Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @goodjavascript/dotenv (npm) GHSA-c5ch-4w75-vcw7, MAL-2026-11212 | Malicious | Not scored | 30 Jul, 2026 | npm @goodjavascript/dotenv |
Malicious release: Malicious code in discord-ms (npm) GHSA-3gvj-vp8w-8hhv, MAL-2026-11278 | Malicious | Not scored | 30 Jul, 2026 | npm discord-ms |
Malicious release: Malicious code in discord-starter (npm) GHSA-f7vm-5hq9-mwjj, MAL-2026-11280 | Malicious | Not scored | 30 Jul, 2026 | npm discord-starter |
Malicious release: Malicious code in react-ag-grid (npm) GHSA-98mq-h6cv-m583, MAL-2026-11365 | Malicious | Not scored | 30 Jul, 2026 | npm react-ag-grid |
Malicious release: Malicious code in imut-set (npm) GHSA-r3c8-mw9w-xmfv, MAL-2026-11320 | Malicious | Not scored | 30 Jul, 2026 | npm imut-set |
Malicious release: Malicious code in lodash-ex (npm) GHSA-x8qf-9h8v-gm9x, MAL-2026-11327 | Malicious | Not scored | 30 Jul, 2026 | npm lodash-ex |
Malicious release: Malicious code in ag-grid-boost (npm) GHSA-xqpj-5x5p-hgh7, MAL-2026-11235 | Malicious | Not scored | 30 Jul, 2026 | npm ag-grid-boost |
Malicious release: Malicious code in test-wastu (npm) GHSA-63j4-mhgp-qg9v, MAL-2026-11396 | Malicious | Not scored | 30 Jul, 2026 | npm test-wastu |
Malicious release: Malicious code in wastu (npm) GHSA-jwr5-mf48-j5vg, MAL-2026-11409 | Malicious | Not scored | 30 Jul, 2026 | npm wastu |
Malicious release: Malicious code in scol (npm) GHSA-qxvp-f79c-fhm8, MAL-2026-11377 | Malicious | Not scored | 30 Jul, 2026 | npm scol |
Malicious release: Malicious code in blbird (npm) GHSA-8mww-mrp7-gg4g, MAL-2026-11248 | Malicious | Not scored | 30 Jul, 2026 | npm blbird |
Malicious release: Malicious code in zcas (npm) GHSA-2v4j-qgf9-fvqc, MAL-2026-11412 | Malicious | Not scored | 30 Jul, 2026 | npm zcas |
Malicious release: Malicious code in ecto-logger (npm) GHSA-6224-2ghr-p5cq, MAL-2026-11287 | Malicious | Not scored | 30 Jul, 2026 | npm ecto-logger |
Malicious release: Malicious code in @spectraltest/loglevel (npm) GHSA-8jp7-hh94-hrrf, MAL-2026-11232 | Malicious | Not scored | 30 Jul, 2026 | npm @spectraltest/loglevel |
Malicious release: Malicious code in spectral-wraith (npm) GHSA-m2mq-w6wp-w8gf, MAL-2026-11385 | Malicious | Not scored | 30 Jul, 2026 | npm spectral-wraith |
Malicious release: Malicious code in curse-dependent (npm) MAL-2026-11272 | Malicious | Not scored | 30 Jul, 2026 | npm curse-dependent |
Malicious release: Malicious code in spectral-corsair (npm) MAL-2026-11384 | Malicious | Not scored | 30 Jul, 2026 | npm spectral-corsair |
Malicious release: Malicious code in puppetewebr (npm) GHSA-8hpf-vg2v-v9wc, MAL-2026-11361 | Malicious | Not scored | 30 Jul, 2026 | npm puppetewebr |
Malicious release: Malicious code in etwl (npm) GHSA-grfv-7rvr-chw4, MAL-2026-11301 | Malicious | Not scored | 30 Jul, 2026 | npm etwl |
Malicious release: Malicious code in pretierr (npm) GHSA-rfv2-vfmp-jq9p, MAL-2026-11348 | Malicious | Not scored | 30 Jul, 2026 | npm pretierr |
Malicious release: Malicious code in maalxios (npm) GHSA-5f53-x2hv-vqqx, MAL-2026-11329 | Malicious | Not scored | 30 Jul, 2026 | npm maalxios |
Malicious release: Malicious code in malxios (npm) GHSA-73g9-wgm7-84qr, MAL-2026-11330 | Malicious | Not scored | 30 Jul, 2026 | npm malxios |
Malicious release: Malicious code in @sourav_chanduka/oidc-client (npm) GHSA-5w3j-78pm-qcj7, MAL-2026-11231 | Malicious | Not scored | 30 Jul, 2026 | npm @sourav_chanduka/oidc-client |
Malicious release: Malicious code in @sourav_chanduka/core (npm) GHSA-7p79-743j-rjq8, MAL-2026-11229 | Malicious | Not scored | 30 Jul, 2026 | npm @sourav_chanduka/core |
Malicious release: Malicious code in @sourav_chanduka/core-no-ngrok (npm) GHSA-qrx2-r7m9-fw6x, MAL-2026-11230 | Malicious | Not scored | 30 Jul, 2026 | npm @sourav_chanduka/core-no-ngrok |
Malicious release: Malicious code in @web3utils/common (npm) GHSA-q3f3-h8g8-7qc6, MAL-2026-11234 | Malicious | Not scored | 30 Jul, 2026 | npm @web3utils/common |
Malicious release: Malicious code in @solana-utils/common (npm) GHSA-86ff-vvv8-wr2x, MAL-2026-11228 | Malicious | Not scored | 30 Jul, 2026 | npm @solana-utils/common |
Malicious release: Malicious code in @web3-util/common (npm) GHSA-wvx6-fwf2-hpp5, MAL-2026-11233 | Malicious | Not scored | 30 Jul, 2026 | npm @web3-util/common |
Malicious release: Malicious code in discord-rsc (npm) GHSA-g892-r2fw-vxgc, MAL-2026-11279 | Malicious | Not scored | 30 Jul, 2026 | npm discord-rsc |
Malicious release: Malicious code in discord-csr (npm) GHSA-gjqh-7qrr-25q9, MAL-2026-11277 | Malicious | Not scored | 30 Jul, 2026 | npm discord-csr |
Malicious release: Malicious code in tailwindcsssss (npm) GHSA-6x93-j4j5-p856, MAL-2026-11394 | Malicious | Not scored | 30 Jul, 2026 | npm tailwindcsssss |
Malicious release: Malicious code in tailwindcssss (npm) MAL-2026-11393 | Malicious | Not scored | 30 Jul, 2026 | npm tailwindcssss |
Malicious release: Malicious code in @pumpdot-fun/pump-swap-sdk (npm) GHSA-4gj3-7xcg-jhpm, MAL-2026-11224 | Malicious | Not scored | 30 Jul, 2026 | npm @pumpdot-fun/pump-swap-sdk |
Malicious release: Malicious code in @relforce-dev/console-log (npm) GHSA-4rj5-hjhh-8xc8, MAL-2026-11225 | Malicious | Not scored | 30 Jul, 2026 | npm @relforce-dev/console-log |
Malicious release: Malicious code in @pumpdot-fun/pump-sdk (npm) GHSA-873h-v5vp-pq52, MAL-2026-11223 | Malicious | Not scored | 30 Jul, 2026 | npm @pumpdot-fun/pump-sdk |
Malicious release: Malicious code in @node-console-log/log (npm) GHSA-cmv8-rmg2-2232, MAL-2026-11216 | Malicious | Not scored | 30 Jul, 2026 | npm @node-console-log/log |
Malicious release: Malicious code in fwf (npm) GHSA-5rjh-56g3-j7x2, MAL-2026-11314 | Malicious | Not scored | 30 Jul, 2026 | npm fwf |
Malicious release: Malicious code in @santieich/homebridge-midea-lan (npm) GHSA-jx3g-gq4q-33jp, MAL-2026-11226 | Malicious | Not scored | 30 Jul, 2026 | npm @santieich/homebridge-midea-lan |
Malicious release: Malicious code in aruda (npm) GHSA-pxhx-3f73-24mp, MAL-2026-11240 | Malicious | Not scored | 30 Jul, 2026 | npm aruda |
Malicious release: Malicious code in famshot (npm) GHSA-v3p3-vv86-m2vx, MAL-2026-11309 | Malicious | Not scored | 30 Jul, 2026 | npm famshot |
Malicious release: Malicious code in @patternfly-4/react-core (npm) GHSA-qvfg-h978-mrfg, MAL-2026-11220 | Malicious | Not scored | 30 Jul, 2026 | npm @patternfly-4/react-core |
Malicious release: Malicious code in @patternfly-4/quickstarts (npm) MAL-2026-11219 | Malicious | Not scored | 30 Jul, 2026 | npm @patternfly-4/quickstarts |
Malicious release: Malicious code in @patternfly-4/react-table (npm) MAL-2026-11221 | Malicious | Not scored | 30 Jul, 2026 | npm @patternfly-4/react-table |
Malicious release: Malicious code in @patternfly-4/react-tokens (npm) MAL-2026-11222 | Malicious | Not scored | 30 Jul, 2026 | npm @patternfly-4/react-tokens |
Malicious release: Malicious code in node-fetch-core (npm) GHSA-jw4q-3q2m-r329, MAL-2026-11339 | Malicious | Not scored | 30 Jul, 2026 | npm node-fetch-core |
Malicious release: Malicious code in @nordea-web/core (npm) GHSA-76gq-5fh6-q22c, MAL-2026-11217 | Malicious | Not scored | 30 Jul, 2026 | npm @nordea-web/core |
Malicious release: Malicious code in @nordea-web/ui (npm) GHSA-x4m3-33mp-hhf6, MAL-2026-11218 | Malicious | Not scored | 30 Jul, 2026 | npm @nordea-web/ui |
Malicious release: Malicious code in ncc-fonts (npm) GHSA-3mww-p356-w37h, MAL-2026-11336 | Malicious | Not scored | 30 Jul, 2026 | npm ncc-fonts |
Malicious release: Malicious code in ncc-hyperapp (npm) GHSA-64cv-9vqh-jmc7, MAL-2026-11337 | Malicious | Not scored | 30 Jul, 2026 | npm ncc-hyperapp |
Malicious release: Malicious code in ncc-web (npm) GHSA-865v-rvmq-73cp, MAL-2026-11338 | Malicious | Not scored | 30 Jul, 2026 | npm ncc-web |