Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in claudeopusfile (PyPI) MAL-2026-18298 | Malicious | Not scored | 3 days ago | PyPI claudeopusfile |
Malicious release: Malicious code in nebulallm (PyPI) MAL-2026-18297 | Malicious | Not scored | 4 days ago | PyPI nebulallm |
Malicious release: Malicious code in zagents-message-bus (PyPI) MAL-2026-18296 | Malicious | Not scored | 4 days ago | PyPI zagents-message-bus |
Malicious release: Malicious code in @capsense/ccx-welcome-page (npm) GHSA-phgq-4c2g-6xpx, MAL-2026-18294 | Malicious | Not scored | 4 days ago | npm @capsense/ccx-welcome-page |
Malicious release: Malicious code in @capsense/core-ui (npm) GHSA-c2qc-c78r-386v, MAL-2026-18295 | Malicious | Not scored | 4 days ago | npm @capsense/core-ui |
Malicious release: Malicious code in event-bus-lite-testmetest (npm) MAL-2026-18292 | Malicious | Not scored | 4 days ago | npm event-bus-lite-testmetest |
Malicious release: Malicious code in w-mousekey (npm) GHSA-gmhr-j769-j6qf, MAL-2026-18293 | Malicious | Not scored | 4 days ago | npm w-mousekey |
Malicious release: Malicious code in jshelperdependenceny (npm) GHSA-2gxp-q3vq-594r, MAL-2026-18288 | Malicious | Not scored | 4 days ago | npm jshelperdependenceny |
Malicious release: Malicious code in @fmr-ap153177/apex-kit-icons (npm) MAL-2026-18279 | Malicious | Not scored | 4 days ago | npm @fmr-ap153177/apex-kit-icons |
Malicious release: Malicious code in @generic-means/ing-feat-scanner-libs (npm) MAL-2026-18281 | Malicious | Not scored | 4 days ago | npm @generic-means/ing-feat-scanner-libs |
Malicious release: Malicious code in @factoryz/apollo (npm) MAL-2026-18278 | Malicious | Not scored | 4 days ago | npm @factoryz/apollo |
Malicious release: Malicious code in @jm-telefonica/multibrand-components (npm) MAL-2026-18284 | Malicious | Not scored | 4 days ago | npm @jm-telefonica/multibrand-components |
Malicious release: Malicious code in @postex/common (npm) MAL-2026-18285 | Malicious | Not scored | 4 days ago | npm @postex/common |
Malicious release: Malicious code in sc-hydrate-carousel-price (npm) GHSA-9gcx-88qx-rxch, MAL-2026-18291 | Malicious | Not scored | 4 days ago | npm sc-hydrate-carousel-price |
Malicious release: Malicious code in @futurae-public/adaptive-js (npm) MAL-2026-18280 | Malicious | Not scored | 4 days ago | npm @futurae-public/adaptive-js |
Malicious release: Malicious code in paychex-pdftron (npm) GHSA-9mgv-25w8-jwhf, MAL-2026-18289 | Malicious | Not scored | 4 days ago | npm paychex-pdftron |
Malicious release: Malicious code in @ppa-web-components/ppa-headerfooter (npm) GHSA-p3hf-95qq-mv56, MAL-2026-18274 | Malicious | Not scored | 4 days ago | npm @ppa-web-components/ppa-headerfooter |
Malicious release: Malicious code in @ppa-web-components/ppa-hotel-collection (npm) GHSA-4p22-gg56-8457, MAL-2026-18275 | Malicious | Not scored | 4 days ago | npm @ppa-web-components/ppa-hotel-collection |
Malicious release: Malicious code in @ppa-web-components/ppa-banner (npm) GHSA-mwcw-x8h4-mqcg, MAL-2026-18272 | Malicious | Not scored | 4 days ago | npm @ppa-web-components/ppa-banner |
Malicious release: Malicious code in @ppa-web-components/ppa-builder (npm) GHSA-5q5w-4m9f-ppmg, MAL-2026-18273 | Malicious | Not scored | 4 days ago | npm @ppa-web-components/ppa-builder |
Malicious release: Malicious code in @ppa-web-components/ppa-searchform (npm) GHSA-9p3j-rrmc-jc4p, MAL-2026-18287 | Malicious | Not scored | 4 days ago | npm @ppa-web-components/ppa-searchform |
Malicious release: Malicious code in @ppa-web-components/ppa-navigation (npm) GHSA-vc6h-rv88-87j5, MAL-2026-18286 | Malicious | Not scored | 4 days ago | npm @ppa-web-components/ppa-navigation |
Malicious release: Malicious code in fontus (PyPI) MAL-2026-18271 | Malicious | Not scored | 4 days ago | PyPI fontus |
Malicious release: Malicious code in sound-cloud-loader-api (npm) GHSA-5f99-52fc-5rc9, MAL-2026-18267 | Malicious | Not scored | 4 days ago | npm sound-cloud-loader-api |
Malicious release: Malicious code in tiktok-video-scraper (npm) GHSA-5xjv-xr86-9hrv, MAL-2026-18268 | Malicious | Not scored | 4 days ago | npm tiktok-video-scraper |
Malicious release: Malicious code in ionic-sound-cloud-loader-api (npm) GHSA-g89m-8c48-9x73, MAL-2026-18260 | Malicious | Not scored | 4 days ago | npm ionic-sound-cloud-loader-api |
Malicious release: Malicious code in insta-api-wrapper (npm) GHSA-j8vh-32vh-rj39, MAL-2026-18257 | Malicious | Not scored | 4 days ago | npm insta-api-wrapper |
Malicious release: Malicious code in insta-reel-search (npm) GHSA-v2r2-x76j-6fcx, MAL-2026-18258 | Malicious | Not scored | 4 days ago | npm insta-reel-search |
Malicious release: Malicious code in ionic-tiktok-scraper (npm) GHSA-wwj3-4v8w-w98j, MAL-2026-18261 | Malicious | Not scored | 4 days ago | npm ionic-tiktok-scraper |
Malicious release: Malicious code in ionic-youtube-streams (npm) GHSA-3cc7-77mx-rmj6, MAL-2026-18263 | Malicious | Not scored | 4 days ago | npm ionic-youtube-streams |
Malicious release: Malicious code in ionic-insta-search (npm) GHSA-4fw4-xm5r-mh69, MAL-2026-18259 | Malicious | Not scored | 4 days ago | npm ionic-insta-search |
Malicious release: Malicious code in cordova-plugin-geofence-appit (npm) GHSA-5pw8-3xv5-6cmg, MAL-2026-18256 | Malicious | Not scored | 4 days ago | npm cordova-plugin-geofence-appit |
Malicious release: Malicious code in youtube-info-streams (npm) GHSA-7mfw-r26v-9r9f, MAL-2026-18269 | Malicious | Not scored | 4 days ago | npm youtube-info-streams |
Malicious release: Malicious code in ionic-youtube-search (npm) GHSA-7p9r-26fp-m47g, MAL-2026-18262 | Malicious | Not scored | 4 days ago | npm ionic-youtube-search |
Malicious release: Malicious code in redis-dumper (npm) GHSA-8gg8-xq45-8fx5, MAL-2026-18266 | Malicious | Not scored | 4 days ago | npm redis-dumper |
Malicious release: Malicious code in ocsp-hashes (npm) GHSA-9v69-fx5h-r6p6, MAL-2026-18264 | Malicious | Not scored | 4 days ago | npm ocsp-hashes |
Malicious release: Malicious code in appit-cordova-admob (npm) GHSA-9w8h-674f-4x2j, MAL-2026-18253 | Malicious | Not scored | 4 days ago | npm appit-cordova-admob |
Malicious release: Malicious code in youtube-search-without-api-key (npm) GHSA-f6m2-r9qr-44fx, MAL-2026-18270 | Malicious | Not scored | 4 days ago | npm youtube-search-without-api-key |
Malicious release: Malicious code in appit-cordova-plugin-ionic (npm) GHSA-fr38-45mf-vcqf, MAL-2026-18254 | Malicious | Not scored | 4 days ago | npm appit-cordova-plugin-ionic |
Malicious release: Malicious code in p12-pem (npm) GHSA-74xg-w33f-jpv3, MAL-2026-18265 | Malicious | Not scored | 4 days ago | npm p12-pem |
Malicious release: Malicious code in cert-infos (npm) GHSA-8mjx-r4j6-3h6g, MAL-2026-18255 | Malicious | Not scored | 4 days ago | npm cert-infos |
Malicious release: Malicious code in @eforms/forms-api (npm) GHSA-39p9-96vf-fxjh, MAL-2026-18252 | Malicious | Not scored | 4 days ago | npm @eforms/forms-api |
Malicious release: Malicious code in @drone-js-ext/core (npm) GHSA-938p-x8vr-2r33, MAL-2026-18276 | Malicious | Not scored | 4 days ago | npm @drone-js-ext/core |
Malicious release: Malicious code in @drone-js-ext/vip-badge (npm) GHSA-h7v8-65vw-r7wh, MAL-2026-18277 | Malicious | Not scored | 4 days ago | npm @drone-js-ext/vip-badge |
Malicious release: Malicious code in tailwind-base-buttons (npm) GHSA-5j43-343m-gggg, MAL-2026-18250 | Malicious | Not scored | 4 days ago | npm tailwind-base-buttons |
Malicious release: Malicious code in noelc-css-blender (npm) GHSA-cj2x-975v-jmwf, MAL-2026-18249 | Malicious | Not scored | 4 days ago | npm noelc-css-blender |
Malicious release: Malicious code in tailwindcss-theme-kit (npm) GHSA-v5xr-xjx7-ggwf, MAL-2026-18251 | Malicious | Not scored | 4 days ago | npm tailwindcss-theme-kit |
Malicious release: Malicious code in overarch-windows-x64-yr (npm) GHSA-v5v8-j5gm-pq8v, MAL-2026-18248 | Malicious | Not scored | 5 days ago | npm overarch-windows-x64-yr |
Malicious release: Malicious code in @liauto/win32-x64 (npm) GHSA-32x9-4g9x-5cxj, MAL-2026-18247 | Malicious | Not scored | 5 days ago | npm @liauto/win32-x64 |
Malicious release: Malicious code in @sxm-web/client-sdk-core (npm) GHSA-v3mw-7pg4-rp68, MAL-2026-18319 | Malicious | Not scored | 5 days ago | npm @sxm-web/client-sdk-core |