Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @onereach/ui-components-vue2 (npm) GHSA-3486-372j-5gwq, MAL-2026-11662 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/ui-components-vue2 |
Malicious release: Malicious code in @or-sdk/store (npm) GHSA-hrcw-453c-rqf9, MAL-2026-11730 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/store |
Malicious release: Malicious code in @or-sdk/bots (npm) GHSA-4m2j-wqqp-83w7, MAL-2026-11678 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/bots |
Malicious release: Malicious code in @or-sdk/data-hub (npm) GHSA-5668-wc23-6vw2, MAL-2026-11685 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/data-hub |
Malicious release: Malicious code in @or-sdk/pgsql (npm) GHSA-vg2p-xc66-2r72, MAL-2026-11720 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/pgsql |
Malicious release: Malicious code in @or-sdk/tags (npm) GHSA-h7p7-wrxq-gw4m, MAL-2026-11732 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/tags |
Malicious release: Malicious code in @or-sdk/files (npm) GHSA-85q9-hhmc-7qjj, MAL-2026-11692 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/files |
Malicious release: Malicious code in @onereach/expression-components (npm) GHSA-ffxr-vjf5-94p9, MAL-2026-11598 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/expression-components |
Malicious release: Malicious code in @or-sdk/api-tokens (npm) GHSA-rjvc-7296-r6wx, MAL-2026-11669 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/api-tokens |
Malicious release: Malicious code in @onereach/si-code (npm) GHSA-3cm3-6gh6-hgvj, MAL-2026-11632 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/si-code |
Malicious release: Malicious code in @or-sdk/idw (npm) GHSA-29x4-pwhm-rh6h, MAL-2026-11699 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/idw |
Malicious release: Malicious code in @onereach/ui-components-common (npm) GHSA-h7hr-x4ww-6gfm, MAL-2026-11661 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/ui-components-common |
Malicious release: Malicious code in @onereach/font-icons (npm) GHSA-93c6-x2cx-fmc8, MAL-2026-11599 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/font-icons |
Malicious release: Malicious code in @or-sdk/billing-internal (npm) GHSA-q7qr-4mxg-4vcc, MAL-2026-11676 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/billing-internal |
Malicious release: Malicious code in @or-sdk/invitations (npm) GHSA-2wfx-g2fh-rh7f, MAL-2026-11702 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/invitations |
Malicious release: Malicious code in @onereach/step-conversation (npm) GHSA-x75v-j9r9-8c5j, MAL-2026-11653 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/step-conversation |
Malicious release: Malicious code in @onereach/bandwidth-steps-voice-bxml (npm) GHSA-rc8m-6m89-26mw, MAL-2026-11588 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/bandwidth-steps-voice-bxml |
Malicious release: Malicious code in @or-sdk/auth (npm) GHSA-6242-v6q3-mq53, MAL-2026-11672 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/auth |
Malicious release: Malicious code in @or-sdk/idw-public (npm) GHSA-44r6-2vxg-mr88, MAL-2026-11700 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/idw-public |
Malicious release: Malicious code in @onereach/messengers-infobip-sdk (npm) GHSA-c6g6-wwq3-cgq3, MAL-2026-11607 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/messengers-infobip-sdk |
Malicious release: Malicious code in @or-sdk/adapters (npm) GHSA-v4pr-r83g-jq5f, MAL-2026-11667 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/adapters |
Malicious release: Malicious code in @or-sdk/flows (npm) GHSA-p7cx-8mpx-4949, MAL-2026-11695 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/flows |
Malicious release: Malicious code in @onereach/authorizer-helper (npm) GHSA-phh2-qggv-9ggr, MAL-2026-11587 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/authorizer-helper |
Malicious release: Malicious code in @or-sdk/hitl (npm) GHSA-rvcx-qqp9-jjf3, MAL-2026-11697 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/hitl |
Malicious release: Malicious code in @onereach/step-voice (npm) GHSA-qc9m-43v9-6f42, MAL-2026-11655 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/step-voice |
Malicious release: Malicious code in @or-sdk/lookup (npm) GHSA-4x86-8pw5-36vx, MAL-2026-11711 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/lookup |
Malicious release: Malicious code in @onereach/billing-dto (npm) GHSA-6m2r-w4cc-322c, MAL-2026-11589 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/billing-dto |
Malicious release: Malicious code in @or-sdk/transcripts (npm) GHSA-p4qg-69jp-5qmx, MAL-2026-11734 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/transcripts |
Malicious release: Malicious code in @onereach/si-select (npm) GHSA-mp26-cq7g-v8mj, MAL-2026-11644 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/si-select |
Malicious release: Malicious code in @or-sdk/agents (npm) GHSA-v9vm-7rq6-q764, MAL-2026-11668 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/agents |
Malicious release: Malicious code in @or-sdk/apps (npm) GHSA-9hq7-f447-rr4m, MAL-2026-11671 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/apps |
Malicious release: Malicious code in @or-sdk/web-search (npm) GHSA-gv98-h3fj-hfrj, MAL-2026-11738 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/web-search |
Malicious release: Malicious code in @or-sdk/identifiers (npm) GHSA-rx3p-hh6j-4c47, MAL-2026-11698 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/identifiers |
Malicious release: Malicious code in @or-sdk/flow-templates (npm) GHSA-9gf9-qpp6-74fx, MAL-2026-11694 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/flow-templates |
Malicious release: Malicious code in @onereach/ts-memoize (npm) GHSA-5xq8-fw2q-2fwv, MAL-2026-11658 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/ts-memoize |
Malicious release: Malicious code in @onereach/types-contacts-api (npm) GHSA-9c75-m5mx-c4qc, MAL-2026-11659 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/types-contacts-api |
Malicious release: Malicious code in @onereach/orest-vue-demi-vue3 (npm) GHSA-whj3-mhfj-38rh, MAL-2026-11618 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/orest-vue-demi-vue3 |
Malicious release: Malicious code in @arv-bedrock/auth-admin (npm) GHSA-2j4f-562j-3rm4, MAL-2026-11554 | Malicious | Not scored | 04 Aug, 2026 | npm @arv-bedrock/auth-admin |
Malicious release: Malicious code in @onereach/or-content-builder-renderer (npm) GHSA-7v6h-m554-4j2c, MAL-2026-11610 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/or-content-builder-renderer |
Malicious release: Malicious code in @picsart/ai-sdk (npm) GHSA-cxqq-phxq-9v9r, MAL-2026-11781 | Malicious | Not scored | 04 Aug, 2026 | npm @picsart/ai-sdk |
Malicious release: Malicious code in @onereach/lambda-invocation (npm) GHSA-mg9j-55m3-8955, MAL-2026-11606 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/lambda-invocation |
Malicious release: Malicious code in @or-sdk/files-sync-node (npm) GHSA-26p8-9g72-xc5c, MAL-2026-11693 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/files-sync-node |
Malicious release: Malicious code in @onereach/content-builder-template-compiler (npm) GHSA-c399-6hx7-4r93, MAL-2026-11597 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/content-builder-template-compiler |
Malicious release: Malicious code in @onereach/ckeditor5-build-classic (npm) GHSA-wqx6-j493-j327, MAL-2026-11594 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/ckeditor5-build-classic |
Malicious release: Malicious code in @or-sdk/source-api (npm) GHSA-6p28-45w5-23x4, MAL-2026-11728 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/source-api |
Malicious release: Malicious code in @ornikar/prismic-components (npm) GHSA-5xqc-8496-wrhq, MAL-2026-11767 | Malicious | Not scored | 04 Aug, 2026 | npm @ornikar/prismic-components |
Malicious release: Malicious code in pob-test-package-in-monorepo (npm) GHSA-438w-p37w-9w8j, MAL-2026-11980 | Malicious | Not scored | 04 Aug, 2026 | npm pob-test-package-in-monorepo |
Malicious release: Malicious code in @onereach/step-run-snowflake-query (npm) GHSA-rqmm-m5qr-4r23, MAL-2026-11654 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/step-run-snowflake-query |
Malicious release: Malicious code in @ornikar/eslint-config-babel-use (npm) GHSA-5jmp-8jw6-gwf5, MAL-2026-11747 | Malicious | Not scored | 04 Aug, 2026 | npm @ornikar/eslint-config-babel-use |
Malicious release: Malicious code in @onereach/orest-input-cli (npm) GHSA-vpm4-cfqv-4ggc, MAL-2026-11615 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/orest-input-cli |