Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in chalk-buttons (npm) GHSA-rp59-qq3q-276w, MAL-2026-11257 | Malicious | Not scored | 30 Jul, 2026 | npm chalk-buttons |
Malicious release: Malicious code in chalk-helper (npm) GHSA-vcp3-wggf-xmf4, MAL-2026-11258 | Malicious | Not scored | 30 Jul, 2026 | npm chalk-helper |
Malicious release: Malicious code in clo321 (npm) GHSA-46h5-45mv-wqvp, MAL-2026-11261 | Malicious | Not scored | 30 Jul, 2026 | npm clo321 |
Malicious release: Malicious code in ttest333 (npm) GHSA-6mwc-v3f9-7vgg, MAL-2026-11404 | Malicious | Not scored | 30 Jul, 2026 | npm ttest333 |
Malicious release: Malicious code in raydiums (npm) GHSA-8rhm-95rv-32f6, MAL-2026-11363 | Malicious | Not scored | 30 Jul, 2026 | npm raydiums |
Malicious release: Malicious code in clo321-server (npm) GHSA-c4xj-wr6j-7w45, MAL-2026-11262 | Malicious | Not scored | 30 Jul, 2026 | npm clo321-server |
Malicious release: Malicious code in 1apijs (npm) GHSA-fchq-q2wv-wg89, MAL-2026-11206 | Malicious | Not scored | 30 Jul, 2026 | npm 1apijs |
Malicious release: Malicious code in apijsclo (npm) GHSA-j2jm-6rgv-3q9p, MAL-2026-11239 | Malicious | Not scored | 30 Jul, 2026 | npm apijsclo |
Malicious release: Malicious code in clo2 (npm) GHSA-jc7h-f527-wc9v, MAL-2026-11260 | Malicious | Not scored | 30 Jul, 2026 | npm clo2 |
Malicious release: Malicious code in clo-adspect (npm) GHSA-pwwc-vh8j-q428, MAL-2026-11259 | Malicious | Not scored | 30 Jul, 2026 | npm clo-adspect |
Malicious release: Malicious code in uniswapintefrace (npm) GHSA-q756-cqgj-x6jv, MAL-2026-11407 | Malicious | Not scored | 30 Jul, 2026 | npm uniswapintefrace |
Malicious release: Malicious code in ttest3333 (npm) GHSA-vqq8-5rp9-328w, MAL-2026-11405 | Malicious | Not scored | 30 Jul, 2026 | npm ttest3333 |
Malicious release: Malicious code in testtwix (npm) GHSA-wg6g-7pqp-9j2w, MAL-2026-11398 | Malicious | Not scored | 30 Jul, 2026 | npm testtwix |
Malicious release: Malicious code in clotest (npm) GHSA-x872-j53w-2rp8, MAL-2026-11263 | Malicious | Not scored | 30 Jul, 2026 | npm clotest |
Malicious release: Malicious code in ml-data-shared (PyPI) MAL-2026-11199 | Malicious | Not scored | 30 Jul, 2026 | PyPI ml-data-shared |
Malicious release: Malicious code in base58-ts (npm) GHSA-c93x-hmxp-gvmw, MAL-2026-11247 | Malicious | Not scored | 30 Jul, 2026 | npm base58-ts |
Malicious release: Malicious code in tgnode (npm) GHSA-mf3c-mgqq-g7v5, MAL-2026-11399 | Malicious | Not scored | 30 Jul, 2026 | npm tgnode |
Malicious release: Malicious code in base-x-ts (npm) GHSA-r3x2-f3fq-4ph8, MAL-2026-11246 | Malicious | Not scored | 30 Jul, 2026 | npm base-x-ts |
Malicious release: Malicious code in dash-merge (npm) GHSA-q4vw-49f5-33cf, MAL-2026-11274 | Malicious | Not scored | 30 Jul, 2026 | npm dash-merge |
Malicious release: Malicious code in node-logger-winston (npm) GHSA-r73c-43c8-c6vm, MAL-2026-11341 | Malicious | Not scored | 30 Jul, 2026 | npm node-logger-winston |
Malicious release: Malicious code in ml-nps-shared (PyPI) MAL-2026-11201 | Malicious | Not scored | 30 Jul, 2026 | PyPI ml-nps-shared |
Malicious release: Malicious code in ml-fdbk-shared (PyPI) MAL-2026-11200 | Malicious | Not scored | 30 Jul, 2026 | PyPI ml-fdbk-shared |
Malicious release: Malicious code in @grua/core (npm) GHSA-jm3c-xq42-hcxw, MAL-2026-11213 | Malicious | Not scored | 30 Jul, 2026 | npm @grua/core |
Malicious release: Malicious code in @grua/icons (npm) MAL-2026-11214 | Malicious | Not scored | 30 Jul, 2026 | npm @grua/icons |
Malicious release: Malicious code in isix (npm) GHSA-qc59-xgf9-w976, MAL-2026-11323 | Malicious | Not scored | 30 Jul, 2026 | npm isix |
Malicious release: Malicious code in @solana-sdk/web3.js (npm) GHSA-6p5w-j6wv-g9w5, MAL-2026-11227 | Malicious | Not scored | 30 Jul, 2026 | npm @solana-sdk/web3.js |
Malicious release: Malicious code in @ethers-sdk/ethers (npm) GHSA-p2pf-mrh7-5f43, MAL-2026-11210 | Malicious | Not scored | 30 Jul, 2026 | npm @ethers-sdk/ethers |
Malicious release: Malicious code in @ethers-sdk/wallet (npm) MAL-2026-11211 | Malicious | Not scored | 30 Jul, 2026 | npm @ethers-sdk/wallet |
Malicious release: Malicious code in ml-shared (PyPI) MAL-2026-11202 | Malicious | Not scored | 30 Jul, 2026 | PyPI ml-shared |
Malicious release: Malicious code in dotenv-core (npm) GHSA-5vxc-5m5h-j6c3, MAL-2026-11281 | Malicious | Not scored | 30 Jul, 2026 | npm dotenv-core |
Malicious release: Malicious code in dotex-plugin (npm) GHSA-f439-5hgg-ff3v, MAL-2026-11282 | Malicious | Not scored | 30 Jul, 2026 | npm dotex-plugin |
Malicious release: Malicious code in compose-logger-stand (npm) GHSA-9wv2-6h9j-773q, MAL-2026-11267 | Malicious | Not scored | 30 Jul, 2026 | npm compose-logger-stand |
Malicious release: Malicious code in pulleeelll (npm) GHSA-2q75-m767-rjjx, MAL-2026-11350 | Malicious | Not scored | 30 Jul, 2026 | npm pulleeelll |
Malicious release: Malicious code in build-time-metrics (npm) GHSA-38xc-88p4-8qr9, MAL-2026-11252 | Malicious | Not scored | 30 Jul, 2026 | npm build-time-metrics |
Malicious release: Malicious code in aven_shared (npm) GHSA-3cf3-mf4x-c7p2, MAL-2026-11243 | Malicious | Not scored | 30 Jul, 2026 | npm aven_shared |
Malicious release: Malicious code in time-to-reload (npm) GHSA-4v2j-v4cg-w2jq, MAL-2026-11402 | Malicious | Not scored | 30 Jul, 2026 | npm time-to-reload |
Malicious release: Malicious code in js-focus-within (npm) GHSA-68hr-8r9c-9r4f, MAL-2026-11324 | Malicious | Not scored | 30 Jul, 2026 | npm js-focus-within |
Malicious release: Malicious code in termly-namespace (npm) GHSA-6p27-jwrq-4cvf, MAL-2026-11395 | Malicious | Not scored | 30 Jul, 2026 | npm termly-namespace |
Malicious release: Malicious code in confetti-rebuilds (npm) GHSA-75r4-r9x2-2583, MAL-2026-11268 | Malicious | Not scored | 30 Jul, 2026 | npm confetti-rebuilds |
Malicious release: Malicious code in impv (npm) GHSA-77q6-4j2g-cpm3, MAL-2026-11319 | Malicious | Not scored | 30 Jul, 2026 | npm impv |
Malicious release: Malicious code in gatorhelper (npm) GHSA-84r3-rr57-j729, MAL-2026-11315 | Malicious | Not scored | 30 Jul, 2026 | npm gatorhelper |
Malicious release: Malicious code in easycommons (npm) GHSA-8j5m-gxwv-6mv7, MAL-2026-11285 | Malicious | Not scored | 30 Jul, 2026 | npm easycommons |
Malicious release: Malicious code in cancelling (npm) GHSA-8r7h-9852-wx7j, MAL-2026-11253 | Malicious | Not scored | 30 Jul, 2026 | npm cancelling |
Malicious release: Malicious code in ember-cli-deploy-derploy (npm) GHSA-8wvc-pj99-rq95, MAL-2026-11289 | Malicious | Not scored | 30 Jul, 2026 | npm ember-cli-deploy-derploy |
Malicious release: Malicious code in decline (npm) GHSA-92pf-6q5p-pv82, MAL-2026-11276 | Malicious | Not scored | 30 Jul, 2026 | npm decline |
Malicious release: Malicious code in baofdadbybmqeefeeginweoamxlphrjq (npm) GHSA-cv56-wrww-4mm2, MAL-2026-11245 | Malicious | Not scored | 30 Jul, 2026 | npm baofdadbybmqeefeeginweoamxlphrjq |
Malicious release: Malicious code in columns_changed (npm) GHSA-f7m4-4g35-5599, MAL-2026-11266 | Malicious | Not scored | 30 Jul, 2026 | npm columns_changed |
Malicious release: Malicious code in live-reload-on-error (npm) GHSA-g4qf-p9c2-75q9, MAL-2026-11326 | Malicious | Not scored | 30 Jul, 2026 | npm live-reload-on-error |
Malicious release: Malicious code in fcogvspgigatanzcydfyvgtjhvxibyau (npm) GHSA-gfcf-jf6c-4rgx, MAL-2026-11310 | Malicious | Not scored | 30 Jul, 2026 | npm fcogvspgigatanzcydfyvgtjhvxibyau |
Malicious release: Malicious code in slowest-build-nodes (npm) GHSA-gg46-93cp-xqgh, MAL-2026-11380 | Malicious | Not scored | 30 Jul, 2026 | npm slowest-build-nodes |