Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in zod-pino444 (npm) GHSA-74m6-53cg-5gp3, MAL-2026-6795 | Malicious | Not scored | 06 Jul, 2026 | npm zod-pino444 |
Malicious release: Malicious code in @idms-corp/auth-ui (npm) GHSA-33w2-g8q6-86xm, MAL-2026-10224 | Malicious | Not scored | 06 Jul, 2026 | npm @idms-corp/auth-ui |
Malicious release: Malicious code in pinokio-redis (npm) GHSA-3gfp-7x5j-mp63, MAL-2026-6938 | Malicious | Not scored | 06 Jul, 2026 | npm pinokio-redis |
Malicious release: Malicious code in sams-sr-sdk-h5 (npm) GHSA-3r2r-29px-gqp6, MAL-2026-10233 | Malicious | Not scored | 06 Jul, 2026 | npm sams-sr-sdk-h5 |
Malicious release: Malicious code in @flex-ng/filter-pipe (npm) GHSA-4wmg-pwv3-88v4, MAL-2026-10222 | Malicious | Not scored | 06 Jul, 2026 | npm @flex-ng/filter-pipe |
Malicious release: Malicious code in @flex-ng/header-component (npm) GHSA-4xgj-9m4q-8g8v, MAL-2026-10223 | Malicious | Not scored | 06 Jul, 2026 | npm @flex-ng/header-component |
Malicious release: Malicious code in tme-error (npm) GHSA-89rr-3jxw-7hhm, MAL-2026-10235 | Malicious | Not scored | 06 Jul, 2026 | npm tme-error |
Malicious release: Malicious code in enbd-react-lib (npm) GHSA-8g7r-j4vg-8w9q, MAL-2026-10230 | Malicious | Not scored | 06 Jul, 2026 | npm enbd-react-lib |
Malicious release: Malicious code in enbd-react-logger (npm) GHSA-96hr-p56w-4x2m, MAL-2026-10231 | Malicious | Not scored | 06 Jul, 2026 | npm enbd-react-logger |
Malicious release: Malicious code in box-react-uix (npm) GHSA-f4fv-qwcg-667v, MAL-2026-10227 | Malicious | Not scored | 06 Jul, 2026 | npm box-react-uix |
Malicious release: Malicious code in tme-xca-react (npm) GHSA-fh7f-j6p7-m9h7, MAL-2026-10237 | Malicious | Not scored | 06 Jul, 2026 | npm tme-xca-react |
Malicious release: Malicious code in @logdna-web/shared (npm) GHSA-fhg5-c6x3-mx25, MAL-2026-10225 | Malicious | Not scored | 06 Jul, 2026 | npm @logdna-web/shared |
Malicious release: Malicious code in enbd-react-error-boundry (npm) GHSA-jffm-72cc-xcwv, MAL-2026-10229 | Malicious | Not scored | 06 Jul, 2026 | npm enbd-react-error-boundry |
Malicious release: Malicious code in @flex-ng/error-component (npm) GHSA-pw64-8rr7-9h66, MAL-2026-10221 | Malicious | Not scored | 06 Jul, 2026 | npm @flex-ng/error-component |
Malicious release: Malicious code in @logdna-web/styles (npm) GHSA-qcrg-93h5-r265, MAL-2026-10226 | Malicious | Not scored | 06 Jul, 2026 | npm @logdna-web/styles |
Malicious release: Malicious code in zredis-typed (npm) GHSA-rmhj-j5m8-3cxj, MAL-2026-6944 | Malicious | Not scored | 06 Jul, 2026 | npm zredis-typed |
Malicious release: Malicious code in tme-xca (npm) GHSA-w846-5p2c-7hwq, MAL-2026-10236 | Malicious | Not scored | 06 Jul, 2026 | npm tme-xca |
Malicious release: Malicious code in gen-ai-opt-in (npm) GHSA-jwrj-q2c7-8g47, MAL-2026-6761 | Malicious | Not scored | 05 Jul, 2026 | npm gen-ai-opt-in |
Malicious release: Malicious code in wsh4-nmp (npm) GHSA-3wv5-4p57-2v5q, MAL-2026-6792 | Malicious | Not scored | 05 Jul, 2026 | npm wsh4-nmp |
Malicious release: Malicious code in @adobesign/as-dev-tools (npm) MAL-2026-6760 | Malicious | Not scored | 05 Jul, 2026 | npm @adobesign/as-dev-tools |
Malicious release: Malicious code in fmt-date-lite (npm) MAL-2026-10115 | Malicious | Not scored | 05 Jul, 2026 | npm fmt-date-lite |
Malicious release: Malicious code in logger-daemon-regex (npm) MAL-2026-7017 | Malicious | Not scored | 05 Jul, 2026 | npm logger-daemon-regex |
Malicious release: Malicious code in urlllib321 (PyPI) MAL-2026-6759 | Malicious | Not scored | 04 Jul, 2026 | PyPI urlllib321 |
Malicious release: Malicious code in httpprobe (PyPI) MAL-2026-6758 | Malicious | Not scored | 04 Jul, 2026 | PyPI httpprobe |
Malicious release: Malicious code in vps-maintenance (npm) GHSA-qc5h-v3rf-5x95, MAL-2026-6756 | Malicious | Not scored | 04 Jul, 2026 | npm vps-maintenance |
Malicious release: Malicious code in vps-maintenance-paperclip-adapter (npm) GHSA-p3g7-2j36-j99x, MAL-2026-6757 | Malicious | Not scored | 04 Jul, 2026 | npm vps-maintenance-paperclip-adapter |
Malicious release: Malicious code in paperclip2 (npm) GHSA-27r8-2rjc-75rv, MAL-2026-6755 | Malicious | Not scored | 04 Jul, 2026 | npm paperclip2 |
Malicious release: Malicious code in yt-api-dlp (PyPI) MAL-2026-6754 | Malicious | Not scored | 04 Jul, 2026 | PyPI yt-api-dlp |
Malicious release: Malicious code in datefmt-helper (npm) GHSA-ch48-496p-pfv8, MAL-2026-6788 | Malicious | Not scored | 04 Jul, 2026 | npm datefmt-helper |
Malicious release: Malicious code in bytekit (PyPI) MAL-2026-6751 | Malicious | Not scored | 03 Jul, 2026 | PyPI bytekit |
Malicious release: Malicious code in schemavault (PyPI) MAL-2026-6753 | Malicious | Not scored | 03 Jul, 2026 | PyPI schemavault |
Malicious release: Malicious code in confighub (PyPI) MAL-2026-6752 | Malicious | Not scored | 03 Jul, 2026 | PyPI confighub |
Malicious release: Malicious code in procwire (PyPI) MAL-2026-6750 | Malicious | Not scored | 03 Jul, 2026 | PyPI procwire |
Malicious release: Malicious code in ipa-user-collector (PyPI) MAL-2026-6749 | Malicious | Not scored | 03 Jul, 2026 | PyPI ipa-user-collector |
Malicious release: Malicious code in haproxy-config-client (PyPI) MAL-2026-6748 | Malicious | Not scored | 03 Jul, 2026 | PyPI haproxy-config-client |
Malicious release: Malicious code in debugcli (npm) GHSA-86fh-6m37-f9v4, MAL-2026-6790 | Malicious | Not scored | 03 Jul, 2026 | npm debugcli |
Malicious release: Malicious code in typescript-util-core (npm) GHSA-84mg-p866-528x, MAL-2026-6746 | Malicious | Not scored | 03 Jul, 2026 | npm typescript-util-core |
Malicious release: Malicious code in web-api-node (npm) GHSA-j69c-7q52-h87f, MAL-2026-6747 | Malicious | Not scored | 03 Jul, 2026 | npm web-api-node |
Malicious release: Malicious code in ts-node-utils (npm) GHSA-mjvg-2r5j-mg76, MAL-2026-6745 | Malicious | Not scored | 03 Jul, 2026 | npm ts-node-utils |
Malicious release: Malicious code in api-ts-utils (npm) GHSA-3w2r-9f5g-prj8, MAL-2026-6744 | Malicious | Not scored | 03 Jul, 2026 | npm api-ts-utils |
Malicious release: Malicious code in api-node-utils (npm) GHSA-wj6w-3grq-735j, MAL-2026-6743 | Malicious | Not scored | 03 Jul, 2026 | npm api-node-utils |
Malicious release: Malicious code in alder_morrgan (npm) GHSA-j23f-jg9h-gjmc, MAL-2026-6742 | Malicious | Not scored | 03 Jul, 2026 | npm alder_morrgan |
Malicious release: Malicious code in @node-cloud/create (npm) GHSA-558p-3gxf-hm84, MAL-2026-6741 | Malicious | Not scored | 03 Jul, 2026 | npm @node-cloud/create |
Malicious release: Malicious code in @lodash-en/lodash-en (npm) GHSA-37qp-frv4-562v, MAL-2026-6739 | Malicious | Not scored | 03 Jul, 2026 | npm @lodash-en/lodash-en |
Malicious release: Malicious code in decode-sdks (npm) GHSA-gv37-287r-g9vx, MAL-2026-6740 | Malicious | Not scored | 03 Jul, 2026 | npm decode-sdks |
Malicious release: Malicious code in @jacobtan/decode-sdk (npm) GHSA-3mg6-vg6x-m62v, MAL-2026-6738 | Malicious | Not scored | 03 Jul, 2026 | npm @jacobtan/decode-sdk |
Malicious release: Malicious code in epic-internal-tools (npm) GHSA-wx8q-h5p5-9hcf, MAL-2026-6737 | Malicious | Not scored | 02 Jul, 2026 | npm epic-internal-tools |
Malicious release: Malicious code in horde-python-client (PyPI) MAL-2026-6734 | Malicious | Not scored | 02 Jul, 2026 | PyPI horde-python-client |
Malicious release: Malicious code in epic-build-scripts (PyPI) MAL-2026-6733 | Malicious | Not scored | 02 Jul, 2026 | PyPI epic-build-scripts |
Malicious release: Malicious code in ue-python-tools (PyPI) MAL-2026-6735 | Malicious | Not scored | 02 Jul, 2026 | PyPI ue-python-tools |