Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in ghscan-pkgcheck-test-001 (npm) MAL-2026-2765 | Malicious | Not scored | 16 Apr, 2026 | npm ghscan-pkgcheck-test-001 |
Malicious release: Malicious code in gemini-cli-vscode-ide-companion (npm) MAL-2026-2764 | Malicious | Not scored | 16 Apr, 2026 | npm gemini-cli-vscode-ide-companion |
Malicious release: Malicious code in gemini-ai-checker (npm) MAL-2026-2763 | Malicious | Not scored | 16 Apr, 2026 | npm gemini-ai-checker |
Malicious release: Malicious code in farikku-util (npm) GHSA-98g7-3vh4-ww58, MAL-2026-2762 | Malicious | Not scored | 16 Apr, 2026 | npm farikku-util |
Malicious release: Malicious code in f0-fpti-tracking (npm) MAL-2026-2761 | Malicious | Not scored | 16 Apr, 2026 | npm f0-fpti-tracking |
Malicious release: Malicious code in f0-email-verification (npm) MAL-2026-2760 | Malicious | Not scored | 16 Apr, 2026 | npm f0-email-verification |
Malicious release: Malicious code in express-auth-basic (npm) MAL-2026-2759 | Malicious | Not scored | 16 Apr, 2026 | npm express-auth-basic |
Malicious release: Malicious code in estaspnet (npm) MAL-2026-2758 | Malicious | Not scored | 16 Apr, 2026 | npm estaspnet |
Malicious release: Malicious code in docai-sheets (npm) MAL-2026-2757 | Malicious | Not scored | 16 Apr, 2026 | npm docai-sheets |
Malicious release: Malicious code in digitallogger (npm) MAL-2026-2756 | Malicious | Not scored | 16 Apr, 2026 | npm digitallogger |
Malicious release: Malicious code in devops-debug-tool-ctf (npm) MAL-2026-2755 | Malicious | Not scored | 16 Apr, 2026 | npm devops-debug-tool-ctf |
Malicious release: Malicious code in deployer-kit (npm) MAL-2026-2754 | Malicious | Not scored | 16 Apr, 2026 | npm deployer-kit |
Malicious release: Malicious code in declarative-tracker (npm) MAL-2026-2753 | Malicious | Not scored | 16 Apr, 2026 | npm declarative-tracker |
Malicious release: Malicious code in country-specialization (npm) MAL-2026-2752 | Malicious | Not scored | 16 Apr, 2026 | npm country-specialization |
Malicious release: Malicious code in coremeshnode (npm) MAL-2026-2751 | Malicious | Not scored | 16 Apr, 2026 | npm coremeshnode |
Malicious release: Malicious code in coremesh (npm) MAL-2026-2750 | Malicious | Not scored | 16 Apr, 2026 | npm coremesh |
Malicious release: Malicious code in conversation-relay (npm) MAL-2026-2749 | Malicious | Not scored | 16 Apr, 2026 | npm conversation-relay |
Malicious release: Malicious code in collect-rangers (npm) MAL-2026-2748 | Malicious | Not scored | 16 Apr, 2026 | npm collect-rangers |
Malicious release: Malicious code in cloud-run-microservice-template (npm) MAL-2026-2747 | Malicious | Not scored | 16 Apr, 2026 | npm cloud-run-microservice-template |
Malicious release: Malicious code in chainlink-docs (npm) MAL-2026-2746 | Malicious | Not scored | 16 Apr, 2026 | npm chainlink-docs |
Malicious release: Malicious code in chain-syncora (npm) MAL-2026-2745 | Malicious | Not scored | 16 Apr, 2026 | npm chain-syncora |
Malicious release: Malicious code in chain-metrica (npm) MAL-2026-2744 | Malicious | Not scored | 16 Apr, 2026 | npm chain-metrica |
Malicious release: Malicious code in chai-use-chain (npm) GHSA-77gr-x9m6-cm8g, MAL-2026-2743 | Malicious | Not scored | 16 Apr, 2026 | npm chai-use-chain |
Malicious release: Malicious code in chai-extensions-extra (npm) MAL-2026-2742 | Malicious | Not scored | 16 Apr, 2026 | npm chai-extensions-extra |
Malicious release: Malicious code in chai-chain-coremesh (npm) MAL-2026-2741 | Malicious | Not scored | 16 Apr, 2026 | npm chai-chain-coremesh |
Malicious release: Malicious code in ccip-starter-kit-hardhat (npm) MAL-2026-2739 | Malicious | Not scored | 16 Apr, 2026 | npm ccip-starter-kit-hardhat |
Malicious release: Malicious code in cardreadermgmtserv (npm) MAL-2026-2738 | Malicious | Not scored | 16 Apr, 2026 | npm cardreadermgmtserv |
Malicious release: Malicious code in business-data (npm) MAL-2026-2737 | Malicious | Not scored | 16 Apr, 2026 | npm business-data |
Malicious release: Malicious code in buildkite-test-collector-vitest-example (npm) MAL-2026-2736 | Malicious | Not scored | 16 Apr, 2026 | npm buildkite-test-collector-vitest-example |
Malicious release: Malicious code in buildkite-test-collector-playwright-example (npm) MAL-2026-2735 | Malicious | Not scored | 16 Apr, 2026 | npm buildkite-test-collector-playwright-example |
Malicious release: Malicious code in buildkite-test-collector-mocha-example (npm) MAL-2026-2734 | Malicious | Not scored | 16 Apr, 2026 | npm buildkite-test-collector-mocha-example |
Malicious release: Malicious code in buildkite-test-collector-jest-example (npm) MAL-2026-2733 | Malicious | Not scored | 16 Apr, 2026 | npm buildkite-test-collector-jest-example |
Malicious release: Malicious code in buildkite-test-collector-jasmine-example (npm) MAL-2026-2732 | Malicious | Not scored | 16 Apr, 2026 | npm buildkite-test-collector-jasmine-example |
Malicious release: Malicious code in buildkite-test-collector-cypress-example (npm) MAL-2026-2731 | Malicious | Not scored | 16 Apr, 2026 | npm buildkite-test-collector-cypress-example |
Malicious release: Malicious code in browserstack-utils (npm) MAL-2026-2730 | Malicious | Not scored | 16 Apr, 2026 | npm browserstack-utils |
Malicious release: Malicious code in apl-github-test (npm) MAL-2026-2729 | Malicious | Not scored | 16 Apr, 2026 | npm apl-github-test |
Malicious release: Malicious code in apl-announcements (npm) MAL-2026-2728 | Malicious | Not scored | 16 Apr, 2026 | npm apl-announcements |
Malicious release: Malicious code in agent-starter (npm) MAL-2026-2727 | Malicious | Not scored | 16 Apr, 2026 | npm agent-starter |
Malicious release: Malicious code in agent-scheduler (npm) MAL-2026-2726 | Malicious | Not scored | 16 Apr, 2026 | npm agent-scheduler |
Malicious release: Malicious code in agent-framework-web (npm) MAL-2026-2725 | Malicious | Not scored | 16 Apr, 2026 | npm agent-framework-web |
Malicious release: Malicious code in agdebugger-frontend (npm) MAL-2026-2724 | Malicious | Not scored | 16 Apr, 2026 | npm agdebugger-frontend |
Malicious release: Malicious code in actions-label-commenter (npm) MAL-2026-2723 | Malicious | Not scored | 16 Apr, 2026 | npm actions-label-commenter |
Malicious release: Malicious code in action-setup-enos (npm) MAL-2026-2722 | Malicious | Not scored | 16 Apr, 2026 | npm action-setup-enos |
Malicious release: Malicious code in access-worker-test (npm) MAL-2026-2721 | Malicious | Not scored | 16 Apr, 2026 | npm access-worker-test |
Malicious release: Malicious code in aca-review-apps (npm) MAL-2026-2720 | Malicious | Not scored | 16 Apr, 2026 | npm aca-review-apps |
Malicious release: Malicious code in @youcanneverguessthisonereally/test-pkg (npm) MAL-2026-2719 | Malicious | Not scored | 16 Apr, 2026 | npm @youcanneverguessthisonereally/test-pkg |
Malicious release: Malicious code in @the-coca-cola-company/receipt-scanner-admin-lib (npm) MAL-2026-2718 | Malicious | Not scored | 16 Apr, 2026 | npm @the-coca-cola-company/receipt-scanner-admin-lib |
Malicious release: Malicious code in @tax-taxdev/tools-scripts (npm) MAL-2026-2717 | Malicious | Not scored | 16 Apr, 2026 | npm @tax-taxdev/tools-scripts |
Malicious release: Malicious code in @mesh-atoms/typography (npm) MAL-2026-2715 | Malicious | Not scored | 16 Apr, 2026 | npm @mesh-atoms/typography |
Malicious release: Malicious code in @gameforge/http-server (npm) MAL-2026-2714 | Malicious | Not scored | 16 Apr, 2026 | npm @gameforge/http-server |