Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in dms-backend (npm) MAL-2026-5826 | Malicious | Not scored | 15 Jun, 2026 | npm dms-backend |
Malicious release: Malicious code in ogd-platform (npm) MAL-2026-5828 | Malicious | Not scored | 15 Jun, 2026 | npm ogd-platform |
Malicious release: Malicious code in vend-utilities (npm) MAL-2026-5832 | Malicious | Not scored | 15 Jun, 2026 | npm vend-utilities |
Malicious release: Malicious code in cardano-addresses-docs (npm) MAL-2026-5802 | Malicious | Not scored | 15 Jun, 2026 | npm cardano-addresses-docs |
Malicious release: Malicious code in @resolvx/core (npm) GHSA-5fvj-272r-496w, MAL-2026-5798 | Malicious | Not scored | 15 Jun, 2026 | npm @resolvx/core |
Malicious release: Malicious code in intel-ai-safety-explainer (PyPI) MAL-2026-5814 | Malicious | Not scored | 15 Jun, 2026 | PyPI intel-ai-safety-explainer |
Malicious release: Malicious code in hello-test-s1 (PyPI) MAL-2026-5812 | Malicious | Not scored | 15 Jun, 2026 | PyPI hello-test-s1 |
Malicious release: Malicious code in merino-common (PyPI) MAL-2026-5817 | Malicious | Not scored | 15 Jun, 2026 | PyPI merino-common |
Malicious release: Malicious code in node-scraper (PyPI) MAL-2026-5820 | Malicious | Not scored | 15 Jun, 2026 | PyPI node-scraper |
Malicious release: Malicious code in dispatch-internal-plugins (PyPI) MAL-2026-5810 | Malicious | Not scored | 15 Jun, 2026 | PyPI dispatch-internal-plugins |
Malicious release: Malicious code in llvm-aie (PyPI) MAL-2026-5816 | Malicious | Not scored | 15 Jun, 2026 | PyPI llvm-aie |
Malicious release: Malicious code in gigl-core (PyPI) MAL-2026-5811 | Malicious | Not scored | 15 Jun, 2026 | PyPI gigl-core |
Malicious release: Malicious code in databricks-tools-core (PyPI) MAL-2026-5809 | Malicious | Not scored | 15 Jun, 2026 | PyPI databricks-tools-core |
Malicious release: Malicious code in mlir-aie (PyPI) MAL-2026-5818 | Malicious | Not scored | 15 Jun, 2026 | PyPI mlir-aie |
Malicious release: Malicious code in intel-ai-safety (PyPI) MAL-2026-5813 | Malicious | Not scored | 15 Jun, 2026 | PyPI intel-ai-safety |
Malicious release: Malicious code in sl-pgp (PyPI) MAL-2026-5823 | Malicious | Not scored | 15 Jun, 2026 | PyPI sl-pgp |
Malicious release: Malicious code in kinto-slack (PyPI) MAL-2026-5815 | Malicious | Not scored | 15 Jun, 2026 | PyPI kinto-slack |
Malicious release: Malicious code in mozautomation (PyPI) MAL-2026-5819 | Malicious | Not scored | 15 Jun, 2026 | PyPI mozautomation |
Malicious release: Malicious code in scriptworker-client (PyPI) MAL-2026-5822 | Malicious | Not scored | 15 Jun, 2026 | PyPI scriptworker-client |
Malicious release: Malicious code in pyptllm (PyPI) MAL-2026-5821 | Malicious | Not scored | 15 Jun, 2026 | PyPI pyptllm |
Malicious release: Malicious code in boardflow (npm) GHSA-38x4-9p94-xg4p, MAL-2026-5799 | Malicious | Not scored | 15 Jun, 2026 | npm boardflow |
Malicious release: Malicious code in boardstep (npm) MAL-2026-5800 | Malicious | Not scored | 15 Jun, 2026 | npm boardstep |
Malicious release: Malicious code in testpgagent (PyPI) MAL-2026-5824 | Malicious | Not scored | 15 Jun, 2026 | PyPI testpgagent |
Malicious release: Malicious code in flow-lending (npm) GHSA-pgcr-8w67-72j9, MAL-2026-5803 | Malicious | Not scored | 15 Jun, 2026 | npm flow-lending |
Malicious release: Malicious code in flow-lending-sdk (npm) GHSA-r79w-4mcq-g2fm, MAL-2026-5804 | Malicious | Not scored | 15 Jun, 2026 | npm flow-lending-sdk |
Malicious release: Malicious code in flowdefi (npm) GHSA-24j3-x8g2-c23q, MAL-2026-5806 | Malicious | Not scored | 15 Jun, 2026 | npm flowdefi |
Malicious release: Malicious code in surf-lending (npm) GHSA-6762-f2rg-qwfv, MAL-2026-5808 | Malicious | Not scored | 15 Jun, 2026 | npm surf-lending |
Malicious release: Malicious code in bodega-sdk (npm) GHSA-m774-6g93-j76m, MAL-2026-5801 | Malicious | Not scored | 15 Jun, 2026 | npm bodega-sdk |
Malicious release: Malicious code in flowcardano (npm) GHSA-7wqh-42c8-vqcx, MAL-2026-5805 | Malicious | Not scored | 15 Jun, 2026 | npm flowcardano |
Malicious release: Malicious code in @solana-labs/ancor (npm) GHSA-h2x5-cj9x-hvcc, MAL-2026-5786 | Malicious | Not scored | 15 Jun, 2026 | npm @solana-labs/ancor |
Malicious release: Malicious code in @solana-labs/spl-toke (npm) GHSA-6465-92w6-mgp8, MAL-2026-5787 | Malicious | Not scored | 15 Jun, 2026 | npm @solana-labs/spl-toke |
Malicious release: Malicious code in @solana-labs/web3js (npm) GHSA-pqhf-q5g8-6jpm, MAL-2026-5788 | Malicious | Not scored | 15 Jun, 2026 | npm @solana-labs/web3js |
Malicious release: Malicious code in claude-cup (npm) MAL-2026-5789 | Malicious | Not scored | 15 Jun, 2026 | npm claude-cup |
Malicious release: Malicious code in mddriver (npm) GHSA-75f4-4w6r-vvch, MAL-2026-5791 | Malicious | Not scored | 15 Jun, 2026 | npm mddriver |
Malicious release: Malicious code in neurodrift (PyPI) MAL-2026-5797 | Malicious | Not scored | 15 Jun, 2026 | PyPI neurodrift |
Malicious release: Malicious code in neural-network-scan (npm) MAL-2026-5794 | Malicious | Not scored | 15 Jun, 2026 | npm neural-network-scan |
Malicious release: Malicious code in llmfree (PyPI) MAL-2026-5796 | Malicious | Not scored | 15 Jun, 2026 | PyPI llmfree |
Malicious release: Malicious code in gptminifast (PyPI) MAL-2026-5795 | Malicious | Not scored | 15 Jun, 2026 | PyPI gptminifast |
Malicious release: Malicious code in nativescript-swisspost-imagepicker (npm) GHSA-vcxp-rm4v-qh5h, MAL-2026-5792 | Malicious | Not scored | 15 Jun, 2026 | npm nativescript-swisspost-imagepicker |
Malicious release: Malicious code in nativescript-swisspost-pcc-creative-editor (npm) GHSA-h5g9-q449-jr2c, MAL-2026-5793 | Malicious | Not scored | 15 Jun, 2026 | npm nativescript-swisspost-pcc-creative-editor |
Malicious release: Malicious code in ldpbootstrap-jquery (npm) GHSA-2m3g-j8c8-hx83, MAL-2026-5790 | Malicious | Not scored | 15 Jun, 2026 | npm ldpbootstrap-jquery |
Malicious release: Malicious code in sam-package (npm) MAL-2026-5807 | Malicious | Not scored | 15 Jun, 2026 | npm sam-package |
Malicious release: Malicious code in field-plus (npm) GHSA-wcq8-7m2v-8r69, MAL-2026-5777 | Malicious | Not scored | 15 Jun, 2026 | npm field-plus |
Malicious release: Malicious code in ing-feat-itsme-oidc-authentication (npm) MAL-2026-5780 | Malicious | Not scored | 15 Jun, 2026 | npm ing-feat-itsme-oidc-authentication |
Malicious release: Malicious code in portal-backend (npm) GHSA-6j4w-8j7h-8c6c, MAL-2026-5781 | Malicious | Not scored | 15 Jun, 2026 | npm portal-backend |
Malicious release: Malicious code in token-prices-cron (npm) GHSA-qp5c-f568-8r3h, MAL-2026-5782 | Malicious | Not scored | 15 Jun, 2026 | npm token-prices-cron |
Malicious release: Malicious code in vaults-monitor-cron (npm) GHSA-7ff8-rw9g-fj84, MAL-2026-5784 | Malicious | Not scored | 15 Jun, 2026 | npm vaults-monitor-cron |
Malicious release: Malicious code in hemi-supply-cron (npm) GHSA-49hx-4cwp-rqgh, MAL-2026-5779 | Malicious | Not scored | 15 Jun, 2026 | npm hemi-supply-cron |
Malicious release: Malicious code in hemi-earn-actions (npm) GHSA-hjwc-fchg-m65q, MAL-2026-5778 | Malicious | Not scored | 15 Jun, 2026 | npm hemi-earn-actions |
Malicious release: Malicious code in vault-strategies (npm) GHSA-43qg-3v2q-g62x, MAL-2026-5783 | Malicious | Not scored | 15 Jun, 2026 | npm vault-strategies |