Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in ctf-q21-empire-tmp-bw134349 (PyPI) MAL-2025-41650 | Malicious | Not scored | 28 Aug, 2025 | PyPI ctf-q21-empire-tmp-bw134349 |
Malicious release: Malicious code in ctf-q21-empire-tmp-bw126916 (PyPI) MAL-2025-41646 | Malicious | Not scored | 28 Aug, 2025 | PyPI ctf-q21-empire-tmp-bw126916 |
Malicious release: Malicious code in ctf-q21-empire-tmp-bw134345 (PyPI) MAL-2025-41647 | Malicious | Not scored | 28 Aug, 2025 | PyPI ctf-q21-empire-tmp-bw134345 |
Malicious release: Malicious code in ctf-q21-empire-tmp-bw121116 (PyPI) MAL-2025-41644 | Malicious | Not scored | 28 Aug, 2025 | PyPI ctf-q21-empire-tmp-bw121116 |
Malicious release: Malicious code in ctf-q21-empire-tmp-bw126616 (PyPI) MAL-2025-41645 | Malicious | Not scored | 28 Aug, 2025 | PyPI ctf-q21-empire-tmp-bw126616 |
Malicious release: Malicious code in crowdnav (PyPI) MAL-2025-41642 | Malicious | Not scored | 28 Aug, 2025 | PyPI crowdnav |
Malicious release: Malicious code in ctf-bakayaro (PyPI) MAL-2025-41643 | Malicious | Not scored | 28 Aug, 2025 | PyPI ctf-bakayaro |
Malicious release: Malicious code in config4py (PyPI) MAL-2025-41640 | Malicious | Not scored | 28 Aug, 2025 | PyPI config4py |
Malicious release: Malicious code in continuoustimemarkovmodel (PyPI) MAL-2025-41641 | Malicious | Not scored | 28 Aug, 2025 | PyPI continuoustimemarkovmodel |
Malicious release: Malicious code in conda-package-handling111 (PyPI) MAL-2025-41639 | Malicious | Not scored | 28 Aug, 2025 | PyPI conda-package-handling111 |
Malicious release: Malicious code in certufi (PyPI) MAL-2025-41637 | Malicious | Not scored | 28 Aug, 2025 | PyPI certufi |
Malicious release: Malicious code in change-user-agent (PyPI) MAL-2025-41638 | Malicious | Not scored | 28 Aug, 2025 | PyPI change-user-agent |
Malicious release: Malicious code in certifiq (PyPI) MAL-2025-41634 | Malicious | Not scored | 28 Aug, 2025 | PyPI certifiq |
Malicious release: Malicious code in certifiy (PyPI) MAL-2025-41635 | Malicious | Not scored | 28 Aug, 2025 | PyPI certifiy |
Malicious release: Malicious code in certifo (PyPI) MAL-2025-41636 | Malicious | Not scored | 28 Aug, 2025 | PyPI certifo |
Malicious release: Malicious code in certifii (PyPI) MAL-2025-41632 | Malicious | Not scored | 28 Aug, 2025 | PyPI certifii |
Malicious release: Malicious code in certifij (PyPI) MAL-2025-41633 | Malicious | Not scored | 28 Aug, 2025 | PyPI certifij |
Malicious release: Malicious code in ceritfi (PyPI) MAL-2025-41629 | Malicious | Not scored | 28 Aug, 2025 | PyPI ceritfi |
Malicious release: Malicious code in certiffi (PyPI) MAL-2025-41630 | Malicious | Not scored | 28 Aug, 2025 | PyPI certiffi |
Malicious release: Malicious code in certifia (PyPI) MAL-2025-41631 | Malicious | Not scored | 28 Aug, 2025 | PyPI certifia |
Malicious release: Malicious code in bp2hookutil (PyPI) MAL-2025-41627 | Malicious | Not scored | 28 Aug, 2025 | PyPI bp2hookutil |
Malicious release: Malicious code in celery-routr (PyPI) MAL-2025-41628 | Malicious | Not scored | 28 Aug, 2025 | PyPI celery-routr |
Malicious release: Malicious code in botclient (PyPI) MAL-2025-41626 | Malicious | Not scored | 28 Aug, 2025 | PyPI botclient |
Malicious release: Malicious code in beautifulsoup-new (PyPI) MAL-2025-41623 | Malicious | Not scored | 28 Aug, 2025 | PyPI beautifulsoup-new |
Malicious release: Malicious code in beautifulsoup4-new (PyPI) MAL-2025-41624 | Malicious | Not scored | 28 Aug, 2025 | PyPI beautifulsoup4-new |
Malicious release: Malicious code in azure-iothub-service-client (PyPI) MAL-2025-41622 | Malicious | Not scored | 28 Aug, 2025 | PyPI azure-iothub-service-client |
Malicious release: Malicious code in airtime-media-monitor (PyPI) MAL-2025-41619 | Malicious | Not scored | 28 Aug, 2025 | PyPI airtime-media-monitor |
Malicious release: Malicious code in apple-tv-new (PyPI) MAL-2025-41620 | Malicious | Not scored | 28 Aug, 2025 | PyPI apple-tv-new |
Malicious release: Malicious code in aiohttp-proxies-fork (PyPI) MAL-2025-41617 | Malicious | Not scored | 28 Aug, 2025 | PyPI aiohttp-proxies-fork |
Malicious release: Malicious code in aiohttp-proxies-forked (PyPI) MAL-2025-41618 | Malicious | Not scored | 28 Aug, 2025 | PyPI aiohttp-proxies-forked |
Malicious release: Malicious code in aiohttp-proxies-connector (PyPI) MAL-2025-41616 | Malicious | Not scored | 28 Aug, 2025 | PyPI aiohttp-proxies-connector |
Malicious release: Malicious code in abilityrequests (PyPI) MAL-2025-41615 | Malicious | Not scored | 28 Aug, 2025 | PyPI abilityrequests |
Malicious release: Malicious code in python-datetil (PyPI) MAL-2025-47798 | Malicious | Not scored | 28 Aug, 2025 | PyPI python-datetil |
The PCRE2 library is a set of C functions that implement regular expression pattern matching. In version 10.45, a heap-buffer-overflow read vulnerability exists in the PCRE2 regular expression matching engine, specifically within the handling of the (*scs:...) (Scan SubString) verb when combined wit CVE-2025-58050, GHSA-c2gv-xgf5-5cc2, PYSEC-2025-259 | Medium | 0.9% | 27 Aug, 2025 | PyPI pcre2 |
Malicious release: Malicious code in python-dateitil (PyPI) MAL-2025-47797 | Malicious | Not scored | 27 Aug, 2025 | PyPI python-dateitil |
Picklescan is missing detection when calling built-in python library asyncio.unix_events._UnixSubprocessTransport._start CVE-2025-71364, GHSA-q77w-mwjj-7mqx | High | 0.7% | 26 Aug, 2025 | PyPI picklescan |
Picklescan is missing detection when calling built-in python cProfile.run CVE-2025-71363, GHSA-49gj-c84q-6qm9 | High | 0.7% | 26 Aug, 2025 | PyPI picklescan |
Picklescan is missing detection when calling built-in Python cProfile.runctx CVE-2025-71378, GHSA-9w88-8rmg-7g2p, PYSEC-2026-247 | High | 0.5% | 26 Aug, 2025 | PyPI picklescan |
Picklescan is missing detection when calling built-in python doctest.debug_script CVE-2025-71368, GHSA-fqq6-7vqf-w3fg | High | 0.8% | 26 Aug, 2025 | PyPI picklescan |
Picklescan is missing detection when calling built-in python idlelib.pyshell.ModifiedInterpreter.runcode CVE-2025-71340, GHSA-3gf5-cxq9-w223 | High | 0.4% | 26 Aug, 2025 | PyPI picklescan |
Picklescan is missing detection when calling built-in python idlelib.pyshell.ModifiedInterpreter.runcommand CVE-2025-71357, GHSA-j343-8v2j-ff7w, PYSEC-2026-246 | High | 0.4% | 26 Aug, 2025 | PyPI picklescan |
Picklescan is missing detection when calling built-in python idlelib.run.Executive.runcode CVE-2025-71342, GHSA-m869-42cg-3xwr | High | 0.5% | 26 Aug, 2025 | PyPI picklescan |
Picklescan is missing detection when calling built-in python lib2to3.pgen2.pgen.ParserGenerator.make_label CVE-2025-71343, GHSA-p9w7-82w4-7q8m | High | 0.4% | 26 Aug, 2025 | PyPI picklescan |
Picklescan is missing detection when calling built-in python ensurepip._run_pip CVE-2025-71344, GHSA-xp4f-hrf8-rxw7, PYSEC-2026-1792 | High | 0.5% | 26 Aug, 2025 | PyPI picklescan |
Picklescan is missing detection when calling pytorch function torch.utils.bottleneck.__main__.run_autograd_prof CVE-2025-71345, GHSA-4whj-rm5r-c2v8 | High | 0.5% | 26 Aug, 2025 | PyPI picklescan |
Picklescan has a missing detection when calling built-in python library idlelib.calltip.get_entity CVE-2025-71360, GHSA-9xph-j2h6-g47v | High | 0.4% | 26 Aug, 2025 | PyPI picklescan |
Picklescan has a missing detection when calling built-in python idlelib.calltip.Calltip CVE-2025-71361, GHSA-8r4j-24qv-fmq9, PYSEC-2026-1786 | High | 0.4% | 26 Aug, 2025 | PyPI picklescan |
Picklescan has a missing detection when calling built-in python code.InteractiveInterpreter CVE-2025-71371, GHSA-cj3c-v495-4xqh | High | 0.6% | 26 Aug, 2025 | PyPI picklescan |
Picklescan has a missing detection when calling built-in python idlelib.autocomplete.AutoComplete.fetch_completions CVE-2025-71376, GHSA-7cq8-mj8x-j263, PYSEC-2026-4133 | High | 0.4% | 26 Aug, 2025 | PyPI picklescan |
Picklescan has a missing detection when calling built-in python idlelib.autocomplete.AutoComplete.get_entity CVE-2025-71358, GHSA-6w4w-5w54-rjvr, PYSEC-2026-1784 | High | 0.3% | 26 Aug, 2025 | PyPI picklescan |