Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @dotconf-pro/dotconf-pro (npm) GHSA-mwqq-h3r9-h32w, MAL-2026-11208 | Malicious | Not scored | 30 Jul, 2026 | npm @dotconf-pro/dotconf-pro |
Malicious release: Malicious code in rumjs (npm) GHSA-8xj6-6h67-j7p3, MAL-2026-11375 | Malicious | Not scored | 30 Jul, 2026 | npm rumjs |
Malicious release: Malicious code in @404c3s4r/testxxx (npm) MAL-2026-11207 | Malicious | Not scored | 30 Jul, 2026 | npm @404c3s4r/testxxx |
Malicious release: Malicious code in streak-metrics-math (npm) GHSA-57m5-24x9-2xr5, MAL-2026-11388 | Malicious | Not scored | 30 Jul, 2026 | npm streak-metrics-math |
Malicious release: Malicious code in svelte-metric-map (npm) GHSA-f9p7-g3fg-9695, MAL-2026-11390 | Malicious | Not scored | 30 Jul, 2026 | npm svelte-metric-map |
Malicious release: Malicious code in streak-metrics-core (npm) GHSA-pc2m-7f6m-25cm, MAL-2026-11387 | Malicious | Not scored | 30 Jul, 2026 | npm streak-metrics-core |
Malicious release: Malicious code in svelte-streak-metric (npm) GHSA-ph6j-2jmh-g26m, MAL-2026-11391 | Malicious | Not scored | 30 Jul, 2026 | npm svelte-streak-metric |
Malicious release: Malicious code in thedata (npm) GHSA-g67p-r2r2-224w, MAL-2026-11400 | Malicious | Not scored | 30 Jul, 2026 | npm thedata |
Malicious release: Malicious code in consumerweb-risk (npm) GHSA-5439-r8p8-2gmx, MAL-2026-11269 | Malicious | Not scored | 30 Jul, 2026 | npm consumerweb-risk |
Malicious release: Malicious code in switchpaymentsapiserv-paypal (npm) GHSA-rg3f-q822-6rx6, MAL-2026-11392 | Malicious | Not scored | 30 Jul, 2026 | npm switchpaymentsapiserv-paypal |
Malicious release: Malicious code in mcp-search-server (PyPI) MAL-2026-11198 | Malicious | Not scored | 30 Jul, 2026 | PyPI mcp-search-server |
Malicious release: Malicious code in ai-perf-toolkit (PyPI) MAL-2026-11197 | Malicious | Not scored | 30 Jul, 2026 | PyPI ai-perf-toolkit |
Malicious release: Malicious code in create-backend-scaffold (npm) GHSA-p8mm-7vhx-3cr2, MAL-2026-11270 | Malicious | Not scored | 30 Jul, 2026 | npm create-backend-scaffold |
Malicious release: Malicious code in pretty-log-cli (npm) GHSA-pvmx-6w3g-745q, MAL-2026-11349 | Malicious | Not scored | 30 Jul, 2026 | npm pretty-log-cli |
Malicious release: Malicious code in logform-core (npm) GHSA-f2wx-p6h3-rgg2, MAL-2026-11328 | Malicious | Not scored | 30 Jul, 2026 | npm logform-core |
Malicious release: Malicious code in @wbnr/design (npm) MAL-2026-11196 | Malicious | Not scored | 30 Jul, 2026 | npm @wbnr/design |
Malicious release: Malicious code in react-fast-refresh-helper (npm) GHSA-p32r-hmph-46qm, MAL-2026-11366 | Malicious | Not scored | 30 Jul, 2026 | npm react-fast-refresh-helper |
Malicious release: Malicious code in phabricator-client (PyPI) MAL-2026-11195 | Malicious | Not scored | 30 Jul, 2026 | PyPI phabricator-client |
Malicious release: Malicious code in litespeed-cache (npm) GHSA-vxgg-x9mm-892p, MAL-2026-11193 | Malicious | Not scored | 30 Jul, 2026 | npm litespeed-cache |
Malicious release: Malicious code in n8n-nodes-trust-me-im-totally-safe (npm) GHSA-58v7-66mp-4mf4, MAL-2026-11194 | Malicious | Not scored | 30 Jul, 2026 | npm n8n-nodes-trust-me-im-totally-safe |
Malicious release: Malicious code in @ai-plus/de-agent-sdk (npm) GHSA-4c3x-2hh8-6pp9, MAL-2026-11175 | Malicious | Not scored | 29 Jul, 2026 | npm @ai-plus/de-agent-sdk |
Malicious release: Malicious code in @ai-plus/de-agent (npm) GHSA-w62v-8p95-rhf2, MAL-2026-11174 | Malicious | Not scored | 29 Jul, 2026 | npm @ai-plus/de-agent |
Malicious release: Malicious code in @ai-agent-node/createnode (npm) GHSA-79rw-4w2g-9hr5, MAL-2026-11172 | Malicious | Not scored | 29 Jul, 2026 | npm @ai-agent-node/createnode |
Malicious release: Malicious code in @ai-agent-node/nodesql (npm) GHSA-fm4j-w897-7h3g, MAL-2026-11173 | Malicious | Not scored | 29 Jul, 2026 | npm @ai-agent-node/nodesql |
Malicious release: Malicious code in @ai-agent-node/agent-node (npm) GHSA-h95p-8cf6-7qrc, MAL-2026-11171 | Malicious | Not scored | 29 Jul, 2026 | npm @ai-agent-node/agent-node |
Malicious release: Malicious code in @zannstore/baileys (npm) GHSA-vw26-8qc4-8hmg, MAL-2026-11179 | Malicious | Not scored | 29 Jul, 2026 | npm @zannstore/baileys |
Malicious release: Malicious code in @peptide-unit/js-unimode (npm) GHSA-hghj-5h7q-fq5h, MAL-2026-11177 | Malicious | Not scored | 29 Jul, 2026 | npm @peptide-unit/js-unimode |
Malicious release: Malicious code in @peptide-unit/peptide-modify (npm) GHSA-mw2h-4g9g-g7vv, MAL-2026-11178 | Malicious | Not scored | 29 Jul, 2026 | npm @peptide-unit/peptide-modify |
Malicious release: Malicious code in lzd-unified-station-sdk (npm) GHSA-2rgv-qvc2-5q4h, MAL-2026-11187 | Malicious | Not scored | 29 Jul, 2026 | npm lzd-unified-station-sdk |
Malicious release: Malicious code in def-open-client (npm) GHSA-pxmg-gr7p-wx8p, MAL-2026-11183 | Malicious | Not scored | 29 Jul, 2026 | npm def-open-client |
Malicious release: Malicious code in test-skill-zip (npm) GHSA-qw86-6hcg-cj2j, MAL-2026-11189 | Malicious | Not scored | 29 Jul, 2026 | npm test-skill-zip |
Malicious release: Malicious code in lwp-web-client (npm) GHSA-rmm2-5g7m-wj7p, MAL-2026-11186 | Malicious | Not scored | 29 Jul, 2026 | npm lwp-web-client |
Malicious release: Malicious code in uniapi-bridge (npm) GHSA-wpp9-5p7g-7cjh, MAL-2026-11190 | Malicious | Not scored | 29 Jul, 2026 | npm uniapi-bridge |
Malicious release: Malicious code in flight-compare-analyzer (npm) GHSA-wwp4-2j5x-f2m9, MAL-2026-11185 | Malicious | Not scored | 29 Jul, 2026 | npm flight-compare-analyzer |
Malicious release: Malicious code in colder-cli (npm) GHSA-x646-p774-9w26, MAL-2026-11182 | Malicious | Not scored | 29 Jul, 2026 | npm colder-cli |
Malicious release: Malicious code in open-worker-cli (npm) GHSA-2p2c-gx9p-5wg8, MAL-2026-11188 | Malicious | Not scored | 29 Jul, 2026 | npm open-worker-cli |
Malicious release: Malicious code in aone-cloud-cli (npm) GHSA-c6xg-mcq6-m594, MAL-2026-11180 | Malicious | Not scored | 29 Jul, 2026 | npm aone-cloud-cli |
Malicious release: Malicious code in feedback-ai-sdk (npm) GHSA-fh6v-xfxj-m87q, MAL-2026-11184 | Malicious | Not scored | 29 Jul, 2026 | npm feedback-ai-sdk |
Malicious release: Malicious code in zer0code (npm) GHSA-frrq-7m67-mgxg, MAL-2026-11191 | Malicious | Not scored | 29 Jul, 2026 | npm zer0code |
Malicious release: Malicious code in @finxsecdemo/utils (npm) MAL-2026-11170 | Malicious | Not scored | 29 Jul, 2026 | npm @finxsecdemo/utils |
Malicious release: Malicious code in test2221 (npm) MAL-2026-11192 | Malicious | Not scored | 29 Jul, 2026 | npm test2221 |
Malicious release: Malicious code in chain-manager (npm) GHSA-257g-ggr2-j398, MAL-2026-11181 | Malicious | Not scored | 29 Jul, 2026 | npm chain-manager |
Malicious release: Malicious code in @bowozzz/baileys (npm) GHSA-f9vh-885g-hv2f, MAL-2026-11176 | Malicious | Not scored | 29 Jul, 2026 | npm @bowozzz/baileys |
Malicious release: Malicious code in @mypwn/hawkeye (npm) MAL-2026-11157 | Malicious | Not scored | 29 Jul, 2026 | npm @mypwn/hawkeye |
Malicious release: Malicious code in @types-beta/sdk (npm) MAL-2026-11499 | Malicious | Not scored | 29 Jul, 2026 | npm @types-beta/sdk |
Malicious release: Malicious code in @joyfill/layouts (npm) GHSA-887f-rwr9-wp54, MAL-2026-11161 | Malicious | Not scored | 28 Jul, 2026 | npm @joyfill/layouts |
Malicious release: Malicious code in @joyfill/components (npm) GHSA-x4p3-wjxx-m4x5, MAL-2026-11160 | Malicious | Not scored | 28 Jul, 2026 | npm @joyfill/components |
Malicious release: Malicious code in postcss-motion-utils (npm) GHSA-m763-9wch-p9gg, MAL-2026-11168 | Malicious | Not scored | 28 Jul, 2026 | npm postcss-motion-utils |
Malicious release: Malicious code in aone-kit-cli (npm) GHSA-55qq-2qq4-c47g, MAL-2026-11163 | Malicious | Not scored | 28 Jul, 2026 | npm aone-kit-cli |
Malicious release: Malicious code in aone-kit (npm) GHSA-7w6g-48pj-7977, MAL-2026-11162 | Malicious | Not scored | 28 Jul, 2026 | npm aone-kit |