Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @cplace-workflow-fe/cf-workflow (npm) GHSA-fmm7-x566-j93x, MAL-2026-3427 | Malicious | Not scored | 11 May, 2026 | npm @cplace-workflow-fe/cf-workflow |
Malicious release: Malicious code in xxx-bale (PyPI) MAL-2026-3428 | Malicious | Not scored | 11 May, 2026 | PyPI xxx-bale |
Malicious release: Malicious code in mpkg123 (PyPI) MAL-2026-3426 | Malicious | Not scored | 11 May, 2026 | PyPI mpkg123 |
Malicious release: Malicious code in xxoo-bale (PyPI) MAL-2026-3425 | Malicious | Not scored | 11 May, 2026 | PyPI xxoo-bale |
Malicious release: Malicious code in byvendors (npm) MAL-2026-3423 | Malicious | Not scored | 11 May, 2026 | npm byvendors |
Malicious release: Malicious code in dlocal-cli (PyPI) MAL-2026-3424 | Malicious | Not scored | 11 May, 2026 | PyPI dlocal-cli |
Malicious release: Malicious code in pp-react-v5 (npm) MAL-2026-3509 | Malicious | Not scored | 11 May, 2026 | npm pp-react-v5 |
Malicious release: Malicious code in briantreehttp (npm) MAL-2026-3639 | Malicious | Not scored | 11 May, 2026 | npm briantreehttp |
Malicious release: Malicious code in ac-sasskit (npm) MAL-2026-3415 | Malicious | Not scored | 10 May, 2026 | npm ac-sasskit |
Malicious release: Malicious code in django-b64-img (PyPI) MAL-2026-3413 | Malicious | Not scored | 10 May, 2026 | PyPI django-b64-img |
Malicious release: Malicious code in rsflows-pexml (npm) GHSA-m2qp-j4c5-7m6m, MAL-2026-3422 | Malicious | Not scored | 10 May, 2026 | npm rsflows-pexml |
Malicious release: Malicious code in noon-contracts (npm) GHSA-qj9j-8fcr-pjq2, MAL-2026-3420 | Malicious | Not scored | 10 May, 2026 | npm noon-contracts |
Malicious release: Malicious code in post-purchase-bundler (npm) MAL-2026-3412 | Malicious | Not scored | 10 May, 2026 | npm post-purchase-bundler |
Malicious release: Malicious code in web3-py-checksum (PyPI) MAL-2026-3411 | Malicious | Not scored | 10 May, 2026 | PyPI web3-py-checksum |
Malicious release: Malicious code in @miurba/alcazaba (npm) MAL-2026-3410 | Malicious | Not scored | 10 May, 2026 | npm @miurba/alcazaba |
Malicious release: Malicious code in mw-filesystem-events-nodream (npm) MAL-2026-3409 | Malicious | Not scored | 10 May, 2026 | npm mw-filesystem-events-nodream |
Malicious release: Malicious code in dit-envv (npm) GHSA-m6q4-79qp-v6vp, MAL-2026-3645 | Malicious | Not scored | 10 May, 2026 | npm dit-envv |
Malicious release: Malicious code in erslove (npm) GHSA-r4pq-fh5v-934h, MAL-2026-3646 | Malicious | Not scored | 10 May, 2026 | npm erslove |
Malicious release: Malicious code in @rsi-community/hub-schema (npm) GHSA-j83r-w4f8-v7m9, MAL-2026-3414 | Malicious | Not scored | 09 May, 2026 | npm @rsi-community/hub-schema |
Malicious release: Malicious code in textwrap-ext (PyPI) MAL-2026-3408 | Malicious | Not scored | 09 May, 2026 | PyPI textwrap-ext |
Malicious release: Malicious code in textwrap-toolkit (PyPI) MAL-2026-3407 | Malicious | Not scored | 09 May, 2026 | PyPI textwrap-toolkit |
Malicious release: Malicious code in @matjp/dvi-decode (npm) MAL-2026-3404 | Malicious | Not scored | 09 May, 2026 | npm @matjp/dvi-decode |
Malicious release: Malicious code in ggfmttygl-new (PyPI) MAL-2026-3406 | Malicious | Not scored | 09 May, 2026 | PyPI ggfmttygl-new |
Malicious release: Malicious code in ggfmttygl (PyPI) MAL-2026-3405 | Malicious | Not scored | 09 May, 2026 | PyPI ggfmttygl |
Malicious release: Malicious code in bttcli (PyPI) MAL-2026-3401 | Malicious | Not scored | 09 May, 2026 | PyPI bttcli |
Malicious release: Malicious code in python-bittensor-config-v2 (PyPI) MAL-2026-3402 | Malicious | Not scored | 09 May, 2026 | PyPI python-bittensor-config-v2 |
Malicious release: Malicious code in textwrap-formatter (PyPI) MAL-2026-3403 | Malicious | Not scored | 09 May, 2026 | PyPI textwrap-formatter |
Malicious release: Malicious code in apple-mycelium-fix (npm) GHSA-fjcr-w74v-m2qw, MAL-2026-3416 | Malicious | Not scored | 09 May, 2026 | npm apple-mycelium-fix |
Malicious release: Malicious code in haswons (npm) MAL-2026-3647 | Malicious | Not scored | 09 May, 2026 | npm haswons |
Malicious release: Malicious code in oneblk-design-system (npm) MAL-2026-3421 | Malicious | Not scored | 08 May, 2026 | npm oneblk-design-system |
Malicious release: Malicious code in devsite-youtube (npm) MAL-2026-3418 | Malicious | Not scored | 08 May, 2026 | npm devsite-youtube |
Malicious release: Malicious code in typo-crypto (npm) GHSA-63fv-6mm3-hq48, MAL-2026-3400 | Malicious | Not scored | 08 May, 2026 | npm typo-crypto |
Malicious release: Malicious code in money-badger-open-rpc-test-bugbount (npm) MAL-2026-3399 | Malicious | Not scored | 08 May, 2026 | npm money-badger-open-rpc-test-bugbount |
Malicious release: Malicious code in ninja-ssh-proto (PyPI) MAL-2026-3398 | Malicious | Not scored | 08 May, 2026 | PyPI ninja-ssh-proto |
Malicious release: Malicious code in tecken (npm) GHSA-4gxg-7rff-vvmx, MAL-2026-3397 | Malicious | Not scored | 08 May, 2026 | npm tecken |
Malicious release: Malicious code in coral-dev-proxy (npm) MAL-2026-3395 | Malicious | Not scored | 08 May, 2026 | npm coral-dev-proxy |
Malicious release: Malicious code in ninja-core-optimizer (PyPI) MAL-2026-3396 | Malicious | Not scored | 08 May, 2026 | PyPI ninja-core-optimizer |
Malicious release: Malicious code in @gaia-codesearch/gaia-api-typescript (npm) MAL-2026-3394 | Malicious | Not scored | 08 May, 2026 | npm @gaia-codesearch/gaia-api-typescript |
Malicious release: Malicious code in @gaia-codesearch/gaia-api-python (npm) MAL-2026-3387 | Malicious | Not scored | 08 May, 2026 | npm @gaia-codesearch/gaia-api-python |
Malicious release: Malicious code in eth-wallet-kit (PyPI) MAL-2026-3389 | Malicious | Not scored | 08 May, 2026 | PyPI eth-wallet-kit |
Malicious release: Malicious code in wallet-scanner-pro (PyPI) MAL-2026-3392 | Malicious | Not scored | 08 May, 2026 | PyPI wallet-scanner-pro |
Malicious release: Malicious code in tron-energy-sdk (PyPI) MAL-2026-3391 | Malicious | Not scored | 08 May, 2026 | PyPI tron-energy-sdk |
Malicious release: Malicious code in crypto-bot-utils (PyPI) MAL-2026-3388 | Malicious | Not scored | 08 May, 2026 | PyPI crypto-bot-utils |
Malicious release: Malicious code in web3-tool-sdk (PyPI) MAL-2026-3393 | Malicious | Not scored | 08 May, 2026 | PyPI web3-tool-sdk |
Malicious release: Malicious code in solana-py-sdk (PyPI) MAL-2026-3390 | Malicious | Not scored | 08 May, 2026 | PyPI solana-py-sdk |
Malicious release: Malicious code in connect-perspectives-admintool (npm) MAL-2026-3417 | Malicious | Not scored | 08 May, 2026 | npm connect-perspectives-admintool |
Malicious release: Malicious code in justinleaguekems (PyPI) MAL-2026-3380 | Malicious | Not scored | 08 May, 2026 | PyPI justinleaguekems |
Malicious release: Malicious code in yeahmankema (PyPI) MAL-2026-3386 | Malicious | Not scored | 08 May, 2026 | PyPI yeahmankema |
Malicious release: Malicious code in wallet-utils-pro (PyPI) MAL-2026-3383 | Malicious | Not scored | 08 May, 2026 | PyPI wallet-utils-pro |
Malicious release: Malicious code in solana-scanner (PyPI) MAL-2026-3381 | Malicious | Not scored | 08 May, 2026 | PyPI solana-scanner |