Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in tinkoff-cache-path (npm) GHSA-phw8-h49c-9v2q, MAL-2026-12076 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-cache-path |
Malicious release: Malicious code in statist-browser-typed-client-nfs.grocery.mobile.events (npm) GHSA-82jq-m327-383g, MAL-2026-12074 | Malicious | Not scored | 05 Aug, 2026 | npm statist-browser-typed-client-nfs.grocery.mobile.events |
Malicious release: Malicious code in bigops-customer (npm) MAL-2026-12038 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-customer |
Malicious release: Malicious code in statist-browser-typed-client-hra.workplacer.events (npm) GHSA-679q-9657-vwr6, MAL-2026-12045 | Malicious | Not scored | 05 Aug, 2026 | npm statist-browser-typed-client-hra.workplacer.events |
Malicious release: Malicious code in bigops-create-manifest (npm) MAL-2026-12037 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-create-manifest |
Malicious release: Malicious code in tui-react-mobile-styles (npm) MAL-2026-12053 | Malicious | Not scored | 05 Aug, 2026 | npm tui-react-mobile-styles |
Malicious release: Malicious code in beaver-ui-form-modal (npm) MAL-2026-12034 | Malicious | Not scored | 05 Aug, 2026 | npm beaver-ui-form-modal |
Malicious release: Malicious code in statist-browser-typed-client-test.jumpwork.circuitbreaker (npm) GHSA-xwjr-gcm9-3fcv, MAL-2026-12046 | Malicious | Not scored | 05 Aug, 2026 | npm statist-browser-typed-client-test.jumpwork.circuitbreaker |
Malicious release: Malicious code in tinkoff-boxy-desktop-features-banner (npm) GHSA-rqq4-xpvf-6ch9, MAL-2026-12048 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-boxy-desktop-features-banner |
Malicious release: Malicious code in bigops-auth-utils (npm) MAL-2026-12035 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-auth-utils |
Malicious release: Malicious code in platform-ui-island (npm) GHSA-32mj-37qf-85h6, MAL-2026-12042 | Malicious | Not scored | 05 Aug, 2026 | npm platform-ui-island |
Malicious release: Malicious code in forge-extended (npm) GHSA-prw8-rx62-jhmh, MAL-2026-12040 | Malicious | Not scored | 05 Aug, 2026 | npm forge-extended |
Malicious release: Malicious code in specials-mvno-client (npm) GHSA-h383-rw87-5jgw, MAL-2026-12044 | Malicious | Not scored | 05 Aug, 2026 | npm specials-mvno-client |
Malicious release: Malicious code in tinkoff-ui-action (npm) GHSA-377x-9v5g-rvgw, MAL-2026-12051 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-ui-action |
Malicious release: Malicious code in aedes_clusters (npm) GHSA-8m4c-fp49-4pw5, MAL-2026-12033 | Malicious | Not scored | 05 Aug, 2026 | npm aedes_clusters |
Malicious release: Malicious code in tramvai-tinkoff-module-legacy-popup (npm) GHSA-x6vc-4q97-5qw4, MAL-2026-12052 | Malicious | Not scored | 05 Aug, 2026 | npm tramvai-tinkoff-module-legacy-popup |
Malicious release: Malicious code in tinkoff-component-infopanel (npm) GHSA-9hcg-pq5h-wj74, MAL-2026-12049 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-component-infopanel |
Malicious release: Malicious code in streak-day-utils (npm) MAL-2026-12047 | Malicious | Not scored | 05 Aug, 2026 | npm streak-day-utils |
Malicious release: Malicious code in data-format-helper (npm) MAL-2026-12039 | Malicious | Not scored | 05 Aug, 2026 | npm data-format-helper |
Malicious release: Malicious code in tinkoff-statist-browser-typed-client-sme.reporting.reporting (npm) GHSA-hh5q-m44v-j748, MAL-2026-12050 | Malicious | Not scored | 05 Aug, 2026 | npm tinkoff-statist-browser-typed-client-sme.reporting.reporting |
Malicious release: Malicious code in add-two-numbers-x7q9m (npm) MAL-2026-12032 | Malicious | Not scored | 05 Aug, 2026 | npm add-two-numbers-x7q9m |
Malicious release: Malicious code in bigops-chat-tmsg (npm) MAL-2026-12036 | Malicious | Not scored | 05 Aug, 2026 | npm bigops-chat-tmsg |
Malicious release: Malicious code in platform-ui-codemods (npm) GHSA-wc85-c9g8-72g6, MAL-2026-12041 | Malicious | Not scored | 05 Aug, 2026 | npm platform-ui-codemods |
Malicious release: Malicious code in @zzzgenesis00/ethers-wallet (npm) MAL-2026-12031 | Malicious | Not scored | 05 Aug, 2026 | npm @zzzgenesis00/ethers-wallet |
Malicious release: Malicious code in sextant-cli-linux-arm64 (npm) MAL-2026-12043 | Malicious | Not scored | 05 Aug, 2026 | npm sextant-cli-linux-arm64 |
Malicious release: Malicious code in @zzzgenesis00/bip39-mnemonic (npm) MAL-2026-12030 | Malicious | Not scored | 05 Aug, 2026 | npm @zzzgenesis00/bip39-mnemonic |
Malicious release: Malicious code in uibabai (npm) MAL-2026-12054 | Malicious | Not scored | 05 Aug, 2026 | npm uibabai |
Malicious release: Malicious code in sextant-cli-darwin-amd64 (npm) MAL-2026-12028 | Malicious | Not scored | 05 Aug, 2026 | npm sextant-cli-darwin-amd64 |
Malicious release: Malicious code in sextant-cli-linux-amd64 (npm) MAL-2026-12029 | Malicious | Not scored | 05 Aug, 2026 | npm sextant-cli-linux-amd64 |
Malicious release: Malicious code in streak-map-metrics (npm) MAL-2026-11999 | Malicious | Not scored | 05 Aug, 2026 | npm streak-map-metrics |
Malicious release: Malicious code in streak-metricsazb (npm) MAL-2026-12002 | Malicious | Not scored | 05 Aug, 2026 | npm streak-metricsazb |
Malicious release: Malicious code in streak-metricazbd (npm) MAL-2026-12001 | Malicious | Not scored | 05 Aug, 2026 | npm streak-metricazbd |
Malicious release: Malicious code in streak-test-mathcore (npm) MAL-2026-12003 | Malicious | Not scored | 05 Aug, 2026 | npm streak-test-mathcore |
Malicious release: Malicious code in streak-math-metrics (npm) GHSA-3ph5-6m86-7v7r, MAL-2026-12000 | Malicious | Not scored | 05 Aug, 2026 | npm streak-math-metrics |
Malicious release: Malicious code in sextant-cli-darwin-arm64 (npm) MAL-2026-11997 | Malicious | Not scored | 05 Aug, 2026 | npm sextant-cli-darwin-arm64 |
Malicious release: Malicious code in approval-guardian (npm) MAL-2026-11995 | Malicious | Not scored | 04 Aug, 2026 | npm approval-guardian |
Malicious release: Malicious code in @tuluax/errb (npm) MAL-2026-11993 | Malicious | Not scored | 04 Aug, 2026 | npm @tuluax/errb |
Malicious release: Malicious code in emulative (npm) MAL-2026-11996 | Malicious | Not scored | 04 Aug, 2026 | npm emulative |
Malicious release: Malicious code in webdev-conf (npm) MAL-2026-12005 | Malicious | Not scored | 04 Aug, 2026 | npm webdev-conf |
Malicious release: Malicious code in vitest-preview-pro (npm) GHSA-wx22-xm6j-mgqx, MAL-2026-12004 | Malicious | Not scored | 04 Aug, 2026 | npm vitest-preview-pro |
Malicious release: Malicious code in simple-date-formatter-util-7 (npm) MAL-2026-11998 | Malicious | Not scored | 04 Aug, 2026 | npm simple-date-formatter-util-7 |
Malicious release: Malicious code in @zzzgenesis00/web3-provider-engine (npm) MAL-2026-11994 | Malicious | Not scored | 04 Aug, 2026 | npm @zzzgenesis00/web3-provider-engine |
Malicious release: Malicious code in @zzzgenesis00/etherjs (npm) MAL-2026-11530 | Malicious | Not scored | 04 Aug, 2026 | npm @zzzgenesis00/etherjs |
Malicious release: Malicious code in @zzzgenesis00/crypto-config (npm) MAL-2026-11529 | Malicious | Not scored | 04 Aug, 2026 | npm @zzzgenesis00/crypto-config |
Malicious release: Malicious code in @zzzgenesis00/solana-web3 (npm) MAL-2026-11533 | Malicious | Not scored | 04 Aug, 2026 | npm @zzzgenesis00/solana-web3 |
Malicious release: Malicious code in hubert-application-get-document-preview-am (npm) GHSA-7c6g-rhc6-239f, MAL-2026-11540 | Malicious | Not scored | 04 Aug, 2026 | npm hubert-application-get-document-preview-am |
Malicious release: Malicious code in @zzzgenesis00/solana-wallet-adapter (npm) MAL-2026-11532 | Malicious | Not scored | 04 Aug, 2026 | npm @zzzgenesis00/solana-wallet-adapter |
Malicious release: Malicious code in bigops-backend (npm) MAL-2026-11535 | Malicious | Not scored | 04 Aug, 2026 | npm bigops-backend |
Malicious release: Malicious code in eacq-payform-core (npm) GHSA-gpp6-qxfg-2m7x, MAL-2026-11538 | Malicious | Not scored | 04 Aug, 2026 | npm eacq-payform-core |
Malicious release: Malicious code in twork-data-services-aggregator-api-v2-data-view-company-company-profile-mf-data-transformer (npm) GHSA-337w-cgvw-mpg3, MAL-2026-11550 | Malicious | Not scored | 04 Aug, 2026 | npm twork-data-services-aggregator-api-v2-data-view-company-company-profile-mf-data-transformer |