Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @k18k/entrypoint-sdk-darwin-arm64 (npm) GHSA-8wf7-8825-99q7, MAL-2026-18243 | Malicious | Not scored | 6 days ago | npm @k18k/entrypoint-sdk-darwin-arm64 |
Malicious release: Malicious code in orqiva-runtime-win32-x64 (npm) GHSA-8j59-g9mq-7hf9, MAL-2026-18246 | Malicious | Not scored | 6 days ago | npm orqiva-runtime-win32-x64 |
Malicious release: Malicious code in @k18k/entrypoint-sdk-linux-x64 (npm) GHSA-9fhg-r3w6-g7r4, MAL-2026-18245 | Malicious | Not scored | 6 days ago | npm @k18k/entrypoint-sdk-linux-x64 |
Malicious release: Malicious code in @k18k/entrypoint-sdk-darwin-x64 (npm) GHSA-j58m-rwhr-923h, MAL-2026-18244 | Malicious | Not scored | 6 days ago | npm @k18k/entrypoint-sdk-darwin-x64 |
Malicious release: Malicious code in @greenlake/session (npm) GHSA-499v-qcp5-gx7x, MAL-2026-18283 | Malicious | Not scored | 6 days ago | npm @greenlake/session |
Malicious release: Malicious code in @greenlake/mfe-login-url (npm) GHSA-6vg7-x7p2-c749, MAL-2026-18318 | Malicious | Not scored | 6 days ago | npm @greenlake/mfe-login-url |
Malicious release: Malicious code in @greenlake/context-pane (npm) GHSA-5pp4-pvpc-g2xv, MAL-2026-18317 | Malicious | Not scored | 6 days ago | npm @greenlake/context-pane |
Malicious release: Malicious code in @greenlake/common-context (npm) GHSA-mm6p-8j6f-9fch, MAL-2026-18282 | Malicious | Not scored | 6 days ago | npm @greenlake/common-context |
Malicious release: Malicious code in @greenlake/auth (npm) GHSA-h6v3-2957-9j3g, MAL-2026-18316 | Malicious | Not scored | 6 days ago | npm @greenlake/auth |
Malicious release: Malicious code in sitecard (PyPI) MAL-2026-18242 | Malicious | Not scored | 6 days ago | PyPI sitecard |
Malicious release: Malicious code in jobwharf (PyPI) MAL-2026-18228 | Malicious | Not scored | 6 days ago | PyPI jobwharf |
Malicious release: Malicious code in slatejob (PyPI) MAL-2026-18237 | Malicious | Not scored | 6 days ago | PyPI slatejob |
Malicious release: Malicious code in reedworker (PyPI) MAL-2026-18234 | Malicious | Not scored | 6 days ago | PyPI reedworker |
Malicious release: Malicious code in loadferry (PyPI) MAL-2026-18231 | Malicious | Not scored | 6 days ago | PyPI loadferry |
Malicious release: Malicious code in runpier (PyPI) MAL-2026-18235 | Malicious | Not scored | 6 days ago | PyPI runpier |
Malicious release: Malicious code in sedgehaul (PyPI) MAL-2026-18236 | Malicious | Not scored | 6 days ago | PyPI sedgehaul |
Malicious release: Malicious code in taskquay (PyPI) MAL-2026-18238 | Malicious | Not scored | 6 days ago | PyPI taskquay |
Malicious release: Malicious code in marshrunner (PyPI) MAL-2026-18232 | Malicious | Not scored | 6 days ago | PyPI marshrunner |
Malicious release: Malicious code in workslip (PyPI) MAL-2026-18241 | Malicious | Not scored | 6 days ago | PyPI workslip |
Malicious release: Malicious code in brookworker (PyPI) MAL-2026-18224 | Malicious | Not scored | 6 days ago | PyPI brookworker |
Malicious release: Malicious code in cobbleload (PyPI) MAL-2026-18225 | Malicious | Not scored | 6 days ago | PyPI cobbleload |
Malicious release: Malicious code in brambletask (PyPI) MAL-2026-18223 | Malicious | Not scored | 6 days ago | PyPI brambletask |
Malicious release: Malicious code in ferretqueue (PyPI) MAL-2026-18226 | Malicious | Not scored | 6 days ago | PyPI ferretqueue |
Malicious release: Malicious code in otterload (PyPI) MAL-2026-18233 | Malicious | Not scored | 6 days ago | PyPI otterload |
Malicious release: Malicious code in badgertask (PyPI) MAL-2026-18222 | Malicious | Not scored | 6 days ago | PyPI badgertask |
Malicious release: Malicious code in larchworker (PyPI) MAL-2026-18230 | Malicious | Not scored | 6 days ago | PyPI larchworker |
Malicious release: Malicious code in thornqueue (PyPI) MAL-2026-18240 | Malicious | Not scored | 6 days ago | PyPI thornqueue |
Malicious release: Malicious code in thistlerun (PyPI) MAL-2026-18239 | Malicious | Not scored | 6 days ago | PyPI thistlerun |
Malicious release: Malicious code in juniperrun (PyPI) MAL-2026-18229 | Malicious | Not scored | 6 days ago | PyPI juniperrun |
Malicious release: Malicious code in flintqueue (PyPI) MAL-2026-18227 | Malicious | Not scored | 6 days ago | PyPI flintqueue |
Malicious release: Malicious code in kestreljob (PyPI) MAL-2026-18221 | Malicious | Not scored | 6 days ago | PyPI kestreljob |
Malicious release: Malicious code in skillward (npm) GHSA-9wgc-5pgr-25p3, MAL-2026-18220 | Malicious | Not scored | 6 days ago | npm skillward |
Malicious release: Malicious code in onsokets (PyPI) MAL-2026-18219 | Malicious | Not scored | 6 days ago | PyPI onsokets |
Malicious release: Malicious code in qowa (PyPI) MAL-2026-18218 | Malicious | Not scored | 6 days ago | PyPI qowa |
Malicious release: Malicious code in @grabcad/user-license (npm) GHSA-6w2v-744r-g5j5, MAL-2026-18217 | Malicious | Not scored | 6 days ago | npm @grabcad/user-license |
Malicious release: Malicious code in @grabcad/grabcad-shop-shared (npm) GHSA-cc6r-jh8f-6c76, MAL-2026-18215 | Malicious | Not scored | 6 days ago | npm @grabcad/grabcad-shop-shared |
Malicious release: Malicious code in @grabcad/company-server-shared (npm) GHSA-fpfw-7wv8-x4mh, MAL-2026-18214 | Malicious | Not scored | 6 days ago | npm @grabcad/company-server-shared |
Malicious release: Malicious code in @grabcad/preferences-client (npm) GHSA-mfh5-wvcp-2v6v, MAL-2026-18216 | Malicious | Not scored | 6 days ago | npm @grabcad/preferences-client |
Malicious release: Malicious code in @blueskydataplatform/shared-ui (npm) GHSA-6x9m-j5h8-w3vg, MAL-2026-18212 | Malicious | Not scored | 6 days ago | npm @blueskydataplatform/shared-ui |
Malicious release: Malicious code in @cecm-web-sdk/core (npm) GHSA-88qx-q5v7-q7x5, MAL-2026-18213 | Malicious | Not scored | 6 days ago | npm @cecm-web-sdk/core |
Malicious release: Malicious code in @ecg-internal/js-react-i18n (npm) GHSA-5x9g-7rj9-4xc8, MAL-2026-18209 | Malicious | Not scored | 6 days ago | npm @ecg-internal/js-react-i18n |
Malicious release: Malicious code in @ecg-internal/aurora-js-formatters (npm) GHSA-9976-3w38-mrmj, MAL-2026-18207 | Malicious | Not scored | 6 days ago | npm @ecg-internal/aurora-js-formatters |
Malicious release: Malicious code in @ecg-internal/media-util-js-lib (npm) GHSA-hcw5-m6mm-qg3q, MAL-2026-18210 | Malicious | Not scored | 6 days ago | npm @ecg-internal/media-util-js-lib |
Malicious release: Malicious code in @ecg-internal/favourites-ui (npm) GHSA-g8hh-8pxg-jr3x, MAL-2026-18208 | Malicious | Not scored | 6 days ago | npm @ecg-internal/favourites-ui |
Malicious release: Malicious code in @ecg-internal/adobe-dmp-js (npm) GHSA-vcj4-3hxm-4rf3, MAL-2026-18206 | Malicious | Not scored | 6 days ago | npm @ecg-internal/adobe-dmp-js |
Malicious release: Malicious code in @ecg-internal/reviews-dialog-ui (npm) GHSA-r47j-grcr-p9h9, MAL-2026-18211 | Malicious | Not scored | 6 days ago | npm @ecg-internal/reviews-dialog-ui |
Malicious release: Malicious code in @tekmidian/pai (npm) GHSA-xvgg-qjjh-gq34, MAL-2026-18205 | Malicious | Not scored | 6 days ago | npm @tekmidian/pai |
Malicious release: Malicious code in react-native-bright-sdk (npm) MAL-2026-18290 | Malicious | Not scored | 6 days ago | npm react-native-bright-sdk |