Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in tailwindcss-forms-component (npm) GHSA-7xp9-q2rw-phjf, MAL-2026-1211 | Malicious | Not scored | 03 Mar, 2026 | npm tailwindcss-forms-component |
Malicious release: Malicious code in tailwindcss-forms-componentes (npm) GHSA-9gm2-p7c8-23pr, MAL-2026-1212 | Malicious | Not scored | 03 Mar, 2026 | npm tailwindcss-forms-componentes |
Malicious release: Malicious code in typescript-constructors (npm) GHSA-p8f2-q3f3-448f, MAL-2026-1214 | Malicious | Not scored | 03 Mar, 2026 | npm typescript-constructors |
Malicious release: Malicious code in bubblemap-bypass-sdk (npm) GHSA-v36r-mccr-r29h, MAL-2026-1190 | Malicious | Not scored | 03 Mar, 2026 | npm bubblemap-bypass-sdk |
Malicious release: Malicious code in selfbot-lofy (npm) GHSA-2j24-mx5f-f97c, MAL-2026-1207 | Malicious | Not scored | 03 Mar, 2026 | npm selfbot-lofy |
Malicious release: Malicious code in consolelofy (npm) GHSA-8946-7776-j566, MAL-2026-1195 | Malicious | Not scored | 03 Mar, 2026 | npm consolelofy |
Malicious release: Malicious code in bmath (npm) GHSA-wh7p-86wf-rwvg, MAL-2026-1189 | Malicious | Not scored | 03 Mar, 2026 | npm bmath |
Malicious release: Malicious code in @powpegtest/powpeg (npm) GHSA-2pvv-3j7g-78cv, MAL-2026-1186 | Malicious | Not scored | 03 Mar, 2026 | npm @powpegtest/powpeg |
Malicious release: Malicious code in demo-ip-package (npm) GHSA-f9r2-36vp-352g, MAL-2026-1196 | Malicious | Not scored | 03 Mar, 2026 | npm demo-ip-package |
Malicious release: Malicious code in demo-ip-package-cm (npm) GHSA-qcqp-vg8x-vrq6, MAL-2026-1197 | Malicious | Not scored | 03 Mar, 2026 | npm demo-ip-package-cm |
Malicious release: Malicious code in flycord (npm) GHSA-cmr9-xfh6-fffv, MAL-2026-1198 | Malicious | Not scored | 03 Mar, 2026 | npm flycord |
Malicious release: Malicious code in fps-logger (npm) GHSA-67vf-65vj-4ggg, MAL-2026-1199 | Malicious | Not scored | 03 Mar, 2026 | npm fps-logger |
Malicious release: Malicious code in @bookings.microsoft.com/s (npm) GHSA-7mjg-pxp5-4xmw, MAL-2026-1185 | Malicious | Not scored | 03 Mar, 2026 | npm @bookings.microsoft.com/s |
Malicious release: Malicious code in @twilio-client/twilio-client (npm) GHSA-xvg5-299p-j75r, MAL-2026-1187 | Malicious | Not scored | 03 Mar, 2026 | npm @twilio-client/twilio-client |
Malicious release: Malicious code in rbxm-utils (npm) GHSA-q5r5-vcwj-vxj6, MAL-2026-1183 | Malicious | Not scored | 03 Mar, 2026 | npm rbxm-utils |
Malicious release: Malicious code in web-prompt (npm) GHSA-rrw9-99f7-5654, MAL-2026-1184 | Malicious | Not scored | 03 Mar, 2026 | npm web-prompt |
Malicious release: Malicious code in bigmathutils-v2 (npm) GHSA-3rcr-3v9x-79r6, MAL-2026-1182 | Malicious | Not scored | 03 Mar, 2026 | npm bigmathutils-v2 |
Malicious release: Malicious code in webnochs (npm) GHSA-ccvh-6226-jf5g, MAL-2026-1181 | Malicious | Not scored | 03 Mar, 2026 | npm webnochs |
Malicious release: Malicious code in ethersnode (npm) GHSA-g45j-72gf-5658, MAL-2026-1174 | Malicious | Not scored | 03 Mar, 2026 | npm ethersnode |
Malicious release: Malicious code in webnoch (npm) GHSA-gp8w-96qw-8c33, MAL-2026-1180 | Malicious | Not scored | 03 Mar, 2026 | npm webnoch |
Malicious release: Malicious code in ethersnog (npm) GHSA-p22r-9fgj-8q7f, MAL-2026-1175 | Malicious | Not scored | 03 Mar, 2026 | npm ethersnog |
Malicious release: Malicious code in eslint-verify-plugin (npm) GHSA-g7rg-j32w-9f9m, MAL-2026-1173 | Malicious | Not scored | 03 Mar, 2026 | npm eslint-verify-plugin |
Malicious release: Malicious code in gabby-types (npm) GHSA-pwrj-8gmq-f574, MAL-2026-1176 | Malicious | Not scored | 03 Mar, 2026 | npm gabby-types |
Malicious release: Malicious code in @global-dax-ad-platform/dax-utils (npm) GHSA-33x7-m654-2w4g, MAL-2026-1170 | Malicious | Not scored | 03 Mar, 2026 | npm @global-dax-ad-platform/dax-utils |
Malicious release: Malicious code in @global-dax-ad-platform/dax-components (npm) GHSA-5rpp-4wg3-q4ww, MAL-2026-1165 | Malicious | Not scored | 03 Mar, 2026 | npm @global-dax-ad-platform/dax-components |
Malicious release: Malicious code in @global-dax-ad-platform/dax-modules (npm) GHSA-rqrg-p585-r9f4, MAL-2026-1167 | Malicious | Not scored | 03 Mar, 2026 | npm @global-dax-ad-platform/dax-modules |
Malicious release: Malicious code in @global-dax-ad-platform/dax-hooks (npm) GHSA-vp7m-93c4-5992, MAL-2026-1166 | Malicious | Not scored | 03 Mar, 2026 | npm @global-dax-ad-platform/dax-hooks |
Malicious release: Malicious code in @global-dax-ad-platform/dax-types (npm) GHSA-w8f2-jmmq-3g88, MAL-2026-1169 | Malicious | Not scored | 03 Mar, 2026 | npm @global-dax-ad-platform/dax-types |
Malicious release: Malicious code in @global-dax-ad-platform/dax-styles (npm) GHSA-x3c2-xw79-63qf, MAL-2026-1168 | Malicious | Not scored | 03 Mar, 2026 | npm @global-dax-ad-platform/dax-styles |
Malicious release: Malicious code in hiagentevilmcp (npm) GHSA-9264-q4hp-q57g, MAL-2026-1178 | Malicious | Not scored | 03 Mar, 2026 | npm hiagentevilmcp |
Malicious release: Malicious code in @zakhaevv/envai (npm) GHSA-33h9-mg87-vq25, MAL-2026-1172 | Malicious | Not scored | 03 Mar, 2026 | npm @zakhaevv/envai |
Malicious release: Malicious code in @snazaah/davey (npm) GHSA-q84c-f2pg-2gh7, MAL-2026-1171 | Malicious | Not scored | 03 Mar, 2026 | npm @snazaah/davey |
Malicious release: Malicious code in graph-dynamic (npm) GHSA-6q72-5cph-5xxf, MAL-2026-1177 | Malicious | Not scored | 03 Mar, 2026 | npm graph-dynamic |
Malicious release: Malicious code in magala (npm) GHSA-vcvv-6hch-f873, MAL-2026-1179 | Malicious | Not scored | 03 Mar, 2026 | npm magala |
Malicious release: Malicious code in openclaw-droid (npm) GHSA-q7p3-59wr-r6f3, MAL-2026-1151 | Malicious | Not scored | 03 Mar, 2026 | npm openclaw-droid |
Malicious release: Malicious code in token-discord-encryptation (npm) GHSA-q5w4-82wp-c3hp, MAL-2026-1157 | Malicious | Not scored | 03 Mar, 2026 | npm token-discord-encryptation |
Malicious release: Malicious code in solongnerds (npm) GHSA-rvxr-rg3g-gqfr, MAL-2026-1156 | Malicious | Not scored | 03 Mar, 2026 | npm solongnerds |
Malicious release: Malicious code in yazxzpedia-libsignal (npm) GHSA-2wr8-68wx-vgr7, MAL-2026-1164 | Malicious | Not scored | 03 Mar, 2026 | npm yazxzpedia-libsignal |
Malicious release: Malicious code in primexuu-libsignal (npm) GHSA-6w7r-jw92-pfjf, MAL-2026-1153 | Malicious | Not scored | 03 Mar, 2026 | npm primexuu-libsignal |
Malicious release: Malicious code in libsignal-yazxz (npm) GHSA-75f2-3rh8-f2rr, MAL-2026-1150 | Malicious | Not scored | 03 Mar, 2026 | npm libsignal-yazxz |
Malicious release: Malicious code in rullzdigital-libsignal (npm) GHSA-jgfp-q988-vx26, MAL-2026-1155 | Malicious | Not scored | 03 Mar, 2026 | npm rullzdigital-libsignal |
Malicious release: Malicious code in danzxoffc74-libsignal (npm) GHSA-p3mp-4w28-j2fj, MAL-2026-1147 | Malicious | Not scored | 03 Mar, 2026 | npm danzxoffc74-libsignal |
Malicious release: Malicious code in @yazxzpedia/baileys (npm) GHSA-q2g5-7g7x-28xp, MAL-2026-1145 | Malicious | Not scored | 03 Mar, 2026 | npm @yazxzpedia/baileys |
Malicious release: Malicious code in rullzdigital (npm) GHSA-vv3p-5rm5-qxrc, MAL-2026-1154 | Malicious | Not scored | 03 Mar, 2026 | npm rullzdigital |
Malicious release: Malicious code in danzxoffc74 (npm) GHSA-wq3m-3fq3-4w5v, MAL-2026-1146 | Malicious | Not scored | 03 Mar, 2026 | npm danzxoffc74 |
Malicious release: Malicious code in xpack-video-submission (npm) GHSA-3mrc-3vpq-5qc6, MAL-2026-1163 | Malicious | Not scored | 03 Mar, 2026 | npm xpack-video-submission |
Malicious release: Malicious code in xpack-test-3.0 (npm) GHSA-8cfx-xvvc-pc4x, MAL-2026-1162 | Malicious | Not scored | 03 Mar, 2026 | npm xpack-test-3.0 |
Malicious release: Malicious code in xpack-arc-gateway (npm) GHSA-gh92-xxgg-6g98, MAL-2026-1158 | Malicious | Not scored | 03 Mar, 2026 | npm xpack-arc-gateway |
Malicious release: Malicious code in ethglobal-finale (npm) GHSA-x78f-q722-m5v6, MAL-2026-1148 | Malicious | Not scored | 03 Mar, 2026 | npm ethglobal-finale |
Malicious release: Malicious code in xpack-per-device (npm) GHSA-9629-h7qc-p57c, MAL-2026-1159 | Malicious | Not scored | 03 Mar, 2026 | npm xpack-per-device |