) GHSA-2946-w5c6-hcw2, MAL-2026-17851 | Malicious | Not scored | 17 days ago | npm yoodan-github-single-ver-pkg |
Malicious release: Malicious code in @accenturecodefoundry/mfe-pot-shared-ui-scds-core (npm) MAL-2026-17867 | Malicious | Not scored | 17 days ago | npm @accenturecodefoundry/mfe-pot-shared-ui-scds-core |
Malicious release: Malicious code in @chatest/baileys (npm) GHSA-c2gc-jwcq-w8r3, MAL-2026-17850 | Malicious | Not scored | 17 days ago | npm @chatest/baileys |
Malicious release: Malicious code in brass-common (npm) GHSA-g6mf-8rwx-xgwh, MAL-2026-17849 | Malicious | Not scored | 17 days ago | npm brass-common |
Malicious release: Malicious code in @mntv-analysis/ui (npm) MAL-2026-17869 | Malicious | Not scored | 18 days ago | npm @mntv-analysis/ui |
Malicious release: Malicious code in @mntv-analysis/ui-components (npm) MAL-2026-17870 | Malicious | Not scored | 18 days ago | npm @mntv-analysis/ui-components |
Malicious release: Malicious code in @mntv-analysis/workspaces-components (npm) MAL-2026-17871 | Malicious | Not scored | 18 days ago | npm @mntv-analysis/workspaces-components |
Malicious release: Malicious code in @newspage/lib-ng-async-routes-ui (npm) MAL-2026-17872 | Malicious | Not scored | 18 days ago | npm @newspage/lib-ng-async-routes-ui |
Malicious release: Malicious code in @newspage/libx-amount (npm) MAL-2026-17873 | Malicious | Not scored | 18 days ago | npm @newspage/libx-amount |
Malicious release: Malicious code in @user-interface-common/common-styles (npm) MAL-2026-17874 | Malicious | Not scored | 18 days ago | npm @user-interface-common/common-styles |
Malicious release: Malicious code in monkey-tags-ip (npm) MAL-2026-17875 | Malicious | Not scored | 18 days ago | npm monkey-tags-ip |
Malicious release: Malicious code in @zanta/baileys (npm) GHSA-2rh8-cvqq-44jf, MAL-2026-17443 | Malicious | Not scored | 18 days ago | npm @zanta/baileys |
Malicious release: Malicious code in @yudzxml/baileys (npm) GHSA-qh6w-wgpq-j344, MAL-2026-17846 | Malicious | Not scored | 18 days ago | npm @yudzxml/baileys |
Malicious release: Malicious code in @xrelly-stack/bails (npm) GHSA-8qfw-qm7w-8239, MAL-2026-17843 | Malicious | Not scored | 18 days ago | npm @xrelly-stack/bails |
Malicious release: Malicious code in node-telegram-sockets (npm) GHSA-c773-2559-g4g3, MAL-2026-17845 | Malicious | Not scored | 18 days ago | npm node-telegram-sockets |
Malicious release: Malicious code in @wanzxlonelyy/bailslonely (npm) GHSA-r69x-4p42-hrf9, MAL-2026-17841 | Malicious | Not scored | 18 days ago | npm @wanzxlonelyy/bailslonely |
Malicious release: Malicious code in @wanzlonely/bails4u (npm) GHSA-4327-j8v7-q48w, MAL-2026-17381 | Malicious | Not scored | 18 days ago | npm @wanzlonely/bails4u |
Malicious release: Malicious code in @wanzlonelyy/bailslonely (npm) GHSA-rj8v-mcc6-hf5c, MAL-2026-17840 | Malicious | Not scored | 18 days ago | npm @wanzlonelyy/bailslonely |
Malicious release: Malicious code in @wanzlonely/bailsme (npm) GHSA-4h3p-p24h-82rf, MAL-2026-17839 | Malicious | Not scored | 18 days ago | npm @wanzlonely/bailsme |