Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @antv/g-plugin-rough-canvas-renderer (npm) GHSA-pcx7-h5gg-6fc4, MAL-2026-3951 | Malicious | Not scored | 19 May, 2026 | npm @antv/g-plugin-rough-canvas-renderer |
Malicious release: Malicious code in @antv/path-util (npm) GHSA-pf5j-4636-6rx7, MAL-2026-4075 | Malicious | Not scored | 19 May, 2026 | npm @antv/path-util |
Malicious release: Malicious code in limit-size (npm) GHSA-phpf-jpq8-9v3p, MAL-2026-4143 | Malicious | Not scored | 19 May, 2026 | npm limit-size |
Malicious release: Malicious code in @antv/layout-gpu (npm) GHSA-ppv3-wmcg-rr34, MAL-2026-4057 | Malicious | Not scored | 19 May, 2026 | npm @antv/layout-gpu |
Malicious release: Malicious code in @antv/g-plugin-gpgpu (npm) GHSA-pqcc-hgwf-gprp, MAL-2026-3945 | Malicious | Not scored | 19 May, 2026 | npm @antv/g-plugin-gpgpu |
Malicious release: Malicious code in @antv/g-webgl (npm) GHSA-pv52-x3r3-qqqx, MAL-2026-3965 | Malicious | Not scored | 19 May, 2026 | npm @antv/g-webgl |
Malicious release: Malicious code in @antv/color-schema (npm) GHSA-px5p-fr46-56q3, MAL-2026-3861 | Malicious | Not scored | 19 May, 2026 | npm @antv/color-schema |
Malicious release: Malicious code in @antv/li-sdk (npm) GHSA-pxhx-qqpg-pw7g, MAL-2026-4065 | Malicious | Not scored | 19 May, 2026 | npm @antv/li-sdk |
Malicious release: Malicious code in @lint-md/core (npm) GHSA-pxvh-xmw6-wc5m, MAL-2026-4124 | Malicious | Not scored | 19 May, 2026 | npm @lint-md/core |
Malicious release: Malicious code in babel-plugin-version (npm) GHSA-q294-f83f-877x, MAL-2026-4129 | Malicious | Not scored | 19 May, 2026 | npm babel-plugin-version |
Malicious release: Malicious code in @antv/graphlib (npm) GHSA-q382-p7f2-f69h, MAL-2026-4026 | Malicious | Not scored | 19 May, 2026 | npm @antv/graphlib |
Malicious release: Malicious code in @antv/l7-component (npm) GHSA-q5cr-c8hf-wj6m, MAL-2026-4034 | Malicious | Not scored | 19 May, 2026 | npm @antv/l7-component |
Malicious release: Malicious code in @antv/event-emitter (npm) GHSA-q9w3-3q3j-cmcw, MAL-2026-3879 | Malicious | Not scored | 19 May, 2026 | npm @antv/event-emitter |
Malicious release: Malicious code in @antv/l7-utils (npm) GHSA-qc3r-8r79-xw3f, MAL-2026-4053 | Malicious | Not scored | 19 May, 2026 | npm @antv/l7-utils |
Malicious release: Malicious code in @antv/adjust (npm) GHSA-qcp2-qp9h-qprg, MAL-2026-3849 | Malicious | Not scored | 19 May, 2026 | npm @antv/adjust |
Malicious release: Malicious code in @antv/x6-geometry (npm) GHSA-qf4q-5vcp-73h7, MAL-2026-3840 | Malicious | Not scored | 19 May, 2026 | npm @antv/x6-geometry |
Malicious release: Malicious code in @antv/g-canvas (npm) GHSA-qfx3-gvjj-79vc, MAL-2026-3911 | Malicious | Not scored | 19 May, 2026 | npm @antv/g-canvas |
Malicious release: Malicious code in @antv/mcp-server-chart (npm) GHSA-qgmj-c898-99rq, MAL-2026-4069 | Malicious | Not scored | 19 May, 2026 | npm @antv/mcp-server-chart |
Malicious release: Malicious code in @antv/l7plot (npm) GHSA-qh36-m6j3-2qqj, MAL-2026-4054 | Malicious | Not scored | 19 May, 2026 | npm @antv/l7plot |
Malicious release: Malicious code in @antv/li-core-assets (npm) GHSA-qx42-m25j-5q2g, MAL-2026-4061 | Malicious | Not scored | 19 May, 2026 | npm @antv/li-core-assets |
Malicious release: Malicious code in @antv/g2-extension-ava (npm) GHSA-r3vm-ff6x-84h7, MAL-2026-3976 | Malicious | Not scored | 19 May, 2026 | npm @antv/g2-extension-ava |
Malicious release: Malicious code in @antv/x6-plugin-transform (npm) GHSA-r5j9-ph7p-293w, MAL-2026-4111 | Malicious | Not scored | 19 May, 2026 | npm @antv/x6-plugin-transform |
Malicious release: Malicious code in @antv/g-plugin-a11y (npm) GHSA-r9wm-j6rg-g4f6, MAL-2026-3932 | Malicious | Not scored | 19 May, 2026 | npm @antv/g-plugin-a11y |
Malicious release: Malicious code in @antv/x6-plugin-minimap (npm) GHSA-rcjf-4h3m-7qm7, MAL-2026-4106 | Malicious | Not scored | 19 May, 2026 | npm @antv/x6-plugin-minimap |
Malicious release: Malicious code in @antv/color-util (npm) GHSA-rh6v-hwr4-6jcp, MAL-2026-3862 | Malicious | Not scored | 19 May, 2026 | npm @antv/color-util |
Malicious release: Malicious code in @antv/x6-plugin-dnd (npm) GHSA-rmgf-2g76-6ghh, MAL-2026-4102 | Malicious | Not scored | 19 May, 2026 | npm @antv/x6-plugin-dnd |
Malicious release: Malicious code in @antv/g-mobile (npm) GHSA-rrq4-29fr-r8wj, MAL-2026-3924 | Malicious | Not scored | 19 May, 2026 | npm @antv/g-mobile |
Malicious release: Malicious code in @antv/ckb (npm) GHSA-rx57-h637-696p, MAL-2026-3860 | Malicious | Not scored | 19 May, 2026 | npm @antv/ckb |
Malicious release: Malicious code in @antv/l7-core (npm) GHSA-rxrf-pf3f-w3p5, MAL-2026-4036 | Malicious | Not scored | 19 May, 2026 | npm @antv/l7-core |
Malicious release: Malicious code in @antv/l7-district (npm) GHSA-v7v5-32v3-f6m3, MAL-2026-4037 | Malicious | Not scored | 19 May, 2026 | npm @antv/l7-district |
Malicious release: Malicious code in lint-md-cli (npm) GHSA-vfrr-r2f4-hx7m, MAL-2026-4145 | Malicious | Not scored | 19 May, 2026 | npm lint-md-cli |
Malicious release: Malicious code in @antv/g-mobile-canvas-element (npm) GHSA-vfwr-g2x2-6phq, MAL-2026-3926 | Malicious | Not scored | 19 May, 2026 | npm @antv/g-mobile-canvas-element |
Malicious release: Malicious code in @antv/g-plugin-canvas-renderer (npm) GHSA-vj87-p72m-m8fc, MAL-2026-3937 | Malicious | Not scored | 19 May, 2026 | npm @antv/g-plugin-canvas-renderer |
Malicious release: Malicious code in @antv/x6-plugin-clipboard (npm) GHSA-vqmm-5f3x-x32r, MAL-2026-4101 | Malicious | Not scored | 19 May, 2026 | npm @antv/x6-plugin-clipboard |
Malicious release: Malicious code in fixed-round (npm) GHSA-vrxj-4hcq-xgcv, MAL-2026-4134 | Malicious | Not scored | 19 May, 2026 | npm fixed-round |
Malicious release: Malicious code in @antv/g6-react-node (npm) GHSA-w3gp-q3qh-9q66, MAL-2026-3995 | Malicious | Not scored | 19 May, 2026 | npm @antv/g6-react-node |
Malicious release: Malicious code in @antv/x6-common (npm) GHSA-w5pj-w4r4-pfgf, MAL-2026-4099 | Malicious | Not scored | 19 May, 2026 | npm @antv/x6-common |
Malicious release: Malicious code in @antv/a8 (npm) GHSA-w64q-7g9m-c46x, MAL-2026-3848 | Malicious | Not scored | 19 May, 2026 | npm @antv/a8 |
Malicious release: Malicious code in @antv/x6-plugin-selection (npm) GHSA-w6w6-23x5-qxwg, MAL-2026-4108 | Malicious | Not scored | 19 May, 2026 | npm @antv/x6-plugin-selection |
Malicious release: Malicious code in jest-random-mock (npm) GHSA-wcvg-25qc-qq9q, MAL-2026-4141 | Malicious | Not scored | 19 May, 2026 | npm jest-random-mock |
Malicious release: Malicious code in onfire.js (npm) GHSA-wcw3-5x3x-29vx, MAL-2026-4149 | Malicious | Not scored | 19 May, 2026 | npm onfire.js |
Malicious release: Malicious code in @antv/g2-plugin-slider (npm) GHSA-wcw5-7qcm-248g, MAL-2026-3978 | Malicious | Not scored | 19 May, 2026 | npm @antv/g2-plugin-slider |
Malicious release: Malicious code in byte-parser (npm) GHSA-wfmp-rqvg-5fjr, MAL-2026-3846 | Malicious | Not scored | 19 May, 2026 | npm byte-parser |
Malicious release: Malicious code in @antv/l7-draw (npm) GHSA-wggw-c96j-jjh2, MAL-2026-4038 | Malicious | Not scored | 19 May, 2026 | npm @antv/l7-draw |
Malicious release: Malicious code in @lint-md/parser (npm) GHSA-wghc-m4q5-hw4w, MAL-2026-4125 | Malicious | Not scored | 19 May, 2026 | npm @lint-md/parser |
Malicious release: Malicious code in @antv/g-webgpu (npm) GHSA-whh8-vv58-f333, MAL-2026-3967 | Malicious | Not scored | 19 May, 2026 | npm @antv/g-webgpu |
Malicious release: Malicious code in jest-electron (npm) GHSA-wq4x-c934-57c2, MAL-2026-4138 | Malicious | Not scored | 19 May, 2026 | npm jest-electron |
Malicious release: Malicious code in canvas-nest.js (npm) GHSA-wqg8-rp25-j93m, MAL-2026-4131 | Malicious | Not scored | 19 May, 2026 | npm canvas-nest.js |
Malicious release: Malicious code in @antv/ava-react (npm) GHSA-wwmj-qvv5-xgmv, MAL-2026-3854 | Malicious | Not scored | 19 May, 2026 | npm @antv/ava-react |
Malicious release: Malicious code in @antv/g6-editor (npm) GHSA-wwvj-2296-p2m7, MAL-2026-3986 | Malicious | Not scored | 19 May, 2026 | npm @antv/g6-editor |