Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in agfosslic24 (RubyGems) GHSA-7vr9-2pfp-9w4g, MAL-2026-7476 | Malicious | Not scored | 07 Jul, 2026 | RubyGems agfosslic24 |
Malicious release: Malicious code in agfosssacre22 (RubyGems) GHSA-mwfg-26h4-m935, MAL-2026-7477 | Malicious | Not scored | 07 Jul, 2026 | RubyGems agfosssacre22 |
Malicious release: Malicious code in agfossgrant23 (RubyGems) GHSA-jp6x-j4wj-pmvq, MAL-2026-7475 | Malicious | Not scored | 07 Jul, 2026 | RubyGems agfossgrant23 |
Malicious release: Malicious code in agfosscab20 (RubyGems) GHSA-mqx5-7r68-m823, MAL-2026-7474 | Malicious | Not scored | 07 Jul, 2026 | RubyGems agfosscab20 |
Malicious release: Malicious code in agentoaitestabc123 (RubyGems) GHSA-p8p4-8qq5-h277, MAL-2026-7473 | Malicious | Not scored | 07 Jul, 2026 | RubyGems agentoaitestabc123 |
Malicious release: Malicious code in abcfoobar1778550629075869 (RubyGems) GHSA-6v8w-647p-45g4, MAL-2026-7471 | Malicious | Not scored | 07 Jul, 2026 | RubyGems abcfoobar1778550629075869 |
Malicious release: Malicious code in abcfoobar1778550632348198 (RubyGems) GHSA-gmpq-h2m9-r735, MAL-2026-7472 | Malicious | Not scored | 07 Jul, 2026 | RubyGems abcfoobar1778550632348198 |
Malicious release: Malicious code in abcfoobar1778550625683711 (RubyGems) GHSA-2q77-mj2w-wwm8, MAL-2026-7470 | Malicious | Not scored | 07 Jul, 2026 | RubyGems abcfoobar1778550625683711 |
Malicious release: Malicious code in a0a_arcgraph (RubyGems) GHSA-j8v7-3h33-7p49, MAL-2026-7469 | Malicious | Not scored | 07 Jul, 2026 | RubyGems a0a_arcgraph |
Malicious release: Malicious code in a00_arcguide (RubyGems) GHSA-q64v-8pxj-6w86, MAL-2026-7468 | Malicious | Not scored | 07 Jul, 2026 | RubyGems a00_arcguide |
Malicious release: Malicious code in scan-checker (PyPI) MAL-2026-7466 | Malicious | Not scored | 07 Jul, 2026 | PyPI scan-checker |
Malicious release: Malicious code in scanvia (PyPI) MAL-2026-7467 | Malicious | Not scored | 07 Jul, 2026 | PyPI scanvia |
Malicious release: Malicious code in quatre (PyPI) MAL-2026-7465 | Malicious | Not scored | 07 Jul, 2026 | PyPI quatre |
Malicious release: Malicious code in pygremlinbox-malware-network-indicators (PyPI) MAL-2026-7464 | Malicious | Not scored | 07 Jul, 2026 | PyPI pygremlinbox-malware-network-indicators |
Malicious release: Malicious code in pygremlinbox-malware-cryptomining-indicators (PyPI) MAL-2026-7462 | Malicious | Not scored | 07 Jul, 2026 | PyPI pygremlinbox-malware-cryptomining-indicators |
Malicious release: Malicious code in pygremlinbox-malware-install-execution (PyPI) MAL-2026-7463 | Malicious | Not scored | 07 Jul, 2026 | PyPI pygremlinbox-malware-install-execution |
Malicious release: Malicious code in pygremlinbox-malware-code-obfuscation (PyPI) MAL-2026-7460 | Malicious | Not scored | 07 Jul, 2026 | PyPI pygremlinbox-malware-code-obfuscation |
Malicious release: Malicious code in pygremlinbox-malware-credential-harvesting (PyPI) MAL-2026-7461 | Malicious | Not scored | 07 Jul, 2026 | PyPI pygremlinbox-malware-credential-harvesting |
Malicious release: Malicious code in pygremlinbox-malware-c2-beacon (PyPI) MAL-2026-7459 | Malicious | Not scored | 07 Jul, 2026 | PyPI pygremlinbox-malware-c2-beacon |
Malicious release: Malicious code in pycryptoshuffle (PyPI) MAL-2026-7458 | Malicious | Not scored | 07 Jul, 2026 | PyPI pycryptoshuffle |
Malicious release: Malicious code in piirgg (PyPI) MAL-2026-7457 | Malicious | Not scored | 07 Jul, 2026 | PyPI piirgg |
Malicious release: Malicious code in notrandompacketname (PyPI) MAL-2026-7456 | Malicious | Not scored | 07 Jul, 2026 | PyPI notrandompacketname |
Malicious release: Malicious code in myproject234 (PyPI) MAL-2026-7455 | Malicious | Not scored | 07 Jul, 2026 | PyPI myproject234 |
Malicious release: Malicious code in cyberday26szymon-payments (PyPI) MAL-2026-7454 | Malicious | Not scored | 07 Jul, 2026 | PyPI cyberday26szymon-payments |
Malicious release: Malicious code in cyberday26szymon-auth (PyPI) MAL-2026-7452 | Malicious | Not scored | 07 Jul, 2026 | PyPI cyberday26szymon-auth |
Malicious release: Malicious code in cyberday26szymon-logging (PyPI) MAL-2026-7453 | Malicious | Not scored | 07 Jul, 2026 | PyPI cyberday26szymon-logging |
Malicious release: Malicious code in @pimy-b2cweb/apiclient-b2cweb-r2 (npm) MAL-2026-10655 | Malicious | Not scored | 07 Jul, 2026 | npm @pimy-b2cweb/apiclient-b2cweb-r2 |
Malicious release: Malicious code in @pimy-b2cweb/frontend-lib (npm) MAL-2026-10656 | Malicious | Not scored | 07 Jul, 2026 | npm @pimy-b2cweb/frontend-lib |
Malicious release: Malicious code in @higherlogic/ocfe (npm) GHSA-m2wg-xw25-9g9c, MAL-2026-6911 | Malicious | Not scored | 07 Jul, 2026 | npm @higherlogic/ocfe |
Malicious release: Malicious code in paperclip-adapter-helpers (npm) GHSA-v3ch-6vv8-xr3w, MAL-2026-6981 | Malicious | Not scored | 07 Jul, 2026 | npm paperclip-adapter-helpers |
Malicious release: Malicious code in express-firegate (npm) GHSA-59r7-h2ch-m4v2, MAL-2026-6909 | Malicious | Not scored | 07 Jul, 2026 | npm express-firegate |
Malicious release: Malicious code in express-deflect (npm) GHSA-968w-6262-r9f5, MAL-2026-6908 | Malicious | Not scored | 07 Jul, 2026 | npm express-deflect |
Malicious release: Malicious code in chai-spycore (npm) GHSA-w3fq-7xj5-8gmv, MAL-2026-6907 | Malicious | Not scored | 07 Jul, 2026 | npm chai-spycore |
Malicious release: Malicious code in zluri-ad-connector (npm) MAL-2026-6910 | Malicious | Not scored | 07 Jul, 2026 | npm zluri-ad-connector |
Malicious release: Malicious code in vps-adapter-core (npm) GHSA-hvxm-858v-vhw9, MAL-2026-6949 | Malicious | Not scored | 07 Jul, 2026 | npm vps-adapter-core |
Malicious release: Malicious code in paperclip-host-utils (npm) GHSA-m74w-fv2m-jcvw, MAL-2026-6947 | Malicious | Not scored | 07 Jul, 2026 | npm paperclip-host-utils |
Malicious release: Malicious code in express-mongo-limit (npm) GHSA-rw8f-rf6x-jj3j, MAL-2026-7012 | Malicious | Not scored | 07 Jul, 2026 | npm express-mongo-limit |
Malicious release: Malicious code in xnder-sdk-js (npm) GHSA-wwv8-px7f-vfq4, MAL-2026-6906 | Malicious | Not scored | 06 Jul, 2026 | npm xnder-sdk-js |
Malicious release: Malicious code in winston-prism (npm) GHSA-3xpg-2wmm-jjj2, MAL-2026-6905 | Malicious | Not scored | 06 Jul, 2026 | npm winston-prism |
Malicious release: Malicious code in wime-zle (npm) GHSA-6474-9f9h-hmwx, MAL-2026-6902 | Malicious | Not scored | 06 Jul, 2026 | npm wime-zle |
Malicious release: Malicious code in vite-plugin-svg-paths (npm) GHSA-7hpm-7845-8cr6, MAL-2026-6901 | Malicious | Not scored | 06 Jul, 2026 | npm vite-plugin-svg-paths |
Malicious release: Malicious code in winston-js-express (npm) GHSA-fhrx-mrfp-3fvg, MAL-2026-6904 | Malicious | Not scored | 06 Jul, 2026 | npm winston-js-express |
Malicious release: Malicious code in tailwindcss-animatecss-latest (npm) GHSA-cjj7-4xf8-fgf8, MAL-2026-6888 | Malicious | Not scored | 06 Jul, 2026 | npm tailwindcss-animatecss-latest |
Malicious release: Malicious code in windrule-utils (npm) GHSA-3qh2-hc9r-frmf, MAL-2026-6903 | Malicious | Not scored | 06 Jul, 2026 | npm windrule-utils |
Malicious release: Malicious code in tailwindcss-fonttypo-inter (npm) GHSA-c37g-65pv-vg82, MAL-2026-6890 | Malicious | Not scored | 06 Jul, 2026 | npm tailwindcss-fonttypo-inter |
Malicious release: Malicious code in twcompose-utils (npm) GHSA-pc7p-pxpj-3cw5, MAL-2026-6899 | Malicious | Not scored | 06 Jul, 2026 | npm twcompose-utils |
Malicious release: Malicious code in renderctx (npm) GHSA-jq76-fhr4-3987, MAL-2026-6871 | Malicious | Not scored | 06 Jul, 2026 | npm renderctx |
Malicious release: Malicious code in txs-data (npm) GHSA-w5pf-vc8f-rv6r, MAL-2026-6900 | Malicious | Not scored | 06 Jul, 2026 | npm txs-data |
Malicious release: Malicious code in ts-lint-builders (npm) GHSA-5mvf-x573-2gv4, MAL-2026-6897 | Malicious | Not scored | 06 Jul, 2026 | npm ts-lint-builders |
Malicious release: Malicious code in ts-eslinter (npm) GHSA-h269-vrf6-9f75, MAL-2026-6896 | Malicious | Not scored | 06 Jul, 2026 | npm ts-eslinter |