Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in fivem-tool-helper-v2 (npm) GHSA-qgxc-chq8-gvrg, MAL-2026-14521 | Malicious | Not scored | 26 Aug, 2026 | npm fivem-tool-helper-v2 |
Malicious release: Malicious code in fivem-tool-helper (npm) GHSA-7jgv-5jq7-38g6, MAL-2026-14520 | Malicious | Not scored | 26 Aug, 2026 | npm fivem-tool-helper |
Malicious release: Malicious code in hydration-ui-cls (npm) GHSA-596w-j9vp-pr5x, MAL-2026-14517 | Malicious | Not scored | 25 Aug, 2026 | npm hydration-ui-cls |
Malicious release: Malicious code in svelte-ui-cls (npm) GHSA-q88r-gcjf-c3jc, MAL-2026-14518 | Malicious | Not scored | 25 Aug, 2026 | npm svelte-ui-cls |
Malicious release: Malicious code in minecraft-ytreceiver (PyPI) MAL-2026-14516 | Malicious | Not scored | 25 Aug, 2026 | PyPI minecraft-ytreceiver |
Malicious release: Malicious code in bamru (npm) MAL-2026-15674 | Malicious | Not scored | 25 Aug, 2026 | npm bamru |
Malicious release: Malicious code in wm-eslint-fe (npm) GHSA-59qg-7f2g-4p3c, MAL-2026-14514 | Malicious | Not scored | 25 Aug, 2026 | npm wm-eslint-fe |
Malicious release: Malicious code in wm-lib-env-provider (npm) GHSA-54m9-xjx6-pf8x, MAL-2026-14515 | Malicious | Not scored | 25 Aug, 2026 | npm wm-lib-env-provider |
Malicious release: Malicious code in hexdrift (npm) GHSA-4p5f-gmxw-44x3, MAL-2026-14508 | Malicious | Not scored | 25 Aug, 2026 | npm hexdrift |
Malicious release: Malicious code in foldmap (npm) GHSA-q4hh-v9hg-92w7, MAL-2026-14507 | Malicious | Not scored | 25 Aug, 2026 | npm foldmap |
Malicious release: Malicious code in snapbuf (npm) GHSA-82xg-f5h2-7xf8, MAL-2026-14510 | Malicious | Not scored | 25 Aug, 2026 | npm snapbuf |
Malicious release: Malicious code in dim-svelte-ui (npm) GHSA-w5m9-548m-c928, MAL-2026-14506 | Malicious | Not scored | 25 Aug, 2026 | npm dim-svelte-ui |
Malicious release: Malicious code in svelte-cls-ui (npm) GHSA-f6cw-gvwj-gw7f, MAL-2026-14511 | Malicious | Not scored | 25 Aug, 2026 | npm svelte-cls-ui |
Malicious release: Malicious code in r4wk-book (npm) GHSA-jqfp-p3qc-cqm9, MAL-2026-14509 | Malicious | Not scored | 25 Aug, 2026 | npm r4wk-book |
Malicious release: Malicious code in typedoc-xyz (npm) GHSA-v386-vp36-g4h2, MAL-2026-14513 | Malicious | Not scored | 25 Aug, 2026 | npm typedoc-xyz |
Malicious release: Malicious code in tailwind-scrollbar-hider (npm) GHSA-869j-r989-xpvr, MAL-2026-14512 | Malicious | Not scored | 25 Aug, 2026 | npm tailwind-scrollbar-hider |
Malicious release: Malicious code in voice-crate-check (npm) GHSA-3vqr-jqwr-7m6q, MAL-2026-14505 | Malicious | Not scored | 25 Aug, 2026 | npm voice-crate-check |
Malicious release: Malicious code in video-crate-check (npm) GHSA-gwcq-5jcj-p2x4, MAL-2026-14504 | Malicious | Not scored | 25 Aug, 2026 | npm video-crate-check |
Malicious release: Malicious code in text-crate-check (npm) GHSA-c5pr-66ph-gfp9, MAL-2026-14503 | Malicious | Not scored | 25 Aug, 2026 | npm text-crate-check |
Malicious release: Malicious code in svelte-streak-map (npm) GHSA-79hp-j55f-97h5, MAL-2026-14500 | Malicious | Not scored | 25 Aug, 2026 | npm svelte-streak-map |
Malicious release: Malicious code in svelte-map-metric (npm) GHSA-2p6v-xwhm-f5h6, MAL-2026-14499 | Malicious | Not scored | 25 Aug, 2026 | npm svelte-map-metric |
Malicious release: Malicious code in svelte-hydration-streak (npm) GHSA-9jcj-426x-9rmq, MAL-2026-14495 | Malicious | Not scored | 25 Aug, 2026 | npm svelte-hydration-streak |
Malicious release: Malicious code in svelte-intake-streaks (npm) GHSA-hjjx-chqx-6225, MAL-2026-14498 | Malicious | Not scored | 25 Aug, 2026 | npm svelte-intake-streaks |
Malicious release: Malicious code in svelte-goal-streaks (npm) GHSA-jvfh-h9rq-x29f, MAL-2026-14494 | Malicious | Not scored | 25 Aug, 2026 | npm svelte-goal-streaks |
Malicious release: Malicious code in svelte-streak-panel (npm) GHSA-vvc8-cg5m-2pmp, MAL-2026-14501 | Malicious | Not scored | 25 Aug, 2026 | npm svelte-streak-panel |
Malicious release: Malicious code in svelte-streak-tracker (npm) GHSA-mvgf-wmjm-6q56, MAL-2026-14502 | Malicious | Not scored | 25 Aug, 2026 | npm svelte-streak-tracker |
Malicious release: Malicious code in svelte-insights-streak (npm) GHSA-qf7v-g3vj-m3w2, MAL-2026-14497 | Malicious | Not scored | 25 Aug, 2026 | npm svelte-insights-streak |
Malicious release: Malicious code in svelte-insight-streaks (npm) GHSA-m4w5-mww4-j2vr, MAL-2026-14496 | Malicious | Not scored | 25 Aug, 2026 | npm svelte-insight-streaks |
Malicious release: Malicious code in svelte-daily-streaks (npm) GHSA-xvrp-wvcw-8jrp, MAL-2026-14493 | Malicious | Not scored | 25 Aug, 2026 | npm svelte-daily-streaks |
Malicious release: Malicious code in spotify-url-infos (npm) MAL-2026-14492 | Malicious | Not scored | 25 Aug, 2026 | npm spotify-url-infos |
Malicious release: Malicious code in chai-as-otc (npm) MAL-2026-14491 | Malicious | Not scored | 25 Aug, 2026 | npm chai-as-otc |
Malicious release: Malicious code in mkb-manager (npm) GHSA-wvpv-8v52-pgq7, MAL-2026-14490 | Malicious | Not scored | 25 Aug, 2026 | npm mkb-manager |
Malicious release: Malicious code in hydration-cls-ui (npm) GHSA-q635-2q7j-grxm, MAL-2026-14489 | Malicious | Not scored | 25 Aug, 2026 | npm hydration-cls-ui |
Malicious release: Malicious code in modules-newline (npm) MAL-2026-14483 | Malicious | Not scored | 25 Aug, 2026 | npm modules-newline |
Malicious release: Malicious code in react-remove-properties (npm) GHSA-m8m4-9m7c-742j, MAL-2026-14484 | Malicious | Not scored | 25 Aug, 2026 | npm react-remove-properties |
Malicious release: Malicious code in python-walletlibr-v (PyPI) MAL-2026-14488 | Malicious | Not scored | 25 Aug, 2026 | PyPI python-walletlibr-v |
Malicious release: Malicious code in spf-analytics (npm) GHSA-fj97-8h42-crgr, MAL-2026-14486 | Malicious | Not scored | 25 Aug, 2026 | npm spf-analytics |
Malicious release: Malicious code in secretkey-2fa (npm) MAL-2026-14485 | Malicious | Not scored | 25 Aug, 2026 | npm secretkey-2fa |
Malicious release: Malicious code in spotify-url-resolovela (npm) MAL-2026-14487 | Malicious | Not scored | 25 Aug, 2026 | npm spotify-url-resolovela |
Malicious release: Malicious code in vite-plugin-images-analysis (npm) MAL-2026-14482 | Malicious | Not scored | 25 Aug, 2026 | npm vite-plugin-images-analysis |
Malicious release: Malicious code in vite-plugin-image-tracker (npm) MAL-2026-14481 | Malicious | Not scored | 25 Aug, 2026 | npm vite-plugin-image-tracker |
Malicious release: Malicious code in vite-plugin-bug-tracker (npm) MAL-2026-14479 | Malicious | Not scored | 25 Aug, 2026 | npm vite-plugin-bug-tracker |
Malicious release: Malicious code in vite-plugin-image-analysis (npm) MAL-2026-14480 | Malicious | Not scored | 25 Aug, 2026 | npm vite-plugin-image-analysis |
Malicious release: Malicious code in mham-js (npm) MAL-2026-14478 | Malicious | Not scored | 25 Aug, 2026 | npm mham-js |
Malicious release: Malicious code in js-soul (npm) MAL-2026-14477 | Malicious | Not scored | 25 Aug, 2026 | npm js-soul |
Malicious release: Malicious code in ecobee-home (npm) GHSA-fhh5-9f4g-qw3h, MAL-2026-14475 | Malicious | Not scored | 25 Aug, 2026 | npm ecobee-home |
Malicious release: Malicious code in ecobee2 (npm) GHSA-339h-mj38-2p38, MAL-2026-14476 | Malicious | Not scored | 25 Aug, 2026 | npm ecobee2 |
Malicious release: Malicious code in ecobee-api (npm) GHSA-v8ph-958r-cj9q, MAL-2026-14474 | Malicious | Not scored | 25 Aug, 2026 | npm ecobee-api |
Malicious release: Malicious code in css-import-order (npm) MAL-2026-14473 | Malicious | Not scored | 25 Aug, 2026 | npm css-import-order |
Malicious release: Malicious code in cscasereadserv-paypal (npm) MAL-2026-14472 | Malicious | Not scored | 25 Aug, 2026 | npm cscasereadserv-paypal |