Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in solana-pumpfun-sdk (npm) GHSA-jcj7-prw7-7g8m, MAL-2026-1400 | Malicious | Not scored | 13 Mar, 2026 | npm solana-pumpfun-sdk |
Malicious release: Malicious code in pino-sdk (npm) GHSA-w65h-pr62-r9x7, MAL-2026-1399 | Malicious | Not scored | 13 Mar, 2026 | npm pino-sdk |
Malicious release: Malicious code in @dinzid04/libsignal-node (npm) GHSA-cv92-97xv-5m97, MAL-2026-1392 | Malicious | Not scored | 13 Mar, 2026 | npm @dinzid04/libsignal-node |
Malicious release: Malicious code in @dinzid04/baileys (npm) GHSA-x75j-rf36-jhfm, MAL-2026-1391 | Malicious | Not scored | 13 Mar, 2026 | npm @dinzid04/baileys |
Malicious release: Malicious code in tailwindcss-animation-advanced (npm) GHSA-6955-77hw-g832, MAL-2026-1401 | Malicious | Not scored | 13 Mar, 2026 | npm tailwindcss-animation-advanced |
Malicious release: Malicious code in cortana-md-bot (npm) GHSA-337h-4j9r-8w2f, MAL-2026-1393 | Malicious | Not scored | 13 Mar, 2026 | npm cortana-md-bot |
Malicious release: Malicious code in @depro-tech/cortana-md (npm) GHSA-6wv6-cjh5-792c, MAL-2026-1390 | Malicious | Not scored | 13 Mar, 2026 | npm @depro-tech/cortana-md |
Malicious release: Malicious code in meta-internal-logger-drzak (npm) GHSA-5m63-g4p4-w233, MAL-2026-1398 | Malicious | Not scored | 13 Mar, 2026 | npm meta-internal-logger-drzak |
Malicious release: Malicious code in whatsapp-core-auth-drzak (npm) GHSA-h5f2-r2ph-vpwg, MAL-2026-1404 | Malicious | Not scored | 13 Mar, 2026 | npm whatsapp-core-auth-drzak |
Malicious release: Malicious code in dell-internal-auth-drzak (npm) GHSA-27p2-jj24-ph4c, MAL-2026-1396 | Malicious | Not scored | 13 Mar, 2026 | npm dell-internal-auth-drzak |
Malicious release: Malicious code in tradepmr-fusion-core-drzak (npm) GHSA-6v8m-pxj8-gvhq, MAL-2026-1403 | Malicious | Not scored | 13 Mar, 2026 | npm tradepmr-fusion-core-drzak |
Malicious release: Malicious code in fusion-internal-common-drzak (npm) GHSA-84r2-9pxx-jpj2, MAL-2026-1397 | Malicious | Not scored | 13 Mar, 2026 | npm fusion-internal-common-drzak |
Malicious release: Malicious code in tradepmr-api-utils-drzak (npm) GHSA-c69r-v442-p36q, MAL-2026-1402 | Malicious | Not scored | 13 Mar, 2026 | npm tradepmr-api-utils-drzak |
Malicious release: Malicious code in dell-fusion-core-drzak (npm) GHSA-h25q-p78j-7v25, MAL-2026-1395 | Malicious | Not scored | 13 Mar, 2026 | npm dell-fusion-core-drzak |
Malicious release: Malicious code in dell-emc-internal-api-drzak (npm) GHSA-h9w4-crm5-qp2f, MAL-2026-1394 | Malicious | Not scored | 13 Mar, 2026 | npm dell-emc-internal-api-drzak |
Malicious release: Malicious code in whatsapp-fastdesk-utils-drzak (npm) GHSA-m63f-89px-gqhq, MAL-2026-1405 | Malicious | Not scored | 13 Mar, 2026 | npm whatsapp-fastdesk-utils-drzak |
Malicious release: Malicious code in @immuta/flag-providers-web (npm) MAL-2026-1382 | Malicious | Not scored | 13 Mar, 2026 | npm @immuta/flag-providers-web |
Malicious release: Malicious code in tachyon-spade-reporter (npm) GHSA-5w2f-897r-j622, MAL-2026-1386 | Malicious | Not scored | 13 Mar, 2026 | npm tachyon-spade-reporter |
Malicious release: Malicious code in tahoe-tap (npm) GHSA-777p-fm5x-p7rg, MAL-2026-1387 | Malicious | Not scored | 13 Mar, 2026 | npm tahoe-tap |
Malicious release: Malicious code in tourney-sdk-react (npm) GHSA-7wp6-2652-ppmj, MAL-2026-1388 | Malicious | Not scored | 13 Mar, 2026 | npm tourney-sdk-react |
Malicious release: Malicious code in twitch-twilight-intl (npm) GHSA-rch7-r7gr-cp84, MAL-2026-1389 | Malicious | Not scored | 13 Mar, 2026 | npm twitch-twilight-intl |
Malicious release: Malicious code in conductor-managed-airflow-environment (npm) GHSA-9hh2-8w9q-4w9j, MAL-2026-1385 | Malicious | Not scored | 13 Mar, 2026 | npm conductor-managed-airflow-environment |
Malicious release: Malicious code in @lux2/ssr-catalogue-sfcc (npm) MAL-2026-1384 | Malicious | Not scored | 13 Mar, 2026 | npm @lux2/ssr-catalogue-sfcc |
Malicious release: Malicious code in @immuta/feature-flags-core (npm) MAL-2026-1381 | Malicious | Not scored | 13 Mar, 2026 | npm @immuta/feature-flags-core |
Malicious release: Malicious code in @immuta/pxl-components (npm) MAL-2026-1383 | Malicious | Not scored | 13 Mar, 2026 | npm @immuta/pxl-components |
Malicious release: Malicious code in 8x8-developer-docs (npm) GHSA-89hj-xp64-rgvm, MAL-2026-1379 | Malicious | Not scored | 13 Mar, 2026 | npm 8x8-developer-docs |
Malicious release: Malicious code in f0-service-address-doctor (npm) GHSA-cqxq-2582-f357, MAL-2026-1378 | Malicious | Not scored | 13 Mar, 2026 | npm f0-service-address-doctor |
Malicious release: Malicious code in adroit-websdk-server (npm) MAL-2026-1377 | Malicious | Not scored | 13 Mar, 2026 | npm adroit-websdk-server |
Malicious release: Malicious code in spectral-corsair-my-backdoor (npm) GHSA-j5w6-gpq8-mpf4, MAL-2026-1374 | Malicious | Not scored | 12 Mar, 2026 | npm spectral-corsair-my-backdoor |
Malicious release: Malicious code in @sky-it-livedata-libraries/livedata-commons-client (npm) GHSA-qm4f-gcp7-4h8m, MAL-2026-1373 | Malicious | Not scored | 12 Mar, 2026 | npm @sky-it-livedata-libraries/livedata-commons-client |
Malicious release: Malicious code in @sky-it-livedata-libraries/livedata-commons (npm) GHSA-crjc-v3g6-rw28, MAL-2026-1372 | Malicious | Not scored | 12 Mar, 2026 | npm @sky-it-livedata-libraries/livedata-commons |
Malicious release: Malicious code in collecters (PyPI) MAL-2026-1371 | Malicious | Not scored | 12 Mar, 2026 | PyPI collecters |
Malicious release: Malicious code in @adamallana0909/apple-research-test (npm) MAL-2026-1375 | Malicious | Not scored | 12 Mar, 2026 | npm @adamallana0909/apple-research-test |
Malicious release: Malicious code in @appleseed-apple/ac-sasskit (npm) MAL-2026-1376 | Malicious | Not scored | 12 Mar, 2026 | npm @appleseed-apple/ac-sasskit |
Malicious release: Malicious code in json-specparse (npm) GHSA-w3m6-xffr-576m, MAL-2026-1368 | Malicious | Not scored | 12 Mar, 2026 | npm json-specparse |
Malicious release: Malicious code in mezukabil (npm) GHSA-gx7x-gm3r-rcxv, MAL-2026-1370 | Malicious | Not scored | 12 Mar, 2026 | npm mezukabil |
Malicious release: Malicious code in @kinggupong/baileys (npm) GHSA-786q-6xgv-455x, MAL-2026-1366 | Malicious | Not scored | 12 Mar, 2026 | npm @kinggupong/baileys |
Malicious release: Malicious code in kinggupong (npm) GHSA-953p-rf5p-cp9c, MAL-2026-1369 | Malicious | Not scored | 12 Mar, 2026 | npm kinggupong |
Malicious release: Malicious code in @kinggupong/libsignal-node (npm) GHSA-qjv5-rg93-2qhv, MAL-2026-1367 | Malicious | Not scored | 12 Mar, 2026 | npm @kinggupong/libsignal-node |
Malicious release: Malicious code in praxis-scripts (npm) GHSA-37c2-jh79-3hh6, MAL-2026-1362 | Malicious | Not scored | 12 Mar, 2026 | npm praxis-scripts |
Malicious release: Malicious code in pcl-build-docroot (npm) GHSA-9fgh-86m3-xx7g, MAL-2026-1361 | Malicious | Not scored | 12 Mar, 2026 | npm pcl-build-docroot |
Malicious release: Malicious code in unibody (npm) GHSA-v8gw-679q-2rc3, MAL-2026-1365 | Malicious | Not scored | 12 Mar, 2026 | npm unibody |
Malicious release: Malicious code in libsignal-mod (npm) GHSA-2wrw-p8q7-2vff, MAL-2026-1359 | Malicious | Not scored | 12 Mar, 2026 | npm libsignal-mod |
Malicious release: Malicious code in dappa-libsignal (npm) GHSA-vpw8-364r-vpp5, MAL-2026-1358 | Malicious | Not scored | 12 Mar, 2026 | npm dappa-libsignal |
Malicious release: Malicious code in @dappaoffc/baileys-mod (npm) GHSA-8xvm-wjf7-r5wq, MAL-2026-1355 | Malicious | Not scored | 12 Mar, 2026 | npm @dappaoffc/baileys-mod |
Malicious release: Malicious code in @dappaoffc/baileys (npm) GHSA-x7j8-crq4-jwgr, MAL-2026-1354 | Malicious | Not scored | 12 Mar, 2026 | npm @dappaoffc/baileys |
Malicious release: Malicious code in react-svg-anchor (npm) GHSA-rqq3-hgxg-3j76, MAL-2026-1363 | Malicious | Not scored | 12 Mar, 2026 | npm react-svg-anchor |
Malicious release: Malicious code in bign.ts (npm) GHSA-75ch-f3xh-qrc4, MAL-2026-1357 | Malicious | Not scored | 12 Mar, 2026 | npm bign.ts |
Malicious release: Malicious code in npm-doc-build (npm) GHSA-r89p-9949-2qj7, MAL-2026-1360 | Malicious | Not scored | 12 Mar, 2026 | npm npm-doc-build |
Malicious release: Malicious code in b2b-common-cb-lib (npm) GHSA-3g6j-9975-jm52, MAL-2026-1356 | Malicious | Not scored | 12 Mar, 2026 | npm b2b-common-cb-lib |