Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in hjw-nasa-lib (npm) GHSA-9r29-2px8-pvcj, MAL-2026-11316 | Malicious | Not scored | 30 Jul, 2026 | npm hjw-nasa-lib |
Malicious release: Malicious code in dwa-tridion-webapp (npm) GHSA-c9jm-55f7-3w52, MAL-2026-11284 | Malicious | Not scored | 30 Jul, 2026 | npm dwa-tridion-webapp |
Malicious release: Malicious code in tsetnpmackage (npm) GHSA-2rj9-jmvj-4cr8, MAL-2026-11403 | Malicious | Not scored | 30 Jul, 2026 | npm tsetnpmackage |
Malicious release: Malicious code in testsetset (npm) GHSA-9hj6-prhx-4vq7, MAL-2026-11397 | Malicious | Not scored | 30 Jul, 2026 | npm testsetset |
Malicious release: Malicious code in @meteora-sdk/core (npm) GHSA-f5pc-vrcw-c7r3, MAL-2026-11215 | Malicious | Not scored | 30 Jul, 2026 | npm @meteora-sdk/core |
Malicious release: Malicious code in cmd-auth (npm) GHSA-7m57-mffc-c7p7, MAL-2026-11264 | Malicious | Not scored | 30 Jul, 2026 | npm cmd-auth |
Malicious release: Malicious code in kajl (npm) GHSA-vr22-p67c-9rrc, MAL-2026-11325 | Malicious | Not scored | 30 Jul, 2026 | npm kajl |
Malicious release: Malicious code in react.ja (npm) GHSA-7543-8w65-6h8j, MAL-2026-11368 | Malicious | Not scored | 30 Jul, 2026 | npm react.ja |
Malicious release: Malicious code in react.jd (npm) GHSA-m7jm-x84r-9652, MAL-2026-11369 | Malicious | Not scored | 30 Jul, 2026 | npm react.jd |
Malicious release: Malicious code in installreact (npm) GHSA-mm9w-w535-r967, MAL-2026-11322 | Malicious | Not scored | 30 Jul, 2026 | npm installreact |
Malicious release: Malicious code in express.ja (npm) GHSA-2gpw-6q22-7qwj, MAL-2026-11307 | Malicious | Not scored | 30 Jul, 2026 | npm express.ja |
Malicious release: Malicious code in ekspress (npm) GHSA-692q-284v-2hgw, MAL-2026-11288 | Malicious | Not scored | 30 Jul, 2026 | npm ekspress |
Malicious release: Malicious code in express.jd (npm) GHSA-9wgj-2979-wcq2, MAL-2026-11308 | Malicious | Not scored | 30 Jul, 2026 | npm express.jd |
Malicious release: Malicious code in react.j (npm) GHSA-cmr4-cq5h-774c, MAL-2026-11367 | Malicious | Not scored | 30 Jul, 2026 | npm react.j |
Malicious release: Malicious code in expres.js (npm) GHSA-f9fq-7h8v-5c89, MAL-2026-11302 | Malicious | Not scored | 30 Jul, 2026 | npm expres.js |
Malicious release: Malicious code in reac.js (npm) GHSA-m47m-vg8r-jqxm, MAL-2026-11364 | Malicious | Not scored | 30 Jul, 2026 | npm reac.js |
Malicious release: Malicious code in reakt.js (npm) GHSA-qxw9-cxcm-h598, MAL-2026-11370 | Malicious | Not scored | 30 Jul, 2026 | npm reakt.js |
Malicious release: Malicious code in chalk-button (npm) GHSA-6vfm-x5rq-5gqr, MAL-2026-11256 | Malicious | Not scored | 30 Jul, 2026 | npm chalk-button |
Malicious release: Malicious code in chalk-butons (npm) GHSA-qpfj-w94p-p3wv, MAL-2026-11255 | Malicious | Not scored | 30 Jul, 2026 | npm chalk-butons |
Malicious release: Malicious code in chalk-buttons (npm) GHSA-rp59-qq3q-276w, MAL-2026-11257 | Malicious | Not scored | 30 Jul, 2026 | npm chalk-buttons |
Malicious release: Malicious code in chalk-helper (npm) GHSA-vcp3-wggf-xmf4, MAL-2026-11258 | Malicious | Not scored | 30 Jul, 2026 | npm chalk-helper |
Malicious release: Malicious code in clo321 (npm) GHSA-46h5-45mv-wqvp, MAL-2026-11261 | Malicious | Not scored | 30 Jul, 2026 | npm clo321 |
Malicious release: Malicious code in ttest333 (npm) GHSA-6mwc-v3f9-7vgg, MAL-2026-11404 | Malicious | Not scored | 30 Jul, 2026 | npm ttest333 |
Malicious release: Malicious code in raydiums (npm) GHSA-8rhm-95rv-32f6, MAL-2026-11363 | Malicious | Not scored | 30 Jul, 2026 | npm raydiums |
Malicious release: Malicious code in clo321-server (npm) GHSA-c4xj-wr6j-7w45, MAL-2026-11262 | Malicious | Not scored | 30 Jul, 2026 | npm clo321-server |
Malicious release: Malicious code in 1apijs (npm) GHSA-fchq-q2wv-wg89, MAL-2026-11206 | Malicious | Not scored | 30 Jul, 2026 | npm 1apijs |
Malicious release: Malicious code in apijsclo (npm) GHSA-j2jm-6rgv-3q9p, MAL-2026-11239 | Malicious | Not scored | 30 Jul, 2026 | npm apijsclo |
Malicious release: Malicious code in clo2 (npm) GHSA-jc7h-f527-wc9v, MAL-2026-11260 | Malicious | Not scored | 30 Jul, 2026 | npm clo2 |
Malicious release: Malicious code in clo-adspect (npm) GHSA-pwwc-vh8j-q428, MAL-2026-11259 | Malicious | Not scored | 30 Jul, 2026 | npm clo-adspect |
Malicious release: Malicious code in uniswapintefrace (npm) GHSA-q756-cqgj-x6jv, MAL-2026-11407 | Malicious | Not scored | 30 Jul, 2026 | npm uniswapintefrace |
Malicious release: Malicious code in ttest3333 (npm) GHSA-vqq8-5rp9-328w, MAL-2026-11405 | Malicious | Not scored | 30 Jul, 2026 | npm ttest3333 |
Malicious release: Malicious code in testtwix (npm) GHSA-wg6g-7pqp-9j2w, MAL-2026-11398 | Malicious | Not scored | 30 Jul, 2026 | npm testtwix |
Malicious release: Malicious code in clotest (npm) GHSA-x872-j53w-2rp8, MAL-2026-11263 | Malicious | Not scored | 30 Jul, 2026 | npm clotest |
Malicious release: Malicious code in ml-data-shared (PyPI) MAL-2026-11199 | Malicious | Not scored | 30 Jul, 2026 | PyPI ml-data-shared |
Malicious release: Malicious code in base58-ts (npm) GHSA-c93x-hmxp-gvmw, MAL-2026-11247 | Malicious | Not scored | 30 Jul, 2026 | npm base58-ts |
Malicious release: Malicious code in tgnode (npm) GHSA-mf3c-mgqq-g7v5, MAL-2026-11399 | Malicious | Not scored | 30 Jul, 2026 | npm tgnode |
Malicious release: Malicious code in base-x-ts (npm) GHSA-r3x2-f3fq-4ph8, MAL-2026-11246 | Malicious | Not scored | 30 Jul, 2026 | npm base-x-ts |
Malicious release: Malicious code in dash-merge (npm) GHSA-q4vw-49f5-33cf, MAL-2026-11274 | Malicious | Not scored | 30 Jul, 2026 | npm dash-merge |
Malicious release: Malicious code in node-logger-winston (npm) GHSA-r73c-43c8-c6vm, MAL-2026-11341 | Malicious | Not scored | 30 Jul, 2026 | npm node-logger-winston |
Malicious release: Malicious code in ml-nps-shared (PyPI) MAL-2026-11201 | Malicious | Not scored | 30 Jul, 2026 | PyPI ml-nps-shared |
Malicious release: Malicious code in ml-fdbk-shared (PyPI) MAL-2026-11200 | Malicious | Not scored | 30 Jul, 2026 | PyPI ml-fdbk-shared |
Malicious release: Malicious code in @grua/core (npm) GHSA-jm3c-xq42-hcxw, MAL-2026-11213 | Malicious | Not scored | 30 Jul, 2026 | npm @grua/core |
Malicious release: Malicious code in @grua/icons (npm) MAL-2026-11214 | Malicious | Not scored | 30 Jul, 2026 | npm @grua/icons |
Malicious release: Malicious code in isix (npm) GHSA-qc59-xgf9-w976, MAL-2026-11323 | Malicious | Not scored | 30 Jul, 2026 | npm isix |
Malicious release: Malicious code in @solana-sdk/web3.js (npm) GHSA-6p5w-j6wv-g9w5, MAL-2026-11227 | Malicious | Not scored | 30 Jul, 2026 | npm @solana-sdk/web3.js |
Malicious release: Malicious code in @ethers-sdk/ethers (npm) GHSA-p2pf-mrh7-5f43, MAL-2026-11210 | Malicious | Not scored | 30 Jul, 2026 | npm @ethers-sdk/ethers |
Malicious release: Malicious code in @ethers-sdk/wallet (npm) MAL-2026-11211 | Malicious | Not scored | 30 Jul, 2026 | npm @ethers-sdk/wallet |
Malicious release: Malicious code in ml-shared (PyPI) MAL-2026-11202 | Malicious | Not scored | 30 Jul, 2026 | PyPI ml-shared |
Malicious release: Malicious code in dotenv-core (npm) GHSA-5vxc-5m5h-j6c3, MAL-2026-11281 | Malicious | Not scored | 30 Jul, 2026 | npm dotenv-core |
Malicious release: Malicious code in dotex-plugin (npm) GHSA-f439-5hgg-ff3v, MAL-2026-11282 | Malicious | Not scored | 30 Jul, 2026 | npm dotex-plugin |