Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in testingsmthb1g (npm) MAL-2026-14142 | Malicious | Not scored | 18 Aug, 2026 | npm testingsmthb1g |
Malicious release: Malicious code in test-npm-snurkeburk-hackerone (npm) MAL-2026-14141 | Malicious | Not scored | 18 Aug, 2026 | npm test-npm-snurkeburk-hackerone |
Malicious release: Malicious code in typscript-core (npm) MAL-2026-14157 | Malicious | Not scored | 18 Aug, 2026 | npm typscript-core |
Malicious release: Malicious code in typscript-cli (npm) MAL-2026-14156 | Malicious | Not scored | 18 Aug, 2026 | npm typscript-cli |
Malicious release: Malicious code in typesript-cli (npm) MAL-2026-14154 | Malicious | Not scored | 18 Aug, 2026 | npm typesript-cli |
Malicious release: Malicious code in typesript-core (npm) MAL-2026-14155 | Malicious | Not scored | 18 Aug, 2026 | npm typesript-core |
Malicious release: Malicious code in typescrit-cli (npm) MAL-2026-14153 | Malicious | Not scored | 18 Aug, 2026 | npm typescrit-cli |
Malicious release: Malicious code in typescriptt-core (npm) MAL-2026-14152 | Malicious | Not scored | 18 Aug, 2026 | npm typescriptt-core |
Malicious release: Malicious code in typescirpt-core (npm) MAL-2026-14149 | Malicious | Not scored | 18 Aug, 2026 | npm typescirpt-core |
Malicious release: Malicious code in typescrip-cli (npm) MAL-2026-14150 | Malicious | Not scored | 18 Aug, 2026 | npm typescrip-cli |
Malicious release: Malicious code in typescirpt-cli (npm) MAL-2026-14148 | Malicious | Not scored | 18 Aug, 2026 | npm typescirpt-cli |
Malicious release: Malicious code in typescriptt-cli (npm) MAL-2026-14151 | Malicious | Not scored | 18 Aug, 2026 | npm typescriptt-cli |
Malicious release: Malicious code in tyepescript-core (npm) MAL-2026-14144 | Malicious | Not scored | 18 Aug, 2026 | npm tyepescript-core |
Malicious release: Malicious code in typecript-cli (npm) MAL-2026-14145 | Malicious | Not scored | 18 Aug, 2026 | npm typecript-cli |
Malicious release: Malicious code in typescipt-core (npm) MAL-2026-14147 | Malicious | Not scored | 18 Aug, 2026 | npm typescipt-core |
Malicious release: Malicious code in typescipt-cli (npm) MAL-2026-14146 | Malicious | Not scored | 18 Aug, 2026 | npm typescipt-cli |
Malicious release: Malicious code in tyepescript-cli (npm) MAL-2026-14143 | Malicious | Not scored | 18 Aug, 2026 | npm tyepescript-cli |
Malicious release: Malicious code in @mohamed_nowisar/token3-check (npm) MAL-2026-14135 | Malicious | Not scored | 18 Aug, 2026 | npm @mohamed_nowisar/token3-check |
Malicious release: Malicious code in @mohamed_nowisar/depconf-canary-test (npm) MAL-2026-14134 | Malicious | Not scored | 18 Aug, 2026 | npm @mohamed_nowisar/depconf-canary-test |
Malicious release: Malicious code in agora402-payment-utils (npm) GHSA-pvr5-m9hx-xxfr, MAL-2026-14136 | Malicious | Not scored | 18 Aug, 2026 | npm agora402-payment-utils |
Malicious release: Malicious code in mtslink-depconf-probe-profileusername (npm) MAL-2026-14137 | Malicious | Not scored | 18 Aug, 2026 | npm mtslink-depconf-probe-profileusername |
Malicious release: Malicious code in optimizely-starter-kit-for-fastly-compute (npm) GHSA-8pfr-f8q3-mr5x, MAL-2026-14138 | Malicious | Not scored | 18 Aug, 2026 | npm optimizely-starter-kit-for-fastly-compute |
Malicious release: Malicious code in prism-registry (npm) GHSA-gvgw-fqw6-f4rw, MAL-2026-14139 | Malicious | Not scored | 18 Aug, 2026 | npm prism-registry |
Malicious release: Malicious code in deepface-weight (PyPI) MAL-2026-14158 | Malicious | Not scored | 18 Aug, 2026 | PyPI deepface-weight |
Malicious release: Malicious code in vite-svg-config (npm) MAL-2026-14140 | Malicious | Not scored | 18 Aug, 2026 | npm vite-svg-config |
Malicious release: Malicious code in reqcrypt (PyPI) MAL-2026-14133 | Malicious | Not scored | 18 Aug, 2026 | PyPI reqcrypt |
Malicious release: Malicious code in deepface-weights (PyPI) MAL-2026-14132 | Malicious | Not scored | 18 Aug, 2026 | PyPI deepface-weights |
Malicious release: Malicious code in infogram-bot (PyPI) MAL-2026-14131 | Malicious | Not scored | 18 Aug, 2026 | PyPI infogram-bot |
Malicious release: Malicious code in httpz-requests (PyPI) MAL-2026-14130 | Malicious | Not scored | 18 Aug, 2026 | PyPI httpz-requests |
Malicious release: Malicious code in plugin-react-vite (npm) GHSA-xjmp-gcmw-2xxm, MAL-2026-14129 | Malicious | Not scored | 18 Aug, 2026 | npm plugin-react-vite |
Malicious release: Malicious code in @reducers/projects (npm) GHSA-3jm4-64fg-x3gh, MAL-2026-14127 | Malicious | Not scored | 18 Aug, 2026 | npm @reducers/projects |
Malicious release: Malicious code in @guildai-services/guildai (npm) GHSA-7322-f886-qg4p, MAL-2026-14125 | Malicious | Not scored | 18 Aug, 2026 | npm @guildai-services/guildai |
Malicious release: Malicious code in @milleree/date-display (npm) GHSA-p7f6-r5h9-5w5w, MAL-2026-14126 | Malicious | Not scored | 18 Aug, 2026 | npm @milleree/date-display |
Malicious release: Malicious code in motionspring (npm) GHSA-f96p-92vv-5j49, MAL-2026-14128 | Malicious | Not scored | 18 Aug, 2026 | npm motionspring |
Malicious release: Malicious code in alphazone (npm) GHSA-58r2-5x99-cjrp, MAL-2026-14124 | Malicious | Not scored | 18 Aug, 2026 | npm alphazone |
Malicious release: Malicious code in @oyo_tech/oyochat_user (npm) MAL-2026-14123 | Malicious | Not scored | 18 Aug, 2026 | npm @oyo_tech/oyochat_user |
Malicious release: Malicious code in bcc-design-icons (npm) GHSA-73q2-99qx-v576, MAL-2026-14119, SNYK-JS-BCCDESIGNICONS-19003147 | Malicious | Not scored | 18 Aug, 2026 | npm bcc-design-icons |
Malicious release: Malicious code in bcc-design (npm) GHSA-v36x-48h2-hc4f, MAL-2026-14117, SNYK-JS-BCCDESIGN-19003146 | Malicious | Not scored | 18 Aug, 2026 | npm bcc-design |
Malicious release: Malicious code in core-tailwindcss-utility (npm) MAL-2026-14118 | Malicious | Not scored | 18 Aug, 2026 | npm core-tailwindcss-utility |
Malicious release: Malicious code in blastradar (npm) GHSA-pp9x-4g56-7322, MAL-2026-14120 | Malicious | Not scored | 18 Aug, 2026 | npm blastradar |
Malicious release: Malicious code in ulebkit (npm) GHSA-w4vj-4cxr-299x, MAL-2026-14122 | Malicious | Not scored | 18 Aug, 2026 | npm ulebkit |
Malicious release: Malicious code in sui-move-graphql (npm) GHSA-xgmm-vq93-f5vx, MAL-2026-14121 | Malicious | Not scored | 18 Aug, 2026 | npm sui-move-graphql |
Malicious release: Malicious code in socks5901 (PyPI) MAL-2026-14100 | Malicious | Not scored | 17 Aug, 2026 | PyPI socks5901 |
Malicious release: Malicious code in sui-move-rpc (npm) GHSA-342c-493g-f389, MAL-2026-14113 | Malicious | Not scored | 17 Aug, 2026 | npm sui-move-rpc |
Malicious release: Malicious code in bcs-core (npm) GHSA-5w7j-92p9-p5h4, MAL-2026-14105 | Malicious | Not scored | 17 Aug, 2026 | npm bcs-core |
Malicious release: Malicious code in leb128x (npm) GHSA-p98p-7p39-8v79, MAL-2026-14109 | Malicious | Not scored | 17 Aug, 2026 | npm leb128x |
Malicious release: Malicious code in sui-gql-core (npm) GHSA-rg66-wjvq-h8xm, MAL-2026-14112 | Malicious | Not scored | 17 Aug, 2026 | npm sui-gql-core |
Malicious release: Malicious code in reseller-app (npm) GHSA-x3qj-pjpv-x4c6, MAL-2026-14110 | Malicious | Not scored | 17 Aug, 2026 | npm reseller-app |
Malicious release: Malicious code in club-sauce (npm) GHSA-vm8j-8r82-992m, MAL-2026-14107 | Malicious | Not scored | 17 Aug, 2026 | npm club-sauce |
Malicious release: Malicious code in sugarball-cli (npm) GHSA-5v79-352p-4p25, MAL-2026-14111 | Malicious | Not scored | 17 Aug, 2026 | npm sugarball-cli |