Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @fuego-tools/analytics (npm) MAL-2026-2713 | Malicious | Not scored | 16 Apr, 2026 | npm @fuego-tools/analytics |
Malicious release: Malicious code in @evoja-web/redaction (npm) MAL-2026-2712 | Malicious | Not scored | 16 Apr, 2026 | npm @evoja-web/redaction |
Malicious release: Malicious code in @evoja-web/react-login (npm) MAL-2026-2711 | Malicious | Not scored | 16 Apr, 2026 | npm @evoja-web/react-login |
Malicious release: Malicious code in @evoja-web/create-react-project (npm) MAL-2026-2710 | Malicious | Not scored | 16 Apr, 2026 | npm @evoja-web/create-react-project |
Malicious release: Malicious code in @appleseed-apple/ac-sass-kit (npm) MAL-2026-2709 | Malicious | Not scored | 16 Apr, 2026 | npm @appleseed-apple/ac-sass-kit |
Malicious release: Malicious code in @3stripes/toolkit (npm) GHSA-pfgm-5fhw-w44m, MAL-2026-2708 | Malicious | Not scored | 16 Apr, 2026 | npm @3stripes/toolkit |
Malicious release: Malicious code in @3stripes/shared (npm) GHSA-wq4q-g6ff-rpgf, MAL-2026-2707 | Malicious | Not scored | 16 Apr, 2026 | npm @3stripes/shared |
Malicious release: Malicious code in @3stripes/sdk (npm) GHSA-37c3-3hx2-jvj5, MAL-2026-2706 | Malicious | Not scored | 16 Apr, 2026 | npm @3stripes/sdk |
Malicious release: Malicious code in @3stripes/config (npm) GHSA-53jj-98mm-ggjc, MAL-2026-2704 | Malicious | Not scored | 16 Apr, 2026 | npm @3stripes/config |
Malicious release: Malicious code in @3stripes/core (npm) GHSA-jqxm-c3m7-98wm, MAL-2026-2705 | Malicious | Not scored | 16 Apr, 2026 | npm @3stripes/core |
Malicious release: Malicious code in @3stripes/components (npm) GHSA-7rxq-pj4x-c3gv, MAL-2026-2703 | Malicious | Not scored | 16 Apr, 2026 | npm @3stripes/components |
Malicious release: Malicious code in robase-api (PyPI) MAL-2026-2699 | Malicious | Not scored | 16 Apr, 2026 | PyPI robase-api |
Malicious release: Malicious code in nj-logger (npm) GHSA-6q28-3q3p-8x7c, MAL-2026-2907 | Malicious | Not scored | 16 Apr, 2026 | npm nj-logger |
Malicious release: Malicious code in pretty-logger-js (npm) GHSA-qfx3-7369-9f9v, MAL-2026-2908 | Malicious | Not scored | 16 Apr, 2026 | npm pretty-logger-js |
Malicious release: Malicious code in vite-plugin-compress-plus (npm) MAL-2026-2913 | Malicious | Not scored | 16 Apr, 2026 | npm vite-plugin-compress-plus |
Malicious release: Malicious code in terminal-formatter (npm) MAL-2026-2911 | Malicious | Not scored | 16 Apr, 2026 | npm terminal-formatter |
Malicious release: Malicious code in tailwind-typography-cssstyle (npm) GHSA-p4c4-cvj7-95pp, MAL-2026-2909 | Malicious | Not scored | 15 Apr, 2026 | npm tailwind-typography-cssstyle |
Malicious release: Malicious code in tailwindthml-flips (npm) GHSA-wqqm-f8q9-pgmm, MAL-2026-2910 | Malicious | Not scored | 15 Apr, 2026 | npm tailwindthml-flips |
Malicious release: Malicious code in trgrip (npm) GHSA-fw89-fphx-4q5r, MAL-2026-2912 | Malicious | Not scored | 15 Apr, 2026 | npm trgrip |
Malicious release: Malicious code in simple-auth-basic (npm) GHSA-4v3c-c5pj-m2qq, MAL-2026-2905 | Malicious | Not scored | 15 Apr, 2026 | npm simple-auth-basic |
Malicious release: Malicious code in swplayer-react-sl (npm) GHSA-959p-q4g9-cc8r, MAL-2026-2906 | Malicious | Not scored | 15 Apr, 2026 | npm swplayer-react-sl |
Malicious release: Malicious code in chai-str (npm) GHSA-286p-r2qw-c6p5, MAL-2026-2898 | Malicious | Not scored | 15 Apr, 2026 | npm chai-str |
Malicious release: Malicious code in chai-as-adapter (npm) GHSA-38vm-pgm6-6g7p, MAL-2026-2885 | Malicious | Not scored | 15 Apr, 2026 | npm chai-as-adapter |
Malicious release: Malicious code in chai-as-type (npm) GHSA-38w3-8j54-936j, MAL-2026-2740 | Malicious | Not scored | 15 Apr, 2026 | npm chai-as-type |
Malicious release: Malicious code in chai-as-mobj (npm) GHSA-3q98-w67h-r2cr, MAL-2026-2893 | Malicious | Not scored | 15 Apr, 2026 | npm chai-as-mobj |
Malicious release: Malicious code in chai-as-inserted (npm) GHSA-472w-9h7g-j276, MAL-2026-2892 | Malicious | Not scored | 15 Apr, 2026 | npm chai-as-inserted |
Malicious release: Malicious code in chai-as-encrypted (npm) GHSA-5m93-37pp-5rc3, MAL-2026-2888 | Malicious | Not scored | 15 Apr, 2026 | npm chai-as-encrypted |
Malicious release: Malicious code in chai-as-stream (npm) GHSA-6xjm-3c84-552p, MAL-2026-2896 | Malicious | Not scored | 15 Apr, 2026 | npm chai-as-stream |
Malicious release: Malicious code in chai-as-evm (npm) GHSA-826h-2vvx-vf77, MAL-2026-2889 | Malicious | Not scored | 15 Apr, 2026 | npm chai-as-evm |
Malicious release: Malicious code in trackora-chain (npm) GHSA-874r-5jxm-vm42, MAL-2026-2903 | Malicious | Not scored | 15 Apr, 2026 | npm trackora-chain |
Malicious release: Malicious code in chai-as-chain-v2 (npm) GHSA-89j2-wcf8-hqm3, MAL-2026-2886 | Malicious | Not scored | 15 Apr, 2026 | npm chai-as-chain-v2 |
Malicious release: Malicious code in trackora-node (npm) GHSA-98cf-4fx3-32vx, MAL-2026-2904 | Malicious | Not scored | 15 Apr, 2026 | npm trackora-node |
Malicious release: Malicious code in chai-beta (npm) GHSA-c6w2-3qw2-g5fm, MAL-2026-2897 | Malicious | Not scored | 15 Apr, 2026 | npm chai-beta |
Malicious release: Malicious code in env_express (npm) GHSA-gw3g-c463-2jw5, MAL-2026-2901 | Malicious | Not scored | 15 Apr, 2026 | npm env_express |
Malicious release: Malicious code in chai-as-elevated (npm) GHSA-p5jq-3963-9qmx, MAL-2026-2887 | Malicious | Not scored | 15 Apr, 2026 | npm chai-as-elevated |
Malicious release: Malicious code in lockedin-chai-chain (npm) GHSA-x4j5-4v2p-qc2g, MAL-2026-2902 | Malicious | Not scored | 15 Apr, 2026 | npm lockedin-chai-chain |
Malicious release: Malicious code in chai-use-chains (npm) GHSA-x74q-vqg8-cc8f, MAL-2026-2899 | Malicious | Not scored | 15 Apr, 2026 | npm chai-use-chains |
Malicious release: Malicious code in chai-as-nobj (npm) MAL-2026-2894 | Malicious | Not scored | 15 Apr, 2026 | npm chai-as-nobj |
Malicious release: Malicious code in dotenv-pack (npm) MAL-2026-2900 | Malicious | Not scored | 15 Apr, 2026 | npm dotenv-pack |
Malicious release: Malicious code in ccxt-telemetry (PyPI) MAL-2026-2697 | Malicious | Not scored | 15 Apr, 2026 | PyPI ccxt-telemetry |
Malicious release: Malicious code in kyleip (PyPI) MAL-2026-2698 | Malicious | Not scored | 15 Apr, 2026 | PyPI kyleip |
Malicious release: Malicious code in forge-jsx (npm) GHSA-6j9q-8g4r-fm8q, MAL-2026-2884 | Malicious | Not scored | 15 Apr, 2026 | npm forge-jsx |
Malicious release: Malicious code in bfx-hf-strategy-perf (npm) MAL-2026-2696 | Malicious | Not scored | 15 Apr, 2026 | npm bfx-hf-strategy-perf |
Malicious release: Malicious code in cpu-optimizers2-33 (PyPI) MAL-2026-2695 | Malicious | Not scored | 15 Apr, 2026 | PyPI cpu-optimizers2-33 |
Malicious release: Malicious code in cpu-optimizers (PyPI) MAL-2026-2694 | Malicious | Not scored | 15 Apr, 2026 | PyPI cpu-optimizers |
Malicious release: Malicious code in vs-supplier-portal-web (npm) GHSA-c7cf-pp98-5r8p, MAL-2026-2693 | Malicious | Not scored | 15 Apr, 2026 | npm vs-supplier-portal-web |
Malicious release: Malicious code in fusion-events (npm) GHSA-qg2w-933f-v9hx, MAL-2026-2692 | Malicious | Not scored | 15 Apr, 2026 | npm fusion-events |
Malicious release: Malicious code in base-counter-web (npm) GHSA-v6g6-6wv3-vv4r, MAL-2026-2691 | Malicious | Not scored | 15 Apr, 2026 | npm base-counter-web |
Malicious release: Malicious code in @pnc-cib/cib-core-lib (npm) GHSA-3f99-p7c4-qvhm, MAL-2026-2688 | Malicious | Not scored | 15 Apr, 2026 | npm @pnc-cib/cib-core-lib |
Malicious release: Malicious code in @pnc-ref/harmony-core-v18 (npm) GHSA-886p-c4rr-2269, MAL-2026-2689 | Malicious | Not scored | 15 Apr, 2026 | npm @pnc-ref/harmony-core-v18 |