Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in truffle-helper (npm) MAL-2026-3716 | Malicious | Not scored | 13 May, 2026 | npm truffle-helper |
Malicious release: Malicious code in web3-common (npm) MAL-2026-3718 | Malicious | Not scored | 13 May, 2026 | npm web3-common |
Malicious release: Malicious code in web3-core-js (npm) MAL-2026-3719 | Malicious | Not scored | 13 May, 2026 | npm web3-core-js |
Malicious release: Malicious code in vue-template-compiler-plugin (npm) GHSA-gvmg-cf54-7769, MAL-2026-3777 | Malicious | Not scored | 13 May, 2026 | npm vue-template-compiler-plugin |
Malicious release: Malicious code in openai-spellcheckers (PyPI) MAL-2026-3638 | Malicious | Not scored | 13 May, 2026 | PyPI openai-spellcheckers |
Malicious release: Malicious code in d4rktg (PyPI) MAL-2026-3688 | Malicious | Not scored | 13 May, 2026 | PyPI d4rktg |
Malicious release: Malicious code in @dropout-ai/runtime (npm) MAL-2026-3683 | Malicious | Not scored | 13 May, 2026 | npm @dropout-ai/runtime |
Malicious release: Malicious code in intercom-php (Packagist) MAL-2026-3637 | Malicious | Not scored | 13 May, 2026 | Packagist intercom/intercom-php |
Malicious release: Malicious code in knot-rails-assets-pipeline (RubyGems) GHSA-5548-89gq-w58f, MAL-2026-3634 | Malicious | Not scored | 13 May, 2026 | RubyGems knot-rails-assets-pipeline |
Malicious release: Malicious code in knot-devise-jwt-helper (RubyGems) GHSA-5mm5-vm3m-435p, MAL-2026-3632 | Malicious | Not scored | 13 May, 2026 | RubyGems knot-devise-jwt-helper |
Malicious release: Malicious code in knot-date-utils-rb (RubyGems) GHSA-9967-5rmh-qrxc, MAL-2026-3631 | Malicious | Not scored | 13 May, 2026 | RubyGems knot-date-utils-rb |
Malicious release: Malicious code in knot-simple-formatter (RubyGems) GHSA-hhcv-8cwc-9rm2, MAL-2026-3636 | Malicious | Not scored | 13 May, 2026 | RubyGems knot-simple-formatter |
Malicious release: Malicious code in knot-rspec-formatter-json (RubyGems) GHSA-mf6f-65vp-grjw, MAL-2026-3635 | Malicious | Not scored | 13 May, 2026 | RubyGems knot-rspec-formatter-json |
Malicious release: Malicious code in knot-rack-session-store (RubyGems) GHSA-mmgc-wvxc-qqjm, MAL-2026-3633 | Malicious | Not scored | 13 May, 2026 | RubyGems knot-rack-session-store |
Malicious release: Malicious code in knot-activesupport-logger (RubyGems) GHSA-mwfv-hv2h-2pgf, MAL-2026-3630 | Malicious | Not scored | 13 May, 2026 | RubyGems knot-activesupport-logger |
Malicious release: Malicious code in github.com/BufferZoneCorp/config-loader (Go) MAL-2026-3620 | Malicious | Not scored | 13 May, 2026 | Go github.com/BufferZoneCorp/config-loader |
Malicious release: Malicious code in github.com/BufferZoneCorp/go-envconfig (Go) MAL-2026-3621 | Malicious | Not scored | 13 May, 2026 | Go github.com/BufferZoneCorp/go-envconfig |
Malicious release: Malicious code in github.com/BufferZoneCorp/go-metrics-sdk (Go) MAL-2026-3622 | Malicious | Not scored | 13 May, 2026 | Go github.com/BufferZoneCorp/go-metrics-sdk |
Malicious release: Malicious code in github.com/BufferZoneCorp/go-retryablehttp (Go) MAL-2026-3623 | Malicious | Not scored | 13 May, 2026 | Go github.com/BufferZoneCorp/go-retryablehttp |
Malicious release: Malicious code in github.com/BufferZoneCorp/go-stdlib-ext (Go) MAL-2026-3624 | Malicious | Not scored | 13 May, 2026 | Go github.com/BufferZoneCorp/go-stdlib-ext |
Malicious release: Malicious code in github.com/BufferZoneCorp/go-stdlog (Go) MAL-2026-3625 | Malicious | Not scored | 13 May, 2026 | Go github.com/BufferZoneCorp/go-stdlog |
Malicious release: Malicious code in github.com/BufferZoneCorp/go-weather-sdk (Go) MAL-2026-3626 | Malicious | Not scored | 13 May, 2026 | Go github.com/BufferZoneCorp/go-weather-sdk |
Malicious release: Malicious code in github.com/BufferZoneCorp/grpc-client (Go) MAL-2026-3627 | Malicious | Not scored | 13 May, 2026 | Go github.com/BufferZoneCorp/grpc-client |
Malicious release: Malicious code in github.com/BufferZoneCorp/log-core (Go) MAL-2026-3628 | Malicious | Not scored | 13 May, 2026 | Go github.com/BufferZoneCorp/log-core |
Malicious release: Malicious code in github.com/BufferZoneCorp/net-helper (Go) MAL-2026-3629 | Malicious | Not scored | 13 May, 2026 | Go github.com/BufferZoneCorp/net-helper |
Malicious release: Malicious code in @design-system-coopeuch/web (npm) GHSA-vhjp-6vjm-vq35, MAL-2026-3653 | Malicious | Not scored | 13 May, 2026 | npm @design-system-coopeuch/web |
Malicious release: Malicious code in amino-fix (PyPI) MAL-2026-3686 | Malicious | Not scored | 13 May, 2026 | PyPI amino-fix |
Malicious release: Malicious code in auth-javascript (npm) MAL-2026-3648 | Malicious | Not scored | 13 May, 2026 | npm auth-javascript |
Malicious release: Malicious code in iceberg-javascript (npm) MAL-2026-3649 | Malicious | Not scored | 13 May, 2026 | npm iceberg-javascript |
Malicious release: Malicious code in microsoft-applicationinsights-common (npm) MAL-2026-3650 | Malicious | Not scored | 13 May, 2026 | npm microsoft-applicationinsights-common |
Malicious release: Malicious code in ms-graph-types (npm) MAL-2026-3651 | Malicious | Not scored | 13 May, 2026 | npm ms-graph-types |
Malicious release: Malicious code in supabase-javascript (npm) MAL-2026-3652 | Malicious | Not scored | 13 May, 2026 | npm supabase-javascript |
Malicious release: Malicious code in txwrap (PyPI) MAL-2026-3619 | Malicious | Not scored | 12 May, 2026 | PyPI txwrap |
Malicious release: Malicious code in @gusmano/reext (npm) MAL-2026-3684 | Malicious | Not scored | 12 May, 2026 | npm @gusmano/reext |
Malicious release: Malicious code in always-updates (PyPI) MAL-2026-3685 | Malicious | Not scored | 12 May, 2026 | PyPI always-updates |
Malicious release: Malicious code in afk-react-intl (npm) MAL-2026-3616 | Malicious | Not scored | 12 May, 2026 | npm afk-react-intl |
Malicious release: Malicious code in katal-platform-versions (npm) MAL-2026-3617 | Malicious | Not scored | 12 May, 2026 | npm katal-platform-versions |
Malicious release: Malicious code in ai-spellcheckers (PyPI) MAL-2026-3615 | Malicious | Not scored | 12 May, 2026 | PyPI ai-spellcheckers |
Malicious release: Malicious code in @a91082900/test_package (npm) MAL-2026-3680 | Malicious | Not scored | 12 May, 2026 | npm @a91082900/test_package |
Malicious release: Malicious code in aoflmkt (npm) MAL-2026-3614 | Malicious | Not scored | 12 May, 2026 | npm aoflmkt |
Malicious release: Malicious code in aoflcorp (npm) MAL-2026-3613 | Malicious | Not scored | 12 May, 2026 | npm aoflcorp |
Malicious release: Malicious code in kaggle-runner (PyPI) MAL-2026-3693 | Malicious | Not scored | 12 May, 2026 | PyPI kaggle-runner |
Malicious release: Malicious code in jwscube (npm) GHSA-69rh-554m-m3w8, MAL-2026-3612 | Malicious | Not scored | 12 May, 2026 | npm jwscube |
Malicious release: Malicious code in justenv (npm) GHSA-fm9w-85jx-h7r4, MAL-2026-3611 | Malicious | Not scored | 12 May, 2026 | npm justenv |
Malicious release: Malicious code in mimecast-web-components (npm) MAL-2026-3618 | Malicious | Not scored | 12 May, 2026 | npm mimecast-web-components |
Malicious release: Malicious code in 88q (npm) MAL-2026-3676 | Malicious | Not scored | 12 May, 2026 | npm 88q |
Malicious release: Malicious code in 66o (npm) MAL-2026-3674 | Malicious | Not scored | 12 May, 2026 | npm 66o |
Malicious release: Malicious code in 6cc (npm) MAL-2026-3675 | Malicious | Not scored | 12 May, 2026 | npm 6cc |
Malicious release: Malicious code in 0xegg2024 (npm) MAL-2026-3668 | Malicious | Not scored | 12 May, 2026 | npm 0xegg2024 |
Malicious release: Malicious code in @catamania/ui-components (npm) MAL-2026-3681 | Malicious | Not scored | 12 May, 2026 | npm @catamania/ui-components |