Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in token-me-uk (npm) MAL-2026-4819 | Malicious | Not scored | 26 May, 2026 | npm token-me-uk |
Malicious release: Malicious code in datapipe-util (PyPI) MAL-2026-4820 | Malicious | Not scored | 26 May, 2026 | PyPI datapipe-util |
Malicious release: Malicious code in saturn-bail (npm) GHSA-948w-97g3-hvpp, MAL-2026-4818 | Malicious | Not scored | 26 May, 2026 | npm saturn-bail |
Malicious release: Malicious code in metricflow-tracker (npm) MAL-2026-4805 | Malicious | Not scored | 26 May, 2026 | npm metricflow-tracker |
Malicious release: Malicious code in vectordb-engine (PyPI) MAL-2026-4814 | Malicious | Not scored | 26 May, 2026 | PyPI vectordb-engine |
Malicious release: Malicious code in baidubsrc (PyPI) MAL-2026-4809 | Malicious | Not scored | 26 May, 2026 | PyPI baidubsrc |
Malicious release: Malicious code in docontrol-mcp (PyPI) MAL-2026-4811 | Malicious | Not scored | 26 May, 2026 | PyPI docontrol-mcp |
Malicious release: Malicious code in binproto (PyPI) MAL-2026-4810 | Malicious | Not scored | 26 May, 2026 | PyPI binproto |
Malicious release: Malicious code in web3-prices (npm) GHSA-g3vg-qhhh-pfv7, MAL-2026-4800 | Malicious | Not scored | 26 May, 2026 | npm web3-prices |
Malicious release: Malicious code in web3.prc (npm) GHSA-r4j3-79hx-xpr6, MAL-2026-4801 | Malicious | Not scored | 26 May, 2026 | npm web3.prc |
Malicious release: Malicious code in int-node (npm) GHSA-r4ww-65gv-rhv8, MAL-2026-4797 | Malicious | Not scored | 26 May, 2026 | npm int-node |
Malicious release: Malicious code in @fhkry/baileys (npm) GHSA-779h-825r-3p44, MAL-2026-4803 | Malicious | Not scored | 26 May, 2026 | npm @fhkry/baileys |
Malicious release: Malicious code in shop-minis (npm) GHSA-ghv6-vv2r-5f8v, MAL-2026-4807 | Malicious | Not scored | 26 May, 2026 | npm shop-minis |
Malicious release: Malicious code in fastjsonlog (npm) GHSA-82gw-34fc-qfwj, MAL-2026-4796 | Malicious | Not scored | 26 May, 2026 | npm fastjsonlog |
Malicious release: Malicious code in jsonlogbundler (npm) GHSA-hhf2-gfcc-vw45, MAL-2026-4798 | Malicious | Not scored | 26 May, 2026 | npm jsonlogbundler |
Malicious release: Malicious code in pdf-lib-enhanced (npm) GHSA-9qcm-qgjc-h848, MAL-2026-4799 | Malicious | Not scored | 26 May, 2026 | npm pdf-lib-enhanced |
Malicious release: Malicious code in xlsx-enhanced (npm) GHSA-j5gx-8qjw-gp5q, MAL-2026-4802 | Malicious | Not scored | 26 May, 2026 | npm xlsx-enhanced |
Malicious release: Malicious code in m-at-star-tools (PyPI) MAL-2026-4812 | Malicious | Not scored | 26 May, 2026 | PyPI m-at-star-tools |
Malicious release: Malicious code in shizukyu (npm) MAL-2026-4806 | Malicious | Not scored | 26 May, 2026 | npm shizukyu |
Malicious release: Malicious code in wm-idp-sdk (npm) GHSA-hq9q-4jgc-997v, MAL-2026-4808 | Malicious | Not scored | 26 May, 2026 | npm wm-idp-sdk |
Malicious release: Malicious code in react-json-chalk (npm) GHSA-x796-gxxr-pvcr, MAL-2026-4792 | Malicious | Not scored | 26 May, 2026 | npm react-json-chalk |
Malicious release: Malicious code in react-cleaner (npm) MAL-2026-4791 | Malicious | Not scored | 26 May, 2026 | npm react-cleaner |
Malicious release: Malicious code in vxui-react (npm) GHSA-783r-3958-xf8p, MAL-2026-4793 | Malicious | Not scored | 26 May, 2026 | npm vxui-react |
Malicious release: Malicious code in react-ui-polyfills (npm) GHSA-v7mj-pmr3-7x4p, MAL-2026-4784 | Malicious | Not scored | 26 May, 2026 | npm react-ui-polyfills |
Malicious release: Malicious code in test-nonmal-pkg-5 (npm) GHSA-gqhv-x4hg-wqv4, MAL-2026-4785 | Malicious | Not scored | 26 May, 2026 | npm test-nonmal-pkg-5 |
Malicious release: Malicious code in ether-bn.js (npm) GHSA-v3j8-x82x-chvr, MAL-2026-4779 | Malicious | Not scored | 26 May, 2026 | npm ether-bn.js |
Malicious release: Malicious code in reasonix-plugmem (npm) MAL-2026-4780 | Malicious | Not scored | 26 May, 2026 | npm reasonix-plugmem |
Malicious release: Malicious code in unique-id-64 (npm) GHSA-wp6h-8x7v-865g, MAL-2026-4781 | Malicious | Not scored | 26 May, 2026 | npm unique-id-64 |
Malicious release: Malicious code in 1cat-tunnel-client-zx (npm) MAL-2026-4778 | Malicious | Not scored | 26 May, 2026 | npm 1cat-tunnel-client-zx |
Malicious release: Malicious code in helu (PyPI) MAL-2026-4357 | Malicious | Not scored | 26 May, 2026 | PyPI helu |
Malicious release: Malicious code in testing-on-npmjs (npm) GHSA-4847-p5f9-4366, MAL-2026-4356 | Malicious | Not scored | 26 May, 2026 | npm testing-on-npmjs |
Malicious release: Malicious code in mistral-search-toolkit (PyPI) MAL-2026-4358 | Malicious | Not scored | 26 May, 2026 | PyPI mistral-search-toolkit |
Malicious release: Malicious code in mistral-workflows-plugins-webhook (PyPI) MAL-2026-4355 | Malicious | Not scored | 26 May, 2026 | PyPI mistral-workflows-plugins-webhook |
Malicious release: Malicious code in mistral-workflows-plugins-mistralai (PyPI) MAL-2026-4354 | Malicious | Not scored | 26 May, 2026 | PyPI mistral-workflows-plugins-mistralai |
Malicious release: Malicious code in mistral-workflows (PyPI) MAL-2026-4353 | Malicious | Not scored | 26 May, 2026 | PyPI mistral-workflows |
Malicious release: Malicious code in wao (npm) GHSA-hr8w-cxp4-33p7, MAL-2026-4711 | Malicious | Not scored | 26 May, 2026 | npm wao |
Malicious release: Malicious code in weavedb-lite (npm) MAL-2026-4720 | Malicious | Not scored | 26 May, 2026 | npm weavedb-lite |
Malicious release: Malicious code in weavedb-warp-contracts-plugin-deploy (npm) MAL-2026-4727 | Malicious | Not scored | 26 May, 2026 | npm weavedb-warp-contracts-plugin-deploy |
Malicious release: Malicious code in weavedb-console (npm) MAL-2026-4717 | Malicious | Not scored | 26 May, 2026 | npm weavedb-console |
Malicious release: Malicious code in weavedb-sdk-base (npm) MAL-2026-4724 | Malicious | Not scored | 26 May, 2026 | npm weavedb-sdk-base |
Malicious release: Malicious code in weavedb-exm-sdk (npm) MAL-2026-4718 | Malicious | Not scored | 26 May, 2026 | npm weavedb-exm-sdk |
Malicious release: Malicious code in arnext-arkb (npm) MAL-2026-4483 | Malicious | Not scored | 26 May, 2026 | npm arnext-arkb |
Malicious release: Malicious code in create-arnext-app (npm) MAL-2026-4538 | Malicious | Not scored | 26 May, 2026 | npm create-arnext-app |
Malicious release: Malicious code in roidjs (npm) MAL-2026-4663 | Malicious | Not scored | 26 May, 2026 | npm roidjs |
Malicious release: Malicious code in test-weavedb-sdk (npm) MAL-2026-4690 | Malicious | Not scored | 26 May, 2026 | npm test-weavedb-sdk |
Malicious release: Malicious code in arnext (npm) MAL-2026-4482 | Malicious | Not scored | 26 May, 2026 | npm arnext |
Malicious release: Malicious code in weavedb-client (npm) GHSA-6fj3-894w-h3x9, MAL-2026-4716 | Malicious | Not scored | 26 May, 2026 | npm weavedb-client |
Malicious release: Malicious code in atomic-notes (npm) MAL-2026-4486 | Malicious | Not scored | 26 May, 2026 | npm atomic-notes |
Malicious release: Malicious code in weavedb-offchain (npm) GHSA-pxrc-4fpx-c74r, MAL-2026-4722 | Malicious | Not scored | 26 May, 2026 | npm weavedb-offchain |
Malicious release: Malicious code in ai3 (npm) MAL-2026-4476 | Malicious | Not scored | 26 May, 2026 | npm ai3 |