Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @nebula.js/sn-layout-container (npm) GHSA-cqf2-r88m-hcq2, MAL-2026-11574 | Malicious | Not scored | 04 Aug, 2026 | npm @nebula.js/sn-layout-container |
Malicious release: Malicious code in @qlik/sprout-icons (npm) GHSA-4hhj-rpx3-pw9f, MAL-2026-11807 | Malicious | Not scored | 04 Aug, 2026 | npm @qlik/sprout-icons |
Malicious release: Malicious code in http-metrics-middleware (npm) GHSA-w86p-g27r-2m6q, MAL-2026-11975 | Malicious | Not scored | 04 Aug, 2026 | npm http-metrics-middleware |
Malicious release: Malicious code in @qlik/sprout-design-docs (npm) GHSA-m3hw-7p37-3vmh, MAL-2026-11805 | Malicious | Not scored | 04 Aug, 2026 | npm @qlik/sprout-design-docs |
Malicious release: Malicious code in @qlik/prettier-config (npm) GHSA-2259-j57x-rf45, MAL-2026-11801 | Malicious | Not scored | 04 Aug, 2026 | npm @qlik/prettier-config |
Malicious release: Malicious code in @qlik/browserslist-config (npm) GHSA-x47v-2r4m-2q34, MAL-2026-11784 | Malicious | Not scored | 04 Aug, 2026 | npm @qlik/browserslist-config |
Malicious release: Malicious code in @qlik/api (npm) GHSA-qcx7-ppp7-p6r4, MAL-2026-11783 | Malicious | Not scored | 04 Aug, 2026 | npm @qlik/api |
Malicious release: Malicious code in qlik-modifiers (npm) GHSA-8q52-v99f-4q28, MAL-2026-11983 | Malicious | Not scored | 04 Aug, 2026 | npm qlik-modifiers |
Malicious release: Malicious code in @qlik/eslint-config-react (npm) GHSA-p827-gwm8-29x5, MAL-2026-11795 | Malicious | Not scored | 04 Aug, 2026 | npm @qlik/eslint-config-react |
Malicious release: Malicious code in qlik-object-conversion (npm) GHSA-4hq4-8pfx-pmvw, MAL-2026-11984 | Malicious | Not scored | 04 Aug, 2026 | npm qlik-object-conversion |
Malicious release: Malicious code in @qlik/eslint-config-base (npm) GHSA-mc8j-vx8m-ww53, MAL-2026-11794 | Malicious | Not scored | 04 Aug, 2026 | npm @qlik/eslint-config-base |
Malicious release: Malicious code in @nebula.js/sn-listbox (npm) GHSA-rfr7-p954-4m4q, MAL-2026-11576 | Malicious | Not scored | 04 Aug, 2026 | npm @nebula.js/sn-listbox |
Flowise: SSRF Protection Bypass via IPv4-Mapped IPv6 Addresses CVE-2026-69257, GHSA-c6xh-wv4j-ppv5 | High | 0.4% | 04 Aug, 2026 | npm flowise |
Malicious release: Malicious code in @qlik/carbon-core (npm) GHSA-5p47-xqh5-mx62, MAL-2026-11785 | Malicious | Not scored | 04 Aug, 2026 | npm @qlik/carbon-core |
Malicious release: Malicious code in @qlik/embed-runtime (npm) GHSA-6f9f-wgfq-wg6c, MAL-2026-11790 | Malicious | Not scored | 04 Aug, 2026 | npm @qlik/embed-runtime |
Malicious release: Malicious code in qlik-chart-modules (npm) GHSA-6pc2-3g2j-m6wg, MAL-2026-11982 | Malicious | Not scored | 04 Aug, 2026 | npm qlik-chart-modules |
Malicious release: Malicious code in @qlik/carboncopy (npm) GHSA-g8xp-phjg-2v98, MAL-2026-11786 | Malicious | Not scored | 04 Aug, 2026 | npm @qlik/carboncopy |
Malicious release: Malicious code in @nebula.js/stardust (npm) GHSA-7g8p-fjjf-5ggq, MAL-2026-11584 | Malicious | Not scored | 04 Aug, 2026 | npm @nebula.js/stardust |
Malicious release: Malicious code in example-js-project (npm) GHSA-945x-vr24-w7vr, MAL-2026-11969 | Malicious | Not scored | 04 Aug, 2026 | npm example-js-project |
Malicious release: Malicious code in @qlik/sprout-gesture (npm) GHSA-h8h2-v2pq-f2j2, MAL-2026-11806 | Malicious | Not scored | 04 Aug, 2026 | npm @qlik/sprout-gesture |
Malicious release: Malicious code in @nebula.js/cli-serve (npm) GHSA-p6mm-86xq-m5x4, MAL-2026-11568 | Malicious | Not scored | 04 Aug, 2026 | npm @nebula.js/cli-serve |
Malicious release: Malicious code in @qlik/tsconfig (npm) GHSA-49vc-6v6x-9fgh, MAL-2026-11810 | Malicious | Not scored | 04 Aug, 2026 | npm @qlik/tsconfig |
Malicious release: Malicious code in @qlik/react-native-simple-grid (npm) GHSA-8hph-v33f-8423, MAL-2026-11802 | Malicious | Not scored | 04 Aug, 2026 | npm @qlik/react-native-simple-grid |
Malicious release: Malicious code in picasso-plugin-q (npm) GHSA-mjqw-xv5j-88f4, MAL-2026-11978 | Malicious | Not scored | 04 Aug, 2026 | npm picasso-plugin-q |
Malicious release: Malicious code in @nebula.js/sn-slider (npm) GHSA-fjgq-mv76-w2cv, MAL-2026-11581 | Malicious | Not scored | 04 Aug, 2026 | npm @nebula.js/sn-slider |
Malicious release: Malicious code in @qlik/sdk (npm) GHSA-qm9r-cfpc-49xq, MAL-2026-11804 | Malicious | Not scored | 04 Aug, 2026 | npm @qlik/sdk |
Malicious release: Malicious code in @qlik/eslint-config-svelte (npm) GHSA-f6jv-v6m4-m7h4, MAL-2026-11796 | Malicious | Not scored | 04 Aug, 2026 | npm @qlik/eslint-config-svelte |
Malicious release: Malicious code in @qlik/eslint-config (npm) GHSA-v3jf-cqwx-xcj6, MAL-2026-11793 | Malicious | Not scored | 04 Aug, 2026 | npm @qlik/eslint-config |
Malicious release: Malicious code in @qlik/sprout-react-table (npm) GHSA-qqq3-92r7-8qwj, MAL-2026-11809 | Malicious | Not scored | 04 Aug, 2026 | npm @qlik/sprout-react-table |
Malicious release: Malicious code in @nebula.js/sn-shape (npm) GHSA-7gfj-r25v-v6v2, MAL-2026-11580 | Malicious | Not scored | 04 Aug, 2026 | npm @nebula.js/sn-shape |
Malicious release: Malicious code in @nebula.js/sn-org-chart (npm) GHSA-mwhj-hw75-h6r7, MAL-2026-11579 | Malicious | Not scored | 04 Aug, 2026 | npm @nebula.js/sn-org-chart |
Malicious release: Malicious code in @nebula.js/theme (npm) GHSA-4hpr-95rm-52f2, MAL-2026-11586 | Malicious | Not scored | 04 Aug, 2026 | npm @nebula.js/theme |
Malicious release: Malicious code in @qlik/oxlint-config (npm) GHSA-whjc-mw6q-4cpw, MAL-2026-11800 | Malicious | Not scored | 04 Aug, 2026 | npm @qlik/oxlint-config |
Malicious release: Malicious code in @nebula.js/sn-tabbed-container (npm) GHSA-96g8-5qg3-gwpp, MAL-2026-11582 | Malicious | Not scored | 04 Aug, 2026 | npm @nebula.js/sn-tabbed-container |
Malicious release: Malicious code in @nebula.js/cli-sense (npm) GHSA-c79x-q2hh-wxrr, MAL-2026-11567 | Malicious | Not scored | 04 Aug, 2026 | npm @nebula.js/cli-sense |
Malicious release: Malicious code in @qlik/runtime-module-loader (npm) GHSA-j38m-872j-mpmj, MAL-2026-11803 | Malicious | Not scored | 04 Aug, 2026 | npm @qlik/runtime-module-loader |
Malicious release: Malicious code in @nebula.js/snapshooter (npm) GHSA-5m9h-w3wv-wxgw, MAL-2026-11583 | Malicious | Not scored | 04 Aug, 2026 | npm @nebula.js/snapshooter |
Malicious release: Malicious code in picasso.js (npm) GHSA-6jmc-6w7f-v47v, MAL-2026-11979 | Malicious | Not scored | 04 Aug, 2026 | npm picasso.js |
Malicious release: Malicious code in @nebula.js/sn-distributionplot (npm) GHSA-7hw3-vjh3-29g6, MAL-2026-11573 | Malicious | Not scored | 04 Aug, 2026 | npm @nebula.js/sn-distributionplot |
Malicious release: Malicious code in picasso-plugin-hammer (npm) GHSA-m8fj-58gp-7cpr, MAL-2026-11977 | Malicious | Not scored | 04 Aug, 2026 | npm picasso-plugin-hammer |
Malicious release: Malicious code in @nebula.js/sn-action-button (npm) GHSA-4f3v-vg7g-x67h, MAL-2026-11571 | Malicious | Not scored | 04 Aug, 2026 | npm @nebula.js/sn-action-button |
Malicious release: Malicious code in @qlik/embed-react (npm) GHSA-82x8-wp99-8jjj, MAL-2026-11789 | Malicious | Not scored | 04 Aug, 2026 | npm @qlik/embed-react |
Malicious release: Malicious code in @nebula.js/cli (npm) GHSA-887g-ghx7-v969, MAL-2026-11565 | Malicious | Not scored | 04 Aug, 2026 | npm @nebula.js/cli |
Malicious release: Malicious code in @onereach/regular-expressions-test (npm) GHSA-56c5-f4cg-8cr2, MAL-2026-11625 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/regular-expressions-test |
Malicious release: Malicious code in @qlik/oxfmt-config (npm) GHSA-h76x-85h7-6jgw, MAL-2026-11799 | Malicious | Not scored | 04 Aug, 2026 | npm @qlik/oxfmt-config |
Malicious release: Malicious code in @nebula.js/test-utils (npm) GHSA-vfmh-xf35-6mj3, MAL-2026-11585 | Malicious | Not scored | 04 Aug, 2026 | npm @nebula.js/test-utils |
Malicious release: Malicious code in @qlik/embed-web-components (npm) GHSA-ghgg-89w3-phrx, MAL-2026-11792 | Malicious | Not scored | 04 Aug, 2026 | npm @qlik/embed-web-components |
Malicious release: Malicious code in @qlik/design-tokens (npm) GHSA-p4mv-wfgp-356c, MAL-2026-11787 | Malicious | Not scored | 04 Aug, 2026 | npm @qlik/design-tokens |
Malicious release: Malicious code in @nebula.js/locale (npm) GHSA-gf29-rwf4-2q85, MAL-2026-11569 | Malicious | Not scored | 04 Aug, 2026 | npm @nebula.js/locale |
Malicious release: Malicious code in @nebula.js/sn-map (npm) GHSA-7fff-4w7c-qpxp, MAL-2026-11577 | Malicious | Not scored | 04 Aug, 2026 | npm @nebula.js/sn-map |