Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @emilgroup/gdv-sdk (npm) GHSA-8vmq-w85q-4q4j, MAL-2026-2048 | Malicious | Not scored | 22 Mar, 2026 | npm @emilgroup/gdv-sdk |
Malicious release: Malicious code in @opengov/form-utils (npm) GHSA-q4j2-j63f-5vqx, MAL-2026-2063 | Malicious | Not scored | 22 Mar, 2026 | npm @opengov/form-utils |
Malicious release: Malicious code in @emilgroup/tenant-sdk-node (npm) GHSA-gmxq-2g92-63xv, MAL-2026-2061 | Malicious | Not scored | 22 Mar, 2026 | npm @emilgroup/tenant-sdk-node |
Malicious release: Malicious code in @leafnoise/mirage (npm) GHSA-24fv-r862-wg4c, MAL-2026-2062 | Malicious | Not scored | 22 Mar, 2026 | npm @leafnoise/mirage |
Malicious release: Malicious code in @emilgroup/partner-portal-sdk (npm) GHSA-hpqp-f9r8-f725, MAL-2026-2053 | Malicious | Not scored | 22 Mar, 2026 | npm @emilgroup/partner-portal-sdk |
Malicious release: Malicious code in @emilgroup/partner-sdk-node (npm) GHSA-39vv-2g62-pp83, MAL-2026-2055 | Malicious | Not scored | 22 Mar, 2026 | npm @emilgroup/partner-sdk-node |
Malicious release: Malicious code in @emilgroup/auth-sdk-node (npm) GHSA-8328-7r2v-2fq6, MAL-2026-2037 | Malicious | Not scored | 22 Mar, 2026 | npm @emilgroup/auth-sdk-node |
Malicious release: Malicious code in jest-preset-ppf (npm) GHSA-8999-rqc4-rjrh, MAL-2026-2070 | Malicious | Not scored | 22 Mar, 2026 | npm jest-preset-ppf |
Malicious release: Malicious code in @emilgroup/account-sdk-node (npm) GHSA-2phg-9x97-9759, MAL-2026-2032 | Malicious | Not scored | 22 Mar, 2026 | npm @emilgroup/account-sdk-node |
Malicious release: Malicious code in @teale.io/eslint-config (npm) GHSA-7h5g-m989-54j2, MAL-2026-2066 | Malicious | Not scored | 22 Mar, 2026 | npm @teale.io/eslint-config |
Malicious release: Malicious code in @emilgroup/partner-portal-sdk-node (npm) GHSA-cxm8-rrjm-28jf, MAL-2026-2054 | Malicious | Not scored | 22 Mar, 2026 | npm @emilgroup/partner-portal-sdk-node |
Malicious release: Malicious code in @emilgroup/insurance-sdk-node (npm) GHSA-h5jq-7px8-v446, MAL-2026-2051 | Malicious | Not scored | 22 Mar, 2026 | npm @emilgroup/insurance-sdk-node |
Malicious release: Malicious code in @emilgroup/api-documentation (npm) GHSA-wq88-f86r-hgrh, MAL-2026-2035 | Malicious | Not scored | 22 Mar, 2026 | npm @emilgroup/api-documentation |
Malicious release: Malicious code in @emilgroup/claim-sdk-node (npm) GHSA-38x3-f5vr-mvpw, MAL-2026-2042 | Malicious | Not scored | 22 Mar, 2026 | npm @emilgroup/claim-sdk-node |
Malicious release: Malicious code in @emilgroup/document-sdk (npm) GHSA-74q8-chvf-xjp2, MAL-2026-2046 | Malicious | Not scored | 22 Mar, 2026 | npm @emilgroup/document-sdk |
Malicious release: Malicious code in @emilgroup/billing-sdk (npm) GHSA-m26r-hvqm-73ff, MAL-2026-2038 | Malicious | Not scored | 22 Mar, 2026 | npm @emilgroup/billing-sdk |
Malicious release: Malicious code in @emilgroup/notification-sdk-node (npm) GHSA-9538-fpmw-hjpr, MAL-2026-2052 | Malicious | Not scored | 22 Mar, 2026 | npm @emilgroup/notification-sdk-node |
Malicious release: Malicious code in @emilgroup/public-api-sdk (npm) GHSA-qf6c-xv4h-gxw5, MAL-2026-2058 | Malicious | Not scored | 22 Mar, 2026 | npm @emilgroup/public-api-sdk |
Malicious release: Malicious code in @emilgroup/accounting-sdk-node (npm) GHSA-qx4v-wwj4-8xmh, MAL-2026-2034 | Malicious | Not scored | 22 Mar, 2026 | npm @emilgroup/accounting-sdk-node |
Malicious release: Malicious code in @emilgroup/payment-sdk (npm) GHSA-96qx-5379-wp39, MAL-2026-2056 | Malicious | Not scored | 22 Mar, 2026 | npm @emilgroup/payment-sdk |
Malicious release: Malicious code in @emilgroup/billing-sdk-node (npm) GHSA-mw23-j5r9-c8vj, MAL-2026-2039 | Malicious | Not scored | 22 Mar, 2026 | npm @emilgroup/billing-sdk-node |
Malicious release: Malicious code in @emilgroup/payment-sdk-node (npm) GHSA-4r42-c7jf-m8rf, MAL-2026-2057 | Malicious | Not scored | 22 Mar, 2026 | npm @emilgroup/payment-sdk-node |
Malicious release: Malicious code in @emilgroup/insurance-sdk (npm) GHSA-c9rj-gq4m-f5wq, MAL-2026-2050 | Malicious | Not scored | 22 Mar, 2026 | npm @emilgroup/insurance-sdk |
Malicious release: Malicious code in @emilgroup/customer-sdk-node (npm) GHSA-jfwq-4fm4-wwpw, MAL-2026-2045 | Malicious | Not scored | 22 Mar, 2026 | npm @emilgroup/customer-sdk-node |
Malicious release: Malicious code in @emilgroup/customer-sdk (npm) GHSA-rgf4-gx75-xrv2, MAL-2026-2044 | Malicious | Not scored | 22 Mar, 2026 | npm @emilgroup/customer-sdk |
Malicious release: Malicious code in @emilgroup/claim-sdk (npm) GHSA-mjwm-77q5-mrxr, MAL-2026-2041 | Malicious | Not scored | 22 Mar, 2026 | npm @emilgroup/claim-sdk |
Malicious release: Malicious code in eslint-config-ppf (npm) GHSA-29gm-cwfm-376h, MAL-2026-2068 | Malicious | Not scored | 22 Mar, 2026 | npm eslint-config-ppf |
Malicious release: Malicious code in @emilgroup/gdv-sdk-node (npm) GHSA-gqwm-qw26-8g59, MAL-2026-2049 | Malicious | Not scored | 22 Mar, 2026 | npm @emilgroup/gdv-sdk-node |
Malicious release: Malicious code in react-leaflet-heatmap-layer (npm) GHSA-v4gc-5jfp-x5rj, MAL-2026-2072 | Malicious | Not scored | 22 Mar, 2026 | npm react-leaflet-heatmap-layer |
Malicious release: Malicious code in react-leaflet-cluster-layer (npm) GHSA-jrfv-73x8-f24x, MAL-2026-2071 | Malicious | Not scored | 22 Mar, 2026 | npm react-leaflet-cluster-layer |
Malicious release: Malicious code in @opengov/ppf-eslint-config (npm) GHSA-gc99-m8qp-xm33, MAL-2026-2065 | Malicious | Not scored | 22 Mar, 2026 | npm @opengov/ppf-eslint-config |
Malicious release: Malicious code in @emilgroup/auth-sdk (npm) GHSA-gj2w-92fr-m7c2, MAL-2026-2036 | Malicious | Not scored | 22 Mar, 2026 | npm @emilgroup/auth-sdk |
Malicious release: Malicious code in @emilgroup/accounting-sdk (npm) GHSA-cjxf-3qww-qv9w, MAL-2026-2033 | Malicious | Not scored | 22 Mar, 2026 | npm @emilgroup/accounting-sdk |
Malicious release: Malicious code in @emilgroup/account-sdk (npm) GHSA-79wc-g29x-jj3q, MAL-2026-2031 | Malicious | Not scored | 22 Mar, 2026 | npm @emilgroup/account-sdk |
Malicious release: Malicious code in babel-plugin-react-pure-component (npm) GHSA-f9q8-fcvg-876p, MAL-2026-2067 | Malicious | Not scored | 22 Mar, 2026 | npm babel-plugin-react-pure-component |
Malicious release: Malicious code in @pypestream/floating-ui-dom (npm) GHSA-5h9j-3cr5-f9xj, MAL-2026-2030 | Malicious | Not scored | 22 Mar, 2026 | npm @pypestream/floating-ui-dom |
Malicious release: Malicious code in opengov-k6-core (npm) GHSA-h38m-4w8q-55j2, MAL-2026-2027 | Malicious | Not scored | 22 Mar, 2026 | npm opengov-k6-core |
Malicious release: Malicious code in remitly-blog (npm) MAL-2026-2025 | Malicious | Not scored | 22 Mar, 2026 | npm remitly-blog |
Malicious release: Malicious code in @mesh-helpers/themehelper (npm) MAL-2026-2024 | Malicious | Not scored | 22 Mar, 2026 | npm @mesh-helpers/themehelper |
Malicious release: Malicious code in @mesh-components/card (npm) MAL-2026-2022 | Malicious | Not scored | 22 Mar, 2026 | npm @mesh-components/card |
Malicious release: Malicious code in @mesh-components/customthemeprovider (npm) MAL-2026-2023 | Malicious | Not scored | 22 Mar, 2026 | npm @mesh-components/customthemeprovider |
Malicious release: Malicious code in @mesh-helpers/common (npm) MAL-2026-2021 | Malicious | Not scored | 22 Mar, 2026 | npm @mesh-helpers/common |
Malicious release: Malicious code in @modals/blockchain (npm) MAL-2026-2018 | Malicious | Not scored | 21 Mar, 2026 | npm @modals/blockchain |
Malicious release: Malicious code in @modals/layout (npm) MAL-2026-2019 | Malicious | Not scored | 21 Mar, 2026 | npm @modals/layout |
Malicious release: Malicious code in lingewindows (npm) MAL-2026-2015 | Malicious | Not scored | 21 Mar, 2026 | npm lingewindows |
Malicious release: Malicious code in address-autocompletetest (npm) MAL-2026-2014 | Malicious | Not scored | 21 Mar, 2026 | npm address-autocompletetest |
Malicious release: Malicious code in characterai-poc (npm) GHSA-r3h7-hqpp-mm33, MAL-2026-2012 | Malicious | Not scored | 21 Mar, 2026 | npm characterai-poc |
Malicious release: Malicious code in cms-catalogue (npm) MAL-2026-2011 | Malicious | Not scored | 21 Mar, 2026 | npm cms-catalogue |
Malicious release: Malicious code in yelp-react-component-badge (npm) GHSA-fr9v-hm5m-rv52, MAL-2026-2010 | Malicious | Not scored | 21 Mar, 2026 | npm yelp-react-component-badge |
Malicious release: Malicious code in repo-typescript-config (npm) GHSA-767f-p685-mw32, MAL-2026-2009 | Malicious | Not scored | 21 Mar, 2026 | npm repo-typescript-config |