Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in glassbeakasr (PyPI) MAL-2026-17914 | Malicious | Not scored | 12 days ago | PyPI glassbeakasr |
Malicious release: Malicious code in emberlytts (PyPI) MAL-2026-17913 | Malicious | Not scored | 12 days ago | PyPI emberlytts |
Malicious release: Malicious code in quasitonnts (PyPI) MAL-2026-17917 | Malicious | Not scored | 12 days ago | PyPI quasitonnts |
Malicious release: Malicious code in ukraine69 (PyPI) MAL-2026-17919 | Malicious | Not scored | 12 days ago | PyPI ukraine69 |
Malicious release: Malicious code in itsa-react-maskedinput (npm) GHSA-hhr5-rjw6-9hr5, MAL-2026-17911 | Malicious | Not scored | 13 days ago | npm itsa-react-maskedinput |
Malicious release: Malicious code in itsa-react-focuscontainer (npm) GHSA-8c34-p746-v5rq, MAL-2026-17910 | Malicious | Not scored | 13 days ago | npm itsa-react-focuscontainer |
Malicious release: Malicious code in @beloved-lenora/opencode-orchestrator (npm) GHSA-7wq2-8pc2-wm26, MAL-2026-17905 | Malicious | Not scored | 13 days ago | npm @beloved-lenora/opencode-orchestrator |
Malicious release: Malicious code in @beloved-lenora/opencode-shared-rpc (npm) GHSA-8c9g-fwgq-rqq5, MAL-2026-17906 | Malicious | Not scored | 13 days ago | npm @beloved-lenora/opencode-shared-rpc |
Malicious release: Malicious code in @beloved-lenora/opencode-todo (npm) GHSA-9rjq-6mhc-46c5, MAL-2026-17909 | Malicious | Not scored | 13 days ago | npm @beloved-lenora/opencode-todo |
Malicious release: Malicious code in @beloved-lenora/opencode-goal (npm) GHSA-c78h-wwhq-g6j8, MAL-2026-17904 | Malicious | Not scored | 13 days ago | npm @beloved-lenora/opencode-goal |
Malicious release: Malicious code in @beloved-lenora/opencode-stats (npm) GHSA-f4h2-68pg-ffhj, MAL-2026-17908 | Malicious | Not scored | 13 days ago | npm @beloved-lenora/opencode-stats |
Malicious release: Malicious code in @beloved-lenora/opencode-shell-guard (npm) GHSA-pm76-w63j-7j29, MAL-2026-17907 | Malicious | Not scored | 13 days ago | npm @beloved-lenora/opencode-shell-guard |
Malicious release: Malicious code in @beloved-lenora/opencode-btw (npm) GHSA-xv54-6gmc-3xph, MAL-2026-17903 | Malicious | Not scored | 13 days ago | npm @beloved-lenora/opencode-btw |
Malicious release: Malicious code in pyyi (PyPI) MAL-2026-17866 | Malicious | Not scored | 13 days ago | PyPI pyyi |
Malicious release: Malicious code in @xatancchii/natabaileys (npm) GHSA-cgq9-cff6-pf33, MAL-2026-17901 | Malicious | Not scored | 13 days ago | npm @xatancchii/natabaileys |
Malicious release: Malicious code in parxleys (npm) GHSA-rg3c-8x72-6pmc, MAL-2026-17902 | Malicious | Not scored | 13 days ago | npm parxleys |
Malicious release: Malicious code in marocolor (PyPI) MAL-2026-17900 | Malicious | Not scored | 13 days ago | PyPI marocolor |
Malicious release: Malicious code in @flexmr/survey-conversation (npm) GHSA-hc8w-gq4q-fr74, MAL-2026-17899 | Malicious | Not scored | 14 days ago | npm @flexmr/survey-conversation |
Malicious release: Malicious code in @flexmr/survey-client (npm) GHSA-rh7q-f888-q36c, MAL-2026-17898 | Malicious | Not scored | 14 days ago | npm @flexmr/survey-client |
Malicious release: Malicious code in fromthehotel-poems (PyPI) MAL-2026-17897 | Malicious | Not scored | 14 days ago | PyPI fromthehotel-poems |
Malicious release: Malicious code in xmd-baileys (npm) GHSA-m3qf-j9rf-pqrh, MAL-2026-17892 | Malicious | Not scored | 14 days ago | npm xmd-baileys |
Malicious release: Malicious code in @developmentyora/baileyss (npm) GHSA-v8xh-mr86-2fpq, MAL-2026-17439 | Malicious | Not scored | 14 days ago | npm @developmentyora/baileyss |
Malicious release: Malicious code in @developmentyora/yorakids (npm) GHSA-xgr5-84p3-qqmf, MAL-2026-17890 | Malicious | Not scored | 14 days ago | npm @developmentyora/yorakids |
Malicious release: Malicious code in asistenyorstore (npm) GHSA-qgh5-36wr-3vvw, MAL-2026-17891 | Malicious | Not scored | 14 days ago | npm asistenyorstore |
Malicious release: Malicious code in @celestial-community/baileys (npm) GHSA-5ghv-64gv-gv29, MAL-2026-17438 | Malicious | Not scored | 14 days ago | npm @celestial-community/baileys |
Malicious release: Malicious code in @apexacc/audit (npm) MAL-2026-17923 | Malicious | Not scored | 14 days ago | npm @apexacc/audit |
Malicious release: Malicious code in proxyrobika (PyPI) MAL-2026-17889 | Malicious | Not scored | 14 days ago | PyPI proxyrobika |
Malicious release: Malicious code in buyerdashboard (npm) MAL-2026-17893 | Malicious | Not scored | 14 days ago | npm buyerdashboard |
Malicious release: Malicious code in xapi-lib (npm) MAL-2026-17896 | Malicious | Not scored | 14 days ago | npm xapi-lib |
Malicious release: Malicious code in web-pixels-manager (npm) MAL-2026-17895 | Malicious | Not scored | 14 days ago | npm web-pixels-manager |
Malicious release: Malicious code in idlive-face-capture-web-development (npm) MAL-2026-17894 | Malicious | Not scored | 14 days ago | npm idlive-face-capture-web-development |
Malicious release: Malicious code in proxy-rubikis (PyPI) MAL-2026-17887 | Malicious | Not scored | 14 days ago | PyPI proxy-rubikis |
Malicious release: Malicious code in py-wormgpt (PyPI) MAL-2026-17886 | Malicious | Not scored | 14 days ago | PyPI py-wormgpt |
Malicious release: Malicious code in proxyrubika (PyPI) MAL-2026-17885 | Malicious | Not scored | 14 days ago | PyPI proxyrubika |
Malicious release: Malicious code in getpubip (PyPI) MAL-2026-17884 | Malicious | Not scored | 14 days ago | PyPI getpubip |
Malicious release: Malicious code in py-worm (PyPI) MAL-2026-17883 | Malicious | Not scored | 15 days ago | PyPI py-worm |
Malicious release: Malicious code in py-sock2 (PyPI) MAL-2026-17881 | Malicious | Not scored | 15 days ago | PyPI py-sock2 |
Malicious release: Malicious code in tailwindcss-uniform (npm) GHSA-r7f7-6833-rxh9, MAL-2026-17882 | Malicious | Not scored | 15 days ago | npm tailwindcss-uniform |
Malicious release: Malicious code in saeka (PyPI) MAL-2026-17877 | Malicious | Not scored | 15 days ago | PyPI saeka |
Malicious release: Malicious code in @xxxfnbs21/hello-demo (npm) GHSA-hf57-6wg3-343x, MAL-2026-17876 | Malicious | Not scored | 15 days ago | npm @xxxfnbs21/hello-demo |
Malicious release: Malicious code in @flexmr/utils (npm) GHSA-hpc9-fxqh-hhf8, MAL-2026-17888 | Malicious | Not scored | 16 days ago | npm @flexmr/utils |
Malicious release: Malicious code in @kre64/hello-npm-test (npm) GHSA-c43r-xf4h-m548, MAL-2026-17868 | Malicious | Not scored | 16 days ago | npm @kre64/hello-npm-test |
Malicious release: Malicious code in crelic-bqwheel-52f66a3f1d (PyPI) MAL-2026-17863 | Malicious | Not scored | 16 days ago | PyPI crelic-bqwheel-52f66a3f1d |
Malicious release: Malicious code in @flexmr/ui (npm) MAL-2026-17879 | Malicious | Not scored | 16 days ago | npm @flexmr/ui |
Malicious release: Malicious code in fontcase (PyPI) MAL-2026-17862 | Malicious | Not scored | 16 days ago | PyPI fontcase |
Malicious release: Malicious code in sysdiagd (PyPI) MAL-2026-17861 | Malicious | Not scored | 16 days ago | PyPI sysdiagd |
Malicious release: Malicious code in opencode2-darwin-arm64 (npm) GHSA-36mq-frp2-jc97, MAL-2026-17853 | Malicious | Not scored | 16 days ago | npm opencode2-darwin-arm64 |
Malicious release: Malicious code in opencode2-linux-x64 (npm) GHSA-3jr5-3qvm-r54h, MAL-2026-17857 | Malicious | Not scored | 16 days ago | npm opencode2-linux-x64 |
Malicious release: Malicious code in opencode2-windows-x64 (npm) GHSA-6x5j-r784-fx6j, MAL-2026-17860 | Malicious | Not scored | 16 days ago | npm opencode2-windows-x64 |
Malicious release: Malicious code in opencode2 (npm) GHSA-8w65-j2wh-mqv7, MAL-2026-17852 | Malicious | Not scored | 16 days ago | npm opencode2 |