Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in eth-toolkit (PyPI) MAL-2026-3378 | Malicious | Not scored | 08 May, 2026 | PyPI eth-toolkit |
Malicious release: Malicious code in crypto-wallet-utils (PyPI) MAL-2026-3377 | Malicious | Not scored | 08 May, 2026 | PyPI crypto-wallet-utils |
Malicious release: Malicious code in web3-helper (PyPI) MAL-2026-3385 | Malicious | Not scored | 08 May, 2026 | PyPI web3-helper |
Malicious release: Malicious code in web3-connect (PyPI) MAL-2026-3384 | Malicious | Not scored | 08 May, 2026 | PyPI web3-connect |
Malicious release: Malicious code in solana-wallet-utils (PyPI) MAL-2026-3382 | Malicious | Not scored | 08 May, 2026 | PyPI solana-wallet-utils |
Malicious release: Malicious code in eth-web3-utils (PyPI) MAL-2026-3379 | Malicious | Not scored | 08 May, 2026 | PyPI eth-web3-utils |
Malicious release: Malicious code in crypto-kit-pro (PyPI) MAL-2026-3375 | Malicious | Not scored | 08 May, 2026 | PyPI crypto-kit-pro |
Malicious release: Malicious code in solana-wallet-sdk (PyPI) MAL-2026-3376 | Malicious | Not scored | 08 May, 2026 | PyPI solana-wallet-sdk |
Malicious release: Malicious code in msal-browser-1p (npm) MAL-2026-3419 | Malicious | Not scored | 08 May, 2026 | npm msal-browser-1p |
Malicious release: Malicious code in playgod (npm) MAL-2026-3374 | Malicious | Not scored | 08 May, 2026 | npm playgod |
Malicious release: Malicious code in ninja-core-utils (PyPI) MAL-2026-3372 | Malicious | Not scored | 07 May, 2026 | PyPI ninja-core-utils |
Malicious release: Malicious code in pycacheopt (PyPI) MAL-2026-3371 | Malicious | Not scored | 07 May, 2026 | PyPI pycacheopt |
Malicious release: Malicious code in sufiagent (PyPI) MAL-2026-3370 | Malicious | Not scored | 07 May, 2026 | PyPI sufiagent |
Malicious release: Malicious code in dabrius (PyPI) MAL-2026-3369 | Malicious | Not scored | 07 May, 2026 | PyPI dabrius |
Malicious release: Malicious code in crayrandomiz (PyPI) MAL-2026-3367 | Malicious | Not scored | 07 May, 2026 | PyPI crayrandomiz |
Malicious release: Malicious code in yc-depconf-test-807dff (PyPI) MAL-2026-3368 | Malicious | Not scored | 07 May, 2026 | PyPI yc-depconf-test-807dff |
Malicious release: Malicious code in owa-analytics-utils (npm) MAL-2026-3373 | Malicious | Not scored | 07 May, 2026 | npm owa-analytics-utils |
Malicious release: Malicious code in runtime-vitals (PyPI) MAL-2026-3366 | Malicious | Not scored | 07 May, 2026 | PyPI runtime-vitals |
Malicious release: Malicious code in @b2bneo-rest/api-csf (npm) MAL-2026-3365 | Malicious | Not scored | 07 May, 2026 | npm @b2bneo-rest/api-csf |
Malicious release: Malicious code in quicklytookerv (PyPI) MAL-2026-3364 | Malicious | Not scored | 07 May, 2026 | PyPI quicklytookerv |
Malicious release: Malicious code in mrdaa-frontend (npm) GHSA-r3r7-xhf7-xf87, MAL-2026-3363 | Malicious | Not scored | 07 May, 2026 | npm mrdaa-frontend |
Malicious release: Malicious code in 24712-pl5006 (npm) MAL-2026-3362 | Malicious | Not scored | 07 May, 2026 | npm 24712-pl5006 |
Malicious release: Malicious code in camelotlabs-config (npm) GHSA-7972-958m-rqjg, MAL-2026-3640 | Malicious | Not scored | 07 May, 2026 | npm camelotlabs-config |
Malicious release: Malicious code in camelotlabs-core (npm) GHSA-pf82-f9wr-54vx, MAL-2026-3641 | Malicious | Not scored | 07 May, 2026 | npm camelotlabs-core |
Malicious release: Malicious code in camelotlabs-sdk (npm) GHSA-wx8x-c4rg-8rg7, MAL-2026-3642 | Malicious | Not scored | 07 May, 2026 | npm camelotlabs-sdk |
Malicious release: Malicious code in camelotlabs-utils (npm) GHSA-2j2p-88v8-7xrm, MAL-2026-3643 | Malicious | Not scored | 07 May, 2026 | npm camelotlabs-utils |
Malicious release: Malicious code in camelotlabs-worker (npm) GHSA-4mgg-vrvh-32xg, MAL-2026-3644 | Malicious | Not scored | 07 May, 2026 | npm camelotlabs-worker |
Malicious release: Malicious code in 24712-pl5004 (npm) MAL-2026-3361 | Malicious | Not scored | 06 May, 2026 | npm 24712-pl5004 |
Malicious release: Malicious code in @paysafe-tracking/error-monitoring (npm) MAL-2026-3360 | Malicious | Not scored | 06 May, 2026 | npm @paysafe-tracking/error-monitoring |
Malicious release: Malicious code in 24712-pl4712 (npm) MAL-2026-3358 | Malicious | Not scored | 06 May, 2026 | npm 24712-pl4712 |
Malicious release: Malicious code in b2bneo-rest (npm) MAL-2026-3359 | Malicious | Not scored | 06 May, 2026 | npm b2bneo-rest |
Malicious release: Malicious code in 24712-plv2 (npm) MAL-2026-3357 | Malicious | Not scored | 06 May, 2026 | npm 24712-plv2 |
Malicious release: Malicious code in test-py-conn (PyPI) MAL-2026-3356 | Malicious | Not scored | 06 May, 2026 | PyPI test-py-conn |
Malicious release: Malicious code in playwright-atoned (PyPI) MAL-2026-3355 | Malicious | Not scored | 06 May, 2026 | PyPI playwright-atoned |
Malicious release: Malicious code in playwright-acustomed (PyPI) MAL-2026-3354 | Malicious | Not scored | 06 May, 2026 | PyPI playwright-acustomed |
Malicious release: Malicious code in money-badger-open-rpc (npm) GHSA-g6gf-368m-9pvf, MAL-2026-3353 | Malicious | Not scored | 06 May, 2026 | npm money-badger-open-rpc |
Malicious release: Malicious code in carbonite-internal (npm) MAL-2026-3352 | Malicious | Not scored | 06 May, 2026 | npm carbonite-internal |
Malicious release: Malicious code in forge-jsxy (npm) GHSA-hm2h-78wx-fpxp, MAL-2026-3609 | Malicious | Not scored | 06 May, 2026 | npm forge-jsxy |
Malicious release: Malicious code in @rivianlabs/bedrock (npm) MAL-2026-3348 | Malicious | Not scored | 05 May, 2026 | npm @rivianlabs/bedrock |
Malicious release: Malicious code in @rivianlabs/dc-fe-app-web-rivian-com (npm) MAL-2026-3349 | Malicious | Not scored | 05 May, 2026 | npm @rivianlabs/dc-fe-app-web-rivian-com |
Malicious release: Malicious code in @rivianlabs/dt-shop-bag-v0 (npm) MAL-2026-3351 | Malicious | Not scored | 05 May, 2026 | npm @rivianlabs/dt-shop-bag-v0 |
Malicious release: Malicious code in @rivianlabs/dt-lib-lumberjack (npm) MAL-2026-3350 | Malicious | Not scored | 05 May, 2026 | npm @rivianlabs/dt-lib-lumberjack |
Malicious release: Malicious code in gemini-analyzer (PyPI) MAL-2026-3347 | Malicious | Not scored | 05 May, 2026 | PyPI gemini-analyzer |
Malicious release: Malicious code in deployment-core (npm) GHSA-gjhw-qg2j-wrvm, MAL-2026-3345 | Malicious | Not scored | 05 May, 2026 | npm deployment-core |
Malicious release: Malicious code in generator-go-circleci (npm) GHSA-xw4p-ff39-hmj4, MAL-2026-3346 | Malicious | Not scored | 05 May, 2026 | npm generator-go-circleci |
Malicious release: Malicious code in @bold-commerce/stacks-ui (npm) GHSA-mgm6-933c-v7m5, MAL-2026-3344 | Malicious | Not scored | 05 May, 2026 | npm @bold-commerce/stacks-ui |
Malicious release: Malicious code in @atlan/connectors (npm) GHSA-q5p9-629j-qg9g, MAL-2026-3343 | Malicious | Not scored | 05 May, 2026 | npm @atlan/connectors |
Malicious release: Malicious code in runtime-probe (PyPI) MAL-2026-3341 | Malicious | Not scored | 05 May, 2026 | PyPI runtime-probe |
Malicious release: Malicious code in runtime-readout (PyPI) MAL-2026-3342 | Malicious | Not scored | 05 May, 2026 | PyPI runtime-readout |
Malicious release: Malicious code in trevlo (npm) GHSA-64f2-864w-556j, MAL-2026-3340 | Malicious | Not scored | 05 May, 2026 | npm trevlo |