Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @nstrlabs/shared-components (npm) MAL-2026-5422 | Malicious | Not scored | 09 Jun, 2026 | npm @nstrlabs/shared-components |
Malicious release: Malicious code in @nstrlabs/auth (npm) MAL-2026-5419 | Malicious | Not scored | 09 Jun, 2026 | npm @nstrlabs/auth |
Malicious release: Malicious code in @klapp-kyc/routes (npm) MAL-2026-5412 | Malicious | Not scored | 09 Jun, 2026 | npm @klapp-kyc/routes |
Malicious release: Malicious code in @payment-review/store (npm) MAL-2026-5427 | Malicious | Not scored | 09 Jun, 2026 | npm @payment-review/store |
Malicious release: Malicious code in @card-pci-data/store (npm) MAL-2026-5407 | Malicious | Not scored | 09 Jun, 2026 | npm @card-pci-data/store |
Malicious release: Malicious code in @klapp-sca/routes (npm) MAL-2026-5417 | Malicious | Not scored | 09 Jun, 2026 | npm @klapp-sca/routes |
Malicious release: Malicious code in @klapp-about/routes (npm) MAL-2026-5411 | Malicious | Not scored | 09 Jun, 2026 | npm @klapp-about/routes |
Malicious release: Malicious code in @klapp-login-platform/oidc (npm) MAL-2026-5414 | Malicious | Not scored | 09 Jun, 2026 | npm @klapp-login-platform/oidc |
Malicious release: Malicious code in @klapp-login-platform/native-sdk (npm) MAL-2026-5413 | Malicious | Not scored | 09 Jun, 2026 | npm @klapp-login-platform/native-sdk |
Malicious release: Malicious code in @klapp-login-platform/routes (npm) MAL-2026-5415 | Malicious | Not scored | 09 Jun, 2026 | npm @klapp-login-platform/routes |
Malicious release: Malicious code in morningstar-design-system (npm) MAL-2026-5449 | Malicious | Not scored | 09 Jun, 2026 | npm morningstar-design-system |
Malicious release: Malicious code in o3forms (npm) GHSA-gp6v-h28c-4fxf, MAL-2026-5450 | Malicious | Not scored | 09 Jun, 2026 | npm o3forms |
Malicious release: Malicious code in via-city-tools-m-particle (npm) GHSA-6wg4-xxqc-hw9h, MAL-2026-5456 | Malicious | Not scored | 09 Jun, 2026 | npm via-city-tools-m-particle |
Malicious release: Malicious code in ui-ng-components (npm) GHSA-2p68-7m73-m8v7, MAL-2026-5454 | Malicious | Not scored | 09 Jun, 2026 | npm ui-ng-components |
Malicious release: Malicious code in uipath-sugar-sell (npm) GHSA-xc4q-c25v-qv6v, MAL-2026-5455 | Malicious | Not scored | 09 Jun, 2026 | npm uipath-sugar-sell |
Malicious release: Malicious code in tivo-codelib-a (npm) GHSA-4f5g-pqjq-3mvw, MAL-2026-5453 | Malicious | Not scored | 09 Jun, 2026 | npm tivo-codelib-a |
Malicious release: Malicious code in @webda-features/dashboard (npm) GHSA-f9c8-v253-876h, MAL-2026-5432 | Malicious | Not scored | 09 Jun, 2026 | npm @webda-features/dashboard |
Malicious release: Malicious code in @webd-infra/query-designer-domain (npm) GHSA-7c4p-cm4f-hwp2, MAL-2026-5431 | Malicious | Not scored | 09 Jun, 2026 | npm @webd-infra/query-designer-domain |
Malicious release: Malicious code in @webda-infra/search (npm) GHSA-4rmm-f927-v58w, MAL-2026-5433 | Malicious | Not scored | 09 Jun, 2026 | npm @webda-infra/search |
Malicious release: Malicious code in privacy-sdk (npm) GHSA-wrgr-9636-hfmh, MAL-2026-5451 | Malicious | Not scored | 09 Jun, 2026 | npm privacy-sdk |
Malicious release: Malicious code in commons-ui-styles (npm) GHSA-3w2q-76fx-mcgj, MAL-2026-5437 | Malicious | Not scored | 09 Jun, 2026 | npm commons-ui-styles |
Malicious release: Malicious code in corporate-front-vue (npm) GHSA-j2pq-r63w-52j5, MAL-2026-5438 | Malicious | Not scored | 09 Jun, 2026 | npm corporate-front-vue |
Malicious release: Malicious code in mazemap (npm) GHSA-xc8q-h68h-r6r9, MAL-2026-5448 | Malicious | Not scored | 09 Jun, 2026 | npm mazemap |
Malicious release: Malicious code in localization-lib (npm) GHSA-2qhv-h564-p9rm, MAL-2026-5447 | Malicious | Not scored | 09 Jun, 2026 | npm localization-lib |
Malicious release: Malicious code in housecall-ui (npm) GHSA-h2mj-mwm8-g9qp, MAL-2026-5446 | Malicious | Not scored | 09 Jun, 2026 | npm housecall-ui |
Malicious release: Malicious code in @shell-landing/routes (npm) GHSA-9pv9-393c-q5f8, GHSA-j8mm-3hrj-6rwf, MAL-2026-5429, SNYK-JS-SHELLLANDINGROUTES-18758920 | Malicious | Not scored | 09 Jun, 2026 | npm @shell-landing/routes |
Malicious release: Malicious code in @easy-entry/outside-registration-fop-navigator (npm) GHSA-g46p-xrvj-f265, GHSA-v26v-7c7g-w7gf, MAL-2026-5409, SNYK-JS-EASYENTRYOUTSIDEREGISTRATIONFOPNAVIGATOR-18758915 | Malicious | Not scored | 09 Jun, 2026 | npm @easy-entry/outside-registration-fop-navigator |
Malicious release: Malicious code in @shell-cabinet/routes (npm) GHSA-53jv-685j-pchq, GHSA-qmhh-w396-g2p9, MAL-2026-5428, SNYK-JS-SHELLCABINETROUTES-18758918 | Malicious | Not scored | 09 Jun, 2026 | npm @shell-cabinet/routes |
Malicious release: Malicious code in @easy-entry/routes (npm) GHSA-9gwm-xrv4-c436, GHSA-g9fq-cx25-24m4, MAL-2026-5410, SNYK-JS-EASYENTRYROUTES-18758928 | Malicious | Not scored | 09 Jun, 2026 | npm @easy-entry/routes |
Malicious release: Malicious code in @easy-entry/landing-routes (npm) GHSA-cqm2-3c85-97rm, GHSA-xp5g-jv74-3fxh, MAL-2026-5408, SNYK-JS-EASYENTRYLANDINGROUTES-18758923 | Malicious | Not scored | 09 Jun, 2026 | npm @easy-entry/landing-routes |
Malicious release: Malicious code in shopify-app-bridge-internal (npm) GHSA-f435-6j4p-6q42, MAL-2026-5452 | Malicious | Not scored | 09 Jun, 2026 | npm shopify-app-bridge-internal |
Malicious release: Malicious code in @sourceflow-uk/sourceflow-tracker (npm) GHSA-6pqf-hp72-2v55, GHSA-j9q7-mjw2-vvpr, MAL-2026-5430, SNYK-JS-SOURCEFLOWUKSOURCEFLOWTRACKER-18758931 | Malicious | Not scored | 09 Jun, 2026 | npm @sourceflow-uk/sourceflow-tracker |
Malicious release: Malicious code in ac_calendar_ts (npm) GHSA-xgwp-29j2-jxj3, MAL-2026-5434 | Malicious | Not scored | 09 Jun, 2026 | npm ac_calendar_ts |
Malicious release: Malicious code in ac_semantic-ui_ts (npm) GHSA-hjh8-hv66-6mwc, MAL-2026-5435 | Malicious | Not scored | 09 Jun, 2026 | npm ac_semantic-ui_ts |
Malicious release: Malicious code in @oplus/obus-web-sdk (npm) MAL-2026-5425 | Malicious | Not scored | 09 Jun, 2026 | npm @oplus/obus-web-sdk |
Malicious release: Malicious code in @oplus/obus-web-sdk-plugin-recovery (npm) MAL-2026-5426 | Malicious | Not scored | 09 Jun, 2026 | npm @oplus/obus-web-sdk-plugin-recovery |
Malicious release: Malicious code in @oplus/obus-core (npm) MAL-2026-5424 | Malicious | Not scored | 09 Jun, 2026 | npm @oplus/obus-core |
Malicious release: Malicious code in comos-sdk (npm) GHSA-xr7v-2mxc-cw5x, MAL-2026-5405 | Malicious | Not scored | 09 Jun, 2026 | npm comos-sdk |
Malicious release: Malicious code in @0xlr/sentry-web (npm) GHSA-pq34-wqrw-jw86, MAL-2026-5387 | Malicious | Not scored | 09 Jun, 2026 | npm @0xlr/sentry-web |
Malicious release: Malicious code in @0xlr/clerk-auth (npm) GHSA-57r8-xw4c-5j59, MAL-2026-5385 | Malicious | Not scored | 09 Jun, 2026 | npm @0xlr/clerk-auth |
Malicious release: Malicious code in @0xlr/prisma-client-js (npm) GHSA-mrxf-wq2g-xvxm, MAL-2026-5386 | Malicious | Not scored | 09 Jun, 2026 | npm @0xlr/prisma-client-js |
Malicious release: Malicious code in @0xlr/vercel-analytics (npm) GHSA-p9mc-hf7g-gjfx, MAL-2026-5391 | Malicious | Not scored | 09 Jun, 2026 | npm @0xlr/vercel-analytics |
Malicious release: Malicious code in @0xlr/stripe-frontend (npm) GHSA-c3gr-xj4c-rc53, MAL-2026-5389 | Malicious | Not scored | 09 Jun, 2026 | npm @0xlr/stripe-frontend |
Malicious release: Malicious code in @0xlr/stripe-checkout-js (npm) GHSA-3fr8-m4cc-93fj, MAL-2026-5388 | Malicious | Not scored | 09 Jun, 2026 | npm @0xlr/stripe-checkout-js |
Malicious release: Malicious code in ui-weave (npm) GHSA-x2w5-px4q-j9wq, MAL-2026-5406 | Malicious | Not scored | 09 Jun, 2026 | npm ui-weave |
Malicious release: Malicious code in @0xlr/supabase-db (npm) GHSA-236w-q9vm-8r42, MAL-2026-5390 | Malicious | Not scored | 09 Jun, 2026 | npm @0xlr/supabase-db |
Malicious release: Malicious code in kraken-ui (npm) GHSA-g324-m33p-jjf4, MAL-2026-5399 | Malicious | Not scored | 09 Jun, 2026 | npm kraken-ui |
Malicious release: Malicious code in @sflyinc-knapsack/shutterfly-react (npm) GHSA-55g7-853c-wpj5, MAL-2026-5393 | Malicious | Not scored | 09 Jun, 2026 | npm @sflyinc-knapsack/shutterfly-react |
Malicious release: Malicious code in @open-banking/cabinet-providers (npm) GHSA-423v-5hgq-8rxh, GHSA-r2wq-c8cp-gp8h, MAL-2026-5392, SNYK-JS-OPENBANKINGCABINETPROVIDERS-18758922 | Malicious | Not scored | 09 Jun, 2026 | npm @open-banking/cabinet-providers |
Malicious release: Malicious code in savant-listing (npm) GHSA-j69h-7gg8-2fxp, GHSA-j9c7-3gvf-x8xg, MAL-2026-5401 | Malicious | Not scored | 09 Jun, 2026 | npm savant-listing |