Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in svg-safety-tool (npm) GHSA-5wq3-6mmg-x8x9, MAL-2026-1364 | Malicious | Not scored | 12 Mar, 2026 | npm svg-safety-tool |
Malicious release: Malicious code in jinja-template (npm) GHSA-42gx-7w4g-27q2, MAL-2026-1352 | Malicious | Not scored | 12 Mar, 2026 | npm jinja-template |
Malicious release: Malicious code in restrict-imports (npm) GHSA-w874-2fc5-93fx, MAL-2026-1353 | Malicious | Not scored | 12 Mar, 2026 | npm restrict-imports |
Malicious release: Malicious code in faaladorcli (PyPI) MAL-2026-1351 | Malicious | Not scored | 11 Mar, 2026 | PyPI faaladorcli |
Malicious release: Malicious code in falador (PyPI) MAL-2026-1350 | Malicious | Not scored | 11 Mar, 2026 | PyPI falador |
Malicious release: Malicious code in f0-abstraction-resolver (npm) MAL-2026-1347 | Malicious | Not scored | 11 Mar, 2026 | npm f0-abstraction-resolver |
Malicious release: Malicious code in locale-clamp-middleware (npm) MAL-2026-1348 | Malicious | Not scored | 11 Mar, 2026 | npm locale-clamp-middleware |
Malicious release: Malicious code in mabibilabub (npm) MAL-2026-1349 | Malicious | Not scored | 11 Mar, 2026 | npm mabibilabub |
Malicious release: Malicious code in bignum-ts (npm) GHSA-3xc3-xrqv-fjx6, MAL-2026-1344 | Malicious | Not scored | 11 Mar, 2026 | npm bignum-ts |
Malicious release: Malicious code in npm-builders (npm) GHSA-fjr5-82h6-f8gr, MAL-2026-1345 | Malicious | Not scored | 11 Mar, 2026 | npm npm-builders |
Malicious release: Malicious code in ts-lint-builder (npm) GHSA-mxvj-m5xp-m9xg, MAL-2026-1346 | Malicious | Not scored | 11 Mar, 2026 | npm ts-lint-builder |
Malicious release: Malicious code in chai-as-flex (npm) GHSA-p3rj-3q6f-wvp8, MAL-2026-1343 | Malicious | Not scored | 11 Mar, 2026 | npm chai-as-flex |
Malicious release: Malicious code in collectables (PyPI) MAL-2026-1342 | Malicious | Not scored | 11 Mar, 2026 | PyPI collectables |
Malicious release: Malicious code in collects (PyPI) MAL-2026-1341 | Malicious | Not scored | 11 Mar, 2026 | PyPI collects |
Malicious release: Malicious code in anontest123 (PyPI) MAL-2026-1339 | Malicious | Not scored | 11 Mar, 2026 | PyPI anontest123 |
Malicious release: Malicious code in safetest123 (PyPI) MAL-2026-1340 | Malicious | Not scored | 11 Mar, 2026 | PyPI safetest123 |
Malicious release: Malicious code in polygon-gamma-api (npm) GHSA-39j3-68gf-vh7w, MAL-2026-1333 | Malicious | Not scored | 11 Mar, 2026 | npm polygon-gamma-api |
Malicious release: Malicious code in tailwindcss-animate-framer (npm) GHSA-6wp3-j2v8-4jg5, MAL-2026-1335 | Malicious | Not scored | 11 Mar, 2026 | npm tailwindcss-animate-framer |
Malicious release: Malicious code in vite-chunker (npm) GHSA-f786-3r3g-h442, MAL-2026-1338 | Malicious | Not scored | 11 Mar, 2026 | npm vite-chunker |
Malicious release: Malicious code in tailwindcss-forms-bundler (npm) GHSA-gm2h-wf73-fxx5, MAL-2026-1336 | Malicious | Not scored | 11 Mar, 2026 | npm tailwindcss-forms-bundler |
Malicious release: Malicious code in gamma-api-provider (npm) GHSA-rp22-7cw9-ph5g, MAL-2026-1328 | Malicious | Not scored | 11 Mar, 2026 | npm gamma-api-provider |
Malicious release: Malicious code in mui-path-imports (npm) GHSA-5gp8-24cq-8q2v, MAL-2026-1332 | Malicious | Not scored | 11 Mar, 2026 | npm mui-path-imports |
Malicious release: Malicious code in typescript-urql (npm) GHSA-g7m7-vfxq-49jh, MAL-2026-1337 | Malicious | Not scored | 11 Mar, 2026 | npm typescript-urql |
Malicious release: Malicious code in clean-order (npm) GHSA-rv53-q5vv-mx3f, MAL-2026-1326 | Malicious | Not scored | 11 Mar, 2026 | npm clean-order |
Malicious release: Malicious code in google-camelcase (npm) GHSA-5w4r-j5gv-rm4x, MAL-2026-1329 | Malicious | Not scored | 11 Mar, 2026 | npm google-camelcase |
Malicious release: Malicious code in sort-export-all (npm) GHSA-h9cm-7hx6-2xcc, MAL-2026-1334 | Malicious | Not scored | 11 Mar, 2026 | npm sort-export-all |
Malicious release: Malicious code in filter-imports (npm) GHSA-j542-xg84-95px, MAL-2026-1327 | Malicious | Not scored | 11 Mar, 2026 | npm filter-imports |
Malicious release: Malicious code in import-zod (npm) GHSA-57v8-4prv-vf9j, MAL-2026-1330 | Malicious | Not scored | 11 Mar, 2026 | npm import-zod |
Malicious release: Malicious code in llm-oracle (npm) GHSA-84fm-x46g-jqx9, MAL-2026-1331 | Malicious | Not scored | 11 Mar, 2026 | npm llm-oracle |
Malicious release: Malicious code in synapseml-utils (PyPI) MAL-2026-1325 | Malicious | Not scored | 10 Mar, 2026 | PyPI synapseml-utils |
Malicious release: Malicious code in test-logsmodule-v-zisko (npm) GHSA-5c6q-wp3q-gcch, MAL-2026-1324 | Malicious | Not scored | 10 Mar, 2026 | npm test-logsmodule-v-zisko |
Malicious release: Malicious code in bluelite-bot-manager (npm) GHSA-6939-264r-mcp4, MAL-2026-1323 | Malicious | Not scored | 10 Mar, 2026 | npm bluelite-bot-manager |
Malicious release: Malicious code in rtxnode-sass22 (npm) GHSA-gr9m-wqvq-35x3, MAL-2026-1322 | Malicious | Not scored | 10 Mar, 2026 | npm rtxnode-sass22 |
Malicious release: Malicious code in @openclaw-ai/openclawai (npm) GHSA-73px-wj4g-wgwp, MAL-2026-1321 | Malicious | Not scored | 10 Mar, 2026 | npm @openclaw-ai/openclawai |
Malicious release: Malicious code in @web-monorepo/fetchers (npm) MAL-2026-1318 | Malicious | Not scored | 10 Mar, 2026 | npm @web-monorepo/fetchers |
Malicious release: Malicious code in @augmentor/experiences (npm) GHSA-mpxg-x386-qhgr, MAL-2026-1317 | Malicious | Not scored | 10 Mar, 2026 | npm @augmentor/experiences |
Malicious release: Malicious code in alinet-w (npm) GHSA-394g-wvjv-j6mg, MAL-2026-1319 | Malicious | Not scored | 10 Mar, 2026 | npm alinet-w |
Malicious release: Malicious code in chain-promised-await (npm) GHSA-x7f9-fr3r-64w3, MAL-2026-1320 | Malicious | Not scored | 10 Mar, 2026 | npm chain-promised-await |
Malicious release: Malicious code in @mmm-otrade/transaction-adapter (npm) GHSA-2m9p-9969-wqcg, MAL-2026-1301 | Malicious | Not scored | 10 Mar, 2026 | npm @mmm-otrade/transaction-adapter |
Malicious release: Malicious code in collab-library (npm) GHSA-3gp5-v85g-m879, MAL-2026-1305 | Malicious | Not scored | 10 Mar, 2026 | npm collab-library |
Malicious release: Malicious code in @rothaus/falcologgerinternalstate (npm) GHSA-3hwm-q5v7-wc64, MAL-2026-1303 | Malicious | Not scored | 10 Mar, 2026 | npm @rothaus/falcologgerinternalstate |
Malicious release: Malicious code in iron-localstorage (npm) GHSA-5q6j-pgfc-j6hj, MAL-2026-1309 | Malicious | Not scored | 10 Mar, 2026 | npm iron-localstorage |
Malicious release: Malicious code in iron-selector (npm) GHSA-95jf-557m-8wf3, MAL-2026-1314 | Malicious | Not scored | 10 Mar, 2026 | npm iron-selector |
Malicious release: Malicious code in iron-overlay-behavior (npm) GHSA-cx53-g4g3-wmcj, MAL-2026-1312 | Malicious | Not scored | 10 Mar, 2026 | npm iron-overlay-behavior |
Malicious release: Malicious code in iron-fit-behavior (npm) GHSA-f874-c2w3-388v, MAL-2026-1307 | Malicious | Not scored | 10 Mar, 2026 | npm iron-fit-behavior |
Malicious release: Malicious code in iron-menu-behavior (npm) GHSA-h9gw-qwfq-q74c, MAL-2026-1311 | Malicious | Not scored | 10 Mar, 2026 | npm iron-menu-behavior |
Malicious release: Malicious code in iron-pages (npm) GHSA-hphv-rwc2-7gp4, MAL-2026-1313 | Malicious | Not scored | 10 Mar, 2026 | npm iron-pages |
Malicious release: Malicious code in falcologgerinternalstate (npm) GHSA-hr5p-8hqc-wcm6, MAL-2026-1306 | Malicious | Not scored | 10 Mar, 2026 | npm falcologgerinternalstate |
Malicious release: Malicious code in @platform-growth/guidance-channel-provider (npm) GHSA-m84f-rg3g-9pvw, MAL-2026-1302 | Malicious | Not scored | 10 Mar, 2026 | npm @platform-growth/guidance-channel-provider |
Malicious release: Malicious code in @mmm-otrade/transaction (npm) GHSA-m8gv-h3cq-3grx, MAL-2026-1300 | Malicious | Not scored | 10 Mar, 2026 | npm @mmm-otrade/transaction |