Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @servicetitan/unit-tests (npm) GHSA-4m35-gjjx-4jxh, MAL-2026-11947 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/unit-tests |
Malicious release: Malicious code in editable-contracts (npm) GHSA-wxxq-25jf-6998, MAL-2026-11967 | Malicious | Not scored | 04 Aug, 2026 | npm editable-contracts |
Malicious release: Malicious code in @servicetitan/titan-chatbot-api (npm) GHSA-gmqr-c5jv-7qx5, MAL-2026-11939 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/titan-chatbot-api |
Malicious release: Malicious code in @servicetitan/titan-chat-ui (npm) GHSA-27r9-7q76-rc7m, MAL-2026-11935 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/titan-chat-ui |
Flowise: CSV Agent Remote Code Execution via Pyodide Code Injection — Root Shell Verified CVE-2026-69255, GHSA-vmv7-4m6c-3cg5 | Critical | 0.6% | 04 Aug, 2026 | npm flowise npm flowise-components |
Malicious release: Malicious code in @servicetitan/anvil2-illustrations (npm) GHSA-fxj8-9mww-px5h, MAL-2026-11828 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/anvil2-illustrations |
Malicious release: Malicious code in @servicetitan/mpa-components (npm) GHSA-grpr-chjq-gh6g, MAL-2026-11907 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/mpa-components |
Malicious release: Malicious code in @servicetitan/cp-ui (npm) GHSA-5ww3-7v7h-h5h3, MAL-2026-11847 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/cp-ui |
Malicious release: Malicious code in @onereach/salesforce-miaw-client (npm) GHSA-29f9-2vff-42c7, MAL-2026-11627 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/salesforce-miaw-client |
Malicious release: Malicious code in @servicetitan/carto-react-kit (npm) GHSA-36v6-fc44-j786, MAL-2026-11835 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/carto-react-kit |
Malicious release: Malicious code in @servicetitan/intl (npm) GHSA-px4p-f5xc-8733, MAL-2026-11880 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/intl |
Malicious release: Malicious code in @servicetitan/carto-rn-kit (npm) GHSA-gwm2-c78g-9jc6, MAL-2026-11836 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/carto-rn-kit |
Malicious release: Malicious code in @servicetitan/titan-chatbot-ui (npm) GHSA-q994-jf4j-xqvv, MAL-2026-11941 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/titan-chatbot-ui |
Malicious release: Malicious code in @servicetitan/marketing-email-components (npm) GHSA-8fj6-9qm3-gxw6, MAL-2026-11891 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/marketing-email-components |
Malicious release: Malicious code in @servicetitan/skeleton (npm) GHSA-4w93-8g88-6vm8, MAL-2026-11917 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/skeleton |
Malicious release: Malicious code in @servicetitan/microfront-utils (npm) GHSA-5cxq-vprc-w6wg, MAL-2026-11904 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/microfront-utils |
Malicious release: Malicious code in @servicetitan/dte-pdf-editor (npm) GHSA-4cc8-47hq-wx22, MAL-2026-11856 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/dte-pdf-editor |
Malicious release: Malicious code in @servicetitan/anvil-icon (npm) GHSA-3q3h-xxpq-cprg, MAL-2026-11817 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/anvil-icon |
Malicious release: Malicious code in @servicetitan/titan-chatbot-ui-anvil2 (npm) GHSA-ch4h-7p29-3xmv, MAL-2026-11942 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/titan-chatbot-ui-anvil2 |
Malicious release: Malicious code in @servicetitan/titan-chat-ui-anvil2 (npm) GHSA-4vgm-vjfw-7x8q, MAL-2026-11936 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/titan-chat-ui-anvil2 |
Malicious release: Malicious code in @servicetitan/temporal-lite (npm) GHSA-76vq-x7xq-w466, MAL-2026-11931 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/temporal-lite |
Malicious release: Malicious code in @servicetitan/titan-chatbot-ui-cypress (npm) GHSA-gfh4-xx37-q6gc, MAL-2026-11943 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/titan-chatbot-ui-cypress |
Malicious release: Malicious code in @servicetitan/titan-chatbot-client (npm) GHSA-m28f-9p3h-8g8p, MAL-2026-11940 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/titan-chatbot-client |
Malicious release: Malicious code in @servicetitan/microfront-tests (npm) GHSA-rrcm-p7cw-gx96, MAL-2026-11903 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/microfront-tests |
Malicious release: Malicious code in @servicetitan/modularpayments-webfields (npm) GHSA-f4qg-cxf8-m63v, MAL-2026-11905 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/modularpayments-webfields |
Malicious release: Malicious code in @servicetitan/time-zones (npm) GHSA-qhgq-4rvh-3g6x, MAL-2026-11934 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/time-zones |
Malicious release: Malicious code in @servicetitan/cp-react-hooks (npm) GHSA-hrpq-38h8-9w6g, MAL-2026-11846 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/cp-react-hooks |
Malicious release: Malicious code in @servicetitan/admin-layout (npm) GHSA-p7mv-cxfx-xvp9, MAL-2026-11812 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/admin-layout |
Malicious release: Malicious code in @servicetitan/marketing-direct-mail-components (npm) GHSA-65v8-r573-j2fw, MAL-2026-11890 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/marketing-direct-mail-components |
Malicious release: Malicious code in @servicetitan/marketing-ui (npm) GHSA-m8vp-9mgm-6m6h, MAL-2026-11896 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/marketing-ui |
Malicious release: Malicious code in @servicetitan/cp-mfe (npm) GHSA-4778-fq2g-pv26, MAL-2026-11844 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/cp-mfe |
Malicious release: Malicious code in @servicetitan/eslint-plugin-processors-stub (npm) GHSA-c9r2-qv4w-8hm4, MAL-2026-11865 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/eslint-plugin-processors-stub |
Malicious release: Malicious code in @servicetitan/startup (npm) GHSA-hf4g-5fqx-f33r, MAL-2026-11923 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/startup |
Malicious release: Malicious code in @servicetitan/admin-sql-table (npm) GHSA-5grm-2c2q-66hh, MAL-2026-11813 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/admin-sql-table |
Malicious release: Malicious code in @servicetitan/cp-mfe-dev (npm) GHSA-cfwx-66m7-pwp8, MAL-2026-11845 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/cp-mfe-dev |
Malicious release: Malicious code in @servicetitan/lazy-module (npm) GHSA-xf69-mmq3-34gr, MAL-2026-11885 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/lazy-module |
Malicious release: Malicious code in @servicetitan/anvil2-ext-common (npm) GHSA-q2p9-cg4w-wmxp, MAL-2026-11826 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/anvil2-ext-common |
Malicious release: Malicious code in @servicetitan/link-item (npm) GHSA-p25j-87wv-fq84, MAL-2026-11888 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/link-item |
Malicious release: Malicious code in @servicetitan/ko-bridge (npm) GHSA-8vh2-xfpr-vfq5, MAL-2026-11883 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/ko-bridge |
Malicious release: Malicious code in @servicetitan/notifications (npm) GHSA-p99p-5v9w-jv79, MAL-2026-11909 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/notifications |
Malicious release: Malicious code in @servicetitan/mfe-quick-actions (npm) GHSA-4j85-678x-wwpr, MAL-2026-11899 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/mfe-quick-actions |
Malicious release: Malicious code in @servicetitan/carto-charts-react (npm) GHSA-35h6-5mqq-hcj8, MAL-2026-11833 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/carto-charts-react |
Malicious release: Malicious code in @servicetitan/ajax-handlers (npm) GHSA-m4gc-3wwq-vh6c, MAL-2026-11814 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/ajax-handlers |
Malicious release: Malicious code in eslint-plugin-folder-schema (npm) GHSA-5f88-gwm2-m7rw, MAL-2026-11968 | Malicious | Not scored | 04 Aug, 2026 | npm eslint-plugin-folder-schema |
Malicious release: Malicious code in @servicetitan/thoughtspot-theme (npm) GHSA-8j4v-wf47-8qmj, MAL-2026-11933 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/thoughtspot-theme |
Malicious release: Malicious code in @servicetitan/titan-chat-ui-cypress (npm) GHSA-hc3x-j4q8-8qx7, MAL-2026-11938 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/titan-chat-ui-cypress |
Malicious release: Malicious code in @servicetitan/schema-comparison (npm) GHSA-qw53-cr23-328q, MAL-2026-11916 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/schema-comparison |
Malicious release: Malicious code in @servicetitan/carto-charts-core (npm) GHSA-x592-gpm8-xqcp, MAL-2026-11832 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/carto-charts-core |
Malicious release: Malicious code in @or-sdk/tables (npm) GHSA-vhg4-9g6g-g254, MAL-2026-11731 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/tables |
Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override CVE-2026-69254, GHSA-3769-jgqc-cxm7 | Critical | 0.7% | 04 Aug, 2026 | npm flowise npm flowise-components |