Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in ghazaly (npm) GHSA-g62q-mq3x-765x, MAL-2026-13755 | Malicious | Not scored | 11 Aug, 2026 | npm ghazaly |
Malicious release: Malicious code in fetch-runtime (npm) GHSA-3hqj-592v-g33j, MAL-2026-13763 | Malicious | Not scored | 11 Aug, 2026 | npm fetch-runtime |
Malicious release: Malicious code in lines-columns (npm) GHSA-572q-x4v9-m474, MAL-2026-13765 | Malicious | Not scored | 11 Aug, 2026 | npm lines-columns |
Malicious release: Malicious code in euler-sdk (PyPI) MAL-2026-13730 | Malicious | Not scored | 11 Aug, 2026 | PyPI euler-sdk |
Malicious release: Malicious code in morpho-sdk (PyPI) MAL-2026-13731 | Malicious | Not scored | 11 Aug, 2026 | PyPI morpho-sdk |
Malicious release: Malicious code in dlmm-sdk (PyPI) MAL-2026-13729 | Malicious | Not scored | 11 Aug, 2026 | PyPI dlmm-sdk |
Malicious release: Malicious code in dlmm (PyPI) MAL-2026-13728 | Malicious | Not scored | 11 Aug, 2026 | PyPI dlmm |
Malicious release: Malicious code in @aerodrome-finance/contracts (npm) MAL-2026-13734 | Malicious | Not scored | 11 Aug, 2026 | npm @aerodrome-finance/contracts |
Malicious release: Malicious code in @aerodrome-finance/slipstream (npm) MAL-2026-13735 | Malicious | Not scored | 11 Aug, 2026 | npm @aerodrome-finance/slipstream |
Malicious release: Malicious code in ethereum-vault-connector (npm) MAL-2026-13739 | Malicious | Not scored | 11 Aug, 2026 | npm ethereum-vault-connector |
Malicious release: Malicious code in @telekom-ods/react-ui-kit (npm) MAL-2026-13770 | Malicious | Not scored | 11 Aug, 2026 | npm @telekom-ods/react-ui-kit |
Malicious release: Malicious code in boring-vault (npm) MAL-2026-13771 | Malicious | Not scored | 11 Aug, 2026 | npm boring-vault |
Malicious release: Malicious code in camelot-ammv2-core (npm) MAL-2026-13772 | Malicious | Not scored | 11 Aug, 2026 | npm camelot-ammv2-core |
Malicious release: Malicious code in camelot-ammv2-periphery (npm) MAL-2026-13773 | Malicious | Not scored | 11 Aug, 2026 | npm camelot-ammv2-periphery |
Malicious release: Malicious code in augustdigital-sdk (npm) MAL-2026-13774 | Malicious | Not scored | 11 Aug, 2026 | npm augustdigital-sdk |
Malicious release: Malicious code in permit2 (npm) MAL-2026-13775 | Malicious | Not scored | 11 Aug, 2026 | npm permit2 |
Malicious release: Malicious code in upshift-config (npm) MAL-2026-13776 | Malicious | Not scored | 11 Aug, 2026 | npm upshift-config |
Malicious release: Malicious code in upshift-finance (npm) MAL-2026-13777 | Malicious | Not scored | 11 Aug, 2026 | npm upshift-finance |
Malicious release: Malicious code in my-auto-follow (npm) GHSA-3vq8-fp27-44xm, MAL-2026-13932 | Malicious | Not scored | 10 Aug, 2026 | npm my-auto-follow |
Malicious release: Malicious code in @dreamguyxeon/baileyx (npm) GHSA-94fw-5xp7-q2xq, MAL-2026-13930 | Malicious | Not scored | 10 Aug, 2026 | npm @dreamguyxeon/baileyx |
Malicious release: Malicious code in @dreamguyxeon/libsignal-node (npm) GHSA-x3rc-jwjw-pwv6, MAL-2026-13931 | Malicious | Not scored | 10 Aug, 2026 | npm @dreamguyxeon/libsignal-node |
Malicious release: Malicious code in @dgxeon13/libsignal-node (npm) MAL-2026-13929 | Malicious | Not scored | 10 Aug, 2026 | npm @dgxeon13/libsignal-node |
Malicious release: Malicious code in bigtime (PyPI) MAL-2026-13712 | Malicious | Not scored | 10 Aug, 2026 | PyPI bigtime |
Malicious release: Malicious code in @sqlite-labs/nodesql (npm) GHSA-86f7-qh62-pq7c, MAL-2026-13714 | Malicious | Not scored | 10 Aug, 2026 | npm @sqlite-labs/nodesql |
Malicious release: Malicious code in @sqlite-labs/createsql (npm) GHSA-qwqp-6xhg-jhhv, MAL-2026-13713 | Malicious | Not scored | 10 Aug, 2026 | npm @sqlite-labs/createsql |
Malicious release: Malicious code in plp-contract (PyPI) MAL-2026-13711 | Malicious | Not scored | 10 Aug, 2026 | PyPI plp-contract |
Malicious release: Malicious code in neutrl-contracts (PyPI) MAL-2026-13709 | Malicious | Not scored | 10 Aug, 2026 | PyPI neutrl-contracts |
Malicious release: Malicious code in neutrl-core (PyPI) MAL-2026-13710 | Malicious | Not scored | 10 Aug, 2026 | PyPI neutrl-core |
Malicious release: Malicious code in spoint (npm) GHSA-72h3-pwwh-68cx, MAL-2026-13725 | Malicious | Not scored | 10 Aug, 2026 | npm spoint |
Malicious release: Malicious code in svelte-kit-streak (npm) GHSA-rc4p-g2mc-7w8h, MAL-2026-13726 | Malicious | Not scored | 10 Aug, 2026 | npm svelte-kit-streak |
Malicious release: Malicious code in kit-map-streak (npm) GHSA-7wwj-2mjc-pmxq, MAL-2026-13724 | Malicious | Not scored | 10 Aug, 2026 | npm kit-map-streak |
Malicious release: Malicious code in godot-kit (npm) GHSA-j7m9-r9h4-rfw8, MAL-2026-13723 | Malicious | Not scored | 10 Aug, 2026 | npm godot-kit |
Malicious release: Malicious code in tailwind-elements-ui (npm) GHSA-mmpq-4w6p-rwg2, MAL-2026-13727 | Malicious | Not scored | 10 Aug, 2026 | npm tailwind-elements-ui |
Malicious release: Malicious code in @sqlite-table/sql-creator (npm) GHSA-4hxf-37q3-vfxh, MAL-2026-13718 | Malicious | Not scored | 10 Aug, 2026 | npm @sqlite-table/sql-creator |
Malicious release: Malicious code in @sqlite-prime/nodesql (npm) GHSA-f348-mwv9-7p8h, MAL-2026-13716 | Malicious | Not scored | 10 Aug, 2026 | npm @sqlite-prime/nodesql |
Malicious release: Malicious code in @sqlite-table/schema-generator (npm) GHSA-f86c-mf53-7934, MAL-2026-13717 | Malicious | Not scored | 10 Aug, 2026 | npm @sqlite-table/schema-generator |
Malicious release: Malicious code in fsbrowse (npm) GHSA-pvvh-h7rh-2c7g, MAL-2026-13722 | Malicious | Not scored | 10 Aug, 2026 | npm fsbrowse |
Malicious release: Malicious code in @sqlite-prime/createsql (npm) GHSA-v49c-g99c-qvf9, MAL-2026-13715 | Malicious | Not scored | 10 Aug, 2026 | npm @sqlite-prime/createsql |
Malicious release: Malicious code in commonjs-assertion (npm) GHSA-mfjj-4625-mpvr, MAL-2026-13719 | Malicious | Not scored | 10 Aug, 2026 | npm commonjs-assertion |
Malicious release: Malicious code in eth-library-toolkit (npm) GHSA-mqxc-259c-25w3, MAL-2026-13720 | Malicious | Not scored | 10 Aug, 2026 | npm eth-library-toolkit |
Malicious release: Malicious code in eth-library-utils (npm) GHSA-rp49-3975-7q6c, MAL-2026-13721 | Malicious | Not scored | 10 Aug, 2026 | npm eth-library-utils |
Malicious release: Malicious code in polymarket-stake-mathss (npm) MAL-2026-13707 | Malicious | Not scored | 10 Aug, 2026 | npm polymarket-stake-mathss |
Malicious release: Malicious code in xerohub-discord-voice (npm) MAL-2026-13708 | Malicious | Not scored | 10 Aug, 2026 | npm xerohub-discord-voice |
Malicious release: Malicious code in neverthrow-js (npm) MAL-2026-13706 | Malicious | Not scored | 10 Aug, 2026 | npm neverthrow-js |
Malicious release: Malicious code in chai-as-format (npm) MAL-2026-13701 | Malicious | Not scored | 10 Aug, 2026 | npm chai-as-format |
Malicious release: Malicious code in chai-as-promised-plus (npm) MAL-2026-13703 | Malicious | Not scored | 10 Aug, 2026 | npm chai-as-promised-plus |
Malicious release: Malicious code in chai-as-deployer (npm) GHSA-6q3r-v92v-89p4, GHSA-7qqp-m577-rp2w, MAL-2026-13700, SNYK-JS-CHAIASDEPLOYER-18609744 | Malicious | Not scored | 10 Aug, 2026 | npm chai-as-deployer |
Malicious release: Malicious code in chai-as-bench (npm) MAL-2026-13699 | Malicious | Not scored | 10 Aug, 2026 | npm chai-as-bench |
Malicious release: Malicious code in chai-as-map (npm) MAL-2026-13702 | Malicious | Not scored | 10 Aug, 2026 | npm chai-as-map |
Malicious release: Malicious code in chai-tracker (npm) GHSA-xvr2-rmx5-mrv3, MAL-2026-13704 | Malicious | Not scored | 10 Aug, 2026 | npm chai-tracker |