Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in homestack-cheer (npm) GHSA-x567-p88w-3697, MAL-2026-16333 | Malicious | Not scored | 21 Sep, 2026 | npm homestack-cheer |
Malicious release: Malicious code in @asenfotech/unplugin-element-plus (npm) MAL-2026-16318 | Malicious | Not scored | 21 Sep, 2026 | npm @asenfotech/unplugin-element-plus |
Malicious release: Malicious code in feed-widget-helper (npm) GHSA-r52r-vpcc-38v2, MAL-2026-16332 | Malicious | Not scored | 21 Sep, 2026 | npm feed-widget-helper |
Malicious release: Malicious code in element-plus-vite-cli (npm) MAL-2026-16331 | Malicious | Not scored | 21 Sep, 2026 | npm element-plus-vite-cli |
Malicious release: Malicious code in catwrestlingbird (npm) MAL-2026-16327 | Malicious | Not scored | 21 Sep, 2026 | npm catwrestlingbird |
Malicious release: Malicious code in sorrawit-dev-helper (npm) MAL-2026-16344 | Malicious | Not scored | 21 Sep, 2026 | npm sorrawit-dev-helper |
Malicious release: Malicious code in catwrestlinghuman (npm) MAL-2026-16328 | Malicious | Not scored | 21 Sep, 2026 | npm catwrestlinghuman |
Malicious release: Malicious code in action-slack-message-root (npm) GHSA-mrmw-mqq6-fp9w, MAL-2026-16323 | Malicious | Not scored | 21 Sep, 2026 | npm action-slack-message-root |
Malicious release: Malicious code in bulk-add-sdk (npm) MAL-2026-16325 | Malicious | Not scored | 21 Sep, 2026 | npm bulk-add-sdk |
Malicious release: Malicious code in better-envforge (npm) GHSA-3h54-43fv-m822, MAL-2026-16324 | Malicious | Not scored | 21 Sep, 2026 | npm better-envforge |
Malicious release: Malicious code in chai-as-viem (npm) GHSA-88fm-v2m3-mx8x, MAL-2026-16329 | Malicious | Not scored | 21 Sep, 2026 | npm chai-as-viem |
Malicious release: Malicious code in byted-commerce-materials (npm) MAL-2026-16326 | Malicious | Not scored | 21 Sep, 2026 | npm byted-commerce-materials |
Malicious release: Malicious code in siriusbeyond (npm) MAL-2026-16343 | Malicious | Not scored | 21 Sep, 2026 | npm siriusbeyond |
Malicious release: Malicious code in @siriusbeyond/ui (npm) MAL-2026-16321 | Malicious | Not scored | 21 Sep, 2026 | npm @siriusbeyond/ui |
Malicious release: Malicious code in @siriusbeyond/utils (npm) MAL-2026-16322 | Malicious | Not scored | 21 Sep, 2026 | npm @siriusbeyond/utils |
Malicious release: Malicious code in @dbbhk/ui-components (npm) MAL-2026-16319 | Malicious | Not scored | 21 Sep, 2026 | npm @dbbhk/ui-components |
Malicious release: Malicious code in commerce-materials (npm) MAL-2026-16330 | Malicious | Not scored | 21 Sep, 2026 | npm commerce-materials |
Malicious release: Malicious code in test1sdsd2 (npm) MAL-2026-16316 | Malicious | Not scored | 21 Sep, 2026 | npm test1sdsd2 |
Malicious release: Malicious code in testmgkregme (npm) GHSA-x8qg-wc79-vfhh, MAL-2026-16317 | Malicious | Not scored | 21 Sep, 2026 | npm testmgkregme |
Malicious release: Malicious code in test12vv36 (npm) MAL-2026-16311 | Malicious | Not scored | 21 Sep, 2026 | npm test12vv36 |
Malicious release: Malicious code in test1ro (npm) MAL-2026-16315 | Malicious | Not scored | 21 Sep, 2026 | npm test1ro |
Malicious release: Malicious code in test1df23 (npm) MAL-2026-16312 | Malicious | Not scored | 21 Sep, 2026 | npm test1df23 |
Malicious release: Malicious code in test1hh235 (npm) MAL-2026-16314 | Malicious | Not scored | 21 Sep, 2026 | npm test1hh235 |
Malicious release: Malicious code in test1gg234 (npm) MAL-2026-16313 | Malicious | Not scored | 21 Sep, 2026 | npm test1gg234 |
Malicious release: Malicious code in npx-test-ma980 (npm) MAL-2026-16310 | Malicious | Not scored | 21 Sep, 2026 | npm npx-test-ma980 |
Malicious release: Malicious code in chai-testing (npm) MAL-2026-16307 | Malicious | Not scored | 21 Sep, 2026 | npm chai-testing |
Malicious release: Malicious code in @baanx/solana-lib (npm) GHSA-5x34-3xqm-3r73, MAL-2026-16300 | Malicious | Not scored | 21 Sep, 2026 | npm @baanx/solana-lib |
Malicious release: Malicious code in @nimbusedge2/authxsas (npm) MAL-2026-16303 | Malicious | Not scored | 21 Sep, 2026 | npm @nimbusedge2/authxsas |
Malicious release: Malicious code in @nimbusedge2/auth (npm) MAL-2026-16302 | Malicious | Not scored | 21 Sep, 2026 | npm @nimbusedge2/auth |
Malicious release: Malicious code in @nimbusedge2/authxsas1 (npm) MAL-2026-16304 | Malicious | Not scored | 21 Sep, 2026 | npm @nimbusedge2/authxsas1 |
Malicious release: Malicious code in npmscript_tesstalert_unpkg (npm) GHSA-xvj9-j5xj-9f5p, MAL-2026-16309 | Malicious | Not scored | 21 Sep, 2026 | npm npmscript_tesstalert_unpkg |
Malicious release: Malicious code in chat-adapter-matrix (npm) MAL-2026-16308 | Malicious | Not scored | 21 Sep, 2026 | npm chat-adapter-matrix |
Malicious release: Malicious code in @nimbusedge2/x (npm) MAL-2026-16305 | Malicious | Not scored | 21 Sep, 2026 | npm @nimbusedge2/x |
Malicious release: Malicious code in @nimbusedge2/xa (npm) MAL-2026-16306 | Malicious | Not scored | 21 Sep, 2026 | npm @nimbusedge2/xa |
Malicious release: Malicious code in @nimbsuedge3/xar (npm) MAL-2026-16301 | Malicious | Not scored | 21 Sep, 2026 | npm @nimbsuedge3/xar |
Malicious release: Malicious code in @pwaplatform/module-sso-integration (npm) GHSA-3gx2-xpw8-x42p, MAL-2026-16299 | Malicious | Not scored | 20 Sep, 2026 | npm @pwaplatform/module-sso-integration |
Malicious release: Malicious code in @siriusbeyond/auth (npm) MAL-2026-16320 | Malicious | Not scored | 20 Sep, 2026 | npm @siriusbeyond/auth |
Malicious release: Malicious code in starbucks-sdk (npm) MAL-2026-16345 | Malicious | Not scored | 20 Sep, 2026 | npm starbucks-sdk |
Malicious release: Malicious code in radio-player-theme (npm) GHSA-pp2v-g64w-gm6f, MAL-2026-16347 | Malicious | Not scored | 19 Sep, 2026 | npm radio-player-theme |
Malicious release: Malicious code in urc (PyPI) MAL-2026-16298 | Malicious | Not scored | 19 Sep, 2026 | PyPI urc |
Malicious release: Malicious code in keroeltop (npm) MAL-2026-16297 | Malicious | Not scored | 18 Sep, 2026 | npm keroeltop |
Malicious release: Malicious code in py-venv-doctor (PyPI) MAL-2026-16296 | Malicious | Not scored | 18 Sep, 2026 | PyPI py-venv-doctor |
Malicious release: Malicious code in @shared-web/utils (npm) MAL-2026-16292 | Malicious | Not scored | 18 Sep, 2026 | npm @shared-web/utils |
Malicious release: Malicious code in chai-as-indexed (npm) MAL-2026-16293 | Malicious | Not scored | 18 Sep, 2026 | npm chai-as-indexed |
Malicious release: Malicious code in @insiderintelligence/googleadmanager (npm) GHSA-q699-336h-g385, MAL-2026-16290 | Malicious | Not scored | 18 Sep, 2026 | npm @insiderintelligence/googleadmanager |
Malicious release: Malicious code in tailwindcss-forms-ui (npm) MAL-2026-16295 | Malicious | Not scored | 18 Sep, 2026 | npm tailwindcss-forms-ui |
Malicious release: Malicious code in @shared-runtime/modules (npm) MAL-2026-16291 | Malicious | Not scored | 18 Sep, 2026 | npm @shared-runtime/modules |
Malicious release: Malicious code in internallib_v949 (npm) GHSA-f863-m366-9cfm, MAL-2026-16294 | Malicious | Not scored | 18 Sep, 2026 | npm internallib_v949 |
Malicious release: Malicious code in openmct-heatmap (npm) GHSA-qx52-2xq4-3x3v, MAL-2026-16287 | Malicious | Not scored | 18 Sep, 2026 | npm openmct-heatmap |
Malicious release: Malicious code in test89-auth (npm) GHSA-7868-hxr7-g8r6, MAL-2026-16288 | Malicious | Not scored | 18 Sep, 2026 | npm test89-auth |