Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in coffin-grave (PyPI) MAL-2024-12244 | Malicious | Not scored | 08 Sep, 2024 | PyPI coffin-grave |
Malicious release: Malicious code in coffin2022 (PyPI) MAL-2024-12245 | Malicious | Not scored | 08 Sep, 2024 | PyPI coffin2022 |
Malicious release: Malicious code in cobo-custdoy (PyPI) MAL-2024-12237 | Malicious | Not scored | 07 Sep, 2024 | PyPI cobo-custdoy |
Malicious release: Malicious code in cobo-custdy (PyPI) MAL-2024-12238 | Malicious | Not scored | 07 Sep, 2024 | PyPI cobo-custdy |
Malicious release: Malicious code in cobo-python (PyPI) MAL-2024-12239 | Malicious | Not scored | 07 Sep, 2024 | PyPI cobo-python |
Apache Airflow vulnerable to Improper Encoding or Escaping of Output BIT-airflow-2024-45498, CVE-2024-45498, GHSA-c392-whpc-vfpr, PYSEC-2024-266 | High | 1.2% | 07 Sep, 2024 | PyPI apache-airflow |
Apache Airflow vulnerable to Execution with Unnecessary Privileges BIT-airflow-2024-45034, CVE-2024-45034, GHSA-92xg-gmrq-5c3w, PYSEC-2024-212 | High | 1.7% | 07 Sep, 2024 | PyPI apache-airflow |
HTML injection in JupyterLite leading to DOM Clobbering GHSA-gj55-2xf9-67rq | Medium | Not scored | 06 Sep, 2024 | PyPI jupyterlite-core |
H2O.ai H2O vulnerable to deserialization attacks via a JDBC Connection URL CVE-2024-45758, GHSA-hrmc-jmp7-mpm2, PYSEC-2026-352 | Critical | 0.9% | 06 Sep, 2024 | Maven ai.h2o:h2o-core PyPI h2o |
Malicious release: Malicious code in browser-cookies1 (PyPI) MAL-2024-9951 | Malicious | Not scored | 06 Sep, 2024 | PyPI browser-cookies1 |
Malicious release: Malicious code in browser-cookies3 (PyPI) MAL-2024-9952, SNYK-PYTHON-BROWSERCOOKIES3-8185018 | Malicious | Not scored | 06 Sep, 2024 | PyPI browser-cookies3 |
Malicious release: Malicious code in dirutils (PyPI) MAL-2024-9967 | Malicious | Not scored | 06 Sep, 2024 | PyPI dirutils |
Malicious release: Malicious code in hello-world-package-test (PyPI) MAL-2024-10034 | Malicious | Not scored | 06 Sep, 2024 | PyPI hello-world-package-test |
Malicious release: Malicious code in mlc-llm-nightly (PyPI) MAL-2024-10046 | Malicious | Not scored | 06 Sep, 2024 | PyPI mlc-llm-nightly |
Malicious release: Malicious code in gwinpy (PyPI) MAL-2024-11248 | Malicious | Not scored | 06 Sep, 2024 | PyPI gwinpy |
Malicious release: Malicious code in http-query (PyPI) MAL-2024-11608 | Malicious | Not scored | 06 Sep, 2024 | PyPI http-query |
Malicious release: Malicious code in pwnstar-lib (PyPI) MAL-2024-12329 | Malicious | Not scored | 06 Sep, 2024 | PyPI pwnstar-lib |
Malicious release: Malicious code in test-packages1 (PyPI) MAL-2024-12359 | Malicious | Not scored | 06 Sep, 2024 | PyPI test-packages1 |
Malicious release: Malicious code in test-packages2 (PyPI) MAL-2024-12360 | Malicious | Not scored | 06 Sep, 2024 | PyPI test-packages2 |
Malicious release: Malicious code in flag-leak-r (PyPI) MAL-2024-9446 | Malicious | Not scored | 06 Sep, 2024 | PyPI flag-leak-r |
Malicious release: Malicious code in whalebone7-poc (PyPI) MAL-2025-3018 | Malicious | Not scored | 06 Sep, 2024 | PyPI whalebone7-poc |
Malicious release: Malicious code in grpc-google-bigtable-v2 (PyPI) MAL-2025-4665 | Malicious | Not scored | 06 Sep, 2024 | PyPI grpc-google-bigtable-v2 |
Malicious release: Malicious code in proto-google-cloud-dlp-v2beta1 (PyPI) MAL-2025-4666 | Malicious | Not scored | 06 Sep, 2024 | PyPI proto-google-cloud-dlp-v2beta1 |
Malicious release: Malicious code in youreallydontwantthispackage2132 (PyPI) MAL-2025-5239 | Malicious | Not scored | 06 Sep, 2024 | PyPI youreallydontwantthispackage2132 |
Malicious release: Malicious code in ateslassia (PyPI) MAL-2025-6436 | Malicious | Not scored | 06 Sep, 2024 | PyPI ateslassia |
Malicious release: Malicious code in babel-preset-current-node-syntax (PyPI) MAL-2025-6460 | Malicious | Not scored | 06 Sep, 2024 | PyPI babel-preset-current-node-syntax |
Malicious release: Malicious code in glob-to-regexp (PyPI) MAL-2025-6510 | Malicious | Not scored | 06 Sep, 2024 | PyPI glob-to-regexp |
Malicious release: Malicious code in gmacpyutil (PyPI) MAL-2025-929 | Malicious | Not scored | 06 Sep, 2024 | PyPI gmacpyutil |
MindsDB Vulnerable to Bypass of SSRF Protection with DNS Rebinding CVE-2024-24759, GHSA-4jcv-vp96-94xr, PYSEC-2024-74 | Critical | 4.9% | 05 Sep, 2024 | PyPI mindsdb |
Malicious release: Malicious code in ezauto (PyPI) MAL-2024-10027 | Malicious | Not scored | 04 Sep, 2024 | PyPI ezauto |
Malicious release: Malicious code in modeflow (PyPI) MAL-2024-10047 | Malicious | Not scored | 04 Sep, 2024 | PyPI modeflow |
Malicious release: Malicious code in pyadd (PyPI) MAL-2024-10111 | Malicious | Not scored | 04 Sep, 2024 | PyPI pyadd |
Malicious release: Malicious code in pyloy (PyPI) MAL-2024-10119 | Malicious | Not scored | 04 Sep, 2024 | PyPI pyloy |
Malicious release: Malicious code in pytrv (PyPI) MAL-2024-10144 | Malicious | Not scored | 04 Sep, 2024 | PyPI pytrv |
Malicious release: Malicious code in rodll (PyPI) MAL-2024-10157 | Malicious | Not scored | 04 Sep, 2024 | PyPI rodll |
Malicious release: Malicious code in roinject (PyPI) MAL-2024-10158 | Malicious | Not scored | 04 Sep, 2024 | PyPI roinject |
Malicious release: Malicious code in rolib (PyPI) MAL-2024-10159 | Malicious | Not scored | 04 Sep, 2024 | PyPI rolib |
Malicious release: Malicious code in uidesign (PyPI) MAL-2024-10180 | Malicious | Not scored | 04 Sep, 2024 | PyPI uidesign |
Malicious release: Malicious code in cblines (PyPI) MAL-2024-11550 | Malicious | Not scored | 04 Sep, 2024 | PyPI cblines |
Malicious release: Malicious code in cryptocalls (PyPI) MAL-2024-11567 | Malicious | Not scored | 04 Sep, 2024 | PyPI cryptocalls |
Malicious release: Malicious code in discould (PyPI) MAL-2024-11578 | Malicious | Not scored | 04 Sep, 2024 | PyPI discould |
Malicious release: Malicious code in embeds (PyPI) MAL-2024-11581 | Malicious | Not scored | 04 Sep, 2024 | PyPI embeds |
Malicious release: Malicious code in haaahhaha (PyPI) MAL-2024-11603 | Malicious | Not scored | 04 Sep, 2024 | PyPI haaahhaha |
Malicious release: Malicious code in hahahasillyxd (PyPI) MAL-2024-11604 | Malicious | Not scored | 04 Sep, 2024 | PyPI hahahasillyxd |
Malicious release: Malicious code in larpexodus (PyPI) MAL-2024-11622 | Malicious | Not scored | 04 Sep, 2024 | PyPI larpexodus |
Malicious release: Malicious code in lowui (PyPI) MAL-2024-11626 | Malicious | Not scored | 04 Sep, 2024 | PyPI lowui |
Malicious release: Malicious code in mumupatcher (PyPI) MAL-2024-11639 | Malicious | Not scored | 04 Sep, 2024 | PyPI mumupatcher |
Malicious release: Malicious code in mumuplayer12 (PyPI) MAL-2024-11640 | Malicious | Not scored | 04 Sep, 2024 | PyPI mumuplayer12 |
Malicious release: Malicious code in nezur (PyPI) MAL-2024-11647 | Malicious | Not scored | 04 Sep, 2024 | PyPI nezur |
Malicious release: Malicious code in partpyth (PyPI) MAL-2024-11654 | Malicious | Not scored | 04 Sep, 2024 | PyPI partpyth |