Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in milla-migration (npm) GHSA-jvrr-w8mr-28hp, MAL-2026-2089 | Malicious | Not scored | 23 Mar, 2026 | npm milla-migration |
Malicious release: Malicious code in internal-linking (npm) GHSA-wp6r-9m2x-4h55, MAL-2026-2088 | Malicious | Not scored | 23 Mar, 2026 | npm internal-linking |
Malicious release: Malicious code in shakti-pwa (npm) GHSA-x6m2-63j5-v6c7, MAL-2026-2100 | Malicious | Not scored | 23 Mar, 2026 | npm shakti-pwa |
Malicious release: Malicious code in pulse-rsvp-card-entity (npm) GHSA-x8xx-3mj7-337x, MAL-2026-2093 | Malicious | Not scored | 23 Mar, 2026 | npm pulse-rsvp-card-entity |
Malicious release: Malicious code in falcor-server (npm) GHSA-xq57-xcgm-9q8q, MAL-2026-2086 | Malicious | Not scored | 23 Mar, 2026 | npm falcor-server |
Malicious release: Malicious code in sfx-event-bridge (npm) GHSA-4g9r-2x44-gfm4, MAL-2026-2099 | Malicious | Not scored | 23 Mar, 2026 | npm sfx-event-bridge |
Malicious release: Malicious code in puzzle-render-kit (npm) GHSA-4p9p-g69r-jxv8, MAL-2026-2097 | Malicious | Not scored | 23 Mar, 2026 | npm puzzle-render-kit |
Malicious release: Malicious code in puzzle-asset (npm) GHSA-7hf8-rm28-2rm8, MAL-2026-2096 | Malicious | Not scored | 23 Mar, 2026 | npm puzzle-asset |
Malicious release: Malicious code in netflixid (npm) GHSA-c93f-8832-92qw, MAL-2026-2090 | Malicious | Not scored | 23 Mar, 2026 | npm netflixid |
Malicious release: Malicious code in netflixidentity (npm) GHSA-fr84-v3mx-mr9x, MAL-2026-2091 | Malicious | Not scored | 23 Mar, 2026 | npm netflixidentity |
Malicious release: Malicious code in ty-config-provider (npm) GHSA-gv85-mrvr-pgch, MAL-2026-2103 | Malicious | Not scored | 23 Mar, 2026 | npm ty-config-provider |
Malicious release: Malicious code in ty-fragment-core (npm) GHSA-hc54-whg7-r7g2, MAL-2026-2104 | Malicious | Not scored | 23 Mar, 2026 | npm ty-fragment-core |
Malicious release: Malicious code in pulse-feature-flag (npm) GHSA-jfqc-55rq-mm3j, MAL-2026-2092 | Malicious | Not scored | 23 Mar, 2026 | npm pulse-feature-flag |
Malicious release: Malicious code in storefront-logger (npm) GHSA-jhvp-qr9c-qg9p, MAL-2026-2102 | Malicious | Not scored | 23 Mar, 2026 | npm storefront-logger |
Malicious release: Malicious code in sd-basket-highlight (npm) GHSA-m7hw-fgmf-jwhr, MAL-2026-2098 | Malicious | Not scored | 23 Mar, 2026 | npm sd-basket-highlight |
Malicious release: Malicious code in uipagain (npm) GHSA-hwc6-54mv-7qc5, MAL-2026-2085 | Malicious | Not scored | 23 Mar, 2026 | npm uipagain |
jsrsasign: Division by Zero Allows Invalid JWK Modulus to Cause Deterministic Zero Output in RSA Operations CVE-2026-4603, GHSA-464q-cqxq-xhgr | Low | 0.1% | 23 Mar, 2026 | npm jsrsasign |
jsrsasign: Negative Exponent Handling Leads to Signature Verification Bypass CVE-2026-4602, GHSA-8qwj-4jxw-m8jw | High | 0.5% | 23 Mar, 2026 | npm jsrsasign |
jsrsasign: Missing cryptographic validation during DSA signing enables private key extraction CVE-2026-4601, GHSA-w8q8-93cx-6h7r | High | 0.3% | 23 Mar, 2026 | npm jsrsasign |
jsrsasign: DSA signatures or X.509 certificates can be forged via DSA domain-parameter validation in KJUR.crypto.DSA.setPublic CVE-2026-4600, GHSA-wvqx-v3f6-w8rh | High | 0.4% | 23 Mar, 2026 | npm jsrsasign |
jsrsasign: Incomplete Comparison Allows DSA Private Key Recovery via Biased Nonce Generation CVE-2026-4599, GHSA-5jx8-q4cp-rhh6 | Critical | 0.5% | 23 Mar, 2026 | npm jsrsasign |
jsrsasign is vulnerable to DoS through Infinite Loop when processing zero or negative inputs CVE-2026-4598, GHSA-8g7p-jf3g-gxcp | High | 0.6% | 23 Mar, 2026 | npm jsrsasign |
Malicious release: Malicious code in unhandledrejection1 (npm) MAL-2026-2082 | Malicious | Not scored | 22 Mar, 2026 | npm unhandledrejection1 |
Malicious release: Malicious code in @thiagoemmanuell/unhandledrejection (npm) MAL-2026-2081 | Malicious | Not scored | 22 Mar, 2026 | npm @thiagoemmanuell/unhandledrejection |
Malicious release: Malicious code in @emilgroup/document-sdk-node (npm) GHSA-5q3v-cjxm-6cgm, MAL-2026-2075 | Malicious | Not scored | 22 Mar, 2026 | npm @emilgroup/document-sdk-node |
Malicious release: Malicious code in @emilgroup/discount-sdk (npm) GHSA-3fjh-jjvh-r58h, MAL-2026-2074 | Malicious | Not scored | 22 Mar, 2026 | npm @emilgroup/discount-sdk |
Malicious release: Malicious code in @emilgroup/task-sdk-node (npm) GHSA-r27q-f5jw-j5jp, MAL-2026-2079 | Malicious | Not scored | 22 Mar, 2026 | npm @emilgroup/task-sdk-node |
Malicious release: Malicious code in @emilgroup/document-uploader (npm) GHSA-jrpm-f5xg-3frj, MAL-2026-2076 | Malicious | Not scored | 22 Mar, 2026 | npm @emilgroup/document-uploader |
Malicious release: Malicious code in @airtm/uuid-base32 (npm) GHSA-86xp-4fvm-qm2p, MAL-2026-2073 | Malicious | Not scored | 22 Mar, 2026 | npm @airtm/uuid-base32 |
Malicious release: Malicious code in cit-playwright-tests (npm) GHSA-64p5-3wp7-v4c9, MAL-2026-2080 | Malicious | Not scored | 22 Mar, 2026 | npm cit-playwright-tests |
Malicious release: Malicious code in @emilgroup/task-sdk (npm) GHSA-f568-m9rh-p7xj, MAL-2026-2078 | Malicious | Not scored | 22 Mar, 2026 | npm @emilgroup/task-sdk |
Malicious release: Malicious code in @emilgroup/public-api-sdk-node (npm) GHSA-mvrx-3fqg-4hvh, MAL-2026-2077 | Malicious | Not scored | 22 Mar, 2026 | npm @emilgroup/public-api-sdk-node |
Malicious release: Malicious code in @emilgroup/commission-sdk-node (npm) GHSA-cmfv-mmcw-jpw3, MAL-2026-2043 | Malicious | Not scored | 22 Mar, 2026 | npm @emilgroup/commission-sdk-node |
Malicious release: Malicious code in @emilgroup/setting-sdk-node (npm) GHSA-h7pp-f3cj-j5vh, MAL-2026-2059 | Malicious | Not scored | 22 Mar, 2026 | npm @emilgroup/setting-sdk-node |
Malicious release: Malicious code in @emilgroup/changelog-sdk-node (npm) GHSA-wcrr-xhm3-j3x9, MAL-2026-2040 | Malicious | Not scored | 22 Mar, 2026 | npm @emilgroup/changelog-sdk-node |
Malicious release: Malicious code in @emilgroup/tenant-sdk (npm) GHSA-6w74-x38v-9ffj, MAL-2026-2060 | Malicious | Not scored | 22 Mar, 2026 | npm @emilgroup/tenant-sdk |
Malicious release: Malicious code in eslint-config-service-users (npm) GHSA-9h8j-g652-xrg8, MAL-2026-2069 | Malicious | Not scored | 22 Mar, 2026 | npm eslint-config-service-users |
Malicious release: Malicious code in @opengov/ppf-backend-types (npm) GHSA-4xcw-mhqm-x332, MAL-2026-2064 | Malicious | Not scored | 22 Mar, 2026 | npm @opengov/ppf-backend-types |
Malicious release: Malicious code in @emilgroup/docxtemplater-util (npm) GHSA-f9m8-w27f-mxr3, MAL-2026-2047 | Malicious | Not scored | 22 Mar, 2026 | npm @emilgroup/docxtemplater-util |
Malicious release: Malicious code in @emilgroup/gdv-sdk (npm) GHSA-8vmq-w85q-4q4j, MAL-2026-2048 | Malicious | Not scored | 22 Mar, 2026 | npm @emilgroup/gdv-sdk |
Malicious release: Malicious code in @opengov/form-utils (npm) GHSA-q4j2-j63f-5vqx, MAL-2026-2063 | Malicious | Not scored | 22 Mar, 2026 | npm @opengov/form-utils |
Malicious release: Malicious code in @emilgroup/tenant-sdk-node (npm) GHSA-gmxq-2g92-63xv, MAL-2026-2061 | Malicious | Not scored | 22 Mar, 2026 | npm @emilgroup/tenant-sdk-node |
Malicious release: Malicious code in @leafnoise/mirage (npm) GHSA-24fv-r862-wg4c, MAL-2026-2062 | Malicious | Not scored | 22 Mar, 2026 | npm @leafnoise/mirage |
Malicious release: Malicious code in @emilgroup/partner-portal-sdk (npm) GHSA-hpqp-f9r8-f725, MAL-2026-2053 | Malicious | Not scored | 22 Mar, 2026 | npm @emilgroup/partner-portal-sdk |
Malicious release: Malicious code in @emilgroup/partner-sdk-node (npm) GHSA-39vv-2g62-pp83, MAL-2026-2055 | Malicious | Not scored | 22 Mar, 2026 | npm @emilgroup/partner-sdk-node |
Malicious release: Malicious code in @emilgroup/auth-sdk-node (npm) GHSA-8328-7r2v-2fq6, MAL-2026-2037 | Malicious | Not scored | 22 Mar, 2026 | npm @emilgroup/auth-sdk-node |
Malicious release: Malicious code in jest-preset-ppf (npm) GHSA-8999-rqc4-rjrh, MAL-2026-2070 | Malicious | Not scored | 22 Mar, 2026 | npm jest-preset-ppf |
Malicious release: Malicious code in @emilgroup/account-sdk-node (npm) GHSA-2phg-9x97-9759, MAL-2026-2032 | Malicious | Not scored | 22 Mar, 2026 | npm @emilgroup/account-sdk-node |
Malicious release: Malicious code in @teale.io/eslint-config (npm) GHSA-7h5g-m989-54j2, MAL-2026-2066 | Malicious | Not scored | 22 Mar, 2026 | npm @teale.io/eslint-config |
Malicious release: Malicious code in @emilgroup/partner-portal-sdk-node (npm) GHSA-cxm8-rrjm-28jf, MAL-2026-2054 | Malicious | Not scored | 22 Mar, 2026 | npm @emilgroup/partner-portal-sdk-node |