Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in jules-test-utils (PyPI) MAL-2026-5167 | Malicious | Not scored | 02 Jun, 2026 | PyPI jules-test-utils |
Malicious release: Malicious code in bt-signal-utils (PyPI) MAL-2026-5160 | Malicious | Not scored | 02 Jun, 2026 | PyPI bt-signal-utils |
Malicious release: Malicious code in quant-backtest-helpers (PyPI) MAL-2026-5152 | Malicious | Not scored | 02 Jun, 2026 | PyPI quant-backtest-helpers |
Malicious release: Malicious code in parsimonius (PyPI) MAL-2026-5151 | Malicious | Not scored | 02 Jun, 2026 | PyPI parsimonius |
Malicious release: Malicious code in imgmatrix-analysis (PyPI) MAL-2026-5123 | Malicious | Not scored | 01 Jun, 2026 | PyPI imgmatrix-analysis |
Malicious release: Malicious code in redteam-qxz7-utils (PyPI) MAL-2026-5120 | Malicious | Not scored | 01 Jun, 2026 | PyPI redteam-qxz7-utils |
Malicious release: Malicious code in discord-massban (PyPI) MAL-2026-5099 | Malicious | Not scored | 31 May, 2026 | PyPI discord-massban |
Malicious release: Malicious code in obfuscation (PyPI) MAL-2026-5100 | Malicious | Not scored | 31 May, 2026 | PyPI obfuscation |
Malicious release: Malicious code in cscc-glass-house (PyPI) MAL-2026-5096 | Malicious | Not scored | 31 May, 2026 | PyPI cscc-glass-house |
Malicious release: Malicious code in hell-cipher (PyPI) MAL-2026-5094 | Malicious | Not scored | 31 May, 2026 | PyPI hell-cipher |
Malicious release: Malicious code in h4xupdate (PyPI) MAL-2026-5093 | Malicious | Not scored | 31 May, 2026 | PyPI h4xupdate |
Malicious release: Malicious code in discord-ban (PyPI) MAL-2026-5091 | Malicious | Not scored | 30 May, 2026 | PyPI discord-ban |
Malicious release: Malicious code in neuralforge-ml (PyPI) MAL-2026-5090 | Malicious | Not scored | 30 May, 2026 | PyPI neuralforge-ml |
Malicious release: Malicious code in crypto-helper (PyPI) MAL-2026-5088 | Malicious | Not scored | 30 May, 2026 | PyPI crypto-helper |
Malicious release: Malicious code in cryptolock (PyPI) MAL-2026-5089 | Malicious | Not scored | 30 May, 2026 | PyPI cryptolock |
Malicious release: Malicious code in polymarket-data (PyPI) MAL-2026-5086 | Malicious | Not scored | 30 May, 2026 | PyPI polymarket-data |
Malicious release: Malicious code in modulebuild3240234t (PyPI) MAL-2026-5029 | Malicious | Not scored | 29 May, 2026 | PyPI modulebuild3240234t |
Malicious release: Malicious code in lib-1779997093-yjeeqn (PyPI) MAL-2026-4861 | Malicious | Not scored | 28 May, 2026 | PyPI lib-1779997093-yjeeqn |
Malicious release: Malicious code in veloxml-cli (PyPI) MAL-2026-4862 | Malicious | Not scored | 28 May, 2026 | PyPI veloxml-cli |
Malicious release: Malicious code in telethon-pro-safe (PyPI) MAL-2026-4859 | Malicious | Not scored | 28 May, 2026 | PyPI telethon-pro-safe |
Malicious release: Malicious code in my-test-package-2025-xyz (PyPI) MAL-2026-4837 | Malicious | Not scored | 28 May, 2026 | PyPI my-test-package-2025-xyz |
Malicious release: Malicious code in rogiant-install (PyPI) MAL-2026-4835 | Malicious | Not scored | 27 May, 2026 | PyPI rogiant-install |
Malicious release: Malicious code in quatres (PyPI) MAL-2026-4829 | Malicious | Not scored | 27 May, 2026 | PyPI quatres |
Malicious release: Malicious code in hmacsync (PyPI) MAL-2026-4828 | Malicious | Not scored | 26 May, 2026 | PyPI hmacsync |
Malicious release: Malicious code in datapipe-util (PyPI) MAL-2026-4820 | Malicious | Not scored | 26 May, 2026 | PyPI datapipe-util |
Malicious release: Malicious code in vectordb-engine (PyPI) MAL-2026-4814 | Malicious | Not scored | 26 May, 2026 | PyPI vectordb-engine |
Malicious release: Malicious code in baidubsrc (PyPI) MAL-2026-4809 | Malicious | Not scored | 26 May, 2026 | PyPI baidubsrc |
Malicious release: Malicious code in docontrol-mcp (PyPI) MAL-2026-4811 | Malicious | Not scored | 26 May, 2026 | PyPI docontrol-mcp |
Malicious release: Malicious code in binproto (PyPI) MAL-2026-4810 | Malicious | Not scored | 26 May, 2026 | PyPI binproto |
Malicious release: Malicious code in m-at-star-tools (PyPI) MAL-2026-4812 | Malicious | Not scored | 26 May, 2026 | PyPI m-at-star-tools |
Malicious release: Malicious code in helu (PyPI) MAL-2026-4357 | Malicious | Not scored | 26 May, 2026 | PyPI helu |
Malicious release: Malicious code in mistral-search-toolkit (PyPI) MAL-2026-4358 | Malicious | Not scored | 26 May, 2026 | PyPI mistral-search-toolkit |
Malicious release: Malicious code in mistral-workflows-plugins-webhook (PyPI) MAL-2026-4355 | Malicious | Not scored | 26 May, 2026 | PyPI mistral-workflows-plugins-webhook |
Malicious release: Malicious code in mistral-workflows-plugins-mistralai (PyPI) MAL-2026-4354 | Malicious | Not scored | 26 May, 2026 | PyPI mistral-workflows-plugins-mistralai |
Malicious release: Malicious code in mistral-workflows (PyPI) MAL-2026-4353 | Malicious | Not scored | 26 May, 2026 | PyPI mistral-workflows |
Malicious release: Malicious code in xct-x-ayoub (PyPI) MAL-2026-4777 | Malicious | Not scored | 26 May, 2026 | PyPI xct-x-ayoub |
Malicious release: Malicious code in spip-pth-demo (PyPI) MAL-2026-4770 | Malicious | Not scored | 25 May, 2026 | PyPI spip-pth-demo |
Malicious release: Malicious code in pylogkt (PyPI) MAL-2026-4291 | Malicious | Not scored | 25 May, 2026 | PyPI pylogkt |
Malicious release: Malicious code in polymarket-data-fetcher (PyPI) MAL-2026-4286 | Malicious | Not scored | 24 May, 2026 | PyPI polymarket-data-fetcher |
Malicious release: Malicious code in polydata-analytics (PyPI) MAL-2026-4285 | Malicious | Not scored | 24 May, 2026 | PyPI polydata-analytics |
Malicious release: Malicious code in whatsfly-labfox (PyPI) MAL-2026-4776 | Malicious | Not scored | 24 May, 2026 | PyPI whatsfly-labfox |
Malicious release: Malicious code in env-loader-cli (PyPI) MAL-2026-4272 | Malicious | Not scored | 24 May, 2026 | PyPI env-loader-cli |
Malicious release: Malicious code in data-pipeline-check (PyPI) MAL-2026-4271 | Malicious | Not scored | 24 May, 2026 | PyPI data-pipeline-check |
Malicious release: Malicious code in git-config-sync (PyPI) MAL-2026-4273 | Malicious | Not scored | 24 May, 2026 | PyPI git-config-sync |
Malicious release: Malicious code in mistral-evals (PyPI) MAL-2026-4269 | Malicious | Not scored | 23 May, 2026 | PyPI mistral-evals |
Malicious release: Malicious code in solidity-build-guard (PyPI) MAL-2026-4262 | Malicious | Not scored | 22 May, 2026 | PyPI solidity-build-guard |
Malicious release: Malicious code in defi-risk-scanner (PyPI) MAL-2026-4260 | Malicious | Not scored | 22 May, 2026 | PyPI defi-risk-scanner |
Malicious release: Malicious code in eth-security-auditor (PyPI) MAL-2026-4261 | Malicious | Not scored | 22 May, 2026 | PyPI eth-security-auditor |
Malicious release: Malicious code in cryptowallet-safety (PyPI) MAL-2026-4259 | Malicious | Not scored | 22 May, 2026 | PyPI cryptowallet-safety |
Malicious release: Malicious code in ml2000 (PyPI) MAL-2026-4756 | Malicious | Not scored | 22 May, 2026 | PyPI ml2000 |