Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in 1co (npm) MAL-2026-3671 | Malicious | Not scored | 12 May, 2026 | npm 1co |
Malicious release: Malicious code in @2oolkit/hyperliquid-cli (npm) MAL-2026-3679 | Malicious | Not scored | 12 May, 2026 | npm @2oolkit/hyperliquid-cli |
Malicious release: Malicious code in @chahuadev/junk-sweeper-app (npm) MAL-2026-3682 | Malicious | Not scored | 12 May, 2026 | npm @chahuadev/junk-sweeper-app |
Malicious release: Malicious code in 8oo (npm) MAL-2026-3677 | Malicious | Not scored | 12 May, 2026 | npm 8oo |
Malicious release: Malicious code in 11j (npm) MAL-2026-3670 | Malicious | Not scored | 12 May, 2026 | npm 11j |
Malicious release: Malicious code in 3pool-sushibar (npm) MAL-2026-3673 | Malicious | Not scored | 12 May, 2026 | npm 3pool-sushibar |
Malicious release: Malicious code in 0ctf-chalweb (npm) MAL-2026-3667 | Malicious | Not scored | 12 May, 2026 | npm 0ctf-chalweb |
Malicious release: Malicious code in housecallpro (npm) MAL-2026-3610 | Malicious | Not scored | 12 May, 2026 | npm housecallpro |
Malicious release: Malicious code in @tallyui/storage-sqlite (npm) GHSA-9w67-pvq7-x7hj, MAL-2026-3604 | Malicious | Not scored | 12 May, 2026 | npm @tallyui/storage-sqlite |
Malicious release: Malicious code in @dirigible-ai/sdk (npm) MAL-2026-3593 | Malicious | Not scored | 12 May, 2026 | npm @dirigible-ai/sdk |
Malicious release: Malicious code in @draftauth/client (npm) MAL-2026-3594 | Malicious | Not scored | 12 May, 2026 | npm @draftauth/client |
Malicious release: Malicious code in @draftauth/core (npm) MAL-2026-3595 | Malicious | Not scored | 12 May, 2026 | npm @draftauth/core |
Malicious release: Malicious code in @draftlab/auth (npm) MAL-2026-3596 | Malicious | Not scored | 12 May, 2026 | npm @draftlab/auth |
Malicious release: Malicious code in @draftlab/auth-router (npm) MAL-2026-3597 | Malicious | Not scored | 12 May, 2026 | npm @draftlab/auth-router |
Malicious release: Malicious code in @draftlab/db (npm) MAL-2026-3598 | Malicious | Not scored | 12 May, 2026 | npm @draftlab/db |
Malicious release: Malicious code in @mesadev/saguaro (npm) MAL-2026-3599 | Malicious | Not scored | 12 May, 2026 | npm @mesadev/saguaro |
Malicious release: Malicious code in @mesadev/sdk (npm) MAL-2026-3600 | Malicious | Not scored | 12 May, 2026 | npm @mesadev/sdk |
Malicious release: Malicious code in @ml-toolkit-ts/preprocessing (npm) MAL-2026-3601 | Malicious | Not scored | 12 May, 2026 | npm @ml-toolkit-ts/preprocessing |
Malicious release: Malicious code in @ml-toolkit-ts/xgboost (npm) MAL-2026-3602 | Malicious | Not scored | 12 May, 2026 | npm @ml-toolkit-ts/xgboost |
Malicious release: Malicious code in @tallyui/core (npm) MAL-2026-3603 | Malicious | Not scored | 12 May, 2026 | npm @tallyui/core |
Malicious release: Malicious code in agentwork-cli (npm) MAL-2026-3605 | Malicious | Not scored | 12 May, 2026 | npm agentwork-cli |
Malicious release: Malicious code in ml-toolkit-ts (npm) MAL-2026-3606 | Malicious | Not scored | 12 May, 2026 | npm ml-toolkit-ts |
Malicious release: Malicious code in hedwig-tsconfig (npm) MAL-2026-3592 | Malicious | Not scored | 12 May, 2026 | npm hedwig-tsconfig |
Malicious release: Malicious code in @uipath/widget.sdk (npm) GHSA-27w6-4p99-7x6q, MAL-2026-3587 | Malicious | Not scored | 12 May, 2026 | npm @uipath/widget.sdk |
Malicious release: Malicious code in @uipath/vss (npm) GHSA-wm4w-2r2c-gq5f, MAL-2026-3586 | Malicious | Not scored | 12 May, 2026 | npm @uipath/vss |
Malicious release: Malicious code in @uipath/vertical-solutions-tool (npm) GHSA-6hg5-98mg-m25x, MAL-2026-3585 | Malicious | Not scored | 12 May, 2026 | npm @uipath/vertical-solutions-tool |
Malicious release: Malicious code in @uipath/uipath-python-bridge (npm) GHSA-vmj3-j2j8-j8vg, MAL-2026-3584 | Malicious | Not scored | 12 May, 2026 | npm @uipath/uipath-python-bridge |
Malicious release: Malicious code in @uipath/ui-widgets-multi-file-upload (npm) GHSA-mv6w-f7c2-7g9v, MAL-2026-3583 | Malicious | Not scored | 12 May, 2026 | npm @uipath/ui-widgets-multi-file-upload |
Malicious release: Malicious code in @uipath/traces-tool (npm) GHSA-c7c5-8687-mmjw, MAL-2026-3582 | Malicious | Not scored | 12 May, 2026 | npm @uipath/traces-tool |
Malicious release: Malicious code in @uipath/tool-workflowcompiler (npm) GHSA-mp74-5gjx-v4mh, MAL-2026-3581 | Malicious | Not scored | 12 May, 2026 | npm @uipath/tool-workflowcompiler |
Malicious release: Malicious code in @uipath/test-manager-tool (npm) GHSA-55p8-r93f-539h, MAL-2026-3580 | Malicious | Not scored | 12 May, 2026 | npm @uipath/test-manager-tool |
Malicious release: Malicious code in @uipath/telemetry (npm) GHSA-99pr-79hv-pf5c, MAL-2026-3579 | Malicious | Not scored | 12 May, 2026 | npm @uipath/telemetry |
Malicious release: Malicious code in @uipath/tasks-tool (npm) GHSA-qhq7-xgvv-c3xf, MAL-2026-3578 | Malicious | Not scored | 12 May, 2026 | npm @uipath/tasks-tool |
Malicious release: Malicious code in @uipath/solutionpackager-tool-core (npm) GHSA-39jx-hvgv-rrx7, MAL-2026-3577 | Malicious | Not scored | 12 May, 2026 | npm @uipath/solutionpackager-tool-core |
Malicious release: Malicious code in @uipath/solutionpackager-sdk (npm) GHSA-v6fp-2vv4-5v87, MAL-2026-3576 | Malicious | Not scored | 12 May, 2026 | npm @uipath/solutionpackager-sdk |
Malicious release: Malicious code in @uipath/solution-tool (npm) GHSA-7733-35c8-5p4f, MAL-2026-3575 | Malicious | Not scored | 12 May, 2026 | npm @uipath/solution-tool |
Malicious release: Malicious code in @uipath/solution-packager (npm) GHSA-rqp5-9q9r-fp5h, MAL-2026-3574 | Malicious | Not scored | 12 May, 2026 | npm @uipath/solution-packager |
Malicious release: Malicious code in @uipath/rpa-tool (npm) GHSA-8jqg-95h3-6m8j, MAL-2026-3573 | Malicious | Not scored | 12 May, 2026 | npm @uipath/rpa-tool |
Malicious release: Malicious code in @uipath/rpa-legacy-tool (npm) GHSA-g69j-r43j-r44p, MAL-2026-3572 | Malicious | Not scored | 12 May, 2026 | npm @uipath/rpa-legacy-tool |
Malicious release: Malicious code in @uipath/robot (npm) GHSA-cx9h-9vrc-7393, MAL-2026-3571 | Malicious | Not scored | 12 May, 2026 | npm @uipath/robot |
Malicious release: Malicious code in @uipath/resources-tool (npm) GHSA-p33p-663f-fpxf, MAL-2026-3570 | Malicious | Not scored | 12 May, 2026 | npm @uipath/resources-tool |
Malicious release: Malicious code in @uipath/resourcecatalog-tool (npm) GHSA-pgjp-cqh9-r24w, MAL-2026-3569 | Malicious | Not scored | 12 May, 2026 | npm @uipath/resourcecatalog-tool |
Malicious release: Malicious code in @uipath/resource-tool (npm) GHSA-rjjc-4j74-hxff, MAL-2026-3568 | Malicious | Not scored | 12 May, 2026 | npm @uipath/resource-tool |
Malicious release: Malicious code in @uipath/project-packager (npm) GHSA-wgg7-jx79-9gm7, MAL-2026-3567 | Malicious | Not scored | 12 May, 2026 | npm @uipath/project-packager |
Malicious release: Malicious code in @uipath/platform-tool (npm) GHSA-rw85-q9p7-6qc5, MAL-2026-3566 | Malicious | Not scored | 12 May, 2026 | npm @uipath/platform-tool |
Malicious release: Malicious code in @uipath/packager-tool-workflowcompiler (npm) GHSA-jc43-rw5c-6gh3, MAL-2026-3564 | Malicious | Not scored | 12 May, 2026 | npm @uipath/packager-tool-workflowcompiler |
Malicious release: Malicious code in @uipath/packager-tool-workflowcompiler-browser (npm) GHSA-887x-q7fp-r4jc, MAL-2026-3565 | Malicious | Not scored | 12 May, 2026 | npm @uipath/packager-tool-workflowcompiler-browser |
Malicious release: Malicious code in @uipath/packager-tool-webapp (npm) GHSA-gg48-r7c2-vgvx, MAL-2026-3563 | Malicious | Not scored | 12 May, 2026 | npm @uipath/packager-tool-webapp |
Malicious release: Malicious code in @uipath/packager-tool-functions (npm) GHSA-p7v2-mh8g-c4xw, MAL-2026-3562 | Malicious | Not scored | 12 May, 2026 | npm @uipath/packager-tool-functions |
Malicious release: Malicious code in @uipath/packager-tool-flow (npm) GHSA-xj87-mq94-9mhc, MAL-2026-3561 | Malicious | Not scored | 12 May, 2026 | npm @uipath/packager-tool-flow |