Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in calculate-helper (npm) GHSA-3cmh-x7h7-f97c, MAL-2026-6331 | Malicious | Not scored | 23 Jun, 2026 | npm calculate-helper |
Malicious release: Malicious code in security-alerts-sdk (PyPI) MAL-2026-6327 | Malicious | Not scored | 23 Jun, 2026 | PyPI security-alerts-sdk |
Malicious release: Malicious code in sync-external (npm) GHSA-vrc4-g2p2-9895, MAL-2026-6336 | Malicious | Not scored | 23 Jun, 2026 | npm sync-external |
Malicious release: Malicious code in ts-sudo (npm) GHSA-9rpr-8v3f-2g5q, MAL-2026-6323 | Malicious | Not scored | 23 Jun, 2026 | npm ts-sudo |
Malicious release: Malicious code in mjs-eslint-service (npm) GHSA-jwg8-mccp-c3vg, MAL-2026-6333 | Malicious | Not scored | 23 Jun, 2026 | npm mjs-eslint-service |
Malicious release: Malicious code in server-parket (npm) GHSA-mvmx-6c22-q3fm, MAL-2026-6335 | Malicious | Not scored | 23 Jun, 2026 | npm server-parket |
Malicious release: Malicious code in ts-arithmetic-helper (npm) GHSA-94cr-ccj8-78g6, MAL-2026-6315 | Malicious | Not scored | 23 Jun, 2026 | npm ts-arithmetic-helper |
Malicious release: Malicious code in parket-flow (npm) GHSA-gfmc-wgpr-h6vg, MAL-2026-6334 | Malicious | Not scored | 23 Jun, 2026 | npm parket-flow |
Malicious release: Malicious code in ts-predict-helper (npm) GHSA-mjf5-46pf-x3j7, MAL-2026-6322 | Malicious | Not scored | 23 Jun, 2026 | npm ts-predict-helper |
Malicious release: Malicious code in chalk-ultra (npm) GHSA-vgq4-6c53-5826, MAL-2026-6300 | Malicious | Not scored | 23 Jun, 2026 | npm chalk-ultra |
Malicious release: Malicious code in analysis-chart (npm) GHSA-2h56-6c2c-2475, MAL-2026-10890, MAL-2026-6299 | Malicious | Not scored | 23 Jun, 2026 | npm analysis-chart |
Malicious release: Malicious code in hashd-edu (npm) GHSA-32g6-6p9r-rhrm, MAL-2026-6302 | Malicious | Not scored | 23 Jun, 2026 | npm hashd-edu |
Malicious release: Malicious code in date-format-helper2 (npm) GHSA-j29f-62x7-hj66, MAL-2026-6301 | Malicious | Not scored | 23 Jun, 2026 | npm date-format-helper2 |
Malicious release: Malicious code in react-simple-utils-kit (npm) GHSA-9p56-xfq3-77x5, MAL-2026-6303 | Malicious | Not scored | 23 Jun, 2026 | npm react-simple-utils-kit |
Malicious release: Malicious code in @outmarket/utils (npm) GHSA-7f28-77wf-r7r3, MAL-2026-6292 | Malicious | Not scored | 23 Jun, 2026 | npm @outmarket/utils |
Malicious release: Malicious code in @outmarket/ui (npm) MAL-2026-6291 | Malicious | Not scored | 23 Jun, 2026 | npm @outmarket/ui |
Malicious release: Malicious code in airbnb-airlock (npm) GHSA-mx2w-2q79-99vv, MAL-2026-6293 | Malicious | Not scored | 23 Jun, 2026 | npm airbnb-airlock |
Malicious release: Malicious code in ttal2ttml (npm) GHSA-w5q2-92ww-m4jv, MAL-2026-6298 | Malicious | Not scored | 23 Jun, 2026 | npm ttal2ttml |
Malicious release: Malicious code in kdrive-utils (npm) GHSA-v9x6-7mvw-mf22, MAL-2026-6295 | Malicious | Not scored | 23 Jun, 2026 | npm kdrive-utils |
Malicious release: Malicious code in cue-mcp (npm) MAL-2026-6294 | Malicious | Not scored | 23 Jun, 2026 | npm cue-mcp |
Malicious release: Malicious code in tree-sitter-forth (npm) MAL-2026-6297 | Malicious | Not scored | 23 Jun, 2026 | npm tree-sitter-forth |
Malicious release: Malicious code in myebaynode (npm) GHSA-8wcq-62gv-fp9f, MAL-2026-6296 | Malicious | Not scored | 23 Jun, 2026 | npm myebaynode |
Malicious release: Malicious code in new-helper (npm) GHSA-26mv-fx88-4qj7, MAL-2026-6284 | Malicious | Not scored | 23 Jun, 2026 | npm new-helper |
Malicious release: Malicious code in new-ecro-helper (npm) GHSA-85xv-pw78-4hqp, MAL-2026-6283 | Malicious | Not scored | 23 Jun, 2026 | npm new-ecro-helper |
Malicious release: Malicious code in new-solt-1 (npm) GHSA-9jrq-rph3-6qqm, MAL-2026-6286 | Malicious | Not scored | 23 Jun, 2026 | npm new-solt-1 |
Malicious release: Malicious code in poly-utils (npm) GHSA-ffmg-f668-6cj8, MAL-2026-6287 | Malicious | Not scored | 23 Jun, 2026 | npm poly-utils |
Malicious release: Malicious code in new-solt (npm) GHSA-mvjp-c9p2-37jx, MAL-2026-6285 | Malicious | Not scored | 23 Jun, 2026 | npm new-solt |
Malicious release: Malicious code in toorc (PyPI) MAL-2026-6290 | Malicious | Not scored | 23 Jun, 2026 | PyPI toorc |
Malicious release: Malicious code in equest (PyPI) MAL-2026-6289 | Malicious | Not scored | 23 Jun, 2026 | PyPI equest |
Malicious release: Malicious code in ts-numbering (npm) GHSA-fvpj-9j2j-grmr, MAL-2026-6288 | Malicious | Not scored | 23 Jun, 2026 | npm ts-numbering |
Malicious release: Malicious code in local-ip-helper (npm) GHSA-xg4m-w887-cp89, MAL-2026-6282 | Malicious | Not scored | 23 Jun, 2026 | npm local-ip-helper |
Malicious release: Malicious code in libsignal-node-travatiger (npm) GHSA-j2x4-j4hc-mvcv, MAL-2026-6281 | Malicious | Not scored | 23 Jun, 2026 | npm libsignal-node-travatiger |
Malicious release: Malicious code in ip-rotat (PyPI) MAL-2026-6280 | Malicious | Not scored | 23 Jun, 2026 | PyPI ip-rotat |
Malicious release: Malicious code in ts-wross (npm) GHSA-53h7-mc3v-w73c, MAL-2026-6278 | Malicious | Not scored | 23 Jun, 2026 | npm ts-wross |
Malicious release: Malicious code in node-core-libs (npm) GHSA-6vr2-5hpq-589c, MAL-2026-6276 | Malicious | Not scored | 23 Jun, 2026 | npm node-core-libs |
Malicious release: Malicious code in search-from-search (npm) GHSA-fgqv-2jmm-2p39, MAL-2026-6277 | Malicious | Not scored | 23 Jun, 2026 | npm search-from-search |
Malicious release: Malicious code in @ts-apis/ts-utils (npm) GHSA-3xmx-2xxv-rpfq, MAL-2026-6275 | Malicious | Not scored | 23 Jun, 2026 | npm @ts-apis/ts-utils |
Malicious release: Malicious code in web3-token-helper (npm) GHSA-3w2v-mxgh-g2fw, MAL-2026-6274 | Malicious | Not scored | 22 Jun, 2026 | npm web3-token-helper |
Malicious release: Malicious code in zod-pino (npm) GHSA-q52v-x293-p999, MAL-2026-6273 | Malicious | Not scored | 22 Jun, 2026 | npm zod-pino |
Malicious release: Malicious code in @variational/common-ui (npm) MAL-2026-6272 | Malicious | Not scored | 22 Jun, 2026 | npm @variational/common-ui |
Malicious release: Malicious code in node-fetch-utils (npm) GHSA-4jfq-h5q8-g7hm, MAL-2026-6271 | Malicious | Not scored | 22 Jun, 2026 | npm node-fetch-utils |
Malicious release: Malicious code in vitest-cli (npm) GHSA-c35r-fwrq-cgq9, MAL-2026-6267 | Malicious | Not scored | 22 Jun, 2026 | npm vitest-cli |
Malicious release: Malicious code in zomato-espresso (npm) MAL-2026-6269 | Malicious | Not scored | 22 Jun, 2026 | npm zomato-espresso |
Malicious release: Malicious code in zomato-mcp (npm) MAL-2026-6270 | Malicious | Not scored | 22 Jun, 2026 | npm zomato-mcp |
Malicious release: Malicious code in zomato-core (npm) MAL-2026-6268 | Malicious | Not scored | 22 Jun, 2026 | npm zomato-core |
Malicious release: Malicious code in sn-internal-testjgsakjdkjadkjah (npm) MAL-2026-6265 | Malicious | Not scored | 22 Jun, 2026 | npm sn-internal-testjgsakjdkjadkjah |
Malicious release: Malicious code in test-package-sajsdkashdj (npm) MAL-2026-6266 | Malicious | Not scored | 22 Jun, 2026 | npm test-package-sajsdkashdj |
Malicious release: Malicious code in search-from-feed (npm) MAL-2026-6264 | Malicious | Not scored | 22 Jun, 2026 | npm search-from-feed |
Malicious release: Malicious code in gd-auth-client (npm) MAL-2026-6263 | Malicious | Not scored | 22 Jun, 2026 | npm gd-auth-client |
Malicious release: Malicious code in crud-respect (npm) GHSA-4p36-4jp8-8rx5, MAL-2026-6257 | Malicious | Not scored | 22 Jun, 2026 | npm crud-respect |