Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in tinkoff-boxy-desktop-features-banner (npm) GHSA-rqq4-xpvf-6ch9, MAL-2026-12048 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-boxy-desktop-features-banner |
Malicious release: Malicious code in bigops-auth-utils (npm) MAL-2026-12035 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-auth-utils |
Malicious release: Malicious code in platform-ui-island (npm) GHSA-32mj-37qf-85h6, MAL-2026-12042 | Malicious | Not scored | 05 Aug, 2026 | npm platform-ui-island |
Malicious release: Malicious code in forge-extended (npm) GHSA-prw8-rx62-jhmh, MAL-2026-12040 | Malicious | Not scored | 05 Aug, 2026 | npm forge-extended |
Malicious release: Malicious code in specials-mvno-client (npm) GHSA-h383-rw87-5jgw, MAL-2026-12044 | Malicious | Not scored | 05 Aug, 2026 | npm specials-mvno-client |
Malicious release: Malicious code in tinkoff-ui-action (npm) GHSA-377x-9v5g-rvgw, MAL-2026-12051 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-ui-action |
Malicious release: Malicious code in aedes_clusters (npm) GHSA-8m4c-fp49-4pw5, MAL-2026-12033 | Malicious | Not scored | 05 Aug, 2026 | npm aedes_clusters |
Malicious release: Malicious code in tramvai-tinkoff-module-legacy-popup (npm) GHSA-x6vc-4q97-5qw4, MAL-2026-12052 | Malicious | Not scored | 05 Aug, 2026 | npm tramvai-tinkoff-module-legacy-popup |
Malicious release: Malicious code in tinkoff-component-infopanel (npm) GHSA-9hcg-pq5h-wj74, MAL-2026-12049 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-component-infopanel |
Malicious release: Malicious code in streak-day-utils (npm) MAL-2026-12047 | Malicious | Not scored | 05 Aug, 2026 | npm streak-day-utils |
Malicious release: Malicious code in data-format-helper (npm) MAL-2026-12039 | Malicious | Not scored | 05 Aug, 2026 | npm data-format-helper |
Malicious release: Malicious code in tinkoff-statist-browser-typed-client-sme.reporting.reporting (npm) GHSA-hh5q-m44v-j748, MAL-2026-12050 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-browser-typed-client-sme.reporting.reporting |
Malicious release: Malicious code in add-two-numbers-x7q9m (npm) MAL-2026-12032 | Malicious | Not scored | 05 Aug, 2026 | npm add-two-numbers-x7q9m |
Malicious release: Malicious code in bigops-chat-tmsg (npm) MAL-2026-12036 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-chat-tmsg |
Malicious release: Malicious code in platform-ui-codemods (npm) GHSA-wc85-c9g8-72g6, MAL-2026-12041 | Malicious | Not scored | 05 Aug, 2026 | npm platform-ui-codemods |
Malicious release: Malicious code in @zzzgenesis00/ethers-wallet (npm) MAL-2026-12031 | Malicious | Not scored | 05 Aug, 2026 | npm @zzzgenesis00/ethers-wallet |
Malicious release: Malicious code in sextant-cli-linux-arm64 (npm) MAL-2026-12043 | Malicious | Not scored | 05 Aug, 2026 | npm sextant-cli-linux-arm64 |
Malicious release: Malicious code in @zzzgenesis00/bip39-mnemonic (npm) MAL-2026-12030 | Malicious | Not scored | 05 Aug, 2026 | npm @zzzgenesis00/bip39-mnemonic |
Malicious release: Malicious code in uibabai (npm) MAL-2026-12054 | Malicious | Not scored | 05 Aug, 2026 | npm uibabai |
Malicious release: Malicious code in sextant-cli-darwin-amd64 (npm) MAL-2026-12028 | Malicious | Not scored | 05 Aug, 2026 | npm sextant-cli-darwin-amd64 |
Malicious release: Malicious code in sextant-cli-linux-amd64 (npm) MAL-2026-12029 | Malicious | Not scored | 05 Aug, 2026 | npm sextant-cli-linux-amd64 |
Malicious release: Malicious code in streak-map-metrics (npm) MAL-2026-11999 | Malicious | Not scored | 05 Aug, 2026 | npm streak-map-metrics |
Malicious release: Malicious code in streak-metricsazb (npm) MAL-2026-12002 | Malicious | Not scored | 05 Aug, 2026 | npm streak-metricsazb |
Malicious release: Malicious code in streak-metricazbd (npm) MAL-2026-12001 | Malicious | Not scored | 05 Aug, 2026 | npm streak-metricazbd |
Malicious release: Malicious code in streak-test-mathcore (npm) MAL-2026-12003 | Malicious | Not scored | 05 Aug, 2026 | npm streak-test-mathcore |
Malicious release: Malicious code in streak-math-metrics (npm) GHSA-3ph5-6m86-7v7r, MAL-2026-12000 | Malicious | Not scored | 05 Aug, 2026 | npm streak-math-metrics |
Malicious release: Malicious code in sextant-cli-darwin-arm64 (npm) MAL-2026-11997 | Malicious | Not scored | 05 Aug, 2026 | npm sextant-cli-darwin-arm64 |
Malicious release: Malicious code in approval-guardian (npm) MAL-2026-11995 | Malicious | Not scored | 04 Aug, 2026 | npm approval-guardian |
Malicious release: Malicious code in @tuluax/errb (npm) MAL-2026-11993 | Malicious | Not scored | 04 Aug, 2026 | npm @tuluax/errb |
Malicious release: Malicious code in emulative (npm) MAL-2026-11996 | Malicious | Not scored | 04 Aug, 2026 | npm emulative |
Malicious release: Malicious code in webdev-conf (npm) MAL-2026-12005 | Malicious | Not scored | 04 Aug, 2026 | npm webdev-conf |
Malicious release: Malicious code in vitest-preview-pro (npm) GHSA-wx22-xm6j-mgqx, MAL-2026-12004 | Malicious | Not scored | 04 Aug, 2026 | npm vitest-preview-pro |
Malicious release: Malicious code in simple-date-formatter-util-7 (npm) MAL-2026-11998 | Malicious | Not scored | 04 Aug, 2026 | npm simple-date-formatter-util-7 |
Malicious release: Malicious code in @zzzgenesis00/web3-provider-engine (npm) MAL-2026-11994 | Malicious | Not scored | 04 Aug, 2026 | npm @zzzgenesis00/web3-provider-engine |
Malicious release: Malicious code in @zzzgenesis00/etherjs (npm) MAL-2026-11530 | Malicious | Not scored | 04 Aug, 2026 | npm @zzzgenesis00/etherjs |
Malicious release: Malicious code in @zzzgenesis00/crypto-config (npm) MAL-2026-11529 | Malicious | Not scored | 04 Aug, 2026 | npm @zzzgenesis00/crypto-config |
Malicious release: Malicious code in @zzzgenesis00/solana-web3 (npm) MAL-2026-11533 | Malicious | Not scored | 04 Aug, 2026 | npm @zzzgenesis00/solana-web3 |
Malicious release: Malicious code in hubert-application-get-document-preview-am (npm) GHSA-7c6g-rhc6-239f, MAL-2026-11540 | Malicious | Not scored | 04 Aug, 2026 | npm hubert-application-get-document-preview-am |
Malicious release: Malicious code in @zzzgenesis00/solana-wallet-adapter (npm) MAL-2026-11532 | Malicious | Not scored | 04 Aug, 2026 | npm @zzzgenesis00/solana-wallet-adapter |
Malicious release: Malicious code in bigops-backend (npm) MAL-2026-11535 | Malicious | Not scored | 04 Aug, 2026 | npm bigops-backend |
Malicious release: Malicious code in eacq-payform-core (npm) GHSA-gpp6-qxfg-2m7x, MAL-2026-11538 | Malicious | Not scored | 04 Aug, 2026 | npm eacq-payform-core |
Malicious release: Malicious code in twork-data-services-aggregator-api-v2-data-view-company-company-profile-mf-data-transformer (npm) GHSA-337w-cgvw-mpg3, MAL-2026-11550 | Malicious | Not scored | 04 Aug, 2026 | npm twork-data-services-aggregator-api-v2-data-view-company-company-profile-mf-data-transformer |
Malicious release: Malicious code in entropyeasybots (npm) MAL-2026-11539 | Malicious | Not scored | 04 Aug, 2026 | npm entropyeasybots |
Malicious release: Malicious code in @zzzgenesis00/hdkey-wallet (npm) MAL-2026-11531 | Malicious | Not scored | 04 Aug, 2026 | npm @zzzgenesis00/hdkey-wallet |
Malicious release: Malicious code in @zzzgenesis00/xrp-lib (npm) MAL-2026-11534 | Malicious | Not scored | 04 Aug, 2026 | npm @zzzgenesis00/xrp-lib |
Malicious release: Malicious code in simple-date-formatter-util-6 (npm) MAL-2026-11546 | Malicious | Not scored | 04 Aug, 2026 | npm simple-date-formatter-util-6 |
Malicious release: Malicious code in simple-date-formatter-util-10 (npm) MAL-2026-11544 | Malicious | Not scored | 04 Aug, 2026 | npm simple-date-formatter-util-10 |
Malicious release: Malicious code in simple-date-formatter-util-9 (npm) MAL-2026-11547 | Malicious | Not scored | 04 Aug, 2026 | npm simple-date-formatter-util-9 |
Malicious release: Malicious code in discord-vibegrations-api-helpers (npm) MAL-2026-11536 | Malicious | Not scored | 04 Aug, 2026 | npm discord-vibegrations-api-helpers |
Malicious release: Malicious code in tinkoff-terminal-kit-carousel (npm) GHSA-g537-jjq6-mv8m, MAL-2026-11549 | Malicious | Not scored | 04 Aug, 2026 | npm tinkoff-terminal-kit-carousel |