Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @uipath/ap-chat (npm) GHSA-96r2-76fx-7r8x, MAL-2026-3529 | Malicious | Not scored | 12 May, 2026 | npm @uipath/ap-chat |
Malicious release: Malicious code in @uipath/aops-policy-tool (npm) GHSA-qwfj-397c-fjm3, MAL-2026-3528 | Malicious | Not scored | 12 May, 2026 | npm @uipath/aops-policy-tool |
Malicious release: Malicious code in @uipath/agent.sdk (npm) GHSA-9hfm-w6gw-qc7c, MAL-2026-3527 | Malicious | Not scored | 12 May, 2026 | npm @uipath/agent.sdk |
Malicious release: Malicious code in @uipath/agent-tool (npm) GHSA-m2qh-7jff-73g8, MAL-2026-3526 | Malicious | Not scored | 12 May, 2026 | npm @uipath/agent-tool |
Malicious release: Malicious code in @uipath/agent-sdk (npm) GHSA-g4jv-2xqr-ffr9, MAL-2026-3525 | Malicious | Not scored | 12 May, 2026 | npm @uipath/agent-sdk |
Malicious release: Malicious code in @uipath/admin-tool (npm) GHSA-mfv5-8q6g-j242, MAL-2026-3524 | Malicious | Not scored | 12 May, 2026 | npm @uipath/admin-tool |
Malicious release: Malicious code in @uipath/access-policy-tool (npm) GHSA-8cx9-3j2f-qgqv, MAL-2026-3523 | Malicious | Not scored | 12 May, 2026 | npm @uipath/access-policy-tool |
Malicious release: Malicious code in @uipath/access-policy-sdk (npm) GHSA-3x69-xfjm-x94w, MAL-2026-3522 | Malicious | Not scored | 12 May, 2026 | npm @uipath/access-policy-sdk |
Malicious release: Malicious code in @tolka/cli (npm) GHSA-c22w-7c9m-fvxg, MAL-2026-3521 | Malicious | Not scored | 12 May, 2026 | npm @tolka/cli |
Malicious release: Malicious code in @taskflow-corp/cli (npm) GHSA-j3c5-6pm5-jq3f, MAL-2026-3520 | Malicious | Not scored | 12 May, 2026 | npm @taskflow-corp/cli |
Malicious release: Malicious code in @tallyui/theme (npm) GHSA-h4m9-55ph-8qgv, MAL-2026-3519 | Malicious | Not scored | 12 May, 2026 | npm @tallyui/theme |
Malicious release: Malicious code in @tallyui/database (npm) GHSA-743p-x755-4v2j, MAL-2026-3518 | Malicious | Not scored | 12 May, 2026 | npm @tallyui/database |
Malicious release: Malicious code in @tallyui/connector-woocommerce (npm) GHSA-7rg9-88vq-q7jq, MAL-2026-3517 | Malicious | Not scored | 12 May, 2026 | npm @tallyui/connector-woocommerce |
Malicious release: Malicious code in @tallyui/connector-shopify (npm) GHSA-7g64-m42w-5h7v, MAL-2026-3516 | Malicious | Not scored | 12 May, 2026 | npm @tallyui/connector-shopify |
Malicious release: Malicious code in @tallyui/connector-medusa (npm) GHSA-f833-2cj4-2837, MAL-2026-3515 | Malicious | Not scored | 12 May, 2026 | npm @tallyui/connector-medusa |
Malicious release: Malicious code in @tallyui/components (npm) GHSA-fc57-xv4v-8cp7, MAL-2026-3514 | Malicious | Not scored | 12 May, 2026 | npm @tallyui/components |
Malicious release: Malicious code in @supersurkhet/sdk (npm) GHSA-j2fh-hxx6-vqqr, MAL-2026-3513 | Malicious | Not scored | 12 May, 2026 | npm @supersurkhet/sdk |
Malicious release: Malicious code in @mistralai/mistralai-gcp (npm) GHSA-rccm-wwph-vgxc, MAL-2026-3512 | Malicious | Not scored | 12 May, 2026 | npm @mistralai/mistralai-gcp |
Malicious release: Malicious code in @mistralai/mistralai-azure (npm) GHSA-2rm2-c4pc-xxr9, MAL-2026-3511 | Malicious | Not scored | 12 May, 2026 | npm @mistralai/mistralai-azure |
Malicious release: Malicious code in @mesadev/rest (npm) GHSA-x77w-4f56-pcvp, MAL-2026-3510 | Malicious | Not scored | 12 May, 2026 | npm @mesadev/rest |
Malicious release: Malicious code in @supersurkhet/cli (npm) GHSA-5fx3-327x-w6m7, MAL-2026-3457 | Malicious | Not scored | 12 May, 2026 | npm @supersurkhet/cli |
Malicious release: Malicious code in @tallyui/connector-vendure (npm) GHSA-gp5v-3cpv-vqh6, MAL-2026-3458 | Malicious | Not scored | 12 May, 2026 | npm @tallyui/connector-vendure |
Malicious release: Malicious code in @tallyui/pos (npm) GHSA-9phw-7rx9-6ccq, MAL-2026-3459 | Malicious | Not scored | 12 May, 2026 | npm @tallyui/pos |
Malicious release: Malicious code in git-branch-selector (npm) GHSA-h5h4-xpf8-g55c, MAL-2026-3503 | Malicious | Not scored | 12 May, 2026 | npm git-branch-selector |
Malicious release: Malicious code in git-git-git (npm) GHSA-w8x9-9886-9m73, MAL-2026-3504 | Malicious | Not scored | 12 May, 2026 | npm git-git-git |
Malicious release: Malicious code in @opensearch-project/opensearch (npm) GHSA-298w-vvm4-ww55, MAL-2026-3434 | Malicious | Not scored | 12 May, 2026 | npm @opensearch-project/opensearch |
Malicious release: Malicious code in @tanstack/vue-start-client (npm) GHSA-p5mj-5p7c-22jr, MAL-2026-3499 | Malicious | Not scored | 12 May, 2026 | npm @tanstack/vue-start-client |
Malicious release: Malicious code in @beproduct/nestjs-auth (npm) GHSA-cqpw-mfqj-f2j7, MAL-2026-3433 | Malicious | Not scored | 12 May, 2026 | npm @beproduct/nestjs-auth |
Malicious release: Malicious code in @squawk/airway-data (npm) GHSA-qwgj-2vrg-5q3h, MAL-2026-3439 | Malicious | Not scored | 12 May, 2026 | npm @squawk/airway-data |
Malicious release: Malicious code in @squawk/navaid-data (npm) GHSA-rrwc-wg79-pr28, MAL-2026-3449 | Malicious | Not scored | 12 May, 2026 | npm @squawk/navaid-data |
Malicious release: Malicious code in @squawk/geo (npm) GHSA-vr5r-pmj9-g7m9, MAL-2026-3445 | Malicious | Not scored | 12 May, 2026 | npm @squawk/geo |
Malicious release: Malicious code in @squawk/airspace (npm) GHSA-9g47-9g93-8mx7, MAL-2026-3437 | Malicious | Not scored | 12 May, 2026 | npm @squawk/airspace |
Malicious release: Malicious code in @squawk/icao-registry (npm) GHSA-mpc4-8622-ww9c, MAL-2026-3446 | Malicious | Not scored | 12 May, 2026 | npm @squawk/icao-registry |
Malicious release: Malicious code in @squawk/types (npm) GHSA-mf83-f42r-h5hm, MAL-2026-3454 | Malicious | Not scored | 12 May, 2026 | npm @squawk/types |
Malicious release: Malicious code in ts-dna (npm) GHSA-w2mh-w7hh-f235, MAL-2026-3505 | Malicious | Not scored | 12 May, 2026 | npm ts-dna |
Malicious release: Malicious code in @squawk/airports (npm) GHSA-r594-chgw-g4p9, MAL-2026-3436 | Malicious | Not scored | 12 May, 2026 | npm @squawk/airports |
Malicious release: Malicious code in @squawk/airways (npm) GHSA-3c23-5qp4-r5mv, MAL-2026-3440 | Malicious | Not scored | 12 May, 2026 | npm @squawk/airways |
Malicious release: Malicious code in @squawk/notams (npm) GHSA-4qm3-vxjm-3wfp, MAL-2026-3451 | Malicious | Not scored | 12 May, 2026 | npm @squawk/notams |
Malicious release: Malicious code in @squawk/procedures (npm) GHSA-gv3v-f444-2w4h, MAL-2026-3453 | Malicious | Not scored | 12 May, 2026 | npm @squawk/procedures |
Malicious release: Malicious code in @squawk/navaids (npm) GHSA-635g-g6vm-h5m3, MAL-2026-3450 | Malicious | Not scored | 12 May, 2026 | npm @squawk/navaids |
Malicious release: Malicious code in @tanstack/router-vite-plugin (npm) GHSA-p6hw-732x-2qw7, MAL-2026-3480 | Malicious | Not scored | 12 May, 2026 | npm @tanstack/router-vite-plugin |
Malicious release: Malicious code in @squawk/procedure-data (npm) GHSA-fjg7-hqrf-v48w, MAL-2026-3452 | Malicious | Not scored | 12 May, 2026 | npm @squawk/procedure-data |
Malicious release: Malicious code in @tanstack/solid-start-client (npm) GHSA-jh9w-85vm-vgm4, MAL-2026-3485 | Malicious | Not scored | 12 May, 2026 | npm @tanstack/solid-start-client |
Malicious release: Malicious code in @tanstack/solid-router-ssr-query (npm) GHSA-qjr3-33qv-w5rq, MAL-2026-3483 | Malicious | Not scored | 12 May, 2026 | npm @tanstack/solid-router-ssr-query |
Malicious release: Malicious code in @tanstack/solid-router (npm) GHSA-34qr-xpfg-5g3g, MAL-2026-3481 | Malicious | Not scored | 12 May, 2026 | npm @tanstack/solid-router |
Malicious release: Malicious code in @tanstack/solid-router-devtools (npm) GHSA-gvq3-5frr-qqmp, MAL-2026-3482 | Malicious | Not scored | 12 May, 2026 | npm @tanstack/solid-router-devtools |
Malicious release: Malicious code in @squawk/airspace-data (npm) GHSA-j5w5-5fj6-mwvv, MAL-2026-3438 | Malicious | Not scored | 12 May, 2026 | npm @squawk/airspace-data |
Malicious release: Malicious code in @tanstack/router-utils (npm) GHSA-3rg6-f8mh-5pvp, MAL-2026-3479 | Malicious | Not scored | 12 May, 2026 | npm @tanstack/router-utils |
Malicious release: Malicious code in @tanstack/router-ssr-query-core (npm) GHSA-943h-v9jx-69h5, MAL-2026-3478 | Malicious | Not scored | 12 May, 2026 | npm @tanstack/router-ssr-query-core |
Malicious release: Malicious code in @squawk/fixes (npm) GHSA-rjx4-mpv7-fwq9, MAL-2026-3442 | Malicious | Not scored | 12 May, 2026 | npm @squawk/fixes |