Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in gauth-client (PyPI) MAL-2026-3252 | Malicious | Not scored | 03 May, 2026 | PyPI gauth-client |
Malicious release: Malicious code in puan31 (PyPI) MAL-2026-3251 | Malicious | Not scored | 03 May, 2026 | PyPI puan31 |
Malicious release: Malicious code in rostilesolver (PyPI) MAL-2026-3250 | Malicious | Not scored | 03 May, 2026 | PyPI rostilesolver |
Malicious release: Malicious code in google-cloud-secret-manager-config-poc (npm) GHSA-g6v5-9xpp-6hpx, MAL-2026-3309 | Malicious | Not scored | 03 May, 2026 | npm google-cloud-secret-manager-config-poc |
Malicious release: Malicious code in internal-company-module-test-1337 (npm) GHSA-c9wj-j3q9-23f2, MAL-2026-3249 | Malicious | Not scored | 03 May, 2026 | npm internal-company-module-test-1337 |
Malicious release: Malicious code in pwn-control (PyPI) MAL-2026-3248 | Malicious | Not scored | 03 May, 2026 | PyPI pwn-control |
Malicious release: Malicious code in metoopro (PyPI) MAL-2026-3247 | Malicious | Not scored | 03 May, 2026 | PyPI metoopro |
Malicious release: Malicious code in ally-call-wait-time (npm) MAL-2026-3297 | Malicious | Not scored | 03 May, 2026 | npm ally-call-wait-time |
Malicious release: Malicious code in @allybank/ally-sdk (npm) GHSA-2892-cpv4-xqr4, MAL-2026-3289 | Malicious | Not scored | 03 May, 2026 | npm @allybank/ally-sdk |
Malicious release: Malicious code in ally-allowlist (npm) MAL-2026-3294 | Malicious | Not scored | 03 May, 2026 | npm ally-allowlist |
Malicious release: Malicious code in @athena-portal/themes (npm) MAL-2026-3291 | Malicious | Not scored | 03 May, 2026 | npm @athena-portal/themes |
Malicious release: Malicious code in ally-eagw-identity (npm) GHSA-8323-qr4w-h7gg, MAL-2026-3299 | Malicious | Not scored | 03 May, 2026 | npm ally-eagw-identity |
Malicious release: Malicious code in ally-antivirus (npm) GHSA-fxqc-33g9-rh7j, MAL-2026-3295 | Malicious | Not scored | 03 May, 2026 | npm ally-antivirus |
Malicious release: Malicious code in @breeze-ai/ui-library (npm) GHSA-vrcf-mcq9-rpcp, MAL-2026-3292 | Malicious | Not scored | 03 May, 2026 | npm @breeze-ai/ui-library |
Malicious release: Malicious code in @breezeai-frontend/i18n-config (npm) GHSA-3274-6pmj-53c3, MAL-2026-3293 | Malicious | Not scored | 03 May, 2026 | npm @breezeai-frontend/i18n-config |
Malicious release: Malicious code in apcyber-test-package (npm) GHSA-xr6f-x85p-m7ff, MAL-2026-3304 | Malicious | Not scored | 03 May, 2026 | npm apcyber-test-package |
Malicious release: Malicious code in win-update-helper-tool-v2 (PyPI) MAL-2026-3246 | Malicious | Not scored | 03 May, 2026 | PyPI win-update-helper-tool-v2 |
Malicious release: Malicious code in system-update-tool (PyPI) MAL-2026-3245 | Malicious | Not scored | 03 May, 2026 | PyPI system-update-tool |
Malicious release: Malicious code in ally-whitelist (npm) MAL-2026-3303 | Malicious | Not scored | 03 May, 2026 | npm ally-whitelist |
Malicious release: Malicious code in puan4 (PyPI) MAL-2026-3244 | Malicious | Not scored | 03 May, 2026 | PyPI puan4 |
Malicious release: Malicious code in @allyfinancial/allyfinancial-api (npm) GHSA-g584-r3m7-mrrm, MAL-2026-3290 | Malicious | Not scored | 03 May, 2026 | npm @allyfinancial/allyfinancial-api |
Malicious release: Malicious code in ally-json-threat-protect (npm) GHSA-9vx9-c8j6-h9p4, MAL-2026-3301 | Malicious | Not scored | 03 May, 2026 | npm ally-json-threat-protect |
Malicious release: Malicious code in ally-starter-api (npm) MAL-2026-3302 | Malicious | Not scored | 03 May, 2026 | npm ally-starter-api |
Malicious release: Malicious code in ally-forms (npm) MAL-2026-3300 | Malicious | Not scored | 03 May, 2026 | npm ally-forms |
Malicious release: Malicious code in ally-ccapi (npm) GHSA-29c6-x862-p526, MAL-2026-3298 | Malicious | Not scored | 03 May, 2026 | npm ally-ccapi |
Malicious release: Malicious code in ally-badges (npm) GHSA-9pfp-jfc9-q69j, MAL-2026-3296 | Malicious | Not scored | 03 May, 2026 | npm ally-badges |
Malicious release: Malicious code in puan3 (PyPI) MAL-2026-3243 | Malicious | Not scored | 03 May, 2026 | PyPI puan3 |
Malicious release: Malicious code in sf-vmeval-requests (PyPI) MAL-2026-3242 | Malicious | Not scored | 03 May, 2026 | PyPI sf-vmeval-requests |
Malicious release: Malicious code in nextjs-chat-with-ai-service (npm) GHSA-88fc-46q8-6h4p, MAL-2026-3241 | Malicious | Not scored | 03 May, 2026 | npm nextjs-chat-with-ai-service |
Malicious release: Malicious code in timesmcplib (PyPI) MAL-2026-3240 | Malicious | Not scored | 03 May, 2026 | PyPI timesmcplib |
Malicious release: Malicious code in timermcplib (PyPI) MAL-2026-3239 | Malicious | Not scored | 02 May, 2026 | PyPI timermcplib |
Malicious release: Malicious code in timemcplib (PyPI) MAL-2026-3238 | Malicious | Not scored | 02 May, 2026 | PyPI timemcplib |
Malicious release: Malicious code in protocol-stub-generator (PyPI) MAL-2026-3237 | Malicious | Not scored | 02 May, 2026 | PyPI protocol-stub-generator |
Malicious release: Malicious code in aocl-sparse-v3 (PyPI) MAL-2026-3236 | Malicious | Not scored | 02 May, 2026 | PyPI aocl-sparse-v3 |
Malicious release: Malicious code in apexomni-client (PyPI) MAL-2026-3235 | Malicious | Not scored | 02 May, 2026 | PyPI apexomni-client |
Malicious release: Malicious code in apexpro (npm) GHSA-4jwh-w2xx-p5rq, MAL-2026-3234 | Malicious | Not scored | 02 May, 2026 | npm apexpro |
Malicious release: Malicious code in apexomni (npm) GHSA-m6v2-w5cf-f85x, MAL-2026-3233 | Malicious | Not scored | 02 May, 2026 | npm apexomni |
Malicious release: Malicious code in ams-ssk (npm) GHSA-827p-whjw-xp3w, MAL-2026-3287 | Malicious | Not scored | 02 May, 2026 | npm ams-ssk |
Malicious release: Malicious code in common-tg-service (npm) GHSA-wvhv-cgwm-v2hv, MAL-2026-3288 | Malicious | Not scored | 02 May, 2026 | npm common-tg-service |
Malicious release: Malicious code in codewhisperer-streaming (npm) MAL-2026-3232 | Malicious | Not scored | 02 May, 2026 | npm codewhisperer-streaming |
Malicious release: Malicious code in currenttimerlib (PyPI) MAL-2026-3229 | Malicious | Not scored | 02 May, 2026 | PyPI currenttimerlib |
Malicious release: Malicious code in currenttimerpy (PyPI) MAL-2026-3230 | Malicious | Not scored | 02 May, 2026 | PyPI currenttimerpy |
Malicious release: Malicious code in timermcp (PyPI) MAL-2026-3231 | Malicious | Not scored | 02 May, 2026 | PyPI timermcp |
Malicious release: Malicious code in as89ufnaisufn (PyPI) MAL-2026-3225 | Malicious | Not scored | 02 May, 2026 | PyPI as89ufnaisufn |
Malicious release: Malicious code in timingmcp (PyPI) MAL-2026-3227 | Malicious | Not scored | 02 May, 2026 | PyPI timingmcp |
Malicious release: Malicious code in timesmcp (PyPI) MAL-2026-3226 | Malicious | Not scored | 02 May, 2026 | PyPI timesmcp |
Malicious release: Malicious code in ziugxfbvo (PyPI) MAL-2026-3228 | Malicious | Not scored | 02 May, 2026 | PyPI ziugxfbvo |
Malicious release: Malicious code in graphicctx (PyPI) MAL-2026-3224 | Malicious | Not scored | 01 May, 2026 | PyPI graphicctx |
Malicious release: Malicious code in oracle-lag-sniper (PyPI) MAL-2026-3223 | Malicious | Not scored | 01 May, 2026 | PyPI oracle-lag-sniper |
Malicious release: Malicious code in graphicsctxs (PyPI) MAL-2026-3222 | Malicious | Not scored | 01 May, 2026 | PyPI graphicsctxs |