Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in tailwind-effect (npm) GHSA-68h2-v9v8-3829, MAL-2026-5081 | Malicious | Not scored | 29 May, 2026 | npm tailwind-effect |
Malicious release: Malicious code in one-view-chat-ui-module (npm) GHSA-x5hf-3wp7-2rhq, MAL-2026-5074 | Malicious | Not scored | 29 May, 2026 | npm one-view-chat-ui-module |
Malicious release: Malicious code in web3-config-loader (npm) GHSA-m273-jgjp-6f68, MAL-2026-5085 | Malicious | Not scored | 29 May, 2026 | npm web3-config-loader |
Malicious release: Malicious code in evmchain-cli (npm) GHSA-cr99-r4wc-x948, MAL-2026-5068 | Malicious | Not scored | 29 May, 2026 | npm evmchain-cli |
Malicious release: Malicious code in evmchain-config (npm) GHSA-fqr3-46mm-cgvp, MAL-2026-5069 | Malicious | Not scored | 29 May, 2026 | npm evmchain-config |
Malicious release: Malicious code in tailwindcss-basic-animation (npm) GHSA-fwwj-pvrq-jp8p, MAL-2026-5083 | Malicious | Not scored | 29 May, 2026 | npm tailwindcss-basic-animation |
Malicious release: Malicious code in ota_web_admin (npm) GHSA-vhgj-33p4-7gr8, MAL-2026-5075 | Malicious | Not scored | 29 May, 2026 | npm ota_web_admin |
Malicious release: Malicious code in tailwind-smooth-slider (npm) GHSA-w48r-28x8-4v9p, MAL-2026-5082 | Malicious | Not scored | 29 May, 2026 | npm tailwind-smooth-slider |
Malicious release: Malicious code in raven-i18n-react (npm) GHSA-9w8j-9mp6-phr8, MAL-2026-5078 | Malicious | Not scored | 29 May, 2026 | npm raven-i18n-react |
Malicious release: Malicious code in chai-use-test (npm) GHSA-jr6p-493v-mmwf, MAL-2026-5061 | Malicious | Not scored | 29 May, 2026 | npm chai-use-test |
Malicious release: Malicious code in chai-extensions-extras (npm) GHSA-qqfx-v5rv-9rxr, MAL-2026-5060 | Malicious | Not scored | 29 May, 2026 | npm chai-extensions-extras |
Malicious release: Malicious code in tailwind-clamps-line (npm) GHSA-29g5-vw2p-x29p, MAL-2026-5080 | Malicious | Not scored | 29 May, 2026 | npm tailwind-clamps-line |
Malicious release: Malicious code in private-next-instrumentation-client (npm) GHSA-cx3x-gvpc-g35w, MAL-2026-5076 | Malicious | Not scored | 29 May, 2026 | npm private-next-instrumentation-client |
Malicious release: Malicious code in react-svg-animator (npm) GHSA-g99g-mw45-jjhj, MAL-2026-5079 | Malicious | Not scored | 29 May, 2026 | npm react-svg-animator |
Malicious release: Malicious code in ethers-errors (npm) GHSA-6726-235v-9wxv, MAL-2026-5065 | Malicious | Not scored | 29 May, 2026 | npm ethers-errors |
Malicious release: Malicious code in gcp-api-enabler (npm) GHSA-r3rp-65c5-5cjh, MAL-2026-5071 | Malicious | Not scored | 29 May, 2026 | npm gcp-api-enabler |
Malicious release: Malicious code in @timelycare/core (npm) GHSA-47m4-3287-24vc, MAL-2026-5055 | Malicious | Not scored | 29 May, 2026 | npm @timelycare/core |
Malicious release: Malicious code in @rsi-community/hub-client-app (npm) GHSA-6rcg-q5qx-9qhp, MAL-2026-5050 | Malicious | Not scored | 29 May, 2026 | npm @rsi-community/hub-client-app |
Malicious release: Malicious code in @timelycare/api (npm) GHSA-h3x2-x2gh-2hcm, MAL-2026-5052 | Malicious | Not scored | 29 May, 2026 | npm @timelycare/api |
Malicious release: Malicious code in @tc-core/provider-service (npm) GHSA-rrgc-v65r-26g4, MAL-2026-5051 | Malicious | Not scored | 29 May, 2026 | npm @tc-core/provider-service |
Malicious release: Malicious code in foundry-config (npm) GHSA-29c8-wfhx-h778, MAL-2026-5070 | Malicious | Not scored | 29 May, 2026 | npm foundry-config |
Malicious release: Malicious code in @cplace-project-planning-fe/cf-project-planning (npm) GHSA-4hrw-8228-63r2, MAL-2026-5048 | Malicious | Not scored | 29 May, 2026 | npm @cplace-project-planning-fe/cf-project-planning |
Malicious release: Malicious code in codex-devcontainer-install (npm) GHSA-frcf-f9wx-gq64, MAL-2026-5062 | Malicious | Not scored | 29 May, 2026 | npm codex-devcontainer-install |
Malicious release: Malicious code in ethers-hash (npm) GHSA-mrrv-5vqm-j285, MAL-2026-5066 | Malicious | Not scored | 29 May, 2026 | npm ethers-hash |
Malicious release: Malicious code in @timelycare/common (npm) GHSA-mf79-x3p8-p4px, MAL-2026-5053 | Malicious | Not scored | 29 May, 2026 | npm @timelycare/common |
Malicious release: Malicious code in @lir-portal/web-components (npm) GHSA-pvc4-pwx8-4c4g, MAL-2026-5049 | Malicious | Not scored | 29 May, 2026 | npm @lir-portal/web-components |
Malicious release: Malicious code in tiny-naturalsort (npm) GHSA-mqp5-9r9w-8hg4, MAL-2026-5030 | Malicious | Not scored | 29 May, 2026 | npm tiny-naturalsort |
Malicious release: Malicious code in modulebuild3240234t (PyPI) MAL-2026-5029 | Malicious | Not scored | 29 May, 2026 | PyPI modulebuild3240234t |
Malicious release: Malicious code in sorenson-webfonts (npm) GHSA-jfh5-5qvf-47fj, MAL-2026-5028 | Malicious | Not scored | 29 May, 2026 | npm sorenson-webfonts |
Malicious release: Malicious code in @t-in-one/add_application (npm) GHSA-2rqm-cx7p-43hx, MAL-2026-5034 | Malicious | Not scored | 29 May, 2026 | npm @t-in-one/add_application |
Malicious release: Malicious code in @t-in-one/send_add_application (npm) GHSA-33cg-q6pj-vg3j, MAL-2026-5046 | Malicious | Not scored | 29 May, 2026 | npm @t-in-one/send_add_application |
Malicious release: Malicious code in @t-in-one/prefill_credit_data_token (npm) GHSA-38v2-g3qx-w6fr, MAL-2026-5042 | Malicious | Not scored | 29 May, 2026 | npm @t-in-one/prefill_credit_data_token |
Malicious release: Malicious code in @sber-ecom-core/sberpay-widget (npm) GHSA-6rfw-m3fj-7g8q, MAL-2026-5032 | Malicious | Not scored | 29 May, 2026 | npm @sber-ecom-core/sberpay-widget |
Malicious release: Malicious code in @t-in-one/prefill_transformers_data_token (npm) GHSA-7jj3-323f-22v4, MAL-2026-5043 | Malicious | Not scored | 29 May, 2026 | npm @t-in-one/prefill_transformers_data_token |
Malicious release: Malicious code in @t-in-one/add_app_middleware_token (npm) GHSA-86f7-96xp-23wm, MAL-2026-5033 | Malicious | Not scored | 29 May, 2026 | npm @t-in-one/add_app_middleware_token |
Malicious release: Malicious code in @t-in-one/get_application_hid (npm) GHSA-9ghf-xffg-p5gx, MAL-2026-5039 | Malicious | Not scored | 29 May, 2026 | npm @t-in-one/get_application_hid |
Malicious release: Malicious code in @t-in-one/application_id_storage_key_token (npm) GHSA-cwhq-qx36-9hhq, MAL-2026-5037 | Malicious | Not scored | 29 May, 2026 | npm @t-in-one/application_id_storage_key_token |
Malicious release: Malicious code in @t-in-one/only_difference_payload (npm) GHSA-h594-x75p-ghjh, MAL-2026-5040 | Malicious | Not scored | 29 May, 2026 | npm @t-in-one/only_difference_payload |
Malicious release: Malicious code in @t-in-one/add_application_service_token (npm) GHSA-p76m-g6ch-9pg3, MAL-2026-5035 | Malicious | Not scored | 29 May, 2026 | npm @t-in-one/add_application_service_token |
Malicious release: Malicious code in @t-in-one/safe_local_storage_token (npm) GHSA-r2p6-3gmf-chx9, MAL-2026-5045 | Malicious | Not scored | 29 May, 2026 | npm @t-in-one/safe_local_storage_token |
Malicious release: Malicious code in @t-in-one/form_product_token (npm) GHSA-r382-p83j-69fx, MAL-2026-5038 | Malicious | Not scored | 29 May, 2026 | npm @t-in-one/form_product_token |
Malicious release: Malicious code in @t-in-one/prefill_bundle_data_token (npm) GHSA-rm9j-3m66-35r4, MAL-2026-5041 | Malicious | Not scored | 29 May, 2026 | npm @t-in-one/prefill_bundle_data_token |
Malicious release: Malicious code in @capibar.chat/ui-kit (npm) GHSA-rwm6-rvqv-qv7c, MAL-2026-5031 | Malicious | Not scored | 29 May, 2026 | npm @capibar.chat/ui-kit |
Malicious release: Malicious code in @t-in-one/add_application_tid (npm) GHSA-vvr5-6j6h-rq49, MAL-2026-5036 | Malicious | Not scored | 29 May, 2026 | npm @t-in-one/add_application_tid |
Malicious release: Malicious code in @t-in-one/restore_application_hid_from_storage (npm) GHSA-w9v9-8839-82rr, MAL-2026-5044 | Malicious | Not scored | 29 May, 2026 | npm @t-in-one/restore_application_hid_from_storage |
Malicious release: Malicious code in lib-1779997093-yjeeqn (PyPI) MAL-2026-4861 | Malicious | Not scored | 28 May, 2026 | PyPI lib-1779997093-yjeeqn |
Malicious release: Malicious code in veloxml-cli (PyPI) MAL-2026-4862 | Malicious | Not scored | 28 May, 2026 | PyPI veloxml-cli |
Malicious release: Malicious code in @qlab/ui (npm) MAL-2026-4860 | Malicious | Not scored | 28 May, 2026 | npm @qlab/ui |
Malicious release: Malicious code in telethon-pro-safe (PyPI) MAL-2026-4859 | Malicious | Not scored | 28 May, 2026 | PyPI telethon-pro-safe |
Malicious release: Malicious code in @neon-i18n/core-ui (npm) MAL-2026-5027 | Malicious | Not scored | 28 May, 2026 | npm @neon-i18n/core-ui |