Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in tailwind-animation-founder (npm) MAL-2026-12218 | Malicious | Not scored | 05 Aug, 2026 | npm tailwind-animation-founder |
Malicious release: Malicious code in accounts-forms (npm) MAL-2026-12133 | Malicious | Not scored | 05 Aug, 2026 | npm accounts-forms |
Malicious release: Malicious code in tailwindcss-form-components (npm) GHSA-6ffq-phjp-69jj, GHSA-mx7q-w72x-jgrh, GHSA-p9jp-9h4v-vpgv, GHSA-qqcc-hmq5-37p5, GHSA-x29h-74hf-jq7x, MAL-2026-12223, MAL-2026-13348, MAL-2026-13356, SNYK-JS-BIGOPSRXPOSTMESSAGE-18551079 | Malicious | Not scored | 05 Aug, 2026 | npm chai-foundry npm lakk-analytics npm tailwindcss-form-components |
Malicious release: Malicious code in tailwind-opentype (npm) MAL-2026-12222 | Malicious | Not scored | 05 Aug, 2026 | npm tailwind-opentype |
Malicious release: Malicious code in tailwind-custom-forms (npm) GHSA-4mgg-vhf5-9r79, MAL-2026-12221 | Malicious | Not scored | 05 Aug, 2026 | npm tailwind-custom-forms |
Malicious release: Malicious code in tailwind-animationpack (npm) GHSA-pqcx-38vc-5c6x, MAL-2026-12220 | Malicious | Not scored | 05 Aug, 2026 | npm tailwind-animationpack |
Malicious release: Malicious code in tailwind-animationgroup (npm) GHSA-69pm-q85v-q89g, MAL-2026-12219 | Malicious | Not scored | 05 Aug, 2026 | npm tailwind-animationgroup |
Malicious release: Malicious code in fb-insurance--boxified-form-vzr-test (npm) MAL-2026-12179 | Malicious | Not scored | 05 Aug, 2026 | npm fb-insurance--boxified-form-vzr-test |
Malicious release: Malicious code in 1239i32049i (npm) MAL-2026-12117 | Malicious | Not scored | 05 Aug, 2026 | npm 1239i32049i |
Malicious release: Malicious code in tailwind-animate-plugin (npm) MAL-2026-12217 | Malicious | Not scored | 05 Aug, 2026 | npm tailwind-animate-plugin |
Malicious release: Malicious code in tinkoff-fb-fieldset-car-reference-kasko (npm) GHSA-4pm5-vwjx-55wp, MAL-2026-12241 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-fb-fieldset-car-reference-kasko |
Malicious release: Malicious code in tinkoff-statist-browser-typed-client-jumptaxi.feature.contacts (npm) GHSA-r9wc-7mc8-j4r6, MAL-2026-12265 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-browser-typed-client-jumptaxi.feature.contacts |
Malicious release: Malicious code in tinkoff-boxy-mobile-documents (npm) GHSA-97hc-v95m-g3h9, MAL-2026-12234 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-boxy-mobile-documents |
Malicious release: Malicious code in tinkoff-boxy-independent-kasko-form (npm) MAL-2026-12233 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-boxy-independent-kasko-form |
Malicious release: Malicious code in tinkoff-boxy-gitlab-labels (npm) GHSA-m4w6-4923-8gc3, MAL-2026-12232 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-boxy-gitlab-labels |
Malicious release: Malicious code in tinkoff-statist-browser-typed-client-leasing.admin.events (npm) GHSA-pwcq-5xh6-9383, MAL-2026-12266 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-browser-typed-client-leasing.admin.events |
Malicious release: Malicious code in tinkoff-pwa-confac-types (npm) GHSA-6rh3-gcq9-vmhv, MAL-2026-12252 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-pwa-confac-types |
Malicious release: Malicious code in tinkoff-fb-app-frame-page-height-dippy (npm) GHSA-4xh9-wm5m-39jp, MAL-2026-12240 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-fb-app-frame-page-height-dippy |
Malicious release: Malicious code in tinkoff-statist-browser-typed-client-eventea.projects.finhealthwebmicroblocks (npm) GHSA-7q2v-5fj7-w9mg, MAL-2026-12259 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-browser-typed-client-eventea.projects.finhealthwebmicroblocks |
Malicious release: Malicious code in tinkoff-fb-service-prefill-profile-contact (npm) MAL-2026-12243 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-fb-service-prefill-profile-contact |
Malicious release: Malicious code in tinkoff-statist-browser-typed-client-itsa.candy.selfservicesupport.frontend.events (npm) GHSA-4mrm-8v83-27p9, MAL-2026-12263 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-browser-typed-client-itsa.candy.selfservicesupport.frontend.events |
Malicious release: Malicious code in tinkoff-statist-browser-typed-client-coretech.statist.mobile.ci (npm) GHSA-3frj-gg7c-mc4m, MAL-2026-12256 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-browser-typed-client-coretech.statist.mobile.ci |
Malicious release: Malicious code in tinkoff-statist-browser-typed-client-itsa.corporatemessenger.clientv1.web.events (npm) GHSA-j779-v7f5-mqq3, MAL-2026-12264 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-browser-typed-client-itsa.corporatemessenger.clientv1.web.events |
Malicious release: Malicious code in tinkoff-statist-browser-typed-client-sme.platform.web.companyprofile.metrics (npm) GHSA-r3q8-h34r-9h8r, MAL-2026-12272 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-browser-typed-client-sme.platform.web.companyprofile.metrics |
Malicious release: Malicious code in tinkoff-statist-browser-typed-client-sme.rko.authorization.common (npm) GHSA-8q7h-2qw7-c3cr, MAL-2026-12273 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-browser-typed-client-sme.rko.authorization.common |
Malicious release: Malicious code in tinkoff-statist-browser-typed-client-art.apps.reporegistry (npm) GHSA-3h58-7m84-65h5, MAL-2026-12253 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-browser-typed-client-art.apps.reporegistry |
Malicious release: Malicious code in tinkoff-volna-zustate (npm) GHSA-fm7r-fg6q-669q, MAL-2026-12284 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-volna-zustate |
Malicious release: Malicious code in tinkoff-statist-web-typed-client-test.golden.retriever (npm) GHSA-p29h-p689-cjh5, MAL-2026-12279 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-web-typed-client-test.golden.retriever |
Malicious release: Malicious code in tinkoff-boxy-desktop-mgm-product-filter (npm) GHSA-j9c6-mmc6-r23x, MAL-2026-12229 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-boxy-desktop-mgm-product-filter |
Malicious release: Malicious code in tinkoff-statist-browser-typed-client-mb.product.tgeofencing (npm) GHSA-rg3c-9vx6-5mfh, MAL-2026-12268 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-browser-typed-client-mb.product.tgeofencing |
Malicious release: Malicious code in tinkoff-statist-browser-typed-client-sme.rko.conversionpayments.web (npm) GHSA-8g6h-h8m6-w7cq, MAL-2026-12274 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-browser-typed-client-sme.rko.conversionpayments.web |
Malicious release: Malicious code in tinkoff-mutual-mgm-form (npm) GHSA-6q5q-68cm-4f3c, MAL-2026-12244 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-mutual-mgm-form |
Malicious release: Malicious code in tinkoff-pfp-block-desktop-tabs (npm) GHSA-48h6-x5hr-r3v3, MAL-2026-12247 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-pfp-block-desktop-tabs |
Malicious release: Malicious code in tinkoff-terminal-kit-test-commons (npm) GHSA-p8g2-ph77-f7r9, MAL-2026-12281 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-terminal-kit-test-commons |
Malicious release: Malicious code in tinkoff-statist-browser-typed-client-sme.rko.ta.ios.events (npm) GHSA-9g84-6755-r9f2, MAL-2026-12276 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-browser-typed-client-sme.rko.ta.ios.events |
Malicious release: Malicious code in tinkoff-statist-browser-typed-client-mb.product.restrictions.arrestments (npm) MAL-2026-12267 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-browser-typed-client-mb.product.restrictions.arrestments |
Malicious release: Malicious code in tinkoff-statist-browser-typed-client-dwh.chimera.base (npm) GHSA-w72w-w3fh-946m, MAL-2026-12258 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-browser-typed-client-dwh.chimera.base |
Malicious release: Malicious code in tinkoff-statist-browser-typed-client-cardsmobile.events.promotest (npm) GHSA-rr93-6qpg-mg6r, MAL-2026-12255 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-browser-typed-client-cardsmobile.events.promotest |
Malicious release: Malicious code in tinkoff-fb-rf-add-application (npm) GHSA-pvc7-jp4m-6758, MAL-2026-12242 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-fb-rf-add-application |
Malicious release: Malicious code in tinkoff-statist-browser-typed-client-eventea.projects.smartcam (npm) GHSA-946m-r2w5-9p55, MAL-2026-12260 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-browser-typed-client-eventea.projects.smartcam |
Malicious release: Malicious code in tinkoff-boxy-desktop-two-panel-right-image (npm) GHSA-23c2-qcrv-2gc9, MAL-2026-12230 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-boxy-desktop-two-panel-right-image |
Malicious release: Malicious code in tinkoff-statist-browser-typed-client-sme.platform.mobile.dynamicteasers.common (npm) GHSA-6w5q-p9g3-26hf, MAL-2026-12270 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-browser-typed-client-sme.platform.mobile.dynamicteasers.common |
Malicious release: Malicious code in tinkoff-statist-browser-typed-client-sme.users.origination.web (npm) GHSA-9cfm-grjr-hpqf, MAL-2026-12277 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-browser-typed-client-sme.users.origination.web |
Malicious release: Malicious code in tinkoff-statist-browser-typed-client-sme.rko.origsmartphonepaytb.common.mobile.events (npm) GHSA-8w68-xhpf-ww9j, MAL-2026-12275 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-browser-typed-client-sme.rko.origsmartphonepaytb.common.mobile.events |
Malicious release: Malicious code in tinkoff-statist-browser-typed-client-investing.product.pulse (npm) GHSA-953w-4w4x-wp59, MAL-2026-12262 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-browser-typed-client-investing.product.pulse |
Malicious release: Malicious code in tinkoff-statist-browser-typed-client-investaccounting.events.templatepage.mainpage (npm) GHSA-48jc-v3r3-h4fr, MAL-2026-12261 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-browser-typed-client-investaccounting.events.templatepage.mainpage |
Malicious release: Malicious code in tinkoff-statist-browser-typed-client-automlplatform.nlppl.classica (npm) MAL-2026-12254 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-browser-typed-client-automlplatform.nlppl.classica |
Malicious release: Malicious code in tinkoff-test-app-child-app (npm) GHSA-q659-qc8w-8m2x, MAL-2026-12282 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-test-app-child-app |
Malicious release: Malicious code in tinkoff-pfpa-tools (npm) GHSA-5c36-p54m-5gh9, MAL-2026-12251 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-pfpa-tools |
Malicious release: Malicious code in tinkoff-terminal-kit-datetime (npm) MAL-2026-12280 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-terminal-kit-datetime |