Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in bq-helix-build-hook-6ade983e (PyPI) MAL-2026-18395 | Malicious | Not scored | 2 hours ago | PyPI bq-helix-build-hook-6ade983e |
Malicious release: Malicious code in bq-helix-recon-6ade983e (PyPI) MAL-2026-18396 | Malicious | Not scored | 2 hours ago | PyPI bq-helix-recon-6ade983e |
Twisted: Unauthenticated Remote Denial of Service in the Twisted HTTP/2 Server via Rapid Stream Reset GHSA-vpp8-g58w-m8mp | High | Not scored | 5 hours ago | PyPI Twisted PyPI twisted |
PraisonAI vulnerable to Remote Code Execution via Broken AST Sandbox CVE-2026-61438, GHSA-26mh-57q7-jfvr | High | Not scored | 5 hours ago | PyPI praisonai |
Malicious release: Malicious code in poc-revshell (PyPI) MAL-2026-18378 | Malicious | Not scored | 7 hours ago | PyPI poc-revshell |
Malicious release: Malicious code in seapy-ops (PyPI) MAL-2026-17880 | Malicious | Not scored | 8 hours ago | PyPI seapy-ops |