Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @catamania/ui-components (npm) MAL-2026-3681 | Malicious | Not scored | 12 May, 2026 | npm @catamania/ui-components |
Malicious release: Malicious code in 01-0redi7qgbz0uv (npm) MAL-2026-3666 | Malicious | Not scored | 12 May, 2026 | npm 01-0redi7qgbz0uv |
Malicious release: Malicious code in dlty (PyPI) MAL-2026-3690 | Malicious | Not scored | 12 May, 2026 | PyPI dlty |
Malicious release: Malicious code in 8q (npm) MAL-2026-3678 | Malicious | Not scored | 12 May, 2026 | npm 8q |
Malicious release: Malicious code in crazehub (PyPI) MAL-2026-3687 | Malicious | Not scored | 12 May, 2026 | PyPI crazehub |
Malicious release: Malicious code in projz-py (PyPI) MAL-2026-3696 | Malicious | Not scored | 12 May, 2026 | PyPI projz-py |
Malicious release: Malicious code in 100jsss (npm) MAL-2026-3669 | Malicious | Not scored | 12 May, 2026 | npm 100jsss |
Malicious release: Malicious code in pirxcypackage (PyPI) MAL-2026-3695 | Malicious | Not scored | 12 May, 2026 | PyPI pirxcypackage |
Malicious release: Malicious code in mymaldependency (PyPI) MAL-2026-3694 | Malicious | Not scored | 12 May, 2026 | PyPI mymaldependency |
Malicious release: Malicious code in 1mi (npm) MAL-2026-3672 | Malicious | Not scored | 12 May, 2026 | npm 1mi |
Malicious release: Malicious code in 1co (npm) MAL-2026-3671 | Malicious | Not scored | 12 May, 2026 | npm 1co |
Malicious release: Malicious code in @2oolkit/hyperliquid-cli (npm) GHSA-qg83-c6x5-qw8f, MAL-2026-3679 | Malicious | Not scored | 12 May, 2026 | npm @2oolkit/hyperliquid-cli |
Malicious release: Malicious code in enhancer (PyPI) MAL-2026-3691 | Malicious | Not scored | 12 May, 2026 | PyPI enhancer |
Malicious release: Malicious code in @chahuadev/junk-sweeper-app (npm) MAL-2026-3682 | Malicious | Not scored | 12 May, 2026 | npm @chahuadev/junk-sweeper-app |
Malicious release: Malicious code in 8oo (npm) MAL-2026-3677 | Malicious | Not scored | 12 May, 2026 | npm 8oo |
Malicious release: Malicious code in 11j (npm) MAL-2026-3670 | Malicious | Not scored | 12 May, 2026 | npm 11j |
Malicious release: Malicious code in 3pool-sushibar (npm) MAL-2026-3673 | Malicious | Not scored | 12 May, 2026 | npm 3pool-sushibar |
Malicious release: Malicious code in dcchbot (PyPI) MAL-2026-3689 | Malicious | Not scored | 12 May, 2026 | PyPI dcchbot |
Malicious release: Malicious code in 0ctf-chalweb (npm) MAL-2026-3667 | Malicious | Not scored | 12 May, 2026 | npm 0ctf-chalweb |
Malicious release: Malicious code in guan (PyPI) MAL-2026-3692 | Malicious | Not scored | 12 May, 2026 | PyPI guan |
Malicious release: Malicious code in housecallpro (npm) MAL-2026-3610 | Malicious | Not scored | 12 May, 2026 | npm housecallpro |
Malicious release: Malicious code in @tallyui/storage-sqlite (npm) GHSA-9w67-pvq7-x7hj, MAL-2026-3604 | Malicious | Not scored | 12 May, 2026 | npm @tallyui/storage-sqlite |
Malicious release: Malicious code in @dirigible-ai/sdk (npm) MAL-2026-3593 | Malicious | Not scored | 12 May, 2026 | npm @dirigible-ai/sdk |
Malicious release: Malicious code in @draftauth/client (npm) MAL-2026-3594 | Malicious | Not scored | 12 May, 2026 | npm @draftauth/client |
Malicious release: Malicious code in @draftauth/core (npm) MAL-2026-3595 | Malicious | Not scored | 12 May, 2026 | npm @draftauth/core |
Malicious release: Malicious code in @draftlab/auth (npm) MAL-2026-3596 | Malicious | Not scored | 12 May, 2026 | npm @draftlab/auth |
Malicious release: Malicious code in @draftlab/auth-router (npm) MAL-2026-3597 | Malicious | Not scored | 12 May, 2026 | npm @draftlab/auth-router |
Malicious release: Malicious code in @draftlab/db (npm) MAL-2026-3598 | Malicious | Not scored | 12 May, 2026 | npm @draftlab/db |
Malicious release: Malicious code in @mesadev/saguaro (npm) MAL-2026-3599 | Malicious | Not scored | 12 May, 2026 | npm @mesadev/saguaro |
Malicious release: Malicious code in @mesadev/sdk (npm) MAL-2026-3600 | Malicious | Not scored | 12 May, 2026 | npm @mesadev/sdk |
Malicious release: Malicious code in @ml-toolkit-ts/preprocessing (npm) MAL-2026-3601 | Malicious | Not scored | 12 May, 2026 | npm @ml-toolkit-ts/preprocessing |
Malicious release: Malicious code in @ml-toolkit-ts/xgboost (npm) MAL-2026-3602 | Malicious | Not scored | 12 May, 2026 | npm @ml-toolkit-ts/xgboost |
Malicious release: Malicious code in @tallyui/core (npm) MAL-2026-3603 | Malicious | Not scored | 12 May, 2026 | npm @tallyui/core |
Malicious release: Malicious code in agentwork-cli (npm) MAL-2026-3605 | Malicious | Not scored | 12 May, 2026 | npm agentwork-cli |
Malicious release: Malicious code in ml-toolkit-ts (npm) MAL-2026-3606 | Malicious | Not scored | 12 May, 2026 | npm ml-toolkit-ts |
Malicious release: Malicious code in guardrails-ai (PyPI) MAL-2026-3607 | Malicious | Not scored | 12 May, 2026 | PyPI guardrails-ai |
Malicious release: Malicious code in mistralai (PyPI) MAL-2026-3608 | Malicious | Not scored | 12 May, 2026 | PyPI mistralai |
Malicious release: Malicious code in hedwig-tsconfig (npm) MAL-2026-3592 | Malicious | Not scored | 12 May, 2026 | npm hedwig-tsconfig |
Malicious release: Malicious code in @uipath/widget.sdk (npm) GHSA-27w6-4p99-7x6q, MAL-2026-3587 | Malicious | Not scored | 12 May, 2026 | npm @uipath/widget.sdk |
Malicious release: Malicious code in @uipath/vss (npm) GHSA-wm4w-2r2c-gq5f, MAL-2026-3586 | Malicious | Not scored | 12 May, 2026 | npm @uipath/vss |
Malicious release: Malicious code in @uipath/vertical-solutions-tool (npm) GHSA-6hg5-98mg-m25x, MAL-2026-3585 | Malicious | Not scored | 12 May, 2026 | npm @uipath/vertical-solutions-tool |
Malicious release: Malicious code in @uipath/uipath-python-bridge (npm) GHSA-vmj3-j2j8-j8vg, MAL-2026-3584 | Malicious | Not scored | 12 May, 2026 | npm @uipath/uipath-python-bridge |
Malicious release: Malicious code in @uipath/ui-widgets-multi-file-upload (npm) GHSA-mv6w-f7c2-7g9v, MAL-2026-3583 | Malicious | Not scored | 12 May, 2026 | npm @uipath/ui-widgets-multi-file-upload |
Malicious release: Malicious code in @uipath/traces-tool (npm) GHSA-c7c5-8687-mmjw, MAL-2026-3582 | Malicious | Not scored | 12 May, 2026 | npm @uipath/traces-tool |
Malicious release: Malicious code in @uipath/tool-workflowcompiler (npm) GHSA-mp74-5gjx-v4mh, MAL-2026-3581 | Malicious | Not scored | 12 May, 2026 | npm @uipath/tool-workflowcompiler |
Malicious release: Malicious code in @uipath/test-manager-tool (npm) GHSA-55p8-r93f-539h, MAL-2026-3580 | Malicious | Not scored | 12 May, 2026 | npm @uipath/test-manager-tool |
Malicious release: Malicious code in @uipath/telemetry (npm) GHSA-99pr-79hv-pf5c, MAL-2026-3579 | Malicious | Not scored | 12 May, 2026 | npm @uipath/telemetry |
Malicious release: Malicious code in @uipath/tasks-tool (npm) GHSA-qhq7-xgvv-c3xf, MAL-2026-3578 | Malicious | Not scored | 12 May, 2026 | npm @uipath/tasks-tool |
Malicious release: Malicious code in @uipath/solutionpackager-tool-core (npm) GHSA-39jx-hvgv-rrx7, MAL-2026-3577 | Malicious | Not scored | 12 May, 2026 | npm @uipath/solutionpackager-tool-core |
Malicious release: Malicious code in @uipath/solutionpackager-sdk (npm) GHSA-v6fp-2vv4-5v87, MAL-2026-3576 | Malicious | Not scored | 12 May, 2026 | npm @uipath/solutionpackager-sdk |