Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in ysqp68 (npm) GHSA-6mmf-g5rj-3qxv, MAL-2026-18041 | Malicious | Not scored | 10 days ago | npm ysqp68 |
Malicious release: Malicious code in g8ez1y (npm) GHSA-6rc2-wmvg-58vj, MAL-2026-18014 | Malicious | Not scored | 10 days ago | npm g8ez1y |
Malicious release: Malicious code in f4iomt (npm) GHSA-75h5-8c3h-fgfg, MAL-2026-18011 | Malicious | Not scored | 10 days ago | npm f4iomt |
Malicious release: Malicious code in 3gr2dj (npm) GHSA-7w9w-mcrx-mq63, MAL-2026-17945 | Malicious | Not scored | 10 days ago | npm 3gr2dj |
Malicious release: Malicious code in rhlozh (npm) GHSA-8h9g-w7hc-m2vg, MAL-2026-18035 | Malicious | Not scored | 10 days ago | npm rhlozh |
Malicious release: Malicious code in x294tn (npm) GHSA-946x-h6wx-r4jh, MAL-2026-18040 | Malicious | Not scored | 10 days ago | npm x294tn |
Malicious release: Malicious code in 8i7pp4 (npm) GHSA-97qj-xxch-gv59, MAL-2026-17952 | Malicious | Not scored | 10 days ago | npm 8i7pp4 |
Malicious release: Malicious code in aqj3w7 (npm) GHSA-c92v-wc47-vg7h, MAL-2026-17971 | Malicious | Not scored | 10 days ago | npm aqj3w7 |
Malicious release: Malicious code in giu094 (npm) GHSA-crpr-3p42-5v4g, MAL-2026-18015 | Malicious | Not scored | 10 days ago | npm giu094 |
Malicious release: Malicious code in ljem3j (npm) GHSA-h7g9-pxwg-hr57, MAL-2026-18021 | Malicious | Not scored | 10 days ago | npm ljem3j |
Malicious release: Malicious code in waojpf (npm) GHSA-jjpm-7wrx-wm3x, MAL-2026-18039 | Malicious | Not scored | 10 days ago | npm waojpf |
Malicious release: Malicious code in oo9fja (npm) GHSA-jm54-39g7-2x5f, MAL-2026-18034 | Malicious | Not scored | 10 days ago | npm oo9fja |
Malicious release: Malicious code in j5opb7 (npm) GHSA-jrcj-7fj7-rcj5, MAL-2026-18019 | Malicious | Not scored | 10 days ago | npm j5opb7 |
Malicious release: Malicious code in ivzlid (npm) GHSA-mjcg-fv8p-3m86, MAL-2026-18017 | Malicious | Not scored | 10 days ago | npm ivzlid |
Malicious release: Malicious code in gtjgd4 (npm) GHSA-mp58-pj24-x4mp, MAL-2026-18016 | Malicious | Not scored | 10 days ago | npm gtjgd4 |
Malicious release: Malicious code in 5xzkuy (npm) GHSA-pmfg-m7jp-f9c2, MAL-2026-17950 | Malicious | Not scored | 10 days ago | npm 5xzkuy |
Malicious release: Malicious code in 1n9lip (npm) GHSA-pppj-4j56-8jg6, MAL-2026-17944 | Malicious | Not scored | 10 days ago | npm 1n9lip |
Malicious release: Malicious code in rvmbnj (npm) GHSA-q25f-pr89-hvmf, MAL-2026-18036 | Malicious | Not scored | 10 days ago | npm rvmbnj |
Malicious release: Malicious code in 5k5t5q (npm) GHSA-q4hf-gcjv-q78v, MAL-2026-17949 | Malicious | Not scored | 10 days ago | npm 5k5t5q |
Malicious release: Malicious code in f0klcr (npm) GHSA-rq88-5p3h-79r5, MAL-2026-18010 | Malicious | Not scored | 10 days ago | npm f0klcr |
Malicious release: Malicious code in 3qamjp (npm) GHSA-vm25-j4pf-w498, MAL-2026-17947 | Malicious | Not scored | 10 days ago | npm 3qamjp |
Malicious release: Malicious code in mp3-file-zip-d-ownload-hypnotize-kpkk0-ygzaqq (npm) GHSA-2628-822j-cw22, MAL-2026-18029 | Malicious | Not scored | 10 days ago | npm mp3-file-zip-d-ownload-hypnotize-kpkk0-ygzaqq |
Malicious release: Malicious code in down-load-available-zip-now-12673-dirt-farmer-jn0vw-rkwppg (npm) GHSA-26fv-xj33-9v83, MAL-2026-18005 | Malicious | Not scored | 10 days ago | npm down-load-available-zip-now-12673-dirt-farmer-jn0vw-rkwppg |
Malicious release: Malicious code in down-load-available-zip-now-42301-gloria-tp7wn-dcxkwl (npm) GHSA-26h2-9v4m-39j8, MAL-2026-18007 | Malicious | Not scored | 10 days ago | npm down-load-available-zip-now-42301-gloria-tp7wn-dcxkwl |
Malicious release: Malicious code in down-lo-ad-now-zip-mp3-year-of-the-gentleman-8mpja-vdihqg (npm) GHSA-27wx-99p6-c9v2, MAL-2026-18004 | Malicious | Not scored | 10 days ago | npm down-lo-ad-now-zip-mp3-year-of-the-gentleman-8mpja-vdihqg |
Malicious release: Malicious code in ava-ilable-down-load-mp3-today-157397-polymer-0dwv9-btizmd (npm) GHSA-3qj4-63f8-j79f, MAL-2026-17972 | Malicious | Not scored | 10 days ago | npm ava-ilable-down-load-mp3-today-157397-polymer-0dwv9-btizmd |
Malicious release: Malicious code in do-wnload-available-mulatu-steps-ahead-ag2jn-fzxotp (npm) GHSA-45c7-vgrw-9898, MAL-2026-17996 | Malicious | Not scored | 10 days ago | npm do-wnload-available-mulatu-steps-ahead-ag2jn-fzxotp |
Malicious release: Malicious code in do-wnload-available-61075-you-think-you-really-know-me-1-c368u-jspcon (npm) GHSA-4hvj-qfjg-3fr5, MAL-2026-17994 | Malicious | Not scored | 10 days ago | npm do-wnload-available-61075-you-think-you-really-know-me-1-c368u-jspcon |
Malicious release: Malicious code in down-load-available-zip-now-265533-the-safeway-elhem-xoyofv (npm) GHSA-575p-j37f-vjhr, MAL-2026-18006 | Malicious | Not scored | 10 days ago | npm down-load-available-zip-now-265533-the-safeway-elhem-xoyofv |
Malicious release: Malicious code in down-lo-ad-now-zip-mp3-duppy-writer-9bxwq-qpdzyd (npm) GHSA-59hh-hxgx-22hj, MAL-2026-18003 | Malicious | Not scored | 10 days ago | npm down-lo-ad-now-zip-mp3-duppy-writer-9bxwq-qpdzyd |
Malicious release: Malicious code in availab-le-alb-um-zip-38895-crimes-of-passion-oeiro-wmybis (npm) GHSA-5prx-2cxw-36ph, MAL-2026-17983 | Malicious | Not scored | 10 days ago | npm availab-le-alb-um-zip-38895-crimes-of-passion-oeiro-wmybis |
Malicious release: Malicious code in alb-um-availa-ble-zip-mp3-file-470287-watch-my-moves-2zscf-aatbzj (npm) GHSA-6272-chwf-hp6j, MAL-2026-17968 | Malicious | Not scored | 10 days ago | npm alb-um-availa-ble-zip-mp3-file-470287-watch-my-moves-2zscf-aatbzj |
Malicious release: Malicious code in mp3-file-zip-d-ownload-challengers-ym2l6-mkqhum (npm) GHSA-63jc-mc2p-j89r, MAL-2026-18027 | Malicious | Not scored | 10 days ago | npm mp3-file-zip-d-ownload-challengers-ym2l6-mkqhum |
Malicious release: Malicious code in alb-um-availa-ble-zip-mp3-file-43857-green-light-mrpup-qmtshy (npm) GHSA-6gr5-xmf3-p56w, MAL-2026-17967 | Malicious | Not scored | 10 days ago | npm alb-um-availa-ble-zip-mp3-file-43857-green-light-mrpup-qmtshy |
Malicious release: Malicious code in availab-le-alb-um-zip-2022-482703-broken-hearts-club-bhvqx-hxwudi (npm) GHSA-7937-69cp-7jmx, MAL-2026-17981 | Malicious | Not scored | 10 days ago | npm availab-le-alb-um-zip-2022-482703-broken-hearts-club-bhvqx-hxwudi |
Malicious release: Malicious code in a-lbum-do-wnload-avai-lable-file-10635-about-to-choke-pzt0k-onnsvp (npm) GHSA-887p-fpcm-mqq6, MAL-2026-17953 | Malicious | Not scored | 10 days ago | npm a-lbum-do-wnload-avai-lable-file-10635-about-to-choke-pzt0k-onnsvp |
Malicious release: Malicious code in file-alb-um-zip-new-mp3-32338-think-before-you-speak-9znpc-akvcbt (npm) GHSA-8895-xgp7-943q, MAL-2026-18012 | Malicious | Not scored | 10 days ago | npm file-alb-um-zip-new-mp3-32338-think-before-you-speak-9znpc-akvcbt |
Malicious release: Malicious code in ava-ilable-down-load-mp3-today-2018-120200-young-sick-camellia-qvg9z-dqpzyh (npm) GHSA-9r93-qrfh-qjf4, MAL-2026-17973 | Malicious | Not scored | 10 days ago | npm ava-ilable-down-load-mp3-today-2018-120200-young-sick-camellia-qvg9z-dqpzyh |
Malicious release: Malicious code in a-vailable-al-bum-file-36850-other-peoples-lives-vys1z-fuucqk (npm) GHSA-c28g-9354-cxff, MAL-2026-17963 | Malicious | Not scored | 10 days ago | npm a-vailable-al-bum-file-36850-other-peoples-lives-vys1z-fuucqk |
Malicious release: Malicious code in availab-le-alb-um-zip-music-is-rotted-one-note-7chcp-frcmmy (npm) GHSA-g38m-69hw-j6vq, MAL-2026-17986 | Malicious | Not scored | 10 days ago | npm availab-le-alb-um-zip-music-is-rotted-one-note-7chcp-frcmmy |
Malicious release: Malicious code in new-al-bum-av-ailable-50924-satta-massagana-rje2z-lfxsfe (npm) GHSA-gfc9-m3g7-gvmm, MAL-2026-18031 | Malicious | Not scored | 10 days ago | npm new-al-bum-av-ailable-50924-satta-massagana-rje2z-lfxsfe |
Malicious release: Malicious code in a-vailable-al-bum-file-101379-communion-mt1lk-dvshll (npm) GHSA-gh6r-g5gq-9qm4, MAL-2026-17959 | Malicious | Not scored | 10 days ago | npm a-vailable-al-bum-file-101379-communion-mt1lk-dvshll |
Malicious release: Malicious code in a-lbum-do-wnload-avai-lable-file-11522-seven-and-the-ragged-tiger-bkmqg-xorids (npm) GHSA-gh7w-f38w-p962, MAL-2026-17954 | Malicious | Not scored | 10 days ago | npm a-lbum-do-wnload-avai-lable-file-11522-seven-and-the-ragged-tiger-bkmqg-xorids |
Malicious release: Malicious code in a-lbum-do-wnload-avai-lable-file-playing-the-angel-l9tng-nkbcwn (npm) GHSA-h7xv-6h6g-vf82, MAL-2026-17957 | Malicious | Not scored | 10 days ago | npm a-lbum-do-wnload-avai-lable-file-playing-the-angel-l9tng-nkbcwn |
Malicious release: Malicious code in mp3-file-zip-d-ownload-10759-grand-prix-ojzwj-auchhw (npm) GHSA-hrqg-x7j6-4rc5, MAL-2026-18025 | Malicious | Not scored | 10 days ago | npm mp3-file-zip-d-ownload-10759-grand-prix-ojzwj-auchhw |
Malicious release: Malicious code in alb-um-availa-ble-zip-mp3-file-31673-finally-1m7lu-usrooy (npm) GHSA-hrw2-w5q8-g9hp, MAL-2026-17965 | Malicious | Not scored | 10 days ago | npm alb-um-availa-ble-zip-mp3-file-31673-finally-1m7lu-usrooy |
Malicious release: Malicious code in avail-able-albu-m-down-load-almanac-tdedm-bajrnj (npm) GHSA-j6c8-8mr9-6rmv, MAL-2026-17979 | Malicious | Not scored | 10 days ago | npm avail-able-albu-m-down-load-almanac-tdedm-bajrnj |
Malicious release: Malicious code in ava-ilable-down-load-mp3-today-5767-all-eyez-on-me-9vh62-ohwdae (npm) GHSA-m3g8-5822-9cxj, MAL-2026-17975 | Malicious | Not scored | 10 days ago | npm ava-ilable-down-load-mp3-today-5767-all-eyez-on-me-9vh62-ohwdae |
Malicious release: Malicious code in do-wnload-available-provincial-q7d0i-muzxoj (npm) GHSA-m8rp-58c7-4jwg, MAL-2026-17997 | Malicious | Not scored | 10 days ago | npm do-wnload-available-provincial-q7d0i-muzxoj |
Malicious release: Malicious code in avail-able-albu-m-down-load-9815-young-americans-vygt4-atskbj (npm) GHSA-mwmg-876h-ff26, MAL-2026-17978 | Malicious | Not scored | 10 days ago | npm avail-able-albu-m-down-load-9815-young-americans-vygt4-atskbj |