Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @cloudplatform-single-spa/svp-tags (npm) MAL-2026-4989 | Malicious | Not scored | 28 May, 2026 | npm @cloudplatform-single-spa/svp-tags |
Malicious release: Malicious code in @cloudplatform-single-spa/svp-tasks (npm) MAL-2026-4990 | Malicious | Not scored | 28 May, 2026 | npm @cloudplatform-single-spa/svp-tasks |
Malicious release: Malicious code in @cloudplatform-single-spa/svp-vdi (npm) MAL-2026-4991 | Malicious | Not scored | 28 May, 2026 | npm @cloudplatform-single-spa/svp-vdi |
Malicious release: Malicious code in @cloudplatform-single-spa/svp-vm-migration (npm) MAL-2026-4992 | Malicious | Not scored | 28 May, 2026 | npm @cloudplatform-single-spa/svp-vm-migration |
Malicious release: Malicious code in @cloudplatform-single-spa/timescale-db (npm) MAL-2026-4993 | Malicious | Not scored | 28 May, 2026 | npm @cloudplatform-single-spa/timescale-db |
Malicious release: Malicious code in @cloudplatform-single-spa/vcenter-manager (npm) MAL-2026-4994 | Malicious | Not scored | 28 May, 2026 | npm @cloudplatform-single-spa/vcenter-manager |
Malicious release: Malicious code in @cloudplatform-single-spa/vcenter-virtual-machines (npm) MAL-2026-4995 | Malicious | Not scored | 28 May, 2026 | npm @cloudplatform-single-spa/vcenter-virtual-machines |
Malicious release: Malicious code in @cloudplatform-single-spa/vdi (npm) MAL-2026-4996 | Malicious | Not scored | 28 May, 2026 | npm @cloudplatform-single-spa/vdi |
Malicious release: Malicious code in @cloudplatform-single-spa/virtual-ip (npm) MAL-2026-4997 | Malicious | Not scored | 28 May, 2026 | npm @cloudplatform-single-spa/virtual-ip |
Malicious release: Malicious code in @cloudplatform-single-spa/virtual-machines (npm) MAL-2026-4998 | Malicious | Not scored | 28 May, 2026 | npm @cloudplatform-single-spa/virtual-machines |
Malicious release: Malicious code in @cloudplatform-single-spa/vmmanager (npm) MAL-2026-4999 | Malicious | Not scored | 28 May, 2026 | npm @cloudplatform-single-spa/vmmanager |
Malicious release: Malicious code in @cloudplatform-single-spa/vmware-draas (npm) MAL-2026-5000 | Malicious | Not scored | 28 May, 2026 | npm @cloudplatform-single-spa/vmware-draas |
Malicious release: Malicious code in @cloudplatform-single-spa/vpc (npm) MAL-2026-5001 | Malicious | Not scored | 28 May, 2026 | npm @cloudplatform-single-spa/vpc |
Malicious release: Malicious code in @cloudplatform-single-spa/vpc-endpoint (npm) MAL-2026-5002 | Malicious | Not scored | 28 May, 2026 | npm @cloudplatform-single-spa/vpc-endpoint |
Malicious release: Malicious code in @debit-ib/desktop-debit-ib-additional-card-form (npm) MAL-2026-5004 | Malicious | Not scored | 28 May, 2026 | npm @debit-ib/desktop-debit-ib-additional-card-form |
Malicious release: Malicious code in @debit-ib/mobile-debit-ib-additional-card-form (npm) MAL-2026-5005 | Malicious | Not scored | 28 May, 2026 | npm @debit-ib/mobile-debit-ib-additional-card-form |
Malicious release: Malicious code in @fb-deposit/form-deposit (npm) MAL-2026-5006 | Malicious | Not scored | 28 May, 2026 | npm @fb-deposit/form-deposit |
Malicious release: Malicious code in @fb-deposit/form-deposit-auth (npm) MAL-2026-5007 | Malicious | Not scored | 28 May, 2026 | npm @fb-deposit/form-deposit-auth |
Malicious release: Malicious code in @fb-deposit/form-deposit-calc (npm) MAL-2026-5008 | Malicious | Not scored | 28 May, 2026 | npm @fb-deposit/form-deposit-calc |
Malicious release: Malicious code in @fb-deposit/form-savings-account (npm) MAL-2026-5009 | Malicious | Not scored | 28 May, 2026 | npm @fb-deposit/form-savings-account |
Malicious release: Malicious code in @mlspace/allocations (npm) MAL-2026-5010 | Malicious | Not scored | 28 May, 2026 | npm @mlspace/allocations |
Malicious release: Malicious code in @mlspace/connectors (npm) MAL-2026-5011 | Malicious | Not scored | 28 May, 2026 | npm @mlspace/connectors |
Malicious release: Malicious code in @mlspace/docker-registry (npm) MAL-2026-5012 | Malicious | Not scored | 28 May, 2026 | npm @mlspace/docker-registry |
Malicious release: Malicious code in @mlspace/dtransfer (npm) MAL-2026-5013 | Malicious | Not scored | 28 May, 2026 | npm @mlspace/dtransfer |
Malicious release: Malicious code in @mlspace/dtransfer-history (npm) MAL-2026-5014 | Malicious | Not scored | 28 May, 2026 | npm @mlspace/dtransfer-history |
Malicious release: Malicious code in @mlspace/env-gitlab (npm) MAL-2026-5015 | Malicious | Not scored | 28 May, 2026 | npm @mlspace/env-gitlab |
Malicious release: Malicious code in @mlspace/env-jobs (npm) MAL-2026-5016 | Malicious | Not scored | 28 May, 2026 | npm @mlspace/env-jobs |
Malicious release: Malicious code in @mlspace/env-jupyter-server (npm) MAL-2026-5017 | Malicious | Not scored | 28 May, 2026 | npm @mlspace/env-jupyter-server |
Malicious release: Malicious code in @mlspace/experiments (npm) MAL-2026-5018 | Malicious | Not scored | 28 May, 2026 | npm @mlspace/experiments |
Malicious release: Malicious code in @mlspace/experiments-monitoring (npm) MAL-2026-5019 | Malicious | Not scored | 28 May, 2026 | npm @mlspace/experiments-monitoring |
Malicious release: Malicious code in @mlspace/file-manager (npm) MAL-2026-5020 | Malicious | Not scored | 28 May, 2026 | npm @mlspace/file-manager |
Malicious release: Malicious code in @mlspace/inference-build (npm) MAL-2026-5021 | Malicious | Not scored | 28 May, 2026 | npm @mlspace/inference-build |
Malicious release: Malicious code in @mlspace/inference-deploy (npm) MAL-2026-5022 | Malicious | Not scored | 28 May, 2026 | npm @mlspace/inference-deploy |
Malicious release: Malicious code in @mlspace/model-monitoring (npm) MAL-2026-5023 | Malicious | Not scored | 28 May, 2026 | npm @mlspace/model-monitoring |
Malicious release: Malicious code in @mlspace/model-registry (npm) MAL-2026-5024 | Malicious | Not scored | 28 May, 2026 | npm @mlspace/model-registry |
Malicious release: Malicious code in @mlspace/profile (npm) MAL-2026-5025 | Malicious | Not scored | 28 May, 2026 | npm @mlspace/profile |
Malicious release: Malicious code in @mlspace/shared-storage (npm) MAL-2026-5026 | Malicious | Not scored | 28 May, 2026 | npm @mlspace/shared-storage |
Malicious release: Malicious code in rogiant-install (PyPI) MAL-2026-4835 | Malicious | Not scored | 27 May, 2026 | PyPI rogiant-install |
Malicious release: Malicious code in @polka-ui/config (npm) GHSA-8pwf-pjp8-jw22, MAL-2026-4834 | Malicious | Not scored | 27 May, 2026 | npm @polka-ui/config |
Malicious release: Malicious code in bulletproof-json (npm) GHSA-w574-hfjv-7w24, MAL-2026-4833 | Malicious | Not scored | 27 May, 2026 | npm bulletproof-json |
Malicious release: Malicious code in editorial-code (npm) MAL-2026-4830 | Malicious | Not scored | 27 May, 2026 | npm editorial-code |
Malicious release: Malicious code in mse-authentication (npm) MAL-2026-4832 | Malicious | Not scored | 27 May, 2026 | npm mse-authentication |
Malicious release: Malicious code in editorial-mse-authentication-ui (npm) MAL-2026-4831 | Malicious | Not scored | 27 May, 2026 | npm editorial-mse-authentication-ui |
Malicious release: Malicious code in quatres (PyPI) MAL-2026-4829 | Malicious | Not scored | 27 May, 2026 | PyPI quatres |
Malicious release: Malicious code in hmacsync (PyPI) MAL-2026-4828 | Malicious | Not scored | 26 May, 2026 | PyPI hmacsync |
Malicious release: Malicious code in unleash-js (npm) GHSA-j5f8-3p7p-5c4c, MAL-2026-4827 | Malicious | Not scored | 26 May, 2026 | npm unleash-js |
Malicious release: Malicious code in wm-mapper (npm) GHSA-vqvw-vx7g-vp4p, MAL-2026-4826 | Malicious | Not scored | 26 May, 2026 | npm wm-mapper |
Malicious release: Malicious code in loadtest-browser-lib (npm) MAL-2026-4822 | Malicious | Not scored | 26 May, 2026 | npm loadtest-browser-lib |
Malicious release: Malicious code in @slipless/sdk (npm) MAL-2026-4815 | Malicious | Not scored | 26 May, 2026 | npm @slipless/sdk |
Malicious release: Malicious code in chainix (npm) GHSA-mrx8-p3w9-5cfm, MAL-2026-4817 | Malicious | Not scored | 26 May, 2026 | npm chainix |