Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in streak-daily-core (npm) GHSA-8vjj-vq79-pf8g, MAL-2026-12461 | Malicious | Not scored | 05 Aug, 2026 | npm streak-daily-core |
Malicious release: Malicious code in react-table-core (npm) MAL-2026-12425 | Malicious | Not scored | 05 Aug, 2026 | npm react-table-core |
Malicious release: Malicious code in sme-foundation-frame-manager (npm) GHSA-v4gj-p36r-rv6m, MAL-2026-12439 | Malicious | Not scored | 05 Aug, 2026 | npm sme-foundation-frame-manager |
Malicious release: Malicious code in dolyame-boxy-independent-bnpl-open-api (npm) GHSA-8hvr-g6xj-288x, MAL-2026-12366 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-independent-bnpl-open-api |
Malicious release: Malicious code in eventea-diag (npm) GHSA-c86h-3ch7-5r5g, MAL-2026-12373 | Malicious | Not scored | 05 Aug, 2026 | npm eventea-diag |
Malicious release: Malicious code in eth-crypto-utils (npm) MAL-2026-12372 | Malicious | Not scored | 05 Aug, 2026 | npm eth-crypto-utils |
Malicious release: Malicious code in async-mutex-hook (npm) MAL-2026-12339 | Malicious | Not scored | 05 Aug, 2026 | npm async-mutex-hook |
Malicious release: Malicious code in evo-web-base-analytics-data (npm) GHSA-qcvh-54j6-qmcr, MAL-2026-12375 | Malicious | Not scored | 05 Aug, 2026 | npm evo-web-base-analytics-data |
Malicious release: Malicious code in statist-browser-typed-client-mb.product.mclaccount (npm) GHSA-jgcr-c5v4-547r, MAL-2026-12447 | Malicious | Not scored | 05 Aug, 2026 | npm statist-browser-typed-client-mb.product.mclaccount |
Malicious release: Malicious code in afisha-storybook-default (npm) MAL-2026-12336 | Malicious | Not scored | 05 Aug, 2026 | npm afisha-storybook-default |
Malicious release: Malicious code in post-css-transfer (npm) GHSA-f5h9-q436-8chv, MAL-2026-12417 | Malicious | Not scored | 05 Aug, 2026 | npm post-css-transfer |
Malicious release: Malicious code in gekko-mev-bot (npm) MAL-2026-12387 | Malicious | Not scored | 05 Aug, 2026 | npm gekko-mev-bot |
Malicious release: Malicious code in fry-page-maker-types (npm) GHSA-h63m-5wpm-mh34, MAL-2026-12385 | Malicious | Not scored | 05 Aug, 2026 | npm fry-page-maker-types |
Malicious release: Malicious code in eventea-router (npm) GHSA-h6vh-72w4-x86w, MAL-2026-12374 | Malicious | Not scored | 05 Aug, 2026 | npm eventea-router |
Malicious release: Malicious code in statist-browser-typed-client-itsa.digitalinterview.events (npm) GHSA-396p-hc9c-5xv6, MAL-2026-12446 | Malicious | Not scored | 05 Aug, 2026 | npm statist-browser-typed-client-itsa.digitalinterview.events |
Malicious release: Malicious code in form-bnpl-dolyame-component-object (npm) MAL-2026-12384 | Malicious | Not scored | 05 Aug, 2026 | npm form-bnpl-dolyame-component-object |
Malicious release: Malicious code in @offa-uwk/offa-uwk (npm) MAL-2026-12327 | Malicious | Not scored | 05 Aug, 2026 | npm @offa-uwk/offa-uwk |
Malicious release: Malicious code in bpm-foundation-feature-flags (npm) MAL-2026-12343 | Malicious | Not scored | 05 Aug, 2026 | npm bpm-foundation-feature-flags |
Malicious release: Malicious code in test22221 (npm) MAL-2026-12478 | Malicious | Not scored | 05 Aug, 2026 | npm test22221 |
Malicious release: Malicious code in deposits-overnight (npm) GHSA-29j8-42c7-86vh, MAL-2026-12361 | Malicious | Not scored | 05 Aug, 2026 | npm deposits-overnight |
Malicious release: Malicious code in fb-hr-sites--boxified-form-meetup-subcribe (npm) GHSA-64r3-9q49-cqf2, MAL-2026-12381 | Malicious | Not scored | 05 Aug, 2026 | npm fb-hr-sites--boxified-form-meetup-subcribe |
Malicious release: Malicious code in streak-math-kit (npm) GHSA-xh5x-2q38-w88g, MAL-2026-12468 | Malicious | Not scored | 05 Aug, 2026 | npm streak-math-kit |
Malicious release: Malicious code in cardsmobile-collection (npm) GHSA-fxx6-fp3j-7pcc, MAL-2026-12346 | Malicious | Not scored | 05 Aug, 2026 | npm cardsmobile-collection |
Malicious release: Malicious code in tracker-radar-detector (npm) MAL-2026-12483 | Malicious | Not scored | 05 Aug, 2026 | npm tracker-radar-detector |
Malicious release: Malicious code in code-analyzer-mcp (npm) MAL-2026-12354 | Malicious | Not scored | 05 Aug, 2026 | npm code-analyzer-mcp |
Malicious release: Malicious code in tms-x-headers (npm) GHSA-35hv-47hh-35xx, MAL-2026-12480 | Malicious | Not scored | 05 Aug, 2026 | npm tms-x-headers |
Malicious release: Malicious code in tcb-web-images (npm) GHSA-66p5-8752-xpg8, MAL-2026-12477 | Malicious | Not scored | 05 Aug, 2026 | npm tcb-web-images |
Malicious release: Malicious code in statist-browser-typed-client-mb.reliability.android.metrics (npm) MAL-2026-12449 | Malicious | Not scored | 05 Aug, 2026 | npm statist-browser-typed-client-mb.reliability.android.metrics |
Malicious release: Malicious code in checkout-mobile-pay-button (npm) GHSA-c2h8-p68f-vf8m, MAL-2026-12352 | Malicious | Not scored | 05 Aug, 2026 | npm checkout-mobile-pay-button |
Malicious release: Malicious code in @vboxdev/common (npm) GHSA-rx4f-8493-c7j8, MAL-2026-12330 | Malicious | Not scored | 05 Aug, 2026 | npm @vboxdev/common |
Malicious release: Malicious code in pfp-forms-sme-sitebuilder (npm) GHSA-x4j8-fqq2-qv3q, MAL-2026-12415 | Malicious | Not scored | 05 Aug, 2026 | npm pfp-forms-sme-sitebuilder |
Malicious release: Malicious code in pfp-block-independent-iframe (npm) GHSA-6phh-35j9-99qj, MAL-2026-12408 | Malicious | Not scored | 05 Aug, 2026 | npm pfp-block-independent-iframe |
Malicious release: Malicious code in statist-browser-typed-client-rubliq.platform.keycloak (npm) GHSA-vw62-9qq2-wr9g, MAL-2026-12451 | Malicious | Not scored | 05 Aug, 2026 | npm statist-browser-typed-client-rubliq.platform.keycloak |
Malicious release: Malicious code in sme-crm-services-sme-crm-services-core (npm) GHSA-8v59-j55f-8vpw, MAL-2026-12438 | Malicious | Not scored | 05 Aug, 2026 | npm sme-crm-services-sme-crm-services-core |
Malicious release: Malicious code in sso-tramvai-lib-roles (npm) GHSA-pp46-jh43-q79f, MAL-2026-12442 | Malicious | Not scored | 05 Aug, 2026 | npm sso-tramvai-lib-roles |
Malicious release: Malicious code in checkout-common-tokens (npm) GHSA-89gj-h4r8-g8gm, MAL-2026-12351 | Malicious | Not scored | 05 Aug, 2026 | npm checkout-common-tokens |
Malicious release: Malicious code in taiga-ui-proprietary-navigation (npm) GHSA-hgqj-cv8v-7c3m, MAL-2026-12474 | Malicious | Not scored | 05 Aug, 2026 | npm taiga-ui-proprietary-navigation |
Malicious release: Malicious code in statist-browser-typed-client-risktech.uwfrontantifraud.events (npm) GHSA-3jfg-5m76-ppp2, MAL-2026-12450 | Malicious | Not scored | 05 Aug, 2026 | npm statist-browser-typed-client-risktech.uwfrontantifraud.events |
Malicious release: Malicious code in hubert-document-actual-insurance-rules-am (npm) GHSA-fx5q-cggv-4x5f, MAL-2026-12390 | Malicious | Not scored | 05 Aug, 2026 | npm hubert-document-actual-insurance-rules-am |
Malicious release: Malicious code in saas-f-lego-landings (npm) MAL-2026-12433 | Malicious | Not scored | 05 Aug, 2026 | npm saas-f-lego-landings |
Malicious release: Malicious code in sui-migration-audit-rules (npm) GHSA-f9p8-c2qh-w7cm, MAL-2026-12472 | Malicious | Not scored | 05 Aug, 2026 | npm sui-migration-audit-rules |
Malicious release: Malicious code in sme-scripts-shared-library-webpack-plugin (npm) GHSA-9hjr-v9x6-4g6g, MAL-2026-12441 | Malicious | Not scored | 05 Aug, 2026 | npm sme-scripts-shared-library-webpack-plugin |
Malicious release: Malicious code in travel-core-typings-reducers (npm) GHSA-f4c8-g3cf-mgc9, MAL-2026-12486 | Malicious | Not scored | 05 Aug, 2026 | npm travel-core-typings-reducers |
Malicious release: Malicious code in pfp-forms-independent-sme-glossary-anchor (npm) GHSA-fg28-xw73-5q8v, MAL-2026-12412 | Malicious | Not scored | 05 Aug, 2026 | npm pfp-forms-independent-sme-glossary-anchor |
Malicious release: Malicious code in log-min (npm) MAL-2026-12396 | Malicious | Not scored | 05 Aug, 2026 | npm log-min |
Malicious release: Malicious code in statist-browser-typed-client-mb.product.operations (npm) MAL-2026-12448 | Malicious | Not scored | 05 Aug, 2026 | npm statist-browser-typed-client-mb.product.operations |
Malicious release: Malicious code in finance-business-company-id-models (npm) GHSA-mgqh-vwhj-8hqw, MAL-2026-12382 | Malicious | Not scored | 05 Aug, 2026 | npm finance-business-company-id-models |
Malicious release: Malicious code in @nasdtickets/common (npm) GHSA-49j5-8rcw-8rh8, MAL-2026-12324 | Malicious | Not scored | 05 Aug, 2026 | npm @nasdtickets/common |
Malicious release: Malicious code in statist-statist-core (npm) GHSA-j362-x54r-m764, MAL-2026-12456 | Malicious | Not scored | 05 Aug, 2026 | npm statist-statist-core |
Malicious release: Malicious code in @hoteldev/common (npm) GHSA-62r9-p944-cjmg, MAL-2026-12318 | Malicious | Not scored | 05 Aug, 2026 | npm @hoteldev/common |