Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in jec (PyPI) MAL-2026-5684 | Malicious | Not scored | 12 Jun, 2026 | PyPI jec |
Malicious release: Malicious code in trongapy (PyPI) MAL-2026-5683 | Malicious | Not scored | 12 Jun, 2026 | PyPI trongapy |
Malicious release: Malicious code in coral-wraith (npm) GHSA-f2r7-23p9-8jff, MAL-2026-5682 | Malicious | Not scored | 12 Jun, 2026 | npm coral-wraith |
Malicious release: Malicious code in trongap (PyPI) MAL-2026-5681 | Malicious | Not scored | 11 Jun, 2026 | PyPI trongap |
Malicious release: Malicious code in bittensor-burn-message (PyPI) MAL-2026-5680 | Malicious | Not scored | 11 Jun, 2026 | PyPI bittensor-burn-message |
Malicious release: Malicious code in internallib_v557 (npm) GHSA-945p-4458-jg48, MAL-2026-5678 | Malicious | Not scored | 11 Jun, 2026 | npm internallib_v557 |
Malicious release: Malicious code in pylogxo (PyPI) MAL-2026-5679 | Malicious | Not scored | 11 Jun, 2026 | PyPI pylogxo |
Malicious release: Malicious code in worker-build (npm) GHSA-7wpx-89q3-rcf4, MAL-2026-5677 | Malicious | Not scored | 11 Jun, 2026 | npm worker-build |
Malicious release: Malicious code in @johntaohunter/forge-jsx (npm) GHSA-v9x2-2qjf-q7qp, MAL-2026-5674 | Malicious | Not scored | 11 Jun, 2026 | npm @johntaohunter/forge-jsx |
Malicious release: Malicious code in ioredis-typed (npm) GHSA-wvg2-6r77-9m78, MAL-2026-5676 | Malicious | Not scored | 11 Jun, 2026 | npm ioredis-typed |
Malicious release: Malicious code in ioredis-orm (npm) GHSA-x3wj-647m-wx5c, MAL-2026-5675 | Malicious | Not scored | 11 Jun, 2026 | npm ioredis-orm |
Malicious release: Malicious code in vqlxjmpr (npm) GHSA-4mx5-f4mw-64v7, MAL-2026-5672 | Malicious | Not scored | 11 Jun, 2026 | npm vqlxjmpr |
Malicious release: Malicious code in zatzdbai (npm) GHSA-c389-4m23-j8gj, MAL-2026-5673 | Malicious | Not scored | 11 Jun, 2026 | npm zatzdbai |
Malicious release: Malicious code in downlynpm (npm) GHSA-vq59-5vfc-9rh5, MAL-2026-5666 | Malicious | Not scored | 11 Jun, 2026 | npm downlynpm |
Malicious release: Malicious code in @hatcha-captcha/core (npm) GHSA-2v2g-hp62-vhwj, MAL-2026-5655 | Malicious | Not scored | 11 Jun, 2026 | npm @hatcha-captcha/core |
Malicious release: Malicious code in @tenforce/toolbox-fontmap (npm) GHSA-4pgr-qgvj-c2wh, MAL-2026-5663 | Malicious | Not scored | 11 Jun, 2026 | npm @tenforce/toolbox-fontmap |
Malicious release: Malicious code in @marketplace-shared/components (npm) GHSA-5cx4-3w47-xm4h, MAL-2026-5658 | Malicious | Not scored | 11 Jun, 2026 | npm @marketplace-shared/components |
Malicious release: Malicious code in @sazka/web (npm) GHSA-5pm3-rqcf-522w, MAL-2026-5661 | Malicious | Not scored | 11 Jun, 2026 | npm @sazka/web |
Malicious release: Malicious code in @tribe-digital/shopify-starter-theme (npm) GHSA-6cc8-4vwg-c56v, MAL-2026-5664 | Malicious | Not scored | 11 Jun, 2026 | npm @tribe-digital/shopify-starter-theme |
Malicious release: Malicious code in @snowsight/debug-tooling (npm) GHSA-c33m-qf7q-vg8q, MAL-2026-5662 | Malicious | Not scored | 11 Jun, 2026 | npm @snowsight/debug-tooling |
Malicious release: Malicious code in @iobeya/spa-auth (npm) GHSA-qjh8-96ph-q57w, MAL-2026-5657 | Malicious | Not scored | 11 Jun, 2026 | npm @iobeya/spa-auth |
Malicious release: Malicious code in @visma-net-platform/module-navigator (npm) GHSA-r344-wgf5-fqf4, MAL-2026-5665 | Malicious | Not scored | 11 Jun, 2026 | npm @visma-net-platform/module-navigator |
Malicious release: Malicious code in @ntnx/nx-react-components (npm) GHSA-rxf2-69g9-4hpq, MAL-2026-5660 | Malicious | Not scored | 11 Jun, 2026 | npm @ntnx/nx-react-components |
Malicious release: Malicious code in @coterie-baby/common (npm) GHSA-wfq6-44px-2h89, MAL-2026-5654 | Malicious | Not scored | 11 Jun, 2026 | npm @coterie-baby/common |
Malicious release: Malicious code in @integrations-center/utils (npm) GHSA-wrxv-8jhh-m4x2, MAL-2026-5656 | Malicious | Not scored | 11 Jun, 2026 | npm @integrations-center/utils |
Malicious release: Malicious code in @ngt-frontend/widgets-core (npm) GHSA-x2r7-fmjp-vqq2, MAL-2026-5659 | Malicious | Not scored | 11 Jun, 2026 | npm @ngt-frontend/widgets-core |
Malicious release: Malicious code in pui-diagnostics (npm) GHSA-96f9-39p2-gjwm, MAL-2026-5670 | Malicious | Not scored | 11 Jun, 2026 | npm pui-diagnostics |
Malicious release: Malicious code in fed-callnative (npm) GHSA-hwp4-g2h4-2v7r, MAL-2026-5668 | Malicious | Not scored | 11 Jun, 2026 | npm fed-callnative |
Malicious release: Malicious code in sitecore-mm-component-style (npm) GHSA-mp9q-fvp5-ww2c, MAL-2026-5671 | Malicious | Not scored | 11 Jun, 2026 | npm sitecore-mm-component-style |
Malicious release: Malicious code in experian-analytics-components (npm) GHSA-wg43-49xc-v68q, MAL-2026-5667 | Malicious | Not scored | 11 Jun, 2026 | npm experian-analytics-components |
Malicious release: Malicious code in mm-ts-utils-client (npm) GHSA-x6pw-87r3-jc97, MAL-2026-5669 | Malicious | Not scored | 11 Jun, 2026 | npm mm-ts-utils-client |
Malicious release: Malicious code in pc-optimizer (npm) MAL-2026-5653 | Malicious | Not scored | 11 Jun, 2026 | npm pc-optimizer |
Malicious release: Malicious code in unified-ui-components-library (npm) GHSA-5vx8-w45q-gf69, MAL-2026-5648 | Malicious | Not scored | 11 Jun, 2026 | npm unified-ui-components-library |
Malicious release: Malicious code in ts-ecro (npm) GHSA-cwjv-7gg4-fp86, MAL-2026-5647 | Malicious | Not scored | 11 Jun, 2026 | npm ts-ecro |
Malicious release: Malicious code in optional-cpu-features (npm) GHSA-pwmh-97g7-2r34, MAL-2026-5642 | Malicious | Not scored | 11 Jun, 2026 | npm optional-cpu-features |
Malicious release: Malicious code in self-certificate (npm) MAL-2026-5644 | Malicious | Not scored | 11 Jun, 2026 | npm self-certificate |
Malicious release: Malicious code in goreleaser-run (npm) MAL-2026-5641 | Malicious | Not scored | 11 Jun, 2026 | npm goreleaser-run |
Malicious release: Malicious code in parket-slot (npm) GHSA-65jm-q492-j57q, MAL-2026-5643 | Malicious | Not scored | 11 Jun, 2026 | npm parket-slot |
Malicious release: Malicious code in ecto-corsair-whisper-6f3b9 (npm) GHSA-5wjv-qgmc-8w9m, MAL-2026-5640 | Malicious | Not scored | 11 Jun, 2026 | npm ecto-corsair-whisper-6f3b9 |
Malicious release: Malicious code in ozonex-sdk (npm) GHSA-v2hc-cmv5-999p, MAL-2026-5651 | Malicious | Not scored | 11 Jun, 2026 | npm ozonex-sdk |
Malicious release: Malicious code in sn-internal-test (npm) GHSA-v675-j7jw-p6rm, MAL-2026-5645 | Malicious | Not scored | 11 Jun, 2026 | npm sn-internal-test |
Malicious release: Malicious code in sn-internal-testjgsakjdkjadkjahsdkjad (npm) GHSA-cxhc-w3f2-3fx4, MAL-2026-5646 | Malicious | Not scored | 11 Jun, 2026 | npm sn-internal-testjgsakjdkjadkjahsdkjad |
Malicious release: Malicious code in ozone-sdk (npm) GHSA-3qc2-qc6w-c8xm, MAL-2026-5650 | Malicious | Not scored | 11 Jun, 2026 | npm ozone-sdk |
Malicious release: Malicious code in theta-sdk (npm) GHSA-x7m6-5hw9-gj7f, MAL-2026-5652 | Malicious | Not scored | 11 Jun, 2026 | npm theta-sdk |
Malicious release: Malicious code in @tt-aem-tt4a/shared-components (npm) MAL-2026-5639 | Malicious | Not scored | 11 Jun, 2026 | npm @tt-aem-tt4a/shared-components |
Malicious release: Malicious code in bibip-bip (PyPI) MAL-2026-5649 | Malicious | Not scored | 11 Jun, 2026 | PyPI bibip-bip |
Malicious release: Malicious code in swagger-express-routes (npm) GHSA-49jc-pgvv-m729, MAL-2026-5636 | Malicious | Not scored | 11 Jun, 2026 | npm swagger-express-routes |
Malicious release: Malicious code in routing-controls (npm) GHSA-jmhh-mvpj-27qq, MAL-2026-5635 | Malicious | Not scored | 11 Jun, 2026 | npm routing-controls |
Malicious release: Malicious code in tw-fluid-type (npm) GHSA-53h7-3qgm-jr76, MAL-2026-5638 | Malicious | Not scored | 11 Jun, 2026 | npm tw-fluid-type |
Malicious release: Malicious code in tailwindcss-animotion (npm) GHSA-9rjg-7m93-mq7w, MAL-2026-5637 | Malicious | Not scored | 11 Jun, 2026 | npm tailwindcss-animotion |