Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in hello-dynamic (PyPI) MAL-2026-5518 | Malicious | Not scored | 10 Jun, 2026 | PyPI hello-dynamic |
Malicious release: Malicious code in requests-toolbelt-plus (PyPI) MAL-2026-5519 | Malicious | Not scored | 10 Jun, 2026 | PyPI requests-toolbelt-plus |
Malicious release: Malicious code in yelp-react-component-chaos (npm) GHSA-3chg-w9g2-778v, MAL-2026-5515 | Malicious | Not scored | 10 Jun, 2026 | npm yelp-react-component-chaos |
Malicious release: Malicious code in tailwind-animator (npm) GHSA-5hg6-wrf8-9hhr, MAL-2026-5516 | Malicious | Not scored | 10 Jun, 2026 | npm tailwind-animator |
Malicious release: Malicious code in crypto-promise-js (npm) GHSA-qjp2-ccc7-vjv9, MAL-2026-5507 | Malicious | Not scored | 10 Jun, 2026 | npm crypto-promise-js |
Malicious release: Malicious code in anaylze-json (npm) GHSA-wjgw-rm6m-wgr3, MAL-2026-5505 | Malicious | Not scored | 10 Jun, 2026 | npm anaylze-json |
Malicious release: Malicious code in nw-demo-utils (npm) GHSA-q849-7xxq-hh4g, MAL-2026-5511 | Malicious | Not scored | 10 Jun, 2026 | npm nw-demo-utils |
Malicious release: Malicious code in @easytipsportal/pos-adapters (npm) GHSA-8qfp-2r92-r39w, MAL-2026-5504 | Malicious | Not scored | 10 Jun, 2026 | npm @easytipsportal/pos-adapters |
Malicious release: Malicious code in argoncrypt (npm) GHSA-h3m2-g8jh-9p37, MAL-2026-5506 | Malicious | Not scored | 10 Jun, 2026 | npm argoncrypt |
Malicious release: Malicious code in martinez-polygon-clipping-simul-dalton (npm) GHSA-ggqm-v4hp-cw69, MAL-2026-5508 | Malicious | Not scored | 10 Jun, 2026 | npm martinez-polygon-clipping-simul-dalton |
Malicious release: Malicious code in solc-compiler (npm) GHSA-3gmv-4hp4-87jq, MAL-2026-5513 | Malicious | Not scored | 10 Jun, 2026 | npm solc-compiler |
Malicious release: Malicious code in npmjs_web3-common (npm) GHSA-56rf-jfpx-gqf8, MAL-2026-5510 | Malicious | Not scored | 10 Jun, 2026 | npm npmjs_web3-common |
Malicious release: Malicious code in solc-abi (npm) GHSA-5rjr-r82r-343m, MAL-2026-5512 | Malicious | Not scored | 10 Jun, 2026 | npm solc-abi |
Malicious release: Malicious code in npmjs_truffle-helper (npm) GHSA-6qhx-9853-hxm6, MAL-2026-5509 | Malicious | Not scored | 10 Jun, 2026 | npm npmjs_truffle-helper |
Malicious release: Malicious code in solidity-abi (npm) GHSA-4pr4-9j3x-h243, MAL-2026-5514 | Malicious | Not scored | 10 Jun, 2026 | npm solidity-abi |
Malicious release: Malicious code in plugin-fastify (npm) GHSA-3g8q-cxq6-9f6c, MAL-2026-5503 | Malicious | Not scored | 10 Jun, 2026 | npm plugin-fastify |
Malicious release: Malicious code in graphbase-js (npm) GHSA-29w9-hfv4-jjxh, MAL-2026-5502 | Malicious | Not scored | 10 Jun, 2026 | npm graphbase-js |
Malicious release: Malicious code in @validate-ethereum-address/core (npm) GHSA-c29q-842f-rcjc, MAL-2026-5496 | Malicious | Not scored | 10 Jun, 2026 | npm @validate-ethereum-address/core |
Malicious release: Malicious code in @validator-sdk/pubkey (npm) GHSA-w9ch-gj3p-2cj9, MAL-2026-5498 | Malicious | Not scored | 10 Jun, 2026 | npm @validator-sdk/pubkey |
Malicious release: Malicious code in @solana-launchpad/sdk (npm) GHSA-364r-rq62-6gx5, MAL-2026-5495 | Malicious | Not scored | 10 Jun, 2026 | npm @solana-launchpad/sdk |
Malicious release: Malicious code in @meme-sdk/trade (npm) GHSA-4c2m-9v9c-75xv, MAL-2026-5494 | Malicious | Not scored | 10 Jun, 2026 | npm @meme-sdk/trade |
Malicious release: Malicious code in @validate-sdk/v2 (npm) GHSA-vqg9-785x-8j39, MAL-2026-5497 | Malicious | Not scored | 10 Jun, 2026 | npm @validate-sdk/v2 |
Malicious release: Malicious code in coinbase-wallet-utils (npm) GHSA-6228-p677-g9p7, MAL-2026-5499 | Malicious | Not scored | 10 Jun, 2026 | npm coinbase-wallet-utils |
Malicious release: Malicious code in ethers-jss (npm) GHSA-xh65-7qcm-493w, MAL-2026-5501 | Malicious | Not scored | 10 Jun, 2026 | npm ethers-jss |
Malicious release: Malicious code in csc154-internall-depend (npm) GHSA-m3gw-x6rc-fp3r, MAL-2026-5500 | Malicious | Not scored | 10 Jun, 2026 | npm csc154-internall-depend |
Malicious release: Malicious code in @builder.io/dev-tools (npm) GHSA-4fm3-j964-p869, MAL-2026-5493 | Malicious | Not scored | 10 Jun, 2026 | npm @builder.io/dev-tools |
Malicious release: Malicious code in xnder-sdk (npm) GHSA-5vr8-6v9x-3vxm, MAL-2026-5491 | Malicious | Not scored | 10 Jun, 2026 | npm xnder-sdk |
Malicious release: Malicious code in xnder-wrapper-module (npm) GHSA-jxcv-3994-r8xf, MAL-2026-5492 | Malicious | Not scored | 10 Jun, 2026 | npm xnder-wrapper-module |
Malicious release: Malicious code in sb-original (npm) GHSA-wv26-jcfp-4phh, MAL-2026-5490 | Malicious | Not scored | 09 Jun, 2026 | npm sb-original |
Malicious release: Malicious code in bittensor-emission-tracker (PyPI) MAL-2026-5489 | Malicious | Not scored | 09 Jun, 2026 | PyPI bittensor-emission-tracker |
Malicious release: Malicious code in react-pinojs (npm) GHSA-3w28-cv4q-v393, MAL-2026-5488 | Malicious | Not scored | 09 Jun, 2026 | npm react-pinojs |
Malicious release: Malicious code in menu-filter-widget-web (npm) MAL-2026-5486 | Malicious | Not scored | 09 Jun, 2026 | npm menu-filter-widget-web |
Malicious release: Malicious code in mcp-server-git (npm) GHSA-prf3-6rx4-9h5f, MAL-2026-5478 | Malicious | Not scored | 09 Jun, 2026 | npm mcp-server-git |
Malicious release: Malicious code in mcp-server-fetch (npm) GHSA-rh9p-4pg3-8628, MAL-2026-5476 | Malicious | Not scored | 09 Jun, 2026 | npm mcp-server-fetch |
Malicious release: Malicious code in mcp-server-postgres (npm) GHSA-vm2g-qj5x-x234, MAL-2026-5481 | Malicious | Not scored | 09 Jun, 2026 | npm mcp-server-postgres |
Malicious release: Malicious code in mcp-server-redis (npm) GHSA-wrqr-prmr-6x32, MAL-2026-5482 | Malicious | Not scored | 09 Jun, 2026 | npm mcp-server-redis |
Malicious release: Malicious code in mcp-server-sequential-thinking (npm) GHSA-hrmj-jj6j-m2m2, GHSA-w69h-vf37-j4w6, MAL-2026-5484 | Malicious | Not scored | 09 Jun, 2026 | npm mcp-server-sequential-thinking |
Malicious release: Malicious code in mcp-server-figma (npm) GHSA-8j33-qh42-vjc6, MAL-2026-5477 | Malicious | Not scored | 09 Jun, 2026 | npm mcp-server-figma |
Malicious release: Malicious code in mcp-server-notion (npm) GHSA-56wr-9mvj-77pf, GHSA-mx42-9xv4-vm87, MAL-2026-5480, SNYK-JS-MCPSERVERNOTION-19161387 | Malicious | Not scored | 09 Jun, 2026 | npm mcp-server-notion |
Malicious release: Malicious code in mcp-server-sentry (npm) GHSA-m5mm-f722-7vcq, MAL-2026-5483 | Malicious | Not scored | 09 Jun, 2026 | npm mcp-server-sentry |
Malicious release: Malicious code in mcp-server-github (npm) GHSA-95pj-hrh5-27gq, MAL-2026-5479 | Malicious | Not scored | 09 Jun, 2026 | npm mcp-server-github |
Malicious release: Malicious code in mcp-server-supabase (npm) GHSA-m633-5vq7-98qx, MAL-2026-5485 | Malicious | Not scored | 09 Jun, 2026 | npm mcp-server-supabase |
Malicious release: Malicious code in getd-eslint-rules (npm) GHSA-jqwv-7cxv-rhvm, MAL-2026-5466 | Malicious | Not scored | 09 Jun, 2026 | npm getd-eslint-rules |
Malicious release: Malicious code in getd-pantallas-cliente (npm) GHSA-jgp5-45jr-pqpc, MAL-2026-5468 | Malicious | Not scored | 09 Jun, 2026 | npm getd-pantallas-cliente |
Malicious release: Malicious code in getd-typescript-eslint-rules (npm) GHSA-v3g3-ppm6-4vqp, MAL-2026-5470 | Malicious | Not scored | 09 Jun, 2026 | npm getd-typescript-eslint-rules |
Malicious release: Malicious code in gethandler-api (npm) GHSA-92ff-fv46-jh35, MAL-2026-5473 | Malicious | Not scored | 09 Jun, 2026 | npm gethandler-api |
Malicious release: Malicious code in getd-transactional-web (npm) GHSA-7f9r-465j-5hj6, MAL-2026-5469 | Malicious | Not scored | 09 Jun, 2026 | npm getd-transactional-web |
Malicious release: Malicious code in getd-handler-api (npm) GHSA-wgvw-wjqc-rg8w, MAL-2026-5467 | Malicious | Not scored | 09 Jun, 2026 | npm getd-handler-api |
Malicious release: Malicious code in getd-ui-library (npm) GHSA-8h8q-6m6x-v8vv, MAL-2026-5471 | Malicious | Not scored | 09 Jun, 2026 | npm getd-ui-library |
Malicious release: Malicious code in getui-library (npm) GHSA-g3m4-7rp4-85gj, MAL-2026-5474 | Malicious | Not scored | 09 Jun, 2026 | npm getui-library |