Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in orderbook-volt-plugin (npm) GHSA-w9pq-6r9f-pj96, MAL-2026-18393 | Malicious | Not scored | 2 hours ago | npm orderbook-volt-plugin |
Malicious release: Malicious code in react-native-drago-callkit (npm) GHSA-jp74-4rg3-7ppj, MAL-2026-18394 | Malicious | Not scored | 2 hours ago | npm react-native-drago-callkit |
Malicious release: Malicious code in @chatunitycenter/baileys (npm) GHSA-g6j7-j669-23g6, MAL-2026-18392 | Malicious | Not scored | 4 hours ago | npm @chatunitycenter/baileys |
Malicious release: Malicious code in 789bet-vip-login (npm) GHSA-4rjq-j97h-cqxc, MAL-2026-18387 | Malicious | Not scored | 5 hours ago | npm 789bet-vip-login |
Malicious release: Malicious code in 789bet-entrance (npm) GHSA-6xqc-cfvp-q89v, MAL-2026-18383 | Malicious | Not scored | 5 hours ago | npm 789bet-entrance |
Malicious release: Malicious code in 789bet-vip-online-login (npm) GHSA-f5mv-v4rc-qq2q, MAL-2026-18388 | Malicious | Not scored | 5 hours ago | npm 789bet-vip-online-login |
Malicious release: Malicious code in 789bet-slot (npm) GHSA-q68g-454g-9qww, MAL-2026-18385 | Malicious | Not scored | 5 hours ago | npm 789bet-slot |
Malicious release: Malicious code in 789bet-vip (npm) GHSA-rvxc-82gp-xpr6, MAL-2026-18386 | Malicious | Not scored | 5 hours ago | npm 789bet-vip |
Malicious release: Malicious code in 789bet-login-th (npm) GHSA-wg3r-wqgc-7fgf, MAL-2026-18384 | Malicious | Not scored | 5 hours ago | npm 789bet-login-th |
Malicious release: Malicious code in m98bet (npm) GHSA-6ggw-hqvq-8wcm, MAL-2026-18389 | Malicious | Not scored | 5 hours ago | npm m98bet |
Malicious release: Malicious code in 789bet (npm) GHSA-cccw-qphx-7whg, MAL-2026-18382 | Malicious | Not scored | 5 hours ago | npm 789bet |
Malicious release: Malicious code in m98vip (npm) GHSA-gp92-xqcg-876c, MAL-2026-18391 | Malicious | Not scored | 5 hours ago | npm m98vip |
Malicious release: Malicious code in m98th (npm) GHSA-x82c-crm3-jcwv, MAL-2026-18390 | Malicious | Not scored | 5 hours ago | npm m98th |
Malicious release: Malicious code in @jasperquinn/postcss-motion-helpers (npm) GHSA-88vx-c9pj-9527, MAL-2026-18379 | Malicious | Not scored | 6 hours ago | npm @jasperquinn/postcss-motion-helpers |
Malicious release: Malicious code in black-spindle-2 (npm) MAL-2026-18376 | Malicious | Not scored | 6 hours ago | npm black-spindle-2 |
Malicious release: Malicious code in spectral-core (npm) MAL-2026-18377 | Malicious | Not scored | 6 hours ago | npm spectral-core |
Malicious release: Malicious code in @dmangal/curse-dependent-ecto (npm) MAL-2026-18375 | Malicious | Not scored | 6 hours ago | npm @dmangal/curse-dependent-ecto |
Malicious release: Malicious code in cjlowuxbnexkhgpzq (npm) GHSA-pr23-gvcv-c422, MAL-2026-18381 | Malicious | Not scored | 6 hours ago | npm cjlowuxbnexkhgpzq |
Malicious release: Malicious code in bcxhdh1kjlopsde (npm) GHSA-v78q-7787-v9rq, MAL-2026-18380 | Malicious | Not scored | 6 hours ago | npm bcxhdh1kjlopsde |
Malicious release: Malicious code in mw-communication-client (npm) MAL-2026-18370 | Malicious | Not scored | 7 hours ago | npm mw-communication-client |
Malicious release: Malicious code in mw-test-utils (npm) MAL-2026-18371 | Malicious | Not scored | 7 hours ago | npm mw-test-utils |
Malicious release: Malicious code in mui-wrapper-x-date-pickers (npm) MAL-2026-18369 | Malicious | Not scored | 7 hours ago | npm mui-wrapper-x-date-pickers |
Malicious release: Malicious code in monte-md-baileys (npm) MAL-2026-17399 | Malicious | Not scored | 7 hours ago | npm monte-md-baileys |
Malicious release: Malicious code in noxleyss (npm) MAL-2026-17402 | Malicious | Not scored | 7 hours ago | npm noxleyss |
Malicious release: Malicious code in @rennnpm/baileys (npm) MAL-2026-17374 | Malicious | Not scored | 7 hours ago | npm @rennnpm/baileys |
Malicious release: Malicious code in @testsecuiitytestme/cache-helper (npm) MAL-2026-18358 | Malicious | Not scored | 8 hours ago | npm @testsecuiitytestme/cache-helper |
Malicious release: Malicious code in dsh-volcengine-provider (npm) GHSA-8hr2-m7vq-fhpg, MAL-2026-18374 | Malicious | Not scored | 11 hours ago | npm dsh-volcengine-provider |
Malicious release: Malicious code in dsh-redteam-mode (npm) GHSA-r4m9-8735-g966, MAL-2026-18366 | Malicious | Not scored | 15 hours ago | npm dsh-redteam-mode |
Malicious release: Malicious code in b20miner (npm) GHSA-fw7x-6chc-4244, MAL-2026-18365 | Malicious | Not scored | 22 hours ago | npm b20miner |
Malicious release: Malicious code in @zaip-ai/cli (npm) GHSA-ffq4-h5jm-8pqr, MAL-2026-18364 | Malicious | Not scored | 1 day ago | npm @zaip-ai/cli |
Malicious release: Malicious code in itsa-utils (npm) GHSA-x788-rmcm-4x49, MAL-2026-18363 | Malicious | Not scored | 1 day ago | npm itsa-utils |
Malicious release: Malicious code in itsa-react-checkbox (npm) GHSA-46r9-rx5f-hqqf, MAL-2026-18360 | Malicious | Not scored | 1 day ago | npm itsa-react-checkbox |
Malicious release: Malicious code in transaction-info-generate-sdk (npm) GHSA-23j5-jj88-v9f3, MAL-2026-18362 | Malicious | Not scored | 1 day ago | npm transaction-info-generate-sdk |
Malicious release: Malicious code in mock-transactions-sdk (npm) GHSA-357r-x5jp-3p8f, MAL-2026-18361 | Malicious | Not scored | 1 day ago | npm mock-transactions-sdk |
Malicious release: Malicious code in black-spindle (npm) MAL-2026-18359 | Malicious | Not scored | 1 day ago | npm black-spindle |
Malicious release: Malicious code in @zmtcdn/components (npm) MAL-2026-18372 | Malicious | Not scored | 1 day ago | npm @zmtcdn/components |
Malicious release: Malicious code in @zmtcdn/ui (npm) MAL-2026-18373 | Malicious | Not scored | 1 day ago | npm @zmtcdn/ui |
Malicious release: Malicious code in identity-two-factor (npm) MAL-2026-18367 | Malicious | Not scored | 1 day ago | npm identity-two-factor |
Malicious release: Malicious code in spectral-net-probe (npm) MAL-2026-18368 | Malicious | Not scored | 1 day ago | npm spectral-net-probe |
Malicious release: Malicious code in glyphmatrix-fixture (npm) GHSA-vc33-3x34-x6jm, MAL-2026-18355 | Malicious | Not scored | 1 day ago | npm glyphmatrix-fixture |
Malicious release: Malicious code in ccsec-crypto-toolkit (npm) GHSA-2732-c6cp-rx5v, MAL-2026-18347 | Malicious | Not scored | 1 day ago | npm ccsec-crypto-toolkit |
Malicious release: Malicious code in ccsseecc-form-validator (npm) GHSA-h5wr-j55v-8m79, MAL-2026-18350 | Malicious | Not scored | 1 day ago | npm ccsseecc-form-validator |
Malicious release: Malicious code in csec-form-validatorr (npm) GHSA-ph3g-jrf5-8792, MAL-2026-18353 | Malicious | Not scored | 1 day ago | npm csec-form-validatorr |
Malicious release: Malicious code in ccsec-form-validator (npm) GHSA-r889-j2qv-2jv6, MAL-2026-18348 | Malicious | Not scored | 1 day ago | npm ccsec-form-validator |
Malicious release: Malicious code in csec-crypto-toolkit (npm) GHSA-v383-2358-576w, MAL-2026-18351 | Malicious | Not scored | 1 day ago | npm csec-crypto-toolkit |
Malicious release: Malicious code in ccsseecc-crypto-toolkit (npm) GHSA-v9xw-mxj4-fm5q, MAL-2026-18349 | Malicious | Not scored | 1 day ago | npm ccsseecc-crypto-toolkit |
Malicious release: Malicious code in csec-form-validator (npm) GHSA-wh86-6qm8-xgw2, MAL-2026-18352 | Malicious | Not scored | 1 day ago | npm csec-form-validator |
Malicious release: Malicious code in agentenact (npm) GHSA-7p7m-8jmq-qp93, MAL-2026-18346 | Malicious | Not scored | 1 day ago | npm agentenact |
Malicious release: Malicious code in dsh-vm-tester (npm) GHSA-84fw-gj66-p5v3, MAL-2026-18345 | Malicious | Not scored | 2 days ago | npm dsh-vm-tester |
Malicious release: Malicious code in @webapp-shared/login-vmok (npm) MAL-2026-18356 | Malicious | Not scored | 2 days ago | npm @webapp-shared/login-vmok |