Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @squawk/mcp (npm) GHSA-vcpv-j6jh-qcc2, MAL-2026-3448 | Malicious | Not scored | 12 May, 2026 | npm @squawk/mcp |
Malicious release: Malicious code in @squawk/flight-math (npm) GHSA-g2v5-h9gp-qwjx, MAL-2026-3443 | Malicious | Not scored | 12 May, 2026 | npm @squawk/flight-math |
Malicious release: Malicious code in @squawk/units (npm) GHSA-v9qg-v8xv-qjpc, MAL-2026-3455 | Malicious | Not scored | 12 May, 2026 | npm @squawk/units |
Malicious release: Malicious code in @squawk/flightplan (npm) GHSA-2mgf-6xw7-hjgh, MAL-2026-3444 | Malicious | Not scored | 12 May, 2026 | npm @squawk/flightplan |
Malicious release: Malicious code in @squawk/airport-data (npm) GHSA-4q5g-g93p-w23v, MAL-2026-3435 | Malicious | Not scored | 12 May, 2026 | npm @squawk/airport-data |
Malicious release: Malicious code in @squawk/icao-registry-data (npm) GHSA-r72q-f5pp-8556, MAL-2026-3447 | Malicious | Not scored | 12 May, 2026 | npm @squawk/icao-registry-data |
Malicious release: Malicious code in @squawk/weather (npm) GHSA-p6w9-58xc-257f, MAL-2026-3456 | Malicious | Not scored | 12 May, 2026 | npm @squawk/weather |
Malicious release: Malicious code in @squawk/fix-data (npm) GHSA-w75r-vq2j-vpmf, MAL-2026-3441 | Malicious | Not scored | 12 May, 2026 | npm @squawk/fix-data |
Malicious release: Malicious code in cross-stitch (npm) GHSA-9ffp-9935-xjqq, MAL-2026-3502 | Malicious | Not scored | 12 May, 2026 | npm cross-stitch |
Malicious release: Malicious code in @tanstack/solid-start-server (npm) GHSA-2gqf-jmq8-m7qw, MAL-2026-3486 | Malicious | Not scored | 12 May, 2026 | npm @tanstack/solid-start-server |
Malicious release: Malicious code in @tanstack/solid-start (npm) GHSA-8hxh-jf75-8g4x, MAL-2026-3484 | Malicious | Not scored | 12 May, 2026 | npm @tanstack/solid-start |
Malicious release: Malicious code in @tanstack/start-client-core (npm) GHSA-68cm-p79h-wv3p, MAL-2026-3487 | Malicious | Not scored | 12 May, 2026 | npm @tanstack/start-client-core |
Malicious release: Malicious code in @tanstack/start-fn-stubs (npm) GHSA-phm9-h72q-2rv5, MAL-2026-3488 | Malicious | Not scored | 12 May, 2026 | npm @tanstack/start-fn-stubs |
Malicious release: Malicious code in @tanstack/start-plugin-core (npm) GHSA-q8qg-3r28-j492, MAL-2026-3489 | Malicious | Not scored | 12 May, 2026 | npm @tanstack/start-plugin-core |
Malicious release: Malicious code in @tanstack/start-server-core (npm) GHSA-gg66-jfg8-rcgq, MAL-2026-3490 | Malicious | Not scored | 12 May, 2026 | npm @tanstack/start-server-core |
Malicious release: Malicious code in @tanstack/start-static-server-functions (npm) GHSA-r9g7-9xhm-p5qp, MAL-2026-3491 | Malicious | Not scored | 12 May, 2026 | npm @tanstack/start-static-server-functions |
Malicious release: Malicious code in @tanstack/start-storage-context (npm) GHSA-66j2-5c8h-j3f7, MAL-2026-3492 | Malicious | Not scored | 12 May, 2026 | npm @tanstack/start-storage-context |
Malicious release: Malicious code in @tanstack/valibot-adapter (npm) GHSA-wvhh-9pj7-jw99, MAL-2026-3493 | Malicious | Not scored | 12 May, 2026 | npm @tanstack/valibot-adapter |
Malicious release: Malicious code in @tanstack/virtual-file-routes (npm) GHSA-w9mx-wqhv-4cvw, MAL-2026-3494 | Malicious | Not scored | 12 May, 2026 | npm @tanstack/virtual-file-routes |
Malicious release: Malicious code in @tanstack/vue-router-devtools (npm) GHSA-h7cj-xw74-w7h7, MAL-2026-3496 | Malicious | Not scored | 12 May, 2026 | npm @tanstack/vue-router-devtools |
Malicious release: Malicious code in @tanstack/vue-router-ssr-query (npm) GHSA-8rxr-9xrf-66wv, MAL-2026-3497 | Malicious | Not scored | 11 May, 2026 | npm @tanstack/vue-router-ssr-query |
Malicious release: Malicious code in @tanstack/router-plugin (npm) GHSA-wp6c-87p2-r5xw, MAL-2026-3477 | Malicious | Not scored | 11 May, 2026 | npm @tanstack/router-plugin |
Malicious release: Malicious code in @tanstack/vue-router (npm) GHSA-p6r2-524x-2vh3, MAL-2026-3495 | Malicious | Not scored | 11 May, 2026 | npm @tanstack/vue-router |
Malicious release: Malicious code in @tanstack/router-generator (npm) GHSA-4fcj-3grh-9fhv, MAL-2026-3476 | Malicious | Not scored | 11 May, 2026 | npm @tanstack/router-generator |
Malicious release: Malicious code in @tanstack/vue-start-server (npm) GHSA-fq44-7p43-9w49, MAL-2026-3500 | Malicious | Not scored | 11 May, 2026 | npm @tanstack/vue-start-server |
Malicious release: Malicious code in @tanstack/router-devtools (npm) GHSA-fc8c-vpgv-4wqg, MAL-2026-3474 | Malicious | Not scored | 11 May, 2026 | npm @tanstack/router-devtools |
Malicious release: Malicious code in @tanstack/vue-start (npm) GHSA-q3gx-rxh4-gv34, MAL-2026-3498 | Malicious | Not scored | 11 May, 2026 | npm @tanstack/vue-start |
Malicious release: Malicious code in @tanstack/zod-adapter (npm) GHSA-xj4p-7xwr-q9jj, MAL-2026-3501 | Malicious | Not scored | 11 May, 2026 | npm @tanstack/zod-adapter |
Malicious release: Malicious code in @tanstack/router-devtools-core (npm) GHSA-8jwm-h66c-fj6r, MAL-2026-3475 | Malicious | Not scored | 11 May, 2026 | npm @tanstack/router-devtools-core |
Malicious release: Malicious code in @tanstack/router-core (npm) GHSA-r8f9-7pfq-w872, MAL-2026-3473 | Malicious | Not scored | 11 May, 2026 | npm @tanstack/router-core |
Malicious release: Malicious code in @tanstack/router-cli (npm) GHSA-7xj7-65hc-69fc, MAL-2026-3472 | Malicious | Not scored | 11 May, 2026 | npm @tanstack/router-cli |
Malicious release: Malicious code in @tanstack/react-start (npm) GHSA-7cm2-482j-9rxq, MAL-2026-3468 | Malicious | Not scored | 11 May, 2026 | npm @tanstack/react-start |
Malicious release: Malicious code in @tanstack/react-start-server (npm) GHSA-xf53-jqmx-h45h, MAL-2026-3471 | Malicious | Not scored | 11 May, 2026 | npm @tanstack/react-start-server |
Malicious release: Malicious code in @tanstack/react-start-rsc (npm) GHSA-hv5h-gqr4-76v3, MAL-2026-3470 | Malicious | Not scored | 11 May, 2026 | npm @tanstack/react-start-rsc |
Malicious release: Malicious code in @tanstack/react-start-client (npm) GHSA-8j42-6cpx-3c7g, MAL-2026-3469 | Malicious | Not scored | 11 May, 2026 | npm @tanstack/react-start-client |
Malicious release: Malicious code in @tanstack/react-router (npm) GHSA-5q7g-gw3w-r3rh, MAL-2026-3465 | Malicious | Not scored | 11 May, 2026 | npm @tanstack/react-router |
Malicious release: Malicious code in @tanstack/react-router-ssr-query (npm) GHSA-q9q3-jp8x-cq8h, MAL-2026-3467 | Malicious | Not scored | 11 May, 2026 | npm @tanstack/react-router-ssr-query |
Malicious release: Malicious code in @tanstack/react-router-devtools (npm) GHSA-qqw3-95q8-m7g4, MAL-2026-3466 | Malicious | Not scored | 11 May, 2026 | npm @tanstack/react-router-devtools |
Malicious release: Malicious code in @tanstack/nitro-v2-vite-plugin (npm) GHSA-qj9f-x9rw-w5v3, MAL-2026-3464 | Malicious | Not scored | 11 May, 2026 | npm @tanstack/nitro-v2-vite-plugin |
Malicious release: Malicious code in @tanstack/history (npm) GHSA-rmmr-r34h-pfm5, MAL-2026-3463 | Malicious | Not scored | 11 May, 2026 | npm @tanstack/history |
Malicious release: Malicious code in @tanstack/eslint-plugin-start (npm) GHSA-8hwj-wqhq-3xw2, MAL-2026-3462 | Malicious | Not scored | 11 May, 2026 | npm @tanstack/eslint-plugin-start |
Malicious release: Malicious code in @tanstack/eslint-plugin-router (npm) GHSA-4q7x-8jvq-jpfv, MAL-2026-3461 | Malicious | Not scored | 11 May, 2026 | npm @tanstack/eslint-plugin-router |
Malicious release: Malicious code in @tanstack/arktype-adapter (npm) GHSA-5v49-5jh3-j7wg, MAL-2026-3460 | Malicious | Not scored | 11 May, 2026 | npm @tanstack/arktype-adapter |
Malicious release: Malicious code in @mistralai/mistralai (npm) GHSA-3q49-cfcf-g5fm, MAL-2026-3432 | Malicious | Not scored | 11 May, 2026 | npm @mistralai/mistralai |
Malicious release: Malicious code in apkeep (PyPI) MAL-2026-3431 | Malicious | Not scored | 11 May, 2026 | PyPI apkeep |
Malicious release: Malicious code in cplace-bmw-emt-mvp (npm) MAL-2026-3430 | Malicious | Not scored | 11 May, 2026 | npm cplace-bmw-emt-mvp |
Malicious release: Malicious code in openai-spellchecker (PyPI) MAL-2026-3429 | Malicious | Not scored | 11 May, 2026 | PyPI openai-spellchecker |
Malicious release: Malicious code in crypto-javascri (npm) MAL-2026-3508 | Malicious | Not scored | 11 May, 2026 | npm crypto-javascri |
Malicious release: Malicious code in @mimecast-ui/charts (npm) MAL-2026-3506 | Malicious | Not scored | 11 May, 2026 | npm @mimecast-ui/charts |
Malicious release: Malicious code in @mimecast-ui/components (npm) MAL-2026-3507 | Malicious | Not scored | 11 May, 2026 | npm @mimecast-ui/components |