Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @redhat-cloud-services/topological-inventory-client (npm) GHSA-9wp8-557p-2hvf, MAL-2026-5118 | Malicious | Not scored | 01 Jun, 2026 | npm @redhat-cloud-services/topological-inventory-client |
Malicious release: Malicious code in @redhat-cloud-services/eslint-config-redhat-cloud-services (npm) GHSA-c3mv-fjj4-2542, MAL-2026-5112 | Malicious | Not scored | 01 Jun, 2026 | npm @redhat-cloud-services/eslint-config-redhat-cloud-services |
Malicious release: Malicious code in @redhat-cloud-services/rule-components (npm) GHSA-c4gm-6fh3-76v9, MAL-2026-5117 | Malicious | Not scored | 01 Jun, 2026 | npm @redhat-cloud-services/rule-components |
Malicious release: Malicious code in @redhat-cloud-services/remediations-client (npm) GHSA-cc5x-qv4h-qjgj, MAL-2026-5146 | Malicious | Not scored | 01 Jun, 2026 | npm @redhat-cloud-services/remediations-client |
Malicious release: Malicious code in @redhat-cloud-services/frontend-components-config-utilities (npm) GHSA-cxfw-p322-rfrv, MAL-2026-5114 | Malicious | Not scored | 01 Jun, 2026 | npm @redhat-cloud-services/frontend-components-config-utilities |
Malicious release: Malicious code in @redhat-cloud-services/frontend-components-notifications (npm) GHSA-ghcf-x8cx-89q8, GHSA-vvm2-35w3-pp39, MAL-2026-5136 | Malicious | Not scored | 01 Jun, 2026 | npm @redhat-cloud-services/frontend-components-notifications |
Malicious release: Malicious code in @redhat-cloud-services/hcc-pf-mcp (npm) GHSA-gw27-332x-rf3r, MAL-2026-5140 | Malicious | Not scored | 01 Jun, 2026 | npm @redhat-cloud-services/hcc-pf-mcp |
Malicious release: Malicious code in @redhat-cloud-services/insights-client (npm) GHSA-gw9m-7c68-vq26, MAL-2026-5142 | Malicious | Not scored | 01 Jun, 2026 | npm @redhat-cloud-services/insights-client |
Malicious release: Malicious code in @redhat-cloud-services/frontend-components-config (npm) GHSA-h43w-g623-gfmv, GHSA-r28x-h6v7-8rjj, MAL-2026-5126 | Malicious | Not scored | 01 Jun, 2026 | npm @redhat-cloud-services/frontend-components-config |
Malicious release: Malicious code in @redhat-cloud-services/frontend-components-translations (npm) GHSA-h5c9-cj46-7p79, MAL-2026-5137 | Malicious | Not scored | 01 Jun, 2026 | npm @redhat-cloud-services/frontend-components-translations |
Malicious release: Malicious code in @redhat-cloud-services/config-manager-client (npm) GHSA-h8h2-fp9q-h887, MAL-2026-5134 | Malicious | Not scored | 01 Jun, 2026 | npm @redhat-cloud-services/config-manager-client |
Malicious release: Malicious code in @redhat-cloud-services/quickstarts-client (npm) GHSA-mj98-cgm5-6xrr, MAL-2026-5115 | Malicious | Not scored | 01 Jun, 2026 | npm @redhat-cloud-services/quickstarts-client |
Malicious release: Malicious code in @redhat-cloud-services/frontend-components (npm) GHSA-mrgj-mcjh-5mf2, MAL-2026-5113 | Malicious | Not scored | 01 Jun, 2026 | npm @redhat-cloud-services/frontend-components |
Malicious release: Malicious code in @redhat-cloud-services/vulnerabilities-client (npm) GHSA-p4vp-xg44-93v7, MAL-2026-5148 | Malicious | Not scored | 01 Jun, 2026 | npm @redhat-cloud-services/vulnerabilities-client |
Malicious release: Malicious code in @redhat-cloud-services/frontend-components-utilities (npm) GHSA-r9mp-ff22-jhrr, MAL-2026-5138 | Malicious | Not scored | 01 Jun, 2026 | npm @redhat-cloud-services/frontend-components-utilities |
Malicious release: Malicious code in @redhat-cloud-services/notifications-client (npm) GHSA-rfq7-3pmv-5h3h, MAL-2026-5144 | Malicious | Not scored | 01 Jun, 2026 | npm @redhat-cloud-services/notifications-client |
Malicious release: Malicious code in @redhat-cloud-services/hcc-feo-mcp (npm) GHSA-vgm5-jmvr-cjgf, MAL-2026-5129 | Malicious | Not scored | 01 Jun, 2026 | npm @redhat-cloud-services/hcc-feo-mcp |
Malicious release: Malicious code in @redhat-cloud-services/sources-client (npm) GHSA-vp9c-9mjm-2f7w, MAL-2026-5131 | Malicious | Not scored | 01 Jun, 2026 | npm @redhat-cloud-services/sources-client |
Malicious release: Malicious code in @redhat-cloud-services/patch-client (npm) GHSA-vx4h-8456-6pp3, MAL-2026-5145 | Malicious | Not scored | 01 Jun, 2026 | npm @redhat-cloud-services/patch-client |
Malicious release: Malicious code in @redhat-cloud-services/javascript-clients-shared (npm) GHSA-wfwj-j63c-gg6h, MAL-2026-5143 | Malicious | Not scored | 01 Jun, 2026 | npm @redhat-cloud-services/javascript-clients-shared |
Malicious release: Malicious code in @redhat-cloud-services/frontend-components-testing (npm) GHSA-wgvx-w8g7-vh4h, MAL-2026-5128 | Malicious | Not scored | 01 Jun, 2026 | npm @redhat-cloud-services/frontend-components-testing |
Malicious release: Malicious code in @redhat-cloud-services/compliance-client (npm) GHSA-x4x7-xp58-wjrh, MAL-2026-5133 | Malicious | Not scored | 01 Jun, 2026 | npm @redhat-cloud-services/compliance-client |
Malicious release: Malicious code in @redhat-cloud-services/hcc-kessel-mcp (npm) GHSA-xh7j-7gfw-g434, MAL-2026-5139 | Malicious | Not scored | 01 Jun, 2026 | npm @redhat-cloud-services/hcc-kessel-mcp |
Malicious release: Malicious code in discord-massban (PyPI) MAL-2026-5099 | Malicious | Not scored | 31 May, 2026 | PyPI discord-massban |
Malicious release: Malicious code in obfuscation (PyPI) MAL-2026-5100 | Malicious | Not scored | 31 May, 2026 | PyPI obfuscation |
Malicious release: Malicious code in js-shared-modules (npm) GHSA-57xw-xm2f-j2wc, MAL-2026-5098 | Malicious | Not scored | 31 May, 2026 | npm js-shared-modules |
Malicious release: Malicious code in @challenger6/vm-pattern-library (npm) MAL-2026-5095 | Malicious | Not scored | 31 May, 2026 | npm @challenger6/vm-pattern-library |
Malicious release: Malicious code in cscc-glass-house (PyPI) MAL-2026-5096 | Malicious | Not scored | 31 May, 2026 | PyPI cscc-glass-house |
Malicious release: Malicious code in hell-cipher (PyPI) MAL-2026-5094 | Malicious | Not scored | 31 May, 2026 | PyPI hell-cipher |
Malicious release: Malicious code in h4xupdate (PyPI) MAL-2026-5093 | Malicious | Not scored | 31 May, 2026 | PyPI h4xupdate |
Malicious release: Malicious code in retail-location-strategy-frontend (npm) MAL-2026-5092 | Malicious | Not scored | 30 May, 2026 | npm retail-location-strategy-frontend |
Malicious release: Malicious code in discord-ban (PyPI) MAL-2026-5091 | Malicious | Not scored | 30 May, 2026 | PyPI discord-ban |
Malicious release: Malicious code in cms-storehub (npm) GHSA-gvmr-7vwj-2mmf, MAL-2026-5097 | Malicious | Not scored | 30 May, 2026 | npm cms-storehub |
Malicious release: Malicious code in neuralforge-ml (PyPI) MAL-2026-5090 | Malicious | Not scored | 30 May, 2026 | PyPI neuralforge-ml |
Malicious release: Malicious code in crypto-helper (PyPI) MAL-2026-5088 | Malicious | Not scored | 30 May, 2026 | PyPI crypto-helper |
Malicious release: Malicious code in cryptolock (PyPI) MAL-2026-5089 | Malicious | Not scored | 30 May, 2026 | PyPI cryptolock |
Malicious release: Malicious code in buffer-utilities (npm) GHSA-67mv-3xg7-3726, MAL-2026-5087 | Malicious | Not scored | 30 May, 2026 | npm buffer-utilities |
Malicious release: Malicious code in polymarket-data (PyPI) MAL-2026-5086 | Malicious | Not scored | 30 May, 2026 | PyPI polymarket-data |
Malicious release: Malicious code in midoss (npm) GHSA-6mj4-8j98-6c94, MAL-2026-5073 | Malicious | Not scored | 29 May, 2026 | npm midoss |
Malicious release: Malicious code in customerdigital-service-lib (npm) GHSA-9vx3-fc8v-7w96, MAL-2026-5063 | Malicious | Not scored | 29 May, 2026 | npm customerdigital-service-lib |
Malicious release: Malicious code in hardhat-evmchain (npm) GHSA-f4xf-cwx5-r3jm, MAL-2026-5072 | Malicious | Not scored | 29 May, 2026 | npm hardhat-evmchain |
Malicious release: Malicious code in chai-bundle (npm) GHSA-q36r-56hw-2r46, MAL-2026-5059 | Malicious | Not scored | 29 May, 2026 | npm chai-bundle |
Malicious release: Malicious code in appkit-react-utils (npm) GHSA-fv6c-xqrw-prcr, MAL-2026-5057 | Malicious | Not scored | 29 May, 2026 | npm appkit-react-utils |
Malicious release: Malicious code in viem-multichain (npm) GHSA-88qj-pvmg-2jvm, MAL-2026-5084 | Malicious | Not scored | 29 May, 2026 | npm viem-multichain |
Malicious release: Malicious code in ethers-hdnode (npm) GHSA-f3p6-3xjv-cxwq, MAL-2026-5067 | Malicious | Not scored | 29 May, 2026 | npm ethers-hdnode |
Malicious release: Malicious code in ethers-contract (npm) GHSA-gxfh-j6jv-hc58, MAL-2026-5064 | Malicious | Not scored | 29 May, 2026 | npm ethers-contract |
Malicious release: Malicious code in argpras (npm) GHSA-qqwp-8jp6-678r, MAL-2026-5058 | Malicious | Not scored | 29 May, 2026 | npm argpras |
Malicious release: Malicious code in @cplace-paw-fe/cf-training-extended (npm) GHSA-4xc8-739q-c5wg, MAL-2026-5047 | Malicious | Not scored | 29 May, 2026 | npm @cplace-paw-fe/cf-training-extended |
Malicious release: Malicious code in @trp-individual-investor-adv-disc/adv-shared (npm) GHSA-83jm-r9rf-7gcf, MAL-2026-5056 | Malicious | Not scored | 29 May, 2026 | npm @trp-individual-investor-adv-disc/adv-shared |
Malicious release: Malicious code in @timelycare/config-service (npm) GHSA-qqc4-xcxr-cq7p, MAL-2026-5054 | Malicious | Not scored | 29 May, 2026 | npm @timelycare/config-service |