Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @tanstack/start-plugin-core (npm) GHSA-q8qg-3r28-j492, MAL-2026-3489 | Malicious | Not scored | 12 May, 2026 | npm @tanstack/start-plugin-core |
Malicious release: Malicious code in @tanstack/start-server-core (npm) GHSA-gg66-jfg8-rcgq, MAL-2026-3490 | Malicious | Not scored | 12 May, 2026 | npm @tanstack/start-server-core |
Malicious release: Malicious code in @tanstack/start-static-server-functions (npm) GHSA-r9g7-9xhm-p5qp, MAL-2026-3491 | Malicious | Not scored | 12 May, 2026 | npm @tanstack/start-static-server-functions |
Malicious release: Malicious code in @tanstack/start-storage-context (npm) GHSA-66j2-5c8h-j3f7, MAL-2026-3492 | Malicious | Not scored | 12 May, 2026 | npm @tanstack/start-storage-context |
Malicious release: Malicious code in @tanstack/valibot-adapter (npm) GHSA-wvhh-9pj7-jw99, MAL-2026-3493 | Malicious | Not scored | 12 May, 2026 | npm @tanstack/valibot-adapter |
Malicious release: Malicious code in @tanstack/virtual-file-routes (npm) GHSA-w9mx-wqhv-4cvw, MAL-2026-3494 | Malicious | Not scored | 12 May, 2026 | npm @tanstack/virtual-file-routes |
Malicious release: Malicious code in @tanstack/vue-router-devtools (npm) GHSA-h7cj-xw74-w7h7, MAL-2026-3496 | Malicious | Not scored | 12 May, 2026 | npm @tanstack/vue-router-devtools |
Malicious release: Malicious code in @tanstack/vue-router-ssr-query (npm) GHSA-8rxr-9xrf-66wv, MAL-2026-3497 | Malicious | Not scored | 11 May, 2026 | npm @tanstack/vue-router-ssr-query |
Malicious release: Malicious code in @tanstack/router-plugin (npm) GHSA-wp6c-87p2-r5xw, MAL-2026-3477 | Malicious | Not scored | 11 May, 2026 | npm @tanstack/router-plugin |
Malicious release: Malicious code in @tanstack/vue-router (npm) GHSA-p6r2-524x-2vh3, MAL-2026-3495 | Malicious | Not scored | 11 May, 2026 | npm @tanstack/vue-router |
Malicious release: Malicious code in @tanstack/router-generator (npm) GHSA-4fcj-3grh-9fhv, MAL-2026-3476 | Malicious | Not scored | 11 May, 2026 | npm @tanstack/router-generator |
Malicious release: Malicious code in @tanstack/vue-start-server (npm) GHSA-fq44-7p43-9w49, MAL-2026-3500 | Malicious | Not scored | 11 May, 2026 | npm @tanstack/vue-start-server |
Malicious release: Malicious code in @tanstack/router-devtools (npm) GHSA-fc8c-vpgv-4wqg, MAL-2026-3474 | Malicious | Not scored | 11 May, 2026 | npm @tanstack/router-devtools |
Malicious release: Malicious code in @tanstack/vue-start (npm) GHSA-q3gx-rxh4-gv34, MAL-2026-3498 | Malicious | Not scored | 11 May, 2026 | npm @tanstack/vue-start |
Malicious release: Malicious code in @tanstack/zod-adapter (npm) GHSA-xj4p-7xwr-q9jj, MAL-2026-3501 | Malicious | Not scored | 11 May, 2026 | npm @tanstack/zod-adapter |
Malicious release: Malicious code in @tanstack/router-devtools-core (npm) GHSA-8jwm-h66c-fj6r, MAL-2026-3475 | Malicious | Not scored | 11 May, 2026 | npm @tanstack/router-devtools-core |
Malicious release: Malicious code in @tanstack/router-core (npm) GHSA-r8f9-7pfq-w872, MAL-2026-3473 | Malicious | Not scored | 11 May, 2026 | npm @tanstack/router-core |
Malicious release: Malicious code in @tanstack/router-cli (npm) GHSA-7xj7-65hc-69fc, MAL-2026-3472 | Malicious | Not scored | 11 May, 2026 | npm @tanstack/router-cli |
Malicious release: Malicious code in @tanstack/react-start (npm) GHSA-7cm2-482j-9rxq, MAL-2026-3468 | Malicious | Not scored | 11 May, 2026 | npm @tanstack/react-start |
Malicious release: Malicious code in @tanstack/react-start-server (npm) GHSA-xf53-jqmx-h45h, MAL-2026-3471 | Malicious | Not scored | 11 May, 2026 | npm @tanstack/react-start-server |
Malicious release: Malicious code in @tanstack/react-start-rsc (npm) GHSA-hv5h-gqr4-76v3, MAL-2026-3470 | Malicious | Not scored | 11 May, 2026 | npm @tanstack/react-start-rsc |
Malicious release: Malicious code in @tanstack/react-start-client (npm) GHSA-8j42-6cpx-3c7g, MAL-2026-3469 | Malicious | Not scored | 11 May, 2026 | npm @tanstack/react-start-client |
Malicious release: Malicious code in @tanstack/react-router (npm) GHSA-5q7g-gw3w-r3rh, MAL-2026-3465 | Malicious | Not scored | 11 May, 2026 | npm @tanstack/react-router |
Malicious release: Malicious code in @tanstack/react-router-ssr-query (npm) GHSA-q9q3-jp8x-cq8h, MAL-2026-3467 | Malicious | Not scored | 11 May, 2026 | npm @tanstack/react-router-ssr-query |
Malicious release: Malicious code in @tanstack/react-router-devtools (npm) GHSA-qqw3-95q8-m7g4, MAL-2026-3466 | Malicious | Not scored | 11 May, 2026 | npm @tanstack/react-router-devtools |
Malicious release: Malicious code in @tanstack/nitro-v2-vite-plugin (npm) GHSA-qj9f-x9rw-w5v3, MAL-2026-3464 | Malicious | Not scored | 11 May, 2026 | npm @tanstack/nitro-v2-vite-plugin |
Malicious release: Malicious code in @tanstack/history (npm) GHSA-rmmr-r34h-pfm5, MAL-2026-3463 | Malicious | Not scored | 11 May, 2026 | npm @tanstack/history |
Malicious release: Malicious code in @tanstack/eslint-plugin-start (npm) GHSA-8hwj-wqhq-3xw2, MAL-2026-3462 | Malicious | Not scored | 11 May, 2026 | npm @tanstack/eslint-plugin-start |
Malicious release: Malicious code in @tanstack/eslint-plugin-router (npm) GHSA-4q7x-8jvq-jpfv, MAL-2026-3461 | Malicious | Not scored | 11 May, 2026 | npm @tanstack/eslint-plugin-router |
Malicious release: Malicious code in @tanstack/arktype-adapter (npm) GHSA-5v49-5jh3-j7wg, MAL-2026-3460 | Malicious | Not scored | 11 May, 2026 | npm @tanstack/arktype-adapter |
Malicious release: Malicious code in @mistralai/mistralai (npm) GHSA-3q49-cfcf-g5fm, MAL-2026-3432 | Malicious | Not scored | 11 May, 2026 | npm @mistralai/mistralai |
Malicious release: Malicious code in apkeep (PyPI) MAL-2026-3431 | Malicious | Not scored | 11 May, 2026 | PyPI apkeep |
Malicious release: Malicious code in cplace-bmw-emt-mvp (npm) MAL-2026-3430 | Malicious | Not scored | 11 May, 2026 | npm cplace-bmw-emt-mvp |
Malicious release: Malicious code in openai-spellchecker (PyPI) MAL-2026-3429 | Malicious | Not scored | 11 May, 2026 | PyPI openai-spellchecker |
Malicious release: Malicious code in crypto-javascri (npm) MAL-2026-3508 | Malicious | Not scored | 11 May, 2026 | npm crypto-javascri |
Malicious release: Malicious code in @mimecast-ui/charts (npm) MAL-2026-3506 | Malicious | Not scored | 11 May, 2026 | npm @mimecast-ui/charts |
Malicious release: Malicious code in @mimecast-ui/components (npm) MAL-2026-3507 | Malicious | Not scored | 11 May, 2026 | npm @mimecast-ui/components |
Malicious release: Malicious code in @cplace-workflow-fe/cf-workflow (npm) GHSA-fmm7-x566-j93x, MAL-2026-3427 | Malicious | Not scored | 11 May, 2026 | npm @cplace-workflow-fe/cf-workflow |
Malicious release: Malicious code in xxx-bale (PyPI) MAL-2026-3428 | Malicious | Not scored | 11 May, 2026 | PyPI xxx-bale |
Malicious release: Malicious code in mpkg123 (PyPI) MAL-2026-3426 | Malicious | Not scored | 11 May, 2026 | PyPI mpkg123 |
Malicious release: Malicious code in xxoo-bale (PyPI) MAL-2026-3425 | Malicious | Not scored | 11 May, 2026 | PyPI xxoo-bale |
Malicious release: Malicious code in byvendors (npm) MAL-2026-3423 | Malicious | Not scored | 11 May, 2026 | npm byvendors |
Malicious release: Malicious code in dlocal-cli (PyPI) MAL-2026-3424 | Malicious | Not scored | 11 May, 2026 | PyPI dlocal-cli |
Malicious release: Malicious code in pp-react-v5 (npm) MAL-2026-3509 | Malicious | Not scored | 11 May, 2026 | npm pp-react-v5 |
Malicious release: Malicious code in briantreehttp (npm) MAL-2026-3639 | Malicious | Not scored | 11 May, 2026 | npm briantreehttp |
Malicious release: Malicious code in ac-sasskit (npm) MAL-2026-3415 | Malicious | Not scored | 10 May, 2026 | npm ac-sasskit |
Malicious release: Malicious code in django-b64-img (PyPI) MAL-2026-3413 | Malicious | Not scored | 10 May, 2026 | PyPI django-b64-img |
Malicious release: Malicious code in rsflows-pexml (npm) GHSA-m2qp-j4c5-7m6m, MAL-2026-3422 | Malicious | Not scored | 10 May, 2026 | npm rsflows-pexml |
Malicious release: Malicious code in noon-contracts (npm) GHSA-qj9j-8fcr-pjq2, MAL-2026-3420 | Malicious | Not scored | 10 May, 2026 | npm noon-contracts |
Malicious release: Malicious code in post-purchase-bundler (npm) MAL-2026-3412 | Malicious | Not scored | 10 May, 2026 | npm post-purchase-bundler |