Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @sqlite-list/createsql (npm) GHSA-www8-7fg3-xg79, MAL-2026-6915 | Malicious | Not scored | 07 Jul, 2026 | npm @sqlite-list/createsql |
Malicious release: Malicious code in mcp-server-pg (npm) GHSA-cfv7-74pc-vmff, MAL-2026-6922 | Malicious | Not scored | 07 Jul, 2026 | npm mcp-server-pg |
Malicious release: Malicious code in @engagehub/test-claim (npm) GHSA-q6cv-rc8j-6pp7, MAL-2026-6912 | Malicious | Not scored | 07 Jul, 2026 | npm @engagehub/test-claim |
Malicious release: Malicious code in brunomenozzi-test-pkg (npm) GHSA-hpc6-h2fp-hcpj, MAL-2026-6913 | Malicious | Not scored | 07 Jul, 2026 | npm brunomenozzi-test-pkg |
Malicious release: Malicious code in zreactjs (npm) GHSA-9xx3-2pvq-3fmq, MAL-2026-7447 | Malicious | Not scored | 07 Jul, 2026 | npm zreactjs |
Malicious release: Malicious code in zircuit-vault (npm) GHSA-r2vw-pjhw-fffh, MAL-2026-7446 | Malicious | Not scored | 07 Jul, 2026 | npm zircuit-vault |
Malicious release: Malicious code in zircuit-oracle (npm) GHSA-chhx-3jfh-88w2, MAL-2026-7444 | Malicious | Not scored | 07 Jul, 2026 | npm zircuit-oracle |
Malicious release: Malicious code in zircuit-reporter (npm) GHSA-g927-xfxw-v7r5, MAL-2026-7445 | Malicious | Not scored | 07 Jul, 2026 | npm zircuit-reporter |
Malicious release: Malicious code in zircuit-keeper (npm) GHSA-93h4-j8f7-jh32, MAL-2026-7443 | Malicious | Not scored | 07 Jul, 2026 | npm zircuit-keeper |
Malicious release: Malicious code in yreactjs (npm) GHSA-6rw7-ppgr-8jfp, MAL-2026-7442 | Malicious | Not scored | 07 Jul, 2026 | npm yreactjs |
Malicious release: Malicious code in wreactjs (npm) GHSA-7w53-mp9w-79w9, MAL-2026-7441 | Malicious | Not scored | 07 Jul, 2026 | npm wreactjs |
Malicious release: Malicious code in winston-middleware (npm) GHSA-mh82-qcqf-7cpv, MAL-2026-7440 | Malicious | Not scored | 07 Jul, 2026 | npm winston-middleware |
Malicious release: Malicious code in win-env-setup (npm) GHSA-v48m-xpmx-rf2x, MAL-2026-7439 | Malicious | Not scored | 07 Jul, 2026 | npm win-env-setup |
Malicious release: Malicious code in whaleco-assets-json (npm) GHSA-j2cq-rw7r-9fq7, MAL-2026-7438 | Malicious | Not scored | 07 Jul, 2026 | npm whaleco-assets-json |
Malicious release: Malicious code in web3-runtime-engine (npm) GHSA-6x52-8ggw-r388, MAL-2026-7437 | Malicious | Not scored | 07 Jul, 2026 | npm web3-runtime-engine |
Malicious release: Malicious code in wazirx-localtestnpm (npm) GHSA-3gqp-qc73-wv6c, MAL-2026-7436 | Malicious | Not scored | 07 Jul, 2026 | npm wazirx-localtestnpm |
Malicious release: Malicious code in wazir-xlocaletstnpm (npm) GHSA-64h9-56m7-9wmf, MAL-2026-7435 | Malicious | Not scored | 07 Jul, 2026 | npm wazir-xlocaletstnpm |
Malicious release: Malicious code in wallarm-design-system (npm) GHSA-9j5f-jhv8-w4f2, MAL-2026-7434 | Malicious | Not scored | 07 Jul, 2026 | npm wallarm-design-system |
Malicious release: Malicious code in vubiquity-website (npm) GHSA-wpjx-hcc6-99v4, MAL-2026-7433 | Malicious | Not scored | 07 Jul, 2026 | npm vubiquity-website |
Malicious release: Malicious code in vscode-component-explorer (npm) GHSA-vxrm-3gww-6q6x, MAL-2026-7432 | Malicious | Not scored | 07 Jul, 2026 | npm vscode-component-explorer |
Malicious release: Malicious code in vreactjs (npm) GHSA-2v6q-463p-h2xq, MAL-2026-7431 | Malicious | Not scored | 07 Jul, 2026 | npm vreactjs |
Malicious release: Malicious code in ureactjs (npm) GHSA-q947-v524-7rjh, MAL-2026-7430 | Malicious | Not scored | 07 Jul, 2026 | npm ureactjs |
Malicious release: Malicious code in treactjs (npm) GHSA-j688-85vh-w735, MAL-2026-7429 | Malicious | Not scored | 07 Jul, 2026 | npm treactjs |
Malicious release: Malicious code in timelycare (npm) GHSA-vvh3-mp5w-4828, MAL-2026-7428 | Malicious | Not scored | 07 Jul, 2026 | npm timelycare |
Malicious release: Malicious code in swiper-css-normalize (npm) GHSA-35pw-8mpv-x8gp, MAL-2026-7427 | Malicious | Not scored | 07 Jul, 2026 | npm swiper-css-normalize |
Malicious release: Malicious code in suit-base (npm) GHSA-jwvf-9258-r56f, MAL-2026-7426 | Malicious | Not scored | 07 Jul, 2026 | npm suit-base |
Malicious release: Malicious code in style-to-objact (npm) GHSA-jpj5-c2jv-8hr4, MAL-2026-7425 | Malicious | Not scored | 07 Jul, 2026 | npm style-to-objact |
Malicious release: Malicious code in strapi-plugin-pocvk (npm) GHSA-w8fm-qc28-f5gx, MAL-2026-7424 | Malicious | Not scored | 07 Jul, 2026 | npm strapi-plugin-pocvk |
Malicious release: Malicious code in stellar-stablecoin-scripts (npm) GHSA-jx2r-2xcc-f4gc, MAL-2026-7423 | Malicious | Not scored | 07 Jul, 2026 | npm stellar-stablecoin-scripts |
Malicious release: Malicious code in smtp-test-server-node (npm) GHSA-gwhq-rc9q-mcjv, MAL-2026-7422 | Malicious | Not scored | 07 Jul, 2026 | npm smtp-test-server-node |
Malicious release: Malicious code in sitefinitywebapp (npm) GHSA-9q7v-3vhc-h4fp, MAL-2026-7421 | Malicious | Not scored | 07 Jul, 2026 | npm sitefinitywebapp |
Malicious release: Malicious code in sim-apis-chatbot (npm) GHSA-x57q-mh65-jx6c, MAL-2026-7420 | Malicious | Not scored | 07 Jul, 2026 | npm sim-apis-chatbot |
Malicious release: Malicious code in shiphero-dashboard (npm) GHSA-7jrf-6w34-j726, MAL-2026-7419 | Malicious | Not scored | 07 Jul, 2026 | npm shiphero-dashboard |
Malicious release: Malicious code in serverless-twi-testing (npm) GHSA-88gp-cw68-g6q6, MAL-2026-7418 | Malicious | Not scored | 07 Jul, 2026 | npm serverless-twi-testing |
Malicious release: Malicious code in rzeactjs (npm) GHSA-9wmm-mrq8-pfrj, MAL-2026-7417 | Malicious | Not scored | 07 Jul, 2026 | npm rzeactjs |
Malicious release: Malicious code in ryeactjs (npm) GHSA-4rcc-rr6w-f6wc, MAL-2026-7416 | Malicious | Not scored | 07 Jul, 2026 | npm ryeactjs |
Malicious release: Malicious code in rxeactjs (npm) GHSA-gmwv-hr6q-w545, MAL-2026-7415 | Malicious | Not scored | 07 Jul, 2026 | npm rxeactjs |
Malicious release: Malicious code in rweactjs (npm) GHSA-crgw-9m6j-5qm7, MAL-2026-7414 | Malicious | Not scored | 07 Jul, 2026 | npm rweactjs |
Malicious release: Malicious code in rveactjs (npm) GHSA-rj3g-7w93-vhgj, MAL-2026-7413 | Malicious | Not scored | 07 Jul, 2026 | npm rveactjs |
Malicious release: Malicious code in rueactjs (npm) GHSA-9q4m-v573-9wrv, MAL-2026-7412 | Malicious | Not scored | 07 Jul, 2026 | npm rueactjs |
Malicious release: Malicious code in rseactjs (npm) GHSA-h5qw-9j96-j73f, MAL-2026-7410 | Malicious | Not scored | 07 Jul, 2026 | npm rseactjs |
Malicious release: Malicious code in rteactjs (npm) GHSA-wph9-pmmp-2v96, MAL-2026-7411 | Malicious | Not scored | 07 Jul, 2026 | npm rteactjs |
Malicious release: Malicious code in rqeactjs (npm) GHSA-3rh6-5wgx-2892, MAL-2026-7408 | Malicious | Not scored | 07 Jul, 2026 | npm rqeactjs |
Malicious release: Malicious code in rreactjs (npm) GHSA-q8q2-j4jx-ff9q, MAL-2026-7409 | Malicious | Not scored | 07 Jul, 2026 | npm rreactjs |
Malicious release: Malicious code in rpeactjs (npm) GHSA-h8gf-mpx8-5mhf, MAL-2026-7407 | Malicious | Not scored | 07 Jul, 2026 | npm rpeactjs |
Malicious release: Malicious code in roeactjs (npm) GHSA-g22v-944x-xxw4, MAL-2026-7406 | Malicious | Not scored | 07 Jul, 2026 | npm roeactjs |
Malicious release: Malicious code in roblox-lua-promise (npm) GHSA-jmj6-h36q-xf5g, MAL-2026-7405 | Malicious | Not scored | 07 Jul, 2026 | npm roblox-lua-promise |
Malicious release: Malicious code in rngularjs (npm) GHSA-rf5g-jh85-335h, MAL-2026-7404 | Malicious | Not scored | 07 Jul, 2026 | npm rngularjs |
Malicious release: Malicious code in rn-bitu-user (npm) GHSA-cmfg-q299-348f, MAL-2026-7402 | Malicious | Not scored | 07 Jul, 2026 | npm rn-bitu-user |
Malicious release: Malicious code in rneactjs (npm) GHSA-rmq5-48rq-m797, MAL-2026-7403 | Malicious | Not scored | 07 Jul, 2026 | npm rneactjs |