Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @or-sdk/deployments (npm) GHSA-vvw6-2m8j-5g9h, MAL-2026-11688 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/deployments |
Malicious release: Malicious code in @onereach/channel-transformers (npm) GHSA-645w-c5x9-qq64, MAL-2026-11593 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/channel-transformers |
Malicious release: Malicious code in @onereach/condition-builder (npm) GHSA-2jpw-pvfm-jqw6, MAL-2026-11595 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/condition-builder |
Malicious release: Malicious code in @or-sdk/key-value-storage (npm) GHSA-q2q9-w2jp-mgpp, MAL-2026-11703 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/key-value-storage |
Malicious release: Malicious code in @or-sdk/step-templates (npm) GHSA-5pc8-fgw7-jg35, MAL-2026-11729 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/step-templates |
Malicious release: Malicious code in @or-sdk/discovery (npm) GHSA-9phw-ccvx-9q6v, MAL-2026-11689 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/discovery |
Malicious release: Malicious code in @or-sdk/tickets (npm) GHSA-5xj3-95j7-x3cv, MAL-2026-11733 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/tickets |
Malicious release: Malicious code in @onereach/regex-helper (npm) GHSA-8pfj-q685-v7rh, MAL-2026-11623 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/regex-helper |
Malicious release: Malicious code in @onereach/si-root (npm) GHSA-p6rc-xphm-fhg3, MAL-2026-11643 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/si-root |
Malicious release: Malicious code in @onereach/si-step-chooser (npm) GHSA-3qj3-xwcr-573v, MAL-2026-11645 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/si-step-chooser |
Malicious release: Malicious code in @onereach/ui-components-vue2 (npm) GHSA-3486-372j-5gwq, MAL-2026-11662 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/ui-components-vue2 |
Malicious release: Malicious code in @or-sdk/store (npm) GHSA-hrcw-453c-rqf9, MAL-2026-11730 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/store |
Malicious release: Malicious code in @or-sdk/bots (npm) GHSA-4m2j-wqqp-83w7, MAL-2026-11678 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/bots |
Malicious release: Malicious code in @or-sdk/data-hub (npm) GHSA-5668-wc23-6vw2, MAL-2026-11685 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/data-hub |
Malicious release: Malicious code in @or-sdk/pgsql (npm) GHSA-vg2p-xc66-2r72, MAL-2026-11720 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/pgsql |
Malicious release: Malicious code in @or-sdk/tags (npm) GHSA-h7p7-wrxq-gw4m, MAL-2026-11732 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/tags |
Malicious release: Malicious code in @or-sdk/files (npm) GHSA-85q9-hhmc-7qjj, MAL-2026-11692 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/files |
Malicious release: Malicious code in @onereach/expression-components (npm) GHSA-ffxr-vjf5-94p9, MAL-2026-11598 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/expression-components |
Malicious release: Malicious code in @or-sdk/api-tokens (npm) GHSA-rjvc-7296-r6wx, MAL-2026-11669 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/api-tokens |
Malicious release: Malicious code in @onereach/si-code (npm) GHSA-3cm3-6gh6-hgvj, MAL-2026-11632 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/si-code |
Malicious release: Malicious code in @or-sdk/idw (npm) GHSA-29x4-pwhm-rh6h, MAL-2026-11699 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/idw |
Malicious release: Malicious code in @onereach/ui-components-common (npm) GHSA-h7hr-x4ww-6gfm, MAL-2026-11661 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/ui-components-common |
Malicious release: Malicious code in @onereach/font-icons (npm) GHSA-93c6-x2cx-fmc8, MAL-2026-11599 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/font-icons |
Malicious release: Malicious code in @or-sdk/billing-internal (npm) GHSA-q7qr-4mxg-4vcc, MAL-2026-11676 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/billing-internal |
Malicious release: Malicious code in @or-sdk/invitations (npm) GHSA-2wfx-g2fh-rh7f, MAL-2026-11702 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/invitations |
Malicious release: Malicious code in @onereach/step-conversation (npm) GHSA-x75v-j9r9-8c5j, MAL-2026-11653 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/step-conversation |
Malicious release: Malicious code in @onereach/bandwidth-steps-voice-bxml (npm) GHSA-rc8m-6m89-26mw, MAL-2026-11588 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/bandwidth-steps-voice-bxml |
Malicious release: Malicious code in @or-sdk/auth (npm) GHSA-6242-v6q3-mq53, MAL-2026-11672 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/auth |
Malicious release: Malicious code in @or-sdk/idw-public (npm) GHSA-44r6-2vxg-mr88, MAL-2026-11700 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/idw-public |
Malicious release: Malicious code in @onereach/messengers-infobip-sdk (npm) GHSA-c6g6-wwq3-cgq3, MAL-2026-11607 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/messengers-infobip-sdk |
Malicious release: Malicious code in @or-sdk/adapters (npm) GHSA-v4pr-r83g-jq5f, MAL-2026-11667 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/adapters |
Malicious release: Malicious code in @or-sdk/flows (npm) GHSA-p7cx-8mpx-4949, MAL-2026-11695 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/flows |
Malicious release: Malicious code in @onereach/authorizer-helper (npm) GHSA-phh2-qggv-9ggr, MAL-2026-11587 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/authorizer-helper |
Malicious release: Malicious code in @or-sdk/hitl (npm) GHSA-rvcx-qqp9-jjf3, MAL-2026-11697 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/hitl |
Malicious release: Malicious code in @onereach/step-voice (npm) GHSA-qc9m-43v9-6f42, MAL-2026-11655 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/step-voice |
Malicious release: Malicious code in @or-sdk/lookup (npm) GHSA-4x86-8pw5-36vx, MAL-2026-11711 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/lookup |
Malicious release: Malicious code in @onereach/billing-dto (npm) GHSA-6m2r-w4cc-322c, MAL-2026-11589 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/billing-dto |
Malicious release: Malicious code in @or-sdk/transcripts (npm) GHSA-p4qg-69jp-5qmx, MAL-2026-11734 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/transcripts |
Malicious release: Malicious code in @onereach/si-select (npm) GHSA-mp26-cq7g-v8mj, MAL-2026-11644 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/si-select |
Malicious release: Malicious code in @or-sdk/agents (npm) GHSA-v9vm-7rq6-q764, MAL-2026-11668 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/agents |
Malicious release: Malicious code in @or-sdk/apps (npm) GHSA-9hq7-f447-rr4m, MAL-2026-11671 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/apps |
Malicious release: Malicious code in @or-sdk/web-search (npm) GHSA-gv98-h3fj-hfrj, MAL-2026-11738 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/web-search |
Malicious release: Malicious code in @or-sdk/identifiers (npm) GHSA-rx3p-hh6j-4c47, MAL-2026-11698 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/identifiers |
Malicious release: Malicious code in @or-sdk/flow-templates (npm) GHSA-9gf9-qpp6-74fx, MAL-2026-11694 | Malicious | Not scored | 04 Aug, 2026 | npm @or-sdk/flow-templates |
Malicious release: Malicious code in @onereach/ts-memoize (npm) GHSA-5xq8-fw2q-2fwv, MAL-2026-11658 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/ts-memoize |
Malicious release: Malicious code in @onereach/types-contacts-api (npm) GHSA-9c75-m5mx-c4qc, MAL-2026-11659 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/types-contacts-api |
Malicious release: Malicious code in @onereach/orest-vue-demi-vue3 (npm) GHSA-whj3-mhfj-38rh, MAL-2026-11618 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/orest-vue-demi-vue3 |
Malicious release: Malicious code in @arv-bedrock/auth-admin (npm) GHSA-2j4f-562j-3rm4, MAL-2026-11554 | Malicious | Not scored | 04 Aug, 2026 | npm @arv-bedrock/auth-admin |
Malicious release: Malicious code in @onereach/or-content-builder-renderer (npm) GHSA-7v6h-m554-4j2c, MAL-2026-11610 | Malicious | Not scored | 04 Aug, 2026 | npm @onereach/or-content-builder-renderer |
Malicious release: Malicious code in @picsart/ai-sdk (npm) GHSA-cxqq-phxq-9v9r, MAL-2026-11781 | Malicious | Not scored | 04 Aug, 2026 | npm @picsart/ai-sdk |