Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in tronlix (PyPI) MAL-2025-4247 | Malicious | Not scored | 28 Apr, 2025 | PyPI tronlix |
Malicious release: Malicious code in trxone (PyPI) MAL-2025-4248 | Malicious | Not scored | 28 Apr, 2025 | PyPI trxone |
Malicious release: Malicious code in trxtwo (PyPI) MAL-2025-4249 | Malicious | Not scored | 28 Apr, 2025 | PyPI trxtwo |
Malicious release: Malicious code in trongridlib (PyPI) MAL-2025-5140 | Malicious | Not scored | 28 Apr, 2025 | PyPI trongridlib |
Malicious release: Malicious code in wallettronpy (PyPI) MAL-2025-5141 | Malicious | Not scored | 28 Apr, 2025 | PyPI wallettronpy |
Malicious release: Malicious code in tronapinet (PyPI) MAL-2025-6605 | Malicious | Not scored | 28 Apr, 2025 | PyPI tronapinet |
Malicious release: Malicious code in tronapipy (PyPI) MAL-2025-6606 | Malicious | Not scored | 28 Apr, 2025 | PyPI tronapipy |
Malicious release: Malicious code in tronjoi (PyPI) MAL-2025-6607 | Malicious | Not scored | 28 Apr, 2025 | PyPI tronjoi |
Malicious release: Malicious code in tronlibapi (PyPI) MAL-2025-6608 | Malicious | Not scored | 28 Apr, 2025 | PyPI tronlibapi |
Malicious release: Malicious code in tronlid (PyPI) MAL-2025-6609 | Malicious | Not scored | 28 Apr, 2025 | PyPI tronlid |
Malicious release: Malicious code in wallettron (PyPI) MAL-2025-6619 | Malicious | Not scored | 28 Apr, 2025 | PyPI wallettron |
Malicious release: Malicious code in alchemyrpcs (PyPI) MAL-2025-4205 | Malicious | Not scored | 27 Apr, 2025 | PyPI alchemyrpcs |
Malicious release: Malicious code in ora3 (PyPI) MAL-2025-4227 | Malicious | Not scored | 27 Apr, 2025 | PyPI ora3 |
Malicious release: Malicious code in walletrpcs (PyPI) MAL-2025-4259 | Malicious | Not scored | 27 Apr, 2025 | PyPI walletrpcs |
Malicious release: Malicious code in walletweb3 (PyPI) MAL-2025-4260 | Malicious | Not scored | 27 Apr, 2025 | PyPI walletweb3 |
Malicious release: Malicious code in web3author (PyPI) MAL-2025-4269 | Malicious | Not scored | 27 Apr, 2025 | PyPI web3author |
Malicious release: Malicious code in web3automation (PyPI) MAL-2025-4270 | Malicious | Not scored | 27 Apr, 2025 | PyPI web3automation |
Malicious release: Malicious code in web3wallet (PyPI) MAL-2025-4271 | Malicious | Not scored | 27 Apr, 2025 | PyPI web3wallet |
Malicious release: Malicious code in web3yrpcs (PyPI) MAL-2025-4272 | Malicious | Not scored | 27 Apr, 2025 | PyPI web3yrpcs |
Malicious release: Malicious code in websign (PyPI) MAL-2025-4273 | Malicious | Not scored | 27 Apr, 2025 | PyPI websign |
Malicious release: Malicious code in web3evm (PyPI) MAL-2025-5142 | Malicious | Not scored | 27 Apr, 2025 | PyPI web3evm |
markdownify allows large headline prefixes such as <h9999999>, which causes memory consumption CVE-2025-46656, GHSA-7mpr-5m44-h73r, PYSEC-2026-1604 | Low | 0.2% | 26 Apr, 2025 | PyPI markdownify |
Malicious release: Malicious code in pretty-cli-logger (PyPI) MAL-2025-191816 | Malicious | Not scored | 26 Apr, 2025 | PyPI pretty-cli-logger |
Malicious release: Malicious code in neov (PyPI) MAL-2025-191801 | Malicious | Not scored | 25 Apr, 2025 | PyPI neov |
Malicious release: Malicious code in pytzv (PyPI) MAL-2025-191847 | Malicious | Not scored | 25 Apr, 2025 | PyPI pytzv |
Malicious release: Malicious code in qtpv (PyPI) MAL-2025-191849 | Malicious | Not scored | 25 Apr, 2025 | PyPI qtpv |
Malicious release: Malicious code in tensorflowlitex (PyPI) MAL-2025-191890 | Malicious | Not scored | 25 Apr, 2025 | PyPI tensorflowlitex |
Malicious release: Malicious code in ark-vmp-reverse (PyPI) MAL-2025-4206 | Malicious | Not scored | 24 Apr, 2025 | PyPI ark-vmp-reverse |
Malicious release: Malicious code in byted-torch-monitor (PyPI) MAL-2025-4207 | Malicious | Not scored | 24 Apr, 2025 | PyPI byted-torch-monitor |
Malicious release: Malicious code in bytedmemfdd345 (PyPI) MAL-2025-4208 | Malicious | Not scored | 24 Apr, 2025 | PyPI bytedmemfdd345 |
h11 accepts some malformed Chunked-Encoding bodies CVE-2025-43859, GHSA-vqfr-h8mv-ghfj, PYSEC-2026-348 | Critical | 0.6% | 24 Apr, 2025 | PyPI h11 |
LLaMA-Factory Allows Arbitrary Code Execution via Unsafe Deserialization in Ilamafy_baichuan2.py CVE-2025-46567, GHSA-f2f7-gj54-6vpv, PYSEC-2026-1574 | High | 0.3% | 23 Apr, 2025 | PyPI llamafactory |
Malicious release: Malicious code in web3rpc (PyPI) MAL-2025-3481 | Malicious | Not scored | 23 Apr, 2025 | PyPI web3rpc |
Malicious release: Malicious code in web3rpcs (PyPI) MAL-2025-3482 | Malicious | Not scored | 23 Apr, 2025 | PyPI web3rpcs |
Malicious release: Malicious code in web3-validator (PyPI) MAL-2025-3479 | Malicious | Not scored | 23 Apr, 2025 | PyPI web3-validator |
Malicious release: Malicious code in web3connectpy (PyPI) MAL-2025-3480 | Malicious | Not scored | 23 Apr, 2025 | PyPI web3connectpy |
Malicious release: Malicious code in tronperm (PyPI) MAL-2025-3478 | Malicious | Not scored | 23 Apr, 2025 | PyPI tronperm |
Malicious release: Malicious code in tronclipy (PyPI) MAL-2025-3476 | Malicious | Not scored | 23 Apr, 2025 | PyPI tronclipy |
Malicious release: Malicious code in tronlinkperm (PyPI) MAL-2025-3477 | Malicious | Not scored | 23 Apr, 2025 | PyPI tronlinkperm |
Malicious release: Malicious code in timekeeper-verif1er (PyPI) MAL-2025-3474 | Malicious | Not scored | 23 Apr, 2025 | PyPI timekeeper-verif1er |
Malicious release: Malicious code in sxz (PyPI) MAL-2025-3472 | Malicious | Not scored | 23 Apr, 2025 | PyPI sxz |
Malicious release: Malicious code in sincpro-logger (PyPI) MAL-2025-3470 | Malicious | Not scored | 23 Apr, 2025 | PyPI sincpro-logger |
Malicious release: Malicious code in pyhack (PyPI) MAL-2025-3459 | Malicious | Not scored | 23 Apr, 2025 | PyPI pyhack |
Malicious release: Malicious code in pycolarized (PyPI) MAL-2025-3457 | Malicious | Not scored | 23 Apr, 2025 | PyPI pycolarized |
Malicious release: Malicious code in pnuske (PyPI) MAL-2025-3455 | Malicious | Not scored | 23 Apr, 2025 | PyPI pnuske |
Malicious release: Malicious code in pyapimove (PyPI) MAL-2025-3456 | Malicious | Not scored | 23 Apr, 2025 | PyPI pyapimove |
Malicious release: Malicious code in leveup (PyPI) MAL-2025-3449 | Malicious | Not scored | 23 Apr, 2025 | PyPI leveup |
Malicious release: Malicious code in evm-validator (PyPI) MAL-2025-3445 | Malicious | Not scored | 23 Apr, 2025 | PyPI evm-validator |
Malicious release: Malicious code in blackspammerbd-vx1 (PyPI) MAL-2025-3438 | Malicious | Not scored | 23 Apr, 2025 | PyPI blackspammerbd-vx1 |
Malicious release: Malicious code in s3transfer-sl (PyPI) MAL-2025-191861 | Malicious | Not scored | 23 Apr, 2025 | PyPI s3transfer-sl |