Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in ethers-json-wallet (npm) MAL-2026-3709 | Malicious | Not scored | 13 May, 2026 | npm ethers-json-wallet |
Malicious release: Malicious code in ethers-logger (npm) MAL-2026-3710 | Malicious | Not scored | 13 May, 2026 | npm ethers-logger |
Malicious release: Malicious code in async-http-tools (PyPI) MAL-2026-3702 | Malicious | Not scored | 13 May, 2026 | PyPI async-http-tools |
Malicious release: Malicious code in web3-helpers (PyPI) MAL-2026-3706 | Malicious | Not scored | 13 May, 2026 | PyPI web3-helpers |
Malicious release: Malicious code in math-array-tools (PyPI) MAL-2026-3705 | Malicious | Not scored | 13 May, 2026 | PyPI math-array-tools |
Malicious release: Malicious code in graddio (PyPI) MAL-2026-3704 | Malicious | Not scored | 13 May, 2026 | PyPI graddio |
Malicious release: Malicious code in crypto-hash-utils (PyPI) MAL-2026-3703 | Malicious | Not scored | 13 May, 2026 | PyPI crypto-hash-utils |
Malicious release: Malicious code in aiohttp-util (PyPI) MAL-2026-3699 | Malicious | Not scored | 13 May, 2026 | PyPI aiohttp-util |
Malicious release: Malicious code in api-request-helpers (PyPI) MAL-2026-3701 | Malicious | Not scored | 13 May, 2026 | PyPI api-request-helpers |
Malicious release: Malicious code in alembic-util (PyPI) MAL-2026-3700 | Malicious | Not scored | 13 May, 2026 | PyPI alembic-util |
Malicious release: Malicious code in syntaxlogger (PyPI) MAL-2026-3697 | Malicious | Not scored | 13 May, 2026 | PyPI syntaxlogger |
Malicious release: Malicious code in trickery (PyPI) MAL-2026-3698 | Malicious | Not scored | 13 May, 2026 | PyPI trickery |
Malicious release: Malicious code in hackling (PyPI) MAL-2026-3665 | Malicious | Not scored | 13 May, 2026 | PyPI hackling |
Malicious release: Malicious code in chia-network (npm) MAL-2026-3663 | Malicious | Not scored | 13 May, 2026 | npm chia-network |
Malicious release: Malicious code in workingitmehelpit (PyPI) MAL-2026-3664 | Malicious | Not scored | 13 May, 2026 | PyPI workingitmehelpit |
Malicious release: Malicious code in numpy-lib (PyPI) MAL-2026-3660 | Malicious | Not scored | 13 May, 2026 | PyPI numpy-lib |
Malicious release: Malicious code in pandas-data (PyPI) MAL-2026-3661 | Malicious | Not scored | 13 May, 2026 | PyPI pandas-data |
Malicious release: Malicious code in py-requests (PyPI) MAL-2026-3662 | Malicious | Not scored | 13 May, 2026 | PyPI py-requests |
Malicious release: Malicious code in rich-util (PyPI) MAL-2026-3659 | Malicious | Not scored | 13 May, 2026 | PyPI rich-util |
Malicious release: Malicious code in load-bufferjs (npm) GHSA-95gm-9mgw-p2cf, MAL-2026-3658 | Malicious | Not scored | 13 May, 2026 | npm load-bufferjs |
Malicious release: Malicious code in buffer-export (npm) GHSA-w8m4-mmqv-qq77, MAL-2026-3656 | Malicious | Not scored | 13 May, 2026 | npm buffer-export |
Malicious release: Malicious code in chai-as-streamed (npm) GHSA-r2pr-8h52-3v7x, MAL-2026-3657 | Malicious | Not scored | 13 May, 2026 | npm chai-as-streamed |
Malicious release: Malicious code in hello-world-pkg-value-value-p (npm) GHSA-chvv-hm7h-5fvc, MAL-2026-3714 | Malicious | Not scored | 13 May, 2026 | npm hello-world-pkg-value-value-p |
Malicious release: Malicious code in truffle-js (npm) MAL-2026-3717 | Malicious | Not scored | 13 May, 2026 | npm truffle-js |
Malicious release: Malicious code in hardhat-common (npm) MAL-2026-3712 | Malicious | Not scored | 13 May, 2026 | npm hardhat-common |
Malicious release: Malicious code in hardhat-core (npm) MAL-2026-3713 | Malicious | Not scored | 13 May, 2026 | npm hardhat-core |
Malicious release: Malicious code in ethers-io (npm) MAL-2026-3708 | Malicious | Not scored | 13 May, 2026 | npm ethers-io |
Malicious release: Malicious code in solc-helper (npm) MAL-2026-3715 | Malicious | Not scored | 13 May, 2026 | npm solc-helper |
Malicious release: Malicious code in ethers-common (npm) MAL-2026-3707 | Malicious | Not scored | 13 May, 2026 | npm ethers-common |
Malicious release: Malicious code in truffle-helper (npm) MAL-2026-3716 | Malicious | Not scored | 13 May, 2026 | npm truffle-helper |
Malicious release: Malicious code in web3-common (npm) MAL-2026-3718 | Malicious | Not scored | 13 May, 2026 | npm web3-common |
Malicious release: Malicious code in web3-core-js (npm) MAL-2026-3719 | Malicious | Not scored | 13 May, 2026 | npm web3-core-js |
Malicious release: Malicious code in vue-template-compiler-plugin (npm) GHSA-gvmg-cf54-7769, MAL-2026-3777 | Malicious | Not scored | 13 May, 2026 | npm vue-template-compiler-plugin |
Malicious release: Malicious code in openai-spellcheckers (PyPI) MAL-2026-3638 | Malicious | Not scored | 13 May, 2026 | PyPI openai-spellcheckers |
Malicious release: Malicious code in d4rktg (PyPI) MAL-2026-3688 | Malicious | Not scored | 13 May, 2026 | PyPI d4rktg |
Malicious release: Malicious code in @dropout-ai/runtime (npm) MAL-2026-3683 | Malicious | Not scored | 13 May, 2026 | npm @dropout-ai/runtime |
Malicious release: Malicious code in intercom-php (Packagist) MAL-2026-3637 | Malicious | Not scored | 13 May, 2026 | Packagist intercom/intercom-php |
Malicious release: Malicious code in knot-rails-assets-pipeline (RubyGems) GHSA-5548-89gq-w58f, MAL-2026-3634 | Malicious | Not scored | 13 May, 2026 | RubyGems knot-rails-assets-pipeline |
Malicious release: Malicious code in knot-devise-jwt-helper (RubyGems) GHSA-5mm5-vm3m-435p, MAL-2026-3632 | Malicious | Not scored | 13 May, 2026 | RubyGems knot-devise-jwt-helper |
Malicious release: Malicious code in knot-date-utils-rb (RubyGems) GHSA-9967-5rmh-qrxc, MAL-2026-3631 | Malicious | Not scored | 13 May, 2026 | RubyGems knot-date-utils-rb |
Malicious release: Malicious code in knot-simple-formatter (RubyGems) GHSA-hhcv-8cwc-9rm2, MAL-2026-3636 | Malicious | Not scored | 13 May, 2026 | RubyGems knot-simple-formatter |
Malicious release: Malicious code in knot-rspec-formatter-json (RubyGems) GHSA-mf6f-65vp-grjw, MAL-2026-3635 | Malicious | Not scored | 13 May, 2026 | RubyGems knot-rspec-formatter-json |
Malicious release: Malicious code in knot-rack-session-store (RubyGems) GHSA-mmgc-wvxc-qqjm, MAL-2026-3633 | Malicious | Not scored | 13 May, 2026 | RubyGems knot-rack-session-store |
Malicious release: Malicious code in knot-activesupport-logger (RubyGems) GHSA-mwfv-hv2h-2pgf, MAL-2026-3630 | Malicious | Not scored | 13 May, 2026 | RubyGems knot-activesupport-logger |
Malicious release: Malicious code in github.com/BufferZoneCorp/config-loader (Go) MAL-2026-3620 | Malicious | Not scored | 13 May, 2026 | Go github.com/BufferZoneCorp/config-loader |
Malicious release: Malicious code in github.com/BufferZoneCorp/go-envconfig (Go) MAL-2026-3621 | Malicious | Not scored | 13 May, 2026 | Go github.com/BufferZoneCorp/go-envconfig |
Malicious release: Malicious code in github.com/BufferZoneCorp/go-metrics-sdk (Go) MAL-2026-3622 | Malicious | Not scored | 13 May, 2026 | Go github.com/BufferZoneCorp/go-metrics-sdk |
Malicious release: Malicious code in github.com/BufferZoneCorp/go-retryablehttp (Go) MAL-2026-3623 | Malicious | Not scored | 13 May, 2026 | Go github.com/BufferZoneCorp/go-retryablehttp |
Malicious release: Malicious code in github.com/BufferZoneCorp/go-stdlib-ext (Go) MAL-2026-3624 | Malicious | Not scored | 13 May, 2026 | Go github.com/BufferZoneCorp/go-stdlib-ext |
Malicious release: Malicious code in github.com/BufferZoneCorp/go-stdlog (Go) MAL-2026-3625 | Malicious | Not scored | 13 May, 2026 | Go github.com/BufferZoneCorp/go-stdlog |