Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in mkt-ui-library (npm) GHSA-w4pq-8q38-v8jr, MAL-2026-15540 | Malicious | Not scored | 28 Aug, 2026 | npm mkt-ui-library |
Malicious release: Malicious code in firestore-lite (npm) GHSA-q556-gm72-jcp7, MAL-2026-15534 | Malicious | Not scored | 28 Aug, 2026 | npm firestore-lite |
Malicious release: Malicious code in librastandardlib (npm) GHSA-p943-f2p4-7xfx, MAL-2026-15538 | Malicious | Not scored | 28 Aug, 2026 | npm librastandardlib |
Malicious release: Malicious code in vui-gateway (npm) GHSA-69cq-ggff-w363, MAL-2026-15546 | Malicious | Not scored | 28 Aug, 2026 | npm vui-gateway |
Malicious release: Malicious code in jira-projects-backbone (npm) GHSA-8569-7m7w-7gf9, MAL-2026-15537 | Malicious | Not scored | 28 Aug, 2026 | npm jira-projects-backbone |
Malicious release: Malicious code in data-value (npm) GHSA-rq5q-gpqf-p4vp, MAL-2026-15533 | Malicious | Not scored | 28 Aug, 2026 | npm data-value |
Malicious release: Malicious code in oit-lib-oracle-util (npm) GHSA-rqm2-xgr5-297v, MAL-2026-15541 | Malicious | Not scored | 28 Aug, 2026 | npm oit-lib-oracle-util |
Malicious release: Malicious code in gridster-coords (npm) GHSA-fq5c-v7fm-mv99, MAL-2026-15535 | Malicious | Not scored | 28 Aug, 2026 | npm gridster-coords |
Malicious release: Malicious code in amplitude-react-native (npm) GHSA-wxgr-5x7q-cc86, MAL-2026-15525 | Malicious | Not scored | 28 Aug, 2026 | npm amplitude-react-native |
Malicious release: Malicious code in qbo-ui-services (npm) GHSA-j5hx-563p-m829, MAL-2026-15519 | Malicious | Not scored | 28 Aug, 2026 | npm qbo-ui-services |
Malicious release: Malicious code in framework-zero (npm) GHSA-c583-7r3r-x2p8, MAL-2026-15500 | Malicious | Not scored | 28 Aug, 2026 | npm framework-zero |
Malicious release: Malicious code in ring-device-settings-library (npm) GHSA-c9hf-9c62-jcfq, GHSA-f4f7-3wwr-hxfx, MAL-2026-15520 | Malicious | Not scored | 28 Aug, 2026 | npm ring-device-settings-library |
Malicious release: Malicious code in katal-logger (npm) GHSA-f2rf-58x5-5f6w, MAL-2026-15513 | Malicious | Not scored | 28 Aug, 2026 | npm katal-logger |
Malicious release: Malicious code in payments-ui-services (npm) GHSA-jhxr-q6vp-9x3m, MAL-2026-15518 | Malicious | Not scored | 28 Aug, 2026 | npm payments-ui-services |
Malicious release: Malicious code in calcite-web (npm) GHSA-fhxc-p24q-34ch, MAL-2026-15499 | Malicious | Not scored | 28 Aug, 2026 | npm calcite-web |
Malicious release: Malicious code in tabbables (npm) GHSA-4g4c-9232-9cwv, MAL-2026-15524 | Malicious | Not scored | 28 Aug, 2026 | npm tabbables |
Malicious release: Malicious code in jsb-adapter (npm) GHSA-69pf-x798-g22x, MAL-2026-15512 | Malicious | Not scored | 28 Aug, 2026 | npm jsb-adapter |
Malicious release: Malicious code in alimama-minisite (npm) GHSA-q5h9-9fg7-xg2g, MAL-2026-15495 | Malicious | Not scored | 28 Aug, 2026 | npm alimama-minisite |
Malicious release: Malicious code in one-intuit-help-system-utils (npm) GHSA-93c7-v93p-97cw, MAL-2026-15517 | Malicious | Not scored | 28 Aug, 2026 | npm one-intuit-help-system-utils |
Malicious release: Malicious code in npm-extension (npm) GHSA-f2fx-3q3p-v293, MAL-2026-15515 | Malicious | Not scored | 28 Aug, 2026 | npm npm-extension |
Malicious release: Malicious code in mintel-taskbar (npm) GHSA-x2qj-v4rx-3phv, MAL-2026-15514 | Malicious | Not scored | 28 Aug, 2026 | npm mintel-taskbar |
Malicious release: Malicious code in amplitude-session-replay (npm) GHSA-jvwx-f8cc-jjj8, MAL-2026-15497 | Malicious | Not scored | 28 Aug, 2026 | npm amplitude-session-replay |
Malicious release: Malicious code in integration-amplitude (npm) GHSA-m5fj-7mm7-mg9p, MAL-2026-15510 | Malicious | Not scored | 28 Aug, 2026 | npm integration-amplitude |
Malicious release: Malicious code in aws-blog (npm) GHSA-q8ww-mqrw-jq9q, MAL-2026-15498 | Malicious | Not scored | 28 Aug, 2026 | npm aws-blog |
Malicious release: Malicious code in intuit-authz (npm) GHSA-vp52-xxhf-m857, MAL-2026-15511 | Malicious | Not scored | 28 Aug, 2026 | npm intuit-authz |
Malicious release: Malicious code in amplitude-experiment (npm) GHSA-4qr2-j5wh-f48g, MAL-2026-15496 | Malicious | Not scored | 28 Aug, 2026 | npm amplitude-experiment |
Malicious release: Malicious code in search-reservation (npm) GHSA-j5xq-g44w-jh7c, MAL-2026-15521 | Malicious | Not scored | 28 Aug, 2026 | npm search-reservation |
Malicious release: Malicious code in sycm-vendors (npm) GHSA-7h72-24vr-wrf6, MAL-2026-15523 | Malicious | Not scored | 28 Aug, 2026 | npm sycm-vendors |
Malicious release: Malicious code in nx-app (npm) GHSA-h9j7-rx3x-rwhc, GHSA-vmrp-3pwx-mj42, MAL-2026-15516 | Malicious | Not scored | 28 Aug, 2026 | npm nx-app |
Malicious release: Malicious code in grafeno-utils (npm) MAL-2026-15509 | Malicious | Not scored | 28 Aug, 2026 | npm grafeno-utils |
Malicious release: Malicious code in grafeno-sdk (npm) MAL-2026-15508 | Malicious | Not scored | 28 Aug, 2026 | npm grafeno-sdk |
Malicious release: Malicious code in grafeno-config (npm) MAL-2026-15504 | Malicious | Not scored | 28 Aug, 2026 | npm grafeno-config |
Malicious release: Malicious code in grafeno-api (npm) MAL-2026-15501 | Malicious | Not scored | 28 Aug, 2026 | npm grafeno-api |
Malicious release: Malicious code in grafeno-client (npm) MAL-2026-15503 | Malicious | Not scored | 28 Aug, 2026 | npm grafeno-client |
Malicious release: Malicious code in grafeno-auth (npm) MAL-2026-15502 | Malicious | Not scored | 28 Aug, 2026 | npm grafeno-auth |
Malicious release: Malicious code in grafeno-logger (npm) MAL-2026-15506 | Malicious | Not scored | 28 Aug, 2026 | npm grafeno-logger |
Malicious release: Malicious code in spc-grafeno (npm) MAL-2026-15522 | Malicious | Not scored | 28 Aug, 2026 | npm spc-grafeno |
Malicious release: Malicious code in grafeno-core (npm) MAL-2026-15505 | Malicious | Not scored | 28 Aug, 2026 | npm grafeno-core |
Malicious release: Malicious code in grafeno-pix (npm) MAL-2026-15507 | Malicious | Not scored | 28 Aug, 2026 | npm grafeno-pix |
Malicious release: Malicious code in @7nohe/openapi-react-query-codegen (npm) GHSA-rg27-qr39-ch6w, MAL-2026-15494 | Malicious | Not scored | 28 Aug, 2026 | npm @7nohe/openapi-react-query-codegen |
Malicious release: Malicious code in grafeno-actions (npm) MAL-2026-15596 | Malicious | Not scored | 28 Aug, 2026 | npm grafeno-actions |
Malicious release: Malicious code in mfa-js (npm) GHSA-2p92-fvvr-75hj, MAL-2026-15492 | Malicious | Not scored | 28 Aug, 2026 | npm mfa-js |
Malicious release: Malicious code in ozturk-mfa (npm) GHSA-wrj4-48g5-vg88, MAL-2026-15493 | Malicious | Not scored | 28 Aug, 2026 | npm ozturk-mfa |
Malicious release: Malicious code in clmm-fee-audit (npm) GHSA-68fh-772h-wjfw, MAL-2026-15490 | Malicious | Not scored | 28 Aug, 2026 | npm clmm-fee-audit |
Malicious release: Malicious code in borsh-lite (npm) GHSA-6m7x-mwxq-f3wf, MAL-2026-15489 | Malicious | Not scored | 28 Aug, 2026 | npm borsh-lite |
Malicious release: Malicious code in eip712-lite (npm) GHSA-p5jf-vqp6-95h5, MAL-2026-15491 | Malicious | Not scored | 28 Aug, 2026 | npm eip712-lite |
Malicious release: Malicious code in calcboxlite (PyPI) MAL-2026-15488 | Malicious | Not scored | 28 Aug, 2026 | PyPI calcboxlite |
Malicious release: Malicious code in 3layerdipstackpcv17m (npm) GHSA-283x-m4wp-8428, MAL-2026-14872 | Malicious | Not scored | 28 Aug, 2026 | npm 3layerdipstackpcv17m |
Malicious release: Malicious code in 3layerdipstackm7mock (npm) GHSA-2xmr-4cx4-q8xh, MAL-2026-14827 | Malicious | Not scored | 28 Aug, 2026 | npm 3layerdipstackm7mock |
Malicious release: Malicious code in 3layerdipstackesp1lb (npm) GHSA-34fw-55mp-c63j, MAL-2026-14743 | Malicious | Not scored | 28 Aug, 2026 | npm 3layerdipstackesp1lb |