Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in styled-system-old (npm) GHSA-3cw5-pw8h-7898, MAL-2026-314 | Malicious | Not scored | 16 Jan, 2026 | npm styled-system-old |
Malicious release: Malicious code in victim-package-a (npm) GHSA-3m8q-mh4q-7gpp, MAL-2026-318 | Malicious | Not scored | 16 Jan, 2026 | npm victim-package-a |
Malicious release: Malicious code in js-observability (npm) GHSA-3rq2-4j48-hmc8, MAL-2026-289 | Malicious | Not scored | 16 Jan, 2026 | npm js-observability |
Malicious release: Malicious code in chakra-ui-2--react (npm) GHSA-43qp-8jjq-hf74, MAL-2026-272 | Malicious | Not scored | 16 Jan, 2026 | npm chakra-ui-2--react |
Malicious release: Malicious code in lusha-micro-app-messages (npm) GHSA-4wfw-629m-j5p5, MAL-2026-293 | Malicious | Not scored | 16 Jan, 2026 | npm lusha-micro-app-messages |
Malicious release: Malicious code in tailwind-merge-v2 (npm) GHSA-53q4-wj32-3vv9, MAL-2026-315 | Malicious | Not scored | 16 Jan, 2026 | npm tailwind-merge-v2 |
Malicious release: Malicious code in textual-sorter-lib (npm) GHSA-549c-jw4c-3272, MAL-2026-317 | Malicious | Not scored | 16 Jan, 2026 | npm textual-sorter-lib |
Malicious release: Malicious code in presentation-test-utilities (npm) GHSA-69rc-rc78-5qhg, MAL-2026-300 | Malicious | Not scored | 16 Jan, 2026 | npm presentation-test-utilities |
Malicious release: Malicious code in auc-2-lib (npm) GHSA-6vm3-3pq3-vx34, MAL-2026-269 | Malicious | Not scored | 16 Jan, 2026 | npm auc-2-lib |
Malicious release: Malicious code in sd-conversation-history-module-client (npm) GHSA-755j-r4m2-g4fm, MAL-2026-307 | Malicious | Not scored | 16 Jan, 2026 | npm sd-conversation-history-module-client |
Malicious release: Malicious code in @riag-libs/pattern-library-react-hooks (npm) GHSA-758f-75gv-c4m3, MAL-2026-259 | Malicious | Not scored | 16 Jan, 2026 | npm @riag-libs/pattern-library-react-hooks |
Malicious release: Malicious code in bve-react-ui-kit (npm) GHSA-82fh-322g-wjfj, MAL-2026-271 | Malicious | Not scored | 16 Jan, 2026 | npm bve-react-ui-kit |
Malicious release: Malicious code in @wb-team/uikit-myteam-web (npm) GHSA-932x-xv7p-pq8f, MAL-2026-265 | Malicious | Not scored | 16 Jan, 2026 | npm @wb-team/uikit-myteam-web |
Malicious release: Malicious code in sd-active-conversation-module-client (npm) GHSA-9hgg-335v-r569, MAL-2026-303 | Malicious | Not scored | 16 Jan, 2026 | npm sd-active-conversation-module-client |
Malicious release: Malicious code in kc-fe-cli (npm) GHSA-9pg5-xpfq-48gp, MAL-2026-290 | Malicious | Not scored | 16 Jan, 2026 | npm kc-fe-cli |
Malicious release: Malicious code in closure-net (npm) GHSA-9vx9-5r47-4mxj, MAL-2026-276 | Malicious | Not scored | 16 Jan, 2026 | npm closure-net |
Malicious release: Malicious code in comstrap (npm) GHSA-c5gp-pw42-2hxc, MAL-2026-278 | Malicious | Not scored | 16 Jan, 2026 | npm comstrap |
Malicious release: Malicious code in dibels8-content (npm) GHSA-c5q6-g338-g5p6, MAL-2026-279 | Malicious | Not scored | 16 Jan, 2026 | npm dibels8-content |
Malicious release: Malicious code in dws-dx (npm) GHSA-c6jh-f779-fjrq, MAL-2026-280 | Malicious | Not scored | 16 Jan, 2026 | npm dws-dx |
Malicious release: Malicious code in sd-pdc-module-client (npm) GHSA-cp99-xhqp-392c, MAL-2026-309 | Malicious | Not scored | 16 Jan, 2026 | npm sd-pdc-module-client |
Malicious release: Malicious code in omnicore-ds2-sdk (npm) GHSA-cprr-hm5h-pv32, MAL-2026-297 | Malicious | Not scored | 16 Jan, 2026 | npm omnicore-ds2-sdk |
Malicious release: Malicious code in lusha-widgets (npm) GHSA-crm2-mg9w-f75g, MAL-2026-295 | Malicious | Not scored | 16 Jan, 2026 | npm lusha-widgets |
Malicious release: Malicious code in assurance-common-components (npm) GHSA-crqc-p2qh-6xjc, MAL-2026-268 | Malicious | Not scored | 16 Jan, 2026 | npm assurance-common-components |
Malicious release: Malicious code in react-sitecore-library (npm) GHSA-cw3x-6w6v-jqqv, MAL-2026-301 | Malicious | Not scored | 16 Jan, 2026 | npm react-sitecore-library |
Malicious release: Malicious code in zis-common-lib (npm) GHSA-g75m-rgx4-xf27, MAL-2026-320 | Malicious | Not scored | 16 Jan, 2026 | npm zis-common-lib |
Malicious release: Malicious code in chakra-ui-2--react-utils (npm) GHSA-g9cv-mjf4-fjx2, MAL-2026-273 | Malicious | Not scored | 16 Jan, 2026 | npm chakra-ui-2--react-utils |
Malicious release: Malicious code in @ux-foundry/palette (npm) GHSA-ggp3-wh5g-488c, MAL-2026-264 | Malicious | Not scored | 16 Jan, 2026 | npm @ux-foundry/palette |
Malicious release: Malicious code in sd-agent-toolbar-module-client (npm) GHSA-h96w-47ch-j5fc, MAL-2026-304 | Malicious | Not scored | 16 Jan, 2026 | npm sd-agent-toolbar-module-client |
Malicious release: Malicious code in sd-navbar-module-client (npm) GHSA-hmmp-rw75-p6wv, MAL-2026-308 | Malicious | Not scored | 16 Jan, 2026 | npm sd-navbar-module-client |
Malicious release: Malicious code in focus-trap-v2 (npm) GHSA-hxg2-pj6q-mxj2, MAL-2026-285 | Malicious | Not scored | 16 Jan, 2026 | npm focus-trap-v2 |
Malicious release: Malicious code in lusha-integrations-widgets (npm) GHSA-j269-jpj5-hh68, MAL-2026-292 | Malicious | Not scored | 16 Jan, 2026 | npm lusha-integrations-widgets |
Malicious release: Malicious code in lusha-ui-components (npm) GHSA-mp57-gj9q-pq4j, MAL-2026-294 | Malicious | Not scored | 16 Jan, 2026 | npm lusha-ui-components |
Malicious release: Malicious code in lead-ion (npm) GHSA-mx4p-8pwq-v4qq, MAL-2026-291 | Malicious | Not scored | 16 Jan, 2026 | npm lead-ion |
Malicious release: Malicious code in nyse-web-tools-common (npm) GHSA-mxj5-q763-23p6, MAL-2026-296 | Malicious | Not scored | 16 Jan, 2026 | npm nyse-web-tools-common |
Malicious release: Malicious code in sd-cip-module-client (npm) GHSA-q247-f4ph-6q37, MAL-2026-306 | Malicious | Not scored | 16 Jan, 2026 | npm sd-cip-module-client |
Malicious release: Malicious code in @wbgo/shared (npm) GHSA-qrfr-r945-w4v6, MAL-2026-266 | Malicious | Not scored | 16 Jan, 2026 | npm @wbgo/shared |
Malicious release: Malicious code in cognito-auth-plugin (npm) GHSA-qrj2-7j22-58mf, MAL-2026-277 | Malicious | Not scored | 16 Jan, 2026 | npm cognito-auth-plugin |
Malicious release: Malicious code in origin_response_handler (npm) GHSA-qxpp-qvj3-7mr5, MAL-2026-299 | Malicious | Not scored | 16 Jan, 2026 | npm origin_response_handler |
Malicious release: Malicious code in @spx-workforceops/shared-vue (npm) GHSA-r6hp-ff27-vmhh, MAL-2026-263 | Malicious | Not scored | 16 Jan, 2026 | npm @spx-workforceops/shared-vue |
Malicious release: Malicious code in insightvm-ui-nav-menus (npm) GHSA-r752-g5qv-pgmv, MAL-2026-288 | Malicious | Not scored | 16 Jan, 2026 | npm insightvm-ui-nav-menus |
Malicious release: Malicious code in sparkling-router (npm) GHSA-rcjf-9p8h-7q5w, MAL-2026-311 | Malicious | Not scored | 16 Jan, 2026 | npm sparkling-router |
Malicious release: Malicious code in idel2-content (npm) GHSA-rm6w-3x8c-chfx, MAL-2026-287 | Malicious | Not scored | 16 Jan, 2026 | npm idel2-content |
Malicious release: Malicious code in chakra-ui-2--theme-tools (npm) GHSA-vm8q-qcrj-mpjv, MAL-2026-275 | Malicious | Not scored | 16 Jan, 2026 | npm chakra-ui-2--theme-tools |
Malicious release: Malicious code in alf-ui-js (npm) GHSA-vrj5-p54x-m76q, MAL-2026-267 | Malicious | Not scored | 16 Jan, 2026 | npm alf-ui-js |
Malicious release: Malicious code in @spx-delivery/react (npm) GHSA-vwcv-3mcr-rq5q, MAL-2026-261 | Malicious | Not scored | 16 Jan, 2026 | npm @spx-delivery/react |
Malicious release: Malicious code in @servicepoint/vue-project (npm) GHSA-vwg7-c28p-rvrp, MAL-2026-260 | Malicious | Not scored | 16 Jan, 2026 | npm @servicepoint/vue-project |
Malicious release: Malicious code in chakra-ui-2--styled-system (npm) GHSA-w98q-q9gh-mhj2, MAL-2026-274 | Malicious | Not scored | 16 Jan, 2026 | npm chakra-ui-2--styled-system |
Malicious release: Malicious code in @spx-smartsorting/vue (npm) GHSA-wc42-f5gw-656w, MAL-2026-262 | Malicious | Not scored | 16 Jan, 2026 | npm @spx-smartsorting/vue |
Malicious release: Malicious code in forms-new-design (npm) GHSA-x7cr-x9qx-f6j4, MAL-2026-286 | Malicious | Not scored | 16 Jan, 2026 | npm forms-new-design |
Malicious release: Malicious code in vue_frontend_rpc (npm) GHSA-x89m-w75w-f74w, MAL-2026-319 | Malicious | Not scored | 16 Jan, 2026 | npm vue_frontend_rpc |