Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in tailwindcss-fluid-styles (npm) MAL-2026-15826 | Malicious | Not scored | 02 Sep, 2026 | npm tailwindcss-fluid-styles |
Malicious release: Malicious code in real-router-utils (npm) MAL-2026-15825 | Malicious | Not scored | 02 Sep, 2026 | npm real-router-utils |
Malicious release: Malicious code in @stellarshift/evm-address-kit (npm) GHSA-99vv-f5jw-j464, MAL-2026-15823 | Malicious | Not scored | 02 Sep, 2026 | npm @stellarshift/evm-address-kit |
Malicious release: Malicious code in @stellarshift/abi-tools (npm) GHSA-gjx7-hpjv-9pwq, MAL-2026-15821 | Malicious | Not scored | 02 Sep, 2026 | npm @stellarshift/abi-tools |
Malicious release: Malicious code in @stellarshift/token-units (npm) GHSA-rj7g-9fgf-944x, MAL-2026-15824 | Malicious | Not scored | 02 Sep, 2026 | npm @stellarshift/token-units |
Malicious release: Malicious code in @stellarshift/chain-metadata (npm) GHSA-vwjw-qgfw-xg9m, MAL-2026-15822 | Malicious | Not scored | 02 Sep, 2026 | npm @stellarshift/chain-metadata |
Malicious release: Malicious code in onceaction (npm) GHSA-2grr-qxm8-p84x, MAL-2026-15844 | Malicious | Not scored | 02 Sep, 2026 | npm onceaction |
Malicious release: Malicious code in is-generator-check (npm) GHSA-94x2-74x8-w7hv, MAL-2026-15843 | Malicious | Not scored | 02 Sep, 2026 | npm is-generator-check |
Malicious release: Malicious code in daisypick (npm) GHSA-8ppm-gjvm-rvj5, MAL-2026-15835 | Malicious | Not scored | 02 Sep, 2026 | npm daisypick |
Malicious release: Malicious code in tailwind-theme-engine (npm) GHSA-f9gx-h8rp-2vgm, MAL-2026-15846 | Malicious | Not scored | 02 Sep, 2026 | npm tailwind-theme-engine |
Malicious release: Malicious code in eyiouss (npm) GHSA-h2w3-x32h-cpqq, MAL-2026-15836 | Malicious | Not scored | 02 Sep, 2026 | npm eyiouss |
Malicious release: Malicious code in vitest-cli-pro (npm) MAL-2026-15818 | Malicious | Not scored | 02 Sep, 2026 | npm vitest-cli-pro |
Malicious release: Malicious code in peertube-plugin-poc-marker (npm) MAL-2026-15817 | Malicious | Not scored | 02 Sep, 2026 | npm peertube-plugin-poc-marker |
Malicious release: Malicious code in cminhouse-api-gateway-nodejs (npm) MAL-2026-15815 | Malicious | Not scored | 02 Sep, 2026 | npm cminhouse-api-gateway-nodejs |
Malicious release: Malicious code in eslint-rxjs (npm) MAL-2026-15812 | Malicious | Not scored | 02 Sep, 2026 | npm eslint-rxjs |
Malicious release: Malicious code in chromatitle-dev (npm) MAL-2026-15814 | Malicious | Not scored | 02 Sep, 2026 | npm chromatitle-dev |
Malicious release: Malicious code in @viertechjs/wb (npm) GHSA-3f73-cx58-g87j, MAL-2026-15832 | Malicious | Not scored | 01 Sep, 2026 | npm @viertechjs/wb |
Malicious release: Malicious code in @viertechjs/api (npm) GHSA-62qr-2m9g-fm38, MAL-2026-15830 | Malicious | Not scored | 01 Sep, 2026 | npm @viertechjs/api |
Malicious release: Malicious code in @viertechjs/baileys (npm) GHSA-wcqj-8x6x-4pxr, MAL-2026-15831 | Malicious | Not scored | 01 Sep, 2026 | npm @viertechjs/baileys |
Malicious release: Malicious code in syswatch (PyPI) MAL-2026-15811 | Malicious | Not scored | 01 Sep, 2026 | PyPI syswatch |
Malicious release: Malicious code in order-package-saas (npm) MAL-2026-15816 | Malicious | Not scored | 01 Sep, 2026 | npm order-package-saas |
Malicious release: Malicious code in bt2-api-gateway-node-js (npm) MAL-2026-15813 | Malicious | Not scored | 01 Sep, 2026 | npm bt2-api-gateway-node-js |
Malicious release: Malicious code in gcphelpit (PyPI) MAL-2026-15810 | Malicious | Not scored | 01 Sep, 2026 | PyPI gcphelpit |
Malicious release: Malicious code in tallyboxlite (PyPI) MAL-2026-15809 | Malicious | Not scored | 01 Sep, 2026 | PyPI tallyboxlite |
Malicious release: Malicious code in react-mongoose (npm) GHSA-wvgj-m2p9-jf3c, MAL-2026-15845 | Malicious | Not scored | 01 Sep, 2026 | npm react-mongoose |
Malicious release: Malicious code in @yane88/ripgrep-win (npm) GHSA-274r-44qv-6xwc, MAL-2026-15660 | Malicious | Not scored | 01 Sep, 2026 | npm @yane88/ripgrep-win |
Malicious release: Malicious code in @yane88/workbuddy-01 (npm) GHSA-2w3r-v82c-4rvg, MAL-2026-15665 | Malicious | Not scored | 01 Sep, 2026 | npm @yane88/workbuddy-01 |
Malicious release: Malicious code in @yane88/listary-01 (npm) GHSA-46j3-wfp2-66m2, MAL-2026-15658 | Malicious | Not scored | 01 Sep, 2026 | npm @yane88/listary-01 |
Malicious release: Malicious code in @yane88/workbuddy-02 (npm) GHSA-677c-x838-7qj5, MAL-2026-15666 | Malicious | Not scored | 01 Sep, 2026 | npm @yane88/workbuddy-02 |
Malicious release: Malicious code in @yane88/listary (npm) GHSA-6qjf-3c98-5gr7, MAL-2026-15657 | Malicious | Not scored | 01 Sep, 2026 | npm @yane88/listary |
Malicious release: Malicious code in @yane88/hexhub-client (npm) GHSA-75h3-gh74-47p2, MAL-2026-15649 | Malicious | Not scored | 01 Sep, 2026 | npm @yane88/hexhub-client |
Malicious release: Malicious code in @yane88/term-reqable-01 (npm) GHSA-m76v-4h4c-w693, MAL-2026-15662 | Malicious | Not scored | 01 Sep, 2026 | npm @yane88/term-reqable-01 |
Malicious release: Malicious code in @yane88/workbuddy-03 (npm) GHSA-qpjf-29xc-g688, MAL-2026-15667 | Malicious | Not scored | 01 Sep, 2026 | npm @yane88/workbuddy-03 |
Malicious release: Malicious code in @yane88/listary-02 (npm) GHSA-rg2v-g672-8773, MAL-2026-15659 | Malicious | Not scored | 01 Sep, 2026 | npm @yane88/listary-02 |
Malicious release: Malicious code in @yane88/workbuddy (npm) GHSA-v22h-4j6c-58cm, MAL-2026-15664 | Malicious | Not scored | 01 Sep, 2026 | npm @yane88/workbuddy |
Malicious release: Malicious code in @yane88/term-reqable-02 (npm) GHSA-vq2v-vw6h-9g9f, MAL-2026-15663 | Malicious | Not scored | 01 Sep, 2026 | npm @yane88/term-reqable-02 |
Malicious release: Malicious code in @yane88/term-reqable (npm) GHSA-xx48-j637-66x2, MAL-2026-15661 | Malicious | Not scored | 01 Sep, 2026 | npm @yane88/term-reqable |
Malicious release: Malicious code in @yane88/idea-2026.2-01 (npm) GHSA-2fmg-86jf-r56c, MAL-2026-15651 | Malicious | Not scored | 01 Sep, 2026 | npm @yane88/idea-2026.2-01 |
Malicious release: Malicious code in @yane88/idea-2026.2 (npm) GHSA-5qw7-3hqh-q33m, MAL-2026-15650 | Malicious | Not scored | 01 Sep, 2026 | npm @yane88/idea-2026.2 |
Malicious release: Malicious code in @yane88/idea-2026.2-02 (npm) GHSA-fgwh-qm8c-9mv8, MAL-2026-15652 | Malicious | Not scored | 01 Sep, 2026 | npm @yane88/idea-2026.2-02 |
Malicious release: Malicious code in @yane88/idea-2026.2-03 (npm) GHSA-fw5q-2vvv-w862, MAL-2026-15653 | Malicious | Not scored | 01 Sep, 2026 | npm @yane88/idea-2026.2-03 |
Malicious release: Malicious code in @yane88/idea-2026.2-06 (npm) GHSA-j62v-qq84-cr9v, MAL-2026-15656 | Malicious | Not scored | 01 Sep, 2026 | npm @yane88/idea-2026.2-06 |
Malicious release: Malicious code in @yane88/idea-2026.2-05 (npm) GHSA-mv54-8cx5-2fc9, MAL-2026-15655 | Malicious | Not scored | 01 Sep, 2026 | npm @yane88/idea-2026.2-05 |
Malicious release: Malicious code in @yane88/idea-2026.2-04 (npm) GHSA-xpjx-pwwq-qg46, MAL-2026-15654 | Malicious | Not scored | 01 Sep, 2026 | npm @yane88/idea-2026.2-04 |
Malicious release: Malicious code in matrix-by-lmx (npm) GHSA-jhgv-vh9h-q3r9, MAL-2026-15670 | Malicious | Not scored | 01 Sep, 2026 | npm matrix-by-lmx |
Malicious release: Malicious code in randomunblockedwebsite (npm) GHSA-5x4x-f7h5-6p47, MAL-2026-15672 | Malicious | Not scored | 01 Sep, 2026 | npm randomunblockedwebsite |
Malicious release: Malicious code in @fdr-mar/promos-types (npm) GHSA-gj3w-q938-w6m6, MAL-2026-15648 | Malicious | Not scored | 01 Sep, 2026 | npm @fdr-mar/promos-types |
Malicious release: Malicious code in kendo-angular-window (npm) GHSA-jjx4-p3qc-rhrq, MAL-2026-15669 | Malicious | Not scored | 01 Sep, 2026 | npm kendo-angular-window |
Malicious release: Malicious code in core_main (npm) GHSA-rxjr-qr5x-q4q7, MAL-2026-15668 | Malicious | Not scored | 01 Sep, 2026 | npm core_main |
Malicious release: Malicious code in quartz-core (npm) GHSA-w63g-6crc-rq2w, MAL-2026-15671 | Malicious | Not scored | 01 Sep, 2026 | npm quartz-core |