Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in transform-export-extensions (npm) GHSA-r6qh-rm6v-7pvx, MAL-2026-1565 | Malicious | Not scored | 16 Mar, 2026 | npm transform-export-extensions |
Malicious release: Malicious code in transform-simplify-comparison-operators (npm) GHSA-r9vm-77cr-58hj, MAL-2026-1510 | Malicious | Not scored | 16 Mar, 2026 | npm transform-simplify-comparison-operators |
Malicious release: Malicious code in prefer-let (npm) GHSA-rc2x-j8vj-mr6f, MAL-2026-1526 | Malicious | Not scored | 16 Mar, 2026 | npm prefer-let |
Malicious release: Malicious code in transform-member-expression-literals (npm) GHSA-rm67-f2rf-9fwf, MAL-2026-1570 | Malicious | Not scored | 16 Mar, 2026 | npm transform-member-expression-literals |
Malicious release: Malicious code in minify-mangle-names (npm) GHSA-v3vq-pp56-3jx5, MAL-2026-1522 | Malicious | Not scored | 16 Mar, 2026 | npm minify-mangle-names |
Malicious release: Malicious code in transform-new-target (npm) GHSA-vpx7-g2h6-rq6c, MAL-2026-1572 | Malicious | Not scored | 16 Mar, 2026 | npm transform-new-target |
Malicious release: Malicious code in transform-modules-systemjs (npm) GHSA-wc64-r4v7-rjwr, MAL-2026-1571 | Malicious | Not scored | 16 Mar, 2026 | npm transform-modules-systemjs |
Malicious release: Malicious code in transform-es2015-duplicate-keys (npm) GHSA-wgjr-2vhj-qwv7, MAL-2026-1561 | Malicious | Not scored | 16 Mar, 2026 | npm transform-es2015-duplicate-keys |
Malicious release: Malicious code in syntax-export-extensions (npm) GHSA-whjj-mhxg-67rv, MAL-2026-1550 | Malicious | Not scored | 16 Mar, 2026 | npm syntax-export-extensions |
Malicious release: Malicious code in typescript-vue-apollo-smart-ops (npm) GHSA-x3pj-5gcc-j9rh, MAL-2026-1555 | Malicious | Not scored | 16 Mar, 2026 | npm typescript-vue-apollo-smart-ops |
Malicious release: Malicious code in syntax-async-generators (npm) GHSA-x49c-wrwr-8p2q, MAL-2026-1558 | Malicious | Not scored | 16 Mar, 2026 | npm syntax-async-generators |
Malicious release: Malicious code in typescript-type-graphql (npm) GHSA-x56x-pjgc-r3cm, MAL-2026-1540 | Malicious | Not scored | 16 Mar, 2026 | npm typescript-type-graphql |
Malicious release: Malicious code in transform-regexp-constructors (npm) MAL-2026-3125 | Malicious | Not scored | 16 Mar, 2026 | npm transform-regexp-constructors |
Malicious release: Malicious code in pymnemonic (PyPI) MAL-2026-1438 | Malicious | Not scored | 15 Mar, 2026 | PyPI pymnemonic |
Malicious release: Malicious code in do-not-install-this-package-004 (PyPI) MAL-2026-1436 | Malicious | Not scored | 15 Mar, 2026 | PyPI do-not-install-this-package-004 |
Malicious release: Malicious code in flowpeek (PyPI) MAL-2026-1437 | Malicious | Not scored | 15 Mar, 2026 | PyPI flowpeek |
Malicious release: Malicious code in kvstore-pb2-grpc (PyPI) MAL-2026-1433 | Malicious | Not scored | 15 Mar, 2026 | PyPI kvstore-pb2-grpc |
Malicious release: Malicious code in dgl-cu117 (PyPI) MAL-2026-1432 | Malicious | Not scored | 15 Mar, 2026 | PyPI dgl-cu117 |
Malicious release: Malicious code in python-anchor (PyPI) MAL-2026-1435 | Malicious | Not scored | 15 Mar, 2026 | PyPI python-anchor |
Malicious release: Malicious code in my-super-lib (PyPI) MAL-2026-1434 | Malicious | Not scored | 15 Mar, 2026 | PyPI my-super-lib |
Malicious release: Malicious code in ariadne-federation (PyPI) MAL-2026-1431 | Malicious | Not scored | 15 Mar, 2026 | PyPI ariadne-federation |
Malicious release: Malicious code in @3stripes/common (npm) MAL-2026-1426 | Malicious | Not scored | 15 Mar, 2026 | npm @3stripes/common |
Malicious release: Malicious code in @3stripes/auth (npm) MAL-2026-1425 | Malicious | Not scored | 15 Mar, 2026 | npm @3stripes/auth |
Malicious release: Malicious code in @3stripes/helpers (npm) MAL-2026-1427 | Malicious | Not scored | 15 Mar, 2026 | npm @3stripes/helpers |
Malicious release: Malicious code in @3stripes/api-client (npm) MAL-2026-1424 | Malicious | Not scored | 15 Mar, 2026 | npm @3stripes/api-client |
Malicious release: Malicious code in @3stripes/utils (npm) MAL-2026-1430 | Malicious | Not scored | 15 Mar, 2026 | npm @3stripes/utils |
Malicious release: Malicious code in @3stripes/lib (npm) MAL-2026-1428 | Malicious | Not scored | 15 Mar, 2026 | npm @3stripes/lib |
Malicious release: Malicious code in @3stripes/ui (npm) MAL-2026-1429 | Malicious | Not scored | 15 Mar, 2026 | npm @3stripes/ui |
Malicious release: Malicious code in n8n-nodes-text-helpers (npm) GHSA-r2w7-4rv7-p8wj, MAL-2026-1454 | Malicious | Not scored | 15 Mar, 2026 | npm n8n-nodes-text-helpers |
Malicious release: Malicious code in tracking-service-config (npm) MAL-2026-1457 | Malicious | Not scored | 14 Mar, 2026 | npm tracking-service-config |
Malicious release: Malicious code in test_pkg_forppe (npm) GHSA-xvw4-g263-g3r2, MAL-2026-1423 | Malicious | Not scored | 14 Mar, 2026 | npm test_pkg_forppe |
Malicious release: Malicious code in native_dep (npm) GHSA-j72j-g5w7-jj7f, MAL-2026-1455 | Malicious | Not scored | 14 Mar, 2026 | npm native_dep |
Malicious release: Malicious code in devlino (npm) GHSA-jx86-pq3j-fp99, MAL-2026-1421 | Malicious | Not scored | 13 Mar, 2026 | npm devlino |
Malicious release: Malicious code in fastapi-middleware-cors (PyPI) MAL-2026-1422 | Malicious | Not scored | 13 Mar, 2026 | PyPI fastapi-middleware-cors |
Malicious release: Malicious code in cw-isdk (npm) GHSA-4gjw-qxx7-crc6, MAL-2026-1420 | Malicious | Not scored | 13 Mar, 2026 | npm cw-isdk |
Malicious release: Malicious code in tailwind-mainanimation (npm) GHSA-r38v-v7pv-rgrj, MAL-2026-1418 | Malicious | Not scored | 13 Mar, 2026 | npm tailwind-mainanimation |
Malicious release: Malicious code in tailwindcss-style-modify (npm) GHSA-m7rv-f9h8-5r7w, MAL-2026-1419 | Malicious | Not scored | 13 Mar, 2026 | npm tailwindcss-style-modify |
Malicious release: Malicious code in project47 (PyPI) MAL-2026-1412 | Malicious | Not scored | 13 Mar, 2026 | PyPI project47 |
Malicious release: Malicious code in darkig (PyPI) MAL-2026-1409 | Malicious | Not scored | 13 Mar, 2026 | PyPI darkig |
Malicious release: Malicious code in ighack (PyPI) MAL-2026-1410 | Malicious | Not scored | 13 Mar, 2026 | PyPI ighack |
Malicious release: Malicious code in nfd (PyPI) MAL-2026-1411 | Malicious | Not scored | 13 Mar, 2026 | PyPI nfd |
Malicious release: Malicious code in hardhat2-config (npm) GHSA-3cgj-gvv2-qrm4, MAL-2026-1414 | Malicious | Not scored | 13 Mar, 2026 | npm hardhat2-config |
Malicious release: Malicious code in twitch.dashboard-v2.core (npm) GHSA-89fh-43jx-c785, MAL-2026-1417 | Malicious | Not scored | 13 Mar, 2026 | npm twitch.dashboard-v2.core |
Malicious release: Malicious code in pulsard-utils (npm) GHSA-93p8-6ccp-ww68, MAL-2026-1415 | Malicious | Not scored | 13 Mar, 2026 | npm pulsard-utils |
Malicious release: Malicious code in twitch-security (npm) GHSA-gp4w-hqqj-mj8j, MAL-2026-1416 | Malicious | Not scored | 13 Mar, 2026 | npm twitch-security |
Malicious release: Malicious code in brlc-base (npm) GHSA-fj4h-6xw5-7w6c, MAL-2026-1413 | Malicious | Not scored | 13 Mar, 2026 | npm brlc-base |
Malicious release: Malicious code in nai (PyPI) MAL-2026-1408 | Malicious | Not scored | 13 Mar, 2026 | PyPI nai |
Malicious release: Malicious code in thief-utils (PyPI) MAL-2026-1407 | Malicious | Not scored | 13 Mar, 2026 | PyPI thief-utils |
Malicious release: Malicious code in makenotion-ppetest (PyPI) MAL-2026-1406 | Malicious | Not scored | 13 Mar, 2026 | PyPI makenotion-ppetest |
Malicious release: Malicious code in rrweb-v1 (npm) MAL-2026-1456 | Malicious | Not scored | 13 Mar, 2026 | npm rrweb-v1 |