Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in dransay (npm) MAL-2026-17700 | Malicious | Not scored | 22 days ago | npm dransay |
Malicious release: Malicious code in @dransay/address-validation (npm) MAL-2026-17668 | Malicious | Not scored | 22 days ago | npm @dransay/address-validation |
Malicious release: Malicious code in @dransay/feature-flags (npm) MAL-2026-17696 | Malicious | Not scored | 22 days ago | npm @dransay/feature-flags |
Malicious release: Malicious code in @dransay/logger (npm) MAL-2026-17697 | Malicious | Not scored | 22 days ago | npm @dransay/logger |
Malicious release: Malicious code in @dransay/phone-fix-test (npm) MAL-2026-17698 | Malicious | Not scored | 22 days ago | npm @dransay/phone-fix-test |
Malicious release: Malicious code in @dransay/api (npm) MAL-2026-17805 | Malicious | Not scored | 22 days ago | npm @dransay/api |
Malicious release: Malicious code in @dransay/secrets (npm) MAL-2026-17699 | Malicious | Not scored | 22 days ago | npm @dransay/secrets |
Malicious release: Malicious code in @dransay/db (npm) MAL-2026-17695 | Malicious | Not scored | 22 days ago | npm @dransay/db |
Malicious release: Malicious code in css-nesting-transform (npm) MAL-2026-17804 | Malicious | Not scored | 22 days ago | npm css-nesting-transform |
Malicious release: Malicious code in @bellaxchuu/belbails (npm) MAL-2026-17342 | Malicious | Not scored | 22 days ago | npm @bellaxchuu/belbails |
Malicious release: Malicious code in @lendxntaa/baileys (npm) GHSA-cqcv-g3vq-g6wr, MAL-2026-17365 | Malicious | Not scored | 22 days ago | npm @lendxntaa/baileys |
Malicious release: Malicious code in kiyoramarkets (npm) GHSA-23wg-cgvp-f8w7, MAL-2026-17396 | Malicious | Not scored | 22 days ago | npm kiyoramarkets |
Malicious release: Malicious code in mfasolver (npm) MAL-2026-17663 | Malicious | Not scored | 22 days ago | npm mfasolver |
Malicious release: Malicious code in hardhat-promised (npm) MAL-2026-17662 | Malicious | Not scored | 22 days ago | npm hardhat-promised |
Malicious release: Malicious code in hardhat-pack (npm) MAL-2026-17661 | Malicious | Not scored | 22 days ago | npm hardhat-pack |
Malicious release: Malicious code in hardhat-deep (npm) MAL-2026-17659 | Malicious | Not scored | 22 days ago | npm hardhat-deep |
Malicious release: Malicious code in abbishal-poc2 (npm) MAL-2026-17654 | Malicious | Not scored | 22 days ago | npm abbishal-poc2 |
Malicious release: Malicious code in hardhat-bits (npm) MAL-2026-17658 | Malicious | Not scored | 22 days ago | npm hardhat-bits |
Malicious release: Malicious code in hardhat-option (npm) MAL-2026-17660 | Malicious | Not scored | 22 days ago | npm hardhat-option |
Malicious release: Malicious code in dotenv-runtime (npm) MAL-2026-17657 | Malicious | Not scored | 22 days ago | npm dotenv-runtime |
Malicious release: Malicious code in css-flow-render-shim (npm) MAL-2026-17655 | Malicious | Not scored | 22 days ago | npm css-flow-render-shim |
Malicious release: Malicious code in css-reading-display-polyfill (npm) MAL-2026-17656 | Malicious | Not scored | 22 days ago | npm css-reading-display-polyfill |
Malicious release: Malicious code in wix-ssr-thunderbolt-grid-polyfill (npm) MAL-2026-17664 | Malicious | Not scored | 22 days ago | npm wix-ssr-thunderbolt-grid-polyfill |
Malicious release: Malicious code in @ziedzzz/demo-canary (npm) GHSA-p7gq-mvm4-4cw4, MAL-2026-17652 | Malicious | Not scored | 22 days ago | npm @ziedzzz/demo-canary |
Malicious release: Malicious code in abbishal-poc-as-dependency (npm) GHSA-pj66-3vwh-cgm2, MAL-2026-17653 | Malicious | Not scored | 22 days ago | npm abbishal-poc-as-dependency |
Malicious release: Malicious code in @praveenvjpm/color-utils-7210 (npm) MAL-2026-17651 | Malicious | Not scored | 22 days ago | npm @praveenvjpm/color-utils-7210 |
Malicious release: Malicious code in tensorlake (npm) GHSA-rqxj-g25x-4v9v, MAL-2026-17650 | Malicious | Not scored | 22 days ago | npm tensorlake |
Malicious release: Malicious code in internallib_v788 (npm) GHSA-8pvp-4qvp-26m7, MAL-2026-17649 | Malicious | Not scored | 22 days ago | npm internallib_v788 |
Malicious release: Malicious code in function-color (npm) GHSA-m6cg-6crx-mggv, MAL-2026-17647 | Malicious | Not scored | 22 days ago | npm function-color |
Malicious release: Malicious code in function-flag (npm) GHSA-ggcg-4pv7-wf9m, MAL-2026-17648 | Malicious | Not scored | 22 days ago | npm function-flag |
Malicious release: Malicious code in animatecss-tailwind-bridge (npm) GHSA-3h7p-p7hr-fqf7, MAL-2026-17666 | Malicious | Not scored | 22 days ago | npm animatecss-tailwind-bridge |
Malicious release: Malicious code in tailwind-animatecss-uniform (npm) GHSA-hxvr-77vv-6r85, MAL-2026-17667 | Malicious | Not scored | 22 days ago | npm tailwind-animatecss-uniform |
Malicious release: Malicious code in animatecss-tailwind-adapter (npm) MAL-2026-17665 | Malicious | Not scored | 22 days ago | npm animatecss-tailwind-adapter |
Malicious release: Malicious code in tailwindcss-animatecss-keyframes (npm) GHSA-3g68-5jcj-q8rx, MAL-2026-17646 | Malicious | Not scored | 22 days ago | npm tailwindcss-animatecss-keyframes |
Malicious release: Malicious code in @ikyyjee/ikkysingle (npm) GHSA-84vp-jj79-gp79, MAL-2026-17356 | Malicious | Not scored | 22 days ago | npm @ikyyjee/ikkysingle |
Malicious release: Malicious code in @ikyyjee/ikyysinggle (npm) GHSA-7cp5-9c7x-jc22, MAL-2026-17357 | Malicious | Not scored | 22 days ago | npm @ikyyjee/ikyysinggle |
Malicious release: Malicious code in @ikyyjee/ikyysingle (npm) GHSA-jq3m-36mx-2xch, MAL-2026-17358 | Malicious | Not scored | 22 days ago | npm @ikyyjee/ikyysingle |
Malicious release: Malicious code in random-certs (npm) GHSA-2cfv-92gp-9f6m, MAL-2026-17644 | Malicious | Not scored | 23 days ago | npm random-certs |
Malicious release: Malicious code in vectorizers (npm) GHSA-q8rg-7mvv-2c63, MAL-2026-17645 | Malicious | Not scored | 23 days ago | npm vectorizers |
Malicious release: Malicious code in waie-crash-baileys (npm) GHSA-5r5f-v5vv-289q, MAL-2026-17643 | Malicious | Not scored | 23 days ago | npm waie-crash-baileys |
Malicious release: Malicious code in personio-pipeline-projen (npm) MAL-2026-17642 | Malicious | Not scored | 23 days ago | npm personio-pipeline-projen |
Malicious release: Malicious code in troubleshooting (npm) MAL-2026-17641 | Malicious | Not scored | 23 days ago | npm troubleshooting |
Malicious release: Malicious code in browser-metrics-plugin.contrib (npm) MAL-2026-17640 | Malicious | Not scored | 23 days ago | npm browser-metrics-plugin.contrib |
Malicious release: Malicious code in lore-cs (PyPI) MAL-2026-17639 | Malicious | Not scored | 23 days ago | PyPI lore-cs |
Malicious release: Malicious code in css-jptvix-polyfill (npm) MAL-2026-17638 | Malicious | Not scored | 23 days ago | npm css-jptvix-polyfill |
Malicious release: Malicious code in @kxa/xbails (npm) GHSA-7gvw-4c75-pc6p, MAL-2026-17363 | Malicious | Not scored | 23 days ago | npm @kxa/xbails |
Malicious release: Malicious code in captchetat-angularv8 (npm) GHSA-7crr-x792-cp3w, MAL-2026-17637 | Malicious | Not scored | 24 days ago | npm captchetat-angularv8 |
Malicious release: Malicious code in hardhat-init (npm) MAL-2026-17636 | Malicious | Not scored | 24 days ago | npm hardhat-init |
Malicious release: Malicious code in @badzz88/baileys (npm) GHSA-884c-mw3w-x2wg, MAL-2026-17341 | Malicious | Not scored | 24 days ago | npm @badzz88/baileys |
Malicious release: Malicious code in internallib_v23 (npm) MAL-2026-17632 | Malicious | Not scored | 24 days ago | npm internallib_v23 |