Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in dateuuidv2 (npm) MAL-2026-12176 | Malicious | Not scored | 05 Aug, 2026 | npm dateuuidv2 |
Malicious release: Malicious code in geocode-quick (npm) MAL-2026-12180 | Malicious | Not scored | 05 Aug, 2026 | npm geocode-quick |
Malicious release: Malicious code in statist-browser-typed-client-ddp.mentat.ui.web (npm) GHSA-xxx7-8fxg-cfpg, MAL-2026-12209 | Malicious | Not scored | 05 Aug, 2026 | npm statist-browser-typed-client-ddp.mentat.ui.web |
Malicious release: Malicious code in time-webkit-tag (npm) GHSA-hq8m-4h47-frrh, MAL-2026-12226 | Malicious | Not scored | 05 Aug, 2026 | npm time-webkit-tag |
Malicious release: Malicious code in statist-browser-typed-client-mb.product.sme.cards (npm) GHSA-wm5f-c9r3-8wcr, MAL-2026-12213 | Malicious | Not scored | 05 Aug, 2026 | npm statist-browser-typed-client-mb.product.sme.cards |
Malicious release: Malicious code in hubert-react-query (npm) GHSA-2774-hmc5-fgrx, MAL-2026-12181 | Malicious | Not scored | 05 Aug, 2026 | npm hubert-react-query |
Malicious release: Malicious code in tailwindcss-scrollbar-hide (npm) GHSA-6r49-6vv4-wpp3, MAL-2026-12224 | Malicious | Not scored | 05 Aug, 2026 | npm tailwindcss-scrollbar-hide |
Malicious release: Malicious code in twork-data-services-aggregator-sme-task-info (npm) GHSA-9rfw-4796-p982, MAL-2026-12288 | Malicious | Not scored | 05 Aug, 2026 | npm twork-data-services-aggregator-sme-task-info |
Malicious release: Malicious code in twork-mf-e2e-nitro (npm) GHSA-3x7v-w9ww-h4vm, MAL-2026-12303 | Malicious | Not scored | 05 Aug, 2026 | npm twork-mf-e2e-nitro |
Malicious release: Malicious code in twork-mf-sandbox (npm) GHSA-p94g-www2-hw8r, MAL-2026-12304 | Malicious | Not scored | 05 Aug, 2026 | npm twork-mf-sandbox |
Malicious release: Malicious code in twork-data-services-counterfree (npm) GHSA-5g8h-2mx8-cxhm, MAL-2026-12289 | Malicious | Not scored | 05 Aug, 2026 | npm twork-data-services-counterfree |
Malicious release: Malicious code in twork-data-services-proxy-prime-api-v1-account-overdraft-info (npm) GHSA-crw8-m6mj-q6qp, MAL-2026-12299 | Malicious | Not scored | 05 Aug, 2026 | npm twork-data-services-proxy-prime-api-v1-account-overdraft-info |
Malicious release: Malicious code in twork-data-services-sme-operations-authorizations (npm) GHSA-c4f8-h585-2c73, MAL-2026-12302 | Malicious | Not scored | 05 Aug, 2026 | npm twork-data-services-sme-operations-authorizations |
Malicious release: Malicious code in twork-data-services-aggregator-company-sme-main-timeline-loader-with-customers (npm) GHSA-cj3v-xccc-76vq, MAL-2026-12287 | Malicious | Not scored | 05 Aug, 2026 | npm twork-data-services-aggregator-company-sme-main-timeline-loader-with-customers |
Malicious release: Malicious code in twork-data-services-product-design-data (npm) GHSA-hw9w-9435-w32f, MAL-2026-12296 | Malicious | Not scored | 05 Aug, 2026 | npm twork-data-services-product-design-data |
Malicious release: Malicious code in twork-data-services-ng14-aggregator-api-v2-data-view-user-b2b-create-deal-mf-config (npm) MAL-2026-12294 | Malicious | Not scored | 05 Aug, 2026 | npm twork-data-services-ng14-aggregator-api-v2-data-view-user-b2b-create-deal-mf-config |
Malicious release: Malicious code in twork-data-services-sme-agent-company-relation (npm) GHSA-xp7w-qh77-w69x, MAL-2026-12301 | Malicious | Not scored | 05 Aug, 2026 | npm twork-data-services-sme-agent-company-relation |
Malicious release: Malicious code in twork-products-taiga2-products-timeline (npm) GHSA-9qvm-6gf4-j2qh, MAL-2026-12307 | Malicious | Not scored | 05 Aug, 2026 | npm twork-products-taiga2-products-timeline |
Malicious release: Malicious code in twork-data-services-role-app (npm) GHSA-3qwr-p55r-5cjh, MAL-2026-12300 | Malicious | Not scored | 05 Aug, 2026 | npm twork-data-services-role-app |
Malicious release: Malicious code in twork-data-services-proxy-invest-symbols-list (npm) GHSA-c38m-2rcq-3x56, MAL-2026-12298 | Malicious | Not scored | 05 Aug, 2026 | npm twork-data-services-proxy-invest-symbols-list |
Malicious release: Malicious code in twork-data-services-eacq-company-service-v2-api-v1-identifiers-crm (npm) GHSA-c75f-43pv-m83v, MAL-2026-12291 | Malicious | Not scored | 05 Aug, 2026 | npm twork-data-services-eacq-company-service-v2-api-v1-identifiers-crm |
Malicious release: Malicious code in twork-products-taiga2-products-mobile (npm) MAL-2026-12306 | Malicious | Not scored | 05 Aug, 2026 | npm twork-products-taiga2-products-mobile |
Malicious release: Malicious code in twork-data-services-proxy-b2b-crm-api-v1-partners-companies-info (npm) GHSA-67m6-6gp3-fm65, MAL-2026-12297 | Malicious | Not scored | 05 Aug, 2026 | npm twork-data-services-proxy-b2b-crm-api-v1-partners-companies-info |
Malicious release: Malicious code in twork-data-services-getting-arrests (npm) GHSA-2gv9-x25v-532x, MAL-2026-12292 | Malicious | Not scored | 05 Aug, 2026 | npm twork-data-services-getting-arrests |
Malicious release: Malicious code in twork-data-services-customer-api-v2-customer-vip-status (npm) GHSA-xcx3-rr77-frhq, MAL-2026-12290 | Malicious | Not scored | 05 Aug, 2026 | npm twork-data-services-customer-api-v2-customer-vip-status |
Malicious release: Malicious code in twork-data-services-invest-box-account (npm) GHSA-7c2j-v8mh-f457, MAL-2026-12293 | Malicious | Not scored | 05 Aug, 2026 | npm twork-data-services-invest-box-account |
Malicious release: Malicious code in sme-scripts-cli (npm) GHSA-f4fh-84pr-v95c, MAL-2026-12208 | Malicious | Not scored | 05 Aug, 2026 | npm sme-scripts-cli |
Malicious release: Malicious code in statist-browser-typed-client-mb.product.analytics (npm) GHSA-2947-fxx7-8vw5, MAL-2026-12211 | Malicious | Not scored | 05 Aug, 2026 | npm statist-browser-typed-client-mb.product.analytics |
Malicious release: Malicious code in statist-browser-typed-client-mb.product.payments (npm) GHSA-f8x2-6g24-p857, MAL-2026-12212 | Malicious | Not scored | 05 Aug, 2026 | npm statist-browser-typed-client-mb.product.payments |
Malicious release: Malicious code in scandoc-scandoc-core (npm) GHSA-rv57-q2q4-h6x4, MAL-2026-12191 | Malicious | Not scored | 05 Aug, 2026 | npm scandoc-scandoc-core |
Malicious release: Malicious code in a.poltoradnev-package-c (npm) GHSA-6grf-fjh8-82c7, MAL-2026-12127 | Malicious | Not scored | 05 Aug, 2026 | npm a.poltoradnev-package-c |
Malicious release: Malicious code in a.poltoradnev-package-b (npm) MAL-2026-12126 | Malicious | Not scored | 05 Aug, 2026 | npm a.poltoradnev-package-b |
Malicious release: Malicious code in bnpl-blocks-desktop-bnpl-documents (npm) MAL-2026-12173 | Malicious | Not scored | 05 Aug, 2026 | npm bnpl-blocks-desktop-bnpl-documents |
Malicious release: Malicious code in scrollbar-hide-plugin (npm) MAL-2026-12192 | Malicious | Not scored | 05 Aug, 2026 | npm scrollbar-hide-plugin |
Malicious release: Malicious code in aasp-tent-aasp-tent-core (npm) MAL-2026-12128 | Malicious | Not scored | 05 Aug, 2026 | npm aasp-tent-aasp-tent-core |
Malicious release: Malicious code in trapp-check-logs (npm) GHSA-4xfj-589v-h29h, MAL-2026-12286 | Malicious | Not scored | 05 Aug, 2026 | npm trapp-check-logs |
Malicious release: Malicious code in cors-update (npm) MAL-2026-12174 | Malicious | Not scored | 05 Aug, 2026 | npm cors-update |
Malicious release: Malicious code in datefmt-pro (npm) MAL-2026-12175 | Malicious | Not scored | 05 Aug, 2026 | npm datefmt-pro |
Malicious release: Malicious code in vvvedernikov-test-another-test (npm) GHSA-2cwh-jj48-rvcp, MAL-2026-12308 | Malicious | Not scored | 05 Aug, 2026 | npm vvvedernikov-test-another-test |
Malicious release: Malicious code in statist-browser-typed-client-investing.product.loginandauthorization (npm) GHSA-fgh7-375g-mcrw, MAL-2026-12210 | Malicious | Not scored | 05 Aug, 2026 | npm statist-browser-typed-client-investing.product.loginandauthorization |
Malicious release: Malicious code in json-validator-utils (npm) MAL-2026-12182 | Malicious | Not scored | 05 Aug, 2026 | npm json-validator-utils |
Malicious release: Malicious code in tramvai-module-feature-toggle (npm) GHSA-x32c-hhrc-xrc7, MAL-2026-12285 | Malicious | Not scored | 05 Aug, 2026 | npm tramvai-module-feature-toggle |
Malicious release: Malicious code in twork-data-services-procedure-engine-api-v1-procedure-info (npm) GHSA-2pmw-74jm-69r8, MAL-2026-12295 | Malicious | Not scored | 05 Aug, 2026 | npm twork-data-services-procedure-engine-api-v1-procedure-info |
Malicious release: Malicious code in fb-cards-form-no-resident-information (npm) GHSA-5gv5-4q77-jc7x, MAL-2026-12178 | Malicious | Not scored | 05 Aug, 2026 | npm fb-cards-form-no-resident-information |
Malicious release: Malicious code in accounts-stores (npm) MAL-2026-12136 | Malicious | Not scored | 05 Aug, 2026 | npm accounts-stores |
Malicious release: Malicious code in react-scroll-disable (npm) MAL-2026-12189 | Malicious | Not scored | 05 Aug, 2026 | npm react-scroll-disable |
Malicious release: Malicious code in accounts-offers (npm) MAL-2026-12135 | Malicious | Not scored | 05 Aug, 2026 | npm accounts-offers |
Malicious release: Malicious code in accounts-appointment (npm) MAL-2026-12129 | Malicious | Not scored | 05 Aug, 2026 | npm accounts-appointment |
Malicious release: Malicious code in accounts-card-design-picker (npm) MAL-2026-12130 | Malicious | Not scored | 05 Aug, 2026 | npm accounts-card-design-picker |
Malicious release: Malicious code in accounts-constants (npm) MAL-2026-12131 | Malicious | Not scored | 05 Aug, 2026 | npm accounts-constants |