Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in hlksdcixycvf (npm) GHSA-q294-wj6j-h556, MAL-2026-13814 | Malicious | Not scored | 12 Aug, 2026 | npm hlksdcixycvf |
Malicious release: Malicious code in nihzvdeowx5 (npm) GHSA-x3fw-v5wg-g95j, MAL-2026-13830 | Malicious | Not scored | 12 Aug, 2026 | npm nihzvdeowx5 |
Malicious release: Malicious code in cvbniydplwe3 (npm) GHSA-x9wp-p3fp-f3rm, MAL-2026-13797 | Malicious | Not scored | 12 Aug, 2026 | npm cvbniydplwe3 |
Malicious release: Malicious code in ms_aidc_com_tw (npm) GHSA-2fg7-gfq8-c24g, MAL-2026-13828 | Malicious | Not scored | 12 Aug, 2026 | npm ms_aidc_com_tw |
Malicious release: Malicious code in fhj8cv9dkwm4 (npm) GHSA-35gq-2hpg-3r2v, MAL-2026-13809 | Malicious | Not scored | 12 Aug, 2026 | npm fhj8cv9dkwm4 |
Malicious release: Malicious code in cxcbdjxcmncvfg2 (npm) GHSA-3pvf-8w6j-33xg, MAL-2026-13801 | Malicious | Not scored | 12 Aug, 2026 | npm cxcbdjxcmncvfg2 |
Malicious release: Malicious code in csbcldfvivwfgd4 (npm) GHSA-5pjw-x44v-j286, MAL-2026-13795 | Malicious | Not scored | 12 Aug, 2026 | npm csbcldfvivwfgd4 |
Malicious release: Malicious code in hfkcdyuwbdx1 (npm) GHSA-6px9-6xh2-4ggc, MAL-2026-13812 | Malicious | Not scored | 12 Aug, 2026 | npm hfkcdyuwbdx1 |
Malicious release: Malicious code in bcnfjndwbkf2 (npm) GHSA-7cv8-7v66-c3mh, MAL-2026-13783 | Malicious | Not scored | 12 Aug, 2026 | npm bcnfjndwbkf2 |
Malicious release: Malicious code in gdwkh6vcbu (npm) GHSA-9hmh-j4x7-6958, MAL-2026-13810 | Malicious | Not scored | 12 Aug, 2026 | npm gdwkh6vcbu |
Malicious release: Malicious code in chmjdsidwlf5 (npm) GHSA-cgrq-g6cw-53vg, MAL-2026-13792 | Malicious | Not scored | 12 Aug, 2026 | npm chmjdsidwlf5 |
Malicious release: Malicious code in nhdxzthponv5 (npm) GHSA-cjq3-7m75-5vf9, MAL-2026-13829 | Malicious | Not scored | 12 Aug, 2026 | npm nhdxzthponv5 |
Malicious release: Malicious code in bvdfhdfvnk3 (npm) GHSA-cp2x-vxp4-762f, MAL-2026-13790 | Malicious | Not scored | 12 Aug, 2026 | npm bvdfhdfvnk3 |
Malicious release: Malicious code in yangming8 (npm) GHSA-f3hv-h6vj-6j6r, MAL-2026-13846 | Malicious | Not scored | 12 Aug, 2026 | npm yangming8 |
Malicious release: Malicious code in dhjksficgwu2 (npm) GHSA-f4wq-4wgj-f595, MAL-2026-13802 | Malicious | Not scored | 12 Aug, 2026 | npm dhjksficgwu2 |
Malicious release: Malicious code in jhkxcixudnvm1 (npm) GHSA-fm6c-v7f7-9q2g, MAL-2026-13817 | Malicious | Not scored | 12 Aug, 2026 | npm jhkxcixudnvm1 |
Malicious release: Malicious code in thundertiger (npm) GHSA-j7j3-pvfq-ph94, MAL-2026-13834 | Malicious | Not scored | 12 Aug, 2026 | npm thundertiger |
Malicious release: Malicious code in fdhcvriwecv3 (npm) GHSA-jpxw-96xx-w7qx, MAL-2026-13807 | Malicious | Not scored | 12 Aug, 2026 | npm fdhcvriwecv3 |
Malicious release: Malicious code in mnchfnvbue1 (npm) GHSA-mvqj-h65j-wcmq, MAL-2026-13821 | Malicious | Not scored | 12 Aug, 2026 | npm mnchfnvbue1 |
Malicious release: Malicious code in yangming708 (npm) GHSA-vgr6-626m-8w22, MAL-2026-13845 | Malicious | Not scored | 12 Aug, 2026 | npm yangming708 |
Malicious release: Malicious code in cjdfswifuem3 (npm) GHSA-w32m-789q-9hgh, MAL-2026-13793 | Malicious | Not scored | 12 Aug, 2026 | npm cjdfswifuem3 |
Malicious release: Malicious code in china_airlines (npm) GHSA-6gv6-cwww-6793, MAL-2026-13791 | Malicious | Not scored | 12 Aug, 2026 | npm china_airlines |
Malicious release: Malicious code in jkbnwsdf8 (npm) GHSA-j8ph-h5x5-m729, MAL-2026-13818 | Malicious | Not scored | 12 Aug, 2026 | npm jkbnwsdf8 |
Malicious release: Malicious code in hngfykuvgh4 (npm) GHSA-pvhh-8339-3m5j, MAL-2026-13815 | Malicious | Not scored | 12 Aug, 2026 | npm hngfykuvgh4 |
Malicious release: Malicious code in bmgki3g6fh3 (npm) GHSA-wm4g-m94m-47vj, MAL-2026-13789 | Malicious | Not scored | 12 Aug, 2026 | npm bmgki3g6fh3 |
Malicious release: Malicious code in hgdvfuflnb (npm) GHSA-wvxr-9c7x-6r9g, MAL-2026-13813 | Malicious | Not scored | 12 Aug, 2026 | npm hgdvfuflnb |
Malicious release: Malicious code in bikliwrapper (npm) GHSA-3qxv-77j4-mg7c, MAL-2026-13788 | Malicious | Not scored | 12 Aug, 2026 | npm bikliwrapper |
Malicious release: Malicious code in @bikli/cli (npm) GHSA-cc5p-hf7h-rrjh, MAL-2026-13779 | Malicious | Not scored | 12 Aug, 2026 | npm @bikli/cli |
Malicious release: Malicious code in biklirouter (npm) GHSA-f5c6-4rpr-wjhp, MAL-2026-13787 | Malicious | Not scored | 12 Aug, 2026 | npm biklirouter |
Malicious release: Malicious code in @bikli/bikli (npm) GHSA-jrmr-j9fg-c874, MAL-2026-13778 | Malicious | Not scored | 12 Aug, 2026 | npm @bikli/bikli |
Malicious release: Malicious code in biklimaster (npm) GHSA-pcfp-4v4q-w735, MAL-2026-13786 | Malicious | Not scored | 12 Aug, 2026 | npm biklimaster |
Malicious release: Malicious code in cc-skills-helper (npm) MAL-2026-13933 | Malicious | Not scored | 12 Aug, 2026 | npm cc-skills-helper |
Malicious release: Malicious code in internallib_v164 (npm) GHSA-3qvf-g7pq-m3m3, MAL-2026-13764 | Malicious | Not scored | 11 Aug, 2026 | npm internallib_v164 |
Malicious release: Malicious code in joule-sbx-poc (PyPI) MAL-2026-13756 | Malicious | Not scored | 11 Aug, 2026 | PyPI joule-sbx-poc |
Malicious release: Malicious code in telebot-pro (PyPI) MAL-2026-13757 | Malicious | Not scored | 11 Aug, 2026 | PyPI telebot-pro |
Malicious release: Malicious code in chapters-core (npm) MAL-2026-13752 | Malicious | Not scored | 11 Aug, 2026 | npm chapters-core |
Malicious release: Malicious code in bjm-low-code-components (npm) MAL-2026-13751 | Malicious | Not scored | 11 Aug, 2026 | npm bjm-low-code-components |
Malicious release: Malicious code in @dgn-src-click-to-pay-org/srcdcfreleasecert (npm) MAL-2026-13744 | Malicious | Not scored | 11 Aug, 2026 | npm @dgn-src-click-to-pay-org/srcdcfreleasecert |
Malicious release: Malicious code in dcfarguscert (npm) MAL-2026-13753 | Malicious | Not scored | 11 Aug, 2026 | npm dcfarguscert |
Malicious release: Malicious code in base65-77x (npm) MAL-2026-13750 | Malicious | Not scored | 11 Aug, 2026 | npm base65-77x |
Malicious release: Malicious code in base65-33x (npm) MAL-2026-13749 | Malicious | Not scored | 11 Aug, 2026 | npm base65-33x |
Malicious release: Malicious code in base65-15x (npm) MAL-2026-13748 | Malicious | Not scored | 11 Aug, 2026 | npm base65-15x |
Malicious release: Malicious code in whs4_ued (npm) MAL-2026-13743 | Malicious | Not scored | 11 Aug, 2026 | npm whs4_ued |
Malicious release: Malicious code in zeal-rq-hooks (npm) MAL-2026-13742 | Malicious | Not scored | 11 Aug, 2026 | npm zeal-rq-hooks |
Malicious release: Malicious code in svelte-vim-kit (npm) GHSA-rvh4-87p7-h5pm, MAL-2026-13769 | Malicious | Not scored | 11 Aug, 2026 | npm svelte-vim-kit |
Malicious release: Malicious code in sui-gql-client (npm) GHSA-2ggf-86xw-xjp5, MAL-2026-13768 | Malicious | Not scored | 11 Aug, 2026 | npm sui-gql-client |
Malicious release: Malicious code in sui-bcs-codec (npm) GHSA-2wqc-3243-4hxm, MAL-2026-13767 | Malicious | Not scored | 11 Aug, 2026 | npm sui-bcs-codec |
Malicious release: Malicious code in bs58-13 (npm) GHSA-72pr-qcvq-fgpg, MAL-2026-13760 | Malicious | Not scored | 11 Aug, 2026 | npm bs58-13 |
Malicious release: Malicious code in base65-12x (npm) GHSA-c4w7-m3hx-xx75, MAL-2026-13746 | Malicious | Not scored | 11 Aug, 2026 | npm base65-12x |
Malicious release: Malicious code in base65-13x (npm) GHSA-fp83-xcpx-v3qm, MAL-2026-13747 | Malicious | Not scored | 11 Aug, 2026 | npm base65-13x |