Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @redhat-cloud-services/remediations-client (npm) GHSA-cc5x-qv4h-qjgj, MAL-2026-5146 | Malicious | Not scored | 01 Jun, 2026 | npm @redhat-cloud-services/remediations-client |
Malicious release: Malicious code in @redhat-cloud-services/frontend-components-config-utilities (npm) GHSA-cxfw-p322-rfrv, MAL-2026-5114 | Malicious | Not scored | 01 Jun, 2026 | npm @redhat-cloud-services/frontend-components-config-utilities |
Malicious release: Malicious code in @redhat-cloud-services/frontend-components-notifications (npm) GHSA-ghcf-x8cx-89q8, GHSA-vvm2-35w3-pp39, MAL-2026-5136 | Malicious | Not scored | 01 Jun, 2026 | npm @redhat-cloud-services/frontend-components-notifications |
Malicious release: Malicious code in @redhat-cloud-services/hcc-pf-mcp (npm) GHSA-gw27-332x-rf3r, MAL-2026-5140 | Malicious | Not scored | 01 Jun, 2026 | npm @redhat-cloud-services/hcc-pf-mcp |
Malicious release: Malicious code in @redhat-cloud-services/insights-client (npm) GHSA-gw9m-7c68-vq26, MAL-2026-5142 | Malicious | Not scored | 01 Jun, 2026 | npm @redhat-cloud-services/insights-client |
Malicious release: Malicious code in @redhat-cloud-services/frontend-components-config (npm) GHSA-h43w-g623-gfmv, GHSA-r28x-h6v7-8rjj, MAL-2026-5126 | Malicious | Not scored | 01 Jun, 2026 | npm @redhat-cloud-services/frontend-components-config |
Malicious release: Malicious code in @redhat-cloud-services/frontend-components-translations (npm) GHSA-h5c9-cj46-7p79, MAL-2026-5137 | Malicious | Not scored | 01 Jun, 2026 | npm @redhat-cloud-services/frontend-components-translations |
Malicious release: Malicious code in @redhat-cloud-services/config-manager-client (npm) GHSA-h8h2-fp9q-h887, MAL-2026-5134 | Malicious | Not scored | 01 Jun, 2026 | npm @redhat-cloud-services/config-manager-client |
Malicious release: Malicious code in @redhat-cloud-services/quickstarts-client (npm) GHSA-mj98-cgm5-6xrr, MAL-2026-5115 | Malicious | Not scored | 01 Jun, 2026 | npm @redhat-cloud-services/quickstarts-client |
Malicious release: Malicious code in @redhat-cloud-services/frontend-components (npm) GHSA-mrgj-mcjh-5mf2, MAL-2026-5113 | Malicious | Not scored | 01 Jun, 2026 | npm @redhat-cloud-services/frontend-components |
Malicious release: Malicious code in @redhat-cloud-services/vulnerabilities-client (npm) GHSA-p4vp-xg44-93v7, MAL-2026-5148 | Malicious | Not scored | 01 Jun, 2026 | npm @redhat-cloud-services/vulnerabilities-client |
Malicious release: Malicious code in @redhat-cloud-services/frontend-components-utilities (npm) GHSA-r9mp-ff22-jhrr, MAL-2026-5138 | Malicious | Not scored | 01 Jun, 2026 | npm @redhat-cloud-services/frontend-components-utilities |
Malicious release: Malicious code in @redhat-cloud-services/notifications-client (npm) GHSA-rfq7-3pmv-5h3h, MAL-2026-5144 | Malicious | Not scored | 01 Jun, 2026 | npm @redhat-cloud-services/notifications-client |
Malicious release: Malicious code in @redhat-cloud-services/hcc-feo-mcp (npm) GHSA-vgm5-jmvr-cjgf, MAL-2026-5129 | Malicious | Not scored | 01 Jun, 2026 | npm @redhat-cloud-services/hcc-feo-mcp |
Malicious release: Malicious code in @redhat-cloud-services/sources-client (npm) GHSA-vp9c-9mjm-2f7w, MAL-2026-5131 | Malicious | Not scored | 01 Jun, 2026 | npm @redhat-cloud-services/sources-client |
Malicious release: Malicious code in @redhat-cloud-services/patch-client (npm) GHSA-vx4h-8456-6pp3, MAL-2026-5145 | Malicious | Not scored | 01 Jun, 2026 | npm @redhat-cloud-services/patch-client |
Malicious release: Malicious code in @redhat-cloud-services/javascript-clients-shared (npm) GHSA-wfwj-j63c-gg6h, MAL-2026-5143 | Malicious | Not scored | 01 Jun, 2026 | npm @redhat-cloud-services/javascript-clients-shared |
Malicious release: Malicious code in @redhat-cloud-services/frontend-components-testing (npm) GHSA-wgvx-w8g7-vh4h, MAL-2026-5128 | Malicious | Not scored | 01 Jun, 2026 | npm @redhat-cloud-services/frontend-components-testing |
Malicious release: Malicious code in @redhat-cloud-services/compliance-client (npm) GHSA-x4x7-xp58-wjrh, MAL-2026-5133 | Malicious | Not scored | 01 Jun, 2026 | npm @redhat-cloud-services/compliance-client |
Malicious release: Malicious code in @redhat-cloud-services/hcc-kessel-mcp (npm) GHSA-xh7j-7gfw-g434, MAL-2026-5139 | Malicious | Not scored | 01 Jun, 2026 | npm @redhat-cloud-services/hcc-kessel-mcp |
Malicious release: Malicious code in js-shared-modules (npm) GHSA-57xw-xm2f-j2wc, MAL-2026-5098 | Malicious | Not scored | 31 May, 2026 | npm js-shared-modules |
Malicious release: Malicious code in @challenger6/vm-pattern-library (npm) MAL-2026-5095 | Malicious | Not scored | 31 May, 2026 | npm @challenger6/vm-pattern-library |
Malicious release: Malicious code in retail-location-strategy-frontend (npm) MAL-2026-5092 | Malicious | Not scored | 30 May, 2026 | npm retail-location-strategy-frontend |
Malicious release: Malicious code in cms-storehub (npm) GHSA-gvmr-7vwj-2mmf, MAL-2026-5097 | Malicious | Not scored | 30 May, 2026 | npm cms-storehub |
Malicious release: Malicious code in buffer-utilities (npm) GHSA-67mv-3xg7-3726, MAL-2026-5087 | Malicious | Not scored | 30 May, 2026 | npm buffer-utilities |
Malicious release: Malicious code in midoss (npm) GHSA-6mj4-8j98-6c94, MAL-2026-5073 | Malicious | Not scored | 29 May, 2026 | npm midoss |
Malicious release: Malicious code in customerdigital-service-lib (npm) GHSA-9vx3-fc8v-7w96, MAL-2026-5063 | Malicious | Not scored | 29 May, 2026 | npm customerdigital-service-lib |
Malicious release: Malicious code in hardhat-evmchain (npm) GHSA-f4xf-cwx5-r3jm, MAL-2026-5072 | Malicious | Not scored | 29 May, 2026 | npm hardhat-evmchain |
Malicious release: Malicious code in chai-bundle (npm) GHSA-q36r-56hw-2r46, MAL-2026-5059 | Malicious | Not scored | 29 May, 2026 | npm chai-bundle |
Malicious release: Malicious code in appkit-react-utils (npm) GHSA-fv6c-xqrw-prcr, MAL-2026-5057 | Malicious | Not scored | 29 May, 2026 | npm appkit-react-utils |
Malicious release: Malicious code in viem-multichain (npm) GHSA-88qj-pvmg-2jvm, MAL-2026-5084 | Malicious | Not scored | 29 May, 2026 | npm viem-multichain |
Malicious release: Malicious code in ethers-hdnode (npm) GHSA-f3p6-3xjv-cxwq, MAL-2026-5067 | Malicious | Not scored | 29 May, 2026 | npm ethers-hdnode |
Malicious release: Malicious code in ethers-contract (npm) GHSA-gxfh-j6jv-hc58, MAL-2026-5064 | Malicious | Not scored | 29 May, 2026 | npm ethers-contract |
Malicious release: Malicious code in argpras (npm) GHSA-qqwp-8jp6-678r, MAL-2026-5058 | Malicious | Not scored | 29 May, 2026 | npm argpras |
Malicious release: Malicious code in @cplace-paw-fe/cf-training-extended (npm) GHSA-4xc8-739q-c5wg, MAL-2026-5047 | Malicious | Not scored | 29 May, 2026 | npm @cplace-paw-fe/cf-training-extended |
Malicious release: Malicious code in @trp-individual-investor-adv-disc/adv-shared (npm) GHSA-83jm-r9rf-7gcf, MAL-2026-5056 | Malicious | Not scored | 29 May, 2026 | npm @trp-individual-investor-adv-disc/adv-shared |
Malicious release: Malicious code in @timelycare/config-service (npm) GHSA-qqc4-xcxr-cq7p, MAL-2026-5054 | Malicious | Not scored | 29 May, 2026 | npm @timelycare/config-service |
Malicious release: Malicious code in tailwind-effect (npm) GHSA-68h2-v9v8-3829, MAL-2026-5081 | Malicious | Not scored | 29 May, 2026 | npm tailwind-effect |
Malicious release: Malicious code in one-view-chat-ui-module (npm) GHSA-x5hf-3wp7-2rhq, MAL-2026-5074 | Malicious | Not scored | 29 May, 2026 | npm one-view-chat-ui-module |
Malicious release: Malicious code in web3-config-loader (npm) GHSA-m273-jgjp-6f68, MAL-2026-5085 | Malicious | Not scored | 29 May, 2026 | npm web3-config-loader |
Malicious release: Malicious code in evmchain-cli (npm) GHSA-cr99-r4wc-x948, MAL-2026-5068 | Malicious | Not scored | 29 May, 2026 | npm evmchain-cli |
Malicious release: Malicious code in evmchain-config (npm) GHSA-fqr3-46mm-cgvp, MAL-2026-5069 | Malicious | Not scored | 29 May, 2026 | npm evmchain-config |
Malicious release: Malicious code in tailwindcss-basic-animation (npm) GHSA-fwwj-pvrq-jp8p, MAL-2026-5083 | Malicious | Not scored | 29 May, 2026 | npm tailwindcss-basic-animation |
Malicious release: Malicious code in ota_web_admin (npm) GHSA-vhgj-33p4-7gr8, MAL-2026-5075 | Malicious | Not scored | 29 May, 2026 | npm ota_web_admin |
Malicious release: Malicious code in tailwind-smooth-slider (npm) GHSA-w48r-28x8-4v9p, MAL-2026-5082 | Malicious | Not scored | 29 May, 2026 | npm tailwind-smooth-slider |
Malicious release: Malicious code in raven-i18n-react (npm) GHSA-9w8j-9mp6-phr8, MAL-2026-5078 | Malicious | Not scored | 29 May, 2026 | npm raven-i18n-react |
Malicious release: Malicious code in chai-use-test (npm) GHSA-jr6p-493v-mmwf, MAL-2026-5061 | Malicious | Not scored | 29 May, 2026 | npm chai-use-test |
Malicious release: Malicious code in chai-extensions-extras (npm) GHSA-qqfx-v5rv-9rxr, MAL-2026-5060 | Malicious | Not scored | 29 May, 2026 | npm chai-extensions-extras |
Malicious release: Malicious code in tailwind-clamps-line (npm) GHSA-29g5-vw2p-x29p, MAL-2026-5080 | Malicious | Not scored | 29 May, 2026 | npm tailwind-clamps-line |
Malicious release: Malicious code in private-next-instrumentation-client (npm) GHSA-cx3x-gvpc-g35w, MAL-2026-5076 | Malicious | Not scored | 29 May, 2026 | npm private-next-instrumentation-client |