Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in nodemon-pack (npm) GHSA-pqxq-jw84-3x8f, MAL-2026-5174 | Malicious | Not scored | 03 Jun, 2026 | npm nodemon-pack |
Malicious release: Malicious code in spadata (PyPI) MAL-2026-5173 | Malicious | Not scored | 03 Jun, 2026 | PyPI spadata |
Malicious release: Malicious code in brave-search-mcp-server (npm) MAL-2026-5182 | Malicious | Not scored | 03 Jun, 2026 | npm brave-search-mcp-server |
Malicious release: Malicious code in spaysdata (PyPI) MAL-2026-5171 | Malicious | Not scored | 02 Jun, 2026 | PyPI spaysdata |
Malicious release: Malicious code in spaysrbdata (PyPI) MAL-2026-5170 | Malicious | Not scored | 02 Jun, 2026 | PyPI spaysrbdata |
Malicious release: Malicious code in fundraiserserv (npm) GHSA-r4jv-gh5g-mhgg, MAL-2026-5172 | Malicious | Not scored | 02 Jun, 2026 | npm fundraiserserv |
Malicious release: Malicious code in vg-interaction-model (npm) MAL-2026-5168 | Malicious | Not scored | 02 Jun, 2026 | npm vg-interaction-model |
Malicious release: Malicious code in chai-parse (npm) GHSA-f528-hm3f-2jx6, MAL-2026-5169 | Malicious | Not scored | 02 Jun, 2026 | npm chai-parse |
Malicious release: Malicious code in jules-test-utils (PyPI) MAL-2026-5167 | Malicious | Not scored | 02 Jun, 2026 | PyPI jules-test-utils |
Malicious release: Malicious code in sourceflow-tracker (npm) GHSA-c75m-7mcf-hwrg, MAL-2026-5166 | Malicious | Not scored | 02 Jun, 2026 | npm sourceflow-tracker |
Malicious release: Malicious code in page-info-service (npm) GHSA-67v8-5gw6-m65g, MAL-2026-5158 | Malicious | Not scored | 02 Jun, 2026 | npm page-info-service |
Malicious release: Malicious code in po-ops-local-dev (npm) GHSA-r7j7-4gwg-rg72, MAL-2026-5159 | Malicious | Not scored | 02 Jun, 2026 | npm po-ops-local-dev |
Malicious release: Malicious code in bt-signal-utils (PyPI) MAL-2026-5160 | Malicious | Not scored | 02 Jun, 2026 | PyPI bt-signal-utils |
Malicious release: Malicious code in @att-ebiz/abs-components-bc (npm) GHSA-6mgp-q6qp-ffj2, MAL-2026-5153 | Malicious | Not scored | 02 Jun, 2026 | npm @att-ebiz/abs-components-bc |
Malicious release: Malicious code in quant-backtest-helpers (PyPI) MAL-2026-5152 | Malicious | Not scored | 02 Jun, 2026 | PyPI quant-backtest-helpers |
Malicious release: Malicious code in @aonunited/angular (npm) GHSA-xm5f-7c4r-7wgx, MAL-2026-5150 | Malicious | Not scored | 02 Jun, 2026 | npm @aonunited/angular |
Malicious release: Malicious code in parsimonius (PyPI) MAL-2026-5151 | Malicious | Not scored | 02 Jun, 2026 | PyPI parsimonius |
Malicious release: Malicious code in rookie-security-test-pkg (npm) MAL-2026-5132 | Malicious | Not scored | 01 Jun, 2026 | npm rookie-security-test-pkg |
Malicious release: Malicious code in align_rest_api (RubyGems) GHSA-9pwh-fhvv-qr5q, MAL-2026-5149 | Malicious | Not scored | 01 Jun, 2026 | RubyGems align_rest_api |
Malicious release: Malicious code in imgmatrix-analysis (PyPI) MAL-2026-5123 | Malicious | Not scored | 01 Jun, 2026 | PyPI imgmatrix-analysis |
Malicious release: Malicious code in picnic-react-mise-en-place (npm) MAL-2026-5122 | Malicious | Not scored | 01 Jun, 2026 | npm picnic-react-mise-en-place |
Malicious release: Malicious code in @chat-template/auth (npm) GHSA-5jx8-qv7v-hv32, MAL-2026-5124 | Malicious | Not scored | 01 Jun, 2026 | npm @chat-template/auth |
Malicious release: Malicious code in nepsnowplow (npm) MAL-2026-5121 | Malicious | Not scored | 01 Jun, 2026 | npm nepsnowplow |
Malicious release: Malicious code in redteam-qxz7-utils (PyPI) MAL-2026-5120 | Malicious | Not scored | 01 Jun, 2026 | PyPI redteam-qxz7-utils |
Malicious release: Malicious code in jingmeideshishi (npm) GHSA-pc3j-w4f9-94hj, MAL-2026-5110 | Malicious | Not scored | 01 Jun, 2026 | npm jingmeideshishi |
Malicious release: Malicious code in @ewfewfewf/testhackerrr (npm) GHSA-p4gj-2hmg-hj4f, MAL-2026-5102 | Malicious | Not scored | 01 Jun, 2026 | npm @ewfewfewf/testhackerrr |
Malicious release: Malicious code in @osamdefeirrighs/testhackfrrferrr (npm) GHSA-rrrc-gchv-j329, MAL-2026-5103 | Malicious | Not scored | 01 Jun, 2026 | npm @osamdefeirrighs/testhackfrrferrr |
Malicious release: Malicious code in @pcldpvkoewpogw/testhacker (npm) GHSA-xjcm-hjvm-fmhp, MAL-2026-5104 | Malicious | Not scored | 01 Jun, 2026 | npm @pcldpvkoewpogw/testhacker |
Malicious release: Malicious code in cms-github (npm) GHSA-3r39-h7xh-jg85, MAL-2026-5107 | Malicious | Not scored | 01 Jun, 2026 | npm cms-github |
Malicious release: Malicious code in shopifyto-cms (npm) GHSA-92q8-c63v-g77x, MAL-2026-5109 | Malicious | Not scored | 01 Jun, 2026 | npm shopifyto-cms |
Malicious release: Malicious code in cms-helpgit (npm) GHSA-hjw8-jc8q-mvwj, MAL-2026-5108 | Malicious | Not scored | 01 Jun, 2026 | npm cms-helpgit |
Malicious release: Malicious code in chai-as-minted (npm) GHSA-85px-g4cg-g2g3, MAL-2026-5106 | Malicious | Not scored | 01 Jun, 2026 | npm chai-as-minted |
Malicious release: Malicious code in @tmecontinue/cli (npm) GHSA-jq5f-g7j2-8f9g, MAL-2026-5105 | Malicious | Not scored | 01 Jun, 2026 | npm @tmecontinue/cli |
Malicious release: Malicious code in @antoncallahan/aws-user-helper (npm) GHSA-v2cq-j5gf-pf5g, MAL-2026-5101 | Malicious | Not scored | 01 Jun, 2026 | npm @antoncallahan/aws-user-helper |
Malicious release: Malicious code in @customer-threesixty/assets (npm) MAL-2026-5154 | Malicious | Not scored | 01 Jun, 2026 | npm @customer-threesixty/assets |
Malicious release: Malicious code in @ownit/core (npm) MAL-2026-5155 | Malicious | Not scored | 01 Jun, 2026 | npm @ownit/core |
Malicious release: Malicious code in @telenor-se/core (npm) MAL-2026-5156 | Malicious | Not scored | 01 Jun, 2026 | npm @telenor-se/core |
Malicious release: Malicious code in @tse-digital/core (npm) MAL-2026-5157 | Malicious | Not scored | 01 Jun, 2026 | npm @tse-digital/core |
Malicious release: Malicious code in @emcd-vue/loans (npm) GHSA-q777-mww2-r86p, MAL-2026-5165 | Malicious | Not scored | 01 Jun, 2026 | npm @emcd-vue/loans |
Malicious release: Malicious code in @emcd-vue/auth (npm) GHSA-gj65-7753-2q9f, MAL-2026-5163 | Malicious | Not scored | 01 Jun, 2026 | npm @emcd-vue/auth |
Malicious release: Malicious code in @emcd-vue/b2b-pay-form (npm) GHSA-xqjh-fp6w-54g6, MAL-2026-5164 | Malicious | Not scored | 01 Jun, 2026 | npm @emcd-vue/b2b-pay-form |
Malicious release: Malicious code in @redhat-cloud-services/entitlements-client (npm) GHSA-28hc-2275-h287, MAL-2026-5125 | Malicious | Not scored | 01 Jun, 2026 | npm @redhat-cloud-services/entitlements-client |
Malicious release: Malicious code in @redhat-cloud-services/rbac-client (npm) GHSA-2p99-xvqh-j893, MAL-2026-5116 | Malicious | Not scored | 01 Jun, 2026 | npm @redhat-cloud-services/rbac-client |
Malicious release: Malicious code in @redhat-cloud-services/host-inventory-client (npm) GHSA-4hcm-2c2r-2rhm, MAL-2026-5141 | Malicious | Not scored | 01 Jun, 2026 | npm @redhat-cloud-services/host-inventory-client |
Malicious release: Malicious code in @redhat-cloud-services/tsc-transform-imports (npm) GHSA-4p47-xv4r-786w, GHSA-8gf7-gc4w-pwh7, MAL-2026-5147 | Malicious | Not scored | 01 Jun, 2026 | npm @redhat-cloud-services/tsc-transform-imports |
Malicious release: Malicious code in @redhat-cloud-services/types (npm) GHSA-4qj4-x996-qvgw, GHSA-8xj2-9c64-m64h, MAL-2026-5119 | Malicious | Not scored | 01 Jun, 2026 | npm @redhat-cloud-services/types |
Malicious release: Malicious code in @redhat-cloud-services/frontend-components-remediations (npm) GHSA-4rjr-7qhx-vjwg, MAL-2026-5127 | Malicious | Not scored | 01 Jun, 2026 | npm @redhat-cloud-services/frontend-components-remediations |
Malicious release: Malicious code in @redhat-cloud-services/frontend-components-advisor-components (npm) GHSA-873j-vjwp-88w8, MAL-2026-5135 | Malicious | Not scored | 01 Jun, 2026 | npm @redhat-cloud-services/frontend-components-advisor-components |
Malicious release: Malicious code in @redhat-cloud-services/integrations-client (npm) GHSA-8x4g-q845-wpfc, MAL-2026-5130 | Malicious | Not scored | 01 Jun, 2026 | npm @redhat-cloud-services/integrations-client |
Malicious release: Malicious code in @redhat-cloud-services/chrome (npm) GHSA-942v-f47r-w9c3, MAL-2026-5111 | Malicious | Not scored | 01 Jun, 2026 | npm @redhat-cloud-services/chrome |