Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in a.poltoradnev-package-c (npm) GHSA-6grf-fjh8-82c7, MAL-2026-12127 | Malicious | Not scored | 05 Aug, 2026 | npm a.poltoradnev-package-c |
Malicious release: Malicious code in a.poltoradnev-package-b (npm) MAL-2026-12126 | Malicious | Not scored | 05 Aug, 2026 | npm a.poltoradnev-package-b |
Malicious release: Malicious code in bnpl-blocks-desktop-bnpl-documents (npm) MAL-2026-12173 | Malicious | Not scored | 05 Aug, 2026 | npm bnpl-blocks-desktop-bnpl-documents |
Malicious release: Malicious code in scrollbar-hide-plugin (npm) MAL-2026-12192 | Malicious | Not scored | 05 Aug, 2026 | npm scrollbar-hide-plugin |
Malicious release: Malicious code in aasp-tent-aasp-tent-core (npm) MAL-2026-12128 | Malicious | Not scored | 05 Aug, 2026 | npm aasp-tent-aasp-tent-core |
Malicious release: Malicious code in trapp-check-logs (npm) GHSA-4xfj-589v-h29h, MAL-2026-12286 | Malicious | Not scored | 05 Aug, 2026 | npm trapp-check-logs |
Malicious release: Malicious code in cors-update (npm) MAL-2026-12174 | Malicious | Not scored | 05 Aug, 2026 | npm cors-update |
Malicious release: Malicious code in datefmt-pro (npm) MAL-2026-12175 | Malicious | Not scored | 05 Aug, 2026 | npm datefmt-pro |
Malicious release: Malicious code in vvvedernikov-test-another-test (npm) GHSA-2cwh-jj48-rvcp, MAL-2026-12308 | Malicious | Not scored | 05 Aug, 2026 | npm vvvedernikov-test-another-test |
Malicious release: Malicious code in statist-browser-typed-client-investing.product.loginandauthorization (npm) GHSA-fgh7-375g-mcrw, MAL-2026-12210 | Malicious | Not scored | 05 Aug, 2026 | npm statist-browser-typed-client-investing.product.loginandauthorization |
Malicious release: Malicious code in json-validator-utils (npm) MAL-2026-12182 | Malicious | Not scored | 05 Aug, 2026 | npm json-validator-utils |
Malicious release: Malicious code in tramvai-module-feature-toggle (npm) GHSA-x32c-hhrc-xrc7, MAL-2026-12285 | Malicious | Not scored | 05 Aug, 2026 | npm tramvai-module-feature-toggle |
Malicious release: Malicious code in twork-data-services-procedure-engine-api-v1-procedure-info (npm) GHSA-2pmw-74jm-69r8, MAL-2026-12295 | Malicious | Not scored | 05 Aug, 2026 | npm twork-data-services-procedure-engine-api-v1-procedure-info |
Malicious release: Malicious code in fb-cards-form-no-resident-information (npm) GHSA-5gv5-4q77-jc7x, MAL-2026-12178 | Malicious | Not scored | 05 Aug, 2026 | npm fb-cards-form-no-resident-information |
Malicious release: Malicious code in accounts-stores (npm) MAL-2026-12136 | Malicious | Not scored | 05 Aug, 2026 | npm accounts-stores |
Malicious release: Malicious code in react-scroll-disable (npm) MAL-2026-12189 | Malicious | Not scored | 05 Aug, 2026 | npm react-scroll-disable |
Malicious release: Malicious code in accounts-offers (npm) MAL-2026-12135 | Malicious | Not scored | 05 Aug, 2026 | npm accounts-offers |
Malicious release: Malicious code in accounts-appointment (npm) MAL-2026-12129 | Malicious | Not scored | 05 Aug, 2026 | npm accounts-appointment |
Malicious release: Malicious code in accounts-card-design-picker (npm) MAL-2026-12130 | Malicious | Not scored | 05 Aug, 2026 | npm accounts-card-design-picker |
Malicious release: Malicious code in accounts-constants (npm) MAL-2026-12131 | Malicious | Not scored | 05 Aug, 2026 | npm accounts-constants |
Malicious release: Malicious code in accounts-ddos-shield (npm) MAL-2026-12132 | Malicious | Not scored | 05 Aug, 2026 | npm accounts-ddos-shield |
Malicious release: Malicious code in accounts-limits (npm) MAL-2026-12134 | Malicious | Not scored | 05 Aug, 2026 | npm accounts-limits |
Malicious release: Malicious code in tailwind-animation-founder (npm) MAL-2026-12218 | Malicious | Not scored | 05 Aug, 2026 | npm tailwind-animation-founder |
Malicious release: Malicious code in accounts-forms (npm) MAL-2026-12133 | Malicious | Not scored | 05 Aug, 2026 | npm accounts-forms |
Malicious release: Malicious code in tailwindcss-form-components (npm) GHSA-6ffq-phjp-69jj, GHSA-mx7q-w72x-jgrh, GHSA-p9jp-9h4v-vpgv, GHSA-qqcc-hmq5-37p5, GHSA-x29h-74hf-jq7x, MAL-2026-12223, MAL-2026-13348, MAL-2026-13356, SNYK-JS-BIGOPSRXPOSTMESSAGE-18551079 | Malicious | Not scored | 05 Aug, 2026 | npm chai-foundry npm lakk-analytics npm tailwindcss-form-components |
Malicious release: Malicious code in tailwind-opentype (npm) MAL-2026-12222 | Malicious | Not scored | 05 Aug, 2026 | npm tailwind-opentype |
Malicious release: Malicious code in tailwind-custom-forms (npm) GHSA-4mgg-vhf5-9r79, MAL-2026-12221 | Malicious | Not scored | 05 Aug, 2026 | npm tailwind-custom-forms |
Malicious release: Malicious code in tailwind-animationpack (npm) GHSA-pqcx-38vc-5c6x, MAL-2026-12220 | Malicious | Not scored | 05 Aug, 2026 | npm tailwind-animationpack |
Malicious release: Malicious code in tailwind-animationgroup (npm) GHSA-69pm-q85v-q89g, MAL-2026-12219 | Malicious | Not scored | 05 Aug, 2026 | npm tailwind-animationgroup |
Malicious release: Malicious code in fb-insurance--boxified-form-vzr-test (npm) MAL-2026-12179 | Malicious | Not scored | 05 Aug, 2026 | npm fb-insurance--boxified-form-vzr-test |
Malicious release: Malicious code in 1239i32049i (npm) MAL-2026-12117 | Malicious | Not scored | 05 Aug, 2026 | npm 1239i32049i |
Malicious release: Malicious code in tailwind-animate-plugin (npm) MAL-2026-12217 | Malicious | Not scored | 05 Aug, 2026 | npm tailwind-animate-plugin |
Malicious release: Malicious code in tinkoff-fb-fieldset-car-reference-kasko (npm) GHSA-4pm5-vwjx-55wp, MAL-2026-12241 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-fb-fieldset-car-reference-kasko |
Malicious release: Malicious code in tinkoff-statist-browser-typed-client-jumptaxi.feature.contacts (npm) GHSA-r9wc-7mc8-j4r6, MAL-2026-12265 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-browser-typed-client-jumptaxi.feature.contacts |
Malicious release: Malicious code in tinkoff-boxy-mobile-documents (npm) GHSA-97hc-v95m-g3h9, MAL-2026-12234 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-boxy-mobile-documents |
Malicious release: Malicious code in tinkoff-boxy-independent-kasko-form (npm) MAL-2026-12233 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-boxy-independent-kasko-form |
Malicious release: Malicious code in tinkoff-boxy-gitlab-labels (npm) GHSA-m4w6-4923-8gc3, MAL-2026-12232 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-boxy-gitlab-labels |
Malicious release: Malicious code in tinkoff-statist-browser-typed-client-leasing.admin.events (npm) GHSA-pwcq-5xh6-9383, MAL-2026-12266 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-browser-typed-client-leasing.admin.events |
Malicious release: Malicious code in tinkoff-pwa-confac-types (npm) GHSA-6rh3-gcq9-vmhv, MAL-2026-12252 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-pwa-confac-types |
Malicious release: Malicious code in tinkoff-fb-app-frame-page-height-dippy (npm) GHSA-4xh9-wm5m-39jp, MAL-2026-12240 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-fb-app-frame-page-height-dippy |
Malicious release: Malicious code in tinkoff-statist-browser-typed-client-eventea.projects.finhealthwebmicroblocks (npm) GHSA-7q2v-5fj7-w9mg, MAL-2026-12259 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-browser-typed-client-eventea.projects.finhealthwebmicroblocks |
Malicious release: Malicious code in tinkoff-fb-service-prefill-profile-contact (npm) MAL-2026-12243 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-fb-service-prefill-profile-contact |
Malicious release: Malicious code in tinkoff-statist-browser-typed-client-itsa.candy.selfservicesupport.frontend.events (npm) GHSA-4mrm-8v83-27p9, MAL-2026-12263 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-browser-typed-client-itsa.candy.selfservicesupport.frontend.events |
Malicious release: Malicious code in tinkoff-statist-browser-typed-client-coretech.statist.mobile.ci (npm) GHSA-3frj-gg7c-mc4m, MAL-2026-12256 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-browser-typed-client-coretech.statist.mobile.ci |
Malicious release: Malicious code in tinkoff-statist-browser-typed-client-itsa.corporatemessenger.clientv1.web.events (npm) GHSA-j779-v7f5-mqq3, MAL-2026-12264 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-browser-typed-client-itsa.corporatemessenger.clientv1.web.events |
Malicious release: Malicious code in tinkoff-statist-browser-typed-client-sme.platform.web.companyprofile.metrics (npm) GHSA-r3q8-h34r-9h8r, MAL-2026-12272 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-browser-typed-client-sme.platform.web.companyprofile.metrics |
Malicious release: Malicious code in tinkoff-statist-browser-typed-client-sme.rko.authorization.common (npm) GHSA-8q7h-2qw7-c3cr, MAL-2026-12273 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-browser-typed-client-sme.rko.authorization.common |
Malicious release: Malicious code in tinkoff-statist-browser-typed-client-art.apps.reporegistry (npm) GHSA-3h58-7m84-65h5, MAL-2026-12253 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-browser-typed-client-art.apps.reporegistry |
Malicious release: Malicious code in tinkoff-volna-zustate (npm) GHSA-fm7r-fg6q-669q, MAL-2026-12284 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-volna-zustate |
Malicious release: Malicious code in tinkoff-statist-web-typed-client-test.golden.retriever (npm) GHSA-p29h-p689-cjh5, MAL-2026-12279 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-web-typed-client-test.golden.retriever |