Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in tinkoff-boxy-desktop-mgm-product-filter (npm) GHSA-j9c6-mmc6-r23x, MAL-2026-12229 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-boxy-desktop-mgm-product-filter |
Malicious release: Malicious code in tinkoff-statist-browser-typed-client-mb.product.tgeofencing (npm) GHSA-rg3c-9vx6-5mfh, MAL-2026-12268 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-browser-typed-client-mb.product.tgeofencing |
Malicious release: Malicious code in tinkoff-statist-browser-typed-client-sme.rko.conversionpayments.web (npm) GHSA-8g6h-h8m6-w7cq, MAL-2026-12274 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-browser-typed-client-sme.rko.conversionpayments.web |
Malicious release: Malicious code in tinkoff-mutual-mgm-form (npm) GHSA-6q5q-68cm-4f3c, MAL-2026-12244 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-mutual-mgm-form |
Malicious release: Malicious code in tinkoff-pfp-block-desktop-tabs (npm) GHSA-48h6-x5hr-r3v3, MAL-2026-12247 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-pfp-block-desktop-tabs |
Malicious release: Malicious code in tinkoff-terminal-kit-test-commons (npm) GHSA-p8g2-ph77-f7r9, MAL-2026-12281 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-terminal-kit-test-commons |
Malicious release: Malicious code in tinkoff-statist-browser-typed-client-sme.rko.ta.ios.events (npm) GHSA-9g84-6755-r9f2, MAL-2026-12276 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-browser-typed-client-sme.rko.ta.ios.events |
Malicious release: Malicious code in tinkoff-statist-browser-typed-client-mb.product.restrictions.arrestments (npm) MAL-2026-12267 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-browser-typed-client-mb.product.restrictions.arrestments |
Malicious release: Malicious code in tinkoff-statist-browser-typed-client-dwh.chimera.base (npm) GHSA-w72w-w3fh-946m, MAL-2026-12258 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-browser-typed-client-dwh.chimera.base |
Malicious release: Malicious code in tinkoff-statist-browser-typed-client-cardsmobile.events.promotest (npm) GHSA-rr93-6qpg-mg6r, MAL-2026-12255 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-browser-typed-client-cardsmobile.events.promotest |
Malicious release: Malicious code in tinkoff-fb-rf-add-application (npm) GHSA-pvc7-jp4m-6758, MAL-2026-12242 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-fb-rf-add-application |
Malicious release: Malicious code in tinkoff-statist-browser-typed-client-eventea.projects.smartcam (npm) GHSA-946m-r2w5-9p55, MAL-2026-12260 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-browser-typed-client-eventea.projects.smartcam |
Malicious release: Malicious code in tinkoff-boxy-desktop-two-panel-right-image (npm) GHSA-23c2-qcrv-2gc9, MAL-2026-12230 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-boxy-desktop-two-panel-right-image |
Malicious release: Malicious code in tinkoff-statist-browser-typed-client-sme.platform.mobile.dynamicteasers.common (npm) GHSA-6w5q-p9g3-26hf, MAL-2026-12270 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-browser-typed-client-sme.platform.mobile.dynamicteasers.common |
Malicious release: Malicious code in tinkoff-statist-browser-typed-client-sme.users.origination.web (npm) GHSA-9cfm-grjr-hpqf, MAL-2026-12277 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-browser-typed-client-sme.users.origination.web |
Malicious release: Malicious code in tinkoff-statist-browser-typed-client-sme.rko.origsmartphonepaytb.common.mobile.events (npm) GHSA-8w68-xhpf-ww9j, MAL-2026-12275 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-browser-typed-client-sme.rko.origsmartphonepaytb.common.mobile.events |
Malicious release: Malicious code in tinkoff-statist-browser-typed-client-investing.product.pulse (npm) GHSA-953w-4w4x-wp59, MAL-2026-12262 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-browser-typed-client-investing.product.pulse |
Malicious release: Malicious code in tinkoff-statist-browser-typed-client-investaccounting.events.templatepage.mainpage (npm) GHSA-48jc-v3r3-h4fr, MAL-2026-12261 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-browser-typed-client-investaccounting.events.templatepage.mainpage |
Malicious release: Malicious code in tinkoff-statist-browser-typed-client-automlplatform.nlppl.classica (npm) MAL-2026-12254 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-browser-typed-client-automlplatform.nlppl.classica |
Malicious release: Malicious code in tinkoff-test-app-child-app (npm) GHSA-q659-qc8w-8m2x, MAL-2026-12282 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-test-app-child-app |
Malicious release: Malicious code in tinkoff-pfpa-tools (npm) GHSA-5c36-p54m-5gh9, MAL-2026-12251 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-pfpa-tools |
Malicious release: Malicious code in tinkoff-terminal-kit-datetime (npm) MAL-2026-12280 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-terminal-kit-datetime |
Malicious release: Malicious code in tinkoff-ui-angular-addon-wysiwyg (npm) GHSA-pmq9-57f4-g2v7, MAL-2026-12283 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-ui-angular-addon-wysiwyg |
Malicious release: Malicious code in tinkoff-component-limits (npm) GHSA-v58r-xww8-gc9p, MAL-2026-12238 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-component-limits |
Malicious release: Malicious code in tinkoff-pfp-atom-desktop-carousel (npm) GHSA-gm8q-97hx-635q, MAL-2026-12245 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-pfp-atom-desktop-carousel |
Malicious release: Malicious code in tinkoff-pfp-block-mobile-advert-footer (npm) GHSA-j4mw-2cmq-xhcq, MAL-2026-12248 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-pfp-block-mobile-advert-footer |
Malicious release: Malicious code in tinkoff-statist-browser-typed-client-sme.platform.mobile.employees.common.events (npm) MAL-2026-12271 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-browser-typed-client-sme.platform.mobile.employees.common.events |
Malicious release: Malicious code in tinkoff-statist-browser-typed-client-test.softwarecenter.metrics (npm) GHSA-vwg2-5528-w9wc, MAL-2026-12278 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-browser-typed-client-test.softwarecenter.metrics |
Malicious release: Malicious code in tinkoff-codeceptjs-storyshots (npm) GHSA-432x-c5ch-gcx6, MAL-2026-12236 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-codeceptjs-storyshots |
Malicious release: Malicious code in tinkoff-boxy-mobile-separator (npm) GHSA-rrcp-38vc-7qgw, MAL-2026-12235 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-boxy-mobile-separator |
Malicious release: Malicious code in tinkoff-codeceptjs-storyshots-alpha (npm) GHSA-fhqv-jjj8-w6wh, MAL-2026-12237 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-codeceptjs-storyshots-alpha |
Malicious release: Malicious code in tinkoff-boxy-atom-text-link (npm) GHSA-wc79-x38v-pmr3, MAL-2026-12227 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-boxy-atom-text-link |
Malicious release: Malicious code in statist-browser-typed-client-sme.salary.web.metrics (npm) MAL-2026-12215 | Malicious | Not scored | 05 Aug, 2026 | npm statist-browser-typed-client-sme.salary.web.metrics |
Malicious release: Malicious code in tinkoff-pfp-block-mobile-panels (npm) GHSA-gp62-rq95-4fg5, MAL-2026-12249 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-pfp-block-mobile-panels |
Malicious release: Malicious code in statist-browser-typed-client-sme.platform.web.productsnavigation.events (npm) GHSA-9v23-vh6j-pcw7, MAL-2026-12214 | Malicious | Not scored | 05 Aug, 2026 | npm statist-browser-typed-client-sme.platform.web.productsnavigation.events |
Malicious release: Malicious code in pfa-autotests-reporter (npm) GHSA-wxmr-mcwx-4c6q, MAL-2026-12185 | Malicious | Not scored | 05 Aug, 2026 | npm pfa-autotests-reporter |
Malicious release: Malicious code in pfp-forms-insurance-health (npm) GHSA-262x-3pgh-mxj5, MAL-2026-12186 | Malicious | Not scored | 05 Aug, 2026 | npm pfp-forms-insurance-health |
Malicious release: Malicious code in tinkoff-component-page-loader (npm) GHSA-3p77-c6f9-pffh, MAL-2026-12239 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-component-page-loader |
Malicious release: Malicious code in tinkoff-pfp-integration-mobile-slider-icons (npm) GHSA-6c78-688f-6vxq, MAL-2026-12250 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-pfp-integration-mobile-slider-icons |
Malicious release: Malicious code in tinkoff-statist-browser-typed-client-dss.insurance.service (npm) GHSA-h5ww-8cvp-mj62, MAL-2026-12257 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-browser-typed-client-dss.insurance.service |
Malicious release: Malicious code in peter-desktop-peter-big-column (npm) GHSA-6jpg-pv9h-2rf5, MAL-2026-12184 | Malicious | Not scored | 05 Aug, 2026 | npm peter-desktop-peter-big-column |
Malicious release: Malicious code in retracfix (npm) MAL-2026-12190 | Malicious | Not scored | 05 Aug, 2026 | npm retracfix |
Malicious release: Malicious code in stellarfix (npm) MAL-2026-12216 | Malicious | Not scored | 05 Aug, 2026 | npm stellarfix |
Malicious release: Malicious code in beaver-ui-ai-chat-layout (npm) MAL-2026-12142 | Malicious | Not scored | 05 Aug, 2026 | npm beaver-ui-ai-chat-layout |
Malicious release: Malicious code in beaver-ui-actions-button (npm) MAL-2026-12141 | Malicious | Not scored | 05 Aug, 2026 | npm beaver-ui-actions-button |
Malicious release: Malicious code in beaver-ui-hooks (npm) GHSA-cwhj-ccq9-hv73, MAL-2026-12146 | Malicious | Not scored | 05 Aug, 2026 | npm beaver-ui-hooks |
Malicious release: Malicious code in beaver-ui-form-object (npm) GHSA-7f2m-rv2g-c7q2, MAL-2026-12145 | Malicious | Not scored | 05 Aug, 2026 | npm beaver-ui-form-object |
Malicious release: Malicious code in beaver-ui-icon-lock (npm) MAL-2026-12147 | Malicious | Not scored | 05 Aug, 2026 | npm beaver-ui-icon-lock |
Malicious release: Malicious code in akamai-sensorv3 (npm) MAL-2026-12139 | Malicious | Not scored | 05 Aug, 2026 | npm akamai-sensorv3 |
Malicious release: Malicious code in beaver-ui-breadcrumbs (npm) MAL-2026-12143 | Malicious | Not scored | 05 Aug, 2026 | npm beaver-ui-breadcrumbs |