Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in path-match-js (npm) GHSA-cgj7-7fj2-6r74, MAL-2026-14005 | Malicious | Not scored | 13 Aug, 2026 | npm path-match-js |
Malicious release: Malicious code in react-shield (npm) GHSA-gmx3-395m-pwc2, MAL-2026-14007 | Malicious | Not scored | 13 Aug, 2026 | npm react-shield |
Malicious release: Malicious code in @jacksher/install-exec-poc (npm) GHSA-4fj2-wwv5-x646, MAL-2026-13972 | Malicious | Not scored | 13 Aug, 2026 | npm @jacksher/install-exec-poc |
Malicious release: Malicious code in node-config-svg-contract (npm) MAL-2026-13985 | Malicious | Not scored | 13 Aug, 2026 | npm node-config-svg-contract |
Malicious release: Malicious code in notafollower (npm) MAL-2026-13986 | Malicious | Not scored | 13 Aug, 2026 | npm notafollower |
Malicious release: Malicious code in datefmt-util-helper (npm) MAL-2026-13978 | Malicious | Not scored | 13 Aug, 2026 | npm datefmt-util-helper |
Malicious release: Malicious code in @khaznatech/common (npm) MAL-2026-13973 | Malicious | Not scored | 13 Aug, 2026 | npm @khaznatech/common |
Malicious release: Malicious code in @khaznatech/utils (npm) MAL-2026-13975 | Malicious | Not scored | 13 Aug, 2026 | npm @khaznatech/utils |
Malicious release: Malicious code in @khaznatech/core (npm) MAL-2026-13974 | Malicious | Not scored | 13 Aug, 2026 | npm @khaznatech/core |
Malicious release: Malicious code in check-audit (npm) GHSA-qqm3-3cpw-q9xx, MAL-2026-13976 | Malicious | Not scored | 13 Aug, 2026 | npm check-audit |
Malicious release: Malicious code in in-install (npm) GHSA-3qfv-pgqh-pvpw, MAL-2026-13982 | Malicious | Not scored | 13 Aug, 2026 | npm in-install |
Malicious release: Malicious code in cspell-esm (npm) GHSA-97mm-cxmj-h672, MAL-2026-13977 | Malicious | Not scored | 13 Aug, 2026 | npm cspell-esm |
Malicious release: Malicious code in napi-raw (npm) GHSA-588j-2jx3-7mqj, MAL-2026-13984 | Malicious | Not scored | 13 Aug, 2026 | npm napi-raw |
Malicious release: Malicious code in eslint-generate-prerelease (npm) GHSA-wqfp-7qwr-4r4g, MAL-2026-13979 | Malicious | Not scored | 13 Aug, 2026 | npm eslint-generate-prerelease |
Malicious release: Malicious code in knip-bun (npm) GHSA-xrrj-hrq9-xvxg, MAL-2026-13983 | Malicious | Not scored | 13 Aug, 2026 | npm knip-bun |
Malicious release: Malicious code in eslint-generate-release (npm) GHSA-3pw3-hc35-j73p, MAL-2026-13980 | Malicious | Not scored | 13 Aug, 2026 | npm eslint-generate-release |
Malicious release: Malicious code in eslint-publish-release (npm) GHSA-rqq3-8xp4-pvcq, MAL-2026-13981 | Malicious | Not scored | 13 Aug, 2026 | npm eslint-publish-release |
Malicious release: Malicious code in resolve-audit (npm) GHSA-69qf-g8jq-47xv, MAL-2026-13987 | Malicious | Not scored | 13 Aug, 2026 | npm resolve-audit |
Malicious release: Malicious code in @hzero-front-ui/cfg (npm) MAL-2026-13968 | Malicious | Not scored | 13 Aug, 2026 | npm @hzero-front-ui/cfg |
Malicious release: Malicious code in @hzero-front-ui/c7n-ui (npm) MAL-2026-13967 | Malicious | Not scored | 13 Aug, 2026 | npm @hzero-front-ui/c7n-ui |
Malicious release: Malicious code in @hzero-front-ui/core (npm) MAL-2026-13969 | Malicious | Not scored | 13 Aug, 2026 | npm @hzero-front-ui/core |
Malicious release: Malicious code in @hzero-front-ui/hzero-ui (npm) MAL-2026-13970 | Malicious | Not scored | 13 Aug, 2026 | npm @hzero-front-ui/hzero-ui |
Malicious release: Malicious code in @hzero-front-ui/themes (npm) MAL-2026-13971 | Malicious | Not scored | 13 Aug, 2026 | npm @hzero-front-ui/themes |
Malicious release: Malicious code in xrblocks-mcp (npm) MAL-2026-13988 | Malicious | Not scored | 13 Aug, 2026 | npm xrblocks-mcp |
Malicious release: Malicious code in tizen-webdriver-cli (npm) MAL-2026-13966 | Malicious | Not scored | 13 Aug, 2026 | npm tizen-webdriver-cli |
Malicious release: Malicious code in nc-verify-127942 (npm) MAL-2026-13965 | Malicious | Not scored | 13 Aug, 2026 | npm nc-verify-127942 |
Malicious release: Malicious code in @solana-js/web3 (npm) MAL-2026-13941 | Malicious | Not scored | 13 Aug, 2026 | npm @solana-js/web3 |
Malicious release: Malicious code in external-process-live-log (npm) MAL-2026-13949 | Malicious | Not scored | 13 Aug, 2026 | npm external-process-live-log |
Malicious release: Malicious code in @leonardo0902/vortex-kit (npm) MAL-2026-13939 | Malicious | Not scored | 13 Aug, 2026 | npm @leonardo0902/vortex-kit |
Malicious release: Malicious code in global-intel (npm) GHSA-gr4h-f42r-xcxf, MAL-2026-13952 | Malicious | Not scored | 13 Aug, 2026 | npm global-intel |
Malicious release: Malicious code in vexium-kit (npm) MAL-2026-13963 | Malicious | Not scored | 13 Aug, 2026 | npm vexium-kit |
Malicious release: Malicious code in @kolbo/mcp (npm) MAL-2026-13938 | Malicious | Not scored | 13 Aug, 2026 | npm @kolbo/mcp |
Malicious release: Malicious code in ventra-kit (npm) MAL-2026-13962 | Malicious | Not scored | 13 Aug, 2026 | npm ventra-kit |
Malicious release: Malicious code in prediction-trader (npm) MAL-2026-13959 | Malicious | Not scored | 13 Aug, 2026 | npm prediction-trader |
Malicious release: Malicious code in velora-kit (npm) GHSA-c48p-mmxp-3g9c, MAL-2026-13961 | Malicious | Not scored | 13 Aug, 2026 | npm velora-kit |
Malicious release: Malicious code in chai-as-reformed (npm) MAL-2026-13942 | Malicious | Not scored | 13 Aug, 2026 | npm chai-as-reformed |
Malicious release: Malicious code in functions-framework-nodejs (npm) MAL-2026-13951 | Malicious | Not scored | 13 Aug, 2026 | npm functions-framework-nodejs |
Malicious release: Malicious code in cilm-ui-commons (npm) MAL-2026-13943 | Malicious | Not scored | 13 Aug, 2026 | npm cilm-ui-commons |
Malicious release: Malicious code in copytrade-core (npm) MAL-2026-13944 | Malicious | Not scored | 13 Aug, 2026 | npm copytrade-core |
Malicious release: Malicious code in fmt-util-k7x2 (npm) MAL-2026-13950 | Malicious | Not scored | 13 Aug, 2026 | npm fmt-util-k7x2 |
Malicious release: Malicious code in process-live-log (npm) MAL-2026-13960 | Malicious | Not scored | 13 Aug, 2026 | npm process-live-log |
Malicious release: Malicious code in @ethers-js/contracts (npm) MAL-2026-13937 | Malicious | Not scored | 13 Aug, 2026 | npm @ethers-js/contracts |
Malicious release: Malicious code in @opezneppelin/contracts (npm) MAL-2026-13940 | Malicious | Not scored | 13 Aug, 2026 | npm @opezneppelin/contracts |
Malicious release: Malicious code in npm-hex-utils (npm) MAL-2026-13956 | Malicious | Not scored | 13 Aug, 2026 | npm npm-hex-utils |
Malicious release: Malicious code in js-assert-plus (npm) MAL-2026-13953 | Malicious | Not scored | 13 Aug, 2026 | npm js-assert-plus |
Malicious release: Malicious code in minimalistic-assert-plus (npm) MAL-2026-13954 | Malicious | Not scored | 13 Aug, 2026 | npm minimalistic-assert-plus |
Malicious release: Malicious code in power-assert-plus (npm) MAL-2026-13958 | Malicious | Not scored | 13 Aug, 2026 | npm power-assert-plus |
Malicious release: Malicious code in postcss-initialize-plugin (npm) MAL-2026-13957 | Malicious | Not scored | 13 Aug, 2026 | npm postcss-initialize-plugin |
Malicious release: Malicious code in debug-proxy-chrome-devtools (npm) MAL-2026-13948 | Malicious | Not scored | 13 Aug, 2026 | npm debug-proxy-chrome-devtools |
Malicious release: Malicious code in date-fmt-helper-xz (npm) MAL-2026-13946 | Malicious | Not scored | 13 Aug, 2026 | npm date-fmt-helper-xz |