Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in amazon-core (npm) GHSA-wx39-p92m-6x88, MAL-2026-7110 | Malicious | Not scored | 07 Jul, 2026 | npm amazon-core |
Malicious release: Malicious code in ajgularjs (npm) GHSA-69pw-2mpg-2w54, MAL-2026-7109 | Malicious | Not scored | 07 Jul, 2026 | npm ajgularjs |
Malicious release: Malicious code in aigularjs (npm) GHSA-93g8-9523-5wv7, MAL-2026-7108 | Malicious | Not scored | 07 Jul, 2026 | npm aigularjs |
Malicious release: Malicious code in ai-devops-helper (npm) GHSA-x9q6-2g3f-4j7g, MAL-2026-7107 | Malicious | Not scored | 07 Jul, 2026 | npm ai-devops-helper |
Malicious release: Malicious code in adminui-deps (npm) GHSA-rvp4-gfhg-mvx4, MAL-2026-7106 | Malicious | Not scored | 07 Jul, 2026 | npm adminui-deps |
Malicious release: Malicious code in aangularjs (npm) GHSA-567c-g3xw-fpjg, MAL-2026-7105 | Malicious | Not scored | 07 Jul, 2026 | npm aangularjs |
Malicious release: Malicious code in @xp-utilities/web (npm) GHSA-r685-wgj5-g877, MAL-2026-7104 | Malicious | Not scored | 07 Jul, 2026 | npm @xp-utilities/web |
Malicious release: Malicious code in @xp-utilities/utilities (npm) GHSA-845x-wmwg-9jmc, MAL-2026-7103 | Malicious | Not scored | 07 Jul, 2026 | npm @xp-utilities/utilities |
Malicious release: Malicious code in @walkme-ng/shared-ui (npm) GHSA-8v42-3mqf-73hq, MAL-2026-7102 | Malicious | Not scored | 07 Jul, 2026 | npm @walkme-ng/shared-ui |
Malicious release: Malicious code in @vwfs-uix/core (npm) GHSA-hj73-cf6f-57jq, MAL-2026-7101 | Malicious | Not scored | 07 Jul, 2026 | npm @vwfs-uix/core |
Malicious release: Malicious code in @vmo-community/video-player (npm) GHSA-q2qc-h64j-5mv9, MAL-2026-7100 | Malicious | Not scored | 07 Jul, 2026 | npm @vmo-community/video-player |
Malicious release: Malicious code in @tslogger/pino-pretty-logger (npm) GHSA-hf8j-pp2g-5h6p, MAL-2026-7099 | Malicious | Not scored | 07 Jul, 2026 | npm @tslogger/pino-pretty-logger |
Malicious release: Malicious code in @trp-ii-ii-component-library/ii-components (npm) GHSA-9mvg-9fpv-qgpw, MAL-2026-7098 | Malicious | Not scored | 07 Jul, 2026 | npm @trp-ii-ii-component-library/ii-components |
Malicious release: Malicious code in @tostringtag/nsettostringtag (npm) GHSA-vjp9-j739-gh23, MAL-2026-7097 | Malicious | Not scored | 07 Jul, 2026 | npm @tostringtag/nsettostringtag |
Malicious release: Malicious code in @toprimitive/nif (npm) GHSA-vvpc-c2m2-43g3, MAL-2026-7096 | Malicious | Not scored | 07 Jul, 2026 | npm @toprimitive/nif |
Malicious release: Malicious code in @tc-core/sso-service (npm) GHSA-2hh9-mrp5-vvh3, MAL-2026-7095 | Malicious | Not scored | 07 Jul, 2026 | npm @tc-core/sso-service |
Malicious release: Malicious code in @tc-core/member-service (npm) GHSA-gph3-m2x9-25qv, MAL-2026-7094 | Malicious | Not scored | 07 Jul, 2026 | npm @tc-core/member-service |
Malicious release: Malicious code in @tc-core/auth-service (npm) GHSA-wh4g-4mf7-6fcf, MAL-2026-7093 | Malicious | Not scored | 07 Jul, 2026 | npm @tc-core/auth-service |
Malicious release: Malicious code in @spinstorm/typescript-config (npm) GHSA-2x9p-4774-4q5v, MAL-2026-7092 | Malicious | Not scored | 07 Jul, 2026 | npm @spinstorm/typescript-config |
Malicious release: Malicious code in @spinstorm/eslint-config (npm) GHSA-f93r-8gx9-vcr7, MAL-2026-7091 | Malicious | Not scored | 07 Jul, 2026 | npm @spinstorm/eslint-config |
Malicious release: Malicious code in @spinstorm/derng (npm) GHSA-jv9j-7hhp-cmhw, MAL-2026-7090 | Malicious | Not scored | 07 Jul, 2026 | npm @spinstorm/derng |
Malicious release: Malicious code in @sbb-rsu/ui-banners (npm) GHSA-gx57-mvcc-wpwq, MAL-2026-7089 | Malicious | Not scored | 07 Jul, 2026 | npm @sbb-rsu/ui-banners |
Malicious release: Malicious code in @rocket.chat_mkb/emitter (npm) GHSA-8q9h-2gr3-2rxg, MAL-2026-7088 | Malicious | Not scored | 07 Jul, 2026 | npm @rocket.chat_mkb/emitter |
Malicious release: Malicious code in @pyme-shared/auth (npm) GHSA-qppm-m4jx-jjfh, MAL-2026-7087 | Malicious | Not scored | 07 Jul, 2026 | npm @pyme-shared/auth |
Malicious release: Malicious code in @mts-pay/web-sdk (npm) GHSA-4wpw-cp28-x8q4, MAL-2026-7086 | Malicious | Not scored | 07 Jul, 2026 | npm @mts-pay/web-sdk |
Malicious release: Malicious code in @microsop/apple-mycelium-integrity-check (npm) GHSA-7825-hjw2-qc37, MAL-2026-7085 | Malicious | Not scored | 07 Jul, 2026 | npm @microsop/apple-mycelium-integrity-check |
Malicious release: Malicious code in @maximvs1538/os-npm (npm) GHSA-mcpp-gmhm-c3c8, MAL-2026-7084 | Malicious | Not scored | 07 Jul, 2026 | npm @maximvs1538/os-npm |
Malicious release: Malicious code in @magcd/pino-pretty-logger (npm) GHSA-57vh-44mw-xg93, MAL-2026-7083 | Malicious | Not scored | 07 Jul, 2026 | npm @magcd/pino-pretty-logger |
Malicious release: Malicious code in @lovenight/voice (npm) GHSA-q56q-7mgm-fwgc, MAL-2026-7082 | Malicious | Not scored | 07 Jul, 2026 | npm @lovenight/voice |
Malicious release: Malicious code in @louisvuitton/configurator-common-lib (npm) GHSA-84wq-v8hx-j942, MAL-2026-7081 | Malicious | Not scored | 07 Jul, 2026 | npm @louisvuitton/configurator-common-lib |
Malicious release: Malicious code in @keydev/pino-pretty-logger (npm) GHSA-fmhc-p7wg-5rvw, MAL-2026-7080 | Malicious | Not scored | 07 Jul, 2026 | npm @keydev/pino-pretty-logger |
Malicious release: Malicious code in @karakuri-web-fgsfgehfg/common (npm) GHSA-xccm-44f9-xrmx, MAL-2026-7079 | Malicious | Not scored | 07 Jul, 2026 | npm @karakuri-web-fgsfgehfg/common |
Malicious release: Malicious code in @jesusvizcaino2021/app-push-base (npm) GHSA-2xvg-7m8m-mf85, MAL-2026-7078 | Malicious | Not scored | 07 Jul, 2026 | npm @jesusvizcaino2021/app-push-base |
Malicious release: Malicious code in @inheritdoc/n (npm) GHSA-rrv6-cxxq-cvf3, MAL-2026-7077 | Malicious | Not scored | 07 Jul, 2026 | npm @inheritdoc/n |
Malicious release: Malicious code in @indriver-tools/whisperwind (npm) GHSA-2grf-37p7-87gv, MAL-2026-7076 | Malicious | Not scored | 07 Jul, 2026 | npm @indriver-tools/whisperwind |
Malicious release: Malicious code in @housecallpro/marketing-site (npm) GHSA-qfhp-5p78-g7f5, MAL-2026-7075 | Malicious | Not scored | 07 Jul, 2026 | npm @housecallpro/marketing-site |
Malicious release: Malicious code in @gutierre0x80/ads.components.button (npm) GHSA-hm67-m69v-pw55, MAL-2026-7074 | Malicious | Not scored | 07 Jul, 2026 | npm @gutierre0x80/ads.components.button |
Malicious release: Malicious code in @gs-select/savings-client-application (npm) GHSA-mw6h-jrvw-vpfw, MAL-2026-7073 | Malicious | Not scored | 07 Jul, 2026 | npm @gs-select/savings-client-application |
Malicious release: Malicious code in @gs-select/client-sbl-application (npm) GHSA-rffq-j765-3f77, MAL-2026-7072 | Malicious | Not scored | 07 Jul, 2026 | npm @gs-select/client-sbl-application |
Malicious release: Malicious code in @gpbw-fcop-ui-packages/theme (npm) GHSA-58hw-p2r5-7crv, MAL-2026-7071 | Malicious | Not scored | 07 Jul, 2026 | npm @gpbw-fcop-ui-packages/theme |
Malicious release: Malicious code in @frontembed/lib (npm) GHSA-frvj-4qp7-fgwq, MAL-2026-7069 | Malicious | Not scored | 07 Jul, 2026 | npm @frontembed/lib |
Malicious release: Malicious code in @frontembed/testtest (npm) GHSA-m8cv-fg4f-r863, MAL-2026-7070 | Malicious | Not scored | 07 Jul, 2026 | npm @frontembed/testtest |
Malicious release: Malicious code in @endurosat/stellar-ui (npm) GHSA-77m2-534w-f256, MAL-2026-7068 | Malicious | Not scored | 07 Jul, 2026 | npm @endurosat/stellar-ui |
Malicious release: Malicious code in @driivz/component-library (npm) GHSA-x96j-8c7c-7jpj, MAL-2026-7067 | Malicious | Not scored | 07 Jul, 2026 | npm @driivz/component-library |
Malicious release: Malicious code in @deathpoolxrs/dependency-confusion-poc (npm) GHSA-77fq-9frf-h4hc, MAL-2026-7066 | Malicious | Not scored | 07 Jul, 2026 | npm @deathpoolxrs/dependency-confusion-poc |
Malicious release: Malicious code in @datatrain/passenger (npm) GHSA-qq8c-7q86-jj9m, MAL-2026-7065 | Malicious | Not scored | 07 Jul, 2026 | npm @datatrain/passenger |
Malicious release: Malicious code in @dany47/csec-form-helpers (npm) GHSA-9r69-588f-2wpj, MAL-2026-7064 | Malicious | Not scored | 07 Jul, 2026 | npm @dany47/csec-form-helpers |
Malicious release: Malicious code in @dany47/csec-crypto-utils (npm) GHSA-fhm8-442c-qg6v, MAL-2026-7063 | Malicious | Not scored | 07 Jul, 2026 | npm @dany47/csec-crypto-utils |
Malicious release: Malicious code in @combinezone/theme (npm) GHSA-q29h-v549-5j93, MAL-2026-7062 | Malicious | Not scored | 07 Jul, 2026 | npm @combinezone/theme |
Malicious release: Malicious code in @combinezone/core (npm) GHSA-wghh-p8j2-98qc, MAL-2026-7061 | Malicious | Not scored | 07 Jul, 2026 | npm @combinezone/core |