Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in wot-api (npm) GHSA-x868-v497-jfjj, MAL-2026-3591 | Malicious | Not scored | 12 May, 2026 | npm wot-api |
Malicious release: Malicious code in safe-action (npm) GHSA-w3x2-675q-gpfq, MAL-2026-3590 | Malicious | Not scored | 12 May, 2026 | npm safe-action |
Malicious release: Malicious code in nextmove-mcp (npm) GHSA-fhg4-3pg2-pvgx, MAL-2026-3589 | Malicious | Not scored | 12 May, 2026 | npm nextmove-mcp |
Malicious release: Malicious code in cmux-agent-mcp (npm) GHSA-gx6p-62rj-cg4m, MAL-2026-3588 | Malicious | Not scored | 12 May, 2026 | npm cmux-agent-mcp |
Malicious release: Malicious code in @uipath/identity-tool (npm) GHSA-pj78-w622-mj3q, MAL-2026-3548 | Malicious | Not scored | 12 May, 2026 | npm @uipath/identity-tool |
Malicious release: Malicious code in @uipath/gov-tool (npm) GHSA-54w3-rr2p-q43m, MAL-2026-3547 | Malicious | Not scored | 12 May, 2026 | npm @uipath/gov-tool |
Malicious release: Malicious code in @uipath/functions-tool (npm) GHSA-297w-c359-73wq, MAL-2026-3546 | Malicious | Not scored | 12 May, 2026 | npm @uipath/functions-tool |
Malicious release: Malicious code in @uipath/flow-tool (npm) GHSA-vx3p-wg44-w4vr, MAL-2026-3545 | Malicious | Not scored | 12 May, 2026 | npm @uipath/flow-tool |
Malicious release: Malicious code in @uipath/filesystem (npm) GHSA-pcc3-h294-wpgm, MAL-2026-3544 | Malicious | Not scored | 12 May, 2026 | npm @uipath/filesystem |
Malicious release: Malicious code in @uipath/docsai-tool (npm) GHSA-f4rv-vxjp-3cgh, MAL-2026-3543 | Malicious | Not scored | 12 May, 2026 | npm @uipath/docsai-tool |
Malicious release: Malicious code in @uipath/data-fabric-tool (npm) GHSA-5855-rwmr-f2qw, MAL-2026-3542 | Malicious | Not scored | 12 May, 2026 | npm @uipath/data-fabric-tool |
Malicious release: Malicious code in @uipath/context-grounding-tool (npm) GHSA-4c96-f3f6-hw7h, MAL-2026-3541 | Malicious | Not scored | 12 May, 2026 | npm @uipath/context-grounding-tool |
Malicious release: Malicious code in @uipath/common (npm) GHSA-783q-c3wx-hqmr, MAL-2026-3540 | Malicious | Not scored | 12 May, 2026 | npm @uipath/common |
Malicious release: Malicious code in @uipath/codedapp-tool (npm) GHSA-q883-mhm4-f834, MAL-2026-3539 | Malicious | Not scored | 12 May, 2026 | npm @uipath/codedapp-tool |
Malicious release: Malicious code in @uipath/codedagents-tool (npm) GHSA-x32r-fm9q-m5q4, MAL-2026-3538 | Malicious | Not scored | 12 May, 2026 | npm @uipath/codedagents-tool |
Malicious release: Malicious code in @uipath/codedagent-tool (npm) GHSA-vhx5-vm7v-x3qf, MAL-2026-3537 | Malicious | Not scored | 12 May, 2026 | npm @uipath/codedagent-tool |
Malicious release: Malicious code in @uipath/cli (npm) GHSA-r62p-98fh-6qv4, MAL-2026-3536 | Malicious | Not scored | 12 May, 2026 | npm @uipath/cli |
Malicious release: Malicious code in @uipath/case-tool (npm) GHSA-qw86-wh9r-mpgf, MAL-2026-3535 | Malicious | Not scored | 12 May, 2026 | npm @uipath/case-tool |
Malicious release: Malicious code in @uipath/auth (npm) GHSA-pj44-6m9m-jxwh, MAL-2026-3534 | Malicious | Not scored | 12 May, 2026 | npm @uipath/auth |
Malicious release: Malicious code in @uipath/apollo-wind (npm) GHSA-pg6f-gcgf-hrx9, MAL-2026-3533 | Malicious | Not scored | 12 May, 2026 | npm @uipath/apollo-wind |
Malicious release: Malicious code in @uipath/apollo-react (npm) GHSA-4r46-rx98-x3g7, MAL-2026-3532 | Malicious | Not scored | 12 May, 2026 | npm @uipath/apollo-react |
Malicious release: Malicious code in @uipath/apollo-core (npm) GHSA-j36c-8r88-423c, MAL-2026-3531 | Malicious | Not scored | 12 May, 2026 | npm @uipath/apollo-core |
Malicious release: Malicious code in @uipath/api-workflow-tool (npm) GHSA-rh47-m8gr-5v5q, MAL-2026-3530 | Malicious | Not scored | 12 May, 2026 | npm @uipath/api-workflow-tool |
Malicious release: Malicious code in @uipath/ap-chat (npm) GHSA-96r2-76fx-7r8x, MAL-2026-3529 | Malicious | Not scored | 12 May, 2026 | npm @uipath/ap-chat |
Malicious release: Malicious code in @uipath/aops-policy-tool (npm) GHSA-qwfj-397c-fjm3, MAL-2026-3528 | Malicious | Not scored | 12 May, 2026 | npm @uipath/aops-policy-tool |
Malicious release: Malicious code in @uipath/agent.sdk (npm) GHSA-9hfm-w6gw-qc7c, MAL-2026-3527 | Malicious | Not scored | 12 May, 2026 | npm @uipath/agent.sdk |
Malicious release: Malicious code in @uipath/agent-tool (npm) GHSA-m2qh-7jff-73g8, MAL-2026-3526 | Malicious | Not scored | 12 May, 2026 | npm @uipath/agent-tool |
Malicious release: Malicious code in @uipath/agent-sdk (npm) GHSA-g4jv-2xqr-ffr9, MAL-2026-3525 | Malicious | Not scored | 12 May, 2026 | npm @uipath/agent-sdk |
Malicious release: Malicious code in @uipath/admin-tool (npm) GHSA-mfv5-8q6g-j242, MAL-2026-3524 | Malicious | Not scored | 12 May, 2026 | npm @uipath/admin-tool |
Malicious release: Malicious code in @uipath/access-policy-tool (npm) GHSA-8cx9-3j2f-qgqv, MAL-2026-3523 | Malicious | Not scored | 12 May, 2026 | npm @uipath/access-policy-tool |
Malicious release: Malicious code in @uipath/access-policy-sdk (npm) GHSA-3x69-xfjm-x94w, MAL-2026-3522 | Malicious | Not scored | 12 May, 2026 | npm @uipath/access-policy-sdk |
Malicious release: Malicious code in @tolka/cli (npm) GHSA-c22w-7c9m-fvxg, MAL-2026-3521 | Malicious | Not scored | 12 May, 2026 | npm @tolka/cli |
Malicious release: Malicious code in @taskflow-corp/cli (npm) GHSA-j3c5-6pm5-jq3f, MAL-2026-3520 | Malicious | Not scored | 12 May, 2026 | npm @taskflow-corp/cli |
Malicious release: Malicious code in @tallyui/theme (npm) GHSA-h4m9-55ph-8qgv, MAL-2026-3519 | Malicious | Not scored | 12 May, 2026 | npm @tallyui/theme |
Malicious release: Malicious code in @tallyui/database (npm) GHSA-743p-x755-4v2j, MAL-2026-3518 | Malicious | Not scored | 12 May, 2026 | npm @tallyui/database |
Malicious release: Malicious code in @tallyui/connector-woocommerce (npm) GHSA-7rg9-88vq-q7jq, MAL-2026-3517 | Malicious | Not scored | 12 May, 2026 | npm @tallyui/connector-woocommerce |
Malicious release: Malicious code in @tallyui/connector-shopify (npm) GHSA-7g64-m42w-5h7v, MAL-2026-3516 | Malicious | Not scored | 12 May, 2026 | npm @tallyui/connector-shopify |
Malicious release: Malicious code in @tallyui/connector-medusa (npm) GHSA-f833-2cj4-2837, MAL-2026-3515 | Malicious | Not scored | 12 May, 2026 | npm @tallyui/connector-medusa |
Malicious release: Malicious code in @tallyui/components (npm) GHSA-fc57-xv4v-8cp7, MAL-2026-3514 | Malicious | Not scored | 12 May, 2026 | npm @tallyui/components |
Malicious release: Malicious code in @supersurkhet/sdk (npm) GHSA-j2fh-hxx6-vqqr, MAL-2026-3513 | Malicious | Not scored | 12 May, 2026 | npm @supersurkhet/sdk |
Malicious release: Malicious code in @mistralai/mistralai-gcp (npm) GHSA-rccm-wwph-vgxc, MAL-2026-3512 | Malicious | Not scored | 12 May, 2026 | npm @mistralai/mistralai-gcp |
Malicious release: Malicious code in @mistralai/mistralai-azure (npm) GHSA-2rm2-c4pc-xxr9, MAL-2026-3511 | Malicious | Not scored | 12 May, 2026 | npm @mistralai/mistralai-azure |
Malicious release: Malicious code in @mesadev/rest (npm) GHSA-x77w-4f56-pcvp, MAL-2026-3510 | Malicious | Not scored | 12 May, 2026 | npm @mesadev/rest |
Malicious release: Malicious code in @supersurkhet/cli (npm) GHSA-5fx3-327x-w6m7, MAL-2026-3457 | Malicious | Not scored | 12 May, 2026 | npm @supersurkhet/cli |
Malicious release: Malicious code in @tallyui/connector-vendure (npm) GHSA-gp5v-3cpv-vqh6, MAL-2026-3458 | Malicious | Not scored | 12 May, 2026 | npm @tallyui/connector-vendure |
Malicious release: Malicious code in @tallyui/pos (npm) GHSA-9phw-7rx9-6ccq, MAL-2026-3459 | Malicious | Not scored | 12 May, 2026 | npm @tallyui/pos |
Malicious release: Malicious code in git-branch-selector (npm) GHSA-h5h4-xpf8-g55c, MAL-2026-3503 | Malicious | Not scored | 12 May, 2026 | npm git-branch-selector |
Malicious release: Malicious code in git-git-git (npm) GHSA-w8x9-9886-9m73, MAL-2026-3504 | Malicious | Not scored | 12 May, 2026 | npm git-git-git |
Malicious release: Malicious code in @opensearch-project/opensearch (npm) GHSA-298w-vvm4-ww55, MAL-2026-3434 | Malicious | Not scored | 12 May, 2026 | npm @opensearch-project/opensearch |
Malicious release: Malicious code in @tanstack/vue-start-client (npm) GHSA-p5mj-5p7c-22jr, MAL-2026-3499 | Malicious | Not scored | 12 May, 2026 | npm @tanstack/vue-start-client |