Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in postcss-theme-provider (npm) GHSA-36cv-vvf7-gj75, MAL-2026-13518 | Malicious | Not scored | 07 Aug, 2026 | npm postcss-theme-provider |
Malicious release: Malicious code in forge-gas-diff (npm) MAL-2026-13516 | Malicious | Not scored | 07 Aug, 2026 | npm forge-gas-diff |
Malicious release: Malicious code in gas-diff-core (npm) MAL-2026-13517 | Malicious | Not scored | 07 Aug, 2026 | npm gas-diff-core |
Malicious release: Malicious code in speed-hashes (PyPI) MAL-2026-13607 | Malicious | Not scored | 07 Aug, 2026 | PyPI speed-hashes |
Malicious release: Malicious code in fast-hashes (PyPI) MAL-2026-13490 | Malicious | Not scored | 07 Aug, 2026 | PyPI fast-hashes |
Malicious release: Malicious code in idnna (PyPI) MAL-2026-13488 | Malicious | Not scored | 07 Aug, 2026 | PyPI idnna |
Malicious release: Malicious code in pydanticc (PyPI) MAL-2026-13489 | Malicious | Not scored | 07 Aug, 2026 | PyPI pydanticc |
Malicious release: Malicious code in fastapii (PyPI) MAL-2026-13486 | Malicious | Not scored | 07 Aug, 2026 | PyPI fastapii |
Malicious release: Malicious code in flasq (PyPI) MAL-2026-13487 | Malicious | Not scored | 07 Aug, 2026 | PyPI flasq |
Malicious release: Malicious code in rdfxvela (npm) GHSA-7485-r458-jppf, MAL-2026-13491 | Malicious | Not scored | 07 Aug, 2026 | npm rdfxvela |
Malicious release: Malicious code in rdfxvela-build (npm) GHSA-jw4p-5x7w-fcm4, MAL-2026-13492 | Malicious | Not scored | 07 Aug, 2026 | npm rdfxvela-build |
Malicious release: Malicious code in velabuild (npm) GHSA-q7w3-723m-252j, MAL-2026-13493 | Malicious | Not scored | 07 Aug, 2026 | npm velabuild |
Malicious release: Malicious code in @prototypevip/baileys (npm) MAL-2026-13480 | Malicious | Not scored | 06 Aug, 2026 | npm @prototypevip/baileys |
Malicious release: Malicious code in merge-grid-stats (npm) MAL-2026-13484 | Malicious | Not scored | 06 Aug, 2026 | npm merge-grid-stats |
Malicious release: Malicious code in diezyclutch-baileys (npm) GHSA-89rf-mgch-fg9m, MAL-2026-13482 | Malicious | Not scored | 06 Aug, 2026 | npm diezyclutch-baileys |
Malicious release: Malicious code in cdf-tag-commander-helper (npm) MAL-2026-13481 | Malicious | Not scored | 06 Aug, 2026 | npm cdf-tag-commander-helper |
Malicious release: Malicious code in @cats-cdf/authentication (npm) MAL-2026-13478 | Malicious | Not scored | 06 Aug, 2026 | npm @cats-cdf/authentication |
Malicious release: Malicious code in @cats-cdf/browser-metrics-meter (npm) MAL-2026-13479 | Malicious | Not scored | 06 Aug, 2026 | npm @cats-cdf/browser-metrics-meter |
Malicious release: Malicious code in weight2loss (npm) MAL-2026-13485 | Malicious | Not scored | 06 Aug, 2026 | npm weight2loss |
Malicious release: Malicious code in internallib_v514 (npm) MAL-2026-13483 | Malicious | Not scored | 06 Aug, 2026 | npm internallib_v514 |
Malicious release: Malicious code in remote-claude-daemon (npm) MAL-2026-13455 | Malicious | Not scored | 06 Aug, 2026 | npm remote-claude-daemon |
Malicious release: Malicious code in santana-baileys (npm) GHSA-g55h-m33r-qg9r, MAL-2026-13456 | Malicious | Not scored | 06 Aug, 2026 | npm santana-baileys |
Malicious release: Malicious code in shadowx-fca (npm) MAL-2026-13457 | Malicious | Not scored | 06 Aug, 2026 | npm shadowx-fca |
Malicious release: Malicious code in squeez (npm) MAL-2026-13458 | Malicious | Not scored | 06 Aug, 2026 | npm squeez |
Malicious release: Malicious code in supersig (npm) GHSA-vjp6-7fgj-3cgm, MAL-2026-13461 | Malicious | Not scored | 06 Aug, 2026 | npm supersig |
Malicious release: Malicious code in trimprompt (npm) MAL-2026-13462 | Malicious | Not scored | 06 Aug, 2026 | npm trimprompt |
Malicious release: Malicious code in vite-plugin-cleaner (npm) GHSA-rx9h-69c4-qhq5, MAL-2026-13463 | Malicious | Not scored | 06 Aug, 2026 | npm vite-plugin-cleaner |
Malicious release: Malicious code in vite-svg-parse (npm) GHSA-v7x8-w6xp-6mv4, MAL-2026-13464 | Malicious | Not scored | 06 Aug, 2026 | npm vite-svg-parse |
Malicious release: Malicious code in vite-vue-path-map (npm) MAL-2026-13465 | Malicious | Not scored | 06 Aug, 2026 | npm vite-vue-path-map |
Malicious release: Malicious code in xdaxx (npm) MAL-2026-13468 | Malicious | Not scored | 06 Aug, 2026 | npm xdaxx |
Malicious release: Malicious code in xxdxax (npm) MAL-2026-13469 | Malicious | Not scored | 06 Aug, 2026 | npm xxdxax |
Malicious release: Malicious code in ynastore-baileys (npm) MAL-2026-13470 | Malicious | Not scored | 06 Aug, 2026 | npm ynastore-baileys |
Malicious release: Malicious code in zyr-agent (npm) MAL-2026-13471 | Malicious | Not scored | 06 Aug, 2026 | npm zyr-agent |
Malicious release: Malicious code in elephant-tusk-runner (npm) MAL-2026-13445 | Malicious | Not scored | 06 Aug, 2026 | npm elephant-tusk-runner |
Malicious release: Malicious code in opencode-optimised-toolings (npm) MAL-2026-13452 | Malicious | Not scored | 06 Aug, 2026 | npm opencode-optimised-toolings |
Malicious release: Malicious code in dpdgroup-css (npm) MAL-2026-13444 | Malicious | Not scored | 06 Aug, 2026 | npm dpdgroup-css |
Malicious release: Malicious code in gpt-terminal-cli (npm) MAL-2026-13447 | Malicious | Not scored | 06 Aug, 2026 | npm gpt-terminal-cli |
Malicious release: Malicious code in express-chai (npm) MAL-2026-13446 | Malicious | Not scored | 06 Aug, 2026 | npm express-chai |
Malicious release: Malicious code in wormgpt-cli (npm) MAL-2026-13466 | Malicious | Not scored | 06 Aug, 2026 | npm wormgpt-cli |
Malicious release: Malicious code in poc-ch4rlygr (npm) MAL-2026-13454 | Malicious | Not scored | 06 Aug, 2026 | npm poc-ch4rlygr |
Malicious release: Malicious code in sui-graphql-client (npm) GHSA-3xg5-x743-4fjc, MAL-2026-13475 | Malicious | Not scored | 06 Aug, 2026 | npm sui-graphql-client |
Malicious release: Malicious code in sui-migration-audit-cli (npm) GHSA-h2cr-h9m7-mxg3, MAL-2026-13476 | Malicious | Not scored | 06 Aug, 2026 | npm sui-migration-audit-cli |
Malicious release: Malicious code in move-bcs-codec (npm) GHSA-3v7v-gr39-jf7v, MAL-2026-13450 | Malicious | Not scored | 06 Aug, 2026 | npm move-bcs-codec |
Malicious release: Malicious code in svelte-visual-map (npm) GHSA-mx36-p8c2-88gg, MAL-2026-13477 | Malicious | Not scored | 06 Aug, 2026 | npm svelte-visual-map |
Malicious release: Malicious code in @junyoung-kim/reins (npm) MAL-2026-13432 | Malicious | Not scored | 06 Aug, 2026 | npm @junyoung-kim/reins |
Malicious release: Malicious code in @lyxa.ai/core (npm) MAL-2026-13434 | Malicious | Not scored | 06 Aug, 2026 | npm @lyxa.ai/core |
Malicious release: Malicious code in @itsreduxtm/unpkg-xss-test (npm) MAL-2026-13431 | Malicious | Not scored | 06 Aug, 2026 | npm @itsreduxtm/unpkg-xss-test |
Malicious release: Malicious code in @ks-video/kwai-player-web (npm) MAL-2026-13433 | Malicious | Not scored | 06 Aug, 2026 | npm @ks-video/kwai-player-web |
Malicious release: Malicious code in nms-dashboard-js (npm) GHSA-c9w9-2cw6-865g, MAL-2026-13451 | Malicious | Not scored | 06 Aug, 2026 | npm nms-dashboard-js |
Malicious release: Malicious code in aitable-workflow-server (npm) MAL-2026-13437 | Malicious | Not scored | 06 Aug, 2026 | npm aitable-workflow-server |