Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in core-js-buffer (npm) MAL-2026-13945 | Malicious | Not scored | 13 Aug, 2026 | npm core-js-buffer |
Malicious release: Malicious code in index-design-system (npm) GHSA-2mmx-39f8-r8rm, MAL-2026-14002 | Malicious | Not scored | 13 Aug, 2026 | npm index-design-system |
Malicious release: Malicious code in finvu-hdfc-sdk (npm) GHSA-h83v-q7wq-gvgf, MAL-2026-14001, SNYK-JS-FINVUHDFCSDK-18758934 | Malicious | Not scored | 13 Aug, 2026 | npm finvu-hdfc-sdk |
Malicious release: Malicious code in @dsp-next-gen-ui/needs-review (npm) GHSA-r336-hh6w-xp9q, MAL-2026-13995 | Malicious | Not scored | 13 Aug, 2026 | npm @dsp-next-gen-ui/needs-review |
Malicious release: Malicious code in blocks-angular (npm) GHSA-v98x-q47m-h6qf, MAL-2026-14000 | Malicious | Not scored | 13 Aug, 2026 | npm blocks-angular |
Malicious release: Malicious code in @caspianph/third-npm-package (npm) GHSA-g4m3-cq7f-6f85, MAL-2026-13994 | Malicious | Not scored | 13 Aug, 2026 | npm @caspianph/third-npm-package |
Malicious release: Malicious code in @caspianph/second-npm-package (npm) GHSA-qmxg-fj5j-hjx8, MAL-2026-13993 | Malicious | Not scored | 13 Aug, 2026 | npm @caspianph/second-npm-package |
Malicious release: Malicious code in @caspianph/first-npm-package (npm) GHSA-r6j8-4ffv-6mcj, MAL-2026-13992 | Malicious | Not scored | 13 Aug, 2026 | npm @caspianph/first-npm-package |
Malicious release: Malicious code in try-lock-runner (npm) GHSA-5wp3-7whm-64mv, MAL-2026-14014 | Malicious | Not scored | 13 Aug, 2026 | npm try-lock-runner |
Malicious release: Malicious code in async-lock-queue (npm) GHSA-h6x7-5w93-p56j, MAL-2026-13999 | Malicious | Not scored | 13 Aug, 2026 | npm async-lock-queue |
Malicious release: Malicious code in single-flight-lock (npm) GHSA-m29h-wrvw-xpqw, MAL-2026-14012 | Malicious | Not scored | 13 Aug, 2026 | npm single-flight-lock |
Malicious release: Malicious code in mutex-forge (npm) GHSA-2gqm-6m3p-62g5, MAL-2026-13955 | Malicious | Not scored | 13 Aug, 2026 | npm mutex-forge |
Malicious release: Malicious code in lock-deadline-guard (npm) GHSA-c74f-2wp8-f38r, MAL-2026-14004 | Malicious | Not scored | 13 Aug, 2026 | npm lock-deadline-guard |
Malicious release: Malicious code in priority-mutex-lane (npm) GHSA-fx8h-qw3r-xvf3, MAL-2026-14006 | Malicious | Not scored | 13 Aug, 2026 | npm priority-mutex-lane |
Malicious release: Malicious code in semaphore-job-pool (npm) GHSA-m4rw-m6pc-rjrx, MAL-2026-14010 | Malicious | Not scored | 13 Aug, 2026 | npm semaphore-job-pool |
Malicious release: Malicious code in resource-lease-pool (npm) GHSA-mf7m-8rhh-j3vr, MAL-2026-14008 | Malicious | Not scored | 13 Aug, 2026 | npm resource-lease-pool |
Malicious release: Malicious code in shared-slot-gate (npm) GHSA-r7rw-hjv5-9hcj, MAL-2026-14011 | Malicious | Not scored | 13 Aug, 2026 | npm shared-slot-gate |
Malicious release: Malicious code in keyed-mutex-map (npm) GHSA-vcgv-x4wj-fr9f, MAL-2026-14003 | Malicious | Not scored | 13 Aug, 2026 | npm keyed-mutex-map |
Malicious release: Malicious code in async-critical-section (npm) GHSA-wpw5-2h95-j823, MAL-2026-13998 | Malicious | Not scored | 13 Aug, 2026 | npm async-critical-section |
Malicious release: Malicious code in ts-enum-helper (npm) GHSA-7q63-6v9w-j7mf, MAL-2026-14015 | Malicious | Not scored | 13 Aug, 2026 | npm ts-enum-helper |
Malicious release: Malicious code in ai-analyzer (npm) GHSA-fqv8-262c-j5xv, MAL-2026-13934 | Malicious | Not scored | 13 Aug, 2026 | npm ai-analyzer |
Malicious release: Malicious code in datetime-format-xutil (npm) MAL-2026-13936 | Malicious | Not scored | 13 Aug, 2026 | npm datetime-format-xutil |
Malicious release: Malicious code in datetime-fmt-xutil (npm) MAL-2026-13935 | Malicious | Not scored | 13 Aug, 2026 | npm datetime-fmt-xutil |
Malicious release: Malicious code in @nolimit-agent/win32-x64 (npm) GHSA-473g-3cfv-3m59, MAL-2026-13997 | Malicious | Not scored | 13 Aug, 2026 | npm @nolimit-agent/win32-x64 |
Malicious release: Malicious code in @nolimit-agent/linux-x64 (npm) GHSA-x98w-5xvp-qpxj, MAL-2026-13996 | Malicious | Not scored | 13 Aug, 2026 | npm @nolimit-agent/linux-x64 |
Malicious release: Malicious code in bs58-15 (npm) MAL-2026-13964 | Malicious | Not scored | 13 Aug, 2026 | npm bs58-15 |
Malicious release: Malicious code in bs58-33 (npm) MAL-2026-14017 | Malicious | Not scored | 13 Aug, 2026 | npm bs58-33 |
Malicious release: Malicious code in bs58-77 (npm) MAL-2026-14018 | Malicious | Not scored | 13 Aug, 2026 | npm bs58-77 |
Malicious release: Malicious code in internallib_v756 (npm) GHSA-933g-5588-v5hp, MAL-2026-13928 | Malicious | Not scored | 12 Aug, 2026 | npm internallib_v756 |
Malicious release: Malicious code in svelte-kit-vim (npm) GHSA-mpgw-38v3-8q5v, MAL-2026-13927 | Malicious | Not scored | 12 Aug, 2026 | npm svelte-kit-vim |
Malicious release: Malicious code in sui-gql (npm) GHSA-4958-mj82-77pj, MAL-2026-13926 | Malicious | Not scored | 12 Aug, 2026 | npm sui-gql |
Malicious release: Malicious code in bcs-compact (npm) GHSA-xr26-x39h-746w, MAL-2026-13925 | Malicious | Not scored | 12 Aug, 2026 | npm bcs-compact |
Malicious release: Malicious code in internallib_v392 (npm) GHSA-j9qq-rx28-vcjh, MAL-2026-13924 | Malicious | Not scored | 12 Aug, 2026 | npm internallib_v392 |
Malicious release: Malicious code in tailwind-form-templates (npm) MAL-2026-13923 | Malicious | Not scored | 12 Aug, 2026 | npm tailwind-form-templates |
Malicious release: Malicious code in passkeys-react (npm) GHSA-j5q8-gq2c-63vq, MAL-2026-13922 | Malicious | Not scored | 12 Aug, 2026 | npm passkeys-react |
Malicious release: Malicious code in bb-twl-k7x2 (npm) MAL-2026-13920 | Malicious | Not scored | 12 Aug, 2026 | npm bb-twl-k7x2 |
Malicious release: Malicious code in @years20/n8n-nodes-utils-helper-g (npm) MAL-2026-13916 | Malicious | Not scored | 12 Aug, 2026 | npm @years20/n8n-nodes-utils-helper-g |
Malicious release: Malicious code in @years20/n8n-nodes-utils-helper-i (npm) MAL-2026-13918 | Malicious | Not scored | 12 Aug, 2026 | npm @years20/n8n-nodes-utils-helper-i |
Malicious release: Malicious code in @years20/n8n-nodes-utils-helper-j (npm) MAL-2026-13919 | Malicious | Not scored | 12 Aug, 2026 | npm @years20/n8n-nodes-utils-helper-j |
Malicious release: Malicious code in @years20/n8n-nodes-utils-helper-h (npm) MAL-2026-13917 | Malicious | Not scored | 12 Aug, 2026 | npm @years20/n8n-nodes-utils-helper-h |
Malicious release: Malicious code in envpack-conf (npm) MAL-2026-13921 | Malicious | Not scored | 12 Aug, 2026 | npm envpack-conf |
Malicious release: Malicious code in kit-map-vim (npm) GHSA-hg96-r46x-6f4w, MAL-2026-13915 | Malicious | Not scored | 12 Aug, 2026 | npm kit-map-vim |
Malicious release: Malicious code in @years19/n8n-nodes-utils-helper-e (npm) MAL-2026-13888 | Malicious | Not scored | 12 Aug, 2026 | npm @years19/n8n-nodes-utils-helper-e |
Malicious release: Malicious code in @years19/n8n-nodes-utils-helper-f (npm) MAL-2026-13889 | Malicious | Not scored | 12 Aug, 2026 | npm @years19/n8n-nodes-utils-helper-f |
Malicious release: Malicious code in @years18/n8n-nodes-utils-helper-y (npm) MAL-2026-13883 | Malicious | Not scored | 12 Aug, 2026 | npm @years18/n8n-nodes-utils-helper-y |
Malicious release: Malicious code in @years19/n8n-nodes-utils-helper-a (npm) MAL-2026-13884 | Malicious | Not scored | 12 Aug, 2026 | npm @years19/n8n-nodes-utils-helper-a |
Malicious release: Malicious code in @years19/n8n-nodes-utils-helper-b (npm) MAL-2026-13885 | Malicious | Not scored | 12 Aug, 2026 | npm @years19/n8n-nodes-utils-helper-b |
Malicious release: Malicious code in @years19/n8n-nodes-utils-helper-d (npm) MAL-2026-13887 | Malicious | Not scored | 12 Aug, 2026 | npm @years19/n8n-nodes-utils-helper-d |
Malicious release: Malicious code in @years19/n8n-nodes-utils-helper-c (npm) MAL-2026-13886 | Malicious | Not scored | 12 Aug, 2026 | npm @years19/n8n-nodes-utils-helper-c |
Malicious release: Malicious code in @years19/n8n-nodes-utils-helper-g (npm) MAL-2026-13890 | Malicious | Not scored | 12 Aug, 2026 | npm @years19/n8n-nodes-utils-helper-g |