Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in unreal-mladapter (PyPI) MAL-2026-6736 | Malicious | Not scored | 02 Jul, 2026 | PyPI unreal-mladapter |
Malicious release: Malicious code in ue-automation-scripts (npm) GHSA-g68g-mm68-67f5, MAL-2026-6730 | Malicious | Not scored | 02 Jul, 2026 | npm ue-automation-scripts |
Malicious release: Malicious code in robomerge (npm) GHSA-x22f-73cv-vccx, MAL-2026-6729 | Malicious | Not scored | 02 Jul, 2026 | npm robomerge |
Malicious release: Malicious code in unreal-horde-dashboard (npm) GHSA-vwh3-m8vq-24r2, MAL-2026-6732 | Malicious | Not scored | 02 Jul, 2026 | npm unreal-horde-dashboard |
Malicious release: Malicious code in ue-jenkins-buildkite (npm) GHSA-8gxq-wrp7-qqv8, MAL-2026-6731 | Malicious | Not scored | 02 Jul, 2026 | npm ue-jenkins-buildkite |
Malicious release: Malicious code in @checkrhq/adjudication-api-client (npm) MAL-2026-6789 | Malicious | Not scored | 02 Jul, 2026 | npm @checkrhq/adjudication-api-client |
Malicious release: Malicious code in dt-validator (PyPI) MAL-2026-6728 | Malicious | Not scored | 02 Jul, 2026 | PyPI dt-validator |
Malicious release: Malicious code in tailwind-animates (npm) GHSA-3cr6-gpr8-pjfm, MAL-2026-6727 | Malicious | Not scored | 02 Jul, 2026 | npm tailwind-animates |
Malicious release: Malicious code in db-convertor (npm) GHSA-p467-3jcx-48q5, MAL-2026-6726 | Malicious | Not scored | 02 Jul, 2026 | npm db-convertor |
Malicious release: Malicious code in @modhamanish/rn-mm-template (npm) GHSA-7v96-p295-826q, MAL-2026-6725 | Malicious | Not scored | 02 Jul, 2026 | npm @modhamanish/rn-mm-template |
Malicious release: Malicious code in @marketfront/actualordersnippetpopup (npm) MAL-2026-6763 | Malicious | Not scored | 02 Jul, 2026 | npm @marketfront/actualordersnippetpopup |
Malicious release: Malicious code in @marketfront/advertisingdevtool (npm) MAL-2026-6764 | Malicious | Not scored | 02 Jul, 2026 | npm @marketfront/advertisingdevtool |
Malicious release: Malicious code in @marketfront/bannerpopup (npm) MAL-2026-6765 | Malicious | Not scored | 02 Jul, 2026 | npm @marketfront/bannerpopup |
Malicious release: Malicious code in @marketfront/baobabtech (npm) MAL-2026-6766 | Malicious | Not scored | 02 Jul, 2026 | npm @marketfront/baobabtech |
Malicious release: Malicious code in @marketfront/basemarkettemplate (npm) MAL-2026-6767 | Malicious | Not scored | 02 Jul, 2026 | npm @marketfront/basemarkettemplate |
Malicious release: Malicious code in @marketfront/blenderdevtool (npm) MAL-2026-6768 | Malicious | Not scored | 02 Jul, 2026 | npm @marketfront/blenderdevtool |
Malicious release: Malicious code in @marketfront/captchaservice (npm) MAL-2026-6769 | Malicious | Not scored | 02 Jul, 2026 | npm @marketfront/captchaservice |
Malicious release: Malicious code in @marketfront/changefilter (npm) MAL-2026-6770 | Malicious | Not scored | 02 Jul, 2026 | npm @marketfront/changefilter |
Malicious release: Malicious code in @marketfront/commonecommerce (npm) MAL-2026-6771 | Malicious | Not scored | 02 Jul, 2026 | npm @marketfront/commonecommerce |
Malicious release: Malicious code in @marketfront/customdealsfeed (npm) MAL-2026-6772 | Malicious | Not scored | 02 Jul, 2026 | npm @marketfront/customdealsfeed |
Malicious release: Malicious code in @marketfront/designsystemdevtool (npm) MAL-2026-6773 | Malicious | Not scored | 02 Jul, 2026 | npm @marketfront/designsystemdevtool |
Malicious release: Malicious code in @marketfront/devtoolsloader (npm) MAL-2026-6774 | Malicious | Not scored | 02 Jul, 2026 | npm @marketfront/devtoolsloader |
Malicious release: Malicious code in @marketfront/digitalherobannercarousel (npm) MAL-2026-6775 | Malicious | Not scored | 02 Jul, 2026 | npm @marketfront/digitalherobannercarousel |
Malicious release: Malicious code in @marketfront/dynamicpageparams (npm) MAL-2026-6776 | Malicious | Not scored | 02 Jul, 2026 | npm @marketfront/dynamicpageparams |
Malicious release: Malicious code in @marketfront/errorcounter (npm) MAL-2026-6777 | Malicious | Not scored | 02 Jul, 2026 | npm @marketfront/errorcounter |
Malicious release: Malicious code in @marketfront/fashiononboardingpopup (npm) MAL-2026-6778 | Malicious | Not scored | 02 Jul, 2026 | npm @marketfront/fashiononboardingpopup |
Malicious release: Malicious code in @marketfront/fingerprint (npm) MAL-2026-6779 | Malicious | Not scored | 02 Jul, 2026 | npm @marketfront/fingerprint |
Malicious release: Malicious code in @marketfront/footer (npm) MAL-2026-6780 | Malicious | Not scored | 02 Jul, 2026 | npm @marketfront/footer |
Malicious release: Malicious code in @marketfront/gotoauthpopup (npm) MAL-2026-6781 | Malicious | Not scored | 02 Jul, 2026 | npm @marketfront/gotoauthpopup |
Malicious release: Malicious code in @marketfront/header (npm) MAL-2026-6782 | Malicious | Not scored | 02 Jul, 2026 | npm @marketfront/header |
Malicious release: Malicious code in @marketfront/infopopup (npm) MAL-2026-6783 | Malicious | Not scored | 02 Jul, 2026 | npm @marketfront/infopopup |
Malicious release: Malicious code in @marketfront/livestreampreviewpopup (npm) MAL-2026-6784 | Malicious | Not scored | 02 Jul, 2026 | npm @marketfront/livestreampreviewpopup |
Malicious release: Malicious code in @marketfront/madvpopup (npm) MAL-2026-6785 | Malicious | Not scored | 02 Jul, 2026 | npm @marketfront/madvpopup |
Malicious release: Malicious code in @marketfront/mychatspreloader (npm) MAL-2026-6786 | Malicious | Not scored | 02 Jul, 2026 | npm @marketfront/mychatspreloader |
Malicious release: Malicious code in @marketfront/navbar (npm) MAL-2026-6787 | Malicious | Not scored | 02 Jul, 2026 | npm @marketfront/navbar |
Malicious release: Malicious code in electron-orbit (npm) MAL-2026-6723 | Malicious | Not scored | 01 Jul, 2026 | npm electron-orbit |
Malicious release: Malicious code in starlette-healthcheck (PyPI) MAL-2026-6724 | Malicious | Not scored | 01 Jul, 2026 | PyPI starlette-healthcheck |
Malicious release: Malicious code in svgcraft-core (npm) GHSA-j9vc-q728-qcx4, MAL-2026-6715 | Malicious | Not scored | 01 Jul, 2026 | npm svgcraft-core |
Malicious release: Malicious code in test-pkg-yarn (npm) GHSA-r653-6655-p467, MAL-2026-6718 | Malicious | Not scored | 01 Jul, 2026 | npm test-pkg-yarn |
Malicious release: Malicious code in test-pkg-pnpm (npm) GHSA-7grv-5j2w-4wx3, MAL-2026-6716 | Malicious | Not scored | 01 Jul, 2026 | npm test-pkg-pnpm |
Malicious release: Malicious code in test-pkg-x0 (npm) GHSA-45jm-p8g6-hcxf, MAL-2026-6717 | Malicious | Not scored | 01 Jul, 2026 | npm test-pkg-x0 |
Malicious release: Malicious code in polymarket-toolkit (npm) GHSA-w7x3-5xp7-6pw8, MAL-2026-6713 | Malicious | Not scored | 01 Jul, 2026 | npm polymarket-toolkit |
Malicious release: Malicious code in polymarket-trading-developer-tool (npm) GHSA-qh4r-g8mr-v3xp, MAL-2026-6714 | Malicious | Not scored | 01 Jul, 2026 | npm polymarket-trading-developer-tool |
Malicious release: Malicious code in polymarket-risk-manager (npm) GHSA-jcx2-q527-7qcx, MAL-2026-6712 | Malicious | Not scored | 01 Jul, 2026 | npm polymarket-risk-manager |
Malicious release: Malicious code in ts-clob-math-v2 (npm) MAL-2026-6719 | Malicious | Not scored | 01 Jul, 2026 | npm ts-clob-math-v2 |
Malicious release: Malicious code in ts-elinter (npm) MAL-2026-6720 | Malicious | Not scored | 01 Jul, 2026 | npm ts-elinter |
Malicious release: Malicious code in ts-eslint-helper (npm) GHSA-cr8h-v4vp-m4m8, MAL-2026-6721 | Malicious | Not scored | 01 Jul, 2026 | npm ts-eslint-helper |
Malicious release: Malicious code in twrap-tool (PyPI) MAL-2026-6711 | Malicious | Not scored | 01 Jul, 2026 | PyPI twrap-tool |
Malicious release: Malicious code in vega-lite-next (npm) GHSA-3hv4-8cww-7p9f, MAL-2026-6709 | Malicious | Not scored | 01 Jul, 2026 | npm vega-lite-next |
Malicious release: Malicious code in vitest-agent (npm) GHSA-w2r4-4x6j-3h5x, MAL-2026-6710 | Malicious | Not scored | 01 Jul, 2026 | npm vitest-agent |