Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @public-for-cdao/backend (npm) GHSA-rx7h-q78h-96wv, MAL-2026-10882 | Malicious | Not scored | 20 Jul, 2026 | npm @public-for-cdao/backend |
Malicious release: Malicious code in @irys-solutions/odesa-main (npm) GHSA-hmhf-84x5-f526, MAL-2026-10881 | Malicious | Not scored | 20 Jul, 2026 | npm @irys-solutions/odesa-main |
Malicious release: Malicious code in @examplecorptest/hearsay-design-system-test (npm) GHSA-mpfh-v62h-hrhr, MAL-2026-10880 | Malicious | Not scored | 20 Jul, 2026 | npm @examplecorptest/hearsay-design-system-test |
Malicious release: Malicious code in @dxcl/user-js (npm) GHSA-vwf5-f55j-6283, MAL-2026-10879 | Malicious | Not scored | 20 Jul, 2026 | npm @dxcl/user-js |
Malicious release: Malicious code in @dxcl/transaction-js (npm) GHSA-wggq-6jpc-5jgf, MAL-2026-10878 | Malicious | Not scored | 20 Jul, 2026 | npm @dxcl/transaction-js |
Malicious release: Malicious code in @dxcl/log-function-js (npm) GHSA-gxw9-g46h-59h7, MAL-2026-10877 | Malicious | Not scored | 20 Jul, 2026 | npm @dxcl/log-function-js |
Malicious release: Malicious code in @dxcl/indicators-js (npm) GHSA-wv96-w2hg-89qf, MAL-2026-10876 | Malicious | Not scored | 20 Jul, 2026 | npm @dxcl/indicators-js |
Malicious release: Malicious code in @dxcl/http-common-js (npm) GHSA-gpxg-288p-43q8, MAL-2026-10875 | Malicious | Not scored | 20 Jul, 2026 | npm @dxcl/http-common-js |
Malicious release: Malicious code in @dxcl/fund-js (npm) GHSA-59xj-f6hq-vqj4, MAL-2026-10874 | Malicious | Not scored | 20 Jul, 2026 | npm @dxcl/fund-js |
Malicious release: Malicious code in @dxcl/customer-js (npm) GHSA-cmfg-6q35-wxxm, MAL-2026-10873 | Malicious | Not scored | 20 Jul, 2026 | npm @dxcl/customer-js |
Malicious release: Malicious code in @dxcl/account-js (npm) GHSA-4w3c-4vm4-mrmm, MAL-2026-10872 | Malicious | Not scored | 20 Jul, 2026 | npm @dxcl/account-js |
Malicious release: Malicious code in @azure-lab-services/ml-ts (npm) GHSA-q87h-8g7w-5938, MAL-2026-10871 | Malicious | Not scored | 20 Jul, 2026 | npm @azure-lab-services/ml-ts |
Malicious release: Malicious code in @atlaskit-internal_.smart-card/hover-card (npm) GHSA-pv57-7m7r-2r69, MAL-2026-10870 | Malicious | Not scored | 20 Jul, 2026 | npm @atlaskit-internal_.smart-card/hover-card |
Malicious release: Malicious code in my_shoaib_gem (RubyGems) MAL-2026-10914 | Malicious | Not scored | 20 Jul, 2026 | RubyGems my_shoaib_gem |
Malicious release: Malicious code in ike-artifactory-ruby (RubyGems) MAL-2026-10913 | Malicious | Not scored | 20 Jul, 2026 | RubyGems ike-artifactory-ruby |
Malicious release: Malicious code in shark-e2e-bnsneo (PyPI) MAL-2026-10912 | Malicious | Not scored | 20 Jul, 2026 | PyPI shark-e2e-bnsneo |
Malicious release: Malicious code in mysupergoodpython (PyPI) MAL-2026-10910 | Malicious | Not scored | 20 Jul, 2026 | PyPI mysupergoodpython |
Malicious release: Malicious code in mysuperlicense (PyPI) MAL-2026-10911 | Malicious | Not scored | 20 Jul, 2026 | PyPI mysuperlicense |
Malicious release: Malicious code in ibreak (PyPI) MAL-2026-10909 | Malicious | Not scored | 20 Jul, 2026 | PyPI ibreak |
Malicious release: Malicious code in hello-world-test-mh2 (PyPI) MAL-2026-10907 | Malicious | Not scored | 20 Jul, 2026 | PyPI hello-world-test-mh2 |
Malicious release: Malicious code in hello-world-test-mh3 (PyPI) MAL-2026-10908 | Malicious | Not scored | 20 Jul, 2026 | PyPI hello-world-test-mh3 |
Malicious release: Malicious code in paperclip-ai (PyPI) MAL-2026-10869 | Malicious | Not scored | 20 Jul, 2026 | PyPI paperclip-ai |
Malicious release: Malicious code in neroteam-v1 (PyPI) MAL-2026-10868 | Malicious | Not scored | 20 Jul, 2026 | PyPI neroteam-v1 |
Malicious release: Malicious code in vantrala (PyPI) MAL-2026-10867 | Malicious | Not scored | 20 Jul, 2026 | PyPI vantrala |
Malicious release: Malicious code in nemopush (PyPI) MAL-2026-10866 | Malicious | Not scored | 20 Jul, 2026 | PyPI nemopush |
Malicious release: Malicious code in kimitalk (PyPI) MAL-2026-10865 | Malicious | Not scored | 20 Jul, 2026 | PyPI kimitalk |
Malicious release: Malicious code in kimichat (PyPI) MAL-2026-10864 | Malicious | Not scored | 20 Jul, 2026 | PyPI kimichat |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-copyleft-next-0-3-1 (npm) GHSA-2gc4-3jrf-539r, MAL-2026-10815 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-copyleft-next-0-3-1 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-typosquat-lodash (npm) GHSA-2wfp-mw9m-3c6x, MAL-2026-10856 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-typosquat-lodash |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-malware-install-execution (npm) GHSA-3m93-ccj9-w63p, MAL-2026-10836 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-malware-install-execution |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-malware-code-obfuscation (npm) GHSA-4ch4-g9wf-fg55, MAL-2026-10833 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-malware-code-obfuscation |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-typosquat-webpack (npm) GHSA-4wcr-8537-v2ww, MAL-2026-10859 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-typosquat-webpack |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-typosquat-chalk (npm) GHSA-576v-8wcx-4p4q, MAL-2026-10853 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-typosquat-chalk |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-malware-cryptomining-indicators (npm) GHSA-6rh6-pc5p-4j88, MAL-2026-10835 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-malware-cryptomining-indicators |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-sspl-1-0 (npm) GHSA-7fmj-6v2f-m56v, MAL-2026-10849 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-sspl-1-0 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-typosquat-axios (npm) GHSA-7j2p-8vwj-g565, MAL-2026-10852 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-typosquat-axios |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-wxwindows (npm) GHSA-7qjp-cprm-mcp6, MAL-2026-10862 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-wxwindows |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-malware-credential-harvesting (npm) GHSA-89jh-h47r-j47w, MAL-2026-10834 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-malware-credential-harvesting |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-typosquat-moment (npm) GHSA-9mx2-4mpm-2r3j, MAL-2026-10857 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-typosquat-moment |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-sendmail-8-23 (npm) GHSA-9x3r-xqjc-rf4m, MAL-2026-10847 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-sendmail-8-23 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-tpl-1-0 (npm) GHSA-c342-xf26-r5wc, MAL-2026-10851 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-tpl-1-0 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-ncgl-uk-2-0 (npm) GHSA-cx55-w99m-rcx9, MAL-2026-10841 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-ncgl-uk-2-0 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-malware-network-indicators (npm) GHSA-fcqp-56vj-9g8m, MAL-2026-10837 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-malware-network-indicators |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-ucl-1-0 (npm) GHSA-fh2p-2rm7-q273, MAL-2026-10860 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-ucl-1-0 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-unlicense (npm) GHSA-ghmj-68m9-xmgq, MAL-2026-10861 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-unlicense |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-copyleft-next-0-3-0 (npm) GHSA-h79m-rf9m-2rw3, MAL-2026-10814 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-copyleft-next-0-3-0 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-ecos-2-0 (npm) GHSA-jhf4-7xww-5wr4, MAL-2026-10817 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-ecos-2-0 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-mpl-1-1 (npm) GHSA-jq98-3cqm-6m69, MAL-2026-10838 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-mpl-1-1 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-qpl-1-0-inria-2004 (npm) GHSA-mvwx-9jqh-5qhf, MAL-2026-10846 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-qpl-1-0-inria-2004 |
Malicious release: Malicious code in @gocortexio/npmgremlinbox-osl-3-0 (npm) GHSA-p5pm-xhx8-3gq6, MAL-2026-10843 | Malicious | Not scored | 20 Jul, 2026 | npm @gocortexio/npmgremlinbox-osl-3-0 |