Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in mham-js (npm) MAL-2026-14478 | Malicious | Not scored | 25 Aug, 2026 | npm mham-js |
Malicious release: Malicious code in js-soul (npm) MAL-2026-14477 | Malicious | Not scored | 25 Aug, 2026 | npm js-soul |
Malicious release: Malicious code in ecobee-home (npm) GHSA-fhh5-9f4g-qw3h, MAL-2026-14475 | Malicious | Not scored | 25 Aug, 2026 | npm ecobee-home |
Malicious release: Malicious code in ecobee2 (npm) GHSA-339h-mj38-2p38, MAL-2026-14476 | Malicious | Not scored | 25 Aug, 2026 | npm ecobee2 |
Malicious release: Malicious code in ecobee-api (npm) GHSA-v8ph-958r-cj9q, MAL-2026-14474 | Malicious | Not scored | 25 Aug, 2026 | npm ecobee-api |
Malicious release: Malicious code in css-import-order (npm) MAL-2026-14473 | Malicious | Not scored | 25 Aug, 2026 | npm css-import-order |
Malicious release: Malicious code in cscasereadserv-paypal (npm) MAL-2026-14472 | Malicious | Not scored | 25 Aug, 2026 | npm cscasereadserv-paypal |
Malicious release: Malicious code in cat-embed-i18n-res (npm) MAL-2026-14471 | Malicious | Not scored | 25 Aug, 2026 | npm cat-embed-i18n-res |
Malicious release: Malicious code in whatsgoodlookingbabycreed (npm) GHSA-3jr7-rgw6-prgf, MAL-2026-14470 | Malicious | Not scored | 25 Aug, 2026 | npm whatsgoodlookingbabycreed |
Malicious release: Malicious code in desmosmathwork (npm) GHSA-3vxp-vqwp-3vmh, MAL-2026-14456 | Malicious | Not scored | 25 Aug, 2026 | npm desmosmathwork |
Malicious release: Malicious code in ilovedesmos (npm) GHSA-3wf6-8h38-rvjr, MAL-2026-14460 | Malicious | Not scored | 25 Aug, 2026 | npm ilovedesmos |
Malicious release: Malicious code in schoollesson (npm) GHSA-4q3f-7qxr-pfm4, MAL-2026-14464 | Malicious | Not scored | 25 Aug, 2026 | npm schoollesson |
Malicious release: Malicious code in desmosschoolwork (npm) GHSA-4v42-34fj-5p2w, MAL-2026-14457 | Malicious | Not scored | 25 Aug, 2026 | npm desmosschoolwork |
Malicious release: Malicious code in classhomework (npm) GHSA-5rhm-fgq5-c8mf, MAL-2026-14446 | Malicious | Not scored | 25 Aug, 2026 | npm classhomework |
Malicious release: Malicious code in tungtunggod (npm) GHSA-6h57-7m4x-f6v7, MAL-2026-14468 | Malicious | Not scored | 25 Aug, 2026 | npm tungtunggod |
Malicious release: Malicious code in desmosclasswork (npm) GHSA-752h-3q4v-jhq7, MAL-2026-14452 | Malicious | Not scored | 25 Aug, 2026 | npm desmosclasswork |
Malicious release: Malicious code in classwork (npm) GHSA-776h-qpf5-rx46, MAL-2026-14451 | Malicious | Not scored | 25 Aug, 2026 | npm classwork |
Malicious release: Malicious code in desmoshomework (npm) GHSA-8vvg-qhfh-7h74, MAL-2026-14453 | Malicious | Not scored | 25 Aug, 2026 | npm desmoshomework |
Malicious release: Malicious code in superdupertest111 (npm) GHSA-99f7-924m-fp2c, MAL-2026-14467 | Malicious | Not scored | 25 Aug, 2026 | npm superdupertest111 |
Malicious release: Malicious code in classroomlesson (npm) GHSA-9x5r-mwwj-hpg6, MAL-2026-14449 | Malicious | Not scored | 25 Aug, 2026 | npm classroomlesson |
Malicious release: Malicious code in iamhungryrn (npm) GHSA-chwh-2rv3-4c2f, MAL-2026-14459 | Malicious | Not scored | 25 Aug, 2026 | npm iamhungryrn |
Malicious release: Malicious code in iwantaburger (npm) GHSA-gcgg-jh5v-64hh, MAL-2026-14461 | Malicious | Not scored | 25 Aug, 2026 | npm iwantaburger |
Malicious release: Malicious code in classroomhomework (npm) GHSA-hrpx-q7gr-p9g5, MAL-2026-14448 | Malicious | Not scored | 25 Aug, 2026 | npm classroomhomework |
Malicious release: Malicious code in desmosistuff (npm) GHSA-j367-pvh3-755f, MAL-2026-14455 | Malicious | Not scored | 25 Aug, 2026 | npm desmosistuff |
Malicious release: Malicious code in schoolwork (npm) GHSA-m62q-p4m5-72m6, MAL-2026-14465 | Malicious | Not scored | 25 Aug, 2026 | npm schoolwork |
Malicious release: Malicious code in desmoswork (npm) GHSA-m8cf-32j6-jq72, MAL-2026-14458 | Malicious | Not scored | 25 Aug, 2026 | npm desmoswork |
Malicious release: Malicious code in desmosisfire (npm) GHSA-mwq6-6g7q-rjxp, MAL-2026-14454 | Malicious | Not scored | 25 Aug, 2026 | npm desmosisfire |
Malicious release: Malicious code in schoolhomework (npm) GHSA-mx5q-7285-qm6f, MAL-2026-14463 | Malicious | Not scored | 25 Aug, 2026 | npm schoolhomework |
Malicious release: Malicious code in classlesson (npm) GHSA-rxrv-wfcx-mpjc, MAL-2026-14447 | Malicious | Not scored | 25 Aug, 2026 | npm classlesson |
Malicious release: Malicious code in pleasedoyourhomework (npm) GHSA-w62m-775m-86f2, MAL-2026-14462 | Malicious | Not scored | 25 Aug, 2026 | npm pleasedoyourhomework |
Malicious release: Malicious code in classroomwork (npm) GHSA-wqmh-qmf4-3f8p, MAL-2026-14450 | Malicious | Not scored | 25 Aug, 2026 | npm classroomwork |
Malicious release: Malicious code in sonsonsahur (npm) GHSA-xv2p-qw82-6xmj, MAL-2026-14466 | Malicious | Not scored | 25 Aug, 2026 | npm sonsonsahur |
Malicious release: Malicious code in tungtungisgoated (npm) GHSA-xv9m-378j-86x3, MAL-2026-14469 | Malicious | Not scored | 25 Aug, 2026 | npm tungtungisgoated |
Malicious release: Malicious code in digitalexp-style-module-l9 (npm) GHSA-r7fr-v3m3-mpq2, MAL-2026-14445 | Malicious | Not scored | 25 Aug, 2026 | npm digitalexp-style-module-l9 |
Malicious release: Malicious code in unifi-credential-server (npm) MAL-2026-15692 | Malicious | Not scored | 24 Aug, 2026 | npm unifi-credential-server |
Malicious release: Malicious code in react-hook-doms (npm) MAL-2026-15691 | Malicious | Not scored | 24 Aug, 2026 | npm react-hook-doms |
Malicious release: Malicious code in mongosooe (npm) MAL-2026-15690 | Malicious | Not scored | 24 Aug, 2026 | npm mongosooe |
Malicious release: Malicious code in lil-swisgom-hlepers (npm) MAL-2026-15689 | Malicious | Not scored | 24 Aug, 2026 | npm lil-swisgom-hlepers |
Malicious release: Malicious code in leaflet-opencage-geocoding (npm) MAL-2026-15688 | Malicious | Not scored | 24 Aug, 2026 | npm leaflet-opencage-geocoding |
Malicious release: Malicious code in @medisend/shared (npm) GHSA-f6mp-mchf-ppcc, MAL-2026-14423 | Malicious | Not scored | 24 Aug, 2026 | npm @medisend/shared |
Malicious release: Malicious code in chai-as-mno (npm) MAL-2026-14427 | Malicious | Not scored | 24 Aug, 2026 | npm chai-as-mno |
Malicious release: Malicious code in @medisend/auth (npm) GHSA-cpvc-ph75-5rf3, MAL-2026-14421 | Malicious | Not scored | 24 Aug, 2026 | npm @medisend/auth |
Malicious release: Malicious code in @medisend/core (npm) GHSA-wfxf-4cwg-r55p, MAL-2026-14422 | Malicious | Not scored | 24 Aug, 2026 | npm @medisend/core |
Malicious release: Malicious code in kelly-stake-sizing (npm) GHSA-h8rr-x7cp-4h62, MAL-2026-14432 | Malicious | Not scored | 24 Aug, 2026 | npm kelly-stake-sizing |
Malicious release: Malicious code in openai-pr-reviewer (npm) GHSA-wpv4-wxrh-hvmh, MAL-2026-14434 | Malicious | Not scored | 24 Aug, 2026 | npm openai-pr-reviewer |
Malicious release: Malicious code in consumerweb-serverutils (npm) MAL-2026-14428 | Malicious | Not scored | 24 Aug, 2026 | npm consumerweb-serverutils |
Malicious release: Malicious code in babel-polyfill-plugin-corejs2 (npm) GHSA-9g6r-83hw-6cq2, MAL-2026-14426 | Malicious | Not scored | 24 Aug, 2026 | npm babel-polyfill-plugin-corejs2 |
Malicious release: Malicious code in poly-price-node (npm) MAL-2026-14436 | Malicious | Not scored | 24 Aug, 2026 | npm poly-price-node |
Malicious release: Malicious code in auth-otp (npm) MAL-2026-14425 | Malicious | Not scored | 24 Aug, 2026 | npm auth-otp |
Malicious release: Malicious code in remove-bg-serverless-azure (npm) GHSA-65rf-pp5h-8fw9, MAL-2026-14438 | Malicious | Not scored | 24 Aug, 2026 | npm remove-bg-serverless-azure |