Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in karapace-docs (npm) GHSA-mf8g-pqcc-wxfw, MAL-2026-12794 | Malicious | Not scored | 05 Aug, 2026 | npm karapace-docs |
Malicious release: Malicious code in shiftmarkets-sdk (npm) MAL-2026-12803 | Malicious | Not scored | 05 Aug, 2026 | npm shiftmarkets-sdk |
Malicious release: Malicious code in async-mutex-v3 (npm) MAL-2026-12514 | Malicious | Not scored | 05 Aug, 2026 | npm async-mutex-v3 |
Malicious release: Malicious code in poly-bbc-service (npm) MAL-2026-12799 | Malicious | Not scored | 05 Aug, 2026 | npm poly-bbc-service |
Malicious release: Malicious code in wolverinechat (npm) GHSA-9gmm-g6fq-594g, MAL-2026-12816 | Malicious | Not scored | 05 Aug, 2026 | npm wolverinechat |
Malicious release: Malicious code in @sapappgyver/appgyver-descriptors (npm) GHSA-33x7-6mwq-xg5j, MAL-2026-12507, SNYK-JS-SAPAPPGYVERAPPGYVERDESCRIPTORS-18758933 | Malicious | Not scored | 05 Aug, 2026 | npm @sapappgyver/appgyver-descriptors |
Malicious release: Malicious code in streak-grid-core (npm) GHSA-jwcj-rx9q-cxm8, MAL-2026-12807 | Malicious | Not scored | 05 Aug, 2026 | npm streak-grid-core |
Malicious release: Malicious code in twilio-functions (npm) MAL-2026-12813 | Malicious | Not scored | 05 Aug, 2026 | npm twilio-functions |
Malicious release: Malicious code in sc-font-icons (npm) MAL-2026-12800 | Malicious | Not scored | 05 Aug, 2026 | npm sc-font-icons |
Malicious release: Malicious code in store-locator-widget (npm) MAL-2026-12804 | Malicious | Not scored | 05 Aug, 2026 | npm store-locator-widget |
Malicious release: Malicious code in @shiftmarkets/shift-exchange-root (npm) MAL-2026-12509 | Malicious | Not scored | 05 Aug, 2026 | npm @shiftmarkets/shift-exchange-root |
Malicious release: Malicious code in async-mutex-lock (npm) GHSA-vwr9-j5fc-42fq, MAL-2026-12513 | Malicious | Not scored | 05 Aug, 2026 | npm async-mutex-lock |
Malicious release: Malicious code in @shiftmarkets/no-brainer-sdk (npm) MAL-2026-12508 | Malicious | Not scored | 05 Aug, 2026 | npm @shiftmarkets/no-brainer-sdk |
Malicious release: Malicious code in dbk-ui-forms (npm) GHSA-6xhg-r9f8-79h9, MAL-2026-12669 | Malicious | Not scored | 05 Aug, 2026 | npm dbk-ui-forms |
Malicious release: Malicious code in appsignal (npm) MAL-2026-12512 | Malicious | Not scored | 05 Aug, 2026 | npm appsignal |
Malicious release: Malicious code in @cy4dev/cydemo-bg-color (npm) MAL-2026-12504 | Malicious | Not scored | 05 Aug, 2026 | npm @cy4dev/cydemo-bg-color |
Malicious release: Malicious code in streak-core-bucket (npm) GHSA-mpp6-fx3r-vwff, MAL-2026-12806 | Malicious | Not scored | 05 Aug, 2026 | npm streak-core-bucket |
Malicious release: Malicious code in trailserver (npm) MAL-2026-12484 | Malicious | Not scored | 05 Aug, 2026 | npm trailserver |
Malicious release: Malicious code in voicemail (npm) MAL-2026-12496 | Malicious | Not scored | 05 Aug, 2026 | npm voicemail |
Malicious release: Malicious code in luluking (npm) MAL-2026-12397 | Malicious | Not scored | 05 Aug, 2026 | npm luluking |
Malicious release: Malicious code in alpha-helper (npm) MAL-2026-12338 | Malicious | Not scored | 05 Aug, 2026 | npm alpha-helper |
Malicious release: Malicious code in @nextco/utils (npm) MAL-2026-12325 | Malicious | Not scored | 05 Aug, 2026 | npm @nextco/utils |
Malicious release: Malicious code in streak-daykey-lib (npm) GHSA-v22h-w6r5-jwfx, MAL-2026-12465 | Malicious | Not scored | 05 Aug, 2026 | npm streak-daykey-lib |
Malicious release: Malicious code in sc-geeksquad-core (npm) MAL-2026-12435 | Malicious | Not scored | 05 Aug, 2026 | npm sc-geeksquad-core |
Malicious release: Malicious code in @cryptosrvc/shift-exchange-root (npm) MAL-2026-12316 | Malicious | Not scored | 05 Aug, 2026 | npm @cryptosrvc/shift-exchange-root |
Malicious release: Malicious code in uploader-frontend (npm) MAL-2026-12491 | Malicious | Not scored | 05 Aug, 2026 | npm uploader-frontend |
Malicious release: Malicious code in uploader-frontend-legacy (npm) MAL-2026-12492 | Malicious | Not scored | 05 Aug, 2026 | npm uploader-frontend-legacy |
Malicious release: Malicious code in croft-node (npm) MAL-2026-12358 | Malicious | Not scored | 05 Aug, 2026 | npm croft-node |
Malicious release: Malicious code in jquery.ui.tabs (npm) MAL-2026-12395 | Malicious | Not scored | 05 Aug, 2026 | npm jquery.ui.tabs |
Malicious release: Malicious code in node-cache-multithread (npm) MAL-2026-12403 | Malicious | Not scored | 05 Aug, 2026 | npm node-cache-multithread |
Malicious release: Malicious code in rollup-plugins-polyfills-rode (npm) MAL-2026-12430 | Malicious | Not scored | 05 Aug, 2026 | npm rollup-plugins-polyfills-rode |
Malicious release: Malicious code in jquery.ui.core (npm) MAL-2026-12394 | Malicious | Not scored | 05 Aug, 2026 | npm jquery.ui.core |
Malicious release: Malicious code in @kite-js-tools/core (npm) MAL-2026-12319 | Malicious | Not scored | 05 Aug, 2026 | npm @kite-js-tools/core |
Malicious release: Malicious code in ach-detail (npm) MAL-2026-12334 | Malicious | Not scored | 05 Aug, 2026 | npm ach-detail |
Malicious release: Malicious code in token-list-fetcher (npm) MAL-2026-12481 | Malicious | Not scored | 05 Aug, 2026 | npm token-list-fetcher |
Malicious release: Malicious code in express-rate-controller (npm) MAL-2026-12378 | Malicious | Not scored | 05 Aug, 2026 | npm express-rate-controller |
Malicious release: Malicious code in rollup-plugins-check (npm) MAL-2026-12429 | Malicious | Not scored | 05 Aug, 2026 | npm rollup-plugins-check |
Malicious release: Malicious code in clover-codelab-remote-pay-cloud (npm) MAL-2026-12353 | Malicious | Not scored | 05 Aug, 2026 | npm clover-codelab-remote-pay-cloud |
Malicious release: Malicious code in @mgor/fw-canary-20260725-394b024b (npm) MAL-2026-12321 | Malicious | Not scored | 05 Aug, 2026 | npm @mgor/fw-canary-20260725-394b024b |
Malicious release: Malicious code in npm-module-service (npm) MAL-2026-12404 | Malicious | Not scored | 05 Aug, 2026 | npm npm-module-service |
Malicious release: Malicious code in tool-registry-scripts (npm) GHSA-r8mg-hv3j-fc44, MAL-2026-12482 | Malicious | Not scored | 05 Aug, 2026 | npm tool-registry-scripts |
Malicious release: Malicious code in @shiftmarkets/shift-sdk-v4 (npm) MAL-2026-12329 | Malicious | Not scored | 05 Aug, 2026 | npm @shiftmarkets/shift-sdk-v4 |
Malicious release: Malicious code in pp-react-worldready-v5 (npm) MAL-2026-12419 | Malicious | Not scored | 05 Aug, 2026 | npm pp-react-worldready-v5 |
Malicious release: Malicious code in luluking3 (npm) MAL-2026-12399 | Malicious | Not scored | 05 Aug, 2026 | npm luluking3 |
Malicious release: Malicious code in electrode-ota-ui-app (npm) GHSA-mxx2-5pvc-7hc9, MAL-2026-12368 | Malicious | Not scored | 05 Aug, 2026 | npm electrode-ota-ui-app |
Malicious release: Malicious code in matlab-azure-devops-extension (npm) GHSA-9cfc-3wfm-r8p5, MAL-2026-12400 | Malicious | Not scored | 05 Aug, 2026 | npm matlab-azure-devops-extension |
Malicious release: Malicious code in luluking2 (npm) MAL-2026-12398 | Malicious | Not scored | 05 Aug, 2026 | npm luluking2 |
Malicious release: Malicious code in fastify-client-bundler (npm) MAL-2026-12379 | Malicious | Not scored | 05 Aug, 2026 | npm fastify-client-bundler |
Malicious release: Malicious code in @cryptosrvc/no-brainer-sdk (npm) MAL-2026-12315 | Malicious | Not scored | 05 Aug, 2026 | npm @cryptosrvc/no-brainer-sdk |
Malicious release: Malicious code in @cryptosrvc/shift-sdk-v4 (npm) MAL-2026-12317 | Malicious | Not scored | 05 Aug, 2026 | npm @cryptosrvc/shift-sdk-v4 |