Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @doaction/eventemitter (npm) GHSA-926j-qqmq-889c, MAL-2026-5370 | Malicious | Not scored | 09 Jun, 2026 | npm @doaction/eventemitter |
Malicious release: Malicious code in @doaction/example (npm) GHSA-w4g4-r5qj-rj58, MAL-2026-5371 | Malicious | Not scored | 09 Jun, 2026 | npm @doaction/example |
Malicious release: Malicious code in transacts (npm) GHSA-r8v2-q2r3-ghm6, MAL-2026-5368 | Malicious | Not scored | 09 Jun, 2026 | npm transacts |
Malicious release: Malicious code in moustick (npm) GHSA-979m-vm48-369f, MAL-2026-5347 | Malicious | Not scored | 09 Jun, 2026 | npm moustick |
Malicious release: Malicious code in cookie-parser-legacy (npm) GHSA-xv3p-wcmf-6hp8, MAL-2026-5346 | Malicious | Not scored | 09 Jun, 2026 | npm cookie-parser-legacy |
Malicious release: Malicious code in dstill (PyPI) MAL-2026-5345 | Malicious | Not scored | 09 Jun, 2026 | PyPI dstill |
Malicious release: Malicious code in os-ulid-void (npm) GHSA-7fhf-p3wv-2xrc, MAL-2026-5348 | Malicious | Not scored | 09 Jun, 2026 | npm os-ulid-void |
Malicious release: Malicious code in @bancolonbia/menu-filter-widget-web (npm) MAL-2026-5344 | Malicious | Not scored | 09 Jun, 2026 | npm @bancolonbia/menu-filter-widget-web |
Malicious release: Malicious code in farming-tools-12 (npm) MAL-2026-5357 | Malicious | Not scored | 09 Jun, 2026 | npm farming-tools-12 |
Malicious release: Malicious code in defi-tools-39 (npm) MAL-2026-5354 | Malicious | Not scored | 09 Jun, 2026 | npm defi-tools-39 |
Malicious release: Malicious code in swap-sdk-87 (npm) MAL-2026-5359 | Malicious | Not scored | 09 Jun, 2026 | npm swap-sdk-87 |
Malicious release: Malicious code in wallet-sdk-9 (npm) MAL-2026-5360 | Malicious | Not scored | 09 Jun, 2026 | npm wallet-sdk-9 |
Malicious release: Malicious code in ethereum-kit-9 (npm) MAL-2026-5356 | Malicious | Not scored | 09 Jun, 2026 | npm ethereum-kit-9 |
Malicious release: Malicious code in crypto-utils-7 (npm) MAL-2026-5353 | Malicious | Not scored | 09 Jun, 2026 | npm crypto-utils-7 |
Malicious release: Malicious code in ethereum-kit-1 (npm) MAL-2026-5355 | Malicious | Not scored | 09 Jun, 2026 | npm ethereum-kit-1 |
Malicious release: Malicious code in blockchain-helper-0 (npm) MAL-2026-5352 | Malicious | Not scored | 09 Jun, 2026 | npm blockchain-helper-0 |
Malicious release: Malicious code in @demica/shared (npm) GHSA-h89w-h537-fmq5, MAL-2026-5351 | Malicious | Not scored | 09 Jun, 2026 | npm @demica/shared |
Malicious release: Malicious code in @demica/resources (npm) GHSA-jpwc-w79c-8p63, MAL-2026-5350 | Malicious | Not scored | 09 Jun, 2026 | npm @demica/resources |
Malicious release: Malicious code in @demica/core (npm) GHSA-5ffq-j26h-5mr4, MAL-2026-5349 | Malicious | Not scored | 09 Jun, 2026 | npm @demica/core |
Malicious release: Malicious code in solana-core-4 (npm) MAL-2026-5358 | Malicious | Not scored | 09 Jun, 2026 | npm solana-core-4 |
Malicious release: Malicious code in web3-tools-9 (npm) MAL-2026-5361 | Malicious | Not scored | 09 Jun, 2026 | npm web3-tools-9 |
Malicious release: Malicious code in void-ulid (npm) GHSA-3697-j84m-hx3g, MAL-2026-5341 | Malicious | Not scored | 09 Jun, 2026 | npm void-ulid |
Malicious release: Malicious code in xfoofoox (PyPI) MAL-2026-5340 | Malicious | Not scored | 08 Jun, 2026 | PyPI xfoofoox |
Malicious release: Malicious code in solana-web3-py (PyPI) MAL-2026-5338 | Malicious | Not scored | 08 Jun, 2026 | PyPI solana-web3-py |
Malicious release: Malicious code in solana-cli-py (PyPI) MAL-2026-5336 | Malicious | Not scored | 08 Jun, 2026 | PyPI solana-cli-py |
Malicious release: Malicious code in solana-web3 (PyPI) MAL-2026-5337 | Malicious | Not scored | 08 Jun, 2026 | PyPI solana-web3 |
Malicious release: Malicious code in spl-token-py (PyPI) MAL-2026-5339 | Malicious | Not scored | 08 Jun, 2026 | PyPI spl-token-py |
Malicious release: Malicious code in xfoobar (PyPI) MAL-2026-5335 | Malicious | Not scored | 08 Jun, 2026 | PyPI xfoobar |
Malicious release: Malicious code in spaysrbx (PyPI) MAL-2026-5334 | Malicious | Not scored | 08 Jun, 2026 | PyPI spaysrbx |
Malicious release: Malicious code in nerfstudio-gs (PyPI) MAL-2026-5333 | Malicious | Not scored | 08 Jun, 2026 | PyPI nerfstudio-gs |
Malicious release: Malicious code in bittensor-burn (PyPI) MAL-2026-5331 | Malicious | Not scored | 08 Jun, 2026 | PyPI bittensor-burn |
Malicious release: Malicious code in xforpy (PyPI) MAL-2026-5332 | Malicious | Not scored | 08 Jun, 2026 | PyPI xforpy |
Malicious release: Malicious code in odoo-addon-spp-base (PyPI) MAL-2026-5367 | Malicious | Not scored | 08 Jun, 2026 | PyPI odoo-addon-spp-base |
Malicious release: Malicious code in bittensor-burn-alert (PyPI) MAL-2026-5330 | Malicious | Not scored | 08 Jun, 2026 | PyPI bittensor-burn-alert |
Malicious release: Malicious code in @zimmo/last_search (npm) MAL-2026-5328 | Malicious | Not scored | 08 Jun, 2026 | npm @zimmo/last_search |
Malicious release: Malicious code in @listings/energy-labels (npm) MAL-2026-5327 | Malicious | Not scored | 08 Jun, 2026 | npm @listings/energy-labels |
Malicious release: Malicious code in spaysdatarbx (PyPI) MAL-2026-5329 | Malicious | Not scored | 08 Jun, 2026 | PyPI spaysdatarbx |
Malicious release: Malicious code in quickwinston (npm) MAL-2026-5365 | Malicious | Not scored | 08 Jun, 2026 | npm quickwinston |
Malicious release: Malicious code in bt-burn-watch (PyPI) MAL-2026-5312 | Malicious | Not scored | 08 Jun, 2026 | PyPI bt-burn-watch |
Malicious release: Malicious code in bittensor-burn-monitor (PyPI) MAL-2026-5311 | Malicious | Not scored | 08 Jun, 2026 | PyPI bittensor-burn-monitor |
Malicious release: Malicious code in openai-mcp (PyPI) MAL-2026-5320, PYSEC-2026-1072 | Malicious | Not scored | 08 Jun, 2026 | PyPI openai-mcp |
Malicious release: Malicious code in tiktoken-mcp (PyPI) MAL-2026-5326, PYSEC-2026-1075 | Malicious | Not scored | 08 Jun, 2026 | PyPI tiktoken-mcp |
Malicious release: Malicious code in classwind-utils (npm) GHSA-ghrw-2645-5c47, MAL-2026-5307 | Malicious | Not scored | 08 Jun, 2026 | npm classwind-utils |
Malicious release: Malicious code in regexp-ts (npm) GHSA-5p9w-932r-cr5f, MAL-2026-5310 | Malicious | Not scored | 08 Jun, 2026 | npm regexp-ts |
Malicious release: Malicious code in nodemon-lint (npm) GHSA-cjg8-jrqm-2q9r, MAL-2026-5309 | Malicious | Not scored | 08 Jun, 2026 | npm nodemon-lint |
Malicious release: Malicious code in chai-mocks (npm) GHSA-5wqh-hxqx-c6j3, MAL-2026-5306 | Malicious | Not scored | 08 Jun, 2026 | npm chai-mocks |
Malicious release: Malicious code in nodemon-copack (npm) GHSA-pw2c-3h97-j57f, MAL-2026-5308 | Malicious | Not scored | 08 Jun, 2026 | npm nodemon-copack |
Malicious release: Malicious code in tlask (PyPI) MAL-2026-5305, PYSEC-2026-586 | Malicious | Not scored | 08 Jun, 2026 | PyPI tlask |
Malicious release: Malicious code in rlask (PyPI) MAL-2026-5303, PYSEC-2026-584 | Malicious | Not scored | 08 Jun, 2026 | PyPI rlask |
Malicious release: Malicious code in rsquests (PyPI) MAL-2026-5304 | Malicious | Not scored | 08 Jun, 2026 | PyPI rsquests |