Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in iconova-react (npm) GHSA-mvp5-cv38-rqfj, MAL-2026-13705 | Malicious | Not scored | 10 Aug, 2026 | npm iconova-react |
Malicious release: Malicious code in @kuperka/chainguard-sdk (npm) MAL-2026-13688 | Malicious | Not scored | 10 Aug, 2026 | npm @kuperka/chainguard-sdk |
Malicious release: Malicious code in @rblxts/services (npm) MAL-2026-13691 | Malicious | Not scored | 10 Aug, 2026 | npm @rblxts/services |
Malicious release: Malicious code in postcss-initial-provider (npm) GHSA-44hx-h55m-c65w, MAL-2026-13696 | Malicious | Not scored | 10 Aug, 2026 | npm postcss-initial-provider |
Malicious release: Malicious code in chai-jsonss (npm) MAL-2026-13692 | Malicious | Not scored | 10 Aug, 2026 | npm chai-jsonss |
Malicious release: Malicious code in @noobaihome/amis-simple-area-widget (npm) MAL-2026-13689 | Malicious | Not scored | 10 Aug, 2026 | npm @noobaihome/amis-simple-area-widget |
Malicious release: Malicious code in @noobaihome/amis-uni-area-widget (npm) MAL-2026-13690 | Malicious | Not scored | 10 Aug, 2026 | npm @noobaihome/amis-uni-area-widget |
Malicious release: Malicious code in cryptostock (npm) MAL-2026-13693 | Malicious | Not scored | 10 Aug, 2026 | npm cryptostock |
Malicious release: Malicious code in env-local (npm) MAL-2026-13694 | Malicious | Not scored | 10 Aug, 2026 | npm env-local |
Malicious release: Malicious code in simple-date-formatter-new-9 (npm) MAL-2026-13698 | Malicious | Not scored | 10 Aug, 2026 | npm simple-date-formatter-new-9 |
Malicious release: Malicious code in simple-date-formatter-new-10 (npm) MAL-2026-13697 | Malicious | Not scored | 10 Aug, 2026 | npm simple-date-formatter-new-10 |
Malicious release: Malicious code in tokocrytodev (npm) MAL-2026-13687 | Malicious | Not scored | 10 Aug, 2026 | npm tokocrytodev |
Malicious release: Malicious code in chaintest (PyPI) MAL-2026-13686 | Malicious | Not scored | 10 Aug, 2026 | PyPI chaintest |
Malicious release: Malicious code in pytablute (PyPI) MAL-2026-13685 | Malicious | Not scored | 10 Aug, 2026 | PyPI pytablute |
Malicious release: Malicious code in @ssgw/icon (npm) MAL-2026-13684 | Malicious | Not scored | 10 Aug, 2026 | npm @ssgw/icon |
Malicious release: Malicious code in btcflx (PyPI) MAL-2026-13682 | Malicious | Not scored | 10 Aug, 2026 | PyPI btcflx |
Malicious release: Malicious code in btcflip (PyPI) MAL-2026-13681 | Malicious | Not scored | 10 Aug, 2026 | PyPI btcflip |
Malicious release: Malicious code in kotoraka (PyPI) MAL-2026-13683 | Malicious | Not scored | 10 Aug, 2026 | PyPI kotoraka |
Malicious release: Malicious code in hex-encode-utils (npm) MAL-2026-13695 | Malicious | Not scored | 10 Aug, 2026 | npm hex-encode-utils |
Malicious release: Malicious code in kotanku (PyPI) MAL-2026-13667 | Malicious | Not scored | 09 Aug, 2026 | PyPI kotanku |
Malicious release: Malicious code in cubesat-upstream-driver (PyPI) MAL-2026-13666 | Malicious | Not scored | 09 Aug, 2026 | PyPI cubesat-upstream-driver |
Malicious release: Malicious code in riakcs (PyPI) MAL-2026-13665 | Malicious | Not scored | 08 Aug, 2026 | PyPI riakcs |
Malicious release: Malicious code in statist-browser-typed-client-eventea.projects.pwakasko (npm) GHSA-4fvg-gp6j-v2qm, MAL-2026-13673 | Malicious | Not scored | 08 Aug, 2026 | npm statist-browser-typed-client-eventea.projects.pwakasko |
Malicious release: Malicious code in test-noexist-xyz-99 (npm) GHSA-682j-6frp-w6rq, MAL-2026-13680 | Malicious | Not scored | 08 Aug, 2026 | npm test-noexist-xyz-99 |
Malicious release: Malicious code in statist-browser-typed-client-eventea.projects.tdeal (npm) GHSA-966c-8786-6cx7, MAL-2026-13674 | Malicious | Not scored | 08 Aug, 2026 | npm statist-browser-typed-client-eventea.projects.tdeal |
Malicious release: Malicious code in specials-resources-server (npm) GHSA-9wh2-7j4m-r43r, MAL-2026-13669 | Malicious | Not scored | 08 Aug, 2026 | npm specials-resources-server |
Malicious release: Malicious code in statist-browser-typed-client-eventea.projects.pwainsurance (npm) GHSA-hm23-rg8r-xhmg, MAL-2026-13672 | Malicious | Not scored | 08 Aug, 2026 | npm statist-browser-typed-client-eventea.projects.pwainsurance |
Malicious release: Malicious code in statist-browser-typed-client-eventea.projects.pwafamily (npm) GHSA-qmv3-2w4r-rwwq, MAL-2026-13670 | Malicious | Not scored | 08 Aug, 2026 | npm statist-browser-typed-client-eventea.projects.pwafamily |
Malicious release: Malicious code in statist-browser-typed-client-eventea.projects.tdevice (npm) GHSA-rrvf-xjx8-gmjh, MAL-2026-13675 | Malicious | Not scored | 08 Aug, 2026 | npm statist-browser-typed-client-eventea.projects.tdevice |
Malicious release: Malicious code in statist-browser-typed-client-eventea.projects.pwahelp (npm) GHSA-wvc6-wpjx-jgx8, MAL-2026-13671 | Malicious | Not scored | 08 Aug, 2026 | npm statist-browser-typed-client-eventea.projects.pwahelp |
Malicious release: Malicious code in svelte-kit-cache (npm) GHSA-9fg7-rqp2-7hpg, MAL-2026-13677 | Malicious | Not scored | 08 Aug, 2026 | npm svelte-kit-cache |
Malicious release: Malicious code in svelte-streak-kit (npm) GHSA-2w6v-q693-8jjm, MAL-2026-13679 | Malicious | Not scored | 08 Aug, 2026 | npm svelte-streak-kit |
Malicious release: Malicious code in @coralxyz/anchor (npm) MAL-2026-13629 | Malicious | Not scored | 08 Aug, 2026 | npm @coralxyz/anchor |
Malicious release: Malicious code in titan-exchange-shared-permissions (npm) MAL-2026-13664 | Malicious | Not scored | 08 Aug, 2026 | npm titan-exchange-shared-permissions |
Malicious release: Malicious code in modern-localization (npm) MAL-2026-13633 | Malicious | Not scored | 08 Aug, 2026 | npm modern-localization |
Malicious release: Malicious code in localization-fixer (npm) MAL-2026-13631 | Malicious | Not scored | 08 Aug, 2026 | npm localization-fixer |
Malicious release: Malicious code in @rbx-ts/services (npm) MAL-2026-13630 | Malicious | Not scored | 08 Aug, 2026 | npm @rbx-ts/services |
Malicious release: Malicious code in map-streak-kit (npm) GHSA-m55q-8hc5-f46f, MAL-2026-13632 | Malicious | Not scored | 08 Aug, 2026 | npm map-streak-kit |
Malicious release: Malicious code in sme-rko-finance-front-operations-notifications-impl (npm) MAL-2026-13640 | Malicious | Not scored | 08 Aug, 2026 | npm sme-rko-finance-front-operations-notifications-impl |
Malicious release: Malicious code in sme-rko-finance-front-operations-tax (npm) MAL-2026-13649 | Malicious | Not scored | 08 Aug, 2026 | npm sme-rko-finance-front-operations-tax |
Malicious release: Malicious code in sme-rko-finance-front-payments-domain (npm) MAL-2026-13660 | Malicious | Not scored | 08 Aug, 2026 | npm sme-rko-finance-front-payments-domain |
Malicious release: Malicious code in sme-rko-finance-front-payments-feed-adapter (npm) MAL-2026-13661 | Malicious | Not scored | 08 Aug, 2026 | npm sme-rko-finance-front-payments-feed-adapter |
Malicious release: Malicious code in sme-rko-finance-front-payments-currency-payment-domain (npm) MAL-2026-13659 | Malicious | Not scored | 08 Aug, 2026 | npm sme-rko-finance-front-payments-currency-payment-domain |
Malicious release: Malicious code in sme-rko-finance-front-operations-domain (npm) MAL-2026-13634 | Malicious | Not scored | 08 Aug, 2026 | npm sme-rko-finance-front-operations-domain |
Malicious release: Malicious code in sme-rko-finance-front-operations-other (npm) MAL-2026-13642 | Malicious | Not scored | 08 Aug, 2026 | npm sme-rko-finance-front-operations-other |
Malicious release: Malicious code in sme-rko-finance-front-operations-fee (npm) MAL-2026-13635 | Malicious | Not scored | 08 Aug, 2026 | npm sme-rko-finance-front-operations-fee |
Malicious release: Malicious code in sme-rko-finance-front-operations-widget-domain (npm) MAL-2026-13650 | Malicious | Not scored | 08 Aug, 2026 | npm sme-rko-finance-front-operations-widget-domain |
Malicious release: Malicious code in sme-rko-finance-front-operations-pegasus (npm) MAL-2026-13644 | Malicious | Not scored | 08 Aug, 2026 | npm sme-rko-finance-front-operations-pegasus |
Malicious release: Malicious code in sme-rko-finance-front-operations-widget-models (npm) MAL-2026-13652 | Malicious | Not scored | 08 Aug, 2026 | npm sme-rko-finance-front-operations-widget-models |
Malicious release: Malicious code in sme-rko-finance-front-payments-feed-display-list-impl (npm) MAL-2026-13663 | Malicious | Not scored | 08 Aug, 2026 | npm sme-rko-finance-front-payments-feed-display-list-impl |