Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in auclean (PyPI) MAL-2026-16410 | Malicious | Not scored | 22 Sep, 2026 | PyPI auclean |
Malicious release: Malicious code in snap-queue (PyPI) MAL-2026-16408 | Malicious | Not scored | 22 Sep, 2026 | PyPI snap-queue |
Malicious release: Malicious code in poly-check-b (PyPI) MAL-2026-16407 | Malicious | Not scored | 22 Sep, 2026 | PyPI poly-check-b |
Malicious release: Malicious code in crypto-trader-py (PyPI) MAL-2026-16406 | Malicious | Not scored | 22 Sep, 2026 | PyPI crypto-trader-py |
Malicious release: Malicious code in cloushaar-poc-exfil-91827 (PyPI) MAL-2026-16377 | Malicious | Not scored | 22 Sep, 2026 | PyPI cloushaar-poc-exfil-91827 |
Malicious release: Malicious code in pullgetsage (PyPI) MAL-2026-16366 | Malicious | Not scored | 21 Sep, 2026 | PyPI pullgetsage |
Malicious release: Malicious code in starlette-healthchecks (PyPI) MAL-2026-16356 | Malicious | Not scored | 21 Sep, 2026 | PyPI starlette-healthchecks |
Malicious release: Malicious code in rrs (PyPI) MAL-2026-16346 | Malicious | Not scored | 21 Sep, 2026 | PyPI rrs |
Malicious release: Malicious code in urc (PyPI) MAL-2026-16298 | Malicious | Not scored | 19 Sep, 2026 | PyPI urc |
Malicious release: Malicious code in py-venv-doctor (PyPI) MAL-2026-16296 | Malicious | Not scored | 18 Sep, 2026 | PyPI py-venv-doctor |
Malicious release: Malicious code in requests-auroras (PyPI) MAL-2026-16274 | Malicious | Not scored | 17 Sep, 2026 | PyPI requests-auroras |
Malicious release: Malicious code in requests-triwes (PyPI) MAL-2026-16275 | Malicious | Not scored | 17 Sep, 2026 | PyPI requests-triwes |
Malicious release: Malicious code in requests-asetwe (PyPI) MAL-2026-16269 | Malicious | Not scored | 17 Sep, 2026 | PyPI requests-asetwe |
Malicious release: Malicious code in index-forum (PyPI) MAL-2026-16268 | Malicious | Not scored | 17 Sep, 2026 | PyPI index-forum |
Malicious release: Malicious code in pyjstat-smooth (PyPI) MAL-2026-16267 | Malicious | Not scored | 17 Sep, 2026 | PyPI pyjstat-smooth |
Malicious release: Malicious code in aiosendletter (PyPI) MAL-2026-16264 | Malicious | Not scored | 17 Sep, 2026 | PyPI aiosendletter |
Malicious release: Malicious code in marketing-mcp (PyPI) MAL-2026-16250 | Malicious | Not scored | 17 Sep, 2026 | PyPI marketing-mcp |
Malicious release: Malicious code in trongappy (PyPI) MAL-2026-16242 | Malicious | Not scored | 16 Sep, 2026 | PyPI trongappy |
Malicious release: Malicious code in rak-lab-yoav-orca-zrktd2cp5hjmo4x7 (PyPI) MAL-2026-16241 | Malicious | Not scored | 16 Sep, 2026 | PyPI rak-lab-yoav-orca-zrktd2cp5hjmo4x7 |
Malicious release: Malicious code in praetorian-mind-rce-test-2026 (PyPI) MAL-2026-16240 | Malicious | Not scored | 16 Sep, 2026 | PyPI praetorian-mind-rce-test-2026 |
Malicious release: Malicious code in licloud (PyPI) MAL-2026-16219 | Malicious | Not scored | 16 Sep, 2026 | PyPI licloud |
Malicious release: Malicious code in cli-anything-ai-market (PyPI) MAL-2026-16212 | Malicious | Not scored | 16 Sep, 2026 | PyPI cli-anything-ai-market |
Malicious release: Malicious code in faiss-cpu-avx512 (PyPI) MAL-2026-16203 | Malicious | Not scored | 14 Sep, 2026 | PyPI faiss-cpu-avx512 |
Malicious release: Malicious code in chroma-client (PyPI) MAL-2026-16143 | Malicious | Not scored | 13 Sep, 2026 | PyPI chroma-client |
Malicious release: Malicious code in python-fork (PyPI) MAL-2026-16142 | Malicious | Not scored | 12 Sep, 2026 | PyPI python-fork |
Malicious release: Malicious code in platform-telemetry-client (PyPI) MAL-2026-16141 | Malicious | Not scored | 11 Sep, 2026 | PyPI platform-telemetry-client |
Malicious release: Malicious code in langgrap (PyPI) MAL-2026-16133 | Malicious | Not scored | 11 Sep, 2026 | PyPI langgrap |
Malicious release: Malicious code in transfomers (PyPI) MAL-2026-16136 | Malicious | Not scored | 11 Sep, 2026 | PyPI transfomers |
Malicious release: Malicious code in ollamaa (PyPI) MAL-2026-16134 | Malicious | Not scored | 11 Sep, 2026 | PyPI ollamaa |
Malicious release: Malicious code in openaii (PyPI) MAL-2026-16135 | Malicious | Not scored | 11 Sep, 2026 | PyPI openaii |
Malicious release: Malicious code in aitextutils-py (PyPI) MAL-2026-16131 | Malicious | Not scored | 11 Sep, 2026 | PyPI aitextutils-py |
Malicious release: Malicious code in aitextkit-py (PyPI) MAL-2026-16130 | Malicious | Not scored | 11 Sep, 2026 | PyPI aitextkit-py |
Malicious release: Malicious code in pymem-win (PyPI) MAL-2026-16128 | Malicious | Not scored | 11 Sep, 2026 | PyPI pymem-win |
Malicious release: Malicious code in eth-account-web3 (PyPI) MAL-2026-16127 | Malicious | Not scored | 11 Sep, 2026 | PyPI eth-account-web3 |
Malicious release: Malicious code in web3-eth-account (PyPI) MAL-2026-16129 | Malicious | Not scored | 11 Sep, 2026 | PyPI web3-eth-account |
Malicious release: Malicious code in lucy-python-script-2030 (PyPI) MAL-2026-16125 | Malicious | Not scored | 10 Sep, 2026 | PyPI lucy-python-script-2030 |
Malicious release: Malicious code in pylever (PyPI) MAL-2026-16122 | Malicious | Not scored | 10 Sep, 2026 | PyPI pylever |
Malicious release: Malicious code in bq-sdist-probe-vrp (PyPI) MAL-2026-16099 | Malicious | Not scored | 09 Sep, 2026 | PyPI bq-sdist-probe-vrp |
Malicious release: Malicious code in bq-build-probe-vrp-2026 (PyPI) MAL-2026-16098 | Malicious | Not scored | 09 Sep, 2026 | PyPI bq-build-probe-vrp-2026 |
Malicious release: Malicious code in websetup (PyPI) MAL-2026-16121 | Malicious | Not scored | 09 Sep, 2026 | PyPI websetup |
Malicious release: Malicious code in databricks-webapp-navigation-homepage (PyPI) MAL-2026-16080 | Malicious | Not scored | 09 Sep, 2026 | PyPI databricks-webapp-navigation-homepage |
Malicious release: Malicious code in telegram-helper (PyPI) MAL-2026-16017 | Malicious | Not scored | 07 Sep, 2026 | PyPI telegram-helper |
Malicious release: Malicious code in cv-train (PyPI) MAL-2026-16016 | Malicious | Not scored | 07 Sep, 2026 | PyPI cv-train |
Malicious release: Malicious code in dac-tools (PyPI) MAL-2026-15938 | Malicious | Not scored | 06 Sep, 2026 | PyPI dac-tools |
Malicious release: Malicious code in minecraftmodes (PyPI) MAL-2026-15937 | Malicious | Not scored | 06 Sep, 2026 | PyPI minecraftmodes |
Malicious release: Malicious code in trongridew (PyPI) MAL-2026-15936 | Malicious | Not scored | 05 Sep, 2026 | PyPI trongridew |
Malicious release: Malicious code in proxycer (PyPI) MAL-2026-15935 | Malicious | Not scored | 05 Sep, 2026 | PyPI proxycer |
Malicious release: Malicious code in dbt-sa-cli (PyPI) MAL-2026-15934 | Malicious | Not scored | 05 Sep, 2026 | PyPI dbt-sa-cli |
Malicious release: Malicious code in houdus (PyPI) MAL-2026-15933 | Malicious | Not scored | 04 Sep, 2026 | PyPI houdus |
Malicious release: Malicious code in chartkit-core (PyPI) MAL-2026-15932 | Malicious | Not scored | 04 Sep, 2026 | PyPI chartkit-core |