Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in hdkey-wallet (npm) MAL-2026-13346 | Malicious | Not scored | 05 Aug, 2026 | npm hdkey-wallet |
Malicious release: Malicious code in web3-utils-crypto (npm) MAL-2026-13354 | Malicious | Not scored | 05 Aug, 2026 | npm web3-utils-crypto |
Malicious release: Malicious code in bip39-generator (npm) MAL-2026-13257 | Malicious | Not scored | 05 Aug, 2026 | npm bip39-generator |
Malicious release: Malicious code in mnemonic-to-key (npm) MAL-2026-13349 | Malicious | Not scored | 05 Aug, 2026 | npm mnemonic-to-key |
Malicious release: Malicious code in spl-token-utils (npm) MAL-2026-13351 | Malicious | Not scored | 05 Aug, 2026 | npm spl-token-utils |
Malicious release: Malicious code in chatcc-agent (npm) MAL-2026-13259 | Malicious | Not scored | 05 Aug, 2026 | npm chatcc-agent |
Malicious release: Malicious code in bigops-insite (npm) MAL-2026-13219 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-insite |
Malicious release: Malicious code in bigops-legacy-telephony-panel (npm) MAL-2026-13221 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-legacy-telephony-panel |
Malicious release: Malicious code in bigops-legacy-utils (npm) MAL-2026-13222 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-legacy-utils |
Malicious release: Malicious code in bigops-jsonpath-mapper (npm) MAL-2026-13220 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-jsonpath-mapper |
Malicious release: Malicious code in bigops-logs-player (npm) MAL-2026-13223 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-logs-player |
Malicious release: Malicious code in bigops-notes (npm) MAL-2026-13227 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-notes |
Malicious release: Malicious code in bigops-nitro-events-table (npm) MAL-2026-13226 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-nitro-events-table |
Malicious release: Malicious code in bigops-nitro-client (npm) MAL-2026-13225 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-nitro-client |
Malicious release: Malicious code in bigops-outgoing-call (npm) MAL-2026-13231 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-outgoing-call |
Malicious release: Malicious code in bigops-microfrontend (npm) MAL-2026-13224 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-microfrontend |
Malicious release: Malicious code in bigops-offers (npm) MAL-2026-13228 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-offers |
Malicious release: Malicious code in bigops-opening-file-handler (npm) MAL-2026-13229 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-opening-file-handler |
Malicious release: Malicious code in bigops-operator-status (npm) MAL-2026-13230 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-operator-status |
Malicious release: Malicious code in bigops-product-list (npm) MAL-2026-13235 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-product-list |
Malicious release: Malicious code in bigops-plugin-notification-builder (npm) MAL-2026-13232 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-plugin-notification-builder |
Malicious release: Malicious code in bigops-procedure-file-handlers (npm) MAL-2026-13233 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-procedure-file-handlers |
Malicious release: Malicious code in bigops-products (npm) MAL-2026-13236 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-products |
Malicious release: Malicious code in bigops-procedure-player (npm) MAL-2026-13234 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-procedure-player |
Malicious release: Malicious code in bigops-products-bnpl (npm) MAL-2026-13238 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-products-bnpl |
Malicious release: Malicious code in bigops-products-deposits (npm) MAL-2026-13239 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-products-deposits |
Malicious release: Malicious code in bigops-products-insurance (npm) MAL-2026-13240 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-products-insurance |
Malicious release: Malicious code in bigops-products-timeline (npm) GHSA-9f9c-qwvh-f45q, MAL-2026-13245 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-products-timeline |
Malicious release: Malicious code in bigops-products-timeline-commons (npm) MAL-2026-13246 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-products-timeline-commons |
Malicious release: Malicious code in bigops-products-investment (npm) MAL-2026-13241 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-products-investment |
Malicious release: Malicious code in bigops-products-mobile (npm) MAL-2026-13243 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-products-mobile |
Malicious release: Malicious code in bigops-products-accounts-and-cards (npm) MAL-2026-13237 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-products-accounts-and-cards |
Malicious release: Malicious code in bigops-products-savings-accounts (npm) MAL-2026-13244 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-products-savings-accounts |
Malicious release: Malicious code in bigops-products-loans (npm) MAL-2026-13242 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-products-loans |
Malicious release: Malicious code in bigops-products-travel (npm) MAL-2026-13247 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-products-travel |
Malicious release: Malicious code in bigops-status-selection (npm) GHSA-r2qr-xq83-5p7q, MAL-2026-13251 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-status-selection |
Malicious release: Malicious code in bigops-statements-timeline (npm) GHSA-mrfg-393h-v67j, MAL-2026-13250 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-statements-timeline |
Malicious release: Malicious code in bigops-rx-post-message (npm) MAL-2026-13248 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-rx-post-message |
Malicious release: Malicious code in bigops-storio (npm) GHSA-g548-9c3x-q2r5, MAL-2026-13252 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-storio |
Malicious release: Malicious code in bigops-storio-ngrx-component-store (npm) GHSA-vx5q-629w-pgcg, MAL-2026-13254 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-storio-ngrx-component-store |
Malicious release: Malicious code in bigops-storio-store-adapter (npm) GHSA-ww3c-w9f4-pc4w, MAL-2026-13256 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-storio-store-adapter |
Malicious release: Malicious code in bigops-shared-ui (npm) MAL-2026-13249 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-shared-ui |
Malicious release: Malicious code in bigops-storio-ngrx (npm) GHSA-v9j9-x22c-rgjq, MAL-2026-13253 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-storio-ngrx |
Malicious release: Malicious code in docker-api-client (npm) MAL-2026-13280 | Malicious | Not scored | 05 Aug, 2026 | npm docker-api-client |
Malicious release: Malicious code in @zzzcrypto/solana-spl-token (npm) MAL-2026-13214 | Malicious | Not scored | 05 Aug, 2026 | npm @zzzcrypto/solana-spl-token |
Malicious release: Malicious code in @zzzcrypto/xrp-lib (npm) MAL-2026-13215 | Malicious | Not scored | 05 Aug, 2026 | npm @zzzcrypto/xrp-lib |
Malicious release: Malicious code in @zzzcrypto/playwrite (npm) MAL-2026-13213 | Malicious | Not scored | 05 Aug, 2026 | npm @zzzcrypto/playwrite |
Malicious release: Malicious code in @zzzcrypto/bitcoin-lib (npm) MAL-2026-13211 | Malicious | Not scored | 05 Aug, 2026 | npm @zzzcrypto/bitcoin-lib |
Malicious release: Malicious code in @zzzcrypto/etherjs (npm) MAL-2026-13212 | Malicious | Not scored | 05 Aug, 2026 | npm @zzzcrypto/etherjs |
Malicious release: Malicious code in devplatform-test-pvm-is-even (npm) MAL-2026-13267 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-test-pvm-is-even |