Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @nebula.js/sn-nav-menu (npm) GHSA-252m-vjpw-497v, MAL-2026-11578 | Malicious | Not scored | 04 Aug, 2026 | npm @nebula.js/sn-nav-menu |
Malicious release: Malicious code in @nebula.js/sn-animator (npm) GHSA-4854-qcwp-jmgj, MAL-2026-11572 | Malicious | Not scored | 04 Aug, 2026 | npm @nebula.js/sn-animator |
Malicious release: Malicious code in hamus.js (npm) GHSA-rx3m-fvv8-f2j8, MAL-2026-11974 | Malicious | Not scored | 04 Aug, 2026 | npm hamus.js |
Flowise: Remote Code Execution Vulnerability in CSVAgent CVE-2026-69256, GHSA-x6vm-w76m-8j7g | Critical | 1.0% | 04 Aug, 2026 | npm flowise npm flowise-components |
Malicious release: Malicious code in @onereach/postcss-scoped-selector (npm) GHSA-63qv-h2r7-8vxg, MAL-2026-11622 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/postcss-scoped-selector |
Malicious release: Malicious code in @servicetitan/feature-spotlight (npm) GHSA-83cv-cpcx-f26v, MAL-2026-11867 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/feature-spotlight |
Malicious release: Malicious code in tslint-folder-schema (npm) GHSA-mvxf-h63j-354v, MAL-2026-11988 | Malicious | Not scored | 04 Aug, 2026 | npm tslint-folder-schema |
Malicious release: Malicious code in @servicetitan/startup-mfe-compat (npm) GHSA-9xw4-632p-2r25, MAL-2026-11925 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/startup-mfe-compat |
Malicious release: Malicious code in @servicetitan/microfront (npm) GHSA-hq6q-gw89-9h5q, MAL-2026-11901 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/microfront |
Malicious release: Malicious code in @servicetitan/examples (npm) GHSA-mgq3-c994-g4g9, MAL-2026-11866 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/examples |
Malicious release: Malicious code in folder-lint (npm) GHSA-5hrq-v9pp-95j9, MAL-2026-11972 | Malicious | Not scored | 04 Aug, 2026 | npm folder-lint |
Malicious release: Malicious code in @servicetitan/standalone-core-feature-gates (npm) GHSA-gm7c-3jq6-ch43, MAL-2026-11918 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/standalone-core-feature-gates |
Malicious release: Malicious code in @servicetitan/microfront-auth (npm) GHSA-9jmp-fw72-55mj, MAL-2026-11902 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/microfront-auth |
Malicious release: Malicious code in @servicetitan/carto-charts-rn (npm) GHSA-ww9c-35p6-2gph, MAL-2026-11834 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/carto-charts-rn |
Malicious release: Malicious code in @servicetitan/anvil2-codemods (npm) GHSA-cr8r-xmh7-jrh8, MAL-2026-11823 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/anvil2-codemods |
Malicious release: Malicious code in @servicetitan/standalone-feature-flags (npm) GHSA-jxmw-q7p2-32f8, MAL-2026-11919 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/standalone-feature-flags |
Malicious release: Malicious code in @servicetitan/grid (npm) GHSA-mv8q-p57m-xj7h, MAL-2026-11872 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/grid |
Malicious release: Malicious code in @servicetitan/unit-tests (npm) GHSA-4m35-gjjx-4jxh, MAL-2026-11947 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/unit-tests |
Malicious release: Malicious code in editable-contracts (npm) GHSA-wxxq-25jf-6998, MAL-2026-11967 | Malicious | Not scored | 04 Aug, 2026 | npm editable-contracts |
Malicious release: Malicious code in @servicetitan/titan-chatbot-api (npm) GHSA-gmqr-c5jv-7qx5, MAL-2026-11939 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/titan-chatbot-api |
Malicious release: Malicious code in @servicetitan/titan-chat-ui (npm) GHSA-27r9-7q76-rc7m, MAL-2026-11935 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/titan-chat-ui |
Flowise: CSV Agent Remote Code Execution via Pyodide Code Injection — Root Shell Verified CVE-2026-69255, GHSA-vmv7-4m6c-3cg5 | Critical | 0.6% | 04 Aug, 2026 | npm flowise npm flowise-components |
Malicious release: Malicious code in @servicetitan/anvil2-illustrations (npm) GHSA-fxj8-9mww-px5h, MAL-2026-11828 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/anvil2-illustrations |
Malicious release: Malicious code in @servicetitan/mpa-components (npm) GHSA-grpr-chjq-gh6g, MAL-2026-11907 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/mpa-components |
Malicious release: Malicious code in @servicetitan/cp-ui (npm) GHSA-5ww3-7v7h-h5h3, MAL-2026-11847 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/cp-ui |
Malicious release: Malicious code in @onereach/salesforce-miaw-client (npm) GHSA-29f9-2vff-42c7, MAL-2026-11627 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/salesforce-miaw-client |
Malicious release: Malicious code in @servicetitan/carto-react-kit (npm) GHSA-36v6-fc44-j786, MAL-2026-11835 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/carto-react-kit |
Malicious release: Malicious code in @servicetitan/intl (npm) GHSA-px4p-f5xc-8733, MAL-2026-11880 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/intl |
Malicious release: Malicious code in @servicetitan/carto-rn-kit (npm) GHSA-gwm2-c78g-9jc6, MAL-2026-11836 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/carto-rn-kit |
Malicious release: Malicious code in @servicetitan/titan-chatbot-ui (npm) GHSA-q994-jf4j-xqvv, MAL-2026-11941 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/titan-chatbot-ui |
Malicious release: Malicious code in @servicetitan/marketing-email-components (npm) GHSA-8fj6-9qm3-gxw6, MAL-2026-11891 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/marketing-email-components |
Malicious release: Malicious code in @servicetitan/skeleton (npm) GHSA-4w93-8g88-6vm8, MAL-2026-11917 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/skeleton |
Malicious release: Malicious code in @servicetitan/microfront-utils (npm) GHSA-5cxq-vprc-w6wg, MAL-2026-11904 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/microfront-utils |
Malicious release: Malicious code in @servicetitan/dte-pdf-editor (npm) GHSA-4cc8-47hq-wx22, MAL-2026-11856 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/dte-pdf-editor |
Malicious release: Malicious code in @servicetitan/anvil-icon (npm) GHSA-3q3h-xxpq-cprg, MAL-2026-11817 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/anvil-icon |
Malicious release: Malicious code in @servicetitan/titan-chatbot-ui-anvil2 (npm) GHSA-ch4h-7p29-3xmv, MAL-2026-11942 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/titan-chatbot-ui-anvil2 |
Malicious release: Malicious code in @servicetitan/titan-chat-ui-anvil2 (npm) GHSA-4vgm-vjfw-7x8q, MAL-2026-11936 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/titan-chat-ui-anvil2 |
Malicious release: Malicious code in @servicetitan/temporal-lite (npm) GHSA-76vq-x7xq-w466, MAL-2026-11931 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/temporal-lite |
Malicious release: Malicious code in @servicetitan/titan-chatbot-ui-cypress (npm) GHSA-gfh4-xx37-q6gc, MAL-2026-11943 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/titan-chatbot-ui-cypress |
Malicious release: Malicious code in @servicetitan/titan-chatbot-client (npm) GHSA-m28f-9p3h-8g8p, MAL-2026-11940 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/titan-chatbot-client |
Malicious release: Malicious code in @servicetitan/microfront-tests (npm) GHSA-rrcm-p7cw-gx96, MAL-2026-11903 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/microfront-tests |
Malicious release: Malicious code in @servicetitan/modularpayments-webfields (npm) GHSA-f4qg-cxf8-m63v, MAL-2026-11905 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/modularpayments-webfields |
Malicious release: Malicious code in @servicetitan/time-zones (npm) GHSA-qhgq-4rvh-3g6x, MAL-2026-11934 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/time-zones |
Malicious release: Malicious code in @servicetitan/cp-react-hooks (npm) GHSA-hrpq-38h8-9w6g, MAL-2026-11846 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/cp-react-hooks |
Malicious release: Malicious code in @servicetitan/admin-layout (npm) GHSA-p7mv-cxfx-xvp9, MAL-2026-11812 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/admin-layout |
Malicious release: Malicious code in @servicetitan/marketing-direct-mail-components (npm) GHSA-65v8-r573-j2fw, MAL-2026-11890 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/marketing-direct-mail-components |
Malicious release: Malicious code in @servicetitan/marketing-ui (npm) GHSA-m8vp-9mgm-6m6h, MAL-2026-11896 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/marketing-ui |
Malicious release: Malicious code in @servicetitan/cp-mfe (npm) GHSA-4778-fq2g-pv26, MAL-2026-11844 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/cp-mfe |
Malicious release: Malicious code in @servicetitan/eslint-plugin-processors-stub (npm) GHSA-c9r2-qv4w-8hm4, MAL-2026-11865 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/eslint-plugin-processors-stub |
Malicious release: Malicious code in @servicetitan/startup (npm) GHSA-hf4g-5fqx-f33r, MAL-2026-11923 | Malicious | Not scored | 04 Aug, 2026 | npm @servicetitan/startup |