Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in css-scroll-state-polyfill (npm) MAL-2026-17486 | Malicious | Not scored | 25 days ago | npm css-scroll-state-polyfill |
Malicious release: Malicious code in css-snap-target-polyfill (npm) MAL-2026-17487 | Malicious | Not scored | 25 days ago | npm css-snap-target-polyfill |
Malicious release: Malicious code in css-starting-style-polyfill (npm) MAL-2026-17488 | Malicious | Not scored | 25 days ago | npm css-starting-style-polyfill |
Malicious release: Malicious code in core-js-gnz (npm) MAL-2026-17474 | Malicious | Not scored | 25 days ago | npm core-js-gnz |
Malicious release: Malicious code in css-reading-flow-polyfill (npm) MAL-2026-17483 | Malicious | Not scored | 25 days ago | npm css-reading-flow-polyfill |
Malicious release: Malicious code in css-scroll-anchor-polyfill (npm) MAL-2026-17485 | Malicious | Not scored | 25 days ago | npm css-scroll-anchor-polyfill |
Malicious release: Malicious code in css-light-dark-polyfill (npm) MAL-2026-17481 | Malicious | Not scored | 25 days ago | npm css-light-dark-polyfill |
Malicious release: Malicious code in css-interop-observer-polyfill (npm) MAL-2026-17480 | Malicious | Not scored | 25 days ago | npm css-interop-observer-polyfill |
Malicious release: Malicious code in css-relative-color-util (npm) MAL-2026-17484 | Malicious | Not scored | 25 days ago | npm css-relative-color-util |
Malicious release: Malicious code in css-logical-prop-shim (npm) MAL-2026-17482 | Malicious | Not scored | 25 days ago | npm css-logical-prop-shim |
Malicious release: Malicious code in css-field-sizing-polyfill (npm) MAL-2026-17478 | Malicious | Not scored | 25 days ago | npm css-field-sizing-polyfill |
Malicious release: Malicious code in css-env-function-shim (npm) MAL-2026-17477 | Malicious | Not scored | 25 days ago | npm css-env-function-shim |
Malicious release: Malicious code in css-gap-decorations-polyfill (npm) MAL-2026-17479 | Malicious | Not scored | 25 days ago | npm css-gap-decorations-polyfill |
Malicious release: Malicious code in css-anchor-pos-fallback (npm) MAL-2026-17476 | Malicious | Not scored | 25 days ago | npm css-anchor-pos-fallback |
Malicious release: Malicious code in css-a11y-contrast-utils (npm) MAL-2026-17475 | Malicious | Not scored | 25 days ago | npm css-a11y-contrast-utils |
Malicious release: Malicious code in focus-visible-polyfill-lite (npm) MAL-2026-17491 | Malicious | Not scored | 25 days ago | npm focus-visible-polyfill-lite |
Malicious release: Malicious code in anthropic-sdk (PyPI) MAL-2026-17472 | Malicious | Not scored | 25 days ago | PyPI anthropic-sdk |
Malicious release: Malicious code in zencleaner (PyPI) MAL-2026-17629 | Malicious | Not scored | 26 days ago | PyPI zencleaner |
Malicious release: Malicious code in virgil-cli (npm) MAL-2026-17630 | Malicious | Not scored | 26 days ago | npm virgil-cli |
Malicious release: Malicious code in caoxiltts (PyPI) MAL-2026-17471 | Malicious | Not scored | 26 days ago | PyPI caoxiltts |
Malicious release: Malicious code in infrabench (PyPI) MAL-2026-17469 | Malicious | Not scored | 26 days ago | PyPI infrabench |
Malicious release: Malicious code in voxcpmruntime (PyPI) MAL-2026-17470 | Malicious | Not scored | 27 days ago | PyPI voxcpmruntime |
Malicious release: Malicious code in voxcpmintel (PyPI) MAL-2026-17468 | Malicious | Not scored | 27 days ago | PyPI voxcpmintel |
Malicious release: Malicious code in voxcpmeval (PyPI) MAL-2026-17465 | Malicious | Not scored | 27 days ago | PyPI voxcpmeval |
Malicious release: Malicious code in voxcpmkit (PyPI) MAL-2026-17466 | Malicious | Not scored | 27 days ago | PyPI voxcpmkit |
Malicious release: Malicious code in voxcpmui4 (PyPI) MAL-2026-17467 | Malicious | Not scored | 27 days ago | PyPI voxcpmui4 |
Malicious release: Malicious code in voxcpmui3 (PyPI) MAL-2026-17464 | Malicious | Not scored | 27 days ago | PyPI voxcpmui3 |
Malicious release: Malicious code in @nagular/router (npm) MAL-2026-17500 | Malicious | Not scored | 27 days ago | npm @nagular/router |
Malicious release: Malicious code in @angularr/router (npm) MAL-2026-17494 | Malicious | Not scored | 27 days ago | npm @angularr/router |
Malicious release: Malicious code in @babell/core (npm) MAL-2026-17497 | Malicious | Not scored | 27 days ago | npm @babell/core |
Malicious release: Malicious code in @nagular/core (npm) MAL-2026-17499 | Malicious | Not scored | 27 days ago | npm @nagular/core |
Malicious release: Malicious code in @angularr/core (npm) MAL-2026-17493 | Malicious | Not scored | 27 days ago | npm @angularr/core |
Malicious release: Malicious code in @angularr/cli (npm) MAL-2026-17492 | Malicious | Not scored | 27 days ago | npm @angularr/cli |
Malicious release: Malicious code in express-enhanced (npm) MAL-2026-17489 | Malicious | Not scored | 27 days ago | npm express-enhanced |
Malicious release: Malicious code in express-fork (npm) MAL-2026-17490 | Malicious | Not scored | 27 days ago | npm express-fork |
Malicious release: Malicious code in echogen (PyPI) MAL-2026-17462 | Malicious | Not scored | 27 days ago | PyPI echogen |
Malicious release: Malicious code in voxcpmtts3 (PyPI) MAL-2026-17463 | Malicious | Not scored | 27 days ago | PyPI voxcpmtts3 |
Malicious release: Malicious code in voxel-tts (PyPI) MAL-2026-17461 | Malicious | Not scored | 27 days ago | PyPI voxel-tts |
Malicious release: Malicious code in voxeval (PyPI) MAL-2026-17457 | Malicious | Not scored | 27 days ago | PyPI voxeval |
Malicious release: Malicious code in ui.dist.min.js (npm) GHSA-325f-rjxf-3gm9, MAL-2026-17460 | Malicious | Not scored | 27 days ago | npm ui.dist.min.js |
Malicious release: Malicious code in translate-base-font (npm) GHSA-grv5-7wp6-vw6h, MAL-2026-17458 | Malicious | Not scored | 27 days ago | npm translate-base-font |
Malicious release: Malicious code in ui-base-colors (npm) GHSA-qgqx-3mhx-jwx3, MAL-2026-17459 | Malicious | Not scored | 27 days ago | npm ui-base-colors |
Malicious release: Malicious code in @smwebserver/static (npm) GHSA-qhx4-m546-6w2x, MAL-2026-17456 | Malicious | Not scored | 27 days ago | npm @smwebserver/static |
Malicious release: Malicious code in dedh-devops-automation (PyPI) MAL-2026-17455 | Malicious | Not scored | 28 days ago | PyPI dedh-devops-automation |
Malicious release: Malicious code in kartykgithub-ph-f (npm) GHSA-x2m2-w3gv-m5wg, MAL-2026-17426 | Malicious | Not scored | 28 days ago | npm kartykgithub-ph-f |
Malicious release: Malicious code in kartykgithub-ph-e (npm) GHSA-7hq7-x7ww-7cxr, MAL-2026-17425 | Malicious | Not scored | 28 days ago | npm kartykgithub-ph-e |
Malicious release: Malicious code in kartykgithub-ph-b (npm) GHSA-27m4-jjxc-69wf, MAL-2026-17424 | Malicious | Not scored | 28 days ago | npm kartykgithub-ph-b |
Malicious release: Malicious code in @erlanzz/baileys (npm) MAL-2026-17440 | Malicious | Not scored | 28 days ago | npm @erlanzz/baileys |
Malicious release: Malicious code in @smart-dev-wa/baileys (npm) MAL-2026-17442 | Malicious | Not scored | 28 days ago | npm @smart-dev-wa/baileys |
Malicious release: Malicious code in danz-bails (npm) MAL-2026-17444 | Malicious | Not scored | 28 days ago | npm danz-bails |