Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @uipath/packager-tool-connector (npm) GHSA-g24w-7vm3-g9fq, MAL-2026-3560 | Malicious | Not scored | 12 May, 2026 | npm @uipath/packager-tool-connector |
Malicious release: Malicious code in @uipath/packager-tool-case (npm) GHSA-5c2g-qxm6-3x6x, MAL-2026-3559 | Malicious | Not scored | 12 May, 2026 | npm @uipath/packager-tool-case |
Malicious release: Malicious code in @uipath/packager-tool-bpmn (npm) GHSA-3688-2wf8-g67g, MAL-2026-3558 | Malicious | Not scored | 12 May, 2026 | npm @uipath/packager-tool-bpmn |
Malicious release: Malicious code in @uipath/packager-tool-apiworkflow (npm) GHSA-4rxh-6hgh-qm7w, MAL-2026-3557 | Malicious | Not scored | 12 May, 2026 | npm @uipath/packager-tool-apiworkflow |
Malicious release: Malicious code in @uipath/orchestrator-tool (npm) GHSA-pxj3-vc34-jc7w, MAL-2026-3556 | Malicious | Not scored | 12 May, 2026 | npm @uipath/orchestrator-tool |
Malicious release: Malicious code in @uipath/maestro-tool (npm) GHSA-fr9p-h4v3-xx4c, MAL-2026-3555 | Malicious | Not scored | 12 May, 2026 | npm @uipath/maestro-tool |
Malicious release: Malicious code in @uipath/maestro-sdk (npm) GHSA-h6vp-2654-rw48, MAL-2026-3554 | Malicious | Not scored | 12 May, 2026 | npm @uipath/maestro-sdk |
Malicious release: Malicious code in @uipath/llmgw-tool (npm) GHSA-qxg5-3xx4-vmc2, MAL-2026-3553 | Malicious | Not scored | 12 May, 2026 | npm @uipath/llmgw-tool |
Malicious release: Malicious code in @uipath/integrationservice-tool (npm) GHSA-865m-4j25-mvcf, MAL-2026-3552 | Malicious | Not scored | 12 May, 2026 | npm @uipath/integrationservice-tool |
Malicious release: Malicious code in @uipath/insights-tool (npm) GHSA-4fcv-75gv-fmq6, MAL-2026-3550 | Malicious | Not scored | 12 May, 2026 | npm @uipath/insights-tool |
Malicious release: Malicious code in @uipath/integrationservice-sdk (npm) GHSA-x399-mvwr-hhxf, MAL-2026-3551 | Malicious | Not scored | 12 May, 2026 | npm @uipath/integrationservice-sdk |
Malicious release: Malicious code in @uipath/insights-sdk (npm) GHSA-qqjm-wxv4-2754, MAL-2026-3549 | Malicious | Not scored | 12 May, 2026 | npm @uipath/insights-sdk |
Malicious release: Malicious code in wot-api (npm) GHSA-x868-v497-jfjj, MAL-2026-3591 | Malicious | Not scored | 12 May, 2026 | npm wot-api |
Malicious release: Malicious code in safe-action (npm) GHSA-w3x2-675q-gpfq, MAL-2026-3590 | Malicious | Not scored | 12 May, 2026 | npm safe-action |
Malicious release: Malicious code in nextmove-mcp (npm) GHSA-fhg4-3pg2-pvgx, MAL-2026-3589 | Malicious | Not scored | 12 May, 2026 | npm nextmove-mcp |
Malicious release: Malicious code in cmux-agent-mcp (npm) GHSA-gx6p-62rj-cg4m, MAL-2026-3588 | Malicious | Not scored | 12 May, 2026 | npm cmux-agent-mcp |
Malicious release: Malicious code in @uipath/identity-tool (npm) GHSA-pj78-w622-mj3q, MAL-2026-3548 | Malicious | Not scored | 12 May, 2026 | npm @uipath/identity-tool |
Malicious release: Malicious code in @uipath/gov-tool (npm) GHSA-54w3-rr2p-q43m, MAL-2026-3547 | Malicious | Not scored | 12 May, 2026 | npm @uipath/gov-tool |
Malicious release: Malicious code in @uipath/functions-tool (npm) GHSA-297w-c359-73wq, MAL-2026-3546 | Malicious | Not scored | 12 May, 2026 | npm @uipath/functions-tool |
Malicious release: Malicious code in @uipath/flow-tool (npm) GHSA-vx3p-wg44-w4vr, MAL-2026-3545 | Malicious | Not scored | 12 May, 2026 | npm @uipath/flow-tool |
Malicious release: Malicious code in @uipath/filesystem (npm) GHSA-pcc3-h294-wpgm, MAL-2026-3544 | Malicious | Not scored | 12 May, 2026 | npm @uipath/filesystem |
Malicious release: Malicious code in @uipath/docsai-tool (npm) GHSA-f4rv-vxjp-3cgh, MAL-2026-3543 | Malicious | Not scored | 12 May, 2026 | npm @uipath/docsai-tool |
Malicious release: Malicious code in @uipath/data-fabric-tool (npm) GHSA-5855-rwmr-f2qw, MAL-2026-3542 | Malicious | Not scored | 12 May, 2026 | npm @uipath/data-fabric-tool |
Malicious release: Malicious code in @uipath/context-grounding-tool (npm) GHSA-4c96-f3f6-hw7h, MAL-2026-3541 | Malicious | Not scored | 12 May, 2026 | npm @uipath/context-grounding-tool |
Malicious release: Malicious code in @uipath/common (npm) GHSA-783q-c3wx-hqmr, MAL-2026-3540 | Malicious | Not scored | 12 May, 2026 | npm @uipath/common |
Malicious release: Malicious code in @uipath/codedapp-tool (npm) GHSA-q883-mhm4-f834, MAL-2026-3539 | Malicious | Not scored | 12 May, 2026 | npm @uipath/codedapp-tool |
Malicious release: Malicious code in @uipath/codedagents-tool (npm) GHSA-x32r-fm9q-m5q4, MAL-2026-3538 | Malicious | Not scored | 12 May, 2026 | npm @uipath/codedagents-tool |
Malicious release: Malicious code in @uipath/codedagent-tool (npm) GHSA-vhx5-vm7v-x3qf, MAL-2026-3537 | Malicious | Not scored | 12 May, 2026 | npm @uipath/codedagent-tool |
Malicious release: Malicious code in @uipath/cli (npm) GHSA-r62p-98fh-6qv4, MAL-2026-3536 | Malicious | Not scored | 12 May, 2026 | npm @uipath/cli |
Malicious release: Malicious code in @uipath/case-tool (npm) GHSA-qw86-wh9r-mpgf, MAL-2026-3535 | Malicious | Not scored | 12 May, 2026 | npm @uipath/case-tool |
Malicious release: Malicious code in @uipath/auth (npm) GHSA-pj44-6m9m-jxwh, MAL-2026-3534 | Malicious | Not scored | 12 May, 2026 | npm @uipath/auth |
Malicious release: Malicious code in @uipath/apollo-wind (npm) GHSA-pg6f-gcgf-hrx9, MAL-2026-3533 | Malicious | Not scored | 12 May, 2026 | npm @uipath/apollo-wind |
Malicious release: Malicious code in @uipath/apollo-react (npm) GHSA-4r46-rx98-x3g7, MAL-2026-3532 | Malicious | Not scored | 12 May, 2026 | npm @uipath/apollo-react |
Malicious release: Malicious code in @uipath/apollo-core (npm) GHSA-j36c-8r88-423c, MAL-2026-3531 | Malicious | Not scored | 12 May, 2026 | npm @uipath/apollo-core |
Malicious release: Malicious code in @uipath/api-workflow-tool (npm) GHSA-rh47-m8gr-5v5q, MAL-2026-3530 | Malicious | Not scored | 12 May, 2026 | npm @uipath/api-workflow-tool |
Malicious release: Malicious code in @uipath/ap-chat (npm) GHSA-96r2-76fx-7r8x, MAL-2026-3529 | Malicious | Not scored | 12 May, 2026 | npm @uipath/ap-chat |
Malicious release: Malicious code in @uipath/aops-policy-tool (npm) GHSA-qwfj-397c-fjm3, MAL-2026-3528 | Malicious | Not scored | 12 May, 2026 | npm @uipath/aops-policy-tool |
Malicious release: Malicious code in @uipath/agent.sdk (npm) GHSA-9hfm-w6gw-qc7c, MAL-2026-3527 | Malicious | Not scored | 12 May, 2026 | npm @uipath/agent.sdk |
Malicious release: Malicious code in @uipath/agent-tool (npm) GHSA-m2qh-7jff-73g8, MAL-2026-3526 | Malicious | Not scored | 12 May, 2026 | npm @uipath/agent-tool |
Malicious release: Malicious code in @uipath/agent-sdk (npm) GHSA-g4jv-2xqr-ffr9, MAL-2026-3525 | Malicious | Not scored | 12 May, 2026 | npm @uipath/agent-sdk |
Malicious release: Malicious code in @uipath/admin-tool (npm) GHSA-mfv5-8q6g-j242, MAL-2026-3524 | Malicious | Not scored | 12 May, 2026 | npm @uipath/admin-tool |
Malicious release: Malicious code in @uipath/access-policy-tool (npm) GHSA-8cx9-3j2f-qgqv, MAL-2026-3523 | Malicious | Not scored | 12 May, 2026 | npm @uipath/access-policy-tool |
Malicious release: Malicious code in @uipath/access-policy-sdk (npm) GHSA-3x69-xfjm-x94w, MAL-2026-3522 | Malicious | Not scored | 12 May, 2026 | npm @uipath/access-policy-sdk |
Malicious release: Malicious code in @tolka/cli (npm) GHSA-c22w-7c9m-fvxg, MAL-2026-3521 | Malicious | Not scored | 12 May, 2026 | npm @tolka/cli |
Malicious release: Malicious code in @taskflow-corp/cli (npm) GHSA-j3c5-6pm5-jq3f, MAL-2026-3520 | Malicious | Not scored | 12 May, 2026 | npm @taskflow-corp/cli |
Malicious release: Malicious code in @tallyui/theme (npm) GHSA-h4m9-55ph-8qgv, MAL-2026-3519 | Malicious | Not scored | 12 May, 2026 | npm @tallyui/theme |
Malicious release: Malicious code in @tallyui/database (npm) GHSA-743p-x755-4v2j, MAL-2026-3518 | Malicious | Not scored | 12 May, 2026 | npm @tallyui/database |
Malicious release: Malicious code in @tallyui/connector-woocommerce (npm) GHSA-7rg9-88vq-q7jq, MAL-2026-3517 | Malicious | Not scored | 12 May, 2026 | npm @tallyui/connector-woocommerce |
Malicious release: Malicious code in @tallyui/connector-shopify (npm) GHSA-7g64-m42w-5h7v, MAL-2026-3516 | Malicious | Not scored | 12 May, 2026 | npm @tallyui/connector-shopify |
Malicious release: Malicious code in @tallyui/connector-medusa (npm) GHSA-f833-2cj4-2837, MAL-2026-3515 | Malicious | Not scored | 12 May, 2026 | npm @tallyui/connector-medusa |