Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in elf-stats-marzipan-saddlebag-291 (npm) GHSA-42h8-mwhc-239g, MAL-2026-7267 | Malicious | Not scored | 07 Jul, 2026 | npm elf-stats-marzipan-saddlebag-291 |
Malicious release: Malicious code in elf-stats-marzipan-sled-824 (npm) GHSA-8pjg-7qjp-r3gr, MAL-2026-7268 | Malicious | Not scored | 07 Jul, 2026 | npm elf-stats-marzipan-sled-824 |
Malicious release: Malicious code in elf-stats-jolly-saddlebag-184 (npm) GHSA-5mvw-g28h-cmxw, MAL-2026-7265 | Malicious | Not scored | 07 Jul, 2026 | npm elf-stats-jolly-saddlebag-184 |
Malicious release: Malicious code in elf-stats-lanternlit-giftbox-663 (npm) GHSA-v48q-8gvj-9hv6, MAL-2026-7266 | Malicious | Not scored | 07 Jul, 2026 | npm elf-stats-lanternlit-giftbox-663 |
Malicious release: Malicious code in elf-stats-glittering-cushion-945 (npm) GHSA-8v37-v6x7-3f2c, MAL-2026-7263 | Malicious | Not scored | 07 Jul, 2026 | npm elf-stats-glittering-cushion-945 |
Malicious release: Malicious code in elf-stats-holly-bauble-986 (npm) GHSA-h8gj-fc36-2m8p, MAL-2026-7264 | Malicious | Not scored | 07 Jul, 2026 | npm elf-stats-holly-bauble-986 |
Malicious release: Malicious code in elf-stats-fuzzy-ribbon-874 (npm) GHSA-jfpm-m83q-v8rx, MAL-2026-7262 | Malicious | Not scored | 07 Jul, 2026 | npm elf-stats-fuzzy-ribbon-874 |
Malicious release: Malicious code in elf-stats-frosty-hammer-191 (npm) GHSA-vfvv-3x64-m3pf, MAL-2026-7261 | Malicious | Not scored | 07 Jul, 2026 | npm elf-stats-frosty-hammer-191 |
Malicious release: Malicious code in elf-stats-festive-pantry-640 (npm) GHSA-h5ww-rx85-2x5j, MAL-2026-7260 | Malicious | Not scored | 07 Jul, 2026 | npm elf-stats-festive-pantry-640 |
Malicious release: Malicious code in elf-stats-cosy-drum-671 (npm) GHSA-vf3p-ghgj-j3f6, MAL-2026-7259 | Malicious | Not scored | 07 Jul, 2026 | npm elf-stats-cosy-drum-671 |
Malicious release: Malicious code in elf-stats-candlelit-pantry-649 (npm) GHSA-mx95-2xxh-8v3c, MAL-2026-7258 | Malicious | Not scored | 07 Jul, 2026 | npm elf-stats-candlelit-pantry-649 |
Malicious release: Malicious code in elf-stats-bright-star-581 (npm) GHSA-gwpp-62ch-8c4v, MAL-2026-7256 | Malicious | Not scored | 07 Jul, 2026 | npm elf-stats-bright-star-581 |
Malicious release: Malicious code in elf-stats-bright-workbench-558 (npm) GHSA-xfhp-52xc-cv67, MAL-2026-7257 | Malicious | Not scored | 07 Jul, 2026 | npm elf-stats-bright-workbench-558 |
Malicious release: Malicious code in elf-stats-bright-nutcracker-546 (npm) GHSA-f7gr-6hv3-28gc, MAL-2026-7255 | Malicious | Not scored | 07 Jul, 2026 | npm elf-stats-bright-nutcracker-546 |
Malicious release: Malicious code in dwagger-express-router (npm) GHSA-3qcg-7w7j-p5vq, MAL-2026-7254 | Malicious | Not scored | 07 Jul, 2026 | npm dwagger-express-router |
Malicious release: Malicious code in dreactjs (npm) GHSA-6wm5-fhch-2wc8, MAL-2026-7253 | Malicious | Not scored | 07 Jul, 2026 | npm dreactjs |
Malicious release: Malicious code in dpd-security-poc (npm) GHSA-8q45-55gg-q26v, MAL-2026-7252 | Malicious | Not scored | 07 Jul, 2026 | npm dpd-security-poc |
Malicious release: Malicious code in dontawesome (npm) GHSA-w7f8-w3fc-cx3x, MAL-2026-7251 | Malicious | Not scored | 07 Jul, 2026 | npm dontawesome |
Malicious release: Malicious code in divvy-web (npm) GHSA-4ggw-wgq2-q85h, MAL-2026-7250 | Malicious | Not scored | 07 Jul, 2026 | npm divvy-web |
Malicious release: Malicious code in csec-form-helpers (npm) GHSA-9rv5-p6m5-2pr4, MAL-2026-7249 | Malicious | Not scored | 07 Jul, 2026 | npm csec-form-helpers |
Malicious release: Malicious code in csec-crypto-utils (npm) GHSA-v2jf-8fqq-49vj, MAL-2026-7248 | Malicious | Not scored | 07 Jul, 2026 | npm csec-crypto-utils |
Malicious release: Malicious code in cookie-parseflow (npm) GHSA-74xr-g9jg-mm2c, MAL-2026-7247 | Malicious | Not scored | 07 Jul, 2026 | npm cookie-parseflow |
Malicious release: Malicious code in cli-pretty-logger (npm) GHSA-j2hg-4jp7-x3rj, MAL-2026-7246 | Malicious | Not scored | 07 Jul, 2026 | npm cli-pretty-logger |
Malicious release: Malicious code in chalk-standard (npm) GHSA-2h99-jqrg-h7hj, MAL-2026-7245 | Malicious | Not scored | 07 Jul, 2026 | npm chalk-standard |
Malicious release: Malicious code in chai-fetchs (npm) GHSA-h2vx-499h-gp6h, MAL-2026-7244 | Malicious | Not scored | 07 Jul, 2026 | npm chai-fetchs |
Malicious release: Malicious code in chai-extention-utils (npm) GHSA-w6pq-2hq2-8fm3, MAL-2026-7243 | Malicious | Not scored | 07 Jul, 2026 | npm chai-extention-utils |
Malicious release: Malicious code in chai-chain-test (npm) GHSA-7h59-497h-4gg6, MAL-2026-7242 | Malicious | Not scored | 07 Jul, 2026 | npm chai-chain-test |
Malicious release: Malicious code in chai-as-upgraded (npm) GHSA-467m-624f-4r7w, MAL-2026-7241 | Malicious | Not scored | 07 Jul, 2026 | npm chai-as-upgraded |
Malicious release: Malicious code in chai-as-test (npm) GHSA-xh92-hmq7-9q9m, MAL-2026-7240 | Malicious | Not scored | 07 Jul, 2026 | npm chai-as-test |
Malicious release: Malicious code in chai-as-sai (npm) GHSA-ggfj-qg28-9v5p, MAL-2026-7239 | Malicious | Not scored | 07 Jul, 2026 | npm chai-as-sai |
Malicious release: Malicious code in chai-as-purified (npm) GHSA-r453-6x48-gq82, MAL-2026-7238 | Malicious | Not scored | 07 Jul, 2026 | npm chai-as-purified |
Malicious release: Malicious code in chai-as-patched (npm) GHSA-r94m-5pmp-859j, MAL-2026-7237 | Malicious | Not scored | 07 Jul, 2026 | npm chai-as-patched |
Malicious release: Malicious code in chai-as-launched (npm) GHSA-3gxh-2252-xpc5, MAL-2026-7235 | Malicious | Not scored | 07 Jul, 2026 | npm chai-as-launched |
Malicious release: Malicious code in chai-as-legit (npm) GHSA-jc8r-hh87-vgfm, MAL-2026-7236 | Malicious | Not scored | 07 Jul, 2026 | npm chai-as-legit |
Malicious release: Malicious code in chai-as-informed (npm) GHSA-94jp-rqmg-rxxv, MAL-2026-7234 | Malicious | Not scored | 07 Jul, 2026 | npm chai-as-informed |
Malicious release: Malicious code in chai-as-consisted (npm) GHSA-fhhh-9j2x-qww6, MAL-2026-7233 | Malicious | Not scored | 07 Jul, 2026 | npm chai-as-consisted |
Malicious release: Malicious code in chai-as-commited (npm) GHSA-x658-3qh3-c7v7, MAL-2026-7232 | Malicious | Not scored | 07 Jul, 2026 | npm chai-as-commited |
Malicious release: Malicious code in chai-as-belonged (npm) GHSA-gvp6-gjmq-w2pm, MAL-2026-7231 | Malicious | Not scored | 07 Jul, 2026 | npm chai-as-belonged |
Malicious release: Malicious code in chai-as-absorbed (npm) GHSA-6556-qhw3-qw9m, MAL-2026-7230 | Malicious | Not scored | 07 Jul, 2026 | npm chai-as-absorbed |
Malicious release: Malicious code in breactjs (npm) GHSA-887x-v44p-rm22, MAL-2026-7229 | Malicious | Not scored | 07 Jul, 2026 | npm breactjs |
Malicious release: Malicious code in box-ui-elements-usm (npm) GHSA-q3cf-pjcj-f9m4, MAL-2026-7228 | Malicious | Not scored | 07 Jul, 2026 | npm box-ui-elements-usm |
Malicious release: Malicious code in bode-which (npm) GHSA-58mh-f3x4-54m4, MAL-2026-7227 | Malicious | Not scored | 07 Jul, 2026 | npm bode-which |
Malicious release: Malicious code in bmg-user-interaction-tracker (npm) GHSA-x955-gv47-8c7p, MAL-2026-7226 | Malicious | Not scored | 07 Jul, 2026 | npm bmg-user-interaction-tracker |
Malicious release: Malicious code in bitu-user (npm) GHSA-32cj-ff5v-j4jg, MAL-2026-7224 | Malicious | Not scored | 07 Jul, 2026 | npm bitu-user |
Malicious release: Malicious code in bitu-wallet (npm) GHSA-r49r-627w-p258, MAL-2026-7225 | Malicious | Not scored | 07 Jul, 2026 | npm bitu-wallet |
Malicious release: Malicious code in bitu-trade (npm) GHSA-3r2g-jmhg-ch33, MAL-2026-7223 | Malicious | Not scored | 07 Jul, 2026 | npm bitu-trade |
Malicious release: Malicious code in bitu-sdk (npm) GHSA-xx6g-5r2m-hx8m, MAL-2026-7222 | Malicious | Not scored | 07 Jul, 2026 | npm bitu-sdk |
Malicious release: Malicious code in bitu-protocol (npm) GHSA-5hf3-fhxx-2pw4, MAL-2026-7221 | Malicious | Not scored | 07 Jul, 2026 | npm bitu-protocol |
Malicious release: Malicious code in bitu-core (npm) GHSA-74pg-6r89-wfcg, MAL-2026-7220 | Malicious | Not scored | 07 Jul, 2026 | npm bitu-core |
Malicious release: Malicious code in bitu-app (npm) GHSA-m3rv-h22x-xmg8, MAL-2026-7219 | Malicious | Not scored | 07 Jul, 2026 | npm bitu-app |