Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in thirdwebb (npm) GHSA-46px-g2r9-8vcr, MAL-2026-6694 | Malicious | Not scored | 30 Jun, 2026 | npm thirdwebb |
Malicious release: Malicious code in thirdwb (npm) GHSA-ccmq-q5j8-hvxc, MAL-2026-6693 | Malicious | Not scored | 30 Jun, 2026 | npm thirdwb |
Malicious release: Malicious code in decimal-format-core (npm) GHSA-jpc6-jpfr-f453, MAL-2026-6689 | Malicious | Not scored | 30 Jun, 2026 | npm decimal-format-core |
Malicious release: Malicious code in console-fmt-cli (npm) GHSA-p3j8-3227-2w78, MAL-2026-6688 | Malicious | Not scored | 30 Jun, 2026 | npm console-fmt-cli |
Malicious release: Malicious code in ts-bn-proto (npm) GHSA-wxpc-r4jx-9jrw, MAL-2026-6695 | Malicious | Not scored | 30 Jun, 2026 | npm ts-bn-proto |
Malicious release: Malicious code in polymarket-clob-maths (npm) MAL-2026-6691 | Malicious | Not scored | 30 Jun, 2026 | npm polymarket-clob-maths |
Malicious release: Malicious code in polymarket-trading-developer-tools (npm) MAL-2026-6692 | Malicious | Not scored | 30 Jun, 2026 | npm polymarket-trading-developer-tools |
Malicious release: Malicious code in @webda-infra-ui/static-images (npm) GHSA-pp6c-f2ph-gxmm, MAL-2026-6652 | Malicious | Not scored | 29 Jun, 2026 | npm @webda-infra-ui/static-images |
Malicious release: Malicious code in @appsource/utils (npm) GHSA-28xf-wrjx-23mj, MAL-2026-6601 | Malicious | Not scored | 29 Jun, 2026 | npm @appsource/utils |
Malicious release: Malicious code in @bscom/styling (npm) GHSA-29c6-c7cm-r8ch, MAL-2026-6605 | Malicious | Not scored | 29 Jun, 2026 | npm @bscom/styling |
Malicious release: Malicious code in @bc-workspace/utils (npm) GHSA-3vmg-w948-phr5, MAL-2026-6603 | Malicious | Not scored | 29 Jun, 2026 | npm @bc-workspace/utils |
Malicious release: Malicious code in @cseo-hr/trpweb-shared (npm) GHSA-5x3r-97g5-r9j5, MAL-2026-6610 | Malicious | Not scored | 29 Jun, 2026 | npm @cseo-hr/trpweb-shared |
Malicious release: Malicious code in @sixt-payment/form-react (npm) GHSA-8cxm-2pmw-c822, MAL-2026-6649 | Malicious | Not scored | 29 Jun, 2026 | npm @sixt-payment/form-react |
Malicious release: Malicious code in @deel-ui/animation (npm) GHSA-9rwq-pr4x-fhqg, MAL-2026-6614 | Malicious | Not scored | 29 Jun, 2026 | npm @deel-ui/animation |
Malicious release: Malicious code in @contentprod-authoring/block-manager (npm) GHSA-cpfg-m96g-j4j9, MAL-2026-6609 | Malicious | Not scored | 29 Jun, 2026 | npm @contentprod-authoring/block-manager |
Malicious release: Malicious code in @digitalpharmacist/http-error-util (npm) GHSA-jw9w-w49g-cx4h, MAL-2026-6615 | Malicious | Not scored | 29 Jun, 2026 | npm @digitalpharmacist/http-error-util |
Malicious release: Malicious code in @bodata/angular-client (npm) GHSA-m7gq-xcwc-78ff, MAL-2026-6604 | Malicious | Not scored | 29 Jun, 2026 | npm @bodata/angular-client |
Malicious release: Malicious code in @alerts/components (npm) GHSA-m86f-3q43-wmpg, MAL-2026-6599 | Malicious | Not scored | 29 Jun, 2026 | npm @alerts/components |
Malicious release: Malicious code in @concerns/i18n (npm) GHSA-rp2m-w359-5cqp, MAL-2026-6606 | Malicious | Not scored | 29 Jun, 2026 | npm @concerns/i18n |
Malicious release: Malicious code in @deel-core/client-payroll-onboarding-types (npm) GHSA-v8wg-p2qh-9q7g, MAL-2026-6613 | Malicious | Not scored | 29 Jun, 2026 | npm @deel-core/client-payroll-onboarding-types |
Malicious release: Malicious code in @report-portal/service-ui (npm) GHSA-4gpj-m85h-j7rq, MAL-2026-6644 | Malicious | Not scored | 29 Jun, 2026 | npm @report-portal/service-ui |
Malicious release: Malicious code in @planetlabs/admin-ng (npm) GHSA-4x72-8x46-jqmw, MAL-2026-6637 | Malicious | Not scored | 29 Jun, 2026 | npm @planetlabs/admin-ng |
Malicious release: Malicious code in @tbe-ui/ides (npm) GHSA-cf57-g4p6-cqjh, MAL-2026-6651 | Malicious | Not scored | 29 Jun, 2026 | npm @tbe-ui/ides |
Malicious release: Malicious code in @react-thee/rapier (npm) GHSA-h7fx-c9v6-pg77, MAL-2026-6642 | Malicious | Not scored | 29 Jun, 2026 | npm @react-thee/rapier |
Malicious release: Malicious code in @postman-app-monolith/renderer (npm) GHSA-jv69-xjcr-5hx9, MAL-2026-6639 | Malicious | Not scored | 29 Jun, 2026 | npm @postman-app-monolith/renderer |
Malicious release: Malicious code in @postidigital-feature/oneaccount-orgadmin-front (npm) GHSA-mfvg-7g48-p7c2, MAL-2026-6638 | Malicious | Not scored | 29 Jun, 2026 | npm @postidigital-feature/oneaccount-orgadmin-front |
Malicious release: Malicious code in @contenteditor-shared/content-editor-common (npm) GHSA-3v59-3pc3-p6qm, MAL-2026-6608 | Malicious | Not scored | 29 Jun, 2026 | npm @contenteditor-shared/content-editor-common |
Malicious release: Malicious code in @ms-ows/logging (npm) GHSA-46wp-9qm3-2vv4, MAL-2026-6633 | Malicious | Not scored | 29 Jun, 2026 | npm @ms-ows/logging |
Malicious release: Malicious code in @fed-sofia/jetify (npm) GHSA-59mp-5h6w-4mpp, MAL-2026-6619 | Malicious | Not scored | 29 Jun, 2026 | npm @fed-sofia/jetify |
Malicious release: Malicious code in @img-hls/vtt.js (npm) GHSA-7752-87g2-6jgf, MAL-2026-6628 | Malicious | Not scored | 29 Jun, 2026 | npm @img-hls/vtt.js |
Malicious release: Malicious code in @orbis-lr-sdk/orbis-lr-sdk (npm) GHSA-8w2w-98mc-3qqc, MAL-2026-6635 | Malicious | Not scored | 29 Jun, 2026 | npm @orbis-lr-sdk/orbis-lr-sdk |
Malicious release: Malicious code in @hg-aka-prml/tapas-common (npm) GHSA-cmr6-9388-xg9g, MAL-2026-6626 | Malicious | Not scored | 29 Jun, 2026 | npm @hg-aka-prml/tapas-common |
Malicious release: Malicious code in @meego-progressive/cdk (npm) GHSA-f7vv-5p73-c4rr, MAL-2026-6632 | Malicious | Not scored | 29 Jun, 2026 | npm @meego-progressive/cdk |
Malicious release: Malicious code in @cxp-shared/string-utilities (npm) GHSA-fmg2-rq45-rc5r, MAL-2026-6611 | Malicious | Not scored | 29 Jun, 2026 | npm @cxp-shared/string-utilities |
Malicious release: Malicious code in @druidsoft/botframework-directlinejs (npm) GHSA-h76h-pchq-6m2g, MAL-2026-6616 | Malicious | Not scored | 29 Jun, 2026 | npm @druidsoft/botframework-directlinejs |
Malicious release: Malicious code in @ddh-libs/analytics (npm) GHSA-jh8r-h42q-3q8p, MAL-2026-6612 | Malicious | Not scored | 29 Jun, 2026 | npm @ddh-libs/analytics |
Malicious release: Malicious code in @e50/utils (npm) GHSA-w945-prph-8545, MAL-2026-6617 | Malicious | Not scored | 29 Jun, 2026 | npm @e50/utils |
Malicious release: Malicious code in @content-editor/common (npm) GHSA-wwc7-v7xr-q4pc, MAL-2026-6607 | Malicious | Not scored | 29 Jun, 2026 | npm @content-editor/common |
Malicious release: Malicious code in @sentryx-libraries/auth-interceptor (npm) GHSA-2h8m-qr63-3f64, MAL-2026-6646 | Malicious | Not scored | 29 Jun, 2026 | npm @sentryx-libraries/auth-interceptor |
Malicious release: Malicious code in @rmlibrary/formatting (npm) GHSA-4j9v-f5j4-xjvx, MAL-2026-6645 | Malicious | Not scored | 29 Jun, 2026 | npm @rmlibrary/formatting |
Malicious release: Malicious code in @partner-apps/ui (npm) GHSA-5vf9-5xgw-84rw, MAL-2026-6636 | Malicious | Not scored | 29 Jun, 2026 | npm @partner-apps/ui |
Malicious release: Malicious code in @multformats/multiaddr (npm) GHSA-92ch-4pr4-pmgj, MAL-2026-6634 | Malicious | Not scored | 29 Jun, 2026 | npm @multformats/multiaddr |
Malicious release: Malicious code in @rakuten-rewards/messaging-sdk-js (npm) GHSA-9hcr-h425-gc22, MAL-2026-6641 | Malicious | Not scored | 29 Jun, 2026 | npm @rakuten-rewards/messaging-sdk-js |
Malicious release: Malicious code in @rakuten-rewards/messaging-sdk (npm) GHSA-fjrr-hfh2-c44q, MAL-2026-6640 | Malicious | Not scored | 29 Jun, 2026 | npm @rakuten-rewards/messaging-sdk |
Malicious release: Malicious code in @live-backstage-im/communication-chat (npm) GHSA-h887-mrmh-2fjr, MAL-2026-6630 | Malicious | Not scored | 29 Jun, 2026 | npm @live-backstage-im/communication-chat |
Malicious release: Malicious code in @services-lib/application-http-client (npm) GHSA-jvx5-rh7w-w4fj, MAL-2026-6647 | Malicious | Not scored | 29 Jun, 2026 | npm @services-lib/application-http-client |
Malicious release: Malicious code in @reference-web/pmp-i18n (npm) GHSA-m6f5-jgw6-8m97, MAL-2026-6643 | Malicious | Not scored | 29 Jun, 2026 | npm @reference-web/pmp-i18n |
Malicious release: Malicious code in @gallup/pc-utils (npm) GHSA-8f5r-5xw2-f3r4, MAL-2026-6622 | Malicious | Not scored | 29 Jun, 2026 | npm @gallup/pc-utils |
Malicious release: Malicious code in @gm-rvg/root-config (npm) GHSA-9crf-2vxq-9j4r, MAL-2026-6624 | Malicious | Not scored | 29 Jun, 2026 | npm @gm-rvg/root-config |
Malicious release: Malicious code in ltididp1 (npm) GHSA-9h22-6cpc-frhc, MAL-2026-6665 | Malicious | Not scored | 29 Jun, 2026 | npm ltididp1 |