Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in cdk-sagemaker-notebook-workflow (npm) MAL-2026-4255 | Malicious | Not scored | 22 May, 2026 | npm cdk-sagemaker-notebook-workflow |
Malicious release: Malicious code in codebuff-cli (npm) MAL-2026-4533 | Malicious | Not scored | 22 May, 2026 | npm codebuff-cli |
Malicious release: Malicious code in finkrouter (npm) MAL-2026-4563 | Malicious | Not scored | 22 May, 2026 | npm finkrouter |
Malicious release: Malicious code in logger-draft (npm) MAL-2026-4346 | Malicious | Not scored | 22 May, 2026 | npm logger-draft |
Malicious release: Malicious code in reactive-cdk-app (npm) GHSA-ppjp-2h29-66pv, MAL-2026-4254 | Malicious | Not scored | 22 May, 2026 | npm reactive-cdk-app |
Malicious release: Malicious code in gt-tester-exp-profiler-exp-00000017 (PyPI) MAL-2026-4753 | Malicious | Not scored | 22 May, 2026 | PyPI gt-tester-exp-profiler-exp-00000017 |
Malicious release: Malicious code in gt-tester-exp-profiler-exp-00000015 (PyPI) MAL-2026-4752 | Malicious | Not scored | 22 May, 2026 | PyPI gt-tester-exp-profiler-exp-00000015 |
Malicious release: Malicious code in sklern (PyPI) MAL-2026-4768 | Malicious | Not scored | 22 May, 2026 | PyPI sklern |
Malicious release: Malicious code in get-package-lint (npm) MAL-2026-4572 | Malicious | Not scored | 22 May, 2026 | npm get-package-lint |
Malicious release: Malicious code in lynx-keeper-cli (npm) GHSA-3p5r-gmr8-v7mr, MAL-2026-4604 | Malicious | Not scored | 22 May, 2026 | npm lynx-keeper-cli |
Malicious release: Malicious code in xy-ai-chat (npm) MAL-2026-4735 | Malicious | Not scored | 22 May, 2026 | npm xy-ai-chat |
Malicious release: Malicious code in @43uh3ig43/telemetry-client (npm) GHSA-hqc4-gwfr-49r6, MAL-2026-4252 | Malicious | Not scored | 22 May, 2026 | npm @43uh3ig43/telemetry-client |
Malicious release: Malicious code in bingocode (npm) MAL-2026-4497 | Malicious | Not scored | 22 May, 2026 | npm bingocode |
Malicious release: Malicious code in @druids/ui (npm) MAL-2026-4385 | Malicious | Not scored | 22 May, 2026 | npm @druids/ui |
Malicious release: Malicious code in harmony-enablers-test-2026 (npm) GHSA-ghw7-gg88-gpmr, MAL-2026-4251 | Malicious | Not scored | 22 May, 2026 | npm harmony-enablers-test-2026 |
Malicious release: Malicious code in wrld-dev (npm) MAL-2026-4733 | Malicious | Not scored | 22 May, 2026 | npm wrld-dev |
Malicious release: Malicious code in vulndify-mcp-server (PyPI) MAL-2026-4774 | Malicious | Not scored | 22 May, 2026 | PyPI vulndify-mcp-server |
Malicious release: Malicious code in @shwfed/nuxt (npm) MAL-2026-4444 | Malicious | Not scored | 22 May, 2026 | npm @shwfed/nuxt |
Malicious release: Malicious code in pypi-build-verifier (npm) GHSA-4gg7-p7xj-789q, MAL-2026-4245 | Malicious | Not scored | 22 May, 2026 | npm pypi-build-verifier |
Malicious release: Malicious code in env-security-scanner (npm) GHSA-437g-626p-h8fm, MAL-2026-4238 | Malicious | Not scored | 22 May, 2026 | npm env-security-scanner |
Malicious release: Malicious code in mev-shield (npm) GHSA-5973-qc78-hqxv, MAL-2026-4609 | Malicious | Not scored | 22 May, 2026 | npm mev-shield |
Malicious release: Malicious code in pylogft (PyPI) MAL-2026-4253 | Malicious | Not scored | 22 May, 2026 | PyPI pylogft |
Malicious release: Malicious code in deploy-guard-check (npm) GHSA-wpr6-96j5-4p35, MAL-2026-4237 | Malicious | Not scored | 22 May, 2026 | npm deploy-guard-check |
Malicious release: Malicious code in build-integrity-verify (npm) GHSA-39mh-vrfq-8hx7, MAL-2026-4232 | Malicious | Not scored | 22 May, 2026 | npm build-integrity-verify |
Malicious release: Malicious code in dependency-audit-tool (npm) GHSA-xxq2-p383-26rc, MAL-2026-4236 | Malicious | Not scored | 22 May, 2026 | npm dependency-audit-tool |
Malicious release: Malicious code in python-env-auditor (npm) GHSA-939m-5vr8-382c, MAL-2026-4246 | Malicious | Not scored | 22 May, 2026 | npm python-env-auditor |
Malicious release: Malicious code in credential-verification-cli (npm) GHSA-c7hj-r4xg-q237, MAL-2026-4235 | Malicious | Not scored | 22 May, 2026 | npm credential-verification-cli |
Malicious release: Malicious code in compliance-check-runner (npm) GHSA-9gxp-rrm3-qh48, MAL-2026-4234 | Malicious | Not scored | 22 May, 2026 | npm compliance-check-runner |
Malicious release: Malicious code in internallib_v493 (npm) GHSA-cmv7-95wv-gm8h, MAL-2026-4585 | Malicious | Not scored | 22 May, 2026 | npm internallib_v493 |
Malicious release: Malicious code in audit-logsss (npm) GHSA-gcq4-52q3-v4fm, MAL-2026-4487 | Malicious | Not scored | 22 May, 2026 | npm audit-logsss |
Malicious release: Malicious code in pylogfmt (PyPI) MAL-2026-4231 | Malicious | Not scored | 22 May, 2026 | PyPI pylogfmt |
Malicious release: Malicious code in allbridge-example-react (npm) MAL-2026-4477 | Malicious | Not scored | 22 May, 2026 | npm allbridge-example-react |
Malicious release: Malicious code in ignite-market-contracts (npm) MAL-2026-4582 | Malicious | Not scored | 22 May, 2026 | npm ignite-market-contracts |
Malicious release: Malicious code in ignite-market-contractstest (npm) MAL-2026-4583 | Malicious | Not scored | 22 May, 2026 | npm ignite-market-contractstest |
Malicious release: Malicious code in mathepy (PyPI) MAL-2026-4755 | Malicious | Not scored | 21 May, 2026 | PyPI mathepy |
Malicious release: Malicious code in crypt0co-walet-poc (npm) MAL-2026-4540 | Malicious | Not scored | 21 May, 2026 | npm crypt0co-walet-poc |
Malicious release: Malicious code in fakehuop (PyPI) MAL-2026-4749 | Malicious | Not scored | 21 May, 2026 | PyPI fakehuop |
Malicious release: Malicious code in claude-content-writer (npm) MAL-2026-4524 | Malicious | Not scored | 21 May, 2026 | npm claude-content-writer |
Malicious release: Malicious code in search-connector-template (npm) MAL-2026-4664 | Malicious | Not scored | 21 May, 2026 | npm search-connector-template |
Malicious release: Malicious code in configcat-trello-powerup (npm) MAL-2026-4535 | Malicious | Not scored | 21 May, 2026 | npm configcat-trello-powerup |
Malicious release: Malicious code in @remitee-money-transfer/rmt-base (npm) MAL-2026-4424 | Malicious | Not scored | 21 May, 2026 | npm @remitee-money-transfer/rmt-base |
Malicious release: Malicious code in cryptoco-auth (npm) MAL-2026-4230 | Malicious | Not scored | 21 May, 2026 | npm cryptoco-auth |
Malicious release: Malicious code in cloudsmith-vsc (npm) MAL-2026-4530 | Malicious | Not scored | 21 May, 2026 | npm cloudsmith-vsc |
Malicious release: Malicious code in fnd-stores (npm) GHSA-wx9h-pmqq-rcgg, MAL-2026-4565 | Malicious | Not scored | 21 May, 2026 | npm fnd-stores |
Malicious release: Malicious code in pubnub-moderation-tool (npm) MAL-2026-4650 | Malicious | Not scored | 21 May, 2026 | npm pubnub-moderation-tool |
Malicious release: Malicious code in moneykit-cardano-demo (npm) MAL-2026-4614 | Malicious | Not scored | 21 May, 2026 | npm moneykit-cardano-demo |
Malicious release: Malicious code in chai-as-vite (npm) MAL-2026-4514 | Malicious | Not scored | 21 May, 2026 | npm chai-as-vite |
Malicious release: Malicious code in @jaggle/resizeobserves (npm) GHSA-qc6p-vxcj-7r4h, MAL-2026-4288 | Malicious | Not scored | 21 May, 2026 | npm @jaggle/resizeobserves |
Malicious release: Malicious code in maxixy-cli (npm) MAL-2026-4607 | Malicious | Not scored | 21 May, 2026 | npm maxixy-cli |
Malicious release: Malicious code in chai-as-tuned (npm) GHSA-2f37-mh3q-7394, MAL-2026-4513 | Malicious | Not scored | 21 May, 2026 | npm chai-as-tuned |