Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in identitysecuretokenserv (npm) GHSA-2g7g-rqj2-26hv, MAL-2026-4164 | Malicious | Not scored | 19 May, 2026 | npm identitysecuretokenserv |
Malicious release: Malicious code in vfat-ai (PyPI) MAL-2026-4163 | Malicious | Not scored | 19 May, 2026 | PyPI vfat-ai |
Malicious release: Malicious code in vfat (PyPI) MAL-2026-4162 | Malicious | Not scored | 19 May, 2026 | PyPI vfat |
Malicious release: Malicious code in @apps-home-dashboard/events (npm) MAL-2026-4160 | Malicious | Not scored | 19 May, 2026 | npm @apps-home-dashboard/events |
Malicious release: Malicious code in @openclaw-cn/toutiao-ops (npm) GHSA-76rr-f54j-qv4x, MAL-2026-3844 | Malicious | Not scored | 19 May, 2026 | npm @openclaw-cn/toutiao-ops |
Malicious release: Malicious code in @starmind/collector-cli (npm) GHSA-g8pp-x86c-7rvv, MAL-2026-3845 | Malicious | Not scored | 19 May, 2026 | npm @starmind/collector-cli |
Malicious release: Malicious code in @openclaw-cn/feishu (npm) GHSA-pmr7-7grm-gj36, MAL-2026-3842 | Malicious | Not scored | 19 May, 2026 | npm @openclaw-cn/feishu |
Malicious release: Malicious code in @openclaw-cn/cli (npm) GHSA-rfwx-q579-pqpc, MAL-2026-3841 | Malicious | Not scored | 19 May, 2026 | npm @openclaw-cn/cli |
Malicious release: Malicious code in openclaw-cn (npm) GHSA-w2fv-p53h-wcph, MAL-2026-3847 | Malicious | Not scored | 19 May, 2026 | npm openclaw-cn |
Malicious release: Malicious code in @openclaw-cn/libsignal (npm) GHSA-wcjp-mfw5-77g8, MAL-2026-3843 | Malicious | Not scored | 19 May, 2026 | npm @openclaw-cn/libsignal |
Malicious release: Malicious code in @cap-js/openapi (npm) MAL-2026-4161 | Malicious | Not scored | 19 May, 2026 | npm @cap-js/openapi |
Malicious release: Malicious code in vfat-tools (npm) GHSA-jxh5-v495-r962, MAL-2026-4179 | Malicious | Not scored | 19 May, 2026 | npm vfat-tools |
Malicious release: Malicious code in sickle-wrapper (npm) GHSA-f64g-9rx5-4jxf, MAL-2026-4178 | Malicious | Not scored | 19 May, 2026 | npm sickle-wrapper |
Malicious release: Malicious code in @antv/graphin-graphscope (npm) GHSA-24cj-39cv-3v39, MAL-2026-4024 | Malicious | Not scored | 19 May, 2026 | npm @antv/graphin-graphscope |
Malicious release: Malicious code in timeago.js (npm) GHSA-24rg-886p-mgcf, MAL-2026-4156 | Malicious | Not scored | 19 May, 2026 | npm timeago.js |
Malicious release: Malicious code in @antv/g-mobile-canvas (npm) GHSA-24wr-fjmp-cp62, MAL-2026-3925 | Malicious | Not scored | 19 May, 2026 | npm @antv/g-mobile-canvas |
Malicious release: Malicious code in @antv/l7-renderer (npm) GHSA-2cx2-5qc6-g927, MAL-2026-4049 | Malicious | Not scored | 19 May, 2026 | npm @antv/l7-renderer |
Malicious release: Malicious code in @antv/smart-color (npm) GHSA-2f69-wx92-323w, MAL-2026-4085 | Malicious | Not scored | 19 May, 2026 | npm @antv/smart-color |
Malicious release: Malicious code in @antv/l7-source (npm) GHSA-2g4c-8h8p-3hx7, MAL-2026-4051 | Malicious | Not scored | 19 May, 2026 | npm @antv/l7-source |
Malicious release: Malicious code in @antv/x6-vue3-shape (npm) GHSA-2h7w-4897-2pcq, MAL-2026-4117 | Malicious | Not scored | 19 May, 2026 | npm @antv/x6-vue3-shape |
Malicious release: Malicious code in @antv/vis-predict-engine (npm) GHSA-2jfm-x3p5-q6cq, MAL-2026-4094 | Malicious | Not scored | 19 May, 2026 | npm @antv/vis-predict-engine |
Malicious release: Malicious code in @antv/chart-node-g6 (npm) GHSA-2qrw-8mg6-hjhv, MAL-2026-3858 | Malicious | Not scored | 19 May, 2026 | npm @antv/chart-node-g6 |
Malicious release: Malicious code in echarts-for-react (npm) GHSA-2w6w-qxwv-qv2q, MAL-2026-4132 | Malicious | Not scored | 19 May, 2026 | npm echarts-for-react |
Malicious release: Malicious code in @antv/g-mobile-webgl (npm) GHSA-337r-7h6j-v8v6, MAL-2026-3928 | Malicious | Not scored | 19 May, 2026 | npm @antv/g-mobile-webgl |
Malicious release: Malicious code in @antv/g-math (npm) GHSA-38wc-54fv-gf4h, MAL-2026-3923 | Malicious | Not scored | 19 May, 2026 | npm @antv/g-math |
Malicious release: Malicious code in @antv/g6-ssr (npm) GHSA-3c58-vgw8-2cvf, MAL-2026-3996 | Malicious | Not scored | 19 May, 2026 | npm @antv/g6-ssr |
Malicious release: Malicious code in @antv/g-gesture (npm) GHSA-3c6p-cx95-q59f, MAL-2026-3919 | Malicious | Not scored | 19 May, 2026 | npm @antv/g-gesture |
Malicious release: Malicious code in @antv/g-plugin-dragndrop (npm) GHSA-3mp5-g4hw-8695, MAL-2026-3943 | Malicious | Not scored | 19 May, 2026 | npm @antv/g-plugin-dragndrop |
Malicious release: Malicious code in @antv/l7-layers (npm) GHSA-3x2v-mwgf-c97h, MAL-2026-4041 | Malicious | Not scored | 19 May, 2026 | npm @antv/l7-layers |
Malicious release: Malicious code in @antv/x6-plugin-snapline (npm) GHSA-3x74-245r-5hqw, MAL-2026-4109 | Malicious | Not scored | 19 May, 2026 | npm @antv/x6-plugin-snapline |
Malicious release: Malicious code in @antv/li-sam-assets (npm) GHSA-3xmh-6mvr-59p8, MAL-2026-4064 | Malicious | Not scored | 19 May, 2026 | npm @antv/li-sam-assets |
Malicious release: Malicious code in @antv/g-image-exporter (npm) GHSA-43gp-g42f-r82g, MAL-2026-3837 | Malicious | Not scored | 19 May, 2026 | npm @antv/g-image-exporter |
Malicious release: Malicious code in @antv/x6 (npm) GHSA-45hr-5496-7mgx, MAL-2026-3839 | Malicious | Not scored | 19 May, 2026 | npm @antv/x6 |
Malicious release: Malicious code in @antv/gpt-vis-ssr (npm) GHSA-45m4-36r5-4mx3, MAL-2026-4021 | Malicious | Not scored | 19 May, 2026 | npm @antv/gpt-vis-ssr |
Malicious release: Malicious code in @antv/g-mobile-svg (npm) GHSA-45mw-h867-v337, MAL-2026-3927 | Malicious | Not scored | 19 May, 2026 | npm @antv/g-mobile-svg |
Malicious release: Malicious code in @antv/async-hook (npm) GHSA-467p-2qgm-r2xr, MAL-2026-3851 | Malicious | Not scored | 19 May, 2026 | npm @antv/async-hook |
Malicious release: Malicious code in @antv/dw-analyzer (npm) GHSA-496v-jcj6-2m74, MAL-2026-3875 | Malicious | Not scored | 19 May, 2026 | npm @antv/dw-analyzer |
Malicious release: Malicious code in @antv/g2-extension-3d (npm) GHSA-4fj7-9pjm-wv8c, MAL-2026-3975 | Malicious | Not scored | 19 May, 2026 | npm @antv/g2-extension-3d |
Malicious release: Malicious code in @antv/graphin-icons (npm) GHSA-4jm3-r6hq-rwfm, MAL-2026-4025 | Malicious | Not scored | 19 May, 2026 | npm @antv/graphin-icons |
Malicious release: Malicious code in @antv/gl-matrix (npm) GHSA-4qwq-f9rm-q9gv, MAL-2026-4019 | Malicious | Not scored | 19 May, 2026 | npm @antv/gl-matrix |
Malicious release: Malicious code in @antv/vendor (npm) GHSA-598p-cp5q-m489, MAL-2026-4093 | Malicious | Not scored | 19 May, 2026 | npm @antv/vendor |
Malicious release: Malicious code in @antv/l7-maps (npm) GHSA-5c5w-3mg4-4hrp, MAL-2026-4045 | Malicious | Not scored | 19 May, 2026 | npm @antv/l7-maps |
Malicious release: Malicious code in @antv/f6-core (npm) GHSA-5cc2-fc7w-q6vq, MAL-2026-3902 | Malicious | Not scored | 19 May, 2026 | npm @antv/f6-core |
Malicious release: Malicious code in @antv/layout-wasm (npm) GHSA-5gfx-5xg7-mxjq, MAL-2026-4058 | Malicious | Not scored | 19 May, 2026 | npm @antv/layout-wasm |
Malicious release: Malicious code in @antv/x6-vue-shape (npm) GHSA-5h2f-6mhq-3643, MAL-2026-4116 | Malicious | Not scored | 19 May, 2026 | npm @antv/x6-vue-shape |
Malicious release: Malicious code in @antv/xflow-extension (npm) GHSA-5j22-5fh7-frq6, MAL-2026-4121 | Malicious | Not scored | 19 May, 2026 | npm @antv/xflow-extension |
Malicious release: Malicious code in @antv/li-analysis-assets (npm) GHSA-5jcr-x23h-mqf9, MAL-2026-4060 | Malicious | Not scored | 19 May, 2026 | npm @antv/li-analysis-assets |
Malicious release: Malicious code in slice.js (npm) GHSA-5pq6-35rq-m8mh, MAL-2026-4154 | Malicious | Not scored | 19 May, 2026 | npm slice.js |
Malicious release: Malicious code in @antv/s2-react (npm) GHSA-5x6w-grjh-3xv8, MAL-2026-4078 | Malicious | Not scored | 19 May, 2026 | npm @antv/s2-react |
Malicious release: Malicious code in @antv/d3-color (npm) GHSA-64h3-x3fh-6m3v, MAL-2026-3865 | Malicious | Not scored | 19 May, 2026 | npm @antv/d3-color |