Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in react-photo-views (npm) GHSA-f2m2-w8gp-rjgq, MAL-2026-5634 | Malicious | Not scored | 11 Jun, 2026 | npm react-photo-views |
Malicious release: Malicious code in clsx-tailwind (npm) GHSA-373j-j35f-q4gx, MAL-2026-5625 | Malicious | Not scored | 11 Jun, 2026 | npm clsx-tailwind |
Malicious release: Malicious code in typeorm-encrypt (npm) GHSA-f7h6-4xj8-8qh7, MAL-2026-5633 | Malicious | Not scored | 11 Jun, 2026 | npm typeorm-encrypt |
Malicious release: Malicious code in rate-limits-flexible (npm) GHSA-hg8j-2wmv-w4v6, MAL-2026-5627 | Malicious | Not scored | 11 Jun, 2026 | npm rate-limits-flexible |
Malicious release: Malicious code in tailwindcss-merge (npm) GHSA-m2xh-rw7p-69rx, MAL-2026-5632 | Malicious | Not scored | 11 Jun, 2026 | npm tailwindcss-merge |
Malicious release: Malicious code in sass-format (npm) GHSA-m8x4-pc4m-p5gv, MAL-2026-5628 | Malicious | Not scored | 11 Jun, 2026 | npm sass-format |
Malicious release: Malicious code in tailwindcss-animatics (npm) GHSA-mp9h-24x9-xc7r, MAL-2026-5631 | Malicious | Not scored | 11 Jun, 2026 | npm tailwindcss-animatics |
Malicious release: Malicious code in sass-formats (npm) GHSA-pvrm-39m5-j3c4, MAL-2026-5629 | Malicious | Not scored | 11 Jun, 2026 | npm sass-formats |
Malicious release: Malicious code in tailwindcss-animates-kit (npm) GHSA-v4xp-qgj3-gphm, MAL-2026-5630 | Malicious | Not scored | 11 Jun, 2026 | npm tailwindcss-animates-kit |
Malicious release: Malicious code in rate-limit-flexible (npm) GHSA-v7vx-48xw-jwm8, MAL-2026-5626 | Malicious | Not scored | 11 Jun, 2026 | npm rate-limit-flexible |
Malicious release: Malicious code in @whatnot-web/www-legacy (npm) MAL-2026-5622 | Malicious | Not scored | 11 Jun, 2026 | npm @whatnot-web/www-legacy |
Malicious release: Malicious code in edu-npm-dependency-chain-demo (npm) GHSA-cqgx-r84j-px55, MAL-2026-5623 | Malicious | Not scored | 11 Jun, 2026 | npm edu-npm-dependency-chain-demo |
Malicious release: Malicious code in edu-npm-postinstall-demo2 (npm) GHSA-gqxv-6fpm-5xwx, MAL-2026-5624 | Malicious | Not scored | 11 Jun, 2026 | npm edu-npm-postinstall-demo2 |
Malicious release: Malicious code in chai-net-test (npm) MAL-2026-5607 | Malicious | Not scored | 11 Jun, 2026 | npm chai-net-test |
Malicious release: Malicious code in tailwind-animator-scroll (npm) GHSA-mx93-wj6x-87wp, MAL-2026-5618 | Malicious | Not scored | 11 Jun, 2026 | npm tailwind-animator-scroll |
Malicious release: Malicious code in tailwind-typography-plus (npm) GHSA-j9jx-c8pr-c3gr, MAL-2026-5619 | Malicious | Not scored | 11 Jun, 2026 | npm tailwind-typography-plus |
Malicious release: Malicious code in claimora (npm) MAL-2026-5608 | Malicious | Not scored | 11 Jun, 2026 | npm claimora |
Malicious release: Malicious code in janus-erc20 (npm) GHSA-w6mr-3c22-93v5, MAL-2026-5614 | Malicious | Not scored | 11 Jun, 2026 | npm janus-erc20 |
Malicious release: Malicious code in cache-section-helper (npm) GHSA-wg39-m2jm-wxhp, MAL-2026-5604 | Malicious | Not scored | 11 Jun, 2026 | npm cache-section-helper |
Malicious release: Malicious code in datetime-toolkit (npm) GHSA-hjx5-46c8-fm8p, MAL-2026-5611 | Malicious | Not scored | 11 Jun, 2026 | npm datetime-toolkit |
Malicious release: Malicious code in internallib_v346 (npm) GHSA-qcg5-4gpc-33h2, MAL-2026-5613 | Malicious | Not scored | 11 Jun, 2026 | npm internallib_v346 |
Malicious release: Malicious code in chai-as-victimed (npm) MAL-2026-5605 | Malicious | Not scored | 11 Jun, 2026 | npm chai-as-victimed |
Malicious release: Malicious code in chai-dec (npm) GHSA-782j-c8c3-2j5w, MAL-2026-5606 | Malicious | Not scored | 11 Jun, 2026 | npm chai-dec |
Malicious release: Malicious code in backup-my-data (npm) MAL-2026-5603 | Malicious | Not scored | 11 Jun, 2026 | npm backup-my-data |
Malicious release: Malicious code in clean-my-pc (npm) MAL-2026-5609 | Malicious | Not scored | 11 Jun, 2026 | npm clean-my-pc |
Malicious release: Malicious code in sysbu (npm) MAL-2026-5616 | Malicious | Not scored | 11 Jun, 2026 | npm sysbu |
Malicious release: Malicious code in sysau (npm) MAL-2026-5615 | Malicious | Not scored | 11 Jun, 2026 | npm sysau |
Malicious release: Malicious code in sysnu (npm) MAL-2026-5617 | Malicious | Not scored | 11 Jun, 2026 | npm sysnu |
Malicious release: Malicious code in coderzero (npm) MAL-2026-5610 | Malicious | Not scored | 11 Jun, 2026 | npm coderzero |
Malicious release: Malicious code in gpt-sdk (npm) GHSA-wrmh-73gr-22fc, MAL-2026-5612 | Malicious | Not scored | 11 Jun, 2026 | npm gpt-sdk |
Malicious release: Malicious code in telebot-server (npm) MAL-2026-5620 | Malicious | Not scored | 11 Jun, 2026 | npm telebot-server |
Malicious release: Malicious code in twilio-sdk (npm) GHSA-889w-p55g-884m, MAL-2026-5621 | Malicious | Not scored | 11 Jun, 2026 | npm twilio-sdk |
Malicious release: Malicious code in vite-tsconfig (npm) MAL-2026-5576 | Malicious | Not scored | 11 Jun, 2026 | npm vite-tsconfig |
Malicious release: Malicious code in ai-sdk-helpers (npm) GHSA-w43g-ccrm-v8xv, MAL-2026-5565 | Malicious | Not scored | 11 Jun, 2026 | npm ai-sdk-helpers |
Malicious release: Malicious code in fastify-addon (npm) GHSA-3237-pr3f-cm2g, MAL-2026-5566 | Malicious | Not scored | 11 Jun, 2026 | npm fastify-addon |
Malicious release: Malicious code in web-pool (npm) GHSA-x58x-qmg9-8q8v, MAL-2026-5577 | Malicious | Not scored | 11 Jun, 2026 | npm web-pool |
Malicious release: Malicious code in sendgrid-sdk (npm) GHSA-3cvf-g4vx-wgr3, MAL-2026-5572 | Malicious | Not scored | 11 Jun, 2026 | npm sendgrid-sdk |
Malicious release: Malicious code in webpack-cache-cycle (npm) GHSA-2p34-5qgm-wr3f, MAL-2026-5579 | Malicious | Not scored | 11 Jun, 2026 | npm webpack-cache-cycle |
Malicious release: Malicious code in webpack-patch (npm) GHSA-3hxr-3hxr-pqq4, MAL-2026-5581 | Malicious | Not scored | 11 Jun, 2026 | npm webpack-patch |
Malicious release: Malicious code in webpack-cache-clean (npm) GHSA-82q4-cw9w-vjj4, MAL-2026-5578 | Malicious | Not scored | 11 Jun, 2026 | npm webpack-cache-clean |
Malicious release: Malicious code in webpack-cache-reset (npm) GHSA-x29m-589q-wmg6, MAL-2026-5580 | Malicious | Not scored | 11 Jun, 2026 | npm webpack-cache-reset |
Malicious release: Malicious code in wp-env (npm) MAL-2026-5582 | Malicious | Not scored | 11 Jun, 2026 | npm wp-env |
Malicious release: Malicious code in @bestlzk/sectest (npm) MAL-2026-5561 | Malicious | Not scored | 11 Jun, 2026 | npm @bestlzk/sectest |
Malicious release: Malicious code in @tonsdk/core (npm) GHSA-hw5x-gw43-m4mx, MAL-2026-5564 | Malicious | Not scored | 11 Jun, 2026 | npm @tonsdk/core |
Malicious release: Malicious code in js-crypto-promise (npm) GHSA-hj2h-j6cr-5mq8, MAL-2026-5569 | Malicious | Not scored | 11 Jun, 2026 | npm js-crypto-promise |
Malicious release: Malicious code in @sentry-internal-sdk/profiling-node (npm) MAL-2026-5563 | Malicious | Not scored | 11 Jun, 2026 | npm @sentry-internal-sdk/profiling-node |
Malicious release: Malicious code in forge-jsx2 (npm) GHSA-hqj4-8wc5-r66r, MAL-2026-5568 | Malicious | Not scored | 11 Jun, 2026 | npm forge-jsx2 |
Malicious release: Malicious code in nim-submit-for-test (npm) MAL-2026-5570 | Malicious | Not scored | 11 Jun, 2026 | npm nim-submit-for-test |
Malicious release: Malicious code in @koadz/sso (npm) MAL-2026-5562 | Malicious | Not scored | 11 Jun, 2026 | npm @koadz/sso |
Malicious release: Malicious code in field-upload-tool (npm) MAL-2026-5567 | Malicious | Not scored | 11 Jun, 2026 | npm field-upload-tool |