Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @servicetitan/micro-frontend (npm) GHSA-2wvx-8vpr-8g64, MAL-2026-11900 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/micro-frontend |
Malicious release: Malicious code in @servicetitan/moneyout-api-client (npm) GHSA-9jv6-vrwm-wvjr, MAL-2026-11906 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/moneyout-api-client |
Malicious release: Malicious code in @servicetitan/responsive (npm) GHSA-v8r5-cr7v-8798, MAL-2026-11914 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/responsive |
Malicious release: Malicious code in @servicetitan/form (npm) GHSA-3fc9-f762-hj5h, MAL-2026-11870 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/form |
Malicious release: Malicious code in @servicetitan/marketing-integration-widgets (npm) GHSA-pr77-52h9-2w5p, MAL-2026-11894 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/marketing-integration-widgets |
Malicious release: Malicious code in @onereach/orest-jest-presets (npm) GHSA-rhwr-g6vq-mxmg, MAL-2026-11616 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/orest-jest-presets |
Malicious release: Malicious code in @servicetitan/data-query (npm) GHSA-7gmc-vf46-7jpq, MAL-2026-11849 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/data-query |
Malicious release: Malicious code in @servicetitan/tokens (npm) GHSA-vh4p-xw5q-qc5f, MAL-2026-11944 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/tokens |
Malicious release: Malicious code in @servicetitan/anvil-react (npm) GHSA-v524-xqwq-8r44, MAL-2026-11819 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/anvil-react |
Malicious release: Malicious code in @servicetitan/testing-library (npm) GHSA-7wrm-7wq3-cffh, MAL-2026-11932 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/testing-library |
Malicious release: Malicious code in @servicetitan/stylelint-config (npm) GHSA-m997-4hj4-92h7, MAL-2026-11927 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/stylelint-config |
Malicious release: Malicious code in @servicetitan/form-state (npm) GHSA-x53v-f8r3-m94v, MAL-2026-11871 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/form-state |
Malicious release: Malicious code in @servicetitan/datadog-rum (npm) GHSA-xggp-cmjw-c248, MAL-2026-11850 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/datadog-rum |
Malicious release: Malicious code in @servicetitan/error-boundary (npm) GHSA-39x7-jmcp-g9x8, MAL-2026-11859 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/error-boundary |
Malicious release: Malicious code in @servicetitan/eslint-config (npm) GHSA-c63f-v4m6-j5qm, MAL-2026-11860 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/eslint-config |
Malicious release: Malicious code in @servicetitan/launchdarkly-service (npm) GHSA-f4mc-vj9p-gr25, MAL-2026-11884 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/launchdarkly-service |
Malicious release: Malicious code in sn-listbox (npm) GHSA-hr73-rrjg-2v2g, MAL-2026-11987 | Malicious | Not scored | 04 Aug, 2026 | npm sn-listbox |
Malicious release: Malicious code in @servicetitan/anvil2 (npm) GHSA-p847-5xpr-43f8, MAL-2026-11822 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/anvil2 |
Malicious release: Malicious code in @nebula.js/cli-build (npm) GHSA-2vj8-6266-q3m5, MAL-2026-11566 | Malicious | Not scored | 04 Aug, 2026 | npm @nebula.js/cli-build |
Malicious release: Malicious code in @servicetitan/anvil2-ext-atlas (npm) GHSA-wrp9-26r3-whwf, MAL-2026-11824 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/anvil2-ext-atlas |
Malicious release: Malicious code in @servicetitan/folder-lint (npm) GHSA-p437-vhm3-qxjf, MAL-2026-11868 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/folder-lint |
Malicious release: Malicious code in @servicetitan/forge (npm) GHSA-3263-rw8q-84j5, MAL-2026-11869 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/forge |
Malicious release: Malicious code in @servicetitan/titan-chat-ui-common (npm) GHSA-j5gf-8wxx-crfv, MAL-2026-11937 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/titan-chat-ui-common |
Malicious release: Malicious code in @nebula.js/nucleus (npm) GHSA-5fpj-9hg9-7jfj, MAL-2026-11570 | Malicious | Not scored | 04 Aug, 2026 | npm @nebula.js/nucleus |
Malicious release: Malicious code in @servicetitan/onboarding-ui (npm) GHSA-fh3m-c5xg-q3p2, MAL-2026-11910 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/onboarding-ui |
Malicious release: Malicious code in @servicetitan/contentful-proxy (npm) GHSA-r9xm-2rwj-6g35, MAL-2026-11842 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/contentful-proxy |
Malicious release: Malicious code in @keyv/memcache (npm) GHSA-94wj-9g85-8vc8, MAL-2026-12016 | Malicious | Not scored | 04 Aug, 2026 | npm @keyv/memcache |
Malicious release: Malicious code in @keyv/mongo (npm) GHSA-h8h5-wqhj-grm7, MAL-2026-12017 | Malicious | Not scored | 04 Aug, 2026 | npm @keyv/mongo |
Malicious release: Malicious code in @keyv/etcd (npm) GHSA-vfx4-wxh5-qr2g, MAL-2026-12015 | Malicious | Not scored | 04 Aug, 2026 | npm @keyv/etcd |
Malicious release: Malicious code in @keyv/sqlite (npm) GHSA-4wfp-qcf3-mgqp, MAL-2026-12023 | Malicious | Not scored | 04 Aug, 2026 | npm @keyv/sqlite |
Malicious release: Malicious code in @keyv/valkey (npm) GHSA-2x7p-3882-mgcg, MAL-2026-12025 | Malicious | Not scored | 04 Aug, 2026 | npm @keyv/valkey |
Malicious release: Malicious code in @keyv/redis (npm) GHSA-q99r-cjmf-3xrf, MAL-2026-12020 | Malicious | Not scored | 04 Aug, 2026 | npm @keyv/redis |
Malicious release: Malicious code in @keyv/mysql (npm) GHSA-q3hf-m2w7-fqqv, MAL-2026-12018 | Malicious | Not scored | 04 Aug, 2026 | npm @keyv/mysql |
Malicious release: Malicious code in @keyv/postgres (npm) GHSA-cgpm-wvpq-73p3, MAL-2026-12019 | Malicious | Not scored | 04 Aug, 2026 | npm @keyv/postgres |
Malicious release: Malicious code in @keyv/dynamo (npm) GHSA-2xmq-8fq4-x7v5, MAL-2026-12012 | Malicious | Not scored | 04 Aug, 2026 | npm @keyv/dynamo |
Malicious release: Malicious code in @keyv/encrypt-node (npm) GHSA-5v34-xm6r-f57w, MAL-2026-12013 | Malicious | Not scored | 04 Aug, 2026 | npm @keyv/encrypt-node |
Malicious release: Malicious code in @keyv/compress-gzip (npm) GHSA-c7r2-p8ff-5ffp, MAL-2026-12010 | Malicious | Not scored | 04 Aug, 2026 | npm @keyv/compress-gzip |
Malicious release: Malicious code in @keyv/serialize-msgpackr (npm) GHSA-xvcf-q9q3-xhg7, MAL-2026-12021 | Malicious | Not scored | 04 Aug, 2026 | npm @keyv/serialize-msgpackr |
Malicious release: Malicious code in @keyv/encrypt-web (npm) GHSA-cv8g-7c7j-3r42, MAL-2026-12014 | Malicious | Not scored | 04 Aug, 2026 | npm @keyv/encrypt-web |
Malicious release: Malicious code in @keyv/compress-lz4 (npm) GHSA-g3gv-3mfc-gffc, MAL-2026-12011 | Malicious | Not scored | 04 Aug, 2026 | npm @keyv/compress-lz4 |
Malicious release: Malicious code in @keyv/compress-brotli (npm) GHSA-mvqh-vgj4-mxx9, MAL-2026-12009 | Malicious | Not scored | 04 Aug, 2026 | npm @keyv/compress-brotli |
Malicious release: Malicious code in @keyv/serialize-superjson (npm) GHSA-3r64-hxqw-gm48, MAL-2026-12022 | Malicious | Not scored | 04 Aug, 2026 | npm @keyv/serialize-superjson |
Malicious release: Malicious code in @keyv/cloudflare-kv (npm) GHSA-cfpv-cpwm-6ff5, MAL-2026-12008 | Malicious | Not scored | 04 Aug, 2026 | npm @keyv/cloudflare-kv |
Malicious release: Malicious code in @keyv/test-suite (npm) GHSA-j45w-h5m8-v3cq, MAL-2026-12024 | Malicious | Not scored | 04 Aug, 2026 | npm @keyv/test-suite |
Malicious release: Malicious code in @keyv/bigmap (npm) GHSA-p677-p29q-h534, MAL-2026-12007 | Malicious | Not scored | 04 Aug, 2026 | npm @keyv/bigmap |
Malicious release: Malicious code in @servicetitan/suppress-warnings (npm) GHSA-5qcp-cg55-rppm, MAL-2026-11928 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/suppress-warnings |
Malicious release: Malicious code in file-entry-cache (npm) GHSA-qp89-2g43-jg8j, MAL-2026-11970 | Malicious | Not scored | 04 Aug, 2026 | npm file-entry-cache |
Malicious release: Malicious code in @cacheable/net (npm) GHSA-pvp8-4g69-xxqh, MAL-2026-11559 | Malicious | Not scored | 04 Aug, 2026 | npm @cacheable/net |
Malicious release: Malicious code in @cacheable/utils (npm) GHSA-8v3r-r9vg-5r66, MAL-2026-11561 | Malicious | Not scored | 04 Aug, 2026 | npm @cacheable/utils |
Malicious release: Malicious code in @cacheable/memory (npm) GHSA-583f-9h76-9fx2, MAL-2026-11558 | Malicious | Not scored | 04 Aug, 2026 | npm @cacheable/memory |