Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @vaultflow/create-flow (npm) GHSA-xpp9-qw49-cpw2, MAL-2026-11096 | Malicious | Not scored | 28 Jul, 2026 | npm @vaultflow/create-flow |
Malicious release: Malicious code in motion-forge-css (npm) GHSA-3v24-55c2-cpp9, MAL-2026-11101 | Malicious | Not scored | 27 Jul, 2026 | npm motion-forge-css |
Malicious release: Malicious code in cfgzen (PyPI) MAL-2026-11094 | Malicious | Not scored | 27 Jul, 2026 | PyPI cfgzen |
Malicious release: Malicious code in @heartlandone-private/fontawesome-pro (npm) MAL-2026-11093 | Malicious | Not scored | 27 Jul, 2026 | npm @heartlandone-private/fontawesome-pro |
Malicious release: Malicious code in xo-twofa (npm) GHSA-7v73-c7c7-mr5x, MAL-2026-11105 | Malicious | Not scored | 27 Jul, 2026 | npm xo-twofa |
Malicious release: Malicious code in identityauthorizationserv (npm) GHSA-gxvc-xwj7-xghw, MAL-2026-11100 | Malicious | Not scored | 27 Jul, 2026 | npm identityauthorizationserv |
Malicious release: Malicious code in stargateproxyserv (npm) GHSA-h7c2-w78r-3m98, MAL-2026-11103 | Malicious | Not scored | 27 Jul, 2026 | npm stargateproxyserv |
Malicious release: Malicious code in riskunifiedgatewayserv (npm) GHSA-prr3-5jpw-q3v3, MAL-2026-11102 | Malicious | Not scored | 27 Jul, 2026 | npm riskunifiedgatewayserv |
Malicious release: Malicious code in crm-reportinsightserv-paypal (npm) GHSA-xh9p-6mh8-qjhp, MAL-2026-11098 | Malicious | Not scored | 27 Jul, 2026 | npm crm-reportinsightserv-paypal |
Malicious release: Malicious code in demo-awesome-date-parser-test (npm) GHSA-xcf3-mw56-cqm5, MAL-2026-11099 | Malicious | Not scored | 27 Jul, 2026 | npm demo-awesome-date-parser-test |
Malicious release: Malicious code in @array-util/subsearch (npm) GHSA-5xpc-8g9w-cwr8, MAL-2026-11095 | Malicious | Not scored | 27 Jul, 2026 | npm @array-util/subsearch |
Malicious release: Malicious code in tailwind-motionkit (npm) GHSA-wrm7-92jw-pqm9, MAL-2026-11104 | Malicious | Not scored | 27 Jul, 2026 | npm tailwind-motionkit |
Malicious release: Malicious code in kalipto-runtime (npm) GHSA-g6f3-9j93-879j, MAL-2026-11087 | Malicious | Not scored | 27 Jul, 2026 | npm kalipto-runtime |
Malicious release: Malicious code in @thone33/react-helpers (npm) GHSA-vxmg-ff8j-2552, MAL-2026-11078 | Malicious | Not scored | 27 Jul, 2026 | npm @thone33/react-helpers |
Malicious release: Malicious code in edu-npm-helper-alpha (npm) GHSA-jhpp-p77r-39q6, MAL-2026-11082 | Malicious | Not scored | 27 Jul, 2026 | npm edu-npm-helper-alpha |
Malicious release: Malicious code in edu-npm-helper-beta (npm) GHSA-mm62-vp6v-vqq2, MAL-2026-11083 | Malicious | Not scored | 27 Jul, 2026 | npm edu-npm-helper-beta |
Malicious release: Malicious code in txs-builder (npm) GHSA-5g95-w82p-69v9, MAL-2026-11089 | Malicious | Not scored | 27 Jul, 2026 | npm txs-builder |
Malicious release: Malicious code in txs-runner-lib (npm) GHSA-65pq-67vr-g3jp, MAL-2026-11091 | Malicious | Not scored | 27 Jul, 2026 | npm txs-runner-lib |
Malicious release: Malicious code in txs-random-lib (npm) GHSA-c2fc-52mv-g5v6, MAL-2026-11090 | Malicious | Not scored | 27 Jul, 2026 | npm txs-random-lib |
Malicious release: Malicious code in txs-sdk-lib (npm) GHSA-fgmc-rrjh-9m33, MAL-2026-11092 | Malicious | Not scored | 27 Jul, 2026 | npm txs-sdk-lib |
Malicious release: Malicious code in sixbails (npm) GHSA-8cvc-378h-fwqf, MAL-2026-11088 | Malicious | Not scored | 27 Jul, 2026 | npm sixbails |
Malicious release: Malicious code in @vinnxcode/xbailsync (npm) GHSA-fgwc-g3q5-794p, MAL-2026-11080 | Malicious | Not scored | 27 Jul, 2026 | npm @vinnxcode/xbailsync |
Malicious release: Malicious code in @vinnxcode/libsignal-node (npm) GHSA-v9rv-pgqp-436h, MAL-2026-11079 | Malicious | Not scored | 27 Jul, 2026 | npm @vinnxcode/libsignal-node |
Malicious release: Malicious code in amanexzyra-baileys (npm) GHSA-mwwh-7r57-h6v9, MAL-2026-11081 | Malicious | Not scored | 27 Jul, 2026 | npm amanexzyra-baileys |
Malicious release: Malicious code in fazzanime (npm) GHSA-r3jh-34p6-m7xp, MAL-2026-11085 | Malicious | Not scored | 27 Jul, 2026 | npm fazzanime |
Malicious release: Malicious code in fazzgram (npm) GHSA-vjhp-hr8c-42m8, MAL-2026-11086 | Malicious | Not scored | 27 Jul, 2026 | npm fazzgram |
Malicious release: Malicious code in @fazzcode/baileys (npm) GHSA-wqqq-qm88-5433, MAL-2026-11073 | Malicious | Not scored | 27 Jul, 2026 | npm @fazzcode/baileys |
Malicious release: Malicious code in @sqlite-tag/sql-creator (npm) GHSA-6vr8-7f3x-9c9r, MAL-2026-11077 | Malicious | Not scored | 27 Jul, 2026 | npm @sqlite-tag/sql-creator |
Malicious release: Malicious code in @sqlite-tag/schema-generator (npm) GHSA-hpc8-vc57-jjcp, MAL-2026-11076 | Malicious | Not scored | 27 Jul, 2026 | npm @sqlite-tag/schema-generator |
Malicious release: Malicious code in @sqlite-frame/createsql (npm) GHSA-723v-4wq3-j58v, MAL-2026-11075 | Malicious | Not scored | 27 Jul, 2026 | npm @sqlite-frame/createsql |
Malicious release: Malicious code in express-self-destruct1 (npm) GHSA-4h93-54g6-hm75, MAL-2026-11084 | Malicious | Not scored | 27 Jul, 2026 | npm express-self-destruct1 |
Malicious release: Malicious code in @my_name_is_khn/express-security-tool-v2 (npm) GHSA-v2gc-c6j4-6gq8, MAL-2026-11074 | Malicious | Not scored | 27 Jul, 2026 | npm @my_name_is_khn/express-security-tool-v2 |
Malicious release: Malicious code in random-ua-generator (PyPI) MAL-2026-11068 | Malicious | Not scored | 26 Jul, 2026 | PyPI random-ua-generator |
Malicious release: Malicious code in @ks-radar/radar (npm) MAL-2026-11066 | Malicious | Not scored | 25 Jul, 2026 | npm @ks-radar/radar |
Malicious release: Malicious code in blessclient (PyPI) MAL-2026-11067 | Malicious | Not scored | 25 Jul, 2026 | PyPI blessclient |
Malicious release: Malicious code in swiper_angular (npm) GHSA-r6m9-x8fm-wq5c, MAL-2026-11065 | Malicious | Not scored | 25 Jul, 2026 | npm swiper_angular |
Malicious release: Malicious code in whs4_deu (npm) MAL-2026-11070 | Malicious | Not scored | 25 Jul, 2026 | npm whs4_deu |
Malicious release: Malicious code in wsh4_edu (npm) MAL-2026-11072 | Malicious | Not scored | 25 Jul, 2026 | npm wsh4_edu |
Malicious release: Malicious code in whs4_eud (npm) MAL-2026-11071 | Malicious | Not scored | 25 Jul, 2026 | npm whs4_eud |
Malicious release: Malicious code in page-navigation (npm) MAL-2026-11064 | Malicious | Not scored | 25 Jul, 2026 | npm page-navigation |
Malicious release: Malicious code in identityscimapiserv (npm) GHSA-gv4f-vm3w-7v7w, MAL-2026-11061 | Malicious | Not scored | 25 Jul, 2026 | npm identityscimapiserv |
Malicious release: Malicious code in xo-member-components (npm) GHSA-r5v8-7g3c-jp8w, MAL-2026-11063 | Malicious | Not scored | 25 Jul, 2026 | npm xo-member-components |
Malicious release: Malicious code in f0-form-manipulator (npm) GHSA-r235-8hvg-777j, MAL-2026-11060 | Malicious | Not scored | 25 Jul, 2026 | npm f0-form-manipulator |
Malicious release: Malicious code in preferenceslifecycle-paypal (npm) GHSA-jpjh-7qpg-hqxv, MAL-2026-11062 | Malicious | Not scored | 25 Jul, 2026 | npm preferenceslifecycle-paypal |
Malicious release: Malicious code in merchantprefsservice-paypal (npm) GHSA-w6fc-gq73-j24m, MAL-2026-11057 | Malicious | Not scored | 25 Jul, 2026 | npm merchantprefsservice-paypal |
Malicious release: Malicious code in gpaas-paypal (npm) GHSA-c77x-6gm9-q7mf, MAL-2026-11056 | Malicious | Not scored | 25 Jul, 2026 | npm gpaas-paypal |
Malicious release: Malicious code in pp-react-ui5 (npm) GHSA-6h4j-g3j5-97rc, MAL-2026-11059 | Malicious | Not scored | 25 Jul, 2026 | npm pp-react-ui5 |
Malicious release: Malicious code in payoutsvettingserv-paypal (npm) GHSA-q284-v87w-8w6f, MAL-2026-11058 | Malicious | Not scored | 25 Jul, 2026 | npm payoutsvettingserv-paypal |
Malicious release: Malicious code in fundraiserservicepp (npm) MAL-2026-11055 | Malicious | Not scored | 25 Jul, 2026 | npm fundraiserservicepp |
Malicious release: Malicious code in trongridy (PyPI) MAL-2026-11051 | Malicious | Not scored | 24 Jul, 2026 | PyPI trongridy |