Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in example-js-project (npm) GHSA-945x-vr24-w7vr, MAL-2026-11969 | Malicious | Not scored | 04 Aug, 2026 | npm example-js-project |
Malicious release: Malicious code in @qlik/sprout-gesture (npm) GHSA-h8h2-v2pq-f2j2, MAL-2026-11806 | Malicious | Not scored | 04 Aug, 2026 | npm @qlik/sprout-gesture |
Malicious release: Malicious code in @nebula.js/cli-serve (npm) GHSA-p6mm-86xq-m5x4, MAL-2026-11568 | Malicious | Not scored | 04 Aug, 2026 | npm @nebula.js/cli-serve |
Malicious release: Malicious code in @qlik/tsconfig (npm) GHSA-49vc-6v6x-9fgh, MAL-2026-11810 | Malicious | Not scored | 04 Aug, 2026 | npm @qlik/tsconfig |
Malicious release: Malicious code in @qlik/react-native-simple-grid (npm) GHSA-8hph-v33f-8423, MAL-2026-11802 | Malicious | Not scored | 04 Aug, 2026 | npm @qlik/react-native-simple-grid |
Malicious release: Malicious code in picasso-plugin-q (npm) GHSA-mjqw-xv5j-88f4, MAL-2026-11978 | Malicious | Not scored | 04 Aug, 2026 | npm picasso-plugin-q |
Malicious release: Malicious code in @nebula.js/sn-slider (npm) GHSA-fjgq-mv76-w2cv, MAL-2026-11581 | Malicious | Not scored | 04 Aug, 2026 | npm @nebula.js/sn-slider |
Malicious release: Malicious code in @qlik/sdk (npm) GHSA-qm9r-cfpc-49xq, MAL-2026-11804 | Malicious | Not scored | 04 Aug, 2026 | npm @qlik/sdk |
Malicious release: Malicious code in @qlik/eslint-config-svelte (npm) GHSA-f6jv-v6m4-m7h4, MAL-2026-11796 | Malicious | Not scored | 04 Aug, 2026 | npm @qlik/eslint-config-svelte |
Malicious release: Malicious code in @qlik/eslint-config (npm) GHSA-v3jf-cqwx-xcj6, MAL-2026-11793 | Malicious | Not scored | 04 Aug, 2026 | npm @qlik/eslint-config |
Malicious release: Malicious code in @qlik/sprout-react-table (npm) GHSA-qqq3-92r7-8qwj, MAL-2026-11809 | Malicious | Not scored | 04 Aug, 2026 | npm @qlik/sprout-react-table |
Malicious release: Malicious code in @nebula.js/sn-shape (npm) GHSA-7gfj-r25v-v6v2, MAL-2026-11580 | Malicious | Not scored | 04 Aug, 2026 | npm @nebula.js/sn-shape |
Malicious release: Malicious code in @nebula.js/sn-org-chart (npm) GHSA-mwhj-hw75-h6r7, MAL-2026-11579 | Malicious | Not scored | 04 Aug, 2026 | npm @nebula.js/sn-org-chart |
Malicious release: Malicious code in @nebula.js/theme (npm) GHSA-4hpr-95rm-52f2, MAL-2026-11586 | Malicious | Not scored | 04 Aug, 2026 | npm @nebula.js/theme |
Malicious release: Malicious code in @qlik/oxlint-config (npm) GHSA-whjc-mw6q-4cpw, MAL-2026-11800 | Malicious | Not scored | 04 Aug, 2026 | npm @qlik/oxlint-config |
Malicious release: Malicious code in @nebula.js/sn-tabbed-container (npm) GHSA-96g8-5qg3-gwpp, MAL-2026-11582 | Malicious | Not scored | 04 Aug, 2026 | npm @nebula.js/sn-tabbed-container |
Malicious release: Malicious code in @nebula.js/cli-sense (npm) GHSA-c79x-q2hh-wxrr, MAL-2026-11567 | Malicious | Not scored | 04 Aug, 2026 | npm @nebula.js/cli-sense |
Malicious release: Malicious code in @qlik/runtime-module-loader (npm) GHSA-j38m-872j-mpmj, MAL-2026-11803 | Malicious | Not scored | 04 Aug, 2026 | npm @qlik/runtime-module-loader |
Malicious release: Malicious code in @nebula.js/snapshooter (npm) GHSA-5m9h-w3wv-wxgw, MAL-2026-11583 | Malicious | Not scored | 04 Aug, 2026 | npm @nebula.js/snapshooter |
Malicious release: Malicious code in picasso.js (npm) GHSA-6jmc-6w7f-v47v, MAL-2026-11979 | Malicious | Not scored | 04 Aug, 2026 | npm picasso.js |
Malicious release: Malicious code in @nebula.js/sn-distributionplot (npm) GHSA-7hw3-vjh3-29g6, MAL-2026-11573 | Malicious | Not scored | 04 Aug, 2026 | npm @nebula.js/sn-distributionplot |
Malicious release: Malicious code in picasso-plugin-hammer (npm) GHSA-m8fj-58gp-7cpr, MAL-2026-11977 | Malicious | Not scored | 04 Aug, 2026 | npm picasso-plugin-hammer |
Malicious release: Malicious code in @nebula.js/sn-action-button (npm) GHSA-4f3v-vg7g-x67h, MAL-2026-11571 | Malicious | Not scored | 04 Aug, 2026 | npm @nebula.js/sn-action-button |
Malicious release: Malicious code in @qlik/embed-react (npm) GHSA-82x8-wp99-8jjj, MAL-2026-11789 | Malicious | Not scored | 04 Aug, 2026 | npm @qlik/embed-react |
Malicious release: Malicious code in @nebula.js/cli (npm) GHSA-887g-ghx7-v969, MAL-2026-11565 | Malicious | Not scored | 04 Aug, 2026 | npm @nebula.js/cli |
Malicious release: Malicious code in @onereach/regular-expressions-test (npm) GHSA-56c5-f4cg-8cr2, MAL-2026-11625 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/regular-expressions-test |
Malicious release: Malicious code in @qlik/oxfmt-config (npm) GHSA-h76x-85h7-6jgw, MAL-2026-11799 | Malicious | Not scored | 04 Aug, 2026 | npm @qlik/oxfmt-config |
Malicious release: Malicious code in @nebula.js/test-utils (npm) GHSA-vfmh-xf35-6mj3, MAL-2026-11585 | Malicious | Not scored | 04 Aug, 2026 | npm @nebula.js/test-utils |
Malicious release: Malicious code in @qlik/embed-web-components (npm) GHSA-ghgg-89w3-phrx, MAL-2026-11792 | Malicious | Not scored | 04 Aug, 2026 | npm @qlik/embed-web-components |
Malicious release: Malicious code in @qlik/design-tokens (npm) GHSA-p4mv-wfgp-356c, MAL-2026-11787 | Malicious | Not scored | 04 Aug, 2026 | npm @qlik/design-tokens |
Malicious release: Malicious code in @nebula.js/locale (npm) GHSA-gf29-rwf4-2q85, MAL-2026-11569 | Malicious | Not scored | 04 Aug, 2026 | npm @nebula.js/locale |
Malicious release: Malicious code in @nebula.js/sn-map (npm) GHSA-7fff-4w7c-qpxp, MAL-2026-11577 | Malicious | Not scored | 04 Aug, 2026 | npm @nebula.js/sn-map |
Malicious release: Malicious code in @nebula.js/sn-nav-menu (npm) GHSA-252m-vjpw-497v, MAL-2026-11578 | Malicious | Not scored | 04 Aug, 2026 | npm @nebula.js/sn-nav-menu |
Malicious release: Malicious code in @nebula.js/sn-animator (npm) GHSA-4854-qcwp-jmgj, MAL-2026-11572 | Malicious | Not scored | 04 Aug, 2026 | npm @nebula.js/sn-animator |
Malicious release: Malicious code in hamus.js (npm) GHSA-rx3m-fvv8-f2j8, MAL-2026-11974 | Malicious | Not scored | 04 Aug, 2026 | npm hamus.js |
Flowise: Remote Code Execution Vulnerability in CSVAgent CVE-2026-69256, GHSA-x6vm-w76m-8j7g | Critical | 1.0% | 04 Aug, 2026 | npm flowise npm flowise-components |
Malicious release: Malicious code in @onereach/postcss-scoped-selector (npm) GHSA-63qv-h2r7-8vxg, MAL-2026-11622 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/postcss-scoped-selector |
Malicious release: Malicious code in @servicetitan/feature-spotlight (npm) GHSA-83cv-cpcx-f26v, MAL-2026-11867 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/feature-spotlight |
Malicious release: Malicious code in tslint-folder-schema (npm) GHSA-mvxf-h63j-354v, MAL-2026-11988 | Malicious | Not scored | 04 Aug, 2026 | npm tslint-folder-schema |
Malicious release: Malicious code in @servicetitan/startup-mfe-compat (npm) GHSA-9xw4-632p-2r25, MAL-2026-11925 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/startup-mfe-compat |
Malicious release: Malicious code in @servicetitan/microfront (npm) GHSA-hq6q-gw89-9h5q, MAL-2026-11901 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/microfront |
Malicious release: Malicious code in @servicetitan/examples (npm) GHSA-mgq3-c994-g4g9, MAL-2026-11866 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/examples |
Malicious release: Malicious code in folder-lint (npm) GHSA-5hrq-v9pp-95j9, MAL-2026-11972 | Malicious | Not scored | 04 Aug, 2026 | npm folder-lint |
Malicious release: Malicious code in @servicetitan/standalone-core-feature-gates (npm) GHSA-gm7c-3jq6-ch43, MAL-2026-11918 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/standalone-core-feature-gates |
Malicious release: Malicious code in @servicetitan/microfront-auth (npm) GHSA-9jmp-fw72-55mj, MAL-2026-11902 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/microfront-auth |
Malicious release: Malicious code in @servicetitan/carto-charts-rn (npm) GHSA-ww9c-35p6-2gph, MAL-2026-11834 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/carto-charts-rn |
Malicious release: Malicious code in @servicetitan/anvil2-codemods (npm) GHSA-cr8r-xmh7-jrh8, MAL-2026-11823 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/anvil2-codemods |
Malicious release: Malicious code in @servicetitan/standalone-feature-flags (npm) GHSA-jxmw-q7p2-32f8, MAL-2026-11919 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/standalone-feature-flags |
Malicious release: Malicious code in @servicetitan/grid (npm) GHSA-mv8q-p57m-xj7h, MAL-2026-11872 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/grid |
Malicious release: Malicious code in @servicetitan/unit-tests (npm) GHSA-4m35-gjjx-4jxh, MAL-2026-11947 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/unit-tests |