Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in chai-promised-plugin (npm) MAL-2026-1682 | Malicious | Not scored | 18 Mar, 2026 | npm chai-promised-plugin |
Malicious release: Malicious code in chai-promised-cli (npm) MAL-2026-1681 | Malicious | Not scored | 18 Mar, 2026 | npm chai-promised-cli |
Malicious release: Malicious code in chai-promised-await (npm) MAL-2026-1680 | Malicious | Not scored | 18 Mar, 2026 | npm chai-promised-await |
Malicious release: Malicious code in chai-promised-async (npm) MAL-2026-1679 | Malicious | Not scored | 18 Mar, 2026 | npm chai-promised-async |
Malicious release: Malicious code in chai-cli-async (npm) MAL-2026-1677 | Malicious | Not scored | 18 Mar, 2026 | npm chai-cli-async |
Malicious release: Malicious code in chai-conf (npm) MAL-2026-1678 | Malicious | Not scored | 18 Mar, 2026 | npm chai-conf |
Malicious release: Malicious code in chai-chai-chain-promised (npm) MAL-2026-1676 | Malicious | Not scored | 18 Mar, 2026 | npm chai-chai-chain-promised |
Malicious release: Malicious code in chai-await-promised (npm) MAL-2026-1675 | Malicious | Not scored | 18 Mar, 2026 | npm chai-await-promised |
Malicious release: Malicious code in chai-await-cli (npm) MAL-2026-1674 | Malicious | Not scored | 18 Mar, 2026 | npm chai-await-cli |
Malicious release: Malicious code in chai-await-chain (npm) MAL-2026-1673 | Malicious | Not scored | 18 Mar, 2026 | npm chai-await-chain |
Malicious release: Malicious code in chai-as-resolved (npm) MAL-2026-1671 | Malicious | Not scored | 18 Mar, 2026 | npm chai-as-resolved |
Malicious release: Malicious code in chai-as-sync (npm) MAL-2026-1672 | Malicious | Not scored | 18 Mar, 2026 | npm chai-as-sync |
Malicious release: Malicious code in chai-as-prop (npm) MAL-2026-1670 | Malicious | Not scored | 18 Mar, 2026 | npm chai-as-prop |
Malicious release: Malicious code in chai-as-prompt (npm) MAL-2026-1669 | Malicious | Not scored | 18 Mar, 2026 | npm chai-as-prompt |
Malicious release: Malicious code in chai-as-produced (npm) MAL-2026-1668 | Malicious | Not scored | 18 Mar, 2026 | npm chai-as-produced |
Malicious release: Malicious code in cat-ecommerce-alloy (npm) MAL-2026-1667 | Malicious | Not scored | 18 Mar, 2026 | npm cat-ecommerce-alloy |
Malicious release: Malicious code in carbon-mac-copy-cloner (npm) MAL-2026-1666 | Malicious | Not scored | 18 Mar, 2026 | npm carbon-mac-copy-cloner |
Malicious release: Malicious code in browser-compat-data (npm) MAL-2026-1665 | Malicious | Not scored | 18 Mar, 2026 | npm browser-compat-data |
Malicious release: Malicious code in braze-content-card-island (npm) MAL-2026-1663 | Malicious | Not scored | 18 Mar, 2026 | npm braze-content-card-island |
Malicious release: Malicious code in brisk-web-ssr (npm) MAL-2026-1664 | Malicious | Not scored | 18 Mar, 2026 | npm brisk-web-ssr |
Malicious release: Malicious code in blob-internal-security-test-f63eabf7 (npm) MAL-2026-1662 | Malicious | Not scored | 18 Mar, 2026 | npm blob-internal-security-test-f63eabf7 |
Malicious release: Malicious code in blackstone-core (npm) MAL-2026-1661 | Malicious | Not scored | 18 Mar, 2026 | npm blackstone-core |
Malicious release: Malicious code in bis-schemas (npm) MAL-2026-1660 | Malicious | Not scored | 18 Mar, 2026 | npm bis-schemas |
Malicious release: Malicious code in bcp-security-update (npm) MAL-2026-1658 | Malicious | Not scored | 18 Mar, 2026 | npm bcp-security-update |
Malicious release: Malicious code in bcp-security-updates (npm) MAL-2026-1659 | Malicious | Not scored | 18 Mar, 2026 | npm bcp-security-updates |
Malicious release: Malicious code in backstage-plugin-wpe-catalog (npm) MAL-2026-1657 | Malicious | Not scored | 18 Mar, 2026 | npm backstage-plugin-wpe-catalog |
Malicious release: Malicious code in argonnode (npm) MAL-2026-1656 | Malicious | Not scored | 18 Mar, 2026 | npm argonnode |
Malicious release: Malicious code in aligntyper (npm) MAL-2026-1655 | Malicious | Not scored | 18 Mar, 2026 | npm aligntyper |
Malicious release: Malicious code in aligntypeer (npm) MAL-2026-1654 | Malicious | Not scored | 18 Mar, 2026 | npm aligntypeer |
Malicious release: Malicious code in align-configer (npm) MAL-2026-1653 | Malicious | Not scored | 18 Mar, 2026 | npm align-configer |
Malicious release: Malicious code in alfasec (npm) MAL-2026-1652 | Malicious | Not scored | 18 Mar, 2026 | npm alfasec |
Malicious release: Malicious code in ai-fast-auto-trader (npm) MAL-2026-1651 | Malicious | Not scored | 18 Mar, 2026 | npm ai-fast-auto-trader |
Malicious release: Malicious code in advertising-shared (npm) MAL-2026-1650 | Malicious | Not scored | 18 Mar, 2026 | npm advertising-shared |
Malicious release: Malicious code in advertising-podlet (npm) MAL-2026-1649 | Malicious | Not scored | 18 Mar, 2026 | npm advertising-podlet |
Malicious release: Malicious code in advertising-events (npm) MAL-2026-1648 | Malicious | Not scored | 18 Mar, 2026 | npm advertising-events |
Malicious release: Malicious code in adobe-tracking (npm) MAL-2026-1647 | Malicious | Not scored | 18 Mar, 2026 | npm adobe-tracking |
Malicious release: Malicious code in abstract-http-request (npm) MAL-2026-1646 | Malicious | Not scored | 18 Mar, 2026 | npm abstract-http-request |
Malicious release: Malicious code in aboba-initial (npm) MAL-2026-1645 | Malicious | Not scored | 18 Mar, 2026 | npm aboba-initial |
Malicious release: Malicious code in aboba-docker-check (npm) MAL-2026-1644 | Malicious | Not scored | 18 Mar, 2026 | npm aboba-docker-check |
Malicious release: Malicious code in @vampirchik147/libxmljs2 (npm) MAL-2026-1643 | Malicious | Not scored | 18 Mar, 2026 | npm @vampirchik147/libxmljs2 |
Malicious release: Malicious code in @upstashed/context7-mcp (npm) MAL-2026-1642 | Malicious | Not scored | 18 Mar, 2026 | npm @upstashed/context7-mcp |
Malicious release: Malicious code in @uc-platform/auth (npm) MAL-2026-1640 | Malicious | Not scored | 18 Mar, 2026 | npm @uc-platform/auth |
Malicious release: Malicious code in @uc-platform/user-service-client-ts (npm) MAL-2026-1641 | Malicious | Not scored | 18 Mar, 2026 | npm @uc-platform/user-service-client-ts |
Malicious release: Malicious code in @uc-platform/advertisement-service-client (npm) MAL-2026-1639 | Malicious | Not scored | 18 Mar, 2026 | npm @uc-platform/advertisement-service-client |
Malicious release: Malicious code in @tl-icons/core (npm) MAL-2026-1638 | Malicious | Not scored | 18 Mar, 2026 | npm @tl-icons/core |
Malicious release: Malicious code in @spot-dapp/web (npm) MAL-2026-1637 | Malicious | Not scored | 18 Mar, 2026 | npm @spot-dapp/web |
Malicious release: Malicious code in @sommos/create-leaverule-or-terminationrule-form-data (npm) MAL-2026-1636 | Malicious | Not scored | 18 Mar, 2026 | npm @sommos/create-leaverule-or-terminationrule-form-data |
Malicious release: Malicious code in @polymarket-developers/clob-client (npm) MAL-2026-1635 | Malicious | Not scored | 18 Mar, 2026 | npm @polymarket-developers/clob-client |
Malicious release: Malicious code in @panopto/api-core (npm) MAL-2026-1634 | Malicious | Not scored | 18 Mar, 2026 | npm @panopto/api-core |
Malicious release: Malicious code in @nxt-costco-com/forge-icons (npm) MAL-2026-1633 | Malicious | Not scored | 18 Mar, 2026 | npm @nxt-costco-com/forge-icons |