Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in getd-content-management (npm) GHSA-q9wx-x6cr-5wg7, MAL-2026-5465 | Malicious | Not scored | 09 Jun, 2026 | npm getd-content-management |
Malicious release: Malicious code in getd-web-corporativa (npm) GHSA-vvxq-5r9v-3xw6, MAL-2026-5472 | Malicious | Not scored | 09 Jun, 2026 | npm getd-web-corporativa |
Malicious release: Malicious code in @rockawayx/utils (npm) GHSA-gj9m-m6gg-c8cx, MAL-2026-5462 | Malicious | Not scored | 09 Jun, 2026 | npm @rockawayx/utils |
Malicious release: Malicious code in ipy-rev-proxy (npm) MAL-2026-5475 | Malicious | Not scored | 09 Jun, 2026 | npm ipy-rev-proxy |
Malicious release: Malicious code in db-xorma (npm) MAL-2026-5464 | Malicious | Not scored | 09 Jun, 2026 | npm db-xorma |
Malicious release: Malicious code in db-dx-connector (npm) MAL-2026-5463 | Malicious | Not scored | 09 Jun, 2026 | npm db-dx-connector |
Malicious release: Malicious code in tailwind-form (npm) GHSA-2529-w5xc-r266, MAL-2026-5487 | Malicious | Not scored | 09 Jun, 2026 | npm tailwind-form |
Malicious release: Malicious code in fhirproxy-utils (npm) GHSA-cw9q-6cmp-p38r, MAL-2026-5461 | Malicious | Not scored | 09 Jun, 2026 | npm fhirproxy-utils |
Malicious release: Malicious code in fhirproxy (npm) GHSA-g7wh-3cfq-x8m2, MAL-2026-5460 | Malicious | Not scored | 09 Jun, 2026 | npm fhirproxy |
Malicious release: Malicious code in @dktunited/anly-tracker-v2 (npm) MAL-2026-5459 | Malicious | Not scored | 09 Jun, 2026 | npm @dktunited/anly-tracker-v2 |
Malicious release: Malicious code in exodus-checkout-signer (npm) MAL-2026-5439 | Malicious | Not scored | 09 Jun, 2026 | npm exodus-checkout-signer |
Malicious release: Malicious code in grateful-checkout (npm) MAL-2026-5444 | Malicious | Not scored | 09 Jun, 2026 | npm grateful-checkout |
Malicious release: Malicious code in checkout-signer (npm) MAL-2026-5436 | Malicious | Not scored | 09 Jun, 2026 | npm checkout-signer |
Malicious release: Malicious code in exodus-wallet-core (npm) MAL-2026-5443 | Malicious | Not scored | 09 Jun, 2026 | npm exodus-wallet-core |
Malicious release: Malicious code in grateful-payments (npm) MAL-2026-5445 | Malicious | Not scored | 09 Jun, 2026 | npm grateful-payments |
Malicious release: Malicious code in exodus-solana-sdk (npm) MAL-2026-5442 | Malicious | Not scored | 09 Jun, 2026 | npm exodus-solana-sdk |
Malicious release: Malicious code in exodus-ethereum-sdk (npm) MAL-2026-5440 | Malicious | Not scored | 09 Jun, 2026 | npm exodus-ethereum-sdk |
Malicious release: Malicious code in exodus-secure-container (npm) MAL-2026-5441 | Malicious | Not scored | 09 Jun, 2026 | npm exodus-secure-container |
Malicious release: Malicious code in @nstrlabs/utils (npm) MAL-2026-5423 | Malicious | Not scored | 09 Jun, 2026 | npm @nstrlabs/utils |
Malicious release: Malicious code in @klapp-otp/routes (npm) MAL-2026-5416 | Malicious | Not scored | 09 Jun, 2026 | npm @klapp-otp/routes |
Malicious release: Malicious code in @nstrlabs/api-client (npm) MAL-2026-5418 | Malicious | Not scored | 09 Jun, 2026 | npm @nstrlabs/api-client |
Malicious release: Malicious code in @nstrlabs/ixel (npm) MAL-2026-5420 | Malicious | Not scored | 09 Jun, 2026 | npm @nstrlabs/ixel |
Malicious release: Malicious code in @nstrlabs/sdk (npm) MAL-2026-5421 | Malicious | Not scored | 09 Jun, 2026 | npm @nstrlabs/sdk |
Malicious release: Malicious code in @nstrlabs/shared-components (npm) MAL-2026-5422 | Malicious | Not scored | 09 Jun, 2026 | npm @nstrlabs/shared-components |
Malicious release: Malicious code in @nstrlabs/auth (npm) MAL-2026-5419 | Malicious | Not scored | 09 Jun, 2026 | npm @nstrlabs/auth |
Malicious release: Malicious code in @klapp-kyc/routes (npm) MAL-2026-5412 | Malicious | Not scored | 09 Jun, 2026 | npm @klapp-kyc/routes |
Malicious release: Malicious code in @payment-review/store (npm) MAL-2026-5427 | Malicious | Not scored | 09 Jun, 2026 | npm @payment-review/store |
Malicious release: Malicious code in @card-pci-data/store (npm) MAL-2026-5407 | Malicious | Not scored | 09 Jun, 2026 | npm @card-pci-data/store |
Malicious release: Malicious code in @klapp-sca/routes (npm) MAL-2026-5417 | Malicious | Not scored | 09 Jun, 2026 | npm @klapp-sca/routes |
Malicious release: Malicious code in @klapp-about/routes (npm) MAL-2026-5411 | Malicious | Not scored | 09 Jun, 2026 | npm @klapp-about/routes |
Malicious release: Malicious code in @klapp-login-platform/oidc (npm) MAL-2026-5414 | Malicious | Not scored | 09 Jun, 2026 | npm @klapp-login-platform/oidc |
Malicious release: Malicious code in @klapp-login-platform/native-sdk (npm) MAL-2026-5413 | Malicious | Not scored | 09 Jun, 2026 | npm @klapp-login-platform/native-sdk |
Malicious release: Malicious code in @klapp-login-platform/routes (npm) MAL-2026-5415 | Malicious | Not scored | 09 Jun, 2026 | npm @klapp-login-platform/routes |
Malicious release: Malicious code in morningstar-design-system (npm) MAL-2026-5449 | Malicious | Not scored | 09 Jun, 2026 | npm morningstar-design-system |
Malicious release: Malicious code in o3forms (npm) GHSA-gp6v-h28c-4fxf, MAL-2026-5450 | Malicious | Not scored | 09 Jun, 2026 | npm o3forms |
Malicious release: Malicious code in via-city-tools-m-particle (npm) GHSA-6wg4-xxqc-hw9h, MAL-2026-5456 | Malicious | Not scored | 09 Jun, 2026 | npm via-city-tools-m-particle |
Malicious release: Malicious code in ui-ng-components (npm) GHSA-2p68-7m73-m8v7, MAL-2026-5454 | Malicious | Not scored | 09 Jun, 2026 | npm ui-ng-components |
Malicious release: Malicious code in uipath-sugar-sell (npm) GHSA-xc4q-c25v-qv6v, MAL-2026-5455 | Malicious | Not scored | 09 Jun, 2026 | npm uipath-sugar-sell |
Malicious release: Malicious code in tivo-codelib-a (npm) GHSA-4f5g-pqjq-3mvw, MAL-2026-5453 | Malicious | Not scored | 09 Jun, 2026 | npm tivo-codelib-a |
Malicious release: Malicious code in @webda-features/dashboard (npm) GHSA-f9c8-v253-876h, MAL-2026-5432 | Malicious | Not scored | 09 Jun, 2026 | npm @webda-features/dashboard |
Malicious release: Malicious code in @webd-infra/query-designer-domain (npm) GHSA-7c4p-cm4f-hwp2, MAL-2026-5431 | Malicious | Not scored | 09 Jun, 2026 | npm @webd-infra/query-designer-domain |
Malicious release: Malicious code in @webda-infra/search (npm) GHSA-4rmm-f927-v58w, MAL-2026-5433 | Malicious | Not scored | 09 Jun, 2026 | npm @webda-infra/search |
Malicious release: Malicious code in privacy-sdk (npm) GHSA-wrgr-9636-hfmh, MAL-2026-5451 | Malicious | Not scored | 09 Jun, 2026 | npm privacy-sdk |
Malicious release: Malicious code in commons-ui-styles (npm) GHSA-3w2q-76fx-mcgj, MAL-2026-5437 | Malicious | Not scored | 09 Jun, 2026 | npm commons-ui-styles |
Malicious release: Malicious code in corporate-front-vue (npm) GHSA-j2pq-r63w-52j5, MAL-2026-5438 | Malicious | Not scored | 09 Jun, 2026 | npm corporate-front-vue |
Malicious release: Malicious code in mazemap (npm) GHSA-xc8q-h68h-r6r9, MAL-2026-5448 | Malicious | Not scored | 09 Jun, 2026 | npm mazemap |
Malicious release: Malicious code in localization-lib (npm) GHSA-2qhv-h564-p9rm, MAL-2026-5447 | Malicious | Not scored | 09 Jun, 2026 | npm localization-lib |
Malicious release: Malicious code in housecall-ui (npm) GHSA-h2mj-mwm8-g9qp, MAL-2026-5446 | Malicious | Not scored | 09 Jun, 2026 | npm housecall-ui |
Malicious release: Malicious code in @shell-landing/routes (npm) GHSA-9pv9-393c-q5f8, GHSA-j8mm-3hrj-6rwf, MAL-2026-5429, SNYK-JS-SHELLLANDINGROUTES-18758920 | Malicious | Not scored | 09 Jun, 2026 | npm @shell-landing/routes |
Malicious release: Malicious code in @easy-entry/outside-registration-fop-navigator (npm) GHSA-g46p-xrvj-f265, GHSA-v26v-7c7g-w7gf, MAL-2026-5409, SNYK-JS-EASYENTRYOUTSIDEREGISTRATIONFOPNAVIGATOR-18758915 | Malicious | Not scored | 09 Jun, 2026 | npm @easy-entry/outside-registration-fop-navigator |