Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @mikudeveloper/baileys (npm) GHSA-2xx9-x9v7-25x2, MAL-2026-16386 | Malicious | Not scored | 22 Sep, 2026 | npm @mikudeveloper/baileys |
Malicious release: Malicious code in @mr-supun-fernando/supunmd-bail (npm) MAL-2026-16387 | Malicious | Not scored | 22 Sep, 2026 | npm @mr-supun-fernando/supunmd-bail |
Malicious release: Malicious code in tlxbnhd (npm) MAL-2026-16385 | Malicious | Not scored | 22 Sep, 2026 | npm tlxbnhd |
Malicious release: Malicious code in tldriver (npm) MAL-2026-16384 | Malicious | Not scored | 22 Sep, 2026 | npm tldriver |
Malicious release: Malicious code in mxdriver (npm) MAL-2026-16383 | Malicious | Not scored | 22 Sep, 2026 | npm mxdriver |
Malicious release: Malicious code in chai-logger (npm) MAL-2026-16380 | Malicious | Not scored | 22 Sep, 2026 | npm chai-logger |
Malicious release: Malicious code in @tesla-insurance/vinless-quote (npm) GHSA-6m9v-pw95-fc67, MAL-2026-16378 | Malicious | Not scored | 22 Sep, 2026 | npm @tesla-insurance/vinless-quote |
Malicious release: Malicious code in @user-services/web-components (npm) GHSA-f3g4-6hpx-9mcq, MAL-2026-16379 | Malicious | Not scored | 22 Sep, 2026 | npm @user-services/web-components |
Malicious release: Malicious code in take-home-caller-id (npm) MAL-2026-16382 | Malicious | Not scored | 22 Sep, 2026 | npm take-home-caller-id |
Malicious release: Malicious code in cisco-github-simple (npm) MAL-2026-16381 | Malicious | Not scored | 22 Sep, 2026 | npm cisco-github-simple |
Malicious release: Malicious code in cloushaar-poc-exfil-91827 (PyPI) MAL-2026-16377 | Malicious | Not scored | 22 Sep, 2026 | PyPI cloushaar-poc-exfil-91827 |
Malicious release: Malicious code in test-react-app-out (npm) GHSA-vx3p-fwmg-p7g8, MAL-2026-16375 | Malicious | Not scored | 22 Sep, 2026 | npm test-react-app-out |
Malicious release: Malicious code in test-react-app-in (npm) GHSA-wm2w-4m2r-mv73, MAL-2026-16374 | Malicious | Not scored | 22 Sep, 2026 | npm test-react-app-in |
Malicious release: Malicious code in test-react-app-way (npm) GHSA-264w-9h55-v637, MAL-2026-16376 | Malicious | Not scored | 22 Sep, 2026 | npm test-react-app-way |
Malicious release: Malicious code in @zig-design-system/react (npm) GHSA-rqjq-px4f-2m8r, MAL-2026-16372 | Malicious | Not scored | 21 Sep, 2026 | npm @zig-design-system/react |
Malicious release: Malicious code in wos-library (npm) GHSA-mfwv-9gcf-2mww, MAL-2026-16373 | Malicious | Not scored | 21 Sep, 2026 | npm wos-library |
Malicious release: Malicious code in @vite-tab/tabui (npm) GHSA-q5h9-3mvh-45cf, MAL-2026-16371 | Malicious | Not scored | 21 Sep, 2026 | npm @vite-tab/tabui |
Malicious release: Malicious code in @uol-afiliados/affiliated-config-lib (npm) GHSA-mx57-mmpv-mwjr, MAL-2026-16370 | Malicious | Not scored | 21 Sep, 2026 | npm @uol-afiliados/affiliated-config-lib |
Malicious release: Malicious code in math-universe (npm) GHSA-97cg-r346-fg22, MAL-2026-16367 | Malicious | Not scored | 21 Sep, 2026 | npm math-universe |
Malicious release: Malicious code in mathsbase (npm) GHSA-v4cx-64j6-84xm, MAL-2026-16369 | Malicious | Not scored | 21 Sep, 2026 | npm mathsbase |
Malicious release: Malicious code in bytepack-probe-a7x3 (npm) MAL-2026-16364 | Malicious | Not scored | 21 Sep, 2026 | npm bytepack-probe-a7x3 |
Malicious release: Malicious code in mathmain (npm) GHSA-v6mx-2p6p-3628, MAL-2026-16368 | Malicious | Not scored | 21 Sep, 2026 | npm mathmain |
Malicious release: Malicious code in blue-string-formatter-utilss (npm) MAL-2026-16363 | Malicious | Not scored | 21 Sep, 2026 | npm blue-string-formatter-utilss |
Malicious release: Malicious code in my-ctf-helper-script-9921 (npm) GHSA-7mhc-78r2-fgw8, MAL-2026-16365 | Malicious | Not scored | 21 Sep, 2026 | npm my-ctf-helper-script-9921 |
Malicious release: Malicious code in pullgetsage (PyPI) MAL-2026-16366 | Malicious | Not scored | 21 Sep, 2026 | PyPI pullgetsage |
Malicious release: Malicious code in @asdfaskdjfksadhfkasf/nadaver2 (npm) GHSA-xxcj-347q-8rrr, MAL-2026-16357 | Malicious | Not scored | 21 Sep, 2026 | npm @asdfaskdjfksadhfkasf/nadaver2 |
Malicious release: Malicious code in @uh-platform/nadaver (npm) GHSA-v7wx-gg27-6p9g, MAL-2026-16360 | Malicious | Not scored | 21 Sep, 2026 | npm @uh-platform/nadaver |
Malicious release: Malicious code in @uh-platform/domain-widget (npm) GHSA-c842-qvgg-5vpf, MAL-2026-16359 | Malicious | Not scored | 21 Sep, 2026 | npm @uh-platform/domain-widget |
Malicious release: Malicious code in @uh-platform/webcard (npm) GHSA-7w7p-g9xr-2v29, MAL-2026-16362 | Malicious | Not scored | 21 Sep, 2026 | npm @uh-platform/webcard |
Malicious release: Malicious code in @uh-platform/cloud (npm) GHSA-xrhc-2pph-j3f7, MAL-2026-16358 | Malicious | Not scored | 21 Sep, 2026 | npm @uh-platform/cloud |
Malicious release: Malicious code in @uh-platform/nadaver2 (npm) GHSA-x2pw-3pc4-xvh5, MAL-2026-16361 | Malicious | Not scored | 21 Sep, 2026 | npm @uh-platform/nadaver2 |
Malicious release: Malicious code in gemini-computer-use (npm) MAL-2026-16355 | Malicious | Not scored | 21 Sep, 2026 | npm gemini-computer-use |
Malicious release: Malicious code in @woodpecker-web-shared/components (npm) GHSA-44hm-95r4-wcrf, MAL-2026-16354 | Malicious | Not scored | 21 Sep, 2026 | npm @woodpecker-web-shared/components |
Malicious release: Malicious code in @baanx/blockchain-config (npm) GHSA-f67m-pjx9-96cv, MAL-2026-16352 | Malicious | Not scored | 21 Sep, 2026 | npm @baanx/blockchain-config |
Malicious release: Malicious code in @baanx/abis (npm) GHSA-598m-93qh-82f9, MAL-2026-16351 | Malicious | Not scored | 21 Sep, 2026 | npm @baanx/abis |
Malicious release: Malicious code in @insiderintelligence/componentlibrary (npm) GHSA-rjh6-qm48-cg84, MAL-2026-16353 | Malicious | Not scored | 21 Sep, 2026 | npm @insiderintelligence/componentlibrary |
Malicious release: Malicious code in starlette-healthchecks (PyPI) MAL-2026-16356 | Malicious | Not scored | 21 Sep, 2026 | PyPI starlette-healthchecks |
Malicious release: Malicious code in bnppf-flag-icons (npm) GHSA-34p9-xxp2-hv3g, MAL-2026-16350 | Malicious | Not scored | 21 Sep, 2026 | npm bnppf-flag-icons |
Malicious release: Malicious code in hardhat-base (npm) MAL-2026-16348 | Malicious | Not scored | 21 Sep, 2026 | npm hardhat-base |
Malicious release: Malicious code in hardhat-devkit (npm) MAL-2026-16349 | Malicious | Not scored | 21 Sep, 2026 | npm hardhat-devkit |
Malicious release: Malicious code in rrs (PyPI) MAL-2026-16346 | Malicious | Not scored | 21 Sep, 2026 | PyPI rrs |
Malicious release: Malicious code in pf23727 (npm) GHSA-p2hc-jmvm-qwc9, MAL-2026-16338 | Malicious | Not scored | 21 Sep, 2026 | npm pf23727 |
Malicious release: Malicious code in pflag14570 (npm) GHSA-qxgf-vc83-fc34, MAL-2026-16341 | Malicious | Not scored | 21 Sep, 2026 | npm pflag14570 |
Malicious release: Malicious code in pflag29424 (npm) GHSA-8jr8-g7mm-57m6, MAL-2026-16342 | Malicious | Not scored | 21 Sep, 2026 | npm pflag29424 |
Malicious release: Malicious code in pf25133 (npm) GHSA-8f7g-cf69-g5p8, MAL-2026-16339 | Malicious | Not scored | 21 Sep, 2026 | npm pf25133 |
Malicious release: Malicious code in keroeltopgg (npm) MAL-2026-16334 | Malicious | Not scored | 21 Sep, 2026 | npm keroeltopgg |
Malicious release: Malicious code in keroeltopkkk (npm) MAL-2026-16336 | Malicious | Not scored | 21 Sep, 2026 | npm keroeltopkkk |
Malicious release: Malicious code in keroeltopkk (npm) MAL-2026-16335 | Malicious | Not scored | 21 Sep, 2026 | npm keroeltopkk |
Malicious release: Malicious code in my-cdn-script (npm) MAL-2026-16337 | Malicious | Not scored | 21 Sep, 2026 | npm my-cdn-script |
Malicious release: Malicious code in pf25262 (npm) GHSA-3pg3-52vp-54fg, MAL-2026-16340 | Malicious | Not scored | 21 Sep, 2026 | npm pf25262 |