Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in tinkoff-ui-angular-addon-wysiwyg (npm) GHSA-pmq9-57f4-g2v7, MAL-2026-12283 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-ui-angular-addon-wysiwyg |
Malicious release: Malicious code in tinkoff-component-limits (npm) GHSA-v58r-xww8-gc9p, MAL-2026-12238 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-component-limits |
Malicious release: Malicious code in tinkoff-pfp-atom-desktop-carousel (npm) GHSA-gm8q-97hx-635q, MAL-2026-12245 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-pfp-atom-desktop-carousel |
Malicious release: Malicious code in tinkoff-pfp-block-mobile-advert-footer (npm) GHSA-j4mw-2cmq-xhcq, MAL-2026-12248 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-pfp-block-mobile-advert-footer |
Malicious release: Malicious code in tinkoff-statist-browser-typed-client-sme.platform.mobile.employees.common.events (npm) MAL-2026-12271 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-browser-typed-client-sme.platform.mobile.employees.common.events |
Malicious release: Malicious code in tinkoff-statist-browser-typed-client-test.softwarecenter.metrics (npm) GHSA-vwg2-5528-w9wc, MAL-2026-12278 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-browser-typed-client-test.softwarecenter.metrics |
Malicious release: Malicious code in tinkoff-codeceptjs-storyshots (npm) GHSA-432x-c5ch-gcx6, MAL-2026-12236 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-codeceptjs-storyshots |
Malicious release: Malicious code in tinkoff-boxy-mobile-separator (npm) GHSA-rrcp-38vc-7qgw, MAL-2026-12235 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-boxy-mobile-separator |
Malicious release: Malicious code in tinkoff-codeceptjs-storyshots-alpha (npm) GHSA-fhqv-jjj8-w6wh, MAL-2026-12237 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-codeceptjs-storyshots-alpha |
Malicious release: Malicious code in tinkoff-boxy-atom-text-link (npm) GHSA-wc79-x38v-pmr3, MAL-2026-12227 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-boxy-atom-text-link |
Malicious release: Malicious code in statist-browser-typed-client-sme.salary.web.metrics (npm) MAL-2026-12215 | Malicious | Not scored | 05 Aug, 2026 | npm statist-browser-typed-client-sme.salary.web.metrics |
Malicious release: Malicious code in tinkoff-pfp-block-mobile-panels (npm) GHSA-gp62-rq95-4fg5, MAL-2026-12249 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-pfp-block-mobile-panels |
Malicious release: Malicious code in statist-browser-typed-client-sme.platform.web.productsnavigation.events (npm) GHSA-9v23-vh6j-pcw7, MAL-2026-12214 | Malicious | Not scored | 05 Aug, 2026 | npm statist-browser-typed-client-sme.platform.web.productsnavigation.events |
Malicious release: Malicious code in pfa-autotests-reporter (npm) GHSA-wxmr-mcwx-4c6q, MAL-2026-12185 | Malicious | Not scored | 05 Aug, 2026 | npm pfa-autotests-reporter |
Malicious release: Malicious code in pfp-forms-insurance-health (npm) GHSA-262x-3pgh-mxj5, MAL-2026-12186 | Malicious | Not scored | 05 Aug, 2026 | npm pfp-forms-insurance-health |
Malicious release: Malicious code in tinkoff-component-page-loader (npm) GHSA-3p77-c6f9-pffh, MAL-2026-12239 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-component-page-loader |
Malicious release: Malicious code in tinkoff-pfp-integration-mobile-slider-icons (npm) GHSA-6c78-688f-6vxq, MAL-2026-12250 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-pfp-integration-mobile-slider-icons |
Malicious release: Malicious code in tinkoff-statist-browser-typed-client-dss.insurance.service (npm) GHSA-h5ww-8cvp-mj62, MAL-2026-12257 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-browser-typed-client-dss.insurance.service |
Malicious release: Malicious code in peter-desktop-peter-big-column (npm) GHSA-6jpg-pv9h-2rf5, MAL-2026-12184 | Malicious | Not scored | 05 Aug, 2026 | npm peter-desktop-peter-big-column |
Malicious release: Malicious code in retracfix (npm) MAL-2026-12190 | Malicious | Not scored | 05 Aug, 2026 | npm retracfix |
Malicious release: Malicious code in stellarfix (npm) MAL-2026-12216 | Malicious | Not scored | 05 Aug, 2026 | npm stellarfix |
Malicious release: Malicious code in beaver-ui-ai-chat-layout (npm) MAL-2026-12142 | Malicious | Not scored | 05 Aug, 2026 | npm beaver-ui-ai-chat-layout |
Malicious release: Malicious code in beaver-ui-actions-button (npm) MAL-2026-12141 | Malicious | Not scored | 05 Aug, 2026 | npm beaver-ui-actions-button |
Malicious release: Malicious code in beaver-ui-hooks (npm) GHSA-cwhj-ccq9-hv73, MAL-2026-12146 | Malicious | Not scored | 05 Aug, 2026 | npm beaver-ui-hooks |
Malicious release: Malicious code in beaver-ui-form-object (npm) GHSA-7f2m-rv2g-c7q2, MAL-2026-12145 | Malicious | Not scored | 05 Aug, 2026 | npm beaver-ui-form-object |
Malicious release: Malicious code in beaver-ui-icon-lock (npm) MAL-2026-12147 | Malicious | Not scored | 05 Aug, 2026 | npm beaver-ui-icon-lock |
Malicious release: Malicious code in akamai-sensorv3 (npm) MAL-2026-12139 | Malicious | Not scored | 05 Aug, 2026 | npm akamai-sensorv3 |
Malicious release: Malicious code in beaver-ui-breadcrumbs (npm) MAL-2026-12143 | Malicious | Not scored | 05 Aug, 2026 | npm beaver-ui-breadcrumbs |
Malicious release: Malicious code in tinkoff-pfp-atom-styles-tiles (npm) GHSA-9wpj-x935-r4fj, MAL-2026-12246 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-pfp-atom-styles-tiles |
Malicious release: Malicious code in tinkoff-boxy-form-desktop-sme-registration-ooo (npm) GHSA-m24w-7xcq-wvr8, MAL-2026-12231 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-boxy-form-desktop-sme-registration-ooo |
Malicious release: Malicious code in tinkoff-statist-browser-typed-client-mb.reliability.android.events (npm) GHSA-4rph-fx37-hfvw, MAL-2026-12269 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-browser-typed-client-mb.reliability.android.events |
Malicious release: Malicious code in tinkoff-boxy-desktop-icons-horizontal (npm) GHSA-gm9f-hg73-pmwf, MAL-2026-12228 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-boxy-desktop-icons-horizontal |
Malicious release: Malicious code in beaver-ui-drawer (npm) MAL-2026-12144 | Malicious | Not scored | 05 Aug, 2026 | npm beaver-ui-drawer |
Malicious release: Malicious code in agent-bot-api (npm) GHSA-wg39-r7v9-mwfc, MAL-2026-12138 | Malicious | Not scored | 05 Aug, 2026 | npm agent-bot-api |
Malicious release: Malicious code in pfp-forms-sme-registration-ooo (npm) GHSA-x7rm-45xj-895w, MAL-2026-12187 | Malicious | Not scored | 05 Aug, 2026 | npm pfp-forms-sme-registration-ooo |
Malicious release: Malicious code in twork-products-taiga2-products-investment (npm) GHSA-wm26-cg7p-hvf6, MAL-2026-12305 | Malicious | Not scored | 05 Aug, 2026 | npm twork-products-taiga2-products-investment |
Malicious release: Malicious code in nolimit-agent (npm) GHSA-f9mj-p83x-395v, MAL-2026-12183 | Malicious | Not scored | 05 Aug, 2026 | npm nolimit-agent |
Malicious release: Malicious code in accounts-timeline (npm) MAL-2026-12137 | Malicious | Not scored | 05 Aug, 2026 | npm accounts-timeline |
Malicious release: Malicious code in devpack-conf (npm) MAL-2026-12177 | Malicious | Not scored | 05 Aug, 2026 | npm devpack-conf |
Malicious release: Malicious code in simple-date-formatter-util-8 (npm) MAL-2026-12206 | Malicious | Not scored | 05 Aug, 2026 | npm simple-date-formatter-util-8 |
Malicious release: Malicious code in simple-date-formatter-util-4 (npm) MAL-2026-12205 | Malicious | Not scored | 05 Aug, 2026 | npm simple-date-formatter-util-4 |
Malicious release: Malicious code in simple-date-formatter-util-12 (npm) MAL-2026-12201 | Malicious | Not scored | 05 Aug, 2026 | npm simple-date-formatter-util-12 |
Malicious release: Malicious code in simple-date-formatter-util-11 (npm) MAL-2026-12200 | Malicious | Not scored | 05 Aug, 2026 | npm simple-date-formatter-util-11 |
Malicious release: Malicious code in simple-date-formatter-util-13 (npm) MAL-2026-12202 | Malicious | Not scored | 05 Aug, 2026 | npm simple-date-formatter-util-13 |
Malicious release: Malicious code in simple-date-formatter-util-14 (npm) MAL-2026-12203 | Malicious | Not scored | 05 Aug, 2026 | npm simple-date-formatter-util-14 |
Malicious release: Malicious code in simple-date-formatter-util-16 (npm) MAL-2026-12204 | Malicious | Not scored | 05 Aug, 2026 | npm simple-date-formatter-util-16 |
Malicious release: Malicious code in simple-date-formatter-new-6 (npm) MAL-2026-12197 | Malicious | Not scored | 05 Aug, 2026 | npm simple-date-formatter-new-6 |
Malicious release: Malicious code in simple-date-formatter-new-2 (npm) MAL-2026-12194 | Malicious | Not scored | 05 Aug, 2026 | npm simple-date-formatter-new-2 |
Malicious release: Malicious code in simple-date-formatter-new-7 (npm) MAL-2026-12198 | Malicious | Not scored | 05 Aug, 2026 | npm simple-date-formatter-new-7 |
Malicious release: Malicious code in simple-date-formatter-new-8 (npm) MAL-2026-12199 | Malicious | Not scored | 05 Aug, 2026 | npm simple-date-formatter-new-8 |