Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @servicetitan/marketing-widgets (npm) GHSA-8rh9-8r2x-mqv4, MAL-2026-11897 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/marketing-widgets |
Malicious release: Malicious code in @servicetitan/web-components (npm) GHSA-ppx3-8h2p-vrx8, MAL-2026-11949 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/web-components |
Malicious release: Malicious code in @picsart/gen-ai (npm) GHSA-4p68-ppf4-vjwc, MAL-2026-11782 | Malicious | Not scored | 04 Aug, 2026 | npm @picsart/gen-ai |
Malicious release: Malicious code in @ornikar/graphql-config (npm) GHSA-pwmg-hhvx-94mr, MAL-2026-11756 | Malicious | Not scored | 04 Aug, 2026 | npm @ornikar/graphql-config |
Malicious release: Malicious code in @ornikar/eslint-plugin-neverthrow (npm) GHSA-j378-3j38-8rg5, MAL-2026-11754 | Malicious | Not scored | 04 Aug, 2026 | npm @ornikar/eslint-plugin-neverthrow |
Malicious release: Malicious code in @or-sdk/chat (npm) GHSA-mxcc-ccp6-gxp4, MAL-2026-11682 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/chat |
Malicious release: Malicious code in @onereach/get-version-data (npm) GHSA-7vcg-ff6h-mhph, MAL-2026-11600 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/get-version-data |
Malicious release: Malicious code in @or-sdk/library-categories (npm) GHSA-hgxp-rjq6-qhqx, MAL-2026-11707 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/library-categories |
Malicious release: Malicious code in @onereach/cb-schema-translator (npm) GHSA-wx6r-7qj6-rjxv, MAL-2026-11591 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/cb-schema-translator |
Malicious release: Malicious code in @or-sdk/graph (npm) GHSA-wm94-2f37-j7pq, MAL-2026-11696 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/graph |
Malicious release: Malicious code in @onereach/styles (npm) GHSA-8pw5-rhrc-pv3j, MAL-2026-11656 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/styles |
Malicious release: Malicious code in @servicetitan/log-service (npm) GHSA-g5j5-mfrp-8mh8, MAL-2026-11889 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/log-service |
Malicious release: Malicious code in @or-sdk/library-types-v2 (npm) GHSA-3475-v8pg-87p7, MAL-2026-11710 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/library-types-v2 |
Malicious release: Malicious code in @onereach/idw-contracts (npm) GHSA-253v-qv33-jv73, MAL-2026-11602 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/idw-contracts |
Malicious release: Malicious code in rwc-client (npm) GHSA-64gv-7jmp-fphc, MAL-2026-11985 | Malicious | Not scored | 04 Aug, 2026 | npm rwc-client |
Malicious release: Malicious code in @servicetitan/hammer-token (npm) GHSA-qvhm-jx8x-jc57, MAL-2026-11875 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/hammer-token |
Malicious release: Malicious code in @servicetitan/toolbelt-shared-registry (npm) GHSA-mqwx-8hgf-w2v2, MAL-2026-11945 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/toolbelt-shared-registry |
Malicious release: Malicious code in @onereach/si-checkbox (npm) GHSA-4cq9-pm53-63rm, MAL-2026-11630 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/si-checkbox |
Malicious release: Malicious code in @onereach/si-a-button (npm) GHSA-ffmh-34qf-89jg, MAL-2026-11628 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/si-a-button |
Malicious release: Malicious code in @servicetitan/tanstack-query-mobx (npm) GHSA-x9rp-2ppw-m5p8, MAL-2026-11930 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/tanstack-query-mobx |
Malicious release: Malicious code in @onereach/idw-init-account-resources (npm) GHSA-3xf8-xwph-xcmw, MAL-2026-11603 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/idw-init-account-resources |
Malicious release: Malicious code in @servicetitan/hammer-react (npm) GHSA-x4vx-m5pv-w23h, MAL-2026-11874 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/hammer-react |
Malicious release: Malicious code in @or-sdk/base (npm) GHSA-c93v-93xf-5vgh, MAL-2026-11674 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/base |
Malicious release: Malicious code in @onereach/or-sdk-agent-cli (npm) GHSA-jp5w-xwqc-8pq5, MAL-2026-11613 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/or-sdk-agent-cli |
Malicious release: Malicious code in @onereach/si-datepicker (npm) GHSA-8hp3-h87r-r8vx, MAL-2026-11635 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/si-datepicker |
Malicious release: Malicious code in @or-sdk/authorizer (npm) GHSA-ph9p-5f3j-j863, MAL-2026-11673 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/authorizer |
Malicious release: Malicious code in @onereach/channel-transformer (npm) GHSA-63qp-66rg-pwmw, MAL-2026-11592 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/channel-transformer |
Malicious release: Malicious code in @or-sdk/queue-manager (npm) GHSA-f3pc-vvwm-g95f, MAL-2026-11723 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/queue-manager |
Malicious release: Malicious code in @servicetitan/anvil-fonts (npm) GHSA-f58f-q8mq-6xvx, MAL-2026-11816 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/anvil-fonts |
Malicious release: Malicious code in @onereach/si-collapsible-group (npm) GHSA-rgvc-mwh2-jmf2, MAL-2026-11633 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/si-collapsible-group |
Malicious release: Malicious code in @or-sdk/permissions-lambda (npm) GHSA-v3mc-x96h-q9w7, MAL-2026-11719 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/permissions-lambda |
Malicious release: Malicious code in @onereach/idw-ui-components (npm) GHSA-5hwg-34v3-gf8x, MAL-2026-11605 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/idw-ui-components |
Malicious release: Malicious code in @or-sdk/ccp (npm) GHSA-xjqj-g5f4-pf5q, MAL-2026-11681 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/ccp |
Malicious release: Malicious code in @or-sdk/contacts (npm) GHSA-xxv6-xr99-f75g, MAL-2026-11683 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/contacts |
Malicious release: Malicious code in @onereach/rwc-client (npm) GHSA-4qqw-xhvx-7cjg, MAL-2026-11626 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/rwc-client |
Malicious release: Malicious code in @servicetitan/design-system (npm) GHSA-cjgc-69g5-x5qv, MAL-2026-11852 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/design-system |
Malicious release: Malicious code in @onereach/regular-expressions (npm) GHSA-p4xj-w83m-hjf9, MAL-2026-11624 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/regular-expressions |
Malicious release: Malicious code in @onereach/phonenumber-interpreter (npm) GHSA-8289-7q2r-f33m, MAL-2026-11620 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/phonenumber-interpreter |
Malicious release: Malicious code in @or-sdk/data-hub-svc (npm) GHSA-hj82-vqh6-4cjp, MAL-2026-11686 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/data-hub-svc |
Malicious release: Malicious code in @or-sdk/sdk-api (npm) GHSA-75m3-x8gg-vf7f, MAL-2026-11724 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/sdk-api |
Malicious release: Malicious code in @or-sdk/knowledge-models (npm) GHSA-c292-gr84-8qfc, MAL-2026-11705 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/knowledge-models |
Malicious release: Malicious code in @or-sdk/settings (npm) GHSA-3wwh-2rgm-rhxc, MAL-2026-11725 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/settings |
Malicious release: Malicious code in @servicetitan/va-mfe-loader (npm) GHSA-x3v2-v328-jjmw, MAL-2026-11948 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/va-mfe-loader |
Malicious release: Malicious code in @servicetitan/standalone-tm-api (npm) GHSA-87qw-vv3p-gg3h, MAL-2026-11921 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/standalone-tm-api |
Malicious release: Malicious code in @onereach/content-builder (npm) GHSA-xf8p-9j5j-fm77, MAL-2026-11596 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/content-builder |
Malicious release: Malicious code in @qlik/eslint-config-vue (npm) GHSA-qfj9-r4mh-j6j7, MAL-2026-11797 | Malicious | Not scored | 04 Aug, 2026 | npm @qlik/eslint-config-vue |
Malicious release: Malicious code in @onereach/webform (npm) GHSA-2r99-2449-9mqm, MAL-2026-11664 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/webform |
Malicious release: Malicious code in @onereach/si-merge-tag-input (npm) GHSA-gx78-9x68-q5hj, MAL-2026-11641 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/si-merge-tag-input |
Malicious release: Malicious code in @servicetitan/line-item-editor (npm) GHSA-v2gm-rj9p-j524, MAL-2026-11887 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/line-item-editor |
Malicious release: Malicious code in @servicetitan/micro-frontend (npm) GHSA-2wvx-8vpr-8g64, MAL-2026-11900 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/micro-frontend |