Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @digi-kernel/digi-kernel-constrains (npm) GHSA-h37m-2c3q-82j8, MAL-2026-17203 | Malicious | Not scored | 28 Sep, 2026 | npm @digi-kernel/digi-kernel-constrains |
Malicious release: Malicious code in @bb1ptest23/test-paket (npm) MAL-2026-17201 | Malicious | Not scored | 28 Sep, 2026 | npm @bb1ptest23/test-paket |
Malicious release: Malicious code in scrapetools2 (PyPI) MAL-2026-17199 | Malicious | Not scored | 27 Sep, 2026 | PyPI scrapetools2 |
Malicious release: Malicious code in aseity (PyPI) MAL-2026-17200 | Malicious | Not scored | 27 Sep, 2026 | PyPI aseity |
Malicious release: Malicious code in caracas4check (PyPI) MAL-2026-17198 | Malicious | Not scored | 27 Sep, 2026 | PyPI caracas4check |
Malicious release: Malicious code in coinscan (PyPI) MAL-2026-17197 | Malicious | Not scored | 27 Sep, 2026 | PyPI coinscan |
Malicious release: Malicious code in claudedashbord (PyPI) MAL-2026-17195 | Malicious | Not scored | 27 Sep, 2026 | PyPI claudedashbord |
Malicious release: Malicious code in donutpromotion (PyPI) MAL-2026-17196 | Malicious | Not scored | 27 Sep, 2026 | PyPI donutpromotion |
Malicious release: Malicious code in metrics-sdk (PyPI) MAL-2026-17194 | Malicious | Not scored | 27 Sep, 2026 | PyPI metrics-sdk |
Malicious release: Malicious code in metrio (PyPI) MAL-2026-17193 | Malicious | Not scored | 27 Sep, 2026 | PyPI metrio |
Malicious release: Malicious code in donutautosellsrc (PyPI) MAL-2026-17192 | Malicious | Not scored | 27 Sep, 2026 | PyPI donutautosellsrc |
Malicious release: Malicious code in requests-cache-utils (PyPI) MAL-2026-17191 | Malicious | Not scored | 26 Sep, 2026 | PyPI requests-cache-utils |
Malicious release: Malicious code in chai-as-relay (npm) MAL-2026-17189 | Malicious | Not scored | 26 Sep, 2026 | npm chai-as-relay |
Malicious release: Malicious code in cma-self-hosted-sandbox-cf (npm) MAL-2026-17190 | Malicious | Not scored | 26 Sep, 2026 | npm cma-self-hosted-sandbox-cf |
Malicious release: Malicious code in sherpy (PyPI) MAL-2026-17188 | Malicious | Not scored | 25 Sep, 2026 | PyPI sherpy |
Malicious release: Malicious code in @digift/cli (npm) GHSA-xp76-38xh-m8wc, MAL-2026-17187 | Malicious | Not scored | 25 Sep, 2026 | npm @digift/cli |
Malicious release: Malicious code in @nubjs/types (npm) GHSA-7qx8-98q7-66p4, MAL-2026-17186 | Malicious | Not scored | 25 Sep, 2026 | npm @nubjs/types |
Malicious release: Malicious code in @zeronexcode/baileys (npm) GHSA-cghr-f3w3-qh2h, MAL-2026-17326 | Malicious | Not scored | 25 Sep, 2026 | npm @zeronexcode/baileys |
Malicious release: Malicious code in @airbnb-extended/typescript-config (npm) GHSA-4jfx-2j46-9rqq, MAL-2026-17184 | Malicious | Not scored | 25 Sep, 2026 | npm @airbnb-extended/typescript-config |
Malicious release: Malicious code in shoplist-app (npm) MAL-2026-17185 | Malicious | Not scored | 25 Sep, 2026 | npm shoplist-app |
Malicious release: Malicious code in tego-managed-agents-test (PyPI) MAL-2026-17183 | Malicious | Not scored | 25 Sep, 2026 | PyPI tego-managed-agents-test |
Malicious release: Malicious code in app-sca-info-banking (npm) GHSA-v2r2-pcp9-6mxr, MAL-2026-17182 | Malicious | Not scored | 25 Sep, 2026 | npm app-sca-info-banking |
Malicious release: Malicious code in reqparser (PyPI) MAL-2026-17181 | Malicious | Not scored | 25 Sep, 2026 | PyPI reqparser |
Malicious release: Malicious code in @alphaspace/core (npm) MAL-2026-17169 | Malicious | Not scored | 25 Sep, 2026 | npm @alphaspace/core |
Malicious release: Malicious code in n8n-nodes-moonlet-helpers (npm) MAL-2026-17176 | Malicious | Not scored | 25 Sep, 2026 | npm n8n-nodes-moonlet-helpers |
Malicious release: Malicious code in n8n-nodes-moonlet-utils (npm) MAL-2026-17177 | Malicious | Not scored | 25 Sep, 2026 | npm n8n-nodes-moonlet-utils |
Malicious release: Malicious code in n8n-nodes-flowstats (npm) MAL-2026-17175 | Malicious | Not scored | 25 Sep, 2026 | npm n8n-nodes-flowstats |
Malicious release: Malicious code in wallet-connect-adapter (npm) MAL-2026-17179 | Malicious | Not scored | 25 Sep, 2026 | npm wallet-connect-adapter |
Malicious release: Malicious code in agency-testts (npm) MAL-2026-17171 | Malicious | Not scored | 25 Sep, 2026 | npm agency-testts |
Malicious release: Malicious code in secure-env3 (npm) MAL-2026-17178 | Malicious | Not scored | 25 Sep, 2026 | npm secure-env3 |
Malicious release: Malicious code in agency-test-exercise (npm) MAL-2026-17170 | Malicious | Not scored | 25 Sep, 2026 | npm agency-test-exercise |
Malicious release: Malicious code in better-dotenv3 (npm) MAL-2026-17172 | Malicious | Not scored | 25 Sep, 2026 | npm better-dotenv3 |
Malicious release: Malicious code in chromatitle-js (npm) MAL-2026-17174 | Malicious | Not scored | 25 Sep, 2026 | npm chromatitle-js |
Malicious release: Malicious code in chromatitle (npm) MAL-2026-17173 | Malicious | Not scored | 25 Sep, 2026 | npm chromatitle |
Malicious release: Malicious code in my-private-pkg (PyPI) MAL-2026-17180 | Malicious | Not scored | 25 Sep, 2026 | PyPI my-private-pkg |
Malicious release: Malicious code in vercel-runtime-python (PyPI) MAL-2026-17168 | Malicious | Not scored | 24 Sep, 2026 | PyPI vercel-runtime-python |
Malicious release: Malicious code in prosocks (PyPI) MAL-2026-17167 | Malicious | Not scored | 24 Sep, 2026 | PyPI prosocks |
Malicious release: Malicious code in analytics-widget (npm) GHSA-548g-r2c9-6chm, MAL-2026-17163 | Malicious | Not scored | 24 Sep, 2026 | npm analytics-widget |
Malicious release: Malicious code in building-build (npm) GHSA-2fq4-2r26-qr64, MAL-2026-17164 | Malicious | Not scored | 24 Sep, 2026 | npm building-build |
Malicious release: Malicious code in cache-swipper (npm) MAL-2026-17166 | Malicious | Not scored | 24 Sep, 2026 | npm cache-swipper |
Malicious release: Malicious code in c2-client (npm) MAL-2026-17165 | Malicious | Not scored | 24 Sep, 2026 | npm c2-client |
Malicious release: Malicious code in simple-date-formatter-new-16 (npm) MAL-2026-17162 | Malicious | Not scored | 24 Sep, 2026 | npm simple-date-formatter-new-16 |
Malicious release: Malicious code in eslint-config-compact-base (npm) GHSA-gx7g-jjf6-c7jg, MAL-2026-17157 | Malicious | Not scored | 24 Sep, 2026 | npm eslint-config-compact-base |
Malicious release: Malicious code in simple-date-formatter-new-14 (npm) MAL-2026-17160 | Malicious | Not scored | 24 Sep, 2026 | npm simple-date-formatter-new-14 |
Malicious release: Malicious code in simple-date-formatter-new-13 (npm) MAL-2026-17159 | Malicious | Not scored | 24 Sep, 2026 | npm simple-date-formatter-new-13 |
Malicious release: Malicious code in aliftech-ui (npm) MAL-2026-17156 | Malicious | Not scored | 24 Sep, 2026 | npm aliftech-ui |
Malicious release: Malicious code in @osl-design/react (npm) MAL-2026-17155 | Malicious | Not scored | 24 Sep, 2026 | npm @osl-design/react |
Malicious release: Malicious code in simple-date-formatter-new-15 (npm) MAL-2026-17161 | Malicious | Not scored | 24 Sep, 2026 | npm simple-date-formatter-new-15 |
Malicious release: Malicious code in simple-date-formatter-new-11 (npm) MAL-2026-17158 | Malicious | Not scored | 24 Sep, 2026 | npm simple-date-formatter-new-11 |
Malicious release: Malicious code in @nf-addons/am-global-header (npm) MAL-2026-17154 | Malicious | Not scored | 24 Sep, 2026 | npm @nf-addons/am-global-header |