Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in hardhat-plugin-solidity (npm) MAL-2026-6706 | Malicious | Not scored | 01 Jul, 2026 | npm hardhat-plugin-solidity |
Malicious release: Malicious code in hardhat-compile-ethers (npm) GHSA-rgq3-mp7r-3cq5, MAL-2026-6705 | Malicious | Not scored | 01 Jul, 2026 | npm hardhat-compile-ethers |
Malicious release: Malicious code in zyncmap (npm) MAL-2026-6708 | Malicious | Not scored | 01 Jul, 2026 | npm zyncmap |
Malicious release: Malicious code in svgson-lite (npm) GHSA-g7rx-jhhj-8whr, MAL-2026-6707 | Malicious | Not scored | 01 Jul, 2026 | npm svgson-lite |
Malicious release: Malicious code in base65-85x (npm) GHSA-mv5w-mcrv-wmx9, MAL-2026-6704 | Malicious | Not scored | 01 Jul, 2026 | npm base65-85x |
Malicious release: Malicious code in @andes-tools/colors (npm) MAL-2026-6703 | Malicious | Not scored | 01 Jul, 2026 | npm @andes-tools/colors |
Malicious release: Malicious code in npm-show-date-proof-strings (npm) MAL-2026-6791 | Malicious | Not scored | 01 Jul, 2026 | npm npm-show-date-proof-strings |
Malicious release: Malicious code in date-fns-lite (npm) MAL-2026-6722 | Malicious | Not scored | 01 Jul, 2026 | npm date-fns-lite |
Malicious release: Malicious code in node-pino (npm) GHSA-w294-7cjj-7mvg, MAL-2026-6762 | Malicious | Not scored | 01 Jul, 2026 | npm node-pino |
Malicious release: Malicious code in ecto-corsair-flag-7kq3mz (npm) MAL-2026-6699 | Malicious | Not scored | 30 Jun, 2026 | npm ecto-corsair-flag-7kq3mz |
Malicious release: Malicious code in module-index-cache (npm) MAL-2026-6700 | Malicious | Not scored | 30 Jun, 2026 | npm module-index-cache |
Malicious release: Malicious code in ripshakti (npm) MAL-2026-6701 | Malicious | Not scored | 30 Jun, 2026 | npm ripshakti |
Malicious release: Malicious code in @sudoughnym/enviro-demo (npm) GHSA-77gf-97j3-jv6p, MAL-2026-6697 | Malicious | Not scored | 30 Jun, 2026 | npm @sudoughnym/enviro-demo |
Malicious release: Malicious code in @businessapp-microsites/apis (npm) GHSA-5x2m-5wc4-5j3c, MAL-2026-6696 | Malicious | Not scored | 30 Jun, 2026 | npm @businessapp-microsites/apis |
Malicious release: Malicious code in cursed-modules (npm) MAL-2026-6698 | Malicious | Not scored | 30 Jun, 2026 | npm cursed-modules |
Malicious release: Malicious code in procwire (npm) GHSA-5r42-357x-f2mx, MAL-2026-6687 | Malicious | Not scored | 30 Jun, 2026 | npm procwire |
Malicious release: Malicious code in brock-react-alerts (npm) GHSA-gh2m-x2qr-m2cm, MAL-2026-6681 | Malicious | Not scored | 30 Jun, 2026 | npm brock-react-alerts |
Malicious release: Malicious code in brock-loader (npm) GHSA-gwv3-x257-r43c, MAL-2026-6680 | Malicious | Not scored | 30 Jun, 2026 | npm brock-loader |
Malicious release: Malicious code in quoting (npm) GHSA-x8q6-66jr-wmp3, MAL-2026-6685 | Malicious | Not scored | 30 Jun, 2026 | npm quoting |
Malicious release: Malicious code in setup-cicd (npm) GHSA-5rc3-r829-w347, MAL-2026-6686 | Malicious | Not scored | 30 Jun, 2026 | npm setup-cicd |
Malicious release: Malicious code in postcss-property-rollup (npm) GHSA-6g2x-2f5c-wp9w, MAL-2026-6684 | Malicious | Not scored | 30 Jun, 2026 | npm postcss-property-rollup |
Malicious release: Malicious code in nbmolviz-js (npm) GHSA-fc4r-p4fh-6h4p, MAL-2026-6683 | Malicious | Not scored | 30 Jun, 2026 | npm nbmolviz-js |
Malicious release: Malicious code in confluent-kafka-javascript (npm) GHSA-j28m-58xp-3wgh, MAL-2026-6682 | Malicious | Not scored | 30 Jun, 2026 | npm confluent-kafka-javascript |
Malicious release: Malicious code in agent-starter-pack (npm) GHSA-x676-qqgj-qfgg, MAL-2026-6679 | Malicious | Not scored | 30 Jun, 2026 | npm agent-starter-pack |
Malicious release: Malicious code in ts-linting-builder (npm) GHSA-8mpj-272v-jhv7, MAL-2026-6678 | Malicious | Not scored | 30 Jun, 2026 | npm ts-linting-builder |
Malicious release: Malicious code in ts-lint-builders-v2.1 (npm) GHSA-vjgf-xg3j-g9c5, MAL-2026-6677 | Malicious | Not scored | 30 Jun, 2026 | npm ts-lint-builders-v2.1 |
Malicious release: Malicious code in rs-biginteger (npm) GHSA-xm5w-w96q-42f3, MAL-2026-6675 | Malicious | Not scored | 30 Jun, 2026 | npm rs-biginteger |
Malicious release: Malicious code in terminal-prettier (npm) GHSA-m8cr-hv9p-pg3f, MAL-2026-6676 | Malicious | Not scored | 30 Jun, 2026 | npm terminal-prettier |
Malicious release: Malicious code in vue-demi-fix (npm) GHSA-p53q-mf26-4h26, MAL-2026-6702 | Malicious | Not scored | 30 Jun, 2026 | npm vue-demi-fix |
Malicious release: Malicious code in ripshakti1 (npm) MAL-2026-6674 | Malicious | Not scored | 30 Jun, 2026 | npm ripshakti1 |
Malicious release: Malicious code in anthropic-toolkit (npm) GHSA-c7v6-f7mc-9crv, MAL-2026-6673 | Malicious | Not scored | 30 Jun, 2026 | npm anthropic-toolkit |
Malicious release: Malicious code in log-taker1 (npm) GHSA-35q5-q365-j23w, MAL-2026-6690 | Malicious | Not scored | 30 Jun, 2026 | npm log-taker1 |
Malicious release: Malicious code in thirdwebb (npm) GHSA-46px-g2r9-8vcr, MAL-2026-6694 | Malicious | Not scored | 30 Jun, 2026 | npm thirdwebb |
Malicious release: Malicious code in thirdwb (npm) GHSA-ccmq-q5j8-hvxc, MAL-2026-6693 | Malicious | Not scored | 30 Jun, 2026 | npm thirdwb |
Malicious release: Malicious code in decimal-format-core (npm) GHSA-jpc6-jpfr-f453, MAL-2026-6689 | Malicious | Not scored | 30 Jun, 2026 | npm decimal-format-core |
Malicious release: Malicious code in console-fmt-cli (npm) GHSA-p3j8-3227-2w78, MAL-2026-6688 | Malicious | Not scored | 30 Jun, 2026 | npm console-fmt-cli |
Malicious release: Malicious code in ts-bn-proto (npm) GHSA-wxpc-r4jx-9jrw, MAL-2026-6695 | Malicious | Not scored | 30 Jun, 2026 | npm ts-bn-proto |
Malicious release: Malicious code in polymarket-clob-maths (npm) MAL-2026-6691 | Malicious | Not scored | 30 Jun, 2026 | npm polymarket-clob-maths |
Malicious release: Malicious code in polymarket-trading-developer-tools (npm) MAL-2026-6692 | Malicious | Not scored | 30 Jun, 2026 | npm polymarket-trading-developer-tools |
Malicious release: Malicious code in @webda-infra-ui/static-images (npm) GHSA-pp6c-f2ph-gxmm, MAL-2026-6652 | Malicious | Not scored | 29 Jun, 2026 | npm @webda-infra-ui/static-images |
Malicious release: Malicious code in @appsource/utils (npm) GHSA-28xf-wrjx-23mj, MAL-2026-6601 | Malicious | Not scored | 29 Jun, 2026 | npm @appsource/utils |
Malicious release: Malicious code in @bscom/styling (npm) GHSA-29c6-c7cm-r8ch, MAL-2026-6605 | Malicious | Not scored | 29 Jun, 2026 | npm @bscom/styling |
Malicious release: Malicious code in @bc-workspace/utils (npm) GHSA-3vmg-w948-phr5, MAL-2026-6603 | Malicious | Not scored | 29 Jun, 2026 | npm @bc-workspace/utils |
Malicious release: Malicious code in @cseo-hr/trpweb-shared (npm) GHSA-5x3r-97g5-r9j5, MAL-2026-6610 | Malicious | Not scored | 29 Jun, 2026 | npm @cseo-hr/trpweb-shared |
Malicious release: Malicious code in @sixt-payment/form-react (npm) GHSA-8cxm-2pmw-c822, MAL-2026-6649 | Malicious | Not scored | 29 Jun, 2026 | npm @sixt-payment/form-react |
Malicious release: Malicious code in @deel-ui/animation (npm) GHSA-9rwq-pr4x-fhqg, MAL-2026-6614 | Malicious | Not scored | 29 Jun, 2026 | npm @deel-ui/animation |
Malicious release: Malicious code in @contentprod-authoring/block-manager (npm) GHSA-cpfg-m96g-j4j9, MAL-2026-6609 | Malicious | Not scored | 29 Jun, 2026 | npm @contentprod-authoring/block-manager |
Malicious release: Malicious code in @digitalpharmacist/http-error-util (npm) GHSA-jw9w-w49g-cx4h, MAL-2026-6615 | Malicious | Not scored | 29 Jun, 2026 | npm @digitalpharmacist/http-error-util |
Malicious release: Malicious code in @bodata/angular-client (npm) GHSA-m7gq-xcwc-78ff, MAL-2026-6604 | Malicious | Not scored | 29 Jun, 2026 | npm @bodata/angular-client |
Malicious release: Malicious code in @alerts/components (npm) GHSA-m86f-3q43-wmpg, MAL-2026-6599 | Malicious | Not scored | 29 Jun, 2026 | npm @alerts/components |