Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @spinstorm/typescript-config (npm) GHSA-2x9p-4774-4q5v, MAL-2026-7092 | Malicious | Not scored | 07 Jul, 2026 | npm @spinstorm/typescript-config |
Malicious release: Malicious code in @spinstorm/eslint-config (npm) GHSA-f93r-8gx9-vcr7, MAL-2026-7091 | Malicious | Not scored | 07 Jul, 2026 | npm @spinstorm/eslint-config |
Malicious release: Malicious code in @spinstorm/derng (npm) GHSA-jv9j-7hhp-cmhw, MAL-2026-7090 | Malicious | Not scored | 07 Jul, 2026 | npm @spinstorm/derng |
Malicious release: Malicious code in @sbb-rsu/ui-banners (npm) GHSA-gx57-mvcc-wpwq, MAL-2026-7089 | Malicious | Not scored | 07 Jul, 2026 | npm @sbb-rsu/ui-banners |
Malicious release: Malicious code in @rocket.chat_mkb/emitter (npm) GHSA-8q9h-2gr3-2rxg, MAL-2026-7088 | Malicious | Not scored | 07 Jul, 2026 | npm @rocket.chat_mkb/emitter |
Malicious release: Malicious code in @pyme-shared/auth (npm) GHSA-qppm-m4jx-jjfh, MAL-2026-7087 | Malicious | Not scored | 07 Jul, 2026 | npm @pyme-shared/auth |
Malicious release: Malicious code in @mts-pay/web-sdk (npm) GHSA-4wpw-cp28-x8q4, MAL-2026-7086 | Malicious | Not scored | 07 Jul, 2026 | npm @mts-pay/web-sdk |
Malicious release: Malicious code in @microsop/apple-mycelium-integrity-check (npm) GHSA-7825-hjw2-qc37, MAL-2026-7085 | Malicious | Not scored | 07 Jul, 2026 | npm @microsop/apple-mycelium-integrity-check |
Malicious release: Malicious code in @maximvs1538/os-npm (npm) GHSA-mcpp-gmhm-c3c8, MAL-2026-7084 | Malicious | Not scored | 07 Jul, 2026 | npm @maximvs1538/os-npm |
Malicious release: Malicious code in @magcd/pino-pretty-logger (npm) GHSA-57vh-44mw-xg93, MAL-2026-7083 | Malicious | Not scored | 07 Jul, 2026 | npm @magcd/pino-pretty-logger |
Malicious release: Malicious code in @lovenight/voice (npm) GHSA-q56q-7mgm-fwgc, MAL-2026-7082 | Malicious | Not scored | 07 Jul, 2026 | npm @lovenight/voice |
Malicious release: Malicious code in @louisvuitton/configurator-common-lib (npm) GHSA-84wq-v8hx-j942, MAL-2026-7081 | Malicious | Not scored | 07 Jul, 2026 | npm @louisvuitton/configurator-common-lib |
Malicious release: Malicious code in @keydev/pino-pretty-logger (npm) GHSA-fmhc-p7wg-5rvw, MAL-2026-7080 | Malicious | Not scored | 07 Jul, 2026 | npm @keydev/pino-pretty-logger |
Malicious release: Malicious code in @karakuri-web-fgsfgehfg/common (npm) GHSA-xccm-44f9-xrmx, MAL-2026-7079 | Malicious | Not scored | 07 Jul, 2026 | npm @karakuri-web-fgsfgehfg/common |
Malicious release: Malicious code in @jesusvizcaino2021/app-push-base (npm) GHSA-2xvg-7m8m-mf85, MAL-2026-7078 | Malicious | Not scored | 07 Jul, 2026 | npm @jesusvizcaino2021/app-push-base |
Malicious release: Malicious code in @inheritdoc/n (npm) GHSA-rrv6-cxxq-cvf3, MAL-2026-7077 | Malicious | Not scored | 07 Jul, 2026 | npm @inheritdoc/n |
Malicious release: Malicious code in @indriver-tools/whisperwind (npm) GHSA-2grf-37p7-87gv, MAL-2026-7076 | Malicious | Not scored | 07 Jul, 2026 | npm @indriver-tools/whisperwind |
Malicious release: Malicious code in @housecallpro/marketing-site (npm) GHSA-qfhp-5p78-g7f5, MAL-2026-7075 | Malicious | Not scored | 07 Jul, 2026 | npm @housecallpro/marketing-site |
Malicious release: Malicious code in @gutierre0x80/ads.components.button (npm) GHSA-hm67-m69v-pw55, MAL-2026-7074 | Malicious | Not scored | 07 Jul, 2026 | npm @gutierre0x80/ads.components.button |
Malicious release: Malicious code in @gs-select/savings-client-application (npm) GHSA-mw6h-jrvw-vpfw, MAL-2026-7073 | Malicious | Not scored | 07 Jul, 2026 | npm @gs-select/savings-client-application |
Malicious release: Malicious code in @gs-select/client-sbl-application (npm) GHSA-rffq-j765-3f77, MAL-2026-7072 | Malicious | Not scored | 07 Jul, 2026 | npm @gs-select/client-sbl-application |
Malicious release: Malicious code in @gpbw-fcop-ui-packages/theme (npm) GHSA-58hw-p2r5-7crv, MAL-2026-7071 | Malicious | Not scored | 07 Jul, 2026 | npm @gpbw-fcop-ui-packages/theme |
Malicious release: Malicious code in @frontembed/lib (npm) GHSA-frvj-4qp7-fgwq, MAL-2026-7069 | Malicious | Not scored | 07 Jul, 2026 | npm @frontembed/lib |
Malicious release: Malicious code in @frontembed/testtest (npm) GHSA-m8cv-fg4f-r863, MAL-2026-7070 | Malicious | Not scored | 07 Jul, 2026 | npm @frontembed/testtest |
Malicious release: Malicious code in @endurosat/stellar-ui (npm) GHSA-77m2-534w-f256, MAL-2026-7068 | Malicious | Not scored | 07 Jul, 2026 | npm @endurosat/stellar-ui |
Malicious release: Malicious code in @driivz/component-library (npm) GHSA-x96j-8c7c-7jpj, MAL-2026-7067 | Malicious | Not scored | 07 Jul, 2026 | npm @driivz/component-library |
Malicious release: Malicious code in @deathpoolxrs/dependency-confusion-poc (npm) GHSA-77fq-9frf-h4hc, MAL-2026-7066 | Malicious | Not scored | 07 Jul, 2026 | npm @deathpoolxrs/dependency-confusion-poc |
Malicious release: Malicious code in @datatrain/passenger (npm) GHSA-qq8c-7q86-jj9m, MAL-2026-7065 | Malicious | Not scored | 07 Jul, 2026 | npm @datatrain/passenger |
Malicious release: Malicious code in @dany47/csec-form-helpers (npm) GHSA-9r69-588f-2wpj, MAL-2026-7064 | Malicious | Not scored | 07 Jul, 2026 | npm @dany47/csec-form-helpers |
Malicious release: Malicious code in @dany47/csec-crypto-utils (npm) GHSA-fhm8-442c-qg6v, MAL-2026-7063 | Malicious | Not scored | 07 Jul, 2026 | npm @dany47/csec-crypto-utils |
Malicious release: Malicious code in @combinezone/theme (npm) GHSA-q29h-v549-5j93, MAL-2026-7062 | Malicious | Not scored | 07 Jul, 2026 | npm @combinezone/theme |
Malicious release: Malicious code in @combinezone/core (npm) GHSA-wghh-p8j2-98qc, MAL-2026-7061 | Malicious | Not scored | 07 Jul, 2026 | npm @combinezone/core |
Malicious release: Malicious code in @cashback/postal-premium (npm) GHSA-xpr8-rf9j-7gfw, MAL-2026-7060 | Malicious | Not scored | 07 Jul, 2026 | npm @cashback/postal-premium |
Malicious release: Malicious code in @cashback/auth (npm) GHSA-v4cr-243g-pp8f, MAL-2026-7058 | Malicious | Not scored | 07 Jul, 2026 | npm @cashback/auth |
Malicious release: Malicious code in @cashback/how-it-works-widget (npm) GHSA-vf2c-23g7-9pxp, MAL-2026-7059 | Malicious | Not scored | 07 Jul, 2026 | npm @cashback/how-it-works-widget |
Malicious release: Malicious code in @buglab/pino-pretty-logger (npm) GHSA-fx88-m6v3-mhqh, MAL-2026-7057 | Malicious | Not scored | 07 Jul, 2026 | npm @buglab/pino-pretty-logger |
Malicious release: Malicious code in @bmg-web/bmg-styles (npm) GHSA-vwwq-6425-fmh2, MAL-2026-7056 | Malicious | Not scored | 07 Jul, 2026 | npm @bmg-web/bmg-styles |
Malicious release: Malicious code in @bmg-web/bmg-spinner (npm) GHSA-4r3m-q964-6j2x, MAL-2026-7055 | Malicious | Not scored | 07 Jul, 2026 | npm @bmg-web/bmg-spinner |
Malicious release: Malicious code in @bmg-web/bmg-snackbar (npm) GHSA-6hp9-3555-4qpc, MAL-2026-7054 | Malicious | Not scored | 07 Jul, 2026 | npm @bmg-web/bmg-snackbar |
Malicious release: Malicious code in @bmg-web/bmg-review-basket (npm) GHSA-2cj8-mq77-292c, MAL-2026-7053 | Malicious | Not scored | 07 Jul, 2026 | npm @bmg-web/bmg-review-basket |
Malicious release: Malicious code in @bmg-web/bmg-key-value (npm) GHSA-rf4m-v78g-qw6p, MAL-2026-7051 | Malicious | Not scored | 07 Jul, 2026 | npm @bmg-web/bmg-key-value |
Malicious release: Malicious code in @bmg-web/bmg-multiselect (npm) GHSA-rj87-xcgp-284p, MAL-2026-7052 | Malicious | Not scored | 07 Jul, 2026 | npm @bmg-web/bmg-multiselect |
Malicious release: Malicious code in @bmg-web/bmg-core (npm) GHSA-m8xm-94qw-3mjq, MAL-2026-7050 | Malicious | Not scored | 07 Jul, 2026 | npm @bmg-web/bmg-core |
Malicious release: Malicious code in @athena-ui-components/utils (npm) GHSA-p5mc-pgjg-xrqf, MAL-2026-7049 | Malicious | Not scored | 07 Jul, 2026 | npm @athena-ui-components/utils |
Malicious release: Malicious code in @athena-ui-components/user-activity (npm) GHSA-24x3-hr7j-9qv8, MAL-2026-7048 | Malicious | Not scored | 07 Jul, 2026 | npm @athena-ui-components/user-activity |
Malicious release: Malicious code in @athena-ui-components/pubsub-bridge (npm) GHSA-w5gx-prmq-q2cp, MAL-2026-7047 | Malicious | Not scored | 07 Jul, 2026 | npm @athena-ui-components/pubsub-bridge |
Malicious release: Malicious code in @athena-ui-components/layout (npm) GHSA-pxvw-xj38-w572, MAL-2026-7046 | Malicious | Not scored | 07 Jul, 2026 | npm @athena-ui-components/layout |
Malicious release: Malicious code in @athena-ui-components/lang (npm) GHSA-46v5-8jw4-p6qf, MAL-2026-7045 | Malicious | Not scored | 07 Jul, 2026 | npm @athena-ui-components/lang |
Malicious release: Malicious code in @athena-ui-components/hooks (npm) GHSA-8g26-m82g-jjx5, MAL-2026-7044 | Malicious | Not scored | 07 Jul, 2026 | npm @athena-ui-components/hooks |
Malicious release: Malicious code in @athena-ui-components/helpers (npm) GHSA-p73j-mwv5-4gjc, MAL-2026-7043 | Malicious | Not scored | 07 Jul, 2026 | npm @athena-ui-components/helpers |