Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in clerk-next-fix-auth-protection (npm) MAL-2026-11069 | Malicious | Not scored | 24 Jul, 2026 | npm clerk-next-fix-auth-protection |
Malicious release: Malicious code in discordnv (PyPI) MAL-2026-11050 | Malicious | Not scored | 24 Jul, 2026 | PyPI discordnv |
Malicious release: Malicious code in app-data-layer (npm) GHSA-346c-3w9c-8pmh, MAL-2026-11052 | Malicious | Not scored | 24 Jul, 2026 | npm app-data-layer |
Malicious release: Malicious code in app-node-layer (npm) GHSA-4xc7-2jx9-rp5j, MAL-2026-11054 | Malicious | Not scored | 24 Jul, 2026 | npm app-node-layer |
Malicious release: Malicious code in app-data-lts (npm) GHSA-c6xr-m3x3-23fm, MAL-2026-11053 | Malicious | Not scored | 24 Jul, 2026 | npm app-data-lts |
Malicious release: Malicious code in mrmustard (PyPI) MAL-2026-11049 | Malicious | Not scored | 24 Jul, 2026 | PyPI mrmustard |
Malicious release: Malicious code in intel-cicd-repo-infrastructure (PyPI) MAL-2026-11046 | Malicious | Not scored | 24 Jul, 2026 | PyPI intel-cicd-repo-infrastructure |
Malicious release: Malicious code in karpatkit (PyPI) MAL-2026-11048 | Malicious | Not scored | 24 Jul, 2026 | PyPI karpatkit |
Malicious release: Malicious code in karpatkey (PyPI) MAL-2026-11047 | Malicious | Not scored | 24 Jul, 2026 | PyPI karpatkey |
Malicious release: Malicious code in subapp-pkg-util (npm) GHSA-f946-r32q-xrp6, MAL-2026-11045 | Malicious | Not scored | 24 Jul, 2026 | npm subapp-pkg-util |
Malicious release: Malicious code in @daylightqc/date-fmt-lite (npm) MAL-2026-11041 | Malicious | Not scored | 24 Jul, 2026 | npm @daylightqc/date-fmt-lite |
Malicious release: Malicious code in eth-slint (npm) GHSA-xp97-c4c4-7928, MAL-2026-11034 | Malicious | Not scored | 23 Jul, 2026 | npm eth-slint |
Malicious release: Malicious code in govapkg (PyPI) MAL-2026-11031 | Malicious | Not scored | 23 Jul, 2026 | PyPI govapkg |
Malicious release: Malicious code in chai-as-stringify (npm) GHSA-vh7h-h87g-qv6x, MAL-2026-11032 | Malicious | Not scored | 23 Jul, 2026 | npm chai-as-stringify |
Malicious release: Malicious code in yuinpm (npm) GHSA-vpgm-qmgp-w4h4, MAL-2026-11039 | Malicious | Not scored | 23 Jul, 2026 | npm yuinpm |
Malicious release: Malicious code in eth-codergen (npm) GHSA-87w3-vjw9-8h4w, MAL-2026-11033 | Malicious | Not scored | 23 Jul, 2026 | npm eth-codergen |
Malicious release: Malicious code in streak-lib-math (npm) GHSA-c7rv-9j9g-pqh2, MAL-2026-11036 | Malicious | Not scored | 23 Jul, 2026 | npm streak-lib-math |
Malicious release: Malicious code in svelte-streak-metrics (npm) GHSA-fc4x-xfq3-5f35, MAL-2026-11038 | Malicious | Not scored | 23 Jul, 2026 | npm svelte-streak-metrics |
Malicious release: Malicious code in svelte-goal-streak (npm) GHSA-jw9g-wvg5-7rjg, MAL-2026-11037 | Malicious | Not scored | 23 Jul, 2026 | npm svelte-goal-streak |
Malicious release: Malicious code in streak-bucket-lib (npm) GHSA-rg2p-8587-wx3w, MAL-2026-11035 | Malicious | Not scored | 23 Jul, 2026 | npm streak-bucket-lib |
Malicious release: Malicious code in vitest-axios (npm) GHSA-6v5g-7h35-h33q, MAL-2026-11030 | Malicious | Not scored | 23 Jul, 2026 | npm vitest-axios |
Malicious release: Malicious code in fs-extra-core (npm) GHSA-f246-8cf4-26v7, MAL-2026-11027 | Malicious | Not scored | 23 Jul, 2026 | npm fs-extra-core |
Malicious release: Malicious code in create-kumo-project (npm) GHSA-7jg3-v58m-2f3p, MAL-2026-11024 | Malicious | Not scored | 23 Jul, 2026 | npm create-kumo-project |
Malicious release: Malicious code in lychee-norm-cache (npm) GHSA-pj38-6jj4-4x3p, MAL-2026-11029 | Malicious | Not scored | 23 Jul, 2026 | npm lychee-norm-cache |
Malicious release: Malicious code in aio-commerce-lib-app (npm) GHSA-897j-xx2q-x2h9, MAL-2026-11022 | Malicious | Not scored | 23 Jul, 2026 | npm aio-commerce-lib-app |
Malicious release: Malicious code in helix-deploy (npm) GHSA-fhpm-cq57-j289, MAL-2026-11028 | Malicious | Not scored | 23 Jul, 2026 | npm helix-deploy |
Malicious release: Malicious code in da-sc-sdk (npm) GHSA-vxfh-w38r-2g54, MAL-2026-11025 | Malicious | Not scored | 23 Jul, 2026 | npm da-sc-sdk |
Malicious release: Malicious code in ethers-packge (npm) GHSA-67vw-rvv3-mh93, MAL-2026-11026 | Malicious | Not scored | 23 Jul, 2026 | npm ethers-packge |
Malicious release: Malicious code in bs58-88 (npm) GHSA-qj7h-vp7h-8v85, MAL-2026-11023 | Malicious | Not scored | 23 Jul, 2026 | npm bs58-88 |
Malicious release: Malicious code in @bcryptln/bcryptjs (npm) GHSA-qw92-vxcv-397r, MAL-2026-11021 | Malicious | Not scored | 23 Jul, 2026 | npm @bcryptln/bcryptjs |
Malicious release: Malicious code in hardhat-gas-tracker (npm) MAL-2026-11020 | Malicious | Not scored | 22 Jul, 2026 | npm hardhat-gas-tracker |
Malicious release: Malicious code in application-util (npm) MAL-2026-11000 | Malicious | Not scored | 22 Jul, 2026 | npm application-util |
Malicious release: Malicious code in web3-terminal (npm) MAL-2026-11007 | Malicious | Not scored | 22 Jul, 2026 | npm web3-terminal |
Malicious release: Malicious code in habinger (npm) MAL-2026-11002 | Malicious | Not scored | 22 Jul, 2026 | npm habinger |
Malicious release: Malicious code in encryptstringadmincore (npm) GHSA-hgfq-c4x3-jx2r, MAL-2026-11013 | Malicious | Not scored | 22 Jul, 2026 | npm encryptstringadmincore |
Malicious release: Malicious code in encrypt-string-ttak (npm) GHSA-mpgp-492w-x7xj, MAL-2026-11011 | Malicious | Not scored | 22 Jul, 2026 | npm encrypt-string-ttak |
Malicious release: Malicious code in encryptstringadmin (npm) GHSA-x92w-56m5-jchf, MAL-2026-11012 | Malicious | Not scored | 22 Jul, 2026 | npm encryptstringadmin |
Malicious release: Malicious code in n8n-nodes-net-utils (npm) MAL-2026-11003 | Malicious | Not scored | 22 Jul, 2026 | npm n8n-nodes-net-utils |
Malicious release: Malicious code in n8n-nodes-pwn (npm) MAL-2026-11004 | Malicious | Not scored | 22 Jul, 2026 | npm n8n-nodes-pwn |
Malicious release: Malicious code in n8n-nodes-quick-utils (npm) MAL-2026-11005 | Malicious | Not scored | 22 Jul, 2026 | npm n8n-nodes-quick-utils |
Malicious release: Malicious code in n8n-nodes-utils-helper (npm) MAL-2026-11006 | Malicious | Not scored | 22 Jul, 2026 | npm n8n-nodes-utils-helper |
Malicious release: Malicious code in n8n-nodes-http-probe (npm) MAL-2026-10997 | Malicious | Not scored | 22 Jul, 2026 | npm n8n-nodes-http-probe |
Malicious release: Malicious code in n8n-nodes-port-scanner (npm) MAL-2026-10998 | Malicious | Not scored | 22 Jul, 2026 | npm n8n-nodes-port-scanner |
Malicious release: Malicious code in habingeer (npm) MAL-2026-10995 | Malicious | Not scored | 22 Jul, 2026 | npm habingeer |
Malicious release: Malicious code in app-data-ist (npm) GHSA-wcx6-x67q-wff5, MAL-2026-10994 | Malicious | Not scored | 22 Jul, 2026 | npm app-data-ist |
Malicious release: Malicious code in init-js-examples (npm) MAL-2026-10996 | Malicious | Not scored | 22 Jul, 2026 | npm init-js-examples |
Malicious release: Malicious code in n8n-nodes-task-runner (npm) MAL-2026-10999 | Malicious | Not scored | 22 Jul, 2026 | npm n8n-nodes-task-runner |
Malicious release: Malicious code in torch-musa (PyPI) MAL-2026-10993 | Malicious | Not scored | 22 Jul, 2026 | PyPI torch-musa |
Malicious release: Malicious code in kijai (npm) GHSA-5mgj-24pj-pj6f, MAL-2026-11014 | Malicious | Not scored | 22 Jul, 2026 | npm kijai |
Malicious release: Malicious code in vantora (npm) GHSA-4fm5-fwqx-8r39, MAL-2026-11016 | Malicious | Not scored | 22 Jul, 2026 | npm vantora |