Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override CVE-2026-69254, GHSA-3769-jgqc-cxm7 | Critical | 0.7% | 04 Aug, 2026 | npm flowise npm flowise-components |
Malicious release: Malicious code in @or-sdk/users (npm) GHSA-3jgw-9vhq-6mfw, MAL-2026-11735 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/users |
Malicious release: Malicious code in @servicetitan/eslint-plugin-decorators-declare (npm) GHSA-x3q2-g9rx-x885, MAL-2026-11862 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/eslint-plugin-decorators-declare |
Malicious release: Malicious code in @servicetitan/anvil2-ext-charts (npm) GHSA-cq8q-99vp-qjfx, MAL-2026-11825 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/anvil2-ext-charts |
Malicious release: Malicious code in @servicetitan/assist-utils (npm) GHSA-559v-vqrh-229w, MAL-2026-11831 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/assist-utils |
Malicious release: Malicious code in @servicetitan/widget-platform (npm) GHSA-v4w7-xg9f-9jwq, MAL-2026-11950 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/widget-platform |
Malicious release: Malicious code in @servicetitan/acquisition-functions (npm) GHSA-v9p9-cgq5-55jp, MAL-2026-11811 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/acquisition-functions |
Malicious release: Malicious code in @servicetitan/anvil2-ext-mwv (npm) GHSA-f7rr-5r6f-3g54, MAL-2026-11827 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/anvil2-ext-mwv |
Malicious release: Malicious code in @servicetitan/help-center (npm) GHSA-g6fm-r24r-cw47, MAL-2026-11877 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/help-center |
Malicious release: Malicious code in @servicetitan/contentful (npm) GHSA-qqwx-wf44-jv7f, MAL-2026-11841 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/contentful |
Malicious release: Malicious code in @servicetitan/widget-platform-monolith (npm) GHSA-gvcw-wg5r-hjwg, MAL-2026-11951 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/widget-platform-monolith |
Malicious release: Malicious code in @servicetitan/eh-module-communication (npm) GHSA-xhv5-4v3v-vc3v, MAL-2026-11858 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/eh-module-communication |
Malicious release: Malicious code in @servicetitan/marketing-route (npm) GHSA-4jmc-r9mf-fp8q, MAL-2026-11895 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/marketing-route |
Malicious release: Malicious code in @servicetitan/html-sketchapp (npm) GHSA-97vr-59jg-x83f, MAL-2026-11878 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/html-sketchapp |
Malicious release: Malicious code in @servicetitan/anvil-token (npm) GHSA-g9jv-9f6h-x82w, MAL-2026-11821 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/anvil-token |
Malicious release: Malicious code in @servicetitan/kendo-theme (npm) GHSA-mxvj-vqgw-8rfg, MAL-2026-11882 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/kendo-theme |
Malicious release: Malicious code in @servicetitan/quick-actions (npm) GHSA-phfr-qh27-2c82, MAL-2026-11911 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/quick-actions |
Malicious release: Malicious code in @servicetitan/carto-tokens (npm) GHSA-28qx-rhw7-pmgg, MAL-2026-11837 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/carto-tokens |
Malicious release: Malicious code in @servicetitan/startup-jest (npm) GHSA-2w9r-jxr5-frfq, MAL-2026-11924 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/startup-jest |
Malicious release: Malicious code in @servicetitan/eslint-plugin-mobx-6 (npm) GHSA-rwgv-m36w-4qqx, MAL-2026-11864 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/eslint-plugin-mobx-6 |
Malicious release: Malicious code in @servicetitan/startup-utils (npm) GHSA-fvrx-phjq-p76r, MAL-2026-11926 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/startup-utils |
Malicious release: Malicious code in @servicetitan/marketing-form (npm) GHSA-652j-h45f-c8p7, MAL-2026-11892 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/marketing-form |
Malicious release: Malicious code in @servicetitan/react-hooks (npm) GHSA-6wxq-gmqp-pqx8, MAL-2026-11912 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/react-hooks |
Malicious release: Malicious code in verdaccio-tarball-local-storage (npm) GHSA-9gjj-ggwr-8h6x, MAL-2026-11991 | Malicious | Not scored | 04 Aug, 2026 | npm verdaccio-tarball-local-storage |
Malicious release: Malicious code in @servicetitan/marketing-global-route (npm) GHSA-rf64-3f84-8frq, MAL-2026-11893 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/marketing-global-route |
Malicious release: Malicious code in @servicetitan/document-title (npm) GHSA-jgrf-cwx4-q9cq, MAL-2026-11855 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/document-title |
Malicious release: Malicious code in verdaccio-okta-oauth (npm) GHSA-wf98-jfcg-4vch, MAL-2026-11990 | Malicious | Not scored | 04 Aug, 2026 | npm verdaccio-okta-oauth |
Malicious release: Malicious code in @servicetitan/measure-sheet-data (npm) GHSA-5pgw-jhw4-3q3x, MAL-2026-11898 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/measure-sheet-data |
Malicious release: Malicious code in @onereach/ui-components (npm) GHSA-942v-37mw-mwm8, MAL-2026-11660 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/ui-components |
Malicious release: Malicious code in @onereach/orest-vue-demi-vue2 (npm) GHSA-vwgj-f76c-wrj3, MAL-2026-11617 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/orest-vue-demi-vue2 |
Malicious release: Malicious code in @servicetitan/docs-anvil-uikit-contrib (npm) GHSA-h9gm-pg7x-wvrw, MAL-2026-11853 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/docs-anvil-uikit-contrib |
Malicious release: Malicious code in @onereach/or-browser (npm) GHSA-jxq6-h2qr-qjr6, MAL-2026-11608 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/or-browser |
Malicious release: Malicious code in @servicetitan/json-render-react (npm) GHSA-3jcp-gg2p-6mvq, MAL-2026-11881 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/json-render-react |
Malicious release: Malicious code in @onereach/idw-sdk (npm) GHSA-j2wg-xm9r-vfmf, MAL-2026-11604 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/idw-sdk |
Malicious release: Malicious code in @servicetitan/eslint-plugin-folder-schema (npm) GHSA-7rj8-6h7r-wv23, MAL-2026-11863 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/eslint-plugin-folder-schema |
Malicious release: Malicious code in @servicetitan/ld-type-generator (npm) GHSA-hh8p-84mx-q732, MAL-2026-11886 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/ld-type-generator |
Malicious release: Malicious code in @onereach/idw-apps (npm) GHSA-qv3h-fq9f-f8q6, MAL-2026-11601 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/idw-apps |
Malicious release: Malicious code in @servicetitan/uikit-docs (npm) GHSA-5736-4334-3v4q, MAL-2026-11946 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/uikit-docs |
Malicious release: Malicious code in @servicetitan/standalone-ui (npm) GHSA-92gh-p3pf-6vm6, MAL-2026-11922 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/standalone-ui |
Malicious release: Malicious code in @servicetitan/hash-browser-router (npm) GHSA-9cf9-jhm6-8f97, MAL-2026-11876 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/hash-browser-router |
Malicious release: Malicious code in @or-sdk/markdowner (npm) GHSA-22j9-qhh6-6mg6, MAL-2026-11712 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/markdowner |
Malicious release: Malicious code in @onereach/orest-vue3 (npm) GHSA-669f-2cfg-q7ch, MAL-2026-11619 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/orest-vue3 |
Malicious release: Malicious code in @servicetitan/component-usage (npm) GHSA-8fqc-7w8m-4h8r, MAL-2026-11838 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/component-usage |
Malicious release: Malicious code in @servicetitan/navigation (npm) GHSA-4774-g3fw-f2gg, MAL-2026-11908 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/navigation |
Malicious release: Malicious code in @servicetitan/react-ioc (npm) GHSA-7mgx-j6p3-858f, MAL-2026-11913 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/react-ioc |
Malicious release: Malicious code in @servicetitan/dte-unlayer (npm) GHSA-w796-4xwr-799v, MAL-2026-11857 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/dte-unlayer |
Malicious release: Malicious code in @servicetitan/datetime-utils (npm) GHSA-25v4-wh23-p3wm, MAL-2026-11851 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/datetime-utils |
Malicious release: Malicious code in @or-sdk/accounts (npm) GHSA-2683-4f9v-8g9v, MAL-2026-11666 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/accounts |
Malicious release: Malicious code in @servicetitan/restrict-imports (npm) GHSA-4w5p-f3fm-8wp6, MAL-2026-11915 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/restrict-imports |
Malicious release: Malicious code in @servicetitan/confirm (npm) GHSA-fxqw-8hmx-h584, MAL-2026-11839 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/confirm |