Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in alb-um-availa-ble-zip-mp3-file-6053-the-specials-giqmz-flbewh (npm) GHSA-56cr-m888-fc3h, MAL-2026-17969 | Malicious | Not scored | 10 days ago | npm alb-um-availa-ble-zip-mp3-file-6053-the-specials-giqmz-flbewh |
Malicious release: Malicious code in zip-mp3-a-lbum-do-wnload-new-67476-what-we-do-egj2h-bgfgzz (npm) GHSA-5vq6-24gc-9474, MAL-2026-18043 | Malicious | Not scored | 10 days ago | npm zip-mp3-a-lbum-do-wnload-new-67476-what-we-do-egj2h-bgfgzz |
Malicious release: Malicious code in mp3-file-zip-d-ownload-48120-lost-nation-road-0cibe-ynawhz (npm) GHSA-5xq6-xmgv-f9hp, MAL-2026-18026 | Malicious | Not scored | 10 days ago | npm mp3-file-zip-d-ownload-48120-lost-nation-road-0cibe-ynawhz |
Malicious release: Malicious code in availab-le-alb-um-zip-the-visitor-l1n8t-frzacy (npm) GHSA-6257-r5j5-jv52, MAL-2026-17987 | Malicious | Not scored | 10 days ago | npm availab-le-alb-um-zip-the-visitor-l1n8t-frzacy |
Malicious release: Malicious code in do-wnload-available-the-white-stripes-1-yywrn-pvfqxa (npm) GHSA-6p3p-4q94-3xrx, MAL-2026-17998 | Malicious | Not scored | 10 days ago | npm do-wnload-available-the-white-stripes-1-yywrn-pvfqxa |
Malicious release: Malicious code in new-al-bum-av-ailable-131000-eton-alive-qzngy-cjxczf (npm) GHSA-8vf2-p5m3-f6ff, MAL-2026-18030 | Malicious | Not scored | 10 days ago | npm new-al-bum-av-ailable-131000-eton-alive-qzngy-cjxczf |
Malicious release: Malicious code in down-lo-ad-now-zip-mp3-12737-talking-book-grhl4-lwvpqw (npm) GHSA-8x6h-46vf-p5rh, MAL-2026-18000 | Malicious | Not scored | 10 days ago | npm down-lo-ad-now-zip-mp3-12737-talking-book-grhl4-lwvpqw |
Malicious release: Malicious code in down-lo-ad-now-zip-mp3-116827-chaos-is-me-rj9kf-abdorv (npm) GHSA-92jm-7q3v-h86x, MAL-2026-17999 | Malicious | Not scored | 10 days ago | npm down-lo-ad-now-zip-mp3-116827-chaos-is-me-rj9kf-abdorv |
Malicious release: Malicious code in a-vailable-al-bum-file-19105-filles-de-kilimanjaro-4syt9-khnipp (npm) GHSA-96xx-j42j-vv4v, MAL-2026-17960 | Malicious | Not scored | 10 days ago | npm a-vailable-al-bum-file-19105-filles-de-kilimanjaro-4syt9-khnipp |
Malicious release: Malicious code in mp3-file-zip-d-ownload-hearts-of-oak-7cyqu-oiygcz (npm) GHSA-9rgx-vjmv-2rr8, MAL-2026-18028 | Malicious | Not scored | 10 days ago | npm mp3-file-zip-d-ownload-hearts-of-oak-7cyqu-oiygcz |
Malicious release: Malicious code in a-vailable-al-bum-file-the-world-wont-end-7io2n-pbncia (npm) GHSA-9whp-47wv-mrc7, MAL-2026-17964 | Malicious | Not scored | 10 days ago | npm a-vailable-al-bum-file-the-world-wont-end-7io2n-pbncia |
Malicious release: Malicious code in a-vailable-al-bum-file-30258-secrets-of-the-beehive-rk1pl-vebirt (npm) GHSA-cccj-f4r4-ff28, MAL-2026-17962 | Malicious | Not scored | 10 days ago | npm a-vailable-al-bum-file-30258-secrets-of-the-beehive-rk1pl-vebirt |
Malicious release: Malicious code in alb-um-availa-ble-zip-mp3-file-43838-stories-of-the-years-sslgg-bqfcko (npm) GHSA-f628-82vx-28m8, MAL-2026-17966 | Malicious | Not scored | 10 days ago | npm alb-um-availa-ble-zip-mp3-file-43838-stories-of-the-years-sslgg-bqfcko |
Malicious release: Malicious code in a-lbum-do-wnload-avai-lable-file-2019-138062-i-need-a-new-war-pp6yu-vclmgu (npm) GHSA-fr5c-v53m-q6f8, MAL-2026-17955 | Malicious | Not scored | 10 days ago | npm a-lbum-do-wnload-avai-lable-file-2019-138062-i-need-a-new-war-pp6yu-vclmgu |
Malicious release: Malicious code in down-lo-ad-now-zip-mp3-6140-the-ideal-crash-jysrl-jcdvdw (npm) GHSA-g3pf-jcwm-phxv, MAL-2026-18002 | Malicious | Not scored | 10 days ago | npm down-lo-ad-now-zip-mp3-6140-the-ideal-crash-jysrl-jcdvdw |
Malicious release: Malicious code in do-wnload-available-2013-5195-ripley-pine-zoryg-cyvlnz (npm) GHSA-gh3h-vfpr-5gwh, MAL-2026-17991 | Malicious | Not scored | 10 days ago | npm do-wnload-available-2013-5195-ripley-pine-zoryg-cyvlnz |
Malicious release: Malicious code in availab-le-alb-um-zip-211740-city-burials-xwcy6-bhxnvc (npm) GHSA-h6f2-vgm7-h826, MAL-2026-17982 | Malicious | Not scored | 10 days ago | npm availab-le-alb-um-zip-211740-city-burials-xwcy6-bhxnvc |
Malicious release: Malicious code in a-lbum-do-wnload-avai-lable-file-36733-tchamantche-9uiic-rfzaip (npm) GHSA-j73j-gh8g-qv53, MAL-2026-17956 | Malicious | Not scored | 10 days ago | npm a-lbum-do-wnload-avai-lable-file-36733-tchamantche-9uiic-rfzaip |
Malicious release: Malicious code in zip-mp3-a-lbum-do-wnload-new-392999-fantasy-island-wlvf4-bxyvtm (npm) GHSA-p682-2ggw-p89f, MAL-2026-18042 | Malicious | Not scored | 10 days ago | npm zip-mp3-a-lbum-do-wnload-new-392999-fantasy-island-wlvf4-bxyvtm |
Malicious release: Malicious code in a-vailable-al-bum-file-2015-39171-harmlessness-khwlm-ihtwah (npm) GHSA-ppxc-942p-fmwp, MAL-2026-17961 | Malicious | Not scored | 10 days ago | npm a-vailable-al-bum-file-2015-39171-harmlessness-khwlm-ihtwah |
Malicious release: Malicious code in avail-able-albu-m-down-load-6807-yo-bum-rush-the-show-tq11q-lqcaye (npm) GHSA-rv7w-6g98-vrq8, MAL-2026-17977 | Malicious | Not scored | 10 days ago | npm avail-able-albu-m-down-load-6807-yo-bum-rush-the-show-tq11q-lqcaye |
Malicious release: Malicious code in do-wnload-available-f2oap-wvzhe9 (npm) GHSA-rvh7-vx3v-774p, MAL-2026-17995 | Malicious | Not scored | 10 days ago | npm do-wnload-available-f2oap-wvzhe9 |
Malicious release: Malicious code in new-al-bum-av-ailable-girls-can-tell-ccfoc-vmqodd (npm) GHSA-wrg2-gv9j-xm53, MAL-2026-18032 | Malicious | Not scored | 10 days ago | npm new-al-bum-av-ailable-girls-can-tell-ccfoc-vmqodd |
Malicious release: Malicious code in bs58x64 (npm) GHSA-3xp5-jhc7-xcm9, MAL-2026-17989 | Malicious | Not scored | 10 days ago | npm bs58x64 |
Malicious release: Malicious code in bs58x64.js (npm) GHSA-rhf8-vjg2-4vpv, MAL-2026-17990 | Malicious | Not scored | 10 days ago | npm bs58x64.js |
Malicious release: Malicious code in base58x64 (npm) GHSA-57vp-ppmx-cgc5, MAL-2026-17988 | Malicious | Not scored | 10 days ago | npm base58x64 |
Malicious release: Malicious code in array-inline (npm) GHSA-4rc9-v9wp-xwrp, MAL-2026-17942 | Malicious | Not scored | 11 days ago | npm array-inline |
Malicious release: Malicious code in array-inline-transform (npm) GHSA-5hpf-6www-ff38, MAL-2026-17934 | Malicious | Not scored | 11 days ago | npm array-inline-transform |
Malicious release: Malicious code in dsjklweuvhgsdcq (npm) GHSA-h7g6-q4c3-g8fr, MAL-2026-17935 | Malicious | Not scored | 11 days ago | npm dsjklweuvhgsdcq |
Malicious release: Malicious code in zxhgssiyluwxchn (npm) GHSA-54qq-xhj8-pcjc, MAL-2026-17941 | Malicious | Not scored | 11 days ago | npm zxhgssiyluwxchn |
Malicious release: Malicious code in mx3dxhgic8xhd6 (npm) GHSA-cqch-q2w2-r565, MAL-2026-17936 | Malicious | Not scored | 11 days ago | npm mx3dxhgic8xhd6 |
Malicious release: Malicious code in ticketcathayoct12 (npm) GHSA-g7mg-3h9r-c8h3, MAL-2026-17939 | Malicious | Not scored | 11 days ago | npm ticketcathayoct12 |
Malicious release: Malicious code in vjkpwjxbvndelta (npm) GHSA-j4h8-xxcj-28g7, MAL-2026-17940 | Malicious | Not scored | 11 days ago | npm vjkpwjxbvndelta |
Malicious release: Malicious code in nsdhjuiwqxmhsf1 (npm) GHSA-mrcc-xr4x-hmjf, MAL-2026-17938 | Malicious | Not scored | 11 days ago | npm nsdhjuiwqxmhsf1 |
Malicious release: Malicious code in mxckjdgweuxpsiohd (npm) GHSA-p2wp-j4r7-rcq5, MAL-2026-17937 | Malicious | Not scored | 11 days ago | npm mxckjdgweuxpsiohd |
Malicious release: Malicious code in aldi02-baileys (npm) GHSA-fm6q-x7qr-xmpw, MAL-2026-17931 | Malicious | Not scored | 11 days ago | npm aldi02-baileys |
Malicious release: Malicious code in zeroz-baileys (npm) GHSA-fwfc-f4gp-qrcq, MAL-2026-17933 | Malicious | Not scored | 11 days ago | npm zeroz-baileys |
Malicious release: Malicious code in ichigo-baileys (npm) GHSA-q66v-22v7-2qj9, MAL-2026-17445 | Malicious | Not scored | 11 days ago | npm ichigo-baileys |
Malicious release: Malicious code in aemath-baileys (npm) GHSA-rc7v-fm82-xp4x, MAL-2026-17930 | Malicious | Not scored | 11 days ago | npm aemath-baileys |
Malicious release: Malicious code in item-validator (npm) GHSA-ff48-h3v7-m43r, MAL-2026-17932 | Malicious | Not scored | 11 days ago | npm item-validator |
Malicious release: Malicious code in rubbydev-crash-baileys (npm) GHSA-h9p4-38hj-p2gj, MAL-2026-17450 | Malicious | Not scored | 11 days ago | npm rubbydev-crash-baileys |
Malicious release: Malicious code in prastzyy (npm) GHSA-qhp3-5q65-76mj, MAL-2026-17449 | Malicious | Not scored | 11 days ago | npm prastzyy |
Malicious release: Malicious code in xcvrenzcompany (npm) GHSA-5f99-96jc-hg98, MAL-2026-17452 | Malicious | Not scored | 11 days ago | npm xcvrenzcompany |
Malicious release: Malicious code in xzbails (npm) GHSA-6853-2fcq-h2jm, MAL-2026-17410 | Malicious | Not scored | 11 days ago | npm xzbails |
Malicious release: Malicious code in xzvexpzcbailey (npm) GHSA-73c8-rgvx-fw82, MAL-2026-17412 | Malicious | Not scored | 11 days ago | npm xzvexpzcbailey |
Malicious release: Malicious code in prastzy (npm) GHSA-mwjq-f2w5-934c, MAL-2026-17448 | Malicious | Not scored | 11 days ago | npm prastzy |
Malicious release: Malicious code in @fmr-ap149494/apex-base-component (npm) MAL-2026-17929 | Malicious | Not scored | 11 days ago | npm @fmr-ap149494/apex-base-component |
Malicious release: Malicious code in @fcsmc/commercial-analytics (npm) MAL-2026-17928 | Malicious | Not scored | 11 days ago | npm @fcsmc/commercial-analytics |
Malicious release: Malicious code in fabdeploycheck (PyPI) MAL-2026-17926 | Malicious | Not scored | 11 days ago | PyPI fabdeploycheck |
Malicious release: Malicious code in fabtoolkit (PyPI) MAL-2026-17927 | Malicious | Not scored | 11 days ago | PyPI fabtoolkit |