Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in sso-tramvai-module-context-auth (npm) GHSA-3hqw-6hwm-vh64, MAL-2026-12073 | Malicious | Not scored | 05 Aug, 2026 | npm sso-tramvai-module-context-auth |
Malicious release: Malicious code in boardwalk-js-tests (npm) GHSA-6q89-m3mh-hv96, MAL-2026-12062 | Malicious | Not scored | 05 Aug, 2026 | npm boardwalk-js-tests |
Malicious release: Malicious code in @zzzgenesis00/playwrite (npm) MAL-2026-12057 | Malicious | Not scored | 05 Aug, 2026 | npm @zzzgenesis00/playwrite |
Malicious release: Malicious code in checkout-create-pos-order-am (npm) GHSA-cpmp-7ffm-4j7c, MAL-2026-12063 | Malicious | Not scored | 05 Aug, 2026 | npm checkout-create-pos-order-am |
Malicious release: Malicious code in hubert-appointment-v2-task-create-am (npm) GHSA-4q22-w3m6-jpcx, MAL-2026-12066 | Malicious | Not scored | 05 Aug, 2026 | npm hubert-appointment-v2-task-create-am |
Malicious release: Malicious code in bigops-eslint (npm) MAL-2026-12061 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-eslint |
Malicious release: Malicious code in greatcall-customers-commandapi (npm) MAL-2026-12065 | Malicious | Not scored | 05 Aug, 2026 | npm greatcall-customers-commandapi |
Malicious release: Malicious code in tinkoff-statist-browser-typed-client-sme.compliance.web.events (npm) GHSA-9gx3-gv84-hwmg, MAL-2026-12077 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-browser-typed-client-sme.compliance.web.events |
Malicious release: Malicious code in specials-obid-webpack (npm) GHSA-r775-7c47-27mc, MAL-2026-12072 | Malicious | Not scored | 05 Aug, 2026 | npm specials-obid-webpack |
Malicious release: Malicious code in sotqa-test (npm) GHSA-p4jc-5f83-6g8m, MAL-2026-12071 | Malicious | Not scored | 05 Aug, 2026 | npm sotqa-test |
Malicious release: Malicious code in nxify-unic (npm) GHSA-m63g-4mj7-6989, MAL-2026-12069 | Malicious | Not scored | 05 Aug, 2026 | npm nxify-unic |
Malicious release: Malicious code in shopping-shared-atom-mobile-cart-counter (npm) GHSA-63p3-ggxm-fcwg, MAL-2026-12070 | Malicious | Not scored | 05 Aug, 2026 | npm shopping-shared-atom-mobile-cart-counter |
Malicious release: Malicious code in @zzzgenesis00/spl-token-utils (npm) MAL-2026-12058 | Malicious | Not scored | 05 Aug, 2026 | npm @zzzgenesis00/spl-token-utils |
Malicious release: Malicious code in tinkoff-boxy-mobile-vivid-heading (npm) GHSA-233h-rfx9-5vw9, MAL-2026-12075 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-boxy-mobile-vivid-heading |
Malicious release: Malicious code in tinkoff-cache-path (npm) GHSA-phw8-h49c-9v2q, MAL-2026-12076 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-cache-path |
Malicious release: Malicious code in statist-browser-typed-client-nfs.grocery.mobile.events (npm) GHSA-82jq-m327-383g, MAL-2026-12074 | Malicious | Not scored | 05 Aug, 2026 | npm statist-browser-typed-client-nfs.grocery.mobile.events |
Malicious release: Malicious code in bigops-customer (npm) MAL-2026-12038 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-customer |
Malicious release: Malicious code in statist-browser-typed-client-hra.workplacer.events (npm) GHSA-679q-9657-vwr6, MAL-2026-12045 | Malicious | Not scored | 05 Aug, 2026 | npm statist-browser-typed-client-hra.workplacer.events |
Malicious release: Malicious code in bigops-create-manifest (npm) MAL-2026-12037 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-create-manifest |
Malicious release: Malicious code in tui-react-mobile-styles (npm) MAL-2026-12053 | Malicious | Not scored | 05 Aug, 2026 | npm tui-react-mobile-styles |
Malicious release: Malicious code in beaver-ui-form-modal (npm) MAL-2026-12034 | Malicious | Not scored | 05 Aug, 2026 | npm beaver-ui-form-modal |
Malicious release: Malicious code in statist-browser-typed-client-test.jumpwork.circuitbreaker (npm) GHSA-xwjr-gcm9-3fcv, MAL-2026-12046 | Malicious | Not scored | 05 Aug, 2026 | npm statist-browser-typed-client-test.jumpwork.circuitbreaker |
Malicious release: Malicious code in tinkoff-boxy-desktop-features-banner (npm) GHSA-rqq4-xpvf-6ch9, MAL-2026-12048 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-boxy-desktop-features-banner |
Malicious release: Malicious code in bigops-auth-utils (npm) MAL-2026-12035 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-auth-utils |
Malicious release: Malicious code in platform-ui-island (npm) GHSA-32mj-37qf-85h6, MAL-2026-12042 | Malicious | Not scored | 05 Aug, 2026 | npm platform-ui-island |
Malicious release: Malicious code in forge-extended (npm) GHSA-prw8-rx62-jhmh, MAL-2026-12040 | Malicious | Not scored | 05 Aug, 2026 | npm forge-extended |
Malicious release: Malicious code in specials-mvno-client (npm) GHSA-h383-rw87-5jgw, MAL-2026-12044 | Malicious | Not scored | 05 Aug, 2026 | npm specials-mvno-client |
Malicious release: Malicious code in tinkoff-ui-action (npm) GHSA-377x-9v5g-rvgw, MAL-2026-12051 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-ui-action |
Malicious release: Malicious code in aedes_clusters (npm) GHSA-8m4c-fp49-4pw5, MAL-2026-12033 | Malicious | Not scored | 05 Aug, 2026 | npm aedes_clusters |
Malicious release: Malicious code in tramvai-tinkoff-module-legacy-popup (npm) GHSA-x6vc-4q97-5qw4, MAL-2026-12052 | Malicious | Not scored | 05 Aug, 2026 | npm tramvai-tinkoff-module-legacy-popup |
Malicious release: Malicious code in tinkoff-component-infopanel (npm) GHSA-9hcg-pq5h-wj74, MAL-2026-12049 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-component-infopanel |
Malicious release: Malicious code in streak-day-utils (npm) MAL-2026-12047 | Malicious | Not scored | 05 Aug, 2026 | npm streak-day-utils |
Malicious release: Malicious code in data-format-helper (npm) MAL-2026-12039 | Malicious | Not scored | 05 Aug, 2026 | npm data-format-helper |
Malicious release: Malicious code in tinkoff-statist-browser-typed-client-sme.reporting.reporting (npm) GHSA-hh5q-m44v-j748, MAL-2026-12050 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-browser-typed-client-sme.reporting.reporting |
Malicious release: Malicious code in add-two-numbers-x7q9m (npm) MAL-2026-12032 | Malicious | Not scored | 05 Aug, 2026 | npm add-two-numbers-x7q9m |
Malicious release: Malicious code in bigops-chat-tmsg (npm) MAL-2026-12036 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-chat-tmsg |
Malicious release: Malicious code in platform-ui-codemods (npm) GHSA-wc85-c9g8-72g6, MAL-2026-12041 | Malicious | Not scored | 05 Aug, 2026 | npm platform-ui-codemods |
Malicious release: Malicious code in @zzzgenesis00/ethers-wallet (npm) MAL-2026-12031 | Malicious | Not scored | 05 Aug, 2026 | npm @zzzgenesis00/ethers-wallet |
Malicious release: Malicious code in sextant-cli-linux-arm64 (npm) MAL-2026-12043 | Malicious | Not scored | 05 Aug, 2026 | npm sextant-cli-linux-arm64 |
Malicious release: Malicious code in @zzzgenesis00/bip39-mnemonic (npm) MAL-2026-12030 | Malicious | Not scored | 05 Aug, 2026 | npm @zzzgenesis00/bip39-mnemonic |
Malicious release: Malicious code in uibabai (npm) MAL-2026-12054 | Malicious | Not scored | 05 Aug, 2026 | npm uibabai |
Malicious release: Malicious code in sextant-cli-darwin-amd64 (npm) MAL-2026-12028 | Malicious | Not scored | 05 Aug, 2026 | npm sextant-cli-darwin-amd64 |
Malicious release: Malicious code in sextant-cli-linux-amd64 (npm) MAL-2026-12029 | Malicious | Not scored | 05 Aug, 2026 | npm sextant-cli-linux-amd64 |
Malicious release: Malicious code in streak-map-metrics (npm) MAL-2026-11999 | Malicious | Not scored | 05 Aug, 2026 | npm streak-map-metrics |
Malicious release: Malicious code in streak-metricsazb (npm) MAL-2026-12002 | Malicious | Not scored | 05 Aug, 2026 | npm streak-metricsazb |
Malicious release: Malicious code in streak-metricazbd (npm) MAL-2026-12001 | Malicious | Not scored | 05 Aug, 2026 | npm streak-metricazbd |
Malicious release: Malicious code in streak-test-mathcore (npm) MAL-2026-12003 | Malicious | Not scored | 05 Aug, 2026 | npm streak-test-mathcore |
Malicious release: Malicious code in streak-math-metrics (npm) GHSA-3ph5-6m86-7v7r, MAL-2026-12000 | Malicious | Not scored | 05 Aug, 2026 | npm streak-math-metrics |
Malicious release: Malicious code in sextant-cli-darwin-arm64 (npm) MAL-2026-11997 | Malicious | Not scored | 05 Aug, 2026 | npm sextant-cli-darwin-arm64 |
Malicious release: Malicious code in approval-guardian (npm) MAL-2026-11995 | Malicious | Not scored | 04 Aug, 2026 | npm approval-guardian |