Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in nemopush (PyPI) MAL-2026-10866 | Malicious | Not scored | 20 Jul, 2026 | PyPI nemopush |
Malicious release: Malicious code in kimitalk (PyPI) MAL-2026-10865 | Malicious | Not scored | 20 Jul, 2026 | PyPI kimitalk |
Malicious release: Malicious code in kimichat (PyPI) MAL-2026-10864 | Malicious | Not scored | 20 Jul, 2026 | PyPI kimichat |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-copyleft-next-0-3-1 (npm) GHSA-2gc4-3jrf-539r, MAL-2026-10815 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-copyleft-next-0-3-1 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-typosquat-lodash (npm) GHSA-2wfp-mw9m-3c6x, MAL-2026-10856 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-typosquat-lodash |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-malware-install-execution (npm) GHSA-3m93-ccj9-w63p, MAL-2026-10836 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-malware-install-execution |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-malware-code-obfuscation (npm) GHSA-4ch4-g9wf-fg55, MAL-2026-10833 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-malware-code-obfuscation |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-typosquat-webpack (npm) GHSA-4wcr-8537-v2ww, MAL-2026-10859 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-typosquat-webpack |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-typosquat-chalk (npm) GHSA-576v-8wcx-4p4q, MAL-2026-10853 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-typosquat-chalk |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-malware-cryptomining-indicators (npm) GHSA-6rh6-pc5p-4j88, MAL-2026-10835 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-malware-cryptomining-indicators |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-sspl-1-0 (npm) GHSA-7fmj-6v2f-m56v, MAL-2026-10849 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-sspl-1-0 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-typosquat-axios (npm) GHSA-7j2p-8vwj-g565, MAL-2026-10852 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-typosquat-axios |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-wxwindows (npm) GHSA-7qjp-cprm-mcp6, MAL-2026-10862 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-wxwindows |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-malware-credential-harvesting (npm) GHSA-89jh-h47r-j47w, MAL-2026-10834 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-malware-credential-harvesting |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-typosquat-moment (npm) GHSA-9mx2-4mpm-2r3j, MAL-2026-10857 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-typosquat-moment |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-sendmail-8-23 (npm) GHSA-9x3r-xqjc-rf4m, MAL-2026-10847 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-sendmail-8-23 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-tpl-1-0 (npm) GHSA-c342-xf26-r5wc, MAL-2026-10851 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-tpl-1-0 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-ncgl-uk-2-0 (npm) GHSA-cx55-w99m-rcx9, MAL-2026-10841 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-ncgl-uk-2-0 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-malware-network-indicators (npm) GHSA-fcqp-56vj-9g8m, MAL-2026-10837 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-malware-network-indicators |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-ucl-1-0 (npm) GHSA-fh2p-2rm7-q273, MAL-2026-10860 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-ucl-1-0 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-unlicense (npm) GHSA-ghmj-68m9-xmgq, MAL-2026-10861 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-unlicense |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-copyleft-next-0-3-0 (npm) GHSA-h79m-rf9m-2rw3, MAL-2026-10814 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-copyleft-next-0-3-0 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-ecos-2-0 (npm) GHSA-jhf4-7xww-5wr4, MAL-2026-10817 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-ecos-2-0 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-mpl-1-1 (npm) GHSA-jq98-3cqm-6m69, MAL-2026-10838 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-mpl-1-1 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-qpl-1-0-inria-2004 (npm) GHSA-mvwx-9jqh-5qhf, MAL-2026-10846 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-qpl-1-0-inria-2004 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-osl-3-0 (npm) GHSA-p5pm-xhx8-3gq6, MAL-2026-10843 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-osl-3-0 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-mpl-2-0 (npm) GHSA-pgj9-qg38-66qm, MAL-2026-10839 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-mpl-2-0 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-polyform-small-business-1-0-0 (npm) GHSA-pj22-8328-xx6m, MAL-2026-10845 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-polyform-small-business-1-0-0 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-ms-lpl (npm) GHSA-pwfp-vhxq-7g8f, MAL-2026-10840 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-ms-lpl |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-polyform-noncommercial-1-0-0 (npm) GHSA-q9m9-5h2w-6fqv, MAL-2026-10844 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-polyform-noncommercial-1-0-0 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-typosquat-commander (npm) GHSA-qpvx-cv58-6gq8, MAL-2026-10854 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-typosquat-commander |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-tapr-ohl-1-0 (npm) GHSA-qrhx-w63c-43gx, MAL-2026-10850 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-tapr-ohl-1-0 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-simpl-2-0 (npm) GHSA-r8xp-4267-6m36, MAL-2026-10848 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-simpl-2-0 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-typosquat-react (npm) GHSA-rf94-jqj5-mxj3, MAL-2026-10858 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-typosquat-react |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-typosquat-express (npm) GHSA-rhf7-542w-5vqq, MAL-2026-10855 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-typosquat-express |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-openpbs-2-3 (npm) GHSA-rhgp-gf2p-j7r3, MAL-2026-10842 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-openpbs-2-3 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-malware-c2-beacon (npm) GHSA-vmcc-vqgj-wh6c, MAL-2026-10832 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-malware-c2-beacon |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-linux-man-pages-copyleft (npm) GHSA-xjx5-pj89-q82h, MAL-2026-10831 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-linux-man-pages-copyleft |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-gpl-2-0 (npm) GHSA-6f4v-mj95-7hx7, MAL-2026-10824 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-gpl-2-0 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-hippocratic-2-1 (npm) GHSA-6jrh-cw7q-cchf, MAL-2026-10826 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-hippocratic-2-1 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-eupl-1-2 (npm) GHSA-7mf4-xph8-p3x5, MAL-2026-10821 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-eupl-1-2 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-lgpl-3-0 (npm) GHSA-8cfc-7pm7-2wfg, MAL-2026-10830 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-lgpl-3-0 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-eupl-3-0 (npm) GHSA-8wvp-4p3h-8rcv, MAL-2026-10822 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-eupl-3-0 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-jpl-image (npm) GHSA-8xvv-j38f-37q4, MAL-2026-10827 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-jpl-image |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-cdla-sharing-1-0 (npm) GHSA-9xxm-2vjv-vcf8, MAL-2026-10811 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-cdla-sharing-1-0 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-eupl-1-1 (npm) GHSA-c537-6552-hchq, MAL-2026-10820 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-eupl-1-1 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-cern-ohl-s-2-0 (npm) GHSA-cf67-mcc6-xv6g, MAL-2026-10812 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-cern-ohl-s-2-0 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-fdk-aac (npm) GHSA-f352-j467-hh2v, MAL-2026-10823 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-fdk-aac |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-cddl-1-0 (npm) GHSA-ghq5-9c42-xm6m, MAL-2026-10810 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-cddl-1-0 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-cpol-1-02 (npm) GHSA-j2jx-hj5v-jx3v, MAL-2026-10816 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-cpol-1-02 |