Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in lwc-slds-lbc (npm) GHSA-xm8f-w286-57x5, MAL-2026-10923 | Malicious | Not scored | 20 Jul, 2026 | npm lwc-slds-lbc |
Malicious release: Malicious code in automatic-octo-invention (PyPI) MAL-2026-10918 | Malicious | Not scored | 20 Jul, 2026 | PyPI automatic-octo-invention |
Malicious release: Malicious code in ml-core-airflow-auth (PyPI) MAL-2026-10919 | Malicious | Not scored | 20 Jul, 2026 | PyPI ml-core-airflow-auth |
Malicious release: Malicious code in your-unique-package-name1337 (npm) GHSA-3w8q-c7m7-62q5, MAL-2026-10906 | Malicious | Not scored | 20 Jul, 2026 | npm your-unique-package-name1337 |
Malicious release: Malicious code in win-build-utils (npm) GHSA-7ffq-88v5-rmwc, MAL-2026-10905 | Malicious | Not scored | 20 Jul, 2026 | npm win-build-utils |
Malicious release: Malicious code in solana-web3-v1 (npm) GHSA-x736-hhp7-jrh7, MAL-2026-10904 | Malicious | Not scored | 20 Jul, 2026 | npm solana-web3-v1 |
Malicious release: Malicious code in solana-web3-lts (npm) GHSA-8wj2-r9xj-g9p3, MAL-2026-10901 | Malicious | Not scored | 20 Jul, 2026 | npm solana-web3-lts |
Malicious release: Malicious code in solana-web3-stable (npm) GHSA-c26v-wr8c-3xj8, MAL-2026-10903 | Malicious | Not scored | 20 Jul, 2026 | npm solana-web3-stable |
Malicious release: Malicious code in solana-web3-patched (npm) GHSA-p492-8qvf-j49c, MAL-2026-10902 | Malicious | Not scored | 20 Jul, 2026 | npm solana-web3-patched |
Malicious release: Malicious code in solana-web3-fork (npm) GHSA-rf7g-mf44-5m44, MAL-2026-10900 | Malicious | Not scored | 20 Jul, 2026 | npm solana-web3-fork |
Malicious release: Malicious code in solana-web3-fixed (npm) GHSA-vc55-fvgr-m9jv, MAL-2026-10899 | Malicious | Not scored | 20 Jul, 2026 | npm solana-web3-fixed |
Malicious release: Malicious code in solana-rpc-client (npm) GHSA-p7xx-6w55-gfrg, MAL-2026-10898 | Malicious | Not scored | 20 Jul, 2026 | npm solana-rpc-client |
Malicious release: Malicious code in golan125-homepage-test (npm) GHSA-6p3c-6jvh-3pg8, MAL-2026-10897 | Malicious | Not scored | 20 Jul, 2026 | npm golan125-homepage-test |
Malicious release: Malicious code in flow-eslint-oxidized (npm) GHSA-frhf-jqq4-m95m, MAL-2026-10896 | Malicious | Not scored | 20 Jul, 2026 | npm flow-eslint-oxidized |
Malicious release: Malicious code in exodus-payments (npm) GHSA-hrvv-3w2f-pp24, MAL-2026-10895 | Malicious | Not scored | 20 Jul, 2026 | npm exodus-payments |
Malicious release: Malicious code in exodus-checkout (npm) GHSA-mqx8-fhj5-w597, MAL-2026-10894 | Malicious | Not scored | 20 Jul, 2026 | npm exodus-checkout |
Malicious release: Malicious code in ecto-cargo-wk1tm59a (npm) GHSA-wx6c-2wgg-hcwq, MAL-2026-10893 | Malicious | Not scored | 20 Jul, 2026 | npm ecto-cargo-wk1tm59a |
Malicious release: Malicious code in claude-code-timer (npm) GHSA-6649-vv4q-q9fw, MAL-2026-10892 | Malicious | Not scored | 20 Jul, 2026 | npm claude-code-timer |
Malicious release: Malicious code in bytecraft (npm) GHSA-r2fr-28j9-gjh5, MAL-2026-10891 | Malicious | Not scored | 20 Jul, 2026 | npm bytecraft |
Malicious release: Malicious code in @public-for-cdao/utils (npm) GHSA-f6vj-gmjr-rr3c, MAL-2026-10889 | Malicious | Not scored | 20 Jul, 2026 | npm @public-for-cdao/utils |
Malicious release: Malicious code in @public-for-cdao/signer (npm) GHSA-rjhf-whh4-86cq, MAL-2026-10888 | Malicious | Not scored | 20 Jul, 2026 | npm @public-for-cdao/signer |
Malicious release: Malicious code in @public-for-cdao/deploy (npm) GHSA-8jx6-7rv4-9r5g, MAL-2026-10886 | Malicious | Not scored | 20 Jul, 2026 | npm @public-for-cdao/deploy |
Malicious release: Malicious code in @public-for-cdao/sdk (npm) GHSA-9gf9-q25g-2m67, MAL-2026-10887 | Malicious | Not scored | 20 Jul, 2026 | npm @public-for-cdao/sdk |
Malicious release: Malicious code in @public-for-cdao/core (npm) GHSA-gpx4-hq9v-733f, MAL-2026-10885 | Malicious | Not scored | 20 Jul, 2026 | npm @public-for-cdao/core |
Malicious release: Malicious code in @public-for-cdao/contracts (npm) GHSA-52h2-99jg-wx2p, MAL-2026-10884 | Malicious | Not scored | 20 Jul, 2026 | npm @public-for-cdao/contracts |
Malicious release: Malicious code in @public-for-cdao/bot (npm) GHSA-j5xp-rxh2-qg93, MAL-2026-10883 | Malicious | Not scored | 20 Jul, 2026 | npm @public-for-cdao/bot |
Malicious release: Malicious code in @public-for-cdao/backend (npm) GHSA-rx7h-q78h-96wv, MAL-2026-10882 | Malicious | Not scored | 20 Jul, 2026 | npm @public-for-cdao/backend |
Malicious release: Malicious code in @irys-solutions/odesa-main (npm) GHSA-hmhf-84x5-f526, MAL-2026-10881 | Malicious | Not scored | 20 Jul, 2026 | npm @irys-solutions/odesa-main |
Malicious release: Malicious code in @examplecorptest/hearsay-design-system-test (npm) GHSA-mpfh-v62h-hrhr, MAL-2026-10880 | Malicious | Not scored | 20 Jul, 2026 | npm @examplecorptest/hearsay-design-system-test |
Malicious release: Malicious code in @dxcl/user-js (npm) GHSA-vwf5-f55j-6283, MAL-2026-10879 | Malicious | Not scored | 20 Jul, 2026 | npm @dxcl/user-js |
Malicious release: Malicious code in @dxcl/transaction-js (npm) GHSA-wggq-6jpc-5jgf, MAL-2026-10878 | Malicious | Not scored | 20 Jul, 2026 | npm @dxcl/transaction-js |
Malicious release: Malicious code in @dxcl/log-function-js (npm) GHSA-gxw9-g46h-59h7, MAL-2026-10877 | Malicious | Not scored | 20 Jul, 2026 | npm @dxcl/log-function-js |
Malicious release: Malicious code in @dxcl/indicators-js (npm) GHSA-wv96-w2hg-89qf, MAL-2026-10876 | Malicious | Not scored | 20 Jul, 2026 | npm @dxcl/indicators-js |
Malicious release: Malicious code in @dxcl/http-common-js (npm) GHSA-gpxg-288p-43q8, MAL-2026-10875 | Malicious | Not scored | 20 Jul, 2026 | npm @dxcl/http-common-js |
Malicious release: Malicious code in @dxcl/fund-js (npm) GHSA-59xj-f6hq-vqj4, MAL-2026-10874 | Malicious | Not scored | 20 Jul, 2026 | npm @dxcl/fund-js |
Malicious release: Malicious code in @dxcl/customer-js (npm) GHSA-cmfg-6q35-wxxm, MAL-2026-10873 | Malicious | Not scored | 20 Jul, 2026 | npm @dxcl/customer-js |
Malicious release: Malicious code in @dxcl/account-js (npm) GHSA-4w3c-4vm4-mrmm, MAL-2026-10872 | Malicious | Not scored | 20 Jul, 2026 | npm @dxcl/account-js |
Malicious release: Malicious code in @azure-lab-services/ml-ts (npm) GHSA-q87h-8g7w-5938, MAL-2026-10871 | Malicious | Not scored | 20 Jul, 2026 | npm @azure-lab-services/ml-ts |
Malicious release: Malicious code in @atlaskit-internal_.smart-card/hover-card (npm) GHSA-pv57-7m7r-2r69, MAL-2026-10870 | Malicious | Not scored | 20 Jul, 2026 | npm @atlaskit-internal_.smart-card/hover-card |
Malicious release: Malicious code in my_shoaib_gem (RubyGems) MAL-2026-10914 | Malicious | Not scored | 20 Jul, 2026 | RubyGems my_shoaib_gem |
Malicious release: Malicious code in ike-artifactory-ruby (RubyGems) MAL-2026-10913 | Malicious | Not scored | 20 Jul, 2026 | RubyGems ike-artifactory-ruby |
Malicious release: Malicious code in shark-e2e-bnsneo (PyPI) MAL-2026-10912 | Malicious | Not scored | 20 Jul, 2026 | PyPI shark-e2e-bnsneo |
Malicious release: Malicious code in mysupergoodpython (PyPI) MAL-2026-10910 | Malicious | Not scored | 20 Jul, 2026 | PyPI mysupergoodpython |
Malicious release: Malicious code in mysuperlicense (PyPI) MAL-2026-10911 | Malicious | Not scored | 20 Jul, 2026 | PyPI mysuperlicense |
Malicious release: Malicious code in ibreak (PyPI) MAL-2026-10909 | Malicious | Not scored | 20 Jul, 2026 | PyPI ibreak |
Malicious release: Malicious code in hello-world-test-mh2 (PyPI) MAL-2026-10907 | Malicious | Not scored | 20 Jul, 2026 | PyPI hello-world-test-mh2 |
Malicious release: Malicious code in hello-world-test-mh3 (PyPI) MAL-2026-10908 | Malicious | Not scored | 20 Jul, 2026 | PyPI hello-world-test-mh3 |
Malicious release: Malicious code in paperclip-ai (PyPI) MAL-2026-10869 | Malicious | Not scored | 20 Jul, 2026 | PyPI paperclip-ai |
Malicious release: Malicious code in neroteam-v1 (PyPI) MAL-2026-10868 | Malicious | Not scored | 20 Jul, 2026 | PyPI neroteam-v1 |
Malicious release: Malicious code in vantrala (PyPI) MAL-2026-10867 | Malicious | Not scored | 20 Jul, 2026 | PyPI vantrala |