Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @servicetitan/react-ioc (npm) GHSA-7mgx-j6p3-858f, MAL-2026-11913 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/react-ioc |
Malicious release: Malicious code in @servicetitan/dte-unlayer (npm) GHSA-w796-4xwr-799v, MAL-2026-11857 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/dte-unlayer |
Malicious release: Malicious code in @servicetitan/datetime-utils (npm) GHSA-25v4-wh23-p3wm, MAL-2026-11851 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/datetime-utils |
Malicious release: Malicious code in @or-sdk/accounts (npm) GHSA-2683-4f9v-8g9v, MAL-2026-11666 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/accounts |
Malicious release: Malicious code in @servicetitan/restrict-imports (npm) GHSA-4w5p-f3fm-8wp6, MAL-2026-11915 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/restrict-imports |
Malicious release: Malicious code in @servicetitan/confirm (npm) GHSA-fxqw-8hmx-h584, MAL-2026-11839 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/confirm |
Malicious release: Malicious code in @servicetitan/cp-api (npm) GHSA-mv6p-w28v-ff46, MAL-2026-11843 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/cp-api |
Malicious release: Malicious code in @or-sdk/bot-templates (npm) GHSA-cw4j-7m7x-9hrh, MAL-2026-11677 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/bot-templates |
Malicious release: Malicious code in @servicetitan/confirm-navigation (npm) GHSA-r8gg-wq5x-89gp, MAL-2026-11840 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/confirm-navigation |
Malicious release: Malicious code in @onereach/si-dropdown-simple (npm) GHSA-c5f2-3hvr-4333, MAL-2026-11638 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/si-dropdown-simple |
Malicious release: Malicious code in @or-sdk/idw-skill (npm) GHSA-mhcw-j5x4-7qh5, MAL-2026-11701 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/idw-skill |
Malicious release: Malicious code in @or-sdk/billing (npm) GHSA-964m-8375-hrh4, MAL-2026-11675 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/billing |
Malicious release: Malicious code in @or-sdk/cards (npm) GHSA-ggmw-rh55-pfj3, MAL-2026-11680 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/cards |
Malicious release: Malicious code in @onereach/or-pro (npm) GHSA-q9rc-vjj7-8fjj, MAL-2026-11612 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/or-pro |
Malicious release: Malicious code in @or-sdk/library-types-v1 (npm) GHSA-x9pr-hcvq-j86f, MAL-2026-11709 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/library-types-v1 |
Malicious release: Malicious code in @onereach/or-browser-next (npm) GHSA-v4cg-rcp7-5jrh, MAL-2026-11609 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/or-browser-next |
Malicious release: Malicious code in @onereach/v-event-calendar (npm) GHSA-xrpq-68fc-g638, MAL-2026-11663 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/v-event-calendar |
Malicious release: Malicious code in @onereach/si-divider (npm) GHSA-g3gj-q987-qxwh, MAL-2026-11636 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/si-divider |
Malicious release: Malicious code in @or-sdk/keys (npm) GHSA-44c7-hpvm-cp2f, MAL-2026-11704 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/keys |
Malicious release: Malicious code in @onereach/si-alert (npm) GHSA-hh42-q76w-2x9q, MAL-2026-11629 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/si-alert |
Malicious release: Malicious code in @onereach/si-dropdown-advanced (npm) GHSA-xxv6-xgf7-8g6c, MAL-2026-11637 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/si-dropdown-advanced |
Malicious release: Malicious code in @onereach/si-switch (npm) GHSA-h853-vq8r-7jvj, MAL-2026-11646 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/si-switch |
Malicious release: Malicious code in @onereach/si-header (npm) GHSA-rg64-5g4p-xg39, MAL-2026-11639 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/si-header |
Malicious release: Malicious code in @onereach/si-list (npm) GHSA-7cw5-mh85-x5xx, MAL-2026-11640 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/si-list |
Malicious release: Malicious code in @onereach/ssml-editor (npm) GHSA-c6vv-xrjr-9m7c, MAL-2026-11651 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/ssml-editor |
Malicious release: Malicious code in @or-sdk/druid (npm) GHSA-cch9-6x9x-8g2p, MAL-2026-11690 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/druid |
Malicious release: Malicious code in @onereach/si-copyable-text (npm) GHSA-hc99-6jmj-9fff, MAL-2026-11634 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/si-copyable-text |
Malicious release: Malicious code in @or-sdk/source (npm) GHSA-w3m5-4cxv-f6p7, MAL-2026-11727 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/source |
Malicious release: Malicious code in @or-sdk/api-tokens-lambda (npm) GHSA-f5mr-g2xw-vv63, MAL-2026-11670 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/api-tokens-lambda |
Malicious release: Malicious code in @or-sdk/permissions (npm) GHSA-5w5r-mh69-mjh2, MAL-2026-11717 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/permissions |
Malicious release: Malicious code in @or-sdk/library (npm) GHSA-j3p8-jv9h-fxhf, MAL-2026-11706 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/library |
Malicious release: Malicious code in @or-sdk/password (npm) GHSA-98pf-6c66-cg9x, MAL-2026-11715 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/password |
Malicious release: Malicious code in @onereach/si-radio-group (npm) GHSA-gjhw-m2c8-j7rc, MAL-2026-11642 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/si-radio-group |
Malicious release: Malicious code in @or-sdk/view-templates (npm) GHSA-vmj9-j3m3-jj66, MAL-2026-11736 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/view-templates |
Malicious release: Malicious code in @onereach/billing-shared (npm) GHSA-h4qw-f7vc-f9wh, MAL-2026-11590 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/billing-shared |
Malicious release: Malicious code in @onereach/si-textinput (npm) GHSA-2vw6-gfpf-h95h, MAL-2026-11648 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/si-textinput |
Malicious release: Malicious code in @or-sdk/sku-builder (npm) GHSA-56pc-54vw-4fr5, MAL-2026-11726 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/sku-builder |
Malicious release: Malicious code in @or-sdk/payments (npm) GHSA-qw9v-55pw-3j7j, MAL-2026-11716 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/payments |
Malicious release: Malicious code in @or-sdk/content-request (npm) GHSA-rp58-mm4c-793q, MAL-2026-11684 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/content-request |
Malicious release: Malicious code in @or-sdk/event-manager (npm) GHSA-g2xr-c23w-7259, MAL-2026-11691 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/event-manager |
Malicious release: Malicious code in @or-sdk/deployments (npm) GHSA-vvw6-2m8j-5g9h, MAL-2026-11688 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/deployments |
Malicious release: Malicious code in @onereach/channel-transformers (npm) GHSA-645w-c5x9-qq64, MAL-2026-11593 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/channel-transformers |
Malicious release: Malicious code in @onereach/condition-builder (npm) GHSA-2jpw-pvfm-jqw6, MAL-2026-11595 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/condition-builder |
Malicious release: Malicious code in @or-sdk/key-value-storage (npm) GHSA-q2q9-w2jp-mgpp, MAL-2026-11703 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/key-value-storage |
Malicious release: Malicious code in @or-sdk/step-templates (npm) GHSA-5pc8-fgw7-jg35, MAL-2026-11729 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/step-templates |
Malicious release: Malicious code in @or-sdk/discovery (npm) GHSA-9phw-ccvx-9q6v, MAL-2026-11689 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/discovery |
Malicious release: Malicious code in @or-sdk/tickets (npm) GHSA-5xj3-95j7-x3cv, MAL-2026-11733 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/tickets |
Malicious release: Malicious code in @onereach/regex-helper (npm) GHSA-8pfj-q685-v7rh, MAL-2026-11623 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/regex-helper |
Malicious release: Malicious code in @onereach/si-root (npm) GHSA-p6rc-xphm-fhg3, MAL-2026-11643 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/si-root |
Malicious release: Malicious code in @onereach/si-step-chooser (npm) GHSA-3qj3-xwcr-573v, MAL-2026-11645 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/si-step-chooser |