Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @onereach/pnpm-audit-junit (npm) GHSA-xhrf-6h42-qx33, MAL-2026-11621 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/pnpm-audit-junit |
Malicious release: Malicious code in @or-sdk/mcp-tools (npm) GHSA-hvf5-94cq-qgc6, MAL-2026-11713 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/mcp-tools |
Malicious release: Malicious code in @or-sdk/permissions-cli (npm) GHSA-gpfv-h2gg-qr3q, MAL-2026-11718 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/permissions-cli |
Malicious release: Malicious code in @or-sdk/notifications (npm) GHSA-wpvf-3gq4-fhp9, MAL-2026-11714 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/notifications |
Malicious release: Malicious code in @onereach/time-interpreter (npm) GHSA-397w-wmpp-x7x9, MAL-2026-11657 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/time-interpreter |
Malicious release: Malicious code in @onereach/si-checkbox-group (npm) GHSA-3x9h-hw66-mp96, MAL-2026-11631 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/si-checkbox-group |
Malicious release: Malicious code in @onereach/slack-helpers (npm) GHSA-c8qf-7xhp-qpr9, MAL-2026-11650 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/slack-helpers |
Malicious release: Malicious code in @or-sdk/library-source (npm) GHSA-6rh5-v2fg-rcpp, MAL-2026-11708 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/library-source |
Malicious release: Malicious code in @or-sdk/qna (npm) GHSA-hg4q-qmv8-6g5r, MAL-2026-11722 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/qna |
Malicious release: Malicious code in @arv-bedrock/auth (npm) GHSA-2939-wm9h-8gh5, MAL-2026-11553 | Malicious | Not scored | 04 Aug, 2026 | npm @arv-bedrock/auth |
Malicious release: Malicious code in conv-context-next (npm) GHSA-53f6-5f64-9xxw, MAL-2026-11965 | Malicious | Not scored | 04 Aug, 2026 | npm conv-context-next |
Malicious release: Malicious code in @or-sdk/providers (npm) GHSA-hgwm-78qc-rc5w, MAL-2026-11721 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/providers |
Malicious release: Malicious code in @arv-bedrock/auth-sso-backend (npm) GHSA-mh3h-7fpv-657f, MAL-2026-11556 | Malicious | Not scored | 04 Aug, 2026 | npm @arv-bedrock/auth-sso-backend |
Malicious release: Malicious code in @onereach/or-file-uploader-next (npm) GHSA-6r8x-2rq7-7r8f, MAL-2026-11611 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/or-file-uploader-next |
Malicious release: Malicious code in @arv-bedrock/logger (npm) GHSA-675j-499m-c2jf, MAL-2026-11557 | Malicious | Not scored | 04 Aug, 2026 | npm @arv-bedrock/logger |
Malicious release: Malicious code in native-frontend-orb (npm) GHSA-7xfj-37mv-m3wj, MAL-2026-11976 | Malicious | Not scored | 04 Aug, 2026 | npm native-frontend-orb |
Malicious release: Malicious code in @arv-bedrock/auth-sso (npm) GHSA-vw2m-34g3-6vq9, MAL-2026-11555 | Malicious | Not scored | 04 Aug, 2026 | npm @arv-bedrock/auth-sso |
Malicious release: Malicious code in @ornikar/babel-preset-react (npm) GHSA-7jwc-pv32-8r2r, MAL-2026-11742 | Malicious | Not scored | 04 Aug, 2026 | npm @ornikar/babel-preset-react |
Malicious release: Malicious code in @ornikar/stylelint-config (npm) GHSA-r465-crrq-p9mq, MAL-2026-11778 | Malicious | Not scored | 04 Aug, 2026 | npm @ornikar/stylelint-config |
Malicious release: Malicious code in @ornikar/rollup-config (npm) GHSA-r3f9-rm63-mpcm, MAL-2026-11774 | Malicious | Not scored | 04 Aug, 2026 | npm @ornikar/rollup-config |
Malicious release: Malicious code in @ornikar/prettier-config (npm) GHSA-g5xj-fh96-3782, MAL-2026-11766 | Malicious | Not scored | 04 Aug, 2026 | npm @ornikar/prettier-config |
Malicious release: Malicious code in @ornikar/jest-config-react-native-web (npm) GHSA-p8hv-9x74-ggvc, MAL-2026-11761 | Malicious | Not scored | 04 Aug, 2026 | npm @ornikar/jest-config-react-native-web |
Malicious release: Malicious code in @ornikar/eslint-plugin-ornikar (npm) GHSA-7f43-2jvm-gq85, MAL-2026-11755 | Malicious | Not scored | 04 Aug, 2026 | npm @ornikar/eslint-plugin-ornikar |
Malicious release: Malicious code in @ornikar/repo-config (npm) GHSA-m8wp-v685-2qrj, MAL-2026-11771 | Malicious | Not scored | 04 Aug, 2026 | npm @ornikar/repo-config |
Malicious release: Malicious code in @ornikar/jest-config (npm) GHSA-mmqv-gqg9-h67h, MAL-2026-11758 | Malicious | Not scored | 04 Aug, 2026 | npm @ornikar/jest-config |
Malicious release: Malicious code in @ornikar/babel-preset-base (npm) GHSA-x2q9-5wm2-wf59, MAL-2026-11740 | Malicious | Not scored | 04 Aug, 2026 | npm @ornikar/babel-preset-base |
Malicious release: Malicious code in @ornikar/renovate-config (npm) GHSA-3fx4-3g78-p27c, MAL-2026-11770 | Malicious | Not scored | 04 Aug, 2026 | npm @ornikar/renovate-config |
Malicious release: Malicious code in @ornikar/eslint-config-typescript-react (npm) GHSA-rgf4-q5r2-8vp6, MAL-2026-11753 | Malicious | Not scored | 04 Aug, 2026 | npm @ornikar/eslint-config-typescript-react |
Malicious release: Malicious code in frontend-orb (npm) GHSA-rrwh-32wv-5fcm, MAL-2026-11973 | Malicious | Not scored | 04 Aug, 2026 | npm frontend-orb |
Malicious release: Malicious code in @ornikar/repo-config-react (npm) GHSA-rmrj-gqr6-qhgc, MAL-2026-11772 | Malicious | Not scored | 04 Aug, 2026 | npm @ornikar/repo-config-react |
Malicious release: Malicious code in babel-plugin-linaria-css-to-undefined (npm) GHSA-277g-jjx3-xmwj, MAL-2026-11962 | Malicious | Not scored | 04 Aug, 2026 | npm babel-plugin-linaria-css-to-undefined |
Malicious release: Malicious code in @ornikar/monorepo-config (npm) GHSA-5vpq-rqxx-fpwm, MAL-2026-11764 | Malicious | Not scored | 04 Aug, 2026 | npm @ornikar/monorepo-config |
Malicious release: Malicious code in @ornikar/repo-config-react-legacy-css (npm) GHSA-434v-22mg-qx2h, MAL-2026-11773 | Malicious | Not scored | 04 Aug, 2026 | npm @ornikar/repo-config-react-legacy-css |
Malicious release: Malicious code in @ornikar/jest-config-react (npm) GHSA-m6f5-5vx6-9xvj, MAL-2026-11759 | Malicious | Not scored | 04 Aug, 2026 | npm @ornikar/jest-config-react |
Malicious release: Malicious code in @ornikar/jest-config-react-native (npm) GHSA-93wq-hv8g-qx63, MAL-2026-11760 | Malicious | Not scored | 04 Aug, 2026 | npm @ornikar/jest-config-react-native |
Malicious release: Malicious code in @ornikar/kitt2 (npm) GHSA-33rr-57cc-g2gg, MAL-2026-11762 | Malicious | Not scored | 04 Aug, 2026 | npm @ornikar/kitt2 |
Flowise Sandbox Escape to RCE CVE-2026-69253, GHSA-wg86-r78f-74mp | Critical | 0.7% | 04 Aug, 2026 | npm flowise npm flowise-components |
Malicious release: Malicious code in @ornikar/rollup-plugin-postcss (npm) GHSA-mp73-8g8f-9qr8, MAL-2026-11775 | Malicious | Not scored | 04 Aug, 2026 | npm @ornikar/rollup-plugin-postcss |
Malicious release: Malicious code in @ornikar/typed-css-modules-loader (npm) GHSA-f5fc-5jm9-g69x, MAL-2026-11779 | Malicious | Not scored | 04 Aug, 2026 | npm @ornikar/typed-css-modules-loader |
Malicious release: Malicious code in @ornikar/lerna-config (npm) GHSA-p68h-w5jg-ww55, MAL-2026-11763 | Malicious | Not scored | 04 Aug, 2026 | npm @ornikar/lerna-config |
Malicious release: Malicious code in @ornikar/react-modern-calendar-datepicker (npm) GHSA-3xw9-cf4f-q6cv, MAL-2026-11768 | Malicious | Not scored | 04 Aug, 2026 | npm @ornikar/react-modern-calendar-datepicker |
Malicious release: Malicious code in @ornikar/eslint-config-node (npm) GHSA-6mhh-6wm3-7x4w, MAL-2026-11749 | Malicious | Not scored | 04 Aug, 2026 | npm @ornikar/eslint-config-node |
Malicious release: Malicious code in @ornikar/slate-react-fork (npm) GHSA-845g-745h-58jx, MAL-2026-11776 | Malicious | Not scored | 04 Aug, 2026 | npm @ornikar/slate-react-fork |
Malicious release: Malicious code in @ornikar/apollo-link-timeout (npm) GHSA-9xf2-6w63-p3qh, MAL-2026-11739 | Malicious | Not scored | 04 Aug, 2026 | npm @ornikar/apollo-link-timeout |
Malicious release: Malicious code in @ornikar/react-native-svg-transformer (npm) GHSA-rqjm-92gf-5c24, MAL-2026-11769 | Malicious | Not scored | 04 Aug, 2026 | npm @ornikar/react-native-svg-transformer |
Malicious release: Malicious code in @ornikar/webpack-config (npm) GHSA-2pgp-wr8q-rh6x, MAL-2026-11780 | Malicious | Not scored | 04 Aug, 2026 | npm @ornikar/webpack-config |
Malicious release: Malicious code in @ornikar/babel-preset-kitt-universal (npm) GHSA-mfxj-5cvr-c5xv, MAL-2026-11741 | Malicious | Not scored | 04 Aug, 2026 | npm @ornikar/babel-preset-kitt-universal |
Malicious release: Malicious code in @ornikar/eslint-config-formatjs (npm) GHSA-mv58-mh2g-g3p8, MAL-2026-11748 | Malicious | Not scored | 04 Aug, 2026 | npm @ornikar/eslint-config-formatjs |
Malicious release: Malicious code in @ornikar/postcss-config (npm) GHSA-8h3p-72jc-w79j, MAL-2026-11765 | Malicious | Not scored | 04 Aug, 2026 | npm @ornikar/postcss-config |
Malicious release: Malicious code in pob-test-typescript-package-in-monorepo (npm) GHSA-w4vx-v8m8-c885, MAL-2026-11981 | Malicious | Not scored | 04 Aug, 2026 | npm pob-test-typescript-package-in-monorepo |