Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in dolyame-boxy-atom-bnpl-store-button (npm) GHSA-j5r7-jm3x-rgch, MAL-2026-12364 | Malicious | Not scored | 05 Aug, 2026 | npm dolyame-boxy-atom-bnpl-store-button |
Malicious release: Malicious code in sme-rko-finance-front-shared-entity-groups-models (npm) GHSA-vfcf-g2jc-xm3x, MAL-2026-12440 | Malicious | Not scored | 05 Aug, 2026 | npm sme-rko-finance-front-shared-entity-groups-models |
Malicious release: Malicious code in travel-core-utils-object (npm) GHSA-m3rm-367q-8gf3, MAL-2026-12487 | Malicious | Not scored | 05 Aug, 2026 | npm travel-core-utils-object |
Malicious release: Malicious code in william-data-formatter-x (npm) MAL-2026-12501 | Malicious | Not scored | 05 Aug, 2026 | npm william-data-formatter-x |
Malicious release: Malicious code in streak-count-core (npm) GHSA-6qqq-g7qr-g756, MAL-2026-12460 | Malicious | Not scored | 05 Aug, 2026 | npm streak-count-core |
Malicious release: Malicious code in pfp-block-mobile-steps (npm) GHSA-627r-73p5-f9mm, MAL-2026-12410 | Malicious | Not scored | 05 Aug, 2026 | npm pfp-block-mobile-steps |
Malicious release: Malicious code in express-mongo-santi (npm) MAL-2026-12377 | Malicious | Not scored | 05 Aug, 2026 | npm express-mongo-santi |
Malicious release: Malicious code in tt-help-cli-ycl (npm) MAL-2026-12488 | Malicious | Not scored | 05 Aug, 2026 | npm tt-help-cli-ycl |
Malicious release: Malicious code in statist-browser-typed-client-sme.platform.web.teasers (npm) GHSA-wc3c-f696-mj8v, MAL-2026-12310 | Malicious | Not scored | 05 Aug, 2026 | npm statist-browser-typed-client-sme.platform.web.teasers |
Malicious release: Malicious code in statist-browser-typed-client-jumptaxi.feature.contacts (npm) MAL-2026-12309 | Malicious | Not scored | 05 Aug, 2026 | npm statist-browser-typed-client-jumptaxi.feature.contacts |
Malicious release: Malicious code in streak-calc-metrics (npm) GHSA-7m7x-hmq7-rwm9, MAL-2026-12311 | Malicious | Not scored | 05 Aug, 2026 | npm streak-calc-metrics |
Malicious release: Malicious code in time-utils-helper (npm) MAL-2026-12225 | Malicious | Not scored | 05 Aug, 2026 | npm time-utils-helper |
Malicious release: Malicious code in sme-auth-core (npm) GHSA-prp3-9g6q-wp6v, MAL-2026-12207 | Malicious | Not scored | 05 Aug, 2026 | npm sme-auth-core |
Malicious release: Malicious code in pfp-integration-mobile-heading (npm) GHSA-w5mx-8jxc-vmcw, MAL-2026-12188 | Malicious | Not scored | 05 Aug, 2026 | npm pfp-integration-mobile-heading |
Malicious release: Malicious code in arbocrate-sla-prober-arbocrate-sla-prober-core (npm) MAL-2026-12140 | Malicious | Not scored | 05 Aug, 2026 | npm arbocrate-sla-prober-arbocrate-sla-prober-core |
Malicious release: Malicious code in dateuuidv2 (npm) MAL-2026-12176 | Malicious | Not scored | 05 Aug, 2026 | npm dateuuidv2 |
Malicious release: Malicious code in geocode-quick (npm) MAL-2026-12180 | Malicious | Not scored | 05 Aug, 2026 | npm geocode-quick |
Malicious release: Malicious code in statist-browser-typed-client-ddp.mentat.ui.web (npm) GHSA-xxx7-8fxg-cfpg, MAL-2026-12209 | Malicious | Not scored | 05 Aug, 2026 | npm statist-browser-typed-client-ddp.mentat.ui.web |
Malicious release: Malicious code in time-webkit-tag (npm) GHSA-hq8m-4h47-frrh, MAL-2026-12226 | Malicious | Not scored | 05 Aug, 2026 | npm time-webkit-tag |
Malicious release: Malicious code in statist-browser-typed-client-mb.product.sme.cards (npm) GHSA-wm5f-c9r3-8wcr, MAL-2026-12213 | Malicious | Not scored | 05 Aug, 2026 | npm statist-browser-typed-client-mb.product.sme.cards |
Malicious release: Malicious code in hubert-react-query (npm) GHSA-2774-hmc5-fgrx, MAL-2026-12181 | Malicious | Not scored | 05 Aug, 2026 | npm hubert-react-query |
Malicious release: Malicious code in tailwindcss-scrollbar-hide (npm) GHSA-6r49-6vv4-wpp3, MAL-2026-12224 | Malicious | Not scored | 05 Aug, 2026 | npm tailwindcss-scrollbar-hide |
Malicious release: Malicious code in twork-data-services-aggregator-sme-task-info (npm) GHSA-9rfw-4796-p982, MAL-2026-12288 | Malicious | Not scored | 05 Aug, 2026 | npm twork-data-services-aggregator-sme-task-info |
Malicious release: Malicious code in twork-mf-e2e-nitro (npm) GHSA-3x7v-w9ww-h4vm, MAL-2026-12303 | Malicious | Not scored | 05 Aug, 2026 | npm twork-mf-e2e-nitro |
Malicious release: Malicious code in twork-mf-sandbox (npm) GHSA-p94g-www2-hw8r, MAL-2026-12304 | Malicious | Not scored | 05 Aug, 2026 | npm twork-mf-sandbox |
Malicious release: Malicious code in twork-data-services-counterfree (npm) GHSA-5g8h-2mx8-cxhm, MAL-2026-12289 | Malicious | Not scored | 05 Aug, 2026 | npm twork-data-services-counterfree |
Malicious release: Malicious code in twork-data-services-proxy-prime-api-v1-account-overdraft-info (npm) GHSA-crw8-m6mj-q6qp, MAL-2026-12299 | Malicious | Not scored | 05 Aug, 2026 | npm twork-data-services-proxy-prime-api-v1-account-overdraft-info |
Malicious release: Malicious code in twork-data-services-sme-operations-authorizations (npm) GHSA-c4f8-h585-2c73, MAL-2026-12302 | Malicious | Not scored | 05 Aug, 2026 | npm twork-data-services-sme-operations-authorizations |
Malicious release: Malicious code in twork-data-services-aggregator-company-sme-main-timeline-loader-with-customers (npm) GHSA-cj3v-xccc-76vq, MAL-2026-12287 | Malicious | Not scored | 05 Aug, 2026 | npm twork-data-services-aggregator-company-sme-main-timeline-loader-with-customers |
Malicious release: Malicious code in twork-data-services-product-design-data (npm) GHSA-hw9w-9435-w32f, MAL-2026-12296 | Malicious | Not scored | 05 Aug, 2026 | npm twork-data-services-product-design-data |
Malicious release: Malicious code in twork-data-services-ng14-aggregator-api-v2-data-view-user-b2b-create-deal-mf-config (npm) MAL-2026-12294 | Malicious | Not scored | 05 Aug, 2026 | npm twork-data-services-ng14-aggregator-api-v2-data-view-user-b2b-create-deal-mf-config |
Malicious release: Malicious code in twork-data-services-sme-agent-company-relation (npm) GHSA-xp7w-qh77-w69x, MAL-2026-12301 | Malicious | Not scored | 05 Aug, 2026 | npm twork-data-services-sme-agent-company-relation |
Malicious release: Malicious code in twork-products-taiga2-products-timeline (npm) GHSA-9qvm-6gf4-j2qh, MAL-2026-12307 | Malicious | Not scored | 05 Aug, 2026 | npm twork-products-taiga2-products-timeline |
Malicious release: Malicious code in twork-data-services-role-app (npm) GHSA-3qwr-p55r-5cjh, MAL-2026-12300 | Malicious | Not scored | 05 Aug, 2026 | npm twork-data-services-role-app |
Malicious release: Malicious code in twork-data-services-proxy-invest-symbols-list (npm) GHSA-c38m-2rcq-3x56, MAL-2026-12298 | Malicious | Not scored | 05 Aug, 2026 | npm twork-data-services-proxy-invest-symbols-list |
Malicious release: Malicious code in twork-data-services-eacq-company-service-v2-api-v1-identifiers-crm (npm) GHSA-c75f-43pv-m83v, MAL-2026-12291 | Malicious | Not scored | 05 Aug, 2026 | npm twork-data-services-eacq-company-service-v2-api-v1-identifiers-crm |
Malicious release: Malicious code in twork-products-taiga2-products-mobile (npm) MAL-2026-12306 | Malicious | Not scored | 05 Aug, 2026 | npm twork-products-taiga2-products-mobile |
Malicious release: Malicious code in twork-data-services-proxy-b2b-crm-api-v1-partners-companies-info (npm) GHSA-67m6-6gp3-fm65, MAL-2026-12297 | Malicious | Not scored | 05 Aug, 2026 | npm twork-data-services-proxy-b2b-crm-api-v1-partners-companies-info |
Malicious release: Malicious code in twork-data-services-getting-arrests (npm) GHSA-2gv9-x25v-532x, MAL-2026-12292 | Malicious | Not scored | 05 Aug, 2026 | npm twork-data-services-getting-arrests |
Malicious release: Malicious code in twork-data-services-customer-api-v2-customer-vip-status (npm) GHSA-xcx3-rr77-frhq, MAL-2026-12290 | Malicious | Not scored | 05 Aug, 2026 | npm twork-data-services-customer-api-v2-customer-vip-status |
Malicious release: Malicious code in twork-data-services-invest-box-account (npm) GHSA-7c2j-v8mh-f457, MAL-2026-12293 | Malicious | Not scored | 05 Aug, 2026 | npm twork-data-services-invest-box-account |
Malicious release: Malicious code in sme-scripts-cli (npm) GHSA-f4fh-84pr-v95c, MAL-2026-12208 | Malicious | Not scored | 05 Aug, 2026 | npm sme-scripts-cli |
Malicious release: Malicious code in statist-browser-typed-client-mb.product.analytics (npm) GHSA-2947-fxx7-8vw5, MAL-2026-12211 | Malicious | Not scored | 05 Aug, 2026 | npm statist-browser-typed-client-mb.product.analytics |
Malicious release: Malicious code in statist-browser-typed-client-mb.product.payments (npm) GHSA-f8x2-6g24-p857, MAL-2026-12212 | Malicious | Not scored | 05 Aug, 2026 | npm statist-browser-typed-client-mb.product.payments |
Malicious release: Malicious code in scandoc-scandoc-core (npm) GHSA-rv57-q2q4-h6x4, MAL-2026-12191 | Malicious | Not scored | 05 Aug, 2026 | npm scandoc-scandoc-core |
Malicious release: Malicious code in a.poltoradnev-package-c (npm) GHSA-6grf-fjh8-82c7, MAL-2026-12127 | Malicious | Not scored | 05 Aug, 2026 | npm a.poltoradnev-package-c |
Malicious release: Malicious code in a.poltoradnev-package-b (npm) MAL-2026-12126 | Malicious | Not scored | 05 Aug, 2026 | npm a.poltoradnev-package-b |
Malicious release: Malicious code in bnpl-blocks-desktop-bnpl-documents (npm) MAL-2026-12173 | Malicious | Not scored | 05 Aug, 2026 | npm bnpl-blocks-desktop-bnpl-documents |
Malicious release: Malicious code in scrollbar-hide-plugin (npm) MAL-2026-12192 | Malicious | Not scored | 05 Aug, 2026 | npm scrollbar-hide-plugin |
Malicious release: Malicious code in aasp-tent-aasp-tent-core (npm) MAL-2026-12128 | Malicious | Not scored | 05 Aug, 2026 | npm aasp-tent-aasp-tent-core |