Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in alelo-sdk (npm) GHSA-mqpp-48wh-cm9m, MAL-2026-14026 | Malicious | Not scored | 14 Aug, 2026 | npm alelo-sdk |
Malicious release: Malicious code in datefmt-core-utils (npm) MAL-2026-14031 | Malicious | Not scored | 14 Aug, 2026 | npm datefmt-core-utils |
Malicious release: Malicious code in datefmt-simple-utils (npm) MAL-2026-14032 | Malicious | Not scored | 14 Aug, 2026 | npm datefmt-simple-utils |
Malicious release: Malicious code in alelo-utils (npm) GHSA-chg6-4g6x-82gw, MAL-2026-14028 | Malicious | Not scored | 14 Aug, 2026 | npm alelo-utils |
Malicious release: Malicious code in tailwind-plugin-kit (npm) MAL-2026-14037 | Malicious | Not scored | 14 Aug, 2026 | npm tailwind-plugin-kit |
Malicious release: Malicious code in alelo-payment (npm) GHSA-4whx-hjpv-g8xf, MAL-2026-14025 | Malicious | Not scored | 14 Aug, 2026 | npm alelo-payment |
Malicious release: Malicious code in alelo-common (npm) GHSA-4w9c-fcxm-hf28, MAL-2026-14023 | Malicious | Not scored | 14 Aug, 2026 | npm alelo-common |
Malicious release: Malicious code in meualelo (npm) GHSA-m6g5-fpx6-6x7v, MAL-2026-14033 | Malicious | Not scored | 14 Aug, 2026 | npm meualelo |
Malicious release: Malicious code in tailwind-toolkit (npm) MAL-2026-14038 | Malicious | Not scored | 14 Aug, 2026 | npm tailwind-toolkit |
Malicious release: Malicious code in bootstrap-custom-ui (npm) MAL-2026-14030 | Malicious | Not scored | 14 Aug, 2026 | npm bootstrap-custom-ui |
Malicious release: Malicious code in alelo-core (npm) GHSA-pwg9-w9cr-cg23, MAL-2026-14024 | Malicious | Not scored | 14 Aug, 2026 | npm alelo-core |
Malicious release: Malicious code in alelo-services (npm) GHSA-f9gp-j44v-7447, MAL-2026-14027 | Malicious | Not scored | 14 Aug, 2026 | npm alelo-services |
Malicious release: Malicious code in notafollower1226 (npm) MAL-2026-14036 | Malicious | Not scored | 14 Aug, 2026 | npm notafollower1226 |
Malicious release: Malicious code in alelo-client (npm) GHSA-v865-m9wp-5xhc, MAL-2026-14022 | Malicious | Not scored | 14 Aug, 2026 | npm alelo-client |
Malicious release: Malicious code in notafollower122 (npm) MAL-2026-14035 | Malicious | Not scored | 14 Aug, 2026 | npm notafollower122 |
Malicious release: Malicious code in notafollower1 (npm) MAL-2026-14034 | Malicious | Not scored | 14 Aug, 2026 | npm notafollower1 |
Malicious release: Malicious code in heft-storybook-v6-react-tutorial-storykit (npm) GHSA-p9w8-w4px-249v, MAL-2026-14083 | Malicious | Not scored | 14 Aug, 2026 | npm heft-storybook-v6-react-tutorial-storykit |
Malicious release: Malicious code in ak-mal-test-poc (npm) GHSA-p2rc-847p-5jpq, MAL-2026-14075 | Malicious | Not scored | 14 Aug, 2026 | npm ak-mal-test-poc |
Malicious release: Malicious code in game_overlay (npm) GHSA-8g9r-jp73-9wqr, MAL-2026-14081 | Malicious | Not scored | 14 Aug, 2026 | npm game_overlay |
Malicious release: Malicious code in pocbitbarrontest (npm) GHSA-55p8-9h4q-g3jf, MAL-2026-14091 | Malicious | Not scored | 14 Aug, 2026 | npm pocbitbarrontest |
Malicious release: Malicious code in zip-bundle (npm) GHSA-c3r4-rgqq-2f7v, MAL-2026-14099 | Malicious | Not scored | 14 Aug, 2026 | npm zip-bundle |
Malicious release: Malicious code in dinotech-auth-utils (npm) GHSA-xhcw-fx9m-56pc, MAL-2026-14077 | Malicious | Not scored | 14 Aug, 2026 | npm dinotech-auth-utils |
Malicious release: Malicious code in @veertly/web-app (npm) GHSA-cj2v-gp59-8682, MAL-2026-14073 | Malicious | Not scored | 14 Aug, 2026 | npm @veertly/web-app |
Malicious release: Malicious code in @vyzensockets/baileys (npm) GHSA-7q4x-h5q4-8q8m, MAL-2026-14074 | Malicious | Not scored | 14 Aug, 2026 | npm @vyzensockets/baileys |
Malicious release: Malicious code in hrp9872 (npm) GHSA-fc8q-7g22-2mh2, MAL-2026-14085 | Malicious | Not scored | 14 Aug, 2026 | npm hrp9872 |
Malicious release: Malicious code in hrp9871 (npm) GHSA-969j-h3jv-fm8w, MAL-2026-14084 | Malicious | Not scored | 14 Aug, 2026 | npm hrp9871 |
Malicious release: Malicious code in npm_pkg_1094 (npm) GHSA-mmwr-73mc-579v, MAL-2026-14090 | Malicious | Not scored | 14 Aug, 2026 | npm npm_pkg_1094 |
Malicious release: Malicious code in npm_pkg_1093 (npm) GHSA-m24g-rf73-rmgw, MAL-2026-14089 | Malicious | Not scored | 14 Aug, 2026 | npm npm_pkg_1093 |
Malicious release: Malicious code in rimo-env-validator (npm) GHSA-vxrx-29h5-w69f, MAL-2026-14092 | Malicious | Not scored | 14 Aug, 2026 | npm rimo-env-validator |
Malicious release: Malicious code in utils-bundle (npm) GHSA-w78x-223m-8f3j, MAL-2026-14098 | Malicious | Not scored | 14 Aug, 2026 | npm utils-bundle |
Malicious release: Malicious code in elf-stats-cranberry-wishlist-933 (npm) GHSA-6hmg-xwg7-v3gq, MAL-2026-14079 | Malicious | Not scored | 14 Aug, 2026 | npm elf-stats-cranberry-wishlist-933 |
Malicious release: Malicious code in elf-stats-caroling-stocking-510 (npm) GHSA-ggp7-664r-m55m, MAL-2026-14078 | Malicious | Not scored | 14 Aug, 2026 | npm elf-stats-caroling-stocking-510 |
Malicious release: Malicious code in thepackagethatworks_ (npm) GHSA-9vjx-6rvc-2p3c, MAL-2026-14097 | Malicious | Not scored | 14 Aug, 2026 | npm thepackagethatworks_ |
Malicious release: Malicious code in google-logging-utils-internal (npm) GHSA-jcx5-6w99-v44p, MAL-2026-14082 | Malicious | Not scored | 14 Aug, 2026 | npm google-logging-utils-internal |
Malicious release: Malicious code in mw-filesystem-events-nodream-es6 (npm) GHSA-2cr5-3f7h-7vv6, MAL-2026-14087 | Malicious | Not scored | 14 Aug, 2026 | npm mw-filesystem-events-nodream-es6 |
Malicious release: Malicious code in rtms-manager-dev (npm) GHSA-88hw-5c75-wg74, MAL-2026-14093 | Malicious | Not scored | 14 Aug, 2026 | npm rtms-manager-dev |
Malicious release: Malicious code in expect-bundle (npm) GHSA-f24w-wg35-f2f2, MAL-2026-14080 | Malicious | Not scored | 14 Aug, 2026 | npm expect-bundle |
Malicious release: Malicious code in nolimitcity (npm) GHSA-ph66-8fq6-fjpg, MAL-2026-14088 | Malicious | Not scored | 14 Aug, 2026 | npm nolimitcity |
Malicious release: Malicious code in saps_secplayground_npm_ai (npm) GHSA-637f-42g5-85p4, MAL-2026-14094 | Malicious | Not scored | 14 Aug, 2026 | npm saps_secplayground_npm_ai |
Malicious release: Malicious code in fr-ito-web-react (npm) MAL-2026-14019 | Malicious | Not scored | 14 Aug, 2026 | npm fr-ito-web-react |
Malicious release: Malicious code in preinstall-hook-webhook-callback-demo (npm) MAL-2026-14016 | Malicious | Not scored | 13 Aug, 2026 | npm preinstall-hook-webhook-callback-demo |
Malicious release: Malicious code in wct-st (npm) MAL-2026-13990 | Malicious | Not scored | 13 Aug, 2026 | npm wct-st |
Malicious release: Malicious code in webautomation_js (npm) MAL-2026-13991 | Malicious | Not scored | 13 Aug, 2026 | npm webautomation_js |
Malicious release: Malicious code in @secauditb20y/sec-test-r3b (npm) MAL-2026-13989 | Malicious | Not scored | 13 Aug, 2026 | npm @secauditb20y/sec-test-r3b |
Malicious release: Malicious code in root-locator (npm) GHSA-57g4-vm3v-74xg, MAL-2026-14009 | Malicious | Not scored | 13 Aug, 2026 | npm root-locator |
Malicious release: Malicious code in source-analyzer (npm) GHSA-p68g-6893-44r8, MAL-2026-14013 | Malicious | Not scored | 13 Aug, 2026 | npm source-analyzer |
Malicious release: Malicious code in path-match-js (npm) GHSA-cgj7-7fj2-6r74, MAL-2026-14005 | Malicious | Not scored | 13 Aug, 2026 | npm path-match-js |
Malicious release: Malicious code in react-shield (npm) GHSA-gmx3-395m-pwc2, MAL-2026-14007 | Malicious | Not scored | 13 Aug, 2026 | npm react-shield |
Malicious release: Malicious code in @jacksher/install-exec-poc (npm) GHSA-4fj2-wwv5-x646, MAL-2026-13972 | Malicious | Not scored | 13 Aug, 2026 | npm @jacksher/install-exec-poc |
Malicious release: Malicious code in node-config-svg-contract (npm) MAL-2026-13985 | Malicious | Not scored | 13 Aug, 2026 | npm node-config-svg-contract |