Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @onereach/idw-init-account-resources (npm) GHSA-3xf8-xwph-xcmw, MAL-2026-11603 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/idw-init-account-resources |
Malicious release: Malicious code in @servicetitan/hammer-react (npm) GHSA-x4vx-m5pv-w23h, MAL-2026-11874 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/hammer-react |
Malicious release: Malicious code in @or-sdk/base (npm) GHSA-c93v-93xf-5vgh, MAL-2026-11674 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/base |
Malicious release: Malicious code in @onereach/or-sdk-agent-cli (npm) GHSA-jp5w-xwqc-8pq5, MAL-2026-11613 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/or-sdk-agent-cli |
Malicious release: Malicious code in @onereach/si-datepicker (npm) GHSA-8hp3-h87r-r8vx, MAL-2026-11635 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/si-datepicker |
Malicious release: Malicious code in @or-sdk/authorizer (npm) GHSA-ph9p-5f3j-j863, MAL-2026-11673 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/authorizer |
Malicious release: Malicious code in @onereach/channel-transformer (npm) GHSA-63qp-66rg-pwmw, MAL-2026-11592 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/channel-transformer |
Malicious release: Malicious code in @or-sdk/queue-manager (npm) GHSA-f3pc-vvwm-g95f, MAL-2026-11723 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/queue-manager |
Malicious release: Malicious code in @servicetitan/anvil-fonts (npm) GHSA-f58f-q8mq-6xvx, MAL-2026-11816 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/anvil-fonts |
Malicious release: Malicious code in @onereach/si-collapsible-group (npm) GHSA-rgvc-mwh2-jmf2, MAL-2026-11633 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/si-collapsible-group |
Malicious release: Malicious code in @or-sdk/permissions-lambda (npm) GHSA-v3mc-x96h-q9w7, MAL-2026-11719 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/permissions-lambda |
Malicious release: Malicious code in @onereach/idw-ui-components (npm) GHSA-5hwg-34v3-gf8x, MAL-2026-11605 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/idw-ui-components |
Malicious release: Malicious code in @or-sdk/ccp (npm) GHSA-xjqj-g5f4-pf5q, MAL-2026-11681 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/ccp |
Malicious release: Malicious code in @or-sdk/contacts (npm) GHSA-xxv6-xr99-f75g, MAL-2026-11683 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/contacts |
Malicious release: Malicious code in @onereach/rwc-client (npm) GHSA-4qqw-xhvx-7cjg, MAL-2026-11626 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/rwc-client |
Malicious release: Malicious code in @servicetitan/design-system (npm) GHSA-cjgc-69g5-x5qv, MAL-2026-11852 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/design-system |
Malicious release: Malicious code in @onereach/regular-expressions (npm) GHSA-p4xj-w83m-hjf9, MAL-2026-11624 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/regular-expressions |
Malicious release: Malicious code in @onereach/phonenumber-interpreter (npm) GHSA-8289-7q2r-f33m, MAL-2026-11620 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/phonenumber-interpreter |
Malicious release: Malicious code in @or-sdk/data-hub-svc (npm) GHSA-hj82-vqh6-4cjp, MAL-2026-11686 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/data-hub-svc |
Malicious release: Malicious code in @or-sdk/sdk-api (npm) GHSA-75m3-x8gg-vf7f, MAL-2026-11724 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/sdk-api |
Malicious release: Malicious code in @or-sdk/knowledge-models (npm) GHSA-c292-gr84-8qfc, MAL-2026-11705 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/knowledge-models |
Malicious release: Malicious code in @or-sdk/settings (npm) GHSA-3wwh-2rgm-rhxc, MAL-2026-11725 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/settings |
Malicious release: Malicious code in @servicetitan/va-mfe-loader (npm) GHSA-x3v2-v328-jjmw, MAL-2026-11948 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/va-mfe-loader |
Malicious release: Malicious code in @servicetitan/standalone-tm-api (npm) GHSA-87qw-vv3p-gg3h, MAL-2026-11921 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/standalone-tm-api |
Malicious release: Malicious code in @onereach/content-builder (npm) GHSA-xf8p-9j5j-fm77, MAL-2026-11596 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/content-builder |
Malicious release: Malicious code in @qlik/eslint-config-vue (npm) GHSA-qfj9-r4mh-j6j7, MAL-2026-11797 | Malicious | Not scored | 04 Aug, 2026 | npm @qlik/eslint-config-vue |
Malicious release: Malicious code in @onereach/webform (npm) GHSA-2r99-2449-9mqm, MAL-2026-11664 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/webform |
Malicious release: Malicious code in @onereach/si-merge-tag-input (npm) GHSA-gx78-9x68-q5hj, MAL-2026-11641 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/si-merge-tag-input |
Malicious release: Malicious code in @servicetitan/line-item-editor (npm) GHSA-v2gm-rj9p-j524, MAL-2026-11887 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/line-item-editor |
Malicious release: Malicious code in @servicetitan/micro-frontend (npm) GHSA-2wvx-8vpr-8g64, MAL-2026-11900 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/micro-frontend |
Malicious release: Malicious code in @servicetitan/moneyout-api-client (npm) GHSA-9jv6-vrwm-wvjr, MAL-2026-11906 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/moneyout-api-client |
Malicious release: Malicious code in @servicetitan/responsive (npm) GHSA-v8r5-cr7v-8798, MAL-2026-11914 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/responsive |
Malicious release: Malicious code in @servicetitan/form (npm) GHSA-3fc9-f762-hj5h, MAL-2026-11870 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/form |
Malicious release: Malicious code in @servicetitan/marketing-integration-widgets (npm) GHSA-pr77-52h9-2w5p, MAL-2026-11894 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/marketing-integration-widgets |
Malicious release: Malicious code in @onereach/orest-jest-presets (npm) GHSA-rhwr-g6vq-mxmg, MAL-2026-11616 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/orest-jest-presets |
Malicious release: Malicious code in @servicetitan/data-query (npm) GHSA-7gmc-vf46-7jpq, MAL-2026-11849 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/data-query |
Malicious release: Malicious code in @servicetitan/tokens (npm) GHSA-vh4p-xw5q-qc5f, MAL-2026-11944 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/tokens |
Malicious release: Malicious code in @servicetitan/anvil-react (npm) GHSA-v524-xqwq-8r44, MAL-2026-11819 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/anvil-react |
Malicious release: Malicious code in @servicetitan/testing-library (npm) GHSA-7wrm-7wq3-cffh, MAL-2026-11932 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/testing-library |
Malicious release: Malicious code in @servicetitan/stylelint-config (npm) GHSA-m997-4hj4-92h7, MAL-2026-11927 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/stylelint-config |
Malicious release: Malicious code in @servicetitan/form-state (npm) GHSA-x53v-f8r3-m94v, MAL-2026-11871 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/form-state |
Malicious release: Malicious code in @servicetitan/datadog-rum (npm) GHSA-xggp-cmjw-c248, MAL-2026-11850 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/datadog-rum |
Malicious release: Malicious code in @servicetitan/error-boundary (npm) GHSA-39x7-jmcp-g9x8, MAL-2026-11859 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/error-boundary |
Malicious release: Malicious code in @servicetitan/eslint-config (npm) GHSA-c63f-v4m6-j5qm, MAL-2026-11860 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/eslint-config |
Malicious release: Malicious code in @servicetitan/launchdarkly-service (npm) GHSA-f4mc-vj9p-gr25, MAL-2026-11884 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/launchdarkly-service |
Malicious release: Malicious code in sn-listbox (npm) GHSA-hr73-rrjg-2v2g, MAL-2026-11987 | Malicious | Not scored | 04 Aug, 2026 | npm sn-listbox |
Malicious release: Malicious code in @servicetitan/anvil2 (npm) GHSA-p847-5xpr-43f8, MAL-2026-11822 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/anvil2 |
Malicious release: Malicious code in @nebula.js/cli-build (npm) GHSA-2vj8-6266-q3m5, MAL-2026-11566 | Malicious | Not scored | 04 Aug, 2026 | npm @nebula.js/cli-build |
Malicious release: Malicious code in @servicetitan/anvil2-ext-atlas (npm) GHSA-wrp9-26r3-whwf, MAL-2026-11824 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/anvil2-ext-atlas |
Malicious release: Malicious code in @servicetitan/folder-lint (npm) GHSA-p437-vhm3-qxjf, MAL-2026-11868 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/folder-lint |