Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in pretierr (npm) GHSA-rfv2-vfmp-jq9p, MAL-2026-11348 | Malicious | Not scored | 30 Jul, 2026 | npm pretierr |
Malicious release: Malicious code in maalxios (npm) GHSA-5f53-x2hv-vqqx, MAL-2026-11329 | Malicious | Not scored | 30 Jul, 2026 | npm maalxios |
Malicious release: Malicious code in malxios (npm) GHSA-73g9-wgm7-84qr, MAL-2026-11330 | Malicious | Not scored | 30 Jul, 2026 | npm malxios |
Malicious release: Malicious code in @sourav_chanduka/oidc-client (npm) GHSA-5w3j-78pm-qcj7, MAL-2026-11231 | Malicious | Not scored | 30 Jul, 2026 | npm @sourav_chanduka/oidc-client |
Malicious release: Malicious code in @sourav_chanduka/core (npm) GHSA-7p79-743j-rjq8, MAL-2026-11229 | Malicious | Not scored | 30 Jul, 2026 | npm @sourav_chanduka/core |
Malicious release: Malicious code in @sourav_chanduka/core-no-ngrok (npm) GHSA-qrx2-r7m9-fw6x, MAL-2026-11230 | Malicious | Not scored | 30 Jul, 2026 | npm @sourav_chanduka/core-no-ngrok |
Malicious release: Malicious code in @web3utils/common (npm) GHSA-q3f3-h8g8-7qc6, MAL-2026-11234 | Malicious | Not scored | 30 Jul, 2026 | npm @web3utils/common |
Malicious release: Malicious code in @solana-utils/common (npm) GHSA-86ff-vvv8-wr2x, MAL-2026-11228 | Malicious | Not scored | 30 Jul, 2026 | npm @solana-utils/common |
Malicious release: Malicious code in @web3-util/common (npm) GHSA-wvx6-fwf2-hpp5, MAL-2026-11233 | Malicious | Not scored | 30 Jul, 2026 | npm @web3-util/common |
Malicious release: Malicious code in discord-rsc (npm) GHSA-g892-r2fw-vxgc, MAL-2026-11279 | Malicious | Not scored | 30 Jul, 2026 | npm discord-rsc |
Malicious release: Malicious code in discord-csr (npm) GHSA-gjqh-7qrr-25q9, MAL-2026-11277 | Malicious | Not scored | 30 Jul, 2026 | npm discord-csr |
Malicious release: Malicious code in tailwindcsssss (npm) GHSA-6x93-j4j5-p856, MAL-2026-11394 | Malicious | Not scored | 30 Jul, 2026 | npm tailwindcsssss |
Malicious release: Malicious code in tailwindcssss (npm) MAL-2026-11393 | Malicious | Not scored | 30 Jul, 2026 | npm tailwindcssss |
Malicious release: Malicious code in @pumpdot-fun/pump-swap-sdk (npm) GHSA-4gj3-7xcg-jhpm, MAL-2026-11224 | Malicious | Not scored | 30 Jul, 2026 | npm @pumpdot-fun/pump-swap-sdk |
Malicious release: Malicious code in @relforce-dev/console-log (npm) GHSA-4rj5-hjhh-8xc8, MAL-2026-11225 | Malicious | Not scored | 30 Jul, 2026 | npm @relforce-dev/console-log |
Malicious release: Malicious code in @pumpdot-fun/pump-sdk (npm) GHSA-873h-v5vp-pq52, MAL-2026-11223 | Malicious | Not scored | 30 Jul, 2026 | npm @pumpdot-fun/pump-sdk |
Malicious release: Malicious code in @node-console-log/log (npm) GHSA-cmv8-rmg2-2232, MAL-2026-11216 | Malicious | Not scored | 30 Jul, 2026 | npm @node-console-log/log |
Malicious release: Malicious code in fwf (npm) GHSA-5rjh-56g3-j7x2, MAL-2026-11314 | Malicious | Not scored | 30 Jul, 2026 | npm fwf |
Malicious release: Malicious code in @santieich/homebridge-midea-lan (npm) GHSA-jx3g-gq4q-33jp, MAL-2026-11226 | Malicious | Not scored | 30 Jul, 2026 | npm @santieich/homebridge-midea-lan |
Malicious release: Malicious code in aruda (npm) GHSA-pxhx-3f73-24mp, MAL-2026-11240 | Malicious | Not scored | 30 Jul, 2026 | npm aruda |
Malicious release: Malicious code in famshot (npm) GHSA-v3p3-vv86-m2vx, MAL-2026-11309 | Malicious | Not scored | 30 Jul, 2026 | npm famshot |
Malicious release: Malicious code in @patternfly-4/react-core (npm) GHSA-qvfg-h978-mrfg, MAL-2026-11220 | Malicious | Not scored | 30 Jul, 2026 | npm @patternfly-4/react-core |
Malicious release: Malicious code in @patternfly-4/quickstarts (npm) MAL-2026-11219 | Malicious | Not scored | 30 Jul, 2026 | npm @patternfly-4/quickstarts |
Malicious release: Malicious code in @patternfly-4/react-table (npm) MAL-2026-11221 | Malicious | Not scored | 30 Jul, 2026 | npm @patternfly-4/react-table |
Malicious release: Malicious code in @patternfly-4/react-tokens (npm) MAL-2026-11222 | Malicious | Not scored | 30 Jul, 2026 | npm @patternfly-4/react-tokens |
Malicious release: Malicious code in node-fetch-core (npm) GHSA-jw4q-3q2m-r329, MAL-2026-11339 | Malicious | Not scored | 30 Jul, 2026 | npm node-fetch-core |
Malicious release: Malicious code in @nordea-web/core (npm) GHSA-76gq-5fh6-q22c, MAL-2026-11217 | Malicious | Not scored | 30 Jul, 2026 | npm @nordea-web/core |
Malicious release: Malicious code in @nordea-web/ui (npm) GHSA-x4m3-33mp-hhf6, MAL-2026-11218 | Malicious | Not scored | 30 Jul, 2026 | npm @nordea-web/ui |
Malicious release: Malicious code in ncc-fonts (npm) GHSA-3mww-p356-w37h, MAL-2026-11336 | Malicious | Not scored | 30 Jul, 2026 | npm ncc-fonts |
Malicious release: Malicious code in ncc-hyperapp (npm) GHSA-64cv-9vqh-jmc7, MAL-2026-11337 | Malicious | Not scored | 30 Jul, 2026 | npm ncc-hyperapp |
Malicious release: Malicious code in ncc-web (npm) GHSA-865v-rvmq-73cp, MAL-2026-11338 | Malicious | Not scored | 30 Jul, 2026 | npm ncc-web |
Malicious release: Malicious code in hjw-nasa-lib (npm) GHSA-9r29-2px8-pvcj, MAL-2026-11316 | Malicious | Not scored | 30 Jul, 2026 | npm hjw-nasa-lib |
Malicious release: Malicious code in dwa-tridion-webapp (npm) GHSA-c9jm-55f7-3w52, MAL-2026-11284 | Malicious | Not scored | 30 Jul, 2026 | npm dwa-tridion-webapp |
Malicious release: Malicious code in tsetnpmackage (npm) GHSA-2rj9-jmvj-4cr8, MAL-2026-11403 | Malicious | Not scored | 30 Jul, 2026 | npm tsetnpmackage |
Malicious release: Malicious code in testsetset (npm) GHSA-9hj6-prhx-4vq7, MAL-2026-11397 | Malicious | Not scored | 30 Jul, 2026 | npm testsetset |
Malicious release: Malicious code in @meteora-sdk/core (npm) GHSA-f5pc-vrcw-c7r3, MAL-2026-11215 | Malicious | Not scored | 30 Jul, 2026 | npm @meteora-sdk/core |
Malicious release: Malicious code in cmd-auth (npm) GHSA-7m57-mffc-c7p7, MAL-2026-11264 | Malicious | Not scored | 30 Jul, 2026 | npm cmd-auth |
Malicious release: Malicious code in kajl (npm) GHSA-vr22-p67c-9rrc, MAL-2026-11325 | Malicious | Not scored | 30 Jul, 2026 | npm kajl |
Malicious release: Malicious code in react.ja (npm) GHSA-7543-8w65-6h8j, MAL-2026-11368 | Malicious | Not scored | 30 Jul, 2026 | npm react.ja |
Malicious release: Malicious code in react.jd (npm) GHSA-m7jm-x84r-9652, MAL-2026-11369 | Malicious | Not scored | 30 Jul, 2026 | npm react.jd |
Malicious release: Malicious code in installreact (npm) GHSA-mm9w-w535-r967, MAL-2026-11322 | Malicious | Not scored | 30 Jul, 2026 | npm installreact |
Malicious release: Malicious code in express.ja (npm) GHSA-2gpw-6q22-7qwj, MAL-2026-11307 | Malicious | Not scored | 30 Jul, 2026 | npm express.ja |
Malicious release: Malicious code in ekspress (npm) GHSA-692q-284v-2hgw, MAL-2026-11288 | Malicious | Not scored | 30 Jul, 2026 | npm ekspress |
Malicious release: Malicious code in express.jd (npm) GHSA-9wgj-2979-wcq2, MAL-2026-11308 | Malicious | Not scored | 30 Jul, 2026 | npm express.jd |
Malicious release: Malicious code in react.j (npm) GHSA-cmr4-cq5h-774c, MAL-2026-11367 | Malicious | Not scored | 30 Jul, 2026 | npm react.j |
Malicious release: Malicious code in expres.js (npm) GHSA-f9fq-7h8v-5c89, MAL-2026-11302 | Malicious | Not scored | 30 Jul, 2026 | npm expres.js |
Malicious release: Malicious code in reac.js (npm) GHSA-m47m-vg8r-jqxm, MAL-2026-11364 | Malicious | Not scored | 30 Jul, 2026 | npm reac.js |
Malicious release: Malicious code in reakt.js (npm) GHSA-qxw9-cxcm-h598, MAL-2026-11370 | Malicious | Not scored | 30 Jul, 2026 | npm reakt.js |
Malicious release: Malicious code in chalk-button (npm) GHSA-6vfm-x5rq-5gqr, MAL-2026-11256 | Malicious | Not scored | 30 Jul, 2026 | npm chalk-button |
Malicious release: Malicious code in chalk-butons (npm) GHSA-qpfj-w94p-p3wv, MAL-2026-11255 | Malicious | Not scored | 30 Jul, 2026 | npm chalk-butons |