Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in solana-rpc-pool (npm) GHSA-2mh6-844f-vpmp, MAL-2026-5573 | Malicious | Not scored | 11 Jun, 2026 | npm solana-rpc-pool |
Malicious release: Malicious code in spotify-url-resolver (npm) GHSA-2xx5-g7pf-q356, MAL-2026-5574 | Malicious | Not scored | 11 Jun, 2026 | npm spotify-url-resolver |
Malicious release: Malicious code in testzapier (npm) GHSA-5ppv-rxq4-cf57, MAL-2026-5575 | Malicious | Not scored | 11 Jun, 2026 | npm testzapier |
Malicious release: Malicious code in qa-handoff (npm) MAL-2026-5571 | Malicious | Not scored | 11 Jun, 2026 | npm qa-handoff |
Malicious release: Malicious code in tailwind-dark-mode-kit (npm) GHSA-63rx-hcxw-wmpq, MAL-2026-5586 | Malicious | Not scored | 11 Jun, 2026 | npm tailwind-dark-mode-kit |
Malicious release: Malicious code in polymarket-clob-api (npm) GHSA-95f6-59wp-jpv8, MAL-2026-5585 | Malicious | Not scored | 11 Jun, 2026 | npm polymarket-clob-api |
Malicious release: Malicious code in emittery_styled (npm) GHSA-j6hp-9w2p-jwpw, MAL-2026-5583 | Malicious | Not scored | 11 Jun, 2026 | npm emittery_styled |
Malicious release: Malicious code in justgetit (npm) GHSA-4qrx-h7cq-cqh6, MAL-2026-5584 | Malicious | Not scored | 11 Jun, 2026 | npm justgetit |
Malicious release: Malicious code in @403name/electron-buidler (npm) GHSA-h23r-x34f-p95m, MAL-2026-5547 | Malicious | Not scored | 11 Jun, 2026 | npm @403name/electron-buidler |
Malicious release: Malicious code in @403name/fsevent (npm) GHSA-hp95-92q5-xfvc, MAL-2026-5549 | Malicious | Not scored | 11 Jun, 2026 | npm @403name/fsevent |
Malicious release: Malicious code in @403name/ether-js (npm) GHSA-qgxg-2j6w-jmpx, MAL-2026-5548 | Malicious | Not scored | 11 Jun, 2026 | npm @403name/ether-js |
Malicious release: Malicious code in solana-dev-tools (npm) GHSA-85ph-3qr8-3q2q, MAL-2026-5559 | Malicious | Not scored | 11 Jun, 2026 | npm solana-dev-tools |
Malicious release: Malicious code in sensivity (npm) GHSA-f4f4-69p9-w9f9, MAL-2026-5558 | Malicious | Not scored | 11 Jun, 2026 | npm sensivity |
Malicious release: Malicious code in solana-web3-community (npm) GHSA-hrhj-mh9v-hvr8, MAL-2026-5560 | Malicious | Not scored | 11 Jun, 2026 | npm solana-web3-community |
Malicious release: Malicious code in janus-flow (npm) GHSA-pcx2-ghwc-5cp6, MAL-2026-5556 | Malicious | Not scored | 11 Jun, 2026 | npm janus-flow |
Malicious release: Malicious code in janus-ft (npm) GHSA-9pc7-vjjr-gxpr, MAL-2026-5557 | Malicious | Not scored | 11 Jun, 2026 | npm janus-ft |
Malicious release: Malicious code in @my_name_is_khn/express-security-tool-v1 (npm) GHSA-v624-m435-vmfx, MAL-2026-5551 | Malicious | Not scored | 11 Jun, 2026 | npm @my_name_is_khn/express-security-tool-v1 |
Malicious release: Malicious code in @my_name_is_khn/express-security-tool-v3 (npm) GHSA-pf66-w9wm-c932, MAL-2026-5552 | Malicious | Not scored | 11 Jun, 2026 | npm @my_name_is_khn/express-security-tool-v3 |
Malicious release: Malicious code in @my_name_is_khn/express-security-tool (npm) GHSA-pmmq-vq8x-p92v, MAL-2026-5550 | Malicious | Not scored | 11 Jun, 2026 | npm @my_name_is_khn/express-security-tool |
Malicious release: Malicious code in express-timer (npm) GHSA-9vgr-cqvw-qwhx, MAL-2026-5555 | Malicious | Not scored | 11 Jun, 2026 | npm express-timer |
Malicious release: Malicious code in express-self-destruct2 (npm) GHSA-rjp6-jx87-x8x8, MAL-2026-5554 | Malicious | Not scored | 11 Jun, 2026 | npm express-self-destruct2 |
Malicious release: Malicious code in express-self-destruct (npm) GHSA-wqrx-jfhq-5hx7, MAL-2026-5553 | Malicious | Not scored | 11 Jun, 2026 | npm express-self-destruct |
Malicious release: Malicious code in india-map-react (npm) MAL-2026-5542 | Malicious | Not scored | 11 Jun, 2026 | npm india-map-react |
Malicious release: Malicious code in @w2d/web-components (npm) MAL-2026-5541 | Malicious | Not scored | 11 Jun, 2026 | npm @w2d/web-components |
Malicious release: Malicious code in jailbreak-code (npm) GHSA-fmpq-536x-fhwq, MAL-2026-5543 | Malicious | Not scored | 11 Jun, 2026 | npm jailbreak-code |
Malicious release: Malicious code in acme-widget-layout-utils (PyPI) MAL-2026-5545 | Malicious | Not scored | 11 Jun, 2026 | PyPI acme-widget-layout-utils |
Malicious release: Malicious code in pocteszep (npm) MAL-2026-5544 | Malicious | Not scored | 11 Jun, 2026 | npm pocteszep |
Malicious release: Malicious code in @monitoring-lib/error-tracking (npm) GHSA-5g45-cfrj-qc64, MAL-2026-5540 | Malicious | Not scored | 11 Jun, 2026 | npm @monitoring-lib/error-tracking |
Malicious release: Malicious code in mermaid-v11 (npm) GHSA-xmj9-vhj4-8q6c, MAL-2026-5539 | Malicious | Not scored | 11 Jun, 2026 | npm mermaid-v11 |
Malicious release: Malicious code in @common-stack/generate-plugin (npm) GHSA-6p55-6hvr-3xmg, MAL-2026-5546 | Malicious | Not scored | 11 Jun, 2026 | npm @common-stack/generate-plugin |
Malicious release: Malicious code in @entos-ems/xerxes-client-js (npm) MAL-2026-5537 | Malicious | Not scored | 11 Jun, 2026 | npm @entos-ems/xerxes-client-js |
Malicious release: Malicious code in hex-type (npm) GHSA-jc42-pxfc-29x3, MAL-2026-5538 | Malicious | Not scored | 11 Jun, 2026 | npm hex-type |
Malicious release: Malicious code in zer0onedate (npm) MAL-2026-5535 | Malicious | Not scored | 10 Jun, 2026 | npm zer0onedate |
Malicious release: Malicious code in zer0onedatetool (npm) MAL-2026-5536 | Malicious | Not scored | 10 Jun, 2026 | npm zer0onedatetool |
Malicious release: Malicious code in @thomlecter1122/lab-helper-test (npm) GHSA-223m-fcr3-c5gg, MAL-2026-5534 | Malicious | Not scored | 10 Jun, 2026 | npm @thomlecter1122/lab-helper-test |
Malicious release: Malicious code in @coze-common/chat-area (npm) MAL-2026-5533 | Malicious | Not scored | 10 Jun, 2026 | npm @coze-common/chat-area |
Malicious release: Malicious code in icinga (PyPI) MAL-2026-5532 | Malicious | Not scored | 10 Jun, 2026 | PyPI icinga |
Malicious release: Malicious code in telegramlite (PyPI) MAL-2026-5531 | Malicious | Not scored | 10 Jun, 2026 | PyPI telegramlite |
Malicious release: Malicious code in chai-check-error (npm) MAL-2026-5526 | Malicious | Not scored | 10 Jun, 2026 | npm chai-check-error |
Malicious release: Malicious code in check-error-util (npm) MAL-2026-5527 | Malicious | Not scored | 10 Jun, 2026 | npm check-error-util |
Malicious release: Malicious code in websocket-slot (npm) GHSA-27vg-w6vw-2rq8, MAL-2026-5530 | Malicious | Not scored | 10 Jun, 2026 | npm websocket-slot |
Malicious release: Malicious code in @solana-labs/web3.js (npm) GHSA-v45f-fr53-php7, MAL-2026-5525 | Malicious | Not scored | 10 Jun, 2026 | npm @solana-labs/web3.js |
Malicious release: Malicious code in v018-axios-cdntest (npm) GHSA-cw6g-r53q-23c2, MAL-2026-5529 | Malicious | Not scored | 10 Jun, 2026 | npm v018-axios-cdntest |
Malicious release: Malicious code in @access-risk/browser-remedy-react (npm) MAL-2026-5520 | Malicious | Not scored | 10 Jun, 2026 | npm @access-risk/browser-remedy-react |
Malicious release: Malicious code in @helpcentre/tesco-help (npm) GHSA-5cff-qhhv-cxxw, MAL-2026-5521 | Malicious | Not scored | 10 Jun, 2026 | npm @helpcentre/tesco-help |
Malicious release: Malicious code in @orion-design-system/foundation (npm) MAL-2026-5523 | Malicious | Not scored | 10 Jun, 2026 | npm @orion-design-system/foundation |
Malicious release: Malicious code in @orion-design-system/components (npm) MAL-2026-5522 | Malicious | Not scored | 10 Jun, 2026 | npm @orion-design-system/components |
Malicious release: Malicious code in @orion-design-system/store (npm) MAL-2026-5524 | Malicious | Not scored | 10 Jun, 2026 | npm @orion-design-system/store |
Malicious release: Malicious code in events-runtime (npm) MAL-2026-5528 | Malicious | Not scored | 10 Jun, 2026 | npm events-runtime |
Malicious release: Malicious code in firefly-utilities-helper (npm) GHSA-rr4c-xp44-vvf4, MAL-2026-5517 | Malicious | Not scored | 10 Jun, 2026 | npm firefly-utilities-helper |