Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in oc-navbar-module-client (npm) MAL-2026-2417 | Malicious | Not scored | 24 Mar, 2026 | npm oc-navbar-module-client |
Malicious release: Malicious code in oc-ccp-module-client (npm) MAL-2026-2416 | Malicious | Not scored | 24 Mar, 2026 | npm oc-ccp-module-client |
Malicious release: Malicious code in oc-aa-module-client (npm) MAL-2026-2415 | Malicious | Not scored | 24 Mar, 2026 | npm oc-aa-module-client |
Malicious release: Malicious code in ftapi-core (npm) MAL-2026-2414 | Malicious | Not scored | 24 Mar, 2026 | npm ftapi-core |
Malicious release: Malicious code in cr-static-shared-components (npm) GHSA-c39r-4xjc-wrcv, MAL-2026-2223 | Malicious | Not scored | 24 Mar, 2026 | npm cr-static-shared-components |
Malicious release: Malicious code in @cloudsop/hmoment (npm) MAL-2026-2408 | Malicious | Not scored | 24 Mar, 2026 | npm @cloudsop/hmoment |
Malicious release: Malicious code in @ceeferenderer/itg-renderer-sdk (npm) GHSA-3v4h-w4g3-h6r2, MAL-2026-2407 | Malicious | Not scored | 24 Mar, 2026 | npm @ceeferenderer/itg-renderer-sdk |
Malicious release: Malicious code in @ceeferenderer/fe-renderer-sdk (npm) GHSA-mw7m-6vvq-q69p, MAL-2026-2406 | Malicious | Not scored | 24 Mar, 2026 | npm @ceeferenderer/fe-renderer-sdk |
Malicious release: Malicious code in cclr-component-resources (npm) MAL-2026-2413 | Malicious | Not scored | 24 Mar, 2026 | npm cclr-component-resources |
Malicious release: Malicious code in yelp-mobile-site-common (npm) GHSA-xmfj-5j3f-gx7x, MAL-2026-2123 | Malicious | Not scored | 24 Mar, 2026 | npm yelp-mobile-site-common |
Malicious release: Malicious code in tailwind-font-inter (npm) GHSA-cxvr-pcxc-6r58, MAL-2026-2111 | Malicious | Not scored | 23 Mar, 2026 | npm tailwind-font-inter |
Malicious release: Malicious code in react-tailwindcss-style (npm) GHSA-hqvw-49vr-fpw3, MAL-2026-2110 | Malicious | Not scored | 23 Mar, 2026 | npm react-tailwindcss-style |
Malicious release: Malicious code in in-app-marketing (npm) GHSA-2rj8-6crh-98qq, MAL-2026-2087 | Malicious | Not scored | 23 Mar, 2026 | npm in-app-marketing |
Malicious release: Malicious code in pulse-scroll-triggered-list-items (npm) GHSA-3qmv-2h4m-5qg9, MAL-2026-2094 | Malicious | Not scored | 23 Mar, 2026 | npm pulse-scroll-triggered-list-items |
Malicious release: Malicious code in pulse-shop-section (npm) GHSA-9php-8vxv-7gmx, MAL-2026-2095 | Malicious | Not scored | 23 Mar, 2026 | npm pulse-shop-section |
Malicious release: Malicious code in ty-search-suggestion (npm) GHSA-f8cx-966c-8x2h, MAL-2026-2105 | Malicious | Not scored | 23 Mar, 2026 | npm ty-search-suggestion |
Malicious release: Malicious code in sidebar-basket (npm) GHSA-fppj-8rcf-8fpp, MAL-2026-2101 | Malicious | Not scored | 23 Mar, 2026 | npm sidebar-basket |
Malicious release: Malicious code in milla-migration (npm) GHSA-jvrr-w8mr-28hp, MAL-2026-2089 | Malicious | Not scored | 23 Mar, 2026 | npm milla-migration |
Malicious release: Malicious code in internal-linking (npm) GHSA-wp6r-9m2x-4h55, MAL-2026-2088 | Malicious | Not scored | 23 Mar, 2026 | npm internal-linking |
Malicious release: Malicious code in shakti-pwa (npm) GHSA-x6m2-63j5-v6c7, MAL-2026-2100 | Malicious | Not scored | 23 Mar, 2026 | npm shakti-pwa |
Malicious release: Malicious code in pulse-rsvp-card-entity (npm) GHSA-x8xx-3mj7-337x, MAL-2026-2093 | Malicious | Not scored | 23 Mar, 2026 | npm pulse-rsvp-card-entity |
Malicious release: Malicious code in falcor-server (npm) GHSA-xq57-xcgm-9q8q, MAL-2026-2086 | Malicious | Not scored | 23 Mar, 2026 | npm falcor-server |
Malicious release: Malicious code in sfx-event-bridge (npm) GHSA-4g9r-2x44-gfm4, MAL-2026-2099 | Malicious | Not scored | 23 Mar, 2026 | npm sfx-event-bridge |
Malicious release: Malicious code in puzzle-render-kit (npm) GHSA-4p9p-g69r-jxv8, MAL-2026-2097 | Malicious | Not scored | 23 Mar, 2026 | npm puzzle-render-kit |
Malicious release: Malicious code in puzzle-asset (npm) GHSA-7hf8-rm28-2rm8, MAL-2026-2096 | Malicious | Not scored | 23 Mar, 2026 | npm puzzle-asset |
Malicious release: Malicious code in netflixid (npm) GHSA-c93f-8832-92qw, MAL-2026-2090 | Malicious | Not scored | 23 Mar, 2026 | npm netflixid |
Malicious release: Malicious code in netflixidentity (npm) GHSA-fr84-v3mx-mr9x, MAL-2026-2091 | Malicious | Not scored | 23 Mar, 2026 | npm netflixidentity |
Malicious release: Malicious code in ty-config-provider (npm) GHSA-gv85-mrvr-pgch, MAL-2026-2103 | Malicious | Not scored | 23 Mar, 2026 | npm ty-config-provider |
Malicious release: Malicious code in ty-fragment-core (npm) GHSA-hc54-whg7-r7g2, MAL-2026-2104 | Malicious | Not scored | 23 Mar, 2026 | npm ty-fragment-core |
Malicious release: Malicious code in pulse-feature-flag (npm) GHSA-jfqc-55rq-mm3j, MAL-2026-2092 | Malicious | Not scored | 23 Mar, 2026 | npm pulse-feature-flag |
Malicious release: Malicious code in storefront-logger (npm) GHSA-jhvp-qr9c-qg9p, MAL-2026-2102 | Malicious | Not scored | 23 Mar, 2026 | npm storefront-logger |
Malicious release: Malicious code in sd-basket-highlight (npm) GHSA-m7hw-fgmf-jwhr, MAL-2026-2098 | Malicious | Not scored | 23 Mar, 2026 | npm sd-basket-highlight |
Malicious release: Malicious code in uipagain (npm) GHSA-hwc6-54mv-7qc5, MAL-2026-2085 | Malicious | Not scored | 23 Mar, 2026 | npm uipagain |
Malicious release: Malicious code in unhandledrejection1 (npm) MAL-2026-2082 | Malicious | Not scored | 22 Mar, 2026 | npm unhandledrejection1 |
Malicious release: Malicious code in @thiagoemmanuell/unhandledrejection (npm) MAL-2026-2081 | Malicious | Not scored | 22 Mar, 2026 | npm @thiagoemmanuell/unhandledrejection |
Malicious release: Malicious code in @emilgroup/document-sdk-node (npm) GHSA-5q3v-cjxm-6cgm, MAL-2026-2075 | Malicious | Not scored | 22 Mar, 2026 | npm @emilgroup/document-sdk-node |
Malicious release: Malicious code in @emilgroup/discount-sdk (npm) GHSA-3fjh-jjvh-r58h, MAL-2026-2074 | Malicious | Not scored | 22 Mar, 2026 | npm @emilgroup/discount-sdk |
Malicious release: Malicious code in @emilgroup/task-sdk-node (npm) GHSA-r27q-f5jw-j5jp, MAL-2026-2079 | Malicious | Not scored | 22 Mar, 2026 | npm @emilgroup/task-sdk-node |
Malicious release: Malicious code in @emilgroup/document-uploader (npm) GHSA-jrpm-f5xg-3frj, MAL-2026-2076 | Malicious | Not scored | 22 Mar, 2026 | npm @emilgroup/document-uploader |
Malicious release: Malicious code in @airtm/uuid-base32 (npm) GHSA-86xp-4fvm-qm2p, MAL-2026-2073 | Malicious | Not scored | 22 Mar, 2026 | npm @airtm/uuid-base32 |
Malicious release: Malicious code in cit-playwright-tests (npm) GHSA-64p5-3wp7-v4c9, MAL-2026-2080 | Malicious | Not scored | 22 Mar, 2026 | npm cit-playwright-tests |
Malicious release: Malicious code in @emilgroup/task-sdk (npm) GHSA-f568-m9rh-p7xj, MAL-2026-2078 | Malicious | Not scored | 22 Mar, 2026 | npm @emilgroup/task-sdk |
Malicious release: Malicious code in @emilgroup/public-api-sdk-node (npm) GHSA-mvrx-3fqg-4hvh, MAL-2026-2077 | Malicious | Not scored | 22 Mar, 2026 | npm @emilgroup/public-api-sdk-node |
Malicious release: Malicious code in @emilgroup/commission-sdk-node (npm) GHSA-cmfv-mmcw-jpw3, MAL-2026-2043 | Malicious | Not scored | 22 Mar, 2026 | npm @emilgroup/commission-sdk-node |
Malicious release: Malicious code in @emilgroup/setting-sdk-node (npm) GHSA-h7pp-f3cj-j5vh, MAL-2026-2059 | Malicious | Not scored | 22 Mar, 2026 | npm @emilgroup/setting-sdk-node |
Malicious release: Malicious code in @emilgroup/changelog-sdk-node (npm) GHSA-wcrr-xhm3-j3x9, MAL-2026-2040 | Malicious | Not scored | 22 Mar, 2026 | npm @emilgroup/changelog-sdk-node |
Malicious release: Malicious code in @emilgroup/tenant-sdk (npm) GHSA-6w74-x38v-9ffj, MAL-2026-2060 | Malicious | Not scored | 22 Mar, 2026 | npm @emilgroup/tenant-sdk |
Malicious release: Malicious code in eslint-config-service-users (npm) GHSA-9h8j-g652-xrg8, MAL-2026-2069 | Malicious | Not scored | 22 Mar, 2026 | npm eslint-config-service-users |
Malicious release: Malicious code in @opengov/ppf-backend-types (npm) GHSA-4xcw-mhqm-x332, MAL-2026-2064 | Malicious | Not scored | 22 Mar, 2026 | npm @opengov/ppf-backend-types |
Malicious release: Malicious code in @emilgroup/docxtemplater-util (npm) GHSA-f9m8-w27f-mxr3, MAL-2026-2047 | Malicious | Not scored | 22 Mar, 2026 | npm @emilgroup/docxtemplater-util |