Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @idkruan-10/dpd-depconf-probe (npm) GHSA-994q-v55m-r2mw, MAL-2026-16021 | Malicious | Not scored | 07 Sep, 2026 | npm @idkruan-10/dpd-depconf-probe |
Malicious release: Malicious code in op-ts-server-core (npm) GHSA-cj4c-268v-m597, MAL-2026-16034 | Malicious | Not scored | 07 Sep, 2026 | npm op-ts-server-core |
Malicious release: Malicious code in service-home (npm) GHSA-m2c9-2v7c-fxf9, MAL-2026-16039 | Malicious | Not scored | 07 Sep, 2026 | npm service-home |
Malicious release: Malicious code in redis-type-intel (npm) GHSA-v9rh-vg7p-gwqm, MAL-2026-16036 | Malicious | Not scored | 07 Sep, 2026 | npm redis-type-intel |
Malicious release: Malicious code in oscar-redis (npm) GHSA-c6m6-wr2f-6f63, MAL-2026-16035 | Malicious | Not scored | 07 Sep, 2026 | npm oscar-redis |
Malicious release: Malicious code in kiki-baileys (npm) GHSA-g8cr-3r7q-pcr6, MAL-2026-16033 | Malicious | Not scored | 07 Sep, 2026 | npm kiki-baileys |
Malicious release: Malicious code in bmc-i18n-extract-cli (npm) GHSA-327g-rcr8-hp3p, MAL-2026-16025 | Malicious | Not scored | 07 Sep, 2026 | npm bmc-i18n-extract-cli |
Malicious release: Malicious code in bmc-translate-utils (npm) GHSA-997w-vpm2-ww7x, MAL-2026-16026 | Malicious | Not scored | 07 Sep, 2026 | npm bmc-translate-utils |
Malicious release: Malicious code in blueai-cli (npm) GHSA-c2v5-8c2f-jj54, MAL-2026-16024 | Malicious | Not scored | 07 Sep, 2026 | npm blueai-cli |
Malicious release: Malicious code in feishu-docx-mcp (npm) GHSA-q5c6-p5q5-g3px, MAL-2026-16032 | Malicious | Not scored | 07 Sep, 2026 | npm feishu-docx-mcp |
Malicious release: Malicious code in scw-mobile (npm) GHSA-h9g8-rwcg-hpmh, MAL-2026-16038 | Malicious | Not scored | 07 Sep, 2026 | npm scw-mobile |
Malicious release: Malicious code in base-account-core (npm) GHSA-vgm8-2vf8-769j, MAL-2026-16022 | Malicious | Not scored | 07 Sep, 2026 | npm base-account-core |
Malicious release: Malicious code in cb-wallet-solana-provider (npm) GHSA-5cg4-38v4-j4vc, MAL-2026-16030 | Malicious | Not scored | 07 Sep, 2026 | npm cb-wallet-solana-provider |
Malicious release: Malicious code in cb-wallet-analytics (npm) GHSA-7944-c265-3ff7, MAL-2026-16027 | Malicious | Not scored | 07 Sep, 2026 | npm cb-wallet-analytics |
Malicious release: Malicious code in base-app-data (npm) GHSA-9hpg-rmwp-vg4p, MAL-2026-16023 | Malicious | Not scored | 07 Sep, 2026 | npm base-app-data |
Malicious release: Malicious code in cb-wallet-metadata (npm) GHSA-cxwc-958j-45g8, MAL-2026-16029 | Malicious | Not scored | 07 Sep, 2026 | npm cb-wallet-metadata |
Malicious release: Malicious code in scw-core (npm) GHSA-fv48-xvcx-h3qh, MAL-2026-16037 | Malicious | Not scored | 07 Sep, 2026 | npm scw-core |
Malicious release: Malicious code in cb-wallet-store (npm) GHSA-gw4f-3mgw-h64x, MAL-2026-16031 | Malicious | Not scored | 07 Sep, 2026 | npm cb-wallet-store |
Malicious release: Malicious code in cb-wallet-env (npm) GHSA-m477-pr6m-v2fp, MAL-2026-16028 | Malicious | Not scored | 07 Sep, 2026 | npm cb-wallet-env |
Malicious release: Malicious code in wallet-cds-web (npm) GHSA-qh9w-32r6-2qpw, MAL-2026-16040 | Malicious | Not scored | 07 Sep, 2026 | npm wallet-cds-web |
Malicious release: Malicious code in wallet-engine-signing (npm) GHSA-qw4m-ccr9-7r43, MAL-2026-16041 | Malicious | Not scored | 07 Sep, 2026 | npm wallet-engine-signing |
Malicious release: Malicious code in @caliperx2/components (npm) MAL-2026-16007 | Malicious | Not scored | 07 Sep, 2026 | npm @caliperx2/components |
Malicious release: Malicious code in b2b-frontend-external-library (npm) MAL-2026-16008 | Malicious | Not scored | 07 Sep, 2026 | npm b2b-frontend-external-library |
Malicious release: Malicious code in omni-channel-configurator-wireline-frontend (npm) MAL-2026-16009 | Malicious | Not scored | 07 Sep, 2026 | npm omni-channel-configurator-wireline-frontend |
Malicious release: Malicious code in oce-configurator-wireless-frontend (npm) MAL-2026-15940 | Malicious | Not scored | 06 Sep, 2026 | npm oce-configurator-wireless-frontend |
Malicious release: Malicious code in omni-channel-order-frontend (npm) MAL-2026-15942 | Malicious | Not scored | 06 Sep, 2026 | npm omni-channel-order-frontend |
Malicious release: Malicious code in ocfe-tv-subscription-center-web (npm) MAL-2026-15941 | Malicious | Not scored | 06 Sep, 2026 | npm ocfe-tv-subscription-center-web |
Malicious release: Malicious code in omni-channel-oid-frontend (npm) MAL-2026-15939 | Malicious | Not scored | 06 Sep, 2026 | npm omni-channel-oid-frontend |
Malicious release: Malicious code in agentrc-security-poc-policy (npm) MAL-2026-16005 | Malicious | Not scored | 06 Sep, 2026 | npm agentrc-security-poc-policy |
Malicious release: Malicious code in dac-tools (PyPI) MAL-2026-15938 | Malicious | Not scored | 06 Sep, 2026 | PyPI dac-tools |
Malicious release: Malicious code in vishal_312pkg (npm) MAL-2026-16006 | Malicious | Not scored | 06 Sep, 2026 | npm vishal_312pkg |
Malicious release: Malicious code in minecraftmodes (PyPI) MAL-2026-15937 | Malicious | Not scored | 06 Sep, 2026 | PyPI minecraftmodes |
Malicious release: Malicious code in @liuliang520500/sinataoke_cn_test (npm) GHSA-36jr-wqjh-q55x, MAL-2026-15961 | Malicious | Not scored | 06 Sep, 2026 | npm @liuliang520500/sinataoke_cn_test |
Malicious release: Malicious code in @liuliang520500/sinataoke_cn (npm) GHSA-jjx2-vpx2-qp32, MAL-2026-15960 | Malicious | Not scored | 06 Sep, 2026 | npm @liuliang520500/sinataoke_cn |
Malicious release: Malicious code in @liuliang520500/pdd-sdk (npm) GHSA-g9hc-xr9f-27g4, MAL-2026-15958 | Malicious | Not scored | 06 Sep, 2026 | npm @liuliang520500/pdd-sdk |
Malicious release: Malicious code in @liuliang520500/jd-sdk (npm) GHSA-j849-992g-rggr, MAL-2026-15957 | Malicious | Not scored | 06 Sep, 2026 | npm @liuliang520500/jd-sdk |
Malicious release: Malicious code in @liuliang520500/pdd-sdk-new (npm) GHSA-jp84-gqp2-j9qq, MAL-2026-15959 | Malicious | Not scored | 06 Sep, 2026 | npm @liuliang520500/pdd-sdk-new |
Malicious release: Malicious code in @liuliang520500/taobao-topclient (npm) GHSA-75r6-9fpm-rf6j, MAL-2026-15962 | Malicious | Not scored | 06 Sep, 2026 | npm @liuliang520500/taobao-topclient |
Malicious release: Malicious code in @pilllesss/yorn (npm) GHSA-rghh-4gfg-jvqc, MAL-2026-15963 | Malicious | Not scored | 06 Sep, 2026 | npm @pilllesss/yorn |
Malicious release: Malicious code in dcftunnel (npm) GHSA-4c2f-x64v-297x, MAL-2026-15975 | Malicious | Not scored | 06 Sep, 2026 | npm dcftunnel |
Malicious release: Malicious code in 1cattunnel (npm) GHSA-r35j-cv2x-mm7h, MAL-2026-15943 | Malicious | Not scored | 06 Sep, 2026 | npm 1cattunnel |
Malicious release: Malicious code in multicore-kit (npm) GHSA-q588-cfvg-8346, MAL-2026-15995 | Malicious | Not scored | 06 Sep, 2026 | npm multicore-kit |
Malicious release: Malicious code in date-fns-formatter (npm) GHSA-h258-m2gc-2p4q, MAL-2026-15974 | Malicious | Not scored | 06 Sep, 2026 | npm date-fns-formatter |
Malicious release: Malicious code in array-frames (npm) GHSA-24hx-4mc8-g9q7, MAL-2026-15969 | Malicious | Not scored | 06 Sep, 2026 | npm array-frames |
Malicious release: Malicious code in node-helper (npm) GHSA-2ggc-wmq2-3whp, MAL-2026-15997 | Malicious | Not scored | 06 Sep, 2026 | npm node-helper |
Malicious release: Malicious code in jwt-logger (npm) GHSA-rpqx-cp2g-55w5, MAL-2026-15991 | Malicious | Not scored | 05 Sep, 2026 | npm jwt-logger |
Malicious release: Malicious code in array-scala (npm) GHSA-rx3f-9hxc-773g, MAL-2026-15970 | Malicious | Not scored | 05 Sep, 2026 | npm array-scala |
Malicious release: Malicious code in trongridew (PyPI) MAL-2026-15936 | Malicious | Not scored | 05 Sep, 2026 | PyPI trongridew |
Malicious release: Malicious code in @domyjs/i18n (npm) GHSA-22jr-v88r-5cj6, MAL-2026-15951 | Malicious | Not scored | 05 Sep, 2026 | npm @domyjs/i18n |
Malicious release: Malicious code in @domyjs/reactive (npm) GHSA-3ggc-3pw2-c9v9, MAL-2026-15954 | Malicious | Not scored | 05 Sep, 2026 | npm @domyjs/reactive |