Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in etheremu.rb (RubyGems) MAL-2026-17600 | Malicious | Not scored | 29 days ago | RubyGems etheremu.rb |
Malicious release: Malicious code in kecack (RubyGems) MAL-2026-17603 | Malicious | Not scored | 29 days ago | RubyGems kecack |
Malicious release: Malicious code in bitciin (RubyGems) MAL-2026-17582 | Malicious | Not scored | 29 days ago | RubyGems bitciin |
Malicious release: Malicious code in lightinng-invoice (RubyGems) MAL-2026-17607 | Malicious | Not scored | 29 days ago | RubyGems lightinng-invoice |
Malicious release: Malicious code in crypti-toolbox (RubyGems) MAL-2026-17593 | Malicious | Not scored | 29 days ago | RubyGems crypti-toolbox |
Malicious release: Malicious code in bitcion (RubyGems) MAL-2026-17583 | Malicious | Not scored | 29 days ago | RubyGems bitcion |
Malicious release: Malicious code in lighthing-invoice (RubyGems) MAL-2026-17606 | Malicious | Not scored | 29 days ago | RubyGems lighthing-invoice |
Malicious release: Malicious code in ethereum-tx-helper (RubyGems) MAL-2026-17601 | Malicious | Not scored | 29 days ago | RubyGems ethereum-tx-helper |
Malicious release: Malicious code in bitcoin-rpc-lite (RubyGems) MAL-2026-17587 | Malicious | Not scored | 29 days ago | RubyGems bitcoin-rpc-lite |
Malicious release: Malicious code in web3-eth-utils (RubyGems) MAL-2026-17616 | Malicious | Not scored | 29 days ago | RubyGems web3-eth-utils |
Malicious release: Malicious code in btc-wallet-tools (RubyGems) MAL-2026-17589 | Malicious | Not scored | 29 days ago | RubyGems btc-wallet-tools |
Malicious release: Malicious code in base58-check-helper (RubyGems) MAL-2026-17580 | Malicious | Not scored | 29 days ago | RubyGems base58-check-helper |
Malicious release: Malicious code in lightning-invoice-utils (RubyGems) MAL-2026-17608 | Malicious | Not scored | 29 days ago | RubyGems lightning-invoice-utils |
Malicious release: Malicious code in utxo-set-utils (RubyGems) MAL-2026-17613 | Malicious | Not scored | 29 days ago | RubyGems utxo-set-utils |
Malicious release: Malicious code in wallet-crypto-utils (RubyGems) MAL-2026-17615 | Malicious | Not scored | 29 days ago | RubyGems wallet-crypto-utils |
Malicious release: Malicious code in blockchain-sync-utils (RubyGems) MAL-2026-17588 | Malicious | Not scored | 29 days ago | RubyGems blockchain-sync-utils |
Malicious release: Malicious code in merkle-proof-lite (RubyGems) MAL-2026-17609 | Malicious | Not scored | 29 days ago | RubyGems merkle-proof-lite |
Malicious release: Malicious code in web3-sign-helper (RubyGems) MAL-2026-17617 | Malicious | Not scored | 29 days ago | RubyGems web3-sign-helper |
Malicious release: Malicious code in electrum-protocol-lite (RubyGems) MAL-2026-17596 | Malicious | Not scored | 29 days ago | RubyGems electrum-protocol-lite |
Malicious release: Malicious code in bitcoin-address-utils (RubyGems) MAL-2026-17586 | Malicious | Not scored | 29 days ago | RubyGems bitcoin-address-utils |
Malicious release: Malicious code in crypto-key-utils (RubyGems) MAL-2026-17594 | Malicious | Not scored | 29 days ago | RubyGems crypto-key-utils |
Malicious release: Malicious code in coinmarket-utils (RubyGems) MAL-2026-17590 | Malicious | Not scored | 29 days ago | RubyGems coinmarket-utils |
Malicious release: Malicious code in hdkey-derive-helper (RubyGems) MAL-2026-17602 | Malicious | Not scored | 29 days ago | RubyGems hdkey-derive-helper |
Malicious release: Malicious code in crypto-mnemonic-tools (RubyGems) MAL-2026-17595 | Malicious | Not scored | 29 days ago | RubyGems crypto-mnemonic-tools |
Malicious release: Malicious code in eth-keystore-utils (RubyGems) MAL-2026-17598 | Malicious | Not scored | 29 days ago | RubyGems eth-keystore-utils |
Malicious release: Malicious code in wallet-backup-tool (RubyGems) MAL-2026-17614 | Malicious | Not scored | 29 days ago | RubyGems wallet-backup-tool |
Malicious release: Malicious code in eth-address-utils (RubyGems) MAL-2026-17597 | Malicious | Not scored | 29 days ago | RubyGems eth-address-utils |
Malicious release: Malicious code in request-guard (RubyGems) MAL-2026-17569 | Malicious | Not scored | 05 Oct, 2026 | RubyGems request-guard |
Malicious release: Malicious code in throttle-requests (RubyGems) MAL-2026-17570 | Malicious | Not scored | 05 Oct, 2026 | RubyGems throttle-requests |
Malicious release: Malicious code in rate-limit-mini (RubyGems) MAL-2026-17567 | Malicious | Not scored | 05 Oct, 2026 | RubyGems rate-limit-mini |
Malicious release: Malicious code in req-throttle-mini (RubyGems) MAL-2026-17568 | Malicious | Not scored | 05 Oct, 2026 | RubyGems req-throttle-mini |
sqlite3-ruby: Use-After-Free in SQLite Aggregate Arguments in Heap-Allocated Argument Array GHSA-mwm8-39rw-8826 | Medium | Not scored | 02 Oct, 2026 | RubyGems sqlite3 |
OpenC3 COSMOS: Authenticated remote code execution via the user-writable config overlay (table definitions, cmd/tlm definitions, and script suites) CVE-2026-77602, GHSA-jjq7-m736-w977 | Critical | Not scored | 23 Sep, 2026 | RubyGems openc3 |
OpenC3 COSMOS: Authenticated OS command injection via the `pypi_url` setting CVE-2026-77601, GHSA-vp3w-52v9-q57f | High | Not scored | 23 Sep, 2026 | RubyGems openc3 |
Malicious release: Malicious code in kerokwis (RubyGems) MAL-2026-16420 | Malicious | Not scored | 22 Sep, 2026 | RubyGems kerokwis |
Malicious release: Malicious code in wurl_show_data (RubyGems) MAL-2026-16466 | Malicious | Not scored | 22 Sep, 2026 | RubyGems wurl_show_data |
Malicious release: Malicious code in no-fun (RubyGems) MAL-2026-16411 | Malicious | Not scored | 22 Sep, 2026 | RubyGems no-fun |
Spree: Broken Access Control in `PATCH /api/v3/store/carts/:id/associate` (IDOR) CVE-2026-94462, GHSA-4825-p4xm-pcf2 | High | Not scored | 22 Sep, 2026 | RubyGems spree_api |
MPXJ: Potential Path Traversal Vulnerability in Primavera P3 PRX and SureTrak STX readers CVE-2026-65829, GHSA-7952-gx68-cjqr, PYSEC-2026-4108 | Medium | 0.4% | 22 Sep, 2026 | Maven net.sf.mpxj:mpxj NuGet MPXJ.Net NuGet net.sf.mpxj NuGet net.sf.mpxj-for-csharp +3 more |
MPXJ: XXE Vulnerability in MerlinReader CVE-2026-61570, GHSA-5vvx-3h34-f3gj, PYSEC-2026-4107 | High | 0.5% | 22 Sep, 2026 | Maven net.sf.mpxj:mpxj NuGet MPXJ.Net NuGet net.sf.mpxj NuGet net.sf.mpxj-for-csharp +3 more |
Malicious release: Malicious code in mega-clean-box (RubyGems) MAL-2026-17152 | Malicious | Not scored | 22 Sep, 2026 | RubyGems mega-clean-box |
Malicious release: Malicious code in burndler (RubyGems) MAL-2026-17151 | Malicious | Not scored | 22 Sep, 2026 | RubyGems burndler |
Malicious release: Malicious code in burmdler (RubyGems) MAL-2026-17149 | Malicious | Not scored | 22 Sep, 2026 | RubyGems burmdler |
Malicious release: Malicious code in burndlef (RubyGems) MAL-2026-17150 | Malicious | Not scored | 22 Sep, 2026 | RubyGems burndlef |
Malicious release: Malicious code in buosndler (RubyGems) MAL-2026-17148 | Malicious | Not scored | 22 Sep, 2026 | RubyGems buosndler |
Malicious release: Malicious code in buonlder (RubyGems) MAL-2026-17147 | Malicious | Not scored | 22 Sep, 2026 | RubyGems buonlder |
Malicious release: Malicious code in buondler (RubyGems) MAL-2026-17146 | Malicious | Not scored | 22 Sep, 2026 | RubyGems buondler |
Malicious release: Malicious code in buomdler (RubyGems) MAL-2026-17144 | Malicious | Not scored | 22 Sep, 2026 | RubyGems buomdler |
Malicious release: Malicious code in buondlef (RubyGems) MAL-2026-17145 | Malicious | Not scored | 22 Sep, 2026 | RubyGems buondlef |
Malicious release: Malicious code in buolder (RubyGems) MAL-2026-17143 | Malicious | Not scored | 22 Sep, 2026 | RubyGems buolder |