Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in devplatform-spa-plugin-error-boundary (npm) GHSA-2557-fmc3-p2q7, MAL-2026-12766 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-spa-plugin-error-boundary |
Malicious release: Malicious code in devplatform-spa-plugin-module-loader (npm) MAL-2026-12772 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-spa-plugin-module-loader |
Malicious release: Malicious code in devplatform-spa-plugin-notifier (npm) MAL-2026-12773 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-spa-plugin-notifier |
Malicious release: Malicious code in devplatform-spa-plugin-i18next-instance (npm) MAL-2026-12769 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-spa-plugin-i18next-instance |
Malicious release: Malicious code in devplatform-spa-plugin-query (npm) MAL-2026-12774 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-spa-plugin-query |
Malicious release: Malicious code in devplatform-spa-plugin-router (npm) GHSA-cc39-2v78-m372, MAL-2026-12777 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-spa-plugin-router |
Malicious release: Malicious code in devplatform-spa-plugin-root-sentry (npm) GHSA-j69h-cpjh-f2j3, MAL-2026-12776 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-spa-plugin-root-sentry |
Malicious release: Malicious code in devplatform-spa-plugin-s3-module-loader (npm) GHSA-gr75-3hj7-ccxp, MAL-2026-12779 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-spa-plugin-s3-module-loader |
Malicious release: Malicious code in devplatform-spa-tokens (npm) GHSA-67wj-rrpv-vxwq, MAL-2026-12785 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-spa-tokens |
Malicious release: Malicious code in devplatform-spa-route-tree (npm) MAL-2026-12783 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-spa-route-tree |
Malicious release: Malicious code in devplatform-spa-plugin-suspense (npm) GHSA-4996-xvm7-qf6q, MAL-2026-12781 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-spa-plugin-suspense |
Malicious release: Malicious code in devplatform-spa-plugin-root-devtools (npm) MAL-2026-12775 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-spa-plugin-root-devtools |
Malicious release: Malicious code in devplatform-spa-testing (npm) GHSA-w476-3rpv-vw8r, MAL-2026-12784 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-spa-testing |
Malicious release: Malicious code in devplatform-spa-plugin-thermostat (npm) MAL-2026-12782 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-spa-plugin-thermostat |
Malicious release: Malicious code in devplatform-spa-plugin-sentry (npm) MAL-2026-12780 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-spa-plugin-sentry |
Malicious release: Malicious code in devplatform-spa-plugin-s3-feature-toggle (npm) MAL-2026-12778 | Malicious | Not scored | 05 Aug, 2026 | npm devplatform-spa-plugin-s3-feature-toggle |
Malicious release: Malicious code in @kyronixai/executer (npm) MAL-2026-12505 | Malicious | Not scored | 05 Aug, 2026 | npm @kyronixai/executer |
Malicious release: Malicious code in strath (npm) MAL-2026-12805 | Malicious | Not scored | 05 Aug, 2026 | npm strath |
Malicious release: Malicious code in gs-uitk-testing-utils (npm) MAL-2026-12792 | Malicious | Not scored | 05 Aug, 2026 | npm gs-uitk-testing-utils |
Malicious release: Malicious code in gs-uitk-object-utils (npm) MAL-2026-12791 | Malicious | Not scored | 05 Aug, 2026 | npm gs-uitk-object-utils |
Malicious release: Malicious code in streak-metric-core (npm) GHSA-86ww-mvrj-xx43, MAL-2026-12808 | Malicious | Not scored | 05 Aug, 2026 | npm streak-metric-core |
Malicious release: Malicious code in ts-poly-utls (npm) MAL-2026-12811 | Malicious | Not scored | 05 Aug, 2026 | npm ts-poly-utls |
Malicious release: Malicious code in chai-as-inspired (npm) MAL-2026-12540 | Malicious | Not scored | 05 Aug, 2026 | npm chai-as-inspired |
Statamic CMS exposes two-factor recovery codes through dynamic Antlers rendering CVE-2026-71293, GHSA-jppw-r5j3-xf7x | Medium | 0.4% | 05 Aug, 2026 | Packagist statamic/cms |
Malicious release: Malicious code in polyclob-api (npm) GHSA-qc45-qw25-9w37, MAL-2026-13382 | Malicious | Not scored | 05 Aug, 2026 | npm polyclob-api |
Malicious release: Malicious code in checkout-desktop-total (npm) MAL-2026-12561 | Malicious | Not scored | 05 Aug, 2026 | npm checkout-desktop-total |
Malicious release: Malicious code in helixbox-connect (npm) MAL-2026-12793 | Malicious | Not scored | 05 Aug, 2026 | npm helixbox-connect |
Malicious release: Malicious code in multi-reqs (npm) MAL-2026-12797 | Malicious | Not scored | 05 Aug, 2026 | npm multi-reqs |
Malicious release: Malicious code in dc-renewals-layout2 (npm) MAL-2026-12671 | Malicious | Not scored | 05 Aug, 2026 | npm dc-renewals-layout2 |
Malicious release: Malicious code in shift-v4-sdk (npm) MAL-2026-12802 | Malicious | Not scored | 05 Aug, 2026 | npm shift-v4-sdk |
Malicious release: Malicious code in widget-forge (npm) MAL-2026-12815 | Malicious | Not scored | 05 Aug, 2026 | npm widget-forge |
Malicious release: Malicious code in messenger-style (npm) MAL-2026-12796 | Malicious | Not scored | 05 Aug, 2026 | npm messenger-style |
Malicious release: Malicious code in npm-groat (npm) MAL-2026-12798 | Malicious | Not scored | 05 Aug, 2026 | npm npm-groat |
Malicious release: Malicious code in glia-functions-tools (npm) GHSA-62wp-x489-6g6h, MAL-2026-12790 | Malicious | Not scored | 05 Aug, 2026 | npm glia-functions-tools |
Malicious release: Malicious code in application_base (npm) MAL-2026-12511 | Malicious | Not scored | 05 Aug, 2026 | npm application_base |
Malicious release: Malicious code in editor_application (npm) MAL-2026-12788 | Malicious | Not scored | 05 Aug, 2026 | npm editor_application |
Malicious release: Malicious code in poly-provider-api (npm) GHSA-jxxm-5453-r666, MAL-2026-13381 | Malicious | Not scored | 05 Aug, 2026 | npm poly-provider-api |
Malicious release: Malicious code in tick-forge (npm) GHSA-rjvw-v893-2f7g, MAL-2026-13385 | Malicious | Not scored | 05 Aug, 2026 | npm tick-forge |
Malicious release: Malicious code in knowledge-grader (npm) GHSA-m4g7-2mxw-5m83, MAL-2026-12795 | Malicious | Not scored | 05 Aug, 2026 | npm knowledge-grader |
Malicious release: Malicious code in the-search (npm) MAL-2026-12810 | Malicious | Not scored | 05 Aug, 2026 | npm the-search |
Malicious release: Malicious code in dynstrg-howto (npm) GHSA-p2vx-mw75-76fw, MAL-2026-12787 | Malicious | Not scored | 05 Aug, 2026 | npm dynstrg-howto |
Malicious release: Malicious code in umber-root (npm) MAL-2026-12814 | Malicious | Not scored | 05 Aug, 2026 | npm umber-root |
Malicious release: Malicious code in ts-toolkit-plus (npm) GHSA-99wx-749q-58xh, MAL-2026-12812 | Malicious | Not scored | 05 Aug, 2026 | npm ts-toolkit-plus |
Malicious release: Malicious code in sc-payment-utils (npm) MAL-2026-12801 | Malicious | Not scored | 05 Aug, 2026 | npm sc-payment-utils |
Malicious release: Malicious code in anthropic-setup (npm) GHSA-6mwf-mqp4-2f69, MAL-2026-12510 | Malicious | Not scored | 05 Aug, 2026 | npm anthropic-setup |
Malicious release: Malicious code in dust-helpers (npm) MAL-2026-12786 | Malicious | Not scored | 05 Aug, 2026 | npm dust-helpers |
Malicious release: Malicious code in crypto-checkout-api (npm) GHSA-cg47-54wp-xjp9, MAL-2026-12666 | Malicious | Not scored | 05 Aug, 2026 | npm crypto-checkout-api |
Malicious release: Malicious code in technical-challenge (npm) GHSA-x874-j4r9-66gh, MAL-2026-12809 | Malicious | Not scored | 05 Aug, 2026 | npm technical-challenge |
Malicious release: Malicious code in @latlongid/location (npm) MAL-2026-12506 | Malicious | Not scored | 05 Aug, 2026 | npm @latlongid/location |
Malicious release: Malicious code in break-after (npm) MAL-2026-12518 | Malicious | Not scored | 05 Aug, 2026 | npm break-after |