Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @pinecone-experience/messages (npm) GHSA-r9p9-pfmv-rc77, MAL-2026-17631 | Malicious | Not scored | 24 days ago | npm @pinecone-experience/messages |
Malicious release: Malicious code in internallib_v30 (npm) MAL-2026-17633 | Malicious | Not scored | 24 days ago | npm internallib_v30 |
Malicious release: Malicious code in internallib_v86 (npm) MAL-2026-17634 | Malicious | Not scored | 24 days ago | npm internallib_v86 |
Malicious release: Malicious code in internallib_v875 (npm) MAL-2026-17635 | Malicious | Not scored | 24 days ago | npm internallib_v875 |
Malicious release: Malicious code in erc7730-hackathon (PyPI) MAL-2026-17628 | Malicious | Not scored | 24 days ago | PyPI erc7730-hackathon |
Malicious release: Malicious code in serpacksven (npm) GHSA-297h-8m5x-925p, MAL-2026-17625 | Malicious | Not scored | 24 days ago | npm serpacksven |
Malicious release: Malicious code in serpacksven2 (npm) GHSA-4pg5-wvv5-w7fg, MAL-2026-17627 | Malicious | Not scored | 24 days ago | npm serpacksven2 |
Malicious release: Malicious code in documenclient (npm) GHSA-648r-w4vm-vvvp, MAL-2026-17624 | Malicious | Not scored | 24 days ago | npm documenclient |
Malicious release: Malicious code in serpacksven1 (npm) GHSA-696v-rr55-26pc, MAL-2026-17626 | Malicious | Not scored | 24 days ago | npm serpacksven1 |
Malicious release: Malicious code in css-nrmgzn-polyfill (npm) MAL-2026-17576 | Malicious | Not scored | 24 days ago | npm css-nrmgzn-polyfill |
Malicious release: Malicious code in css-eqxcdx-polyfill (npm) MAL-2026-17573 | Malicious | Not scored | 24 days ago | npm css-eqxcdx-polyfill |
Malicious release: Malicious code in css-kfvwax-polyfill (npm) MAL-2026-17575 | Malicious | Not scored | 24 days ago | npm css-kfvwax-polyfill |
Malicious release: Malicious code in css-gwqyid-polyfill (npm) MAL-2026-17574 | Malicious | Not scored | 24 days ago | npm css-gwqyid-polyfill |
Malicious release: Malicious code in css-yhpodl-polyfill (npm) MAL-2026-17578 | Malicious | Not scored | 24 days ago | npm css-yhpodl-polyfill |
Malicious release: Malicious code in css-vvgsze-polyfill (npm) MAL-2026-17577 | Malicious | Not scored | 24 days ago | npm css-vvgsze-polyfill |
Malicious release: Malicious code in dzyclutch (npm) GHSA-36rj-4crv-cmgm, MAL-2026-17619 | Malicious | Not scored | 24 days ago | npm dzyclutch |
Malicious release: Malicious code in @diezyclutch/baileys (npm) GHSA-5f29-482c-j4rr, MAL-2026-17618 | Malicious | Not scored | 24 days ago | npm @diezyclutch/baileys |
Malicious release: Malicious code in yonzoffic-baileys (npm) GHSA-8434-c34v-f7h8, MAL-2026-17413 | Malicious | Not scored | 24 days ago | npm yonzoffic-baileys |
Malicious release: Malicious code in dzyclutch-baileys (npm) GHSA-c936-2h58-8v2f, MAL-2026-17620 | Malicious | Not scored | 24 days ago | npm dzyclutch-baileys |
Malicious release: Malicious code in dzyclutch-libsignal-node (npm) GHSA-f74h-98gv-73jv, MAL-2026-17621 | Malicious | Not scored | 24 days ago | npm dzyclutch-libsignal-node |
Malicious release: Malicious code in dzyhaxz-libsignal (npm) GHSA-jjrx-mg27-p6ww, MAL-2026-17623 | Malicious | Not scored | 24 days ago | npm dzyhaxz-libsignal |
Malicious release: Malicious code in dzyhaxz-baileys (npm) GHSA-xwv2-25hq-j64g, MAL-2026-17622 | Malicious | Not scored | 24 days ago | npm dzyhaxz-baileys |
Malicious release: Malicious code in @subql/common (npm) GHSA-9333-3c4x-x3h5, MAL-2026-17571 | Malicious | Not scored | 25 days ago | npm @subql/common |
Malicious release: Malicious code in checkmate-remediation-assistant (npm) MAL-2026-17572 | Malicious | Not scored | 25 days ago | npm checkmate-remediation-assistant |
Malicious release: Malicious code in with-cte (npm) MAL-2026-17579 | Malicious | Not scored | 25 days ago | npm with-cte |
Malicious release: Malicious code in unified-platform (npm) GHSA-9j7c-8j8v-428c, MAL-2026-17566 | Malicious | Not scored | 25 days ago | npm unified-platform |
Malicious release: Malicious code in risk-detection (npm) GHSA-h6f8-r5fm-58fv, MAL-2026-17563 | Malicious | Not scored | 25 days ago | npm risk-detection |
Malicious release: Malicious code in typesens (npm) MAL-2026-17565 | Malicious | Not scored | 25 days ago | npm typesens |
Malicious release: Malicious code in aria-live-region-helper (npm) MAL-2026-17546 | Malicious | Not scored | 25 days ago | npm aria-live-region-helper |
Malicious release: Malicious code in css-at-scope-polyfill (npm) MAL-2026-17547 | Malicious | Not scored | 25 days ago | npm css-at-scope-polyfill |
Malicious release: Malicious code in css-svqggc-polyfill (npm) MAL-2026-17557 | Malicious | Not scored | 25 days ago | npm css-svqggc-polyfill |
Malicious release: Malicious code in css-hgwctv-polyfill (npm) MAL-2026-17552 | Malicious | Not scored | 25 days ago | npm css-hgwctv-polyfill |
Malicious release: Malicious code in css-mpmdds-polyfill (npm) MAL-2026-17554 | Malicious | Not scored | 25 days ago | npm css-mpmdds-polyfill |
Malicious release: Malicious code in css-txedrf-polyfill (npm) MAL-2026-17558 | Malicious | Not scored | 25 days ago | npm css-txedrf-polyfill |
Malicious release: Malicious code in css-gvqmfn-polyfill (npm) MAL-2026-17551 | Malicious | Not scored | 25 days ago | npm css-gvqmfn-polyfill |
Malicious release: Malicious code in css-ikomdq-polyfill (npm) MAL-2026-17553 | Malicious | Not scored | 25 days ago | npm css-ikomdq-polyfill |
Malicious release: Malicious code in css-ogojwh-polyfill (npm) MAL-2026-17556 | Malicious | Not scored | 25 days ago | npm css-ogojwh-polyfill |
Malicious release: Malicious code in css-ayucyz-polyfill (npm) MAL-2026-17548 | Malicious | Not scored | 25 days ago | npm css-ayucyz-polyfill |
Malicious release: Malicious code in css-nbanqq-polyfill (npm) MAL-2026-17555 | Malicious | Not scored | 25 days ago | npm css-nbanqq-polyfill |
Malicious release: Malicious code in css-dwsawd-polyfill (npm) MAL-2026-17550 | Malicious | Not scored | 25 days ago | npm css-dwsawd-polyfill |
Malicious release: Malicious code in css-display-reading-polyfill (npm) MAL-2026-17549 | Malicious | Not scored | 25 days ago | npm css-display-reading-polyfill |
Malicious release: Malicious code in insomnia-plugin-api-lint-helper (npm) MAL-2026-17561 | Malicious | Not scored | 25 days ago | npm insomnia-plugin-api-lint-helper |
Malicious release: Malicious code in abbishal-poc (npm) MAL-2026-17545 | Malicious | Not scored | 25 days ago | npm abbishal-poc |
Malicious release: Malicious code in hardhat-kex (npm) MAL-2026-17559 | Malicious | Not scored | 25 days ago | npm hardhat-kex |
Malicious release: Malicious code in tostpro (npm) GHSA-x5qq-j2hm-34m3, MAL-2026-17564 | Malicious | Not scored | 25 days ago | npm tostpro |
Malicious release: Malicious code in @inpeek/odata (npm) GHSA-cmm5-vwvx-cv5f, MAL-2026-17542 | Malicious | Not scored | 25 days ago | npm @inpeek/odata |
Malicious release: Malicious code in @inpeek/odata-angular (npm) GHSA-7p27-jmq6-46ph, MAL-2026-17543 | Malicious | Not scored | 25 days ago | npm @inpeek/odata-angular |
Malicious release: Malicious code in @angjlar/core (npm) MAL-2026-17534 | Malicious | Not scored | 25 days ago | npm @angjlar/core |
Malicious release: Malicious code in hardhat-spack (npm) MAL-2026-17560 | Malicious | Not scored | 25 days ago | npm hardhat-spack |
Malicious release: Malicious code in @angulaar/core (npm) MAL-2026-17537 | Malicious | Not scored | 25 days ago | npm @angulaar/core |