Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @pnc-ref/harmony-support-v18 (npm) GHSA-rwxj-hrxv-283c, MAL-2026-2690 | Malicious | Not scored | 15 Apr, 2026 | npm @pnc-ref/harmony-support-v18 |
Malicious release: Malicious code in com.baogong.app_push_permission (npm) GHSA-pxg6-jw7c-gfmg, MAL-2026-2687 | Malicious | Not scored | 15 Apr, 2026 | npm com.baogong.app_push_permission |
Malicious release: Malicious code in react-dom-19 (npm) MAL-2026-2685 | Malicious | Not scored | 15 Apr, 2026 | npm react-dom-19 |
Malicious release: Malicious code in neverinstallme (PyPI) MAL-2026-2686 | Malicious | Not scored | 15 Apr, 2026 | PyPI neverinstallme |
Malicious release: Malicious code in tensorzero-node (npm) GHSA-g3vv-q9j6-pw39, MAL-2026-2684 | Malicious | Not scored | 15 Apr, 2026 | npm tensorzero-node |
Malicious release: Malicious code in @athena-ui-components/axios (npm) MAL-2026-2683 | Malicious | Not scored | 15 Apr, 2026 | npm @athena-ui-components/axios |
Malicious release: Malicious code in @athena-ui-components/dashboard-widget (npm) MAL-2026-2681 | Malicious | Not scored | 15 Apr, 2026 | npm @athena-ui-components/dashboard-widget |
Malicious release: Malicious code in @athena-ui-components/deeplink (npm) MAL-2026-2682 | Malicious | Not scored | 15 Apr, 2026 | npm @athena-ui-components/deeplink |
Malicious release: Malicious code in @jesusvizcaino2021/com.baogong.app-push-permission (npm) MAL-2026-2916 | Malicious | Not scored | 15 Apr, 2026 | npm @jesusvizcaino2021/com.baogong.app-push-permission |
Malicious release: Malicious code in js-logger-pack (npm) GHSA-mj89-jrhm-qxhc, MAL-2026-2827 | Malicious | Not scored | 15 Apr, 2026 | npm js-logger-pack |
Malicious release: Malicious code in @veygo/component-library (npm) MAL-2026-2680 | Malicious | Not scored | 15 Apr, 2026 | npm @veygo/component-library |
Malicious release: Malicious code in chief-proxy-out (npm) GHSA-86cf-7fc5-p98v, MAL-2026-2674 | Malicious | Not scored | 15 Apr, 2026 | npm chief-proxy-out |
Malicious release: Malicious code in chief-documentation (npm) GHSA-8r2m-gvh8-jfqm, MAL-2026-2673 | Malicious | Not scored | 15 Apr, 2026 | npm chief-documentation |
Malicious release: Malicious code in moscova-plural-json-parser (npm) GHSA-gr87-65fp-9qwv, MAL-2026-2676 | Malicious | Not scored | 15 Apr, 2026 | npm moscova-plural-json-parser |
Malicious release: Malicious code in snitz-chief-cloud (npm) GHSA-mqcw-j566-9hqh, MAL-2026-2678 | Malicious | Not scored | 15 Apr, 2026 | npm snitz-chief-cloud |
Malicious release: Malicious code in pdf-linker (npm) GHSA-mwqh-c7j6-f7p2, MAL-2026-2677 | Malicious | Not scored | 15 Apr, 2026 | npm pdf-linker |
Malicious release: Malicious code in snitz-chief-cloud-config (npm) GHSA-vc4x-mvfp-p8c8, MAL-2026-2679 | Malicious | Not scored | 15 Apr, 2026 | npm snitz-chief-cloud-config |
Malicious release: Malicious code in mongoose-stamps (npm) GHSA-4cvv-673v-3gjj, MAL-2026-2675 | Malicious | Not scored | 15 Apr, 2026 | npm mongoose-stamps |
Malicious release: Malicious code in ahmed_salem_ph (npm) GHSA-cjwg-37rq-9xwf, MAL-2026-2672 | Malicious | Not scored | 15 Apr, 2026 | npm ahmed_salem_ph |
Malicious release: Malicious code in kryptex-os (PyPI) MAL-2026-2671 | Malicious | Not scored | 14 Apr, 2026 | PyPI kryptex-os |
Malicious release: Malicious code in 7miners (PyPI) MAL-2026-2670 | Malicious | Not scored | 14 Apr, 2026 | PyPI 7miners |
Malicious release: Malicious code in ant-mcp-proxy-for-test (PyPI) MAL-2026-2669 | Malicious | Not scored | 14 Apr, 2026 | PyPI ant-mcp-proxy-for-test |
Malicious release: Malicious code in pnpm-workspaces (npm) MAL-2026-2668 | Malicious | Not scored | 14 Apr, 2026 | npm pnpm-workspaces |
Malicious release: Malicious code in ckeditor5-minimap (npm) MAL-2026-2667 | Malicious | Not scored | 14 Apr, 2026 | npm ckeditor5-minimap |
Malicious release: Malicious code in moooo (PyPI) MAL-2026-2666 | Malicious | Not scored | 14 Apr, 2026 | PyPI moooo |
Malicious release: Malicious code in buildenv-telemetry (PyPI) MAL-2026-2664 | Malicious | Not scored | 14 Apr, 2026 | PyPI buildenv-telemetry |
Malicious release: Malicious code in hive-os-settings (PyPI) MAL-2026-2665 | Malicious | Not scored | 14 Apr, 2026 | PyPI hive-os-settings |
Malicious release: Malicious code in tether-wrk-base (npm) GHSA-wvh9-3hgj-7f22, MAL-2026-2663 | Malicious | Not scored | 14 Apr, 2026 | npm tether-wrk-base |
Malicious release: Malicious code in @automation-toolchain/f5-cloud-libs (npm) MAL-2026-2662 | Malicious | Not scored | 14 Apr, 2026 | npm @automation-toolchain/f5-cloud-libs |
Malicious release: Malicious code in ts-lint-builds (npm) GHSA-rhr9-fqxc-vwqq, MAL-2026-2883 | Malicious | Not scored | 14 Apr, 2026 | npm ts-lint-builds |
Malicious release: Malicious code in cjs-biginteger (npm) GHSA-65gr-98mv-9rj5, MAL-2026-2882 | Malicious | Not scored | 14 Apr, 2026 | npm cjs-biginteger |
Malicious release: Malicious code in bjs-lint-builders (npm) GHSA-cv9f-3jc4-hxhv, MAL-2026-2881 | Malicious | Not scored | 14 Apr, 2026 | npm bjs-lint-builders |
Malicious release: Malicious code in bjs-lint-builder (npm) GHSA-m374-prpv-rf26, MAL-2026-2880 | Malicious | Not scored | 14 Apr, 2026 | npm bjs-lint-builder |
Malicious release: Malicious code in bjs-biginteger (npm) GHSA-jjf3-wfhw-qhx4, MAL-2026-2879 | Malicious | Not scored | 14 Apr, 2026 | npm bjs-biginteger |
Malicious release: Malicious code in tailwindcss-style-typography (npm) GHSA-frf3-5rj5-86gh, MAL-2026-2658 | Malicious | Not scored | 14 Apr, 2026 | npm tailwindcss-style-typography |
Malicious release: Malicious code in tailwind-typ (npm) GHSA-6x9q-58gm-32xp, MAL-2026-2657 | Malicious | Not scored | 14 Apr, 2026 | npm tailwind-typ |
Malicious release: Malicious code in tailwind-stylecss-typography (npm) GHSA-mcwq-8vxc-g64c, MAL-2026-2656 | Malicious | Not scored | 14 Apr, 2026 | npm tailwind-stylecss-typography |
Malicious release: Malicious code in chai-as-refined (npm) GHSA-4jgh-4hh7-rpfj, MAL-2026-2641 | Malicious | Not scored | 14 Apr, 2026 | npm chai-as-refined |
Malicious release: Malicious code in node-unpnotifyserv (npm) GHSA-5vp6-xcq2-35fw, MAL-2026-2644 | Malicious | Not scored | 14 Apr, 2026 | npm node-unpnotifyserv |
Malicious release: Malicious code in ui-utils-udhay-alerts (npm) GHSA-w45r-3r6c-6755, MAL-2026-2659 | Malicious | Not scored | 14 Apr, 2026 | npm ui-utils-udhay-alerts |
Malicious release: Malicious code in okxglobal (npm) GHSA-633r-f3rq-76g4, MAL-2026-2649 | Malicious | Not scored | 14 Apr, 2026 | npm okxglobal |
Malicious release: Malicious code in okfe-serverless-conf (npm) GHSA-974m-p83h-567h, MAL-2026-2646 | Malicious | Not scored | 14 Apr, 2026 | npm okfe-serverless-conf |
Malicious release: Malicious code in chatbotloader (npm) GHSA-g7q7-rf3f-vw4h, MAL-2026-2642 | Malicious | Not scored | 14 Apr, 2026 | npm chatbotloader |
Malicious release: Malicious code in okx-nav (npm) GHSA-qgr4-v84c-p4g7, MAL-2026-2648 | Malicious | Not scored | 14 Apr, 2026 | npm okx-nav |
Malicious release: Malicious code in okassistant (npm) GHSA-vcqm-4m6v-428j, MAL-2026-2645 | Malicious | Not scored | 14 Apr, 2026 | npm okassistant |
Malicious release: Malicious code in okx-data (npm) GHSA-whfj-85gw-8h4c, MAL-2026-2647 | Malicious | Not scored | 14 Apr, 2026 | npm okx-data |
Malicious release: Malicious code in apmfe (npm) GHSA-ww7x-jqhv-gqqj, MAL-2026-2637 | Malicious | Not scored | 14 Apr, 2026 | npm apmfe |
Malicious release: Malicious code in billing-paywidget (npm) GHSA-3cww-22qr-fgwc, MAL-2026-2638 | Malicious | Not scored | 14 Apr, 2026 | npm billing-paywidget |
Malicious release: Malicious code in ms-affiliate-links (npm) GHSA-44p5-8q53-5vm5, MAL-2026-2643 | Malicious | Not scored | 14 Apr, 2026 | npm ms-affiliate-links |
Malicious release: Malicious code in onewin-landing (npm) GHSA-6xf2-88r3-x5gr, MAL-2026-2652 | Malicious | Not scored | 14 Apr, 2026 | npm onewin-landing |