Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @iphouse/api (npm) MAL-2026-10949 | Malicious | Not scored | 20 Jul, 2026 | npm @iphouse/api |
Malicious release: Malicious code in @iphouse/core (npm) MAL-2026-10950 | Malicious | Not scored | 20 Jul, 2026 | npm @iphouse/core |
Malicious release: Malicious code in @markscan/api (npm) MAL-2026-10951 | Malicious | Not scored | 20 Jul, 2026 | npm @markscan/api |
Malicious release: Malicious code in @markscan/core (npm) MAL-2026-10952 | Malicious | Not scored | 20 Jul, 2026 | npm @markscan/core |
Malicious release: Malicious code in @markscan/reports (npm) MAL-2026-10953 | Malicious | Not scored | 20 Jul, 2026 | npm @markscan/reports |
Malicious release: Malicious code in @markscan/utils (npm) MAL-2026-10954 | Malicious | Not scored | 20 Jul, 2026 | npm @markscan/utils |
Malicious release: Malicious code in akrai-report (npm) MAL-2026-10955 | Malicious | Not scored | 20 Jul, 2026 | npm akrai-report |
Malicious release: Malicious code in akrai-report-new (npm) MAL-2026-10956 | Malicious | Not scored | 20 Jul, 2026 | npm akrai-report-new |
Malicious release: Malicious code in iphouse (npm) MAL-2026-10957 | Malicious | Not scored | 20 Jul, 2026 | npm iphouse |
Malicious release: Malicious code in iphouse-api (npm) MAL-2026-10958 | Malicious | Not scored | 20 Jul, 2026 | npm iphouse-api |
Malicious release: Malicious code in iphouse-core (npm) MAL-2026-10959 | Malicious | Not scored | 20 Jul, 2026 | npm iphouse-core |
Malicious release: Malicious code in markscan (npm) MAL-2026-10960 | Malicious | Not scored | 20 Jul, 2026 | npm markscan |
Malicious release: Malicious code in markscan-api (npm) MAL-2026-10961 | Malicious | Not scored | 20 Jul, 2026 | npm markscan-api |
Malicious release: Malicious code in markscan-core (npm) MAL-2026-10962 | Malicious | Not scored | 20 Jul, 2026 | npm markscan-core |
Malicious release: Malicious code in markscan-reports (npm) MAL-2026-10963 | Malicious | Not scored | 20 Jul, 2026 | npm markscan-reports |
Malicious release: Malicious code in markscan-utils (npm) MAL-2026-10964 | Malicious | Not scored | 20 Jul, 2026 | npm markscan-utils |
Malicious release: Malicious code in supplyhub (npm) MAL-2026-11043 | Malicious | Not scored | 20 Jul, 2026 | npm supplyhub |
Malicious release: Malicious code in tailwind-gutenberg-block-zero (npm) MAL-2026-11044 | Malicious | Not scored | 20 Jul, 2026 | npm tailwind-gutenberg-block-zero |
Malicious release: Malicious code in chart-animation-helper (npm) GHSA-8vgc-wrpv-6v7h, MAL-2026-10781 | Malicious | Not scored | 19 Jul, 2026 | npm chart-animation-helper |
Malicious release: Malicious code in zoom-widget-xss-poc-paresh (npm) GHSA-gq92-h7j2-g9x5, MAL-2026-10782 | Malicious | Not scored | 19 Jul, 2026 | npm zoom-widget-xss-poc-paresh |
Malicious release: Malicious code in data-parser-utils (PyPI) MAL-2026-10780 | Malicious | Not scored | 19 Jul, 2026 | PyPI data-parser-utils |
Malicious release: Malicious code in tinkoff-cloud-apis-internal (PyPI) MAL-2026-10917 | Malicious | Not scored | 18 Jul, 2026 | PyPI tinkoff-cloud-apis-internal |
Malicious release: Malicious code in python-devplatform-client (PyPI) MAL-2026-10916 | Malicious | Not scored | 18 Jul, 2026 | PyPI python-devplatform-client |
Malicious release: Malicious code in mlflow-ui (PyPI) MAL-2026-10779 | Malicious | Not scored | 18 Jul, 2026 | PyPI mlflow-ui |
Malicious release: Malicious code in relativity-pdfjs-dist (npm) MAL-2026-10778 | Malicious | Not scored | 18 Jul, 2026 | npm relativity-pdfjs-dist |
Malicious release: Malicious code in telemetry-axios (npm) GHSA-89mf-39r2-ff96, MAL-2026-10773 | Malicious | Not scored | 17 Jul, 2026 | npm telemetry-axios |
Malicious release: Malicious code in axios-native (npm) GHSA-9j78-5mc3-56h7, MAL-2026-10772 | Malicious | Not scored | 17 Jul, 2026 | npm axios-native |
Malicious release: Malicious code in dwh-kafka-client (PyPI) MAL-2026-10915 | Malicious | Not scored | 17 Jul, 2026 | PyPI dwh-kafka-client |
Malicious release: Malicious code in trongridme (PyPI) GHSA-4fhx-73c8-xxhv, MAL-2026-10771 | Malicious | Not scored | 17 Jul, 2026 | PyPI trongridme |
Malicious release: Malicious code in govpkg (PyPI) MAL-2026-10770 | Malicious | Not scored | 17 Jul, 2026 | PyPI govpkg |
Malicious release: Malicious code in n8n-nodes-final-mile (npm) MAL-2026-10776 | Malicious | Not scored | 17 Jul, 2026 | npm n8n-nodes-final-mile |
Malicious release: Malicious code in n8n-nodes-devops-utils (npm) MAL-2026-10775 | Malicious | Not scored | 17 Jul, 2026 | npm n8n-nodes-devops-utils |
Malicious release: Malicious code in n8n-nodes-probe (npm) MAL-2026-10777 | Malicious | Not scored | 17 Jul, 2026 | npm n8n-nodes-probe |
Malicious release: Malicious code in easyway2 (npm) MAL-2026-10769 | Malicious | Not scored | 17 Jul, 2026 | npm easyway2 |
Malicious release: Malicious code in n8n-nodes-api-finder (npm) MAL-2026-10774 | Malicious | Not scored | 17 Jul, 2026 | npm n8n-nodes-api-finder |
Malicious release: Malicious code in trongridev (PyPI) GHSA-hx6g-6877-qvg8, MAL-2026-10768 | Malicious | Not scored | 17 Jul, 2026 | PyPI trongridev |
Malicious release: Malicious code in my-tailwind-gutenberg-block (npm) GHSA-mhvw-mw3c-6mc5, MAL-2026-10761 | Malicious | Not scored | 16 Jul, 2026 | npm my-tailwind-gutenberg-block |
Malicious release: Malicious code in abseil-py (PyPI) MAL-2026-10760 | Malicious | Not scored | 16 Jul, 2026 | PyPI abseil-py |
Malicious release: Malicious code in @ai-support-agent/cli (npm) MAL-2026-10707 | Malicious | Not scored | 16 Jul, 2026 | npm @ai-support-agent/cli |
Malicious release: Malicious code in mfq-private-encoder (PyPI) MAL-2026-10758 | Malicious | Not scored | 16 Jul, 2026 | PyPI mfq-private-encoder |
Malicious release: Malicious code in @cyberrant-rantai/rantai (npm) MAL-2026-10709 | Malicious | Not scored | 16 Jul, 2026 | npm @cyberrant-rantai/rantai |
Malicious release: Malicious code in channel-worker (npm) MAL-2026-10729 | Malicious | Not scored | 16 Jul, 2026 | npm channel-worker |
Malicious release: Malicious code in memtry-cli (npm) MAL-2026-10736 | Malicious | Not scored | 16 Jul, 2026 | npm memtry-cli |
Malicious release: Malicious code in bvm-core (npm) MAL-2026-10728 | Malicious | Not scored | 16 Jul, 2026 | npm bvm-core |
Malicious release: Malicious code in @whalent/agent (npm) MAL-2026-10721 | Malicious | Not scored | 16 Jul, 2026 | npm @whalent/agent |
Malicious release: Malicious code in @agentvox/host (npm) MAL-2026-10706 | Malicious | Not scored | 16 Jul, 2026 | npm @agentvox/host |
Malicious release: Malicious code in @thepayulink/server (npm) MAL-2026-10719 | Malicious | Not scored | 16 Jul, 2026 | npm @thepayulink/server |
Malicious release: Malicious code in axios-test-one (npm) MAL-2026-10727 | Malicious | Not scored | 16 Jul, 2026 | npm axios-test-one |
Malicious release: Malicious code in telemetry-metrics (npm) MAL-2026-10750 | Malicious | Not scored | 16 Jul, 2026 | npm telemetry-metrics |
Malicious release: Malicious code in codeam-cli (npm) MAL-2026-10730 | Malicious | Not scored | 16 Jul, 2026 | npm codeam-cli |