Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @walkme-ng/shared-ui (npm) GHSA-8v42-3mqf-73hq, MAL-2026-7102 | Malicious | Not scored | 07 Jul, 2026 | npm @walkme-ng/shared-ui |
Malicious release: Malicious code in @vwfs-uix/core (npm) GHSA-hj73-cf6f-57jq, MAL-2026-7101 | Malicious | Not scored | 07 Jul, 2026 | npm @vwfs-uix/core |
Malicious release: Malicious code in @vmo-community/video-player (npm) GHSA-q2qc-h64j-5mv9, MAL-2026-7100 | Malicious | Not scored | 07 Jul, 2026 | npm @vmo-community/video-player |
Malicious release: Malicious code in @tslogger/pino-pretty-logger (npm) GHSA-hf8j-pp2g-5h6p, MAL-2026-7099 | Malicious | Not scored | 07 Jul, 2026 | npm @tslogger/pino-pretty-logger |
Malicious release: Malicious code in @trp-ii-ii-component-library/ii-components (npm) GHSA-9mvg-9fpv-qgpw, MAL-2026-7098 | Malicious | Not scored | 07 Jul, 2026 | npm @trp-ii-ii-component-library/ii-components |
Malicious release: Malicious code in @tostringtag/nsettostringtag (npm) GHSA-vjp9-j739-gh23, MAL-2026-7097 | Malicious | Not scored | 07 Jul, 2026 | npm @tostringtag/nsettostringtag |
Malicious release: Malicious code in @toprimitive/nif (npm) GHSA-vvpc-c2m2-43g3, MAL-2026-7096 | Malicious | Not scored | 07 Jul, 2026 | npm @toprimitive/nif |
Malicious release: Malicious code in @tc-core/sso-service (npm) GHSA-2hh9-mrp5-vvh3, MAL-2026-7095 | Malicious | Not scored | 07 Jul, 2026 | npm @tc-core/sso-service |
Malicious release: Malicious code in @tc-core/member-service (npm) GHSA-gph3-m2x9-25qv, MAL-2026-7094 | Malicious | Not scored | 07 Jul, 2026 | npm @tc-core/member-service |
Malicious release: Malicious code in @tc-core/auth-service (npm) GHSA-wh4g-4mf7-6fcf, MAL-2026-7093 | Malicious | Not scored | 07 Jul, 2026 | npm @tc-core/auth-service |
Malicious release: Malicious code in @spinstorm/typescript-config (npm) GHSA-2x9p-4774-4q5v, MAL-2026-7092 | Malicious | Not scored | 07 Jul, 2026 | npm @spinstorm/typescript-config |
Malicious release: Malicious code in @spinstorm/eslint-config (npm) GHSA-f93r-8gx9-vcr7, MAL-2026-7091 | Malicious | Not scored | 07 Jul, 2026 | npm @spinstorm/eslint-config |
Malicious release: Malicious code in @spinstorm/derng (npm) GHSA-jv9j-7hhp-cmhw, MAL-2026-7090 | Malicious | Not scored | 07 Jul, 2026 | npm @spinstorm/derng |
Malicious release: Malicious code in @sbb-rsu/ui-banners (npm) GHSA-gx57-mvcc-wpwq, MAL-2026-7089 | Malicious | Not scored | 07 Jul, 2026 | npm @sbb-rsu/ui-banners |
Malicious release: Malicious code in @rocket.chat_mkb/emitter (npm) GHSA-8q9h-2gr3-2rxg, MAL-2026-7088 | Malicious | Not scored | 07 Jul, 2026 | npm @rocket.chat_mkb/emitter |
Malicious release: Malicious code in @pyme-shared/auth (npm) GHSA-qppm-m4jx-jjfh, MAL-2026-7087 | Malicious | Not scored | 07 Jul, 2026 | npm @pyme-shared/auth |
Malicious release: Malicious code in @mts-pay/web-sdk (npm) GHSA-4wpw-cp28-x8q4, MAL-2026-7086 | Malicious | Not scored | 07 Jul, 2026 | npm @mts-pay/web-sdk |
Malicious release: Malicious code in @microsop/apple-mycelium-integrity-check (npm) GHSA-7825-hjw2-qc37, MAL-2026-7085 | Malicious | Not scored | 07 Jul, 2026 | npm @microsop/apple-mycelium-integrity-check |
Malicious release: Malicious code in @maximvs1538/os-npm (npm) GHSA-mcpp-gmhm-c3c8, MAL-2026-7084 | Malicious | Not scored | 07 Jul, 2026 | npm @maximvs1538/os-npm |
Malicious release: Malicious code in @magcd/pino-pretty-logger (npm) GHSA-57vh-44mw-xg93, MAL-2026-7083 | Malicious | Not scored | 07 Jul, 2026 | npm @magcd/pino-pretty-logger |
Malicious release: Malicious code in @lovenight/voice (npm) GHSA-q56q-7mgm-fwgc, MAL-2026-7082 | Malicious | Not scored | 07 Jul, 2026 | npm @lovenight/voice |
Malicious release: Malicious code in @louisvuitton/configurator-common-lib (npm) GHSA-84wq-v8hx-j942, MAL-2026-7081 | Malicious | Not scored | 07 Jul, 2026 | npm @louisvuitton/configurator-common-lib |
Malicious release: Malicious code in @keydev/pino-pretty-logger (npm) GHSA-fmhc-p7wg-5rvw, MAL-2026-7080 | Malicious | Not scored | 07 Jul, 2026 | npm @keydev/pino-pretty-logger |
Malicious release: Malicious code in @karakuri-web-fgsfgehfg/common (npm) GHSA-xccm-44f9-xrmx, MAL-2026-7079 | Malicious | Not scored | 07 Jul, 2026 | npm @karakuri-web-fgsfgehfg/common |
Malicious release: Malicious code in @jesusvizcaino2021/app-push-base (npm) GHSA-2xvg-7m8m-mf85, MAL-2026-7078 | Malicious | Not scored | 07 Jul, 2026 | npm @jesusvizcaino2021/app-push-base |
Malicious release: Malicious code in @inheritdoc/n (npm) GHSA-rrv6-cxxq-cvf3, MAL-2026-7077 | Malicious | Not scored | 07 Jul, 2026 | npm @inheritdoc/n |
Malicious release: Malicious code in @indriver-tools/whisperwind (npm) GHSA-2grf-37p7-87gv, MAL-2026-7076 | Malicious | Not scored | 07 Jul, 2026 | npm @indriver-tools/whisperwind |
Malicious release: Malicious code in @housecallpro/marketing-site (npm) GHSA-qfhp-5p78-g7f5, MAL-2026-7075 | Malicious | Not scored | 07 Jul, 2026 | npm @housecallpro/marketing-site |
Malicious release: Malicious code in @gutierre0x80/ads.components.button (npm) GHSA-hm67-m69v-pw55, MAL-2026-7074 | Malicious | Not scored | 07 Jul, 2026 | npm @gutierre0x80/ads.components.button |
Malicious release: Malicious code in @gs-select/savings-client-application (npm) GHSA-mw6h-jrvw-vpfw, MAL-2026-7073 | Malicious | Not scored | 07 Jul, 2026 | npm @gs-select/savings-client-application |
Malicious release: Malicious code in @gs-select/client-sbl-application (npm) GHSA-rffq-j765-3f77, MAL-2026-7072 | Malicious | Not scored | 07 Jul, 2026 | npm @gs-select/client-sbl-application |
Malicious release: Malicious code in @gpbw-fcop-ui-packages/theme (npm) GHSA-58hw-p2r5-7crv, MAL-2026-7071 | Malicious | Not scored | 07 Jul, 2026 | npm @gpbw-fcop-ui-packages/theme |
Malicious release: Malicious code in @frontembed/lib (npm) GHSA-frvj-4qp7-fgwq, MAL-2026-7069 | Malicious | Not scored | 07 Jul, 2026 | npm @frontembed/lib |
Malicious release: Malicious code in @frontembed/testtest (npm) GHSA-m8cv-fg4f-r863, MAL-2026-7070 | Malicious | Not scored | 07 Jul, 2026 | npm @frontembed/testtest |
Malicious release: Malicious code in @endurosat/stellar-ui (npm) GHSA-77m2-534w-f256, MAL-2026-7068 | Malicious | Not scored | 07 Jul, 2026 | npm @endurosat/stellar-ui |
Malicious release: Malicious code in @driivz/component-library (npm) GHSA-x96j-8c7c-7jpj, MAL-2026-7067 | Malicious | Not scored | 07 Jul, 2026 | npm @driivz/component-library |
Malicious release: Malicious code in @deathpoolxrs/dependency-confusion-poc (npm) GHSA-77fq-9frf-h4hc, MAL-2026-7066 | Malicious | Not scored | 07 Jul, 2026 | npm @deathpoolxrs/dependency-confusion-poc |
Malicious release: Malicious code in @datatrain/passenger (npm) GHSA-qq8c-7q86-jj9m, MAL-2026-7065 | Malicious | Not scored | 07 Jul, 2026 | npm @datatrain/passenger |
Malicious release: Malicious code in @dany47/csec-form-helpers (npm) GHSA-9r69-588f-2wpj, MAL-2026-7064 | Malicious | Not scored | 07 Jul, 2026 | npm @dany47/csec-form-helpers |
Malicious release: Malicious code in @dany47/csec-crypto-utils (npm) GHSA-fhm8-442c-qg6v, MAL-2026-7063 | Malicious | Not scored | 07 Jul, 2026 | npm @dany47/csec-crypto-utils |
Malicious release: Malicious code in @combinezone/theme (npm) GHSA-q29h-v549-5j93, MAL-2026-7062 | Malicious | Not scored | 07 Jul, 2026 | npm @combinezone/theme |
Malicious release: Malicious code in @combinezone/core (npm) GHSA-wghh-p8j2-98qc, MAL-2026-7061 | Malicious | Not scored | 07 Jul, 2026 | npm @combinezone/core |
Malicious release: Malicious code in @cashback/postal-premium (npm) GHSA-xpr8-rf9j-7gfw, MAL-2026-7060 | Malicious | Not scored | 07 Jul, 2026 | npm @cashback/postal-premium |
Malicious release: Malicious code in @cashback/auth (npm) GHSA-v4cr-243g-pp8f, MAL-2026-7058 | Malicious | Not scored | 07 Jul, 2026 | npm @cashback/auth |
Malicious release: Malicious code in @cashback/how-it-works-widget (npm) GHSA-vf2c-23g7-9pxp, MAL-2026-7059 | Malicious | Not scored | 07 Jul, 2026 | npm @cashback/how-it-works-widget |
Malicious release: Malicious code in @buglab/pino-pretty-logger (npm) GHSA-fx88-m6v3-mhqh, MAL-2026-7057 | Malicious | Not scored | 07 Jul, 2026 | npm @buglab/pino-pretty-logger |
Malicious release: Malicious code in @bmg-web/bmg-styles (npm) GHSA-vwwq-6425-fmh2, MAL-2026-7056 | Malicious | Not scored | 07 Jul, 2026 | npm @bmg-web/bmg-styles |
Malicious release: Malicious code in @bmg-web/bmg-spinner (npm) GHSA-4r3m-q964-6j2x, MAL-2026-7055 | Malicious | Not scored | 07 Jul, 2026 | npm @bmg-web/bmg-spinner |
Malicious release: Malicious code in @bmg-web/bmg-snackbar (npm) GHSA-6hp9-3555-4qpc, MAL-2026-7054 | Malicious | Not scored | 07 Jul, 2026 | npm @bmg-web/bmg-snackbar |
Malicious release: Malicious code in @bmg-web/bmg-review-basket (npm) GHSA-2cj8-mq77-292c, MAL-2026-7053 | Malicious | Not scored | 07 Jul, 2026 | npm @bmg-web/bmg-review-basket |