Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in streak-math-abz (npm) MAL-2026-11548 | Malicious | Not scored | 04 Aug, 2026 | npm streak-math-abz |
Malicious release: Malicious code in nagixjs (npm) MAL-2026-11541 | Malicious | Not scored | 04 Aug, 2026 | npm nagixjs |
Malicious release: Malicious code in discord-vibegrations-api-natives (npm) MAL-2026-11537 | Malicious | Not scored | 04 Aug, 2026 | npm discord-vibegrations-api-natives |
Malicious release: Malicious code in simple-date-formatter-new-5 (npm) MAL-2026-11543 | Malicious | Not scored | 04 Aug, 2026 | npm simple-date-formatter-new-5 |
Malicious release: Malicious code in osinthell (npm) MAL-2026-11542 | Malicious | Not scored | 04 Aug, 2026 | npm osinthell |
Malicious release: Malicious code in simple-date-formatter-util-15 (npm) MAL-2026-11545 | Malicious | Not scored | 04 Aug, 2026 | npm simple-date-formatter-util-15 |
Malicious release: Malicious code in @ks-openclaw/kim (npm) MAL-2026-11528 | Malicious | Not scored | 04 Aug, 2026 | npm @ks-openclaw/kim |
Malicious release: Malicious code in streak-metricsaz (npm) MAL-2026-11527 | Malicious | Not scored | 04 Aug, 2026 | npm streak-metricsaz |
Malicious release: Malicious code in beaver-ui-form (npm) MAL-2026-11522 | Malicious | Not scored | 04 Aug, 2026 | npm beaver-ui-form |
Malicious release: Malicious code in nagix-nodejs (npm) MAL-2026-11526 | Malicious | Not scored | 04 Aug, 2026 | npm nagix-nodejs |
Malicious release: Malicious code in nagix-node (npm) MAL-2026-11525 | Malicious | Not scored | 04 Aug, 2026 | npm nagix-node |
Malicious release: Malicious code in @umacloud/cli-linux-arm64 (npm) GHSA-cgqh-w28v-v9wg, MAL-2026-11955 | Malicious | Not scored | 04 Aug, 2026 | npm @umacloud/cli-linux-arm64 |
Malicious release: Malicious code in @umacloud/cli-linux-musl-x64 (npm) GHSA-jp94-5mph-fpf8, MAL-2026-11957 | Malicious | Not scored | 04 Aug, 2026 | npm @umacloud/cli-linux-musl-x64 |
Malicious release: Malicious code in @umacloud/cli-linux-x64 (npm) GHSA-p886-3cf4-j5cx, MAL-2026-11958 | Malicious | Not scored | 04 Aug, 2026 | npm @umacloud/cli-linux-x64 |
Malicious release: Malicious code in @umacloud/cli-linux-musl-arm64 (npm) GHSA-ppgw-mhjm-w25f, MAL-2026-11956 | Malicious | Not scored | 04 Aug, 2026 | npm @umacloud/cli-linux-musl-arm64 |
Malicious release: Malicious code in @umacloud/cli-darwin-x64 (npm) GHSA-qqc5-qqrh-3hx8, MAL-2026-11954 | Malicious | Not scored | 04 Aug, 2026 | npm @umacloud/cli-darwin-x64 |
Malicious release: Malicious code in @umacloud/cli-darwin-arm64 (npm) GHSA-qrjp-2vx3-hwg4, MAL-2026-11953 | Malicious | Not scored | 04 Aug, 2026 | npm @umacloud/cli-darwin-arm64 |
Malicious release: Malicious code in umadev (npm) GHSA-rxr8-mfg7-xm79, MAL-2026-11989 | Malicious | Not scored | 04 Aug, 2026 | npm umadev |
Malicious release: Malicious code in @umacloud/cli-win32-x64 (npm) GHSA-vgf8-c62c-jjxr, MAL-2026-11959 | Malicious | Not scored | 04 Aug, 2026 | npm @umacloud/cli-win32-x64 |
Malicious release: Malicious code in @umacloud/knowledge (npm) GHSA-vpvg-254v-wp7h, MAL-2026-11960 | Malicious | Not scored | 04 Aug, 2026 | npm @umacloud/knowledge |
Malicious release: Malicious code in @adminide-stack/clock-tik-browser (npm) MAL-2026-11551 | Malicious | Not scored | 04 Aug, 2026 | npm @adminide-stack/clock-tik-browser |
Malicious release: Malicious code in @deliveroo/determinator (npm) MAL-2026-11562 | Malicious | Not scored | 04 Aug, 2026 | npm @deliveroo/determinator |
Malicious release: Malicious code in @deliveroo/reevent (npm) MAL-2026-11563 | Malicious | Not scored | 04 Aug, 2026 | npm @deliveroo/reevent |
Malicious release: Malicious code in @qlik/dts-bundler (npm) MAL-2026-11788 | Malicious | Not scored | 04 Aug, 2026 | npm @qlik/dts-bundler |
Malicious release: Malicious code in @qlik/embed-svelte (npm) MAL-2026-11791 | Malicious | Not scored | 04 Aug, 2026 | npm @qlik/embed-svelte |
Malicious release: Malicious code in @jsimplify/errno (npm) GHSA-vgg6-7x38-g434, MAL-2026-12006 | Malicious | Not scored | 04 Aug, 2026 | npm @jsimplify/errno |
Malicious release: Malicious code in cors-version (npm) GHSA-2hwp-7m6r-hgjg, MAL-2026-12026 | Malicious | Not scored | 04 Aug, 2026 | npm cors-version |
Malicious release: Malicious code in tailwind-anime (npm) GHSA-58f3-m5c8-hcrv, MAL-2026-12027 | Malicious | Not scored | 04 Aug, 2026 | npm tailwind-anime |
Malicious release: Malicious code in server-hemera-mongo (npm) GHSA-rrhh-mxmx-x7xf, MAL-2026-11986 | Malicious | Not scored | 04 Aug, 2026 | npm server-hemera-mongo |
Malicious release: Malicious code in @adminide-stack/yantra-mobile (npm) GHSA-2698-4w7r-9qqv, MAL-2026-11552 | Malicious | Not scored | 04 Aug, 2026 | npm @adminide-stack/yantra-mobile |
Malicious release: Malicious code in workbench-browser-server (npm) GHSA-63m5-c696-rwrc, MAL-2026-11992 | Malicious | Not scored | 04 Aug, 2026 | npm workbench-browser-server |
Malicious release: Malicious code in @workbench-stack/core (npm) GHSA-qc5f-j5q7-57hf, MAL-2026-11961 | Malicious | Not scored | 04 Aug, 2026 | npm @workbench-stack/core |
Malicious release: Malicious code in @qlik/nebula-table-utils (npm) GHSA-qgqm-m8rp-5q25, MAL-2026-11798 | Malicious | Not scored | 04 Aug, 2026 | npm @qlik/nebula-table-utils |
Malicious release: Malicious code in @nebula.js/sn-line-chart (npm) GHSA-jvxf-3873-cvcw, MAL-2026-11575 | Malicious | Not scored | 04 Aug, 2026 | npm @nebula.js/sn-line-chart |
Malicious release: Malicious code in @nebula.js/sn-layout-container (npm) GHSA-cqf2-r88m-hcq2, MAL-2026-11574 | Malicious | Not scored | 04 Aug, 2026 | npm @nebula.js/sn-layout-container |
Malicious release: Malicious code in @qlik/sprout-icons (npm) GHSA-4hhj-rpx3-pw9f, MAL-2026-11807 | Malicious | Not scored | 04 Aug, 2026 | npm @qlik/sprout-icons |
Malicious release: Malicious code in http-metrics-middleware (npm) GHSA-w86p-g27r-2m6q, MAL-2026-11975 | Malicious | Not scored | 04 Aug, 2026 | npm http-metrics-middleware |
Malicious release: Malicious code in @qlik/sprout-design-docs (npm) GHSA-m3hw-7p37-3vmh, MAL-2026-11805 | Malicious | Not scored | 04 Aug, 2026 | npm @qlik/sprout-design-docs |
Malicious release: Malicious code in @qlik/prettier-config (npm) GHSA-2259-j57x-rf45, MAL-2026-11801 | Malicious | Not scored | 04 Aug, 2026 | npm @qlik/prettier-config |
Malicious release: Malicious code in @qlik/browserslist-config (npm) GHSA-x47v-2r4m-2q34, MAL-2026-11784 | Malicious | Not scored | 04 Aug, 2026 | npm @qlik/browserslist-config |
Malicious release: Malicious code in @qlik/api (npm) GHSA-qcx7-ppp7-p6r4, MAL-2026-11783 | Malicious | Not scored | 04 Aug, 2026 | npm @qlik/api |
Malicious release: Malicious code in qlik-modifiers (npm) GHSA-8q52-v99f-4q28, MAL-2026-11983 | Malicious | Not scored | 04 Aug, 2026 | npm qlik-modifiers |
Malicious release: Malicious code in @qlik/eslint-config-react (npm) GHSA-p827-gwm8-29x5, MAL-2026-11795 | Malicious | Not scored | 04 Aug, 2026 | npm @qlik/eslint-config-react |
Malicious release: Malicious code in qlik-object-conversion (npm) GHSA-4hq4-8pfx-pmvw, MAL-2026-11984 | Malicious | Not scored | 04 Aug, 2026 | npm qlik-object-conversion |
Malicious release: Malicious code in @qlik/eslint-config-base (npm) GHSA-mc8j-vx8m-ww53, MAL-2026-11794 | Malicious | Not scored | 04 Aug, 2026 | npm @qlik/eslint-config-base |
Malicious release: Malicious code in @nebula.js/sn-listbox (npm) GHSA-rfr7-p954-4m4q, MAL-2026-11576 | Malicious | Not scored | 04 Aug, 2026 | npm @nebula.js/sn-listbox |
Malicious release: Malicious code in @qlik/carbon-core (npm) GHSA-5p47-xqh5-mx62, MAL-2026-11785 | Malicious | Not scored | 04 Aug, 2026 | npm @qlik/carbon-core |
Malicious release: Malicious code in @qlik/embed-runtime (npm) GHSA-6f9f-wgfq-wg6c, MAL-2026-11790 | Malicious | Not scored | 04 Aug, 2026 | npm @qlik/embed-runtime |
Malicious release: Malicious code in qlik-chart-modules (npm) GHSA-6pc2-3g2j-m6wg, MAL-2026-11982 | Malicious | Not scored | 04 Aug, 2026 | npm qlik-chart-modules |
Malicious release: Malicious code in @qlik/carboncopy (npm) GHSA-g8xp-phjg-2v98, MAL-2026-11786 | Malicious | Not scored | 04 Aug, 2026 | npm @qlik/carboncopy |