Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @cplace-project-planning-fe/cf-project-planning (npm) GHSA-4hrw-8228-63r2, MAL-2026-5048 | Malicious | Not scored | 29 May, 2026 | npm @cplace-project-planning-fe/cf-project-planning |
Malicious release: Malicious code in codex-devcontainer-install (npm) GHSA-frcf-f9wx-gq64, MAL-2026-5062 | Malicious | Not scored | 29 May, 2026 | npm codex-devcontainer-install |
Malicious release: Malicious code in ethers-hash (npm) GHSA-mrrv-5vqm-j285, MAL-2026-5066 | Malicious | Not scored | 29 May, 2026 | npm ethers-hash |
Malicious release: Malicious code in @timelycare/common (npm) GHSA-mf79-x3p8-p4px, MAL-2026-5053 | Malicious | Not scored | 29 May, 2026 | npm @timelycare/common |
Malicious release: Malicious code in @lir-portal/web-components (npm) GHSA-pvc4-pwx8-4c4g, MAL-2026-5049 | Malicious | Not scored | 29 May, 2026 | npm @lir-portal/web-components |
Malicious release: Malicious code in tiny-naturalsort (npm) GHSA-mqp5-9r9w-8hg4, MAL-2026-5030 | Malicious | Not scored | 29 May, 2026 | npm tiny-naturalsort |
Malicious release: Malicious code in sorenson-webfonts (npm) GHSA-jfh5-5qvf-47fj, MAL-2026-5028 | Malicious | Not scored | 29 May, 2026 | npm sorenson-webfonts |
Malicious release: Malicious code in @t-in-one/add_application (npm) GHSA-2rqm-cx7p-43hx, MAL-2026-5034 | Malicious | Not scored | 29 May, 2026 | npm @t-in-one/add_application |
Malicious release: Malicious code in @t-in-one/send_add_application (npm) GHSA-33cg-q6pj-vg3j, MAL-2026-5046 | Malicious | Not scored | 29 May, 2026 | npm @t-in-one/send_add_application |
Malicious release: Malicious code in @t-in-one/prefill_credit_data_token (npm) GHSA-38v2-g3qx-w6fr, MAL-2026-5042 | Malicious | Not scored | 29 May, 2026 | npm @t-in-one/prefill_credit_data_token |
Malicious release: Malicious code in @sber-ecom-core/sberpay-widget (npm) GHSA-6rfw-m3fj-7g8q, MAL-2026-5032 | Malicious | Not scored | 29 May, 2026 | npm @sber-ecom-core/sberpay-widget |
Malicious release: Malicious code in @t-in-one/prefill_transformers_data_token (npm) GHSA-7jj3-323f-22v4, MAL-2026-5043 | Malicious | Not scored | 29 May, 2026 | npm @t-in-one/prefill_transformers_data_token |
Malicious release: Malicious code in @t-in-one/add_app_middleware_token (npm) GHSA-86f7-96xp-23wm, MAL-2026-5033 | Malicious | Not scored | 29 May, 2026 | npm @t-in-one/add_app_middleware_token |
Malicious release: Malicious code in @t-in-one/get_application_hid (npm) GHSA-9ghf-xffg-p5gx, MAL-2026-5039 | Malicious | Not scored | 29 May, 2026 | npm @t-in-one/get_application_hid |
Malicious release: Malicious code in @t-in-one/application_id_storage_key_token (npm) GHSA-cwhq-qx36-9hhq, MAL-2026-5037 | Malicious | Not scored | 29 May, 2026 | npm @t-in-one/application_id_storage_key_token |
Malicious release: Malicious code in @t-in-one/only_difference_payload (npm) GHSA-h594-x75p-ghjh, MAL-2026-5040 | Malicious | Not scored | 29 May, 2026 | npm @t-in-one/only_difference_payload |
Malicious release: Malicious code in @t-in-one/add_application_service_token (npm) GHSA-p76m-g6ch-9pg3, MAL-2026-5035 | Malicious | Not scored | 29 May, 2026 | npm @t-in-one/add_application_service_token |
Malicious release: Malicious code in @t-in-one/safe_local_storage_token (npm) GHSA-r2p6-3gmf-chx9, MAL-2026-5045 | Malicious | Not scored | 29 May, 2026 | npm @t-in-one/safe_local_storage_token |
Malicious release: Malicious code in @t-in-one/form_product_token (npm) GHSA-r382-p83j-69fx, MAL-2026-5038 | Malicious | Not scored | 29 May, 2026 | npm @t-in-one/form_product_token |
Malicious release: Malicious code in @t-in-one/prefill_bundle_data_token (npm) GHSA-rm9j-3m66-35r4, MAL-2026-5041 | Malicious | Not scored | 29 May, 2026 | npm @t-in-one/prefill_bundle_data_token |
Malicious release: Malicious code in @capibar.chat/ui-kit (npm) GHSA-rwm6-rvqv-qv7c, MAL-2026-5031 | Malicious | Not scored | 29 May, 2026 | npm @capibar.chat/ui-kit |
Malicious release: Malicious code in @t-in-one/add_application_tid (npm) GHSA-vvr5-6j6h-rq49, MAL-2026-5036 | Malicious | Not scored | 29 May, 2026 | npm @t-in-one/add_application_tid |
Malicious release: Malicious code in @t-in-one/restore_application_hid_from_storage (npm) GHSA-w9v9-8839-82rr, MAL-2026-5044 | Malicious | Not scored | 29 May, 2026 | npm @t-in-one/restore_application_hid_from_storage |
Malicious release: Malicious code in @qlab/ui (npm) MAL-2026-4860 | Malicious | Not scored | 28 May, 2026 | npm @qlab/ui |
Malicious release: Malicious code in @neon-i18n/core-ui (npm) MAL-2026-5027 | Malicious | Not scored | 28 May, 2026 | npm @neon-i18n/core-ui |
Malicious release: Malicious code in hellowornd (npm) GHSA-4f9q-ffgq-5w82, MAL-2026-4839 | Malicious | Not scored | 28 May, 2026 | npm hellowornd |
Malicious release: Malicious code in @service-suppliers/reset_country_list (npm) GHSA-84hr-mv69-vj7f, MAL-2026-4850 | Malicious | Not scored | 28 May, 2026 | npm @service-suppliers/reset_country_list |
Malicious release: Malicious code in @service-suppliers/set_suppliers_loading_start (npm) GHSA-89m6-4f5j-7xj7, MAL-2026-4855 | Malicious | Not scored | 28 May, 2026 | npm @service-suppliers/set_suppliers_loading_start |
Malicious release: Malicious code in @service-user-notifications/set_refresh_interval (npm) GHSA-9h2v-ff64-858c, MAL-2026-4858 | Malicious | Not scored | 28 May, 2026 | npm @service-user-notifications/set_refresh_interval |
Malicious release: Malicious code in @service-user-notifications/reset_notifications_not_removable (npm) GHSA-f2q4-p8r2-p7qr, MAL-2026-4857 | Malicious | Not scored | 28 May, 2026 | npm @service-user-notifications/reset_notifications_not_removable |
Malicious release: Malicious code in @service-suppliers/set_suppliers_data (npm) GHSA-jpvq-j8hv-vf64, MAL-2026-4854 | Malicious | Not scored | 28 May, 2026 | npm @service-suppliers/set_suppliers_data |
Malicious release: Malicious code in @service-suppliers/set_suppliers_loading_stop (npm) GHSA-mh37-355g-cwf5, MAL-2026-4856 | Malicious | Not scored | 28 May, 2026 | npm @service-suppliers/set_suppliers_loading_stop |
Malicious release: Malicious code in @service-suppliers/set_selected_supplier_action_saga (npm) GHSA-v5p9-2r35-4xf9, MAL-2026-4853 | Malicious | Not scored | 28 May, 2026 | npm @service-suppliers/set_selected_supplier_action_saga |
Malicious release: Malicious code in @service-suppliers/set_country_list (npm) GHSA-w4v4-3hx5-qm6x, MAL-2026-4851 | Malicious | Not scored | 28 May, 2026 | npm @service-suppliers/set_country_list |
Malicious release: Malicious code in @service-suppliers/set_initial_loaded (npm) GHSA-w965-p32r-r94f, MAL-2026-4852 | Malicious | Not scored | 28 May, 2026 | npm @service-suppliers/set_initial_loaded |
Malicious release: Malicious code in @service-suppliers/fetch-suppliers-watcher-saga (npm) GHSA-f638-f27j-mwxw, MAL-2026-4847 | Malicious | Not scored | 28 May, 2026 | npm @service-suppliers/fetch-suppliers-watcher-saga |
Malicious release: Malicious code in @polka-ui/loads (npm) GHSA-f6p3-64q3-f7m2, MAL-2026-4843 | Malicious | Not scored | 28 May, 2026 | npm @polka-ui/loads |
Malicious release: Malicious code in @hcs-hybrid/uirouter-core (npm) GHSA-j5c6-cvw9-pvw5, MAL-2026-4841 | Malicious | Not scored | 28 May, 2026 | npm @hcs-hybrid/uirouter-core |
Malicious release: Malicious code in @polka-ui/recoc (npm) GHSA-jfp7-28fm-4363, MAL-2026-4845 | Malicious | Not scored | 28 May, 2026 | npm @polka-ui/recoc |
Malicious release: Malicious code in @polka-ui/reco (npm) GHSA-jp28-c5rf-vp9c, MAL-2026-4844 | Malicious | Not scored | 28 May, 2026 | npm @polka-ui/reco |
Malicious release: Malicious code in @service-suppliers/fetch-initial-suppliers-watcher-saga (npm) GHSA-r54g-7f23-p3xr, MAL-2026-4846 | Malicious | Not scored | 28 May, 2026 | npm @service-suppliers/fetch-initial-suppliers-watcher-saga |
Malicious release: Malicious code in @polka-ui/configuration (npm) GHSA-r7px-75rx-x9r7, MAL-2026-4842 | Malicious | Not scored | 28 May, 2026 | npm @polka-ui/configuration |
Malicious release: Malicious code in @bcs-bank-complex-ui/deeplink (npm) GHSA-w552-5pj3-2xrg, MAL-2026-4840 | Malicious | Not scored | 28 May, 2026 | npm @bcs-bank-complex-ui/deeplink |
Malicious release: Malicious code in @service-suppliers/fetch_initial_suppliers_action_saga (npm) GHSA-w5vj-vfr4-3hjw, MAL-2026-4848 | Malicious | Not scored | 28 May, 2026 | npm @service-suppliers/fetch_initial_suppliers_action_saga |
Malicious release: Malicious code in @service-suppliers/fetch_suppliers_country_list_action_saga (npm) GHSA-www8-35vq-694c, MAL-2026-4849 | Malicious | Not scored | 28 May, 2026 | npm @service-suppliers/fetch_suppliers_country_list_action_saga |
Malicious release: Malicious code in justsaying-docs (npm) MAL-2026-4838 | Malicious | Not scored | 28 May, 2026 | npm justsaying-docs |
Malicious release: Malicious code in nemo-reporter (npm) GHSA-358g-x45v-57vw, MAL-2026-4836 | Malicious | Not scored | 28 May, 2026 | npm nemo-reporter |
Malicious release: Malicious code in @cloudplatform-single-spa/svp-s3-storage (npm) GHSA-228p-vq38-23gh, MAL-2026-4988 | Malicious | Not scored | 28 May, 2026 | npm @cloudplatform-single-spa/svp-s3-storage |
Malicious release: Malicious code in @cloudplatform-single-spa/ml-ai-agents-agent (npm) GHSA-2429-p3v5-m6p7, MAL-2026-4933 | Malicious | Not scored | 28 May, 2026 | npm @cloudplatform-single-spa/ml-ai-agents-agent |
Malicious release: Malicious code in @cloudplatform-single-spa/dataplatform (npm) GHSA-2m8v-gg54-p274, MAL-2026-4903 | Malicious | Not scored | 28 May, 2026 | npm @cloudplatform-single-spa/dataplatform |