Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in strapi-plugin-nordica-sync (npm) GHSA-g52f-m5hj-mvq3, MAL-2026-2478 | Malicious | Not scored | 03 Apr, 2026 | npm strapi-plugin-nordica-sync |
Malicious release: Malicious code in strapi-plugin-nordica-lite (npm) GHSA-rp3x-p457-89c3, MAL-2026-2475 | Malicious | Not scored | 03 Apr, 2026 | npm strapi-plugin-nordica-lite |
Malicious release: Malicious code in strapi-plugin-nordica-tools (npm) GHSA-x5wx-4wfp-cgcr, MAL-2026-2479 | Malicious | Not scored | 03 Apr, 2026 | npm strapi-plugin-nordica-tools |
Malicious release: Malicious code in strapi-plugin-sitemap-gen (npm) GHSA-x667-8xrq-3578, MAL-2026-2484 | Malicious | Not scored | 03 Apr, 2026 | npm strapi-plugin-sitemap-gen |
Malicious release: Malicious code in strapi-plugin-locale (npm) GHSA-pgmf-vf3w-pvxj, MAL-2026-2468 | Malicious | Not scored | 03 Apr, 2026 | npm strapi-plugin-locale |
Malicious release: Malicious code in strapi-plugin-api (npm) GHSA-2m6v-vrwv-92cm, MAL-2026-2451 | Malicious | Not scored | 03 Apr, 2026 | npm strapi-plugin-api |
Malicious release: Malicious code in strapi-plugin-notify (npm) GHSA-mwh4-gjrj-9rgf, MAL-2026-2481 | Malicious | Not scored | 03 Apr, 2026 | npm strapi-plugin-notify |
Malicious release: Malicious code in strapi-plugin-form (npm) GHSA-pf45-rpxc-m3cv, MAL-2026-2462 | Malicious | Not scored | 03 Apr, 2026 | npm strapi-plugin-form |
Malicious release: Malicious code in strapi-plugin-seed (npm) GHSA-ghwm-gm8w-v7pg, MAL-2026-2482 | Malicious | Not scored | 03 Apr, 2026 | npm strapi-plugin-seed |
Malicious release: Malicious code in strapi-plugin-sync (npm) GHSA-cw8q-9647-qw7j, MAL-2026-2485 | Malicious | Not scored | 03 Apr, 2026 | npm strapi-plugin-sync |
Malicious release: Malicious code in strapi-plugin-health (npm) GHSA-8c3v-gc8j-xp6p, MAL-2026-2464 | Malicious | Not scored | 03 Apr, 2026 | npm strapi-plugin-health |
Malicious release: Malicious code in strapi-plugin-logger (npm) GHSA-3f9q-mrvh-3g67, MAL-2026-2469 | Malicious | Not scored | 03 Apr, 2026 | npm strapi-plugin-logger |
Malicious release: Malicious code in strapi-plugin-monitor (npm) GHSA-6rm2-h43c-2ffc, MAL-2026-2470 | Malicious | Not scored | 03 Apr, 2026 | npm strapi-plugin-monitor |
Malicious release: Malicious code in strapi-plugin-hooks (npm) GHSA-vgx9-mqvm-pp39, MAL-2026-2467 | Malicious | Not scored | 03 Apr, 2026 | npm strapi-plugin-hooks |
Malicious release: Malicious code in strapi-plugin-core (npm) GHSA-rhv5-72hc-mr25, MAL-2026-2456 | Malicious | Not scored | 03 Apr, 2026 | npm strapi-plugin-core |
Malicious release: Malicious code in strapi-plugin-database (npm) GHSA-443x-5qwf-wjj8, MAL-2026-2458 | Malicious | Not scored | 03 Apr, 2026 | npm strapi-plugin-database |
Malicious release: Malicious code in strapi-plugin-server (npm) MAL-2026-2483 | Malicious | Not scored | 03 Apr, 2026 | npm strapi-plugin-server |
Malicious release: Malicious code in strapi-plugin-config (npm) GHSA-vwr5-7896-9xg9, MAL-2026-2454 | Malicious | Not scored | 03 Apr, 2026 | npm strapi-plugin-config |
Malicious release: Malicious code in strapi-plugin-cron (npm) GHSA-78qv-6mwc-4mxh, MAL-2026-2457 | Malicious | Not scored | 03 Apr, 2026 | npm strapi-plugin-cron |
Malicious release: Malicious code in supervisors (PyPI) MAL-2026-2448 | Malicious | Not scored | 03 Apr, 2026 | PyPI supervisors |
Malicious release: Malicious code in strapi-plugin-events (npm) GHSA-5w8f-g8w2-jp22, MAL-2026-2460 | Malicious | Not scored | 03 Apr, 2026 | npm strapi-plugin-events |
Malicious release: Malicious code in mgc (npm) GHSA-8g9r-2x3j-gf2w, MAL-2026-2449 | Malicious | Not scored | 03 Apr, 2026 | npm mgc |
Malicious release: Malicious code in @corpweb-ui/wmkt-library (npm) GHSA-hq2v-f3x5-v66m, MAL-2026-2446 | Malicious | Not scored | 03 Apr, 2026 | npm @corpweb-ui/wmkt-library |
Malicious release: Malicious code in @toprank/partner (npm) MAL-2026-2447 | Malicious | Not scored | 03 Apr, 2026 | npm @toprank/partner |
Malicious release: Malicious code in pycolorlib3 (PyPI) MAL-2026-2433 | Malicious | Not scored | 02 Apr, 2026 | PyPI pycolorlib3 |
Malicious release: Malicious code in nwin64tls (PyPI) MAL-2026-2432 | Malicious | Not scored | 02 Apr, 2026 | PyPI nwin64tls |
Malicious release: Malicious code in nwin32tls (PyPI) MAL-2026-2431 | Malicious | Not scored | 02 Apr, 2026 | PyPI nwin32tls |
Malicious release: Malicious code in exprrrress (npm) MAL-2026-2443 | Malicious | Not scored | 02 Apr, 2026 | npm exprrrress |
Malicious release: Malicious code in expreeeess (npm) MAL-2026-2442 | Malicious | Not scored | 02 Apr, 2026 | npm expreeeess |
Malicious release: Malicious code in expeewas (npm) MAL-2026-2439 | Malicious | Not scored | 02 Apr, 2026 | npm expeewas |
Malicious release: Malicious code in pro-express (npm) MAL-2026-2445 | Malicious | Not scored | 02 Apr, 2026 | npm pro-express |
Malicious release: Malicious code in expirs (npm) MAL-2026-2441 | Malicious | Not scored | 02 Apr, 2026 | npm expirs |
Malicious release: Malicious code in exaprse (npm) MAL-2026-2437 | Malicious | Not scored | 02 Apr, 2026 | npm exaprse |
Malicious release: Malicious code in exszpe3szs (npm) MAL-2026-2444 | Malicious | Not scored | 02 Apr, 2026 | npm exszpe3szs |
Malicious release: Malicious code in 4xperss (npm) MAL-2026-2435 | Malicious | Not scored | 02 Apr, 2026 | npm 4xperss |
Malicious release: Malicious code in expeedsxs (npm) MAL-2026-2438 | Malicious | Not scored | 02 Apr, 2026 | npm expeedsxs |
Malicious release: Malicious code in 4exepreds (npm) MAL-2026-2434 | Malicious | Not scored | 02 Apr, 2026 | npm 4exepreds |
Malicious release: Malicious code in eixp4ressz (npm) MAL-2026-2436 | Malicious | Not scored | 02 Apr, 2026 | npm eixp4ressz |
Malicious release: Malicious code in experedzss (npm) MAL-2026-2440 | Malicious | Not scored | 02 Apr, 2026 | npm experedzss |
Malicious release: Malicious code in k8s-node-health (PyPI) MAL-2026-2430 | Malicious | Not scored | 02 Apr, 2026 | PyPI k8s-node-health |
Malicious release: Malicious code in bytefrontier-sdk (npm) GHSA-98jh-wxvx-v78v, MAL-2026-2424 | Malicious | Not scored | 02 Apr, 2026 | npm bytefrontier-sdk |
Malicious release: Malicious code in vv-ftend-api (npm) GHSA-xprf-4c78-3wc4, MAL-2026-2428 | Malicious | Not scored | 02 Apr, 2026 | npm vv-ftend-api |
Malicious release: Malicious code in bytefrontier-tracker (npm) GHSA-xhp5-mvx8-6qh4, MAL-2026-2425 | Malicious | Not scored | 02 Apr, 2026 | npm bytefrontier-tracker |
Malicious release: Malicious code in partner-tracker (npm) GHSA-49v3-3255-4m4h, MAL-2026-2426 | Malicious | Not scored | 02 Apr, 2026 | npm partner-tracker |
Malicious release: Malicious code in bytefrontier-partner (npm) GHSA-9f9x-w4j9-p76g, MAL-2026-2423 | Malicious | Not scored | 02 Apr, 2026 | npm bytefrontier-partner |
Malicious release: Malicious code in bytefrontier-api (npm) GHSA-v8qw-q287-ggh6, MAL-2026-2422 | Malicious | Not scored | 02 Apr, 2026 | npm bytefrontier-api |
Malicious release: Malicious code in partner-tracker-api (npm) GHSA-2fx9-x528-r27g, MAL-2026-2427 | Malicious | Not scored | 02 Apr, 2026 | npm partner-tracker-api |
Malicious release: Malicious code in vv-ftend-core (npm) GHSA-wv4c-3rwx-9p9x, MAL-2026-2429 | Malicious | Not scored | 02 Apr, 2026 | npm vv-ftend-core |
Malicious release: Malicious code in @mgcrae/pino-pretty-logger (npm) GHSA-vm8g-5xgx-c5jx, MAL-2026-2421 | Malicious | Not scored | 02 Apr, 2026 | npm @mgcrae/pino-pretty-logger |
Malicious release: Malicious code in express-session-js (npm) GHSA-2847-rm77-74wh, MAL-2026-2419 | Malicious | Not scored | 02 Apr, 2026 | npm express-session-js |