Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @kyronixai/executer (npm) MAL-2026-12505 | Malicious | Not scored | 05 Aug, 2026 | npm @kyronixai/executer |
Malicious release: Malicious code in strath (npm) MAL-2026-12805 | Malicious | Not scored | 05 Aug, 2026 | npm strath |
Malicious release: Malicious code in gs-uitk-testing-utils (npm) MAL-2026-12792 | Malicious | Not scored | 05 Aug, 2026 | npm gs-uitk-testing-utils |
Malicious release: Malicious code in gs-uitk-object-utils (npm) MAL-2026-12791 | Malicious | Not scored | 05 Aug, 2026 | npm gs-uitk-object-utils |
Malicious release: Malicious code in streak-metric-core (npm) GHSA-86ww-mvrj-xx43, MAL-2026-12808 | Malicious | Not scored | 05 Aug, 2026 | npm streak-metric-core |
Malicious release: Malicious code in ts-poly-utls (npm) MAL-2026-12811 | Malicious | Not scored | 05 Aug, 2026 | npm ts-poly-utls |
Malicious release: Malicious code in chai-as-inspired (npm) MAL-2026-12540 | Malicious | Not scored | 05 Aug, 2026 | npm chai-as-inspired |
Malicious release: Malicious code in polyclob-api (npm) GHSA-qc45-qw25-9w37, MAL-2026-13382 | Malicious | Not scored | 05 Aug, 2026 | npm polyclob-api |
Malicious release: Malicious code in checkout-desktop-total (npm) MAL-2026-12561 | Malicious | Not scored | 05 Aug, 2026 | npm checkout-desktop-total |
Malicious release: Malicious code in helixbox-connect (npm) MAL-2026-12793 | Malicious | Not scored | 05 Aug, 2026 | npm helixbox-connect |
Malicious release: Malicious code in multi-reqs (npm) MAL-2026-12797 | Malicious | Not scored | 05 Aug, 2026 | npm multi-reqs |
Malicious release: Malicious code in dc-renewals-layout2 (npm) MAL-2026-12671 | Malicious | Not scored | 05 Aug, 2026 | npm dc-renewals-layout2 |
Malicious release: Malicious code in shift-v4-sdk (npm) MAL-2026-12802 | Malicious | Not scored | 05 Aug, 2026 | npm shift-v4-sdk |
Malicious release: Malicious code in widget-forge (npm) MAL-2026-12815 | Malicious | Not scored | 05 Aug, 2026 | npm widget-forge |
Malicious release: Malicious code in messenger-style (npm) MAL-2026-12796 | Malicious | Not scored | 05 Aug, 2026 | npm messenger-style |
Malicious release: Malicious code in npm-groat (npm) MAL-2026-12798 | Malicious | Not scored | 05 Aug, 2026 | npm npm-groat |
Malicious release: Malicious code in glia-functions-tools (npm) GHSA-62wp-x489-6g6h, MAL-2026-12790 | Malicious | Not scored | 05 Aug, 2026 | npm glia-functions-tools |
Malicious release: Malicious code in application_base (npm) MAL-2026-12511 | Malicious | Not scored | 05 Aug, 2026 | npm application_base |
Malicious release: Malicious code in editor_application (npm) MAL-2026-12788 | Malicious | Not scored | 05 Aug, 2026 | npm editor_application |
Malicious release: Malicious code in poly-provider-api (npm) GHSA-jxxm-5453-r666, MAL-2026-13381 | Malicious | Not scored | 05 Aug, 2026 | npm poly-provider-api |
Malicious release: Malicious code in tick-forge (npm) GHSA-rjvw-v893-2f7g, MAL-2026-13385 | Malicious | Not scored | 05 Aug, 2026 | npm tick-forge |
Malicious release: Malicious code in knowledge-grader (npm) GHSA-m4g7-2mxw-5m83, MAL-2026-12795 | Malicious | Not scored | 05 Aug, 2026 | npm knowledge-grader |
Malicious release: Malicious code in the-search (npm) MAL-2026-12810 | Malicious | Not scored | 05 Aug, 2026 | npm the-search |
Malicious release: Malicious code in dynstrg-howto (npm) GHSA-p2vx-mw75-76fw, MAL-2026-12787 | Malicious | Not scored | 05 Aug, 2026 | npm dynstrg-howto |
Malicious release: Malicious code in umber-root (npm) MAL-2026-12814 | Malicious | Not scored | 05 Aug, 2026 | npm umber-root |
Malicious release: Malicious code in ts-toolkit-plus (npm) GHSA-99wx-749q-58xh, MAL-2026-12812 | Malicious | Not scored | 05 Aug, 2026 | npm ts-toolkit-plus |
Malicious release: Malicious code in sc-payment-utils (npm) MAL-2026-12801 | Malicious | Not scored | 05 Aug, 2026 | npm sc-payment-utils |
Malicious release: Malicious code in anthropic-setup (npm) GHSA-6mwf-mqp4-2f69, MAL-2026-12510 | Malicious | Not scored | 05 Aug, 2026 | npm anthropic-setup |
Malicious release: Malicious code in dust-helpers (npm) MAL-2026-12786 | Malicious | Not scored | 05 Aug, 2026 | npm dust-helpers |
Malicious release: Malicious code in crypto-checkout-api (npm) GHSA-cg47-54wp-xjp9, MAL-2026-12666 | Malicious | Not scored | 05 Aug, 2026 | npm crypto-checkout-api |
Malicious release: Malicious code in technical-challenge (npm) GHSA-x874-j4r9-66gh, MAL-2026-12809 | Malicious | Not scored | 05 Aug, 2026 | npm technical-challenge |
Malicious release: Malicious code in @latlongid/location (npm) MAL-2026-12506 | Malicious | Not scored | 05 Aug, 2026 | npm @latlongid/location |
Malicious release: Malicious code in break-after (npm) MAL-2026-12518 | Malicious | Not scored | 05 Aug, 2026 | npm break-after |
Malicious release: Malicious code in karapace-docs (npm) GHSA-mf8g-pqcc-wxfw, MAL-2026-12794 | Malicious | Not scored | 05 Aug, 2026 | npm karapace-docs |
Malicious release: Malicious code in shiftmarkets-sdk (npm) MAL-2026-12803 | Malicious | Not scored | 05 Aug, 2026 | npm shiftmarkets-sdk |
Malicious release: Malicious code in async-mutex-v3 (npm) MAL-2026-12514 | Malicious | Not scored | 05 Aug, 2026 | npm async-mutex-v3 |
Malicious release: Malicious code in poly-bbc-service (npm) MAL-2026-12799 | Malicious | Not scored | 05 Aug, 2026 | npm poly-bbc-service |
Malicious release: Malicious code in wolverinechat (npm) GHSA-9gmm-g6fq-594g, MAL-2026-12816 | Malicious | Not scored | 05 Aug, 2026 | npm wolverinechat |
Malicious release: Malicious code in @sapappgyver/appgyver-descriptors (npm) GHSA-33x7-6mwq-xg5j, MAL-2026-12507, SNYK-JS-SAPAPPGYVERAPPGYVERDESCRIPTORS-18758933 | Malicious | Not scored | 05 Aug, 2026 | npm @sapappgyver/appgyver-descriptors |
Malicious release: Malicious code in streak-grid-core (npm) GHSA-jwcj-rx9q-cxm8, MAL-2026-12807 | Malicious | Not scored | 05 Aug, 2026 | npm streak-grid-core |
Malicious release: Malicious code in twilio-functions (npm) MAL-2026-12813 | Malicious | Not scored | 05 Aug, 2026 | npm twilio-functions |
Malicious release: Malicious code in sc-font-icons (npm) MAL-2026-12800 | Malicious | Not scored | 05 Aug, 2026 | npm sc-font-icons |
Malicious release: Malicious code in store-locator-widget (npm) MAL-2026-12804 | Malicious | Not scored | 05 Aug, 2026 | npm store-locator-widget |
Malicious release: Malicious code in @shiftmarkets/shift-exchange-root (npm) MAL-2026-12509 | Malicious | Not scored | 05 Aug, 2026 | npm @shiftmarkets/shift-exchange-root |
Malicious release: Malicious code in async-mutex-lock (npm) GHSA-vwr9-j5fc-42fq, MAL-2026-12513 | Malicious | Not scored | 05 Aug, 2026 | npm async-mutex-lock |
Malicious release: Malicious code in @shiftmarkets/no-brainer-sdk (npm) MAL-2026-12508 | Malicious | Not scored | 05 Aug, 2026 | npm @shiftmarkets/no-brainer-sdk |
Malicious release: Malicious code in dbk-ui-forms (npm) GHSA-6xhg-r9f8-79h9, MAL-2026-12669 | Malicious | Not scored | 05 Aug, 2026 | npm dbk-ui-forms |
Malicious release: Malicious code in appsignal (npm) MAL-2026-12512 | Malicious | Not scored | 05 Aug, 2026 | npm appsignal |
Malicious release: Malicious code in @cy4dev/cydemo-bg-color (npm) MAL-2026-12504 | Malicious | Not scored | 05 Aug, 2026 | npm @cy4dev/cydemo-bg-color |
Malicious release: Malicious code in streak-core-bucket (npm) GHSA-mpp6-fx3r-vwff, MAL-2026-12806 | Malicious | Not scored | 05 Aug, 2026 | npm streak-core-bucket |