Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in link-status-page (npm) GHSA-5j3f-rr83-xcpq, MAL-2026-17338 | Malicious | Not scored | 30 Sep, 2026 | npm link-status-page |
Malicious release: Malicious code in link-age-great (npm) GHSA-jmrg-vr2j-j96x, MAL-2026-17337 | Malicious | Not scored | 30 Sep, 2026 | npm link-age-great |
Malicious release: Malicious code in @redman89405/my-module (npm) GHSA-vc53-jhh2-pwf3, MAL-2026-17336 | Malicious | Not scored | 30 Sep, 2026 | npm @redman89405/my-module |
Malicious release: Malicious code in runhelper (npm) MAL-2026-17332 | Malicious | Not scored | 30 Sep, 2026 | npm runhelper |
Malicious release: Malicious code in iban-validator-js (npm) GHSA-wg95-pj2w-mm76, MAL-2026-17331 | Malicious | Not scored | 30 Sep, 2026 | npm iban-validator-js |
Malicious release: Malicious code in focaleys (npm) MAL-2026-17329 | Malicious | Not scored | 30 Sep, 2026 | npm focaleys |
Malicious release: Malicious code in fca-raihan (npm) MAL-2026-17328 | Malicious | Not scored | 30 Sep, 2026 | npm fca-raihan |
Malicious release: Malicious code in exiouss (npm) MAL-2026-17327 | Malicious | Not scored | 30 Sep, 2026 | npm exiouss |
Malicious release: Malicious code in imgbundle (npm) GHSA-hj6h-6xgx-mpjv, MAL-2026-17330 | Malicious | Not scored | 30 Sep, 2026 | npm imgbundle |
Malicious release: Malicious code in contoso-login-sim-loader (npm) MAL-2026-17322 | Malicious | Not scored | 30 Sep, 2026 | npm contoso-login-sim-loader |
Malicious release: Malicious code in cdn-img-fetch (npm) GHSA-v3rj-w7v4-jcfx, MAL-2026-17320 | Malicious | Not scored | 30 Sep, 2026 | npm cdn-img-fetch |
Malicious release: Malicious code in cleanup-string (PyPI) MAL-2026-17325 | Malicious | Not scored | 30 Sep, 2026 | PyPI cleanup-string |
Malicious release: Malicious code in cortana-md-engine (npm) MAL-2026-17323 | Malicious | Not scored | 30 Sep, 2026 | npm cortana-md-engine |
Malicious release: Malicious code in chaienv (npm) MAL-2026-17321 | Malicious | Not scored | 30 Sep, 2026 | npm chaienv |
Malicious release: Malicious code in booking-eligibility (npm) MAL-2026-17316 | Malicious | Not scored | 30 Sep, 2026 | npm booking-eligibility |
Malicious release: Malicious code in developmentstelemetry (npm) MAL-2026-17318 | Malicious | Not scored | 30 Sep, 2026 | npm developmentstelemetry |
Malicious release: Malicious code in booking-tasks (npm) MAL-2026-17317 | Malicious | Not scored | 30 Sep, 2026 | npm booking-tasks |
Malicious release: Malicious code in bfox-build-utils (PyPI) MAL-2026-17319 | Malicious | Not scored | 30 Sep, 2026 | PyPI bfox-build-utils |
Malicious release: Malicious code in pixsvg (npm) MAL-2026-17313 | Malicious | Not scored | 30 Sep, 2026 | npm pixsvg |
Malicious release: Malicious code in json-bigint-rs (npm) MAL-2026-17312 | Malicious | Not scored | 30 Sep, 2026 | npm json-bigint-rs |
Malicious release: Malicious code in test-supply-npm-lib-4 (npm) MAL-2026-17314 | Malicious | Not scored | 30 Sep, 2026 | npm test-supply-npm-lib-4 |
Malicious release: Malicious code in itsmeeaizat-bailey (npm) GHSA-r64h-xc26-m8ww, MAL-2026-17311 | Malicious | Not scored | 30 Sep, 2026 | npm itsmeeaizat-bailey |
Malicious release: Malicious code in esm-dotenv (npm) MAL-2026-17305 | Malicious | Not scored | 30 Sep, 2026 | npm esm-dotenv |
Malicious release: Malicious code in stestenv (npm) MAL-2026-17309 | Malicious | Not scored | 30 Sep, 2026 | npm stestenv |
Malicious release: Malicious code in tailwind-forms-kit (npm) MAL-2026-17310 | Malicious | Not scored | 30 Sep, 2026 | npm tailwind-forms-kit |
Malicious release: Malicious code in fabric-mod-utils (npm) MAL-2026-17307 | Malicious | Not scored | 30 Sep, 2026 | npm fabric-mod-utils |
Malicious release: Malicious code in mfahelper (npm) GHSA-9f55-6cf9-3pgw, MAL-2026-17308 | Malicious | Not scored | 30 Sep, 2026 | npm mfahelper |
Malicious release: Malicious code in solidity-lock (npm) MAL-2026-17302 | Malicious | Not scored | 30 Sep, 2026 | npm solidity-lock |
Malicious release: Malicious code in web-vitals-polyfill-core-v1 (npm) GHSA-h475-44q2-vfjx, MAL-2026-17303 | Malicious | Not scored | 30 Sep, 2026 | npm web-vitals-polyfill-core-v1 |
Malicious release: Malicious code in future-scripts (npm) MAL-2026-17418 | Malicious | Not scored | 30 Sep, 2026 | npm future-scripts |
Malicious release: Malicious code in fs-commons (npm) MAL-2026-17301 | Malicious | Not scored | 29 Sep, 2026 | npm fs-commons |
Malicious release: Malicious code in common-fs (npm) MAL-2026-17300 | Malicious | Not scored | 29 Sep, 2026 | npm common-fs |
Malicious release: Malicious code in test-agency-assignment-01 (npm) MAL-2026-17296 | Malicious | Not scored | 29 Sep, 2026 | npm test-agency-assignment-01 |
Malicious release: Malicious code in test-agency-assignment-02 (npm) MAL-2026-17297 | Malicious | Not scored | 29 Sep, 2026 | npm test-agency-assignment-02 |
Malicious release: Malicious code in test-agency-assign (npm) MAL-2026-17295 | Malicious | Not scored | 29 Sep, 2026 | npm test-agency-assign |
Malicious release: Malicious code in testosu8887 (npm) MAL-2026-17299 | Malicious | Not scored | 29 Sep, 2026 | npm testosu8887 |
Malicious release: Malicious code in testosu888 (npm) MAL-2026-17298 | Malicious | Not scored | 29 Sep, 2026 | npm testosu888 |
Malicious release: Malicious code in @selfpentest/eslint-pentest-plugin (npm) MAL-2026-17293 | Malicious | Not scored | 29 Sep, 2026 | npm @selfpentest/eslint-pentest-plugin |
Malicious release: Malicious code in @selfpentest/bin-confusion (npm) MAL-2026-17292 | Malicious | Not scored | 29 Sep, 2026 | npm @selfpentest/bin-confusion |
Malicious release: Malicious code in @rutxploit-sec/waves-icons (npm) MAL-2026-17291 | Malicious | Not scored | 29 Sep, 2026 | npm @rutxploit-sec/waves-icons |
Malicious release: Malicious code in @rutxploit-sec/subsplash-google-tag-manager (npm) MAL-2026-17289 | Malicious | Not scored | 29 Sep, 2026 | npm @rutxploit-sec/subsplash-google-tag-manager |
Malicious release: Malicious code in @rutxploit-sec/subsplash-canny (npm) MAL-2026-17288 | Malicious | Not scored | 29 Sep, 2026 | npm @rutxploit-sec/subsplash-canny |
Malicious release: Malicious code in @rutxploit-sec/waves-button-poc (npm) MAL-2026-17290 | Malicious | Not scored | 29 Sep, 2026 | npm @rutxploit-sec/waves-button-poc |
Malicious release: Malicious code in @chatunity/baileys (npm) GHSA-2vxg-pmhf-2c8r, MAL-2026-17287 | Malicious | Not scored | 29 Sep, 2026 | npm @chatunity/baileys |
Malicious release: Malicious code in @akapaki/baileys (npm) GHSA-gxxr-g857-qmrh, MAL-2026-17285 | Malicious | Not scored | 29 Sep, 2026 | npm @akapaki/baileys |
Malicious release: Malicious code in queeuees (PyPI) MAL-2026-17286 | Malicious | Not scored | 29 Sep, 2026 | PyPI queeuees |
Malicious release: Malicious code in fabric-loader-core (npm) MAL-2026-17306 | Malicious | Not scored | 29 Sep, 2026 | npm fabric-loader-core |
Malicious release: Malicious code in sk-lib-enc (npm) GHSA-jcvm-p983-rr37, MAL-2026-17284 | Malicious | Not scored | 29 Sep, 2026 | npm sk-lib-enc |
Malicious release: Malicious code in @xoxo-momo/kit (npm) GHSA-668x-2p2f-6963, MAL-2026-17283 | Malicious | Not scored | 29 Sep, 2026 | npm @xoxo-momo/kit |
Malicious release: Malicious code in @hrmony/hyper-json-builder (npm) GHSA-r476-wfgx-8rc7, MAL-2026-17282 | Malicious | Not scored | 29 Sep, 2026 | npm @hrmony/hyper-json-builder |