Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @concerns/i18n (npm) GHSA-rp2m-w359-5cqp, MAL-2026-6606 | Malicious | Not scored | 29 Jun, 2026 | npm @concerns/i18n |
Malicious release: Malicious code in @deel-core/client-payroll-onboarding-types (npm) GHSA-v8wg-p2qh-9q7g, MAL-2026-6613 | Malicious | Not scored | 29 Jun, 2026 | npm @deel-core/client-payroll-onboarding-types |
Malicious release: Malicious code in @report-portal/service-ui (npm) GHSA-4gpj-m85h-j7rq, MAL-2026-6644 | Malicious | Not scored | 29 Jun, 2026 | npm @report-portal/service-ui |
Malicious release: Malicious code in @planetlabs/admin-ng (npm) GHSA-4x72-8x46-jqmw, MAL-2026-6637 | Malicious | Not scored | 29 Jun, 2026 | npm @planetlabs/admin-ng |
Malicious release: Malicious code in @tbe-ui/ides (npm) GHSA-cf57-g4p6-cqjh, MAL-2026-6651 | Malicious | Not scored | 29 Jun, 2026 | npm @tbe-ui/ides |
Malicious release: Malicious code in @react-thee/rapier (npm) GHSA-h7fx-c9v6-pg77, MAL-2026-6642 | Malicious | Not scored | 29 Jun, 2026 | npm @react-thee/rapier |
Malicious release: Malicious code in @postman-app-monolith/renderer (npm) GHSA-jv69-xjcr-5hx9, MAL-2026-6639 | Malicious | Not scored | 29 Jun, 2026 | npm @postman-app-monolith/renderer |
Malicious release: Malicious code in @postidigital-feature/oneaccount-orgadmin-front (npm) GHSA-mfvg-7g48-p7c2, MAL-2026-6638 | Malicious | Not scored | 29 Jun, 2026 | npm @postidigital-feature/oneaccount-orgadmin-front |
Malicious release: Malicious code in @contenteditor-shared/content-editor-common (npm) GHSA-3v59-3pc3-p6qm, MAL-2026-6608 | Malicious | Not scored | 29 Jun, 2026 | npm @contenteditor-shared/content-editor-common |
Malicious release: Malicious code in @ms-ows/logging (npm) GHSA-46wp-9qm3-2vv4, MAL-2026-6633 | Malicious | Not scored | 29 Jun, 2026 | npm @ms-ows/logging |
Malicious release: Malicious code in @fed-sofia/jetify (npm) GHSA-59mp-5h6w-4mpp, MAL-2026-6619 | Malicious | Not scored | 29 Jun, 2026 | npm @fed-sofia/jetify |
Malicious release: Malicious code in @img-hls/vtt.js (npm) GHSA-7752-87g2-6jgf, MAL-2026-6628 | Malicious | Not scored | 29 Jun, 2026 | npm @img-hls/vtt.js |
Malicious release: Malicious code in @orbis-lr-sdk/orbis-lr-sdk (npm) GHSA-8w2w-98mc-3qqc, MAL-2026-6635 | Malicious | Not scored | 29 Jun, 2026 | npm @orbis-lr-sdk/orbis-lr-sdk |
Malicious release: Malicious code in @hg-aka-prml/tapas-common (npm) GHSA-cmr6-9388-xg9g, MAL-2026-6626 | Malicious | Not scored | 29 Jun, 2026 | npm @hg-aka-prml/tapas-common |
Malicious release: Malicious code in @meego-progressive/cdk (npm) GHSA-f7vv-5p73-c4rr, MAL-2026-6632 | Malicious | Not scored | 29 Jun, 2026 | npm @meego-progressive/cdk |
Malicious release: Malicious code in @cxp-shared/string-utilities (npm) GHSA-fmg2-rq45-rc5r, MAL-2026-6611 | Malicious | Not scored | 29 Jun, 2026 | npm @cxp-shared/string-utilities |
Malicious release: Malicious code in @druidsoft/botframework-directlinejs (npm) GHSA-h76h-pchq-6m2g, MAL-2026-6616 | Malicious | Not scored | 29 Jun, 2026 | npm @druidsoft/botframework-directlinejs |
Malicious release: Malicious code in @ddh-libs/analytics (npm) GHSA-jh8r-h42q-3q8p, MAL-2026-6612 | Malicious | Not scored | 29 Jun, 2026 | npm @ddh-libs/analytics |
Malicious release: Malicious code in @e50/utils (npm) GHSA-w945-prph-8545, MAL-2026-6617 | Malicious | Not scored | 29 Jun, 2026 | npm @e50/utils |
Malicious release: Malicious code in @content-editor/common (npm) GHSA-wwc7-v7xr-q4pc, MAL-2026-6607 | Malicious | Not scored | 29 Jun, 2026 | npm @content-editor/common |
Malicious release: Malicious code in @sentryx-libraries/auth-interceptor (npm) GHSA-2h8m-qr63-3f64, MAL-2026-6646 | Malicious | Not scored | 29 Jun, 2026 | npm @sentryx-libraries/auth-interceptor |
Malicious release: Malicious code in @rmlibrary/formatting (npm) GHSA-4j9v-f5j4-xjvx, MAL-2026-6645 | Malicious | Not scored | 29 Jun, 2026 | npm @rmlibrary/formatting |
Malicious release: Malicious code in @partner-apps/ui (npm) GHSA-5vf9-5xgw-84rw, MAL-2026-6636 | Malicious | Not scored | 29 Jun, 2026 | npm @partner-apps/ui |
Malicious release: Malicious code in @multformats/multiaddr (npm) GHSA-92ch-4pr4-pmgj, MAL-2026-6634 | Malicious | Not scored | 29 Jun, 2026 | npm @multformats/multiaddr |
Malicious release: Malicious code in @rakuten-rewards/messaging-sdk-js (npm) GHSA-9hcr-h425-gc22, MAL-2026-6641 | Malicious | Not scored | 29 Jun, 2026 | npm @rakuten-rewards/messaging-sdk-js |
Malicious release: Malicious code in @rakuten-rewards/messaging-sdk (npm) GHSA-fjrr-hfh2-c44q, MAL-2026-6640 | Malicious | Not scored | 29 Jun, 2026 | npm @rakuten-rewards/messaging-sdk |
Malicious release: Malicious code in @live-backstage-im/communication-chat (npm) GHSA-h887-mrmh-2fjr, MAL-2026-6630 | Malicious | Not scored | 29 Jun, 2026 | npm @live-backstage-im/communication-chat |
Malicious release: Malicious code in @services-lib/application-http-client (npm) GHSA-jvx5-rh7w-w4fj, MAL-2026-6647 | Malicious | Not scored | 29 Jun, 2026 | npm @services-lib/application-http-client |
Malicious release: Malicious code in @reference-web/pmp-i18n (npm) GHSA-m6f5-jgw6-8m97, MAL-2026-6643 | Malicious | Not scored | 29 Jun, 2026 | npm @reference-web/pmp-i18n |
Malicious release: Malicious code in @gallup/pc-utils (npm) GHSA-8f5r-5xw2-f3r4, MAL-2026-6622 | Malicious | Not scored | 29 Jun, 2026 | npm @gallup/pc-utils |
Malicious release: Malicious code in @gm-rvg/root-config (npm) GHSA-9crf-2vxq-9j4r, MAL-2026-6624 | Malicious | Not scored | 29 Jun, 2026 | npm @gm-rvg/root-config |
Malicious release: Malicious code in ltididp1 (npm) GHSA-9h22-6cpc-frhc, MAL-2026-6665 | Malicious | Not scored | 29 Jun, 2026 | npm ltididp1 |
Malicious release: Malicious code in @huobi-ui/activity-components (npm) GHSA-h7hg-5749-jc66, MAL-2026-6627 | Malicious | Not scored | 29 Jun, 2026 | npm @huobi-ui/activity-components |
Malicious release: Malicious code in @finantix/webcomponents (npm) GHSA-hf7q-222g-654m, MAL-2026-6620 | Malicious | Not scored | 29 Jun, 2026 | npm @finantix/webcomponents |
Malicious release: Malicious code in alpine-csp (npm) GHSA-pxvr-mwhw-mp36, MAL-2026-6653 | Malicious | Not scored | 29 Jun, 2026 | npm alpine-csp |
Malicious release: Malicious code in @lexisnexisrisk/insider-threat-platform (npm) GHSA-q77j-rhqv-28m6, MAL-2026-6629 | Malicious | Not scored | 29 Jun, 2026 | npm @lexisnexisrisk/insider-threat-platform |
Malicious release: Malicious code in @experian-shared/services (npm) GHSA-vhf7-5xf6-3fwr, MAL-2026-6618 | Malicious | Not scored | 29 Jun, 2026 | npm @experian-shared/services |
Malicious release: Malicious code in @anna-money/anna-web-lib (npm) GHSA-f2cq-vvgf-2rrx, MAL-2026-6600 | Malicious | Not scored | 29 Jun, 2026 | npm @anna-money/anna-web-lib |
Malicious release: Malicious code in gel-bootstrap (npm) GHSA-mpx3-rr48-f744, MAL-2026-6663 | Malicious | Not scored | 29 Jun, 2026 | npm gel-bootstrap |
Malicious release: Malicious code in @sumoinc/trashpanda (npm) GHSA-278w-vxfg-j6q2, MAL-2026-6650 | Malicious | Not scored | 29 Jun, 2026 | npm @sumoinc/trashpanda |
Malicious release: Malicious code in player-core-ui (npm) GHSA-6x4r-gq74-hx6w, MAL-2026-6667 | Malicious | Not scored | 29 Jun, 2026 | npm player-core-ui |
Malicious release: Malicious code in magwien.sys (npm) GHSA-7rgq-99ww-vfgr, MAL-2026-6666 | Malicious | Not scored | 29 Jun, 2026 | npm magwien.sys |
Malicious release: Malicious code in @grappi/automations (npm) GHSA-85ph-rvjg-3hmr, MAL-2026-6625 | Malicious | Not scored | 29 Jun, 2026 | npm @grappi/automations |
Malicious release: Malicious code in cdocs-markdoc (npm) GHSA-8g7g-fgv9-26pp, MAL-2026-6660 | Malicious | Not scored | 29 Jun, 2026 | npm cdocs-markdoc |
Malicious release: Malicious code in @gartnerx/gx-npm-messenger-util (npm) GHSA-9vfc-98mc-g3p5, MAL-2026-6623 | Malicious | Not scored | 29 Jun, 2026 | npm @gartnerx/gx-npm-messenger-util |
Malicious release: Malicious code in @shopbop/api-models (npm) GHSA-g6vr-6p3c-gj3x, MAL-2026-6648 | Malicious | Not scored | 29 Jun, 2026 | npm @shopbop/api-models |
Malicious release: Malicious code in wac-atl-context (npm) GHSA-hx4g-w4gr-x32f, MAL-2026-6671 | Malicious | Not scored | 29 Jun, 2026 | npm wac-atl-context |
Malicious release: Malicious code in player-theming (npm) GHSA-j229-wx6p-5j43, MAL-2026-6668 | Malicious | Not scored | 29 Jun, 2026 | npm player-theming |
Malicious release: Malicious code in cdocs-data (npm) GHSA-p3xv-2mwp-fx36, MAL-2026-6659 | Malicious | Not scored | 29 Jun, 2026 | npm cdocs-data |
Malicious release: Malicious code in @bapiweb-ux/bapi-header (npm) GHSA-q8qh-2q32-qvc7, MAL-2026-6602 | Malicious | Not scored | 29 Jun, 2026 | npm @bapiweb-ux/bapi-header |