Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in wallet-monitor-snap (npm) MAL-2026-13393 | Malicious | Not scored | 06 Aug, 2026 | npm wallet-monitor-snap |
Malicious release: Malicious code in golaaa (npm) MAL-2026-13392 | Malicious | Not scored | 06 Aug, 2026 | npm golaaa |
Malicious release: Malicious code in decapod-common (PyPI) MAL-2026-13386 | Malicious | Not scored | 06 Aug, 2026 | PyPI decapod-common |
Malicious release: Malicious code in @voxepay/checkout (npm) GHSA-qgfh-mjq8-m7wx, MAL-2026-13389 | Malicious | Not scored | 06 Aug, 2026 | npm @voxepay/checkout |
Malicious release: Malicious code in @zahlen/checkout (npm) GHSA-vj9r-9wwp-6cfp, MAL-2026-13391 | Malicious | Not scored | 06 Aug, 2026 | npm @zahlen/checkout |
Malicious release: Malicious code in @simplipayng/checkout (npm) GHSA-cvhm-4vf7-gq9p, MAL-2026-13388 | Malicious | Not scored | 06 Aug, 2026 | npm @simplipayng/checkout |
Malicious release: Malicious code in @afasinatickets/common (npm) GHSA-m2g7-6r7x-29p9, MAL-2026-13387 | Malicious | Not scored | 06 Aug, 2026 | npm @afasinatickets/common |
Malicious release: Malicious code in @xsat10/baileys-xsat (npm) GHSA-fj9m-r2qx-cc39, MAL-2026-13390 | Malicious | Not scored | 06 Aug, 2026 | npm @xsat10/baileys-xsat |
Malicious release: Malicious code in @united-airlines-org/atmos-design-system (npm) MAL-2026-13435 | Malicious | Not scored | 06 Aug, 2026 | npm @united-airlines-org/atmos-design-system |
Malicious release: Malicious code in svelte-mapped-metrics (npm) GHSA-pqjj-j4gr-x575, MAL-2026-13383 | Malicious | Not scored | 05 Aug, 2026 | npm svelte-mapped-metrics |
Malicious release: Malicious code in svelte-mapping-core (npm) GHSA-qq27-fv34-9cm7, MAL-2026-13384 | Malicious | Not scored | 05 Aug, 2026 | npm svelte-mapping-core |
Malicious release: Malicious code in uncrypt (PyPI) MAL-2026-13380 | Malicious | Not scored | 05 Aug, 2026 | PyPI uncrypt |
Malicious release: Malicious code in @chnayser/server (npm) MAL-2026-13374 | Malicious | Not scored | 05 Aug, 2026 | npm @chnayser/server |
Malicious release: Malicious code in claude-remote-agent (npm) MAL-2026-13376 | Malicious | Not scored | 05 Aug, 2026 | npm claude-remote-agent |
Malicious release: Malicious code in ezdiscordbots (npm) MAL-2026-13377 | Malicious | Not scored | 05 Aug, 2026 | npm ezdiscordbots |
Malicious release: Malicious code in npm-dc-dev (npm) MAL-2026-13378 | Malicious | Not scored | 05 Aug, 2026 | npm npm-dc-dev |
Malicious release: Malicious code in app-api-sdk (npm) MAL-2026-13375 | Malicious | Not scored | 05 Aug, 2026 | npm app-api-sdk |
Malicious release: Malicious code in statist-browser-typed-client-sme.rko.tariffs.web (npm) GHSA-4wxq-w9rr-6pcg, MAL-2026-13379 | Malicious | Not scored | 05 Aug, 2026 | npm statist-browser-typed-client-sme.rko.tariffs.web |
Malicious release: Malicious code in llm-interceptor (npm) MAL-2026-13370 | Malicious | Not scored | 05 Aug, 2026 | npm llm-interceptor |
Malicious release: Malicious code in kepler (npm) GHSA-4h56-85v2-4qj4, MAL-2026-13369 | Malicious | Not scored | 05 Aug, 2026 | npm kepler |
Malicious release: Malicious code in multi-acct (npm) MAL-2026-13371 | Malicious | Not scored | 05 Aug, 2026 | npm multi-acct |
Malicious release: Malicious code in express-dever (npm) MAL-2026-13368 | Malicious | Not scored | 05 Aug, 2026 | npm express-dever |
Malicious release: Malicious code in @cliphijack/santaclaude (npm) MAL-2026-13363 | Malicious | Not scored | 05 Aug, 2026 | npm @cliphijack/santaclaude |
Malicious release: Malicious code in @ikbal_fadilah_vanexa01/vanexa-agent (npm) MAL-2026-13364 | Malicious | Not scored | 05 Aug, 2026 | npm @ikbal_fadilah_vanexa01/vanexa-agent |
Malicious release: Malicious code in @stageflight-testbed/a (npm) MAL-2026-13365 | Malicious | Not scored | 05 Aug, 2026 | npm @stageflight-testbed/a |
Malicious release: Malicious code in clawtrl-wallet (npm) MAL-2026-13367 | Malicious | Not scored | 05 Aug, 2026 | npm clawtrl-wallet |
Malicious release: Malicious code in @workoscalif/sudoku (npm) MAL-2026-13366 | Malicious | Not scored | 05 Aug, 2026 | npm @workoscalif/sudoku |
Malicious release: Malicious code in solana-sniper-bot (PyPI) MAL-2026-13373 | Malicious | Not scored | 05 Aug, 2026 | PyPI solana-sniper-bot |
Malicious release: Malicious code in eth-account-wallet (PyPI) MAL-2026-13372 | Malicious | Not scored | 05 Aug, 2026 | PyPI eth-account-wallet |
Malicious release: Malicious code in defi-sdk-py (PyPI) MAL-2026-13361 | Malicious | Not scored | 05 Aug, 2026 | PyPI defi-sdk-py |
Malicious release: Malicious code in mnemonic-py (PyPI) MAL-2026-13362 | Malicious | Not scored | 05 Aug, 2026 | PyPI mnemonic-py |
Malicious release: Malicious code in uzair-rajput-new (npm) MAL-2026-13360 | Malicious | Not scored | 05 Aug, 2026 | npm uzair-rajput-new |
Malicious release: Malicious code in test-dev-config (npm) MAL-2026-13359 | Malicious | Not scored | 05 Aug, 2026 | npm test-dev-config |
Malicious release: Malicious code in app-kst-engine (npm) MAL-2026-13358 | Malicious | Not scored | 05 Aug, 2026 | npm app-kst-engine |
Malicious release: Malicious code in app-hsu-layer (npm) MAL-2026-13357 | Malicious | Not scored | 05 Aug, 2026 | npm app-hsu-layer |
Malicious release: Malicious code in @astralcore/sl-aura (npm) MAL-2026-13355 | Malicious | Not scored | 05 Aug, 2026 | npm @astralcore/sl-aura |
Malicious release: Malicious code in @ohos-ports/codex (npm) MAL-2026-13210 | Malicious | Not scored | 05 Aug, 2026 | npm @ohos-ports/codex |
Malicious release: Malicious code in stellarfixer (npm) MAL-2026-13353 | Malicious | Not scored | 05 Aug, 2026 | npm stellarfixer |
Malicious release: Malicious code in ezfnfix (npm) MAL-2026-13344 | Malicious | Not scored | 05 Aug, 2026 | npm ezfnfix |
Malicious release: Malicious code in encrypt-string-safe (npm) MAL-2026-13342 | Malicious | Not scored | 05 Aug, 2026 | npm encrypt-string-safe |
Malicious release: Malicious code in @guangnao/claude-cli (npm) MAL-2026-13209 | Malicious | Not scored | 05 Aug, 2026 | npm @guangnao/claude-cli |
Malicious release: Malicious code in native-hello-plugin (npm) MAL-2026-13350 | Malicious | Not scored | 05 Aug, 2026 | npm native-hello-plugin |
Malicious release: Malicious code in akamai-sensorv2 (npm) MAL-2026-13217 | Malicious | Not scored | 05 Aug, 2026 | npm akamai-sensorv2 |
Malicious release: Malicious code in akamai-sensorv1 (npm) MAL-2026-13216 | Malicious | Not scored | 05 Aug, 2026 | npm akamai-sensorv1 |
Malicious release: Malicious code in stellar-api-core (npm) MAL-2026-13352 | Malicious | Not scored | 05 Aug, 2026 | npm stellar-api-core |
Malicious release: Malicious code in javas-crypto (npm) MAL-2026-13347 | Malicious | Not scored | 05 Aug, 2026 | npm javas-crypto |
Malicious release: Malicious code in bitcoinjs-wallet (npm) MAL-2026-13258 | Malicious | Not scored | 05 Aug, 2026 | npm bitcoinjs-wallet |
Malicious release: Malicious code in dlab_workshop (npm) MAL-2026-13277 | Malicious | Not scored | 05 Aug, 2026 | npm dlab_workshop |
Malicious release: Malicious code in ethers-signer (npm) MAL-2026-13343 | Malicious | Not scored | 05 Aug, 2026 | npm ethers-signer |
Malicious release: Malicious code in hd-key-generator (npm) MAL-2026-13345 | Malicious | Not scored | 05 Aug, 2026 | npm hd-key-generator |