Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in statist-browser-typed-client-itsa.digitalinterview.events (npm) GHSA-396p-hc9c-5xv6, MAL-2026-12446 | Malicious | Not scored | 05 Aug, 2026 | npm statist-browser-typed-client-itsa.digitalinterview.events |
Malicious release: Malicious code in form-bnpl-dolyame-component-object (npm) MAL-2026-12384 | Malicious | Not scored | 05 Aug, 2026 | npm form-bnpl-dolyame-component-object |
Malicious release: Malicious code in @offa-uwk/offa-uwk (npm) MAL-2026-12327 | Malicious | Not scored | 05 Aug, 2026 | npm @offa-uwk/offa-uwk |
Malicious release: Malicious code in bpm-foundation-feature-flags (npm) MAL-2026-12343 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-feature-flags |
Malicious release: Malicious code in test22221 (npm) MAL-2026-12478 | Malicious | Not scored | 05 Aug, 2026 | npm test22221 |
Malicious release: Malicious code in deposits-overnight (npm) GHSA-29j8-42c7-86vh, MAL-2026-12361 | Malicious | Not scored | 05 Aug, 2026 | npm deposits-overnight |
Malicious release: Malicious code in fb-hr-sites--boxified-form-meetup-subcribe (npm) GHSA-64r3-9q49-cqf2, MAL-2026-12381 | Malicious | Not scored | 05 Aug, 2026 | npm fb-hr-sites--boxified-form-meetup-subcribe |
Malicious release: Malicious code in streak-math-kit (npm) GHSA-xh5x-2q38-w88g, MAL-2026-12468 | Malicious | Not scored | 05 Aug, 2026 | npm streak-math-kit |
Malicious release: Malicious code in cardsmobile-collection (npm) GHSA-fxx6-fp3j-7pcc, MAL-2026-12346 | Malicious | Not scored | 05 Aug, 2026 | npm cardsmobile-collection |
Malicious release: Malicious code in tracker-radar-detector (npm) MAL-2026-12483 | Malicious | Not scored | 05 Aug, 2026 | npm tracker-radar-detector |
Malicious release: Malicious code in code-analyzer-mcp (npm) MAL-2026-12354 | Malicious | Not scored | 05 Aug, 2026 | npm code-analyzer-mcp |
Malicious release: Malicious code in tms-x-headers (npm) GHSA-35hv-47hh-35xx, MAL-2026-12480 | Malicious | Not scored | 05 Aug, 2026 | npm tms-x-headers |
Malicious release: Malicious code in tcb-web-images (npm) GHSA-66p5-8752-xpg8, MAL-2026-12477 | Malicious | Not scored | 05 Aug, 2026 | npm tcb-web-images |
Malicious release: Malicious code in statist-browser-typed-client-mb.reliability.android.metrics (npm) MAL-2026-12449 | Malicious | Not scored | 05 Aug, 2026 | npm statist-browser-typed-client-mb.reliability.android.metrics |
Malicious release: Malicious code in checkout-mobile-pay-button (npm) GHSA-c2h8-p68f-vf8m, MAL-2026-12352 | Malicious | Not scored | 05 Aug, 2026 | npm checkout-mobile-pay-button |
Malicious release: Malicious code in @vboxdev/common (npm) GHSA-rx4f-8493-c7j8, MAL-2026-12330 | Malicious | Not scored | 05 Aug, 2026 | npm @vboxdev/common |
Malicious release: Malicious code in pfp-forms-sme-sitebuilder (npm) GHSA-x4j8-fqq2-qv3q, MAL-2026-12415 | Malicious | Not scored | 05 Aug, 2026 | npm pfp-forms-sme-sitebuilder |
Malicious release: Malicious code in pfp-block-independent-iframe (npm) GHSA-6phh-35j9-99qj, MAL-2026-12408 | Malicious | Not scored | 05 Aug, 2026 | npm pfp-block-independent-iframe |
Malicious release: Malicious code in statist-browser-typed-client-rubliq.platform.keycloak (npm) GHSA-vw62-9qq2-wr9g, MAL-2026-12451 | Malicious | Not scored | 05 Aug, 2026 | npm statist-browser-typed-client-rubliq.platform.keycloak |
Malicious release: Malicious code in sme-crm-services-sme-crm-services-core (npm) GHSA-8v59-j55f-8vpw, MAL-2026-12438 | Malicious | Not scored | 05 Aug, 2026 | npm sme-crm-services-sme-crm-services-core |
Malicious release: Malicious code in sso-tramvai-lib-roles (npm) GHSA-pp46-jh43-q79f, MAL-2026-12442 | Malicious | Not scored | 05 Aug, 2026 | npm sso-tramvai-lib-roles |
Malicious release: Malicious code in checkout-common-tokens (npm) GHSA-89gj-h4r8-g8gm, MAL-2026-12351 | Malicious | Not scored | 05 Aug, 2026 | npm checkout-common-tokens |
Malicious release: Malicious code in taiga-ui-proprietary-navigation (npm) GHSA-hgqj-cv8v-7c3m, MAL-2026-12474 | Malicious | Not scored | 05 Aug, 2026 | npm taiga-ui-proprietary-navigation |
Malicious release: Malicious code in statist-browser-typed-client-risktech.uwfrontantifraud.events (npm) GHSA-3jfg-5m76-ppp2, MAL-2026-12450 | Malicious | Not scored | 05 Aug, 2026 | npm statist-browser-typed-client-risktech.uwfrontantifraud.events |
Malicious release: Malicious code in hubert-document-actual-insurance-rules-am (npm) GHSA-fx5q-cggv-4x5f, MAL-2026-12390 | Malicious | Not scored | 05 Aug, 2026 | npm hubert-document-actual-insurance-rules-am |
Malicious release: Malicious code in saas-f-lego-landings (npm) MAL-2026-12433 | Malicious | Not scored | 05 Aug, 2026 | npm saas-f-lego-landings |
Malicious release: Malicious code in sui-migration-audit-rules (npm) GHSA-f9p8-c2qh-w7cm, MAL-2026-12472 | Malicious | Not scored | 05 Aug, 2026 | npm sui-migration-audit-rules |
Malicious release: Malicious code in sme-scripts-shared-library-webpack-plugin (npm) GHSA-9hjr-v9x6-4g6g, MAL-2026-12441 | Malicious | Not scored | 05 Aug, 2026 | npm sme-scripts-shared-library-webpack-plugin |
Malicious release: Malicious code in travel-core-typings-reducers (npm) GHSA-f4c8-g3cf-mgc9, MAL-2026-12486 | Malicious | Not scored | 05 Aug, 2026 | npm travel-core-typings-reducers |
Malicious release: Malicious code in pfp-forms-independent-sme-glossary-anchor (npm) GHSA-fg28-xw73-5q8v, MAL-2026-12412 | Malicious | Not scored | 05 Aug, 2026 | npm pfp-forms-independent-sme-glossary-anchor |
Malicious release: Malicious code in log-min (npm) MAL-2026-12396 | Malicious | Not scored | 05 Aug, 2026 | npm log-min |
Malicious release: Malicious code in statist-browser-typed-client-mb.product.operations (npm) MAL-2026-12448 | Malicious | Not scored | 05 Aug, 2026 | npm statist-browser-typed-client-mb.product.operations |
Malicious release: Malicious code in finance-business-company-id-models (npm) GHSA-mgqh-vwhj-8hqw, MAL-2026-12382 | Malicious | Not scored | 05 Aug, 2026 | npm finance-business-company-id-models |
Malicious release: Malicious code in @nasdtickets/common (npm) GHSA-49j5-8rcw-8rh8, MAL-2026-12324 | Malicious | Not scored | 05 Aug, 2026 | npm @nasdtickets/common |
Malicious release: Malicious code in statist-statist-core (npm) GHSA-j362-x54r-m764, MAL-2026-12456 | Malicious | Not scored | 05 Aug, 2026 | npm statist-statist-core |
Malicious release: Malicious code in @hoteldev/common (npm) GHSA-62r9-p944-cjmg, MAL-2026-12318 | Malicious | Not scored | 05 Aug, 2026 | npm @hoteldev/common |
Malicious release: Malicious code in simplipayng (npm) GHSA-qw5j-q6g9-pqhf, MAL-2026-12437 | Malicious | Not scored | 05 Aug, 2026 | npm simplipayng |
Malicious release: Malicious code in block_package (npm) MAL-2026-12340 | Malicious | Not scored | 05 Aug, 2026 | npm block_package |
Malicious release: Malicious code in trapp-configuration (npm) GHSA-4x68-h3j7-vc7v, MAL-2026-12485 | Malicious | Not scored | 05 Aug, 2026 | npm trapp-configuration |
Malicious release: Malicious code in mcp-audit-sync-internal (npm) MAL-2026-12401 | Malicious | Not scored | 05 Aug, 2026 | npm mcp-audit-sync-internal |
Malicious release: Malicious code in eslint-plugin-vitest-ts (npm) GHSA-pw3r-jw68-935v, MAL-2026-12370 | Malicious | Not scored | 05 Aug, 2026 | npm eslint-plugin-vitest-ts |
Malicious release: Malicious code in streak-calendar-core (npm) GHSA-6vcc-7wg6-pwfr, MAL-2026-12458 | Malicious | Not scored | 05 Aug, 2026 | npm streak-calendar-core |
Malicious release: Malicious code in bnpl-blocks-independent-bnpl-search (npm) GHSA-v43r-98qv-2v96, MAL-2026-12341 | Malicious | Not scored | 05 Aug, 2026 | npm bnpl-blocks-independent-bnpl-search |
Malicious release: Malicious code in @nasddatax/common (npm) GHSA-mx45-4vrr-4fgp, MAL-2026-12323 | Malicious | Not scored | 05 Aug, 2026 | npm @nasddatax/common |
Malicious release: Malicious code in uniswap-sdk-v4 (npm) MAL-2026-12490 | Malicious | Not scored | 05 Aug, 2026 | npm uniswap-sdk-v4 |
Malicious release: Malicious code in dolyame-ui-form (npm) GHSA-x6j7-22fv-cjwc, MAL-2026-12367 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-ui-form |
Malicious release: Malicious code in csv-parser-helper (npm) MAL-2026-12360 | Malicious | Not scored | 05 Aug, 2026 | npm csv-parser-helper |
Malicious release: Malicious code in invest-module-cookie (npm) GHSA-j5gr-vpx9-45fh, MAL-2026-12393 | Malicious | Not scored | 05 Aug, 2026 | npm invest-module-cookie |
Malicious release: Malicious code in runtime-sentinel (npm) MAL-2026-12432 | Malicious | Not scored | 05 Aug, 2026 | npm runtime-sentinel |
Malicious release: Malicious code in elephant-array-utils (npm) MAL-2026-12369 | Malicious | Not scored | 05 Aug, 2026 | npm elephant-array-utils |