Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in timesmcp (PyPI) MAL-2026-3226 | Malicious | Not scored | 02 May, 2026 | PyPI timesmcp |
Malicious release: Malicious code in ziugxfbvo (PyPI) MAL-2026-3228 | Malicious | Not scored | 02 May, 2026 | PyPI ziugxfbvo |
Malicious release: Malicious code in graphicctx (PyPI) MAL-2026-3224 | Malicious | Not scored | 01 May, 2026 | PyPI graphicctx |
Malicious release: Malicious code in oracle-lag-sniper (PyPI) MAL-2026-3223 | Malicious | Not scored | 01 May, 2026 | PyPI oracle-lag-sniper |
Malicious release: Malicious code in graphicsctxs (PyPI) MAL-2026-3222 | Malicious | Not scored | 01 May, 2026 | PyPI graphicsctxs |
Malicious release: Malicious code in aocl-sparse-v2 (PyPI) MAL-2026-3221 | Malicious | Not scored | 01 May, 2026 | PyPI aocl-sparse-v2 |
Malicious release: Malicious code in py-clob-clients (PyPI) MAL-2026-3220 | Malicious | Not scored | 01 May, 2026 | PyPI py-clob-clients |
Malicious release: Malicious code in tns-py (PyPI) MAL-2026-3219 | Malicious | Not scored | 01 May, 2026 | PyPI tns-py |
Malicious release: Malicious code in aocl-sparse (PyPI) MAL-2026-3217 | Malicious | Not scored | 01 May, 2026 | PyPI aocl-sparse |
Malicious release: Malicious code in my-pipeline-watcher-poc (PyPI) MAL-2026-3218 | Malicious | Not scored | 01 May, 2026 | PyPI my-pipeline-watcher-poc |
Malicious release: Malicious code in httpx-utils (PyPI) MAL-2026-3216 | Malicious | Not scored | 01 May, 2026 | PyPI httpx-utils |
Malicious release: Malicious code in bpmn-studio (npm) GHSA-j2xc-x6gx-xqq8, MAL-2026-3306 | Malicious | Not scored | 01 May, 2026 | npm bpmn-studio |
Malicious release: Malicious code in archetype-style (npm) GHSA-m9f5-cp7r-48pm, MAL-2026-3215 | Malicious | Not scored | 01 May, 2026 | npm archetype-style |
Malicious release: Malicious code in update-db (npm) MAL-2026-3315 | Malicious | Not scored | 01 May, 2026 | npm update-db |
Malicious release: Malicious code in update-browserslist (npm) MAL-2026-3314 | Malicious | Not scored | 01 May, 2026 | npm update-browserslist |
Malicious release: Malicious code in browserslist-db (npm) MAL-2026-3307 | Malicious | Not scored | 01 May, 2026 | npm browserslist-db |
Malicious release: Malicious code in common-roles (npm) MAL-2026-3308 | Malicious | Not scored | 01 May, 2026 | npm common-roles |
Malicious release: Malicious code in renderkitcore (PyPI) MAL-2026-3214 | Malicious | Not scored | 01 May, 2026 | PyPI renderkitcore |
Malicious release: Malicious code in funkratov-renderkit (PyPI) MAL-2026-3213 | Malicious | Not scored | 01 May, 2026 | PyPI funkratov-renderkit |
Malicious release: Malicious code in chalk-fancy (PyPI) MAL-2026-3212 | Malicious | Not scored | 01 May, 2026 | PyPI chalk-fancy |
Malicious release: Malicious code in pycryptcore (PyPI) MAL-2026-3211 | Malicious | Not scored | 01 May, 2026 | PyPI pycryptcore |
Malicious release: Malicious code in graphicsctxr (PyPI) MAL-2026-3210 | Malicious | Not scored | 01 May, 2026 | PyPI graphicsctxr |
Malicious release: Malicious code in apple-internal-security-library-v99 (npm) GHSA-6gr9-g52h-226p, MAL-2026-3209 | Malicious | Not scored | 01 May, 2026 | npm apple-internal-security-library-v99 |
Malicious release: Malicious code in path-internal-util (npm) GHSA-c267-q765-387r, MAL-2026-3312 | Malicious | Not scored | 01 May, 2026 | npm path-internal-util |
Malicious release: Malicious code in path-addon (npm) GHSA-hqv8-vf3j-m8q6, MAL-2026-3311 | Malicious | Not scored | 01 May, 2026 | npm path-addon |
Malicious release: Malicious code in gweb-build-system (npm) GHSA-4jrp-wqpx-xfgc, MAL-2026-3310 | Malicious | Not scored | 01 May, 2026 | npm gweb-build-system |
Malicious release: Malicious code in bxiucnxcb (PyPI) MAL-2026-3208 | Malicious | Not scored | 01 May, 2026 | PyPI bxiucnxcb |
Malicious release: Malicious code in currentclock (PyPI) MAL-2026-3206 | Malicious | Not scored | 30 Apr, 2026 | PyPI currentclock |
Malicious release: Malicious code in renderctx (PyPI) MAL-2026-3207 | Malicious | Not scored | 30 Apr, 2026 | PyPI renderctx |
Malicious release: Malicious code in service-gateway (npm) GHSA-6vc9-m5v7-7m4f, MAL-2026-3313 | Malicious | Not scored | 30 Apr, 2026 | npm service-gateway |
Malicious release: Malicious code in intercom-client (npm) GHSA-4594-wxqv-j3pm, MAL-2026-3204 | Malicious | Not scored | 30 Apr, 2026 | npm intercom-client |
Malicious release: Malicious code in doisomgcxog (PyPI) MAL-2026-3205 | Malicious | Not scored | 30 Apr, 2026 | PyPI doisomgcxog |
Malicious release: Malicious code in buffparser (PyPI) MAL-2026-3203 | Malicious | Not scored | 30 Apr, 2026 | PyPI buffparser |
Malicious release: Malicious code in eslint-plugin-skyscanner-dates (npm) GHSA-29h9-fw37-6xhc, MAL-2026-3202 | Malicious | Not scored | 30 Apr, 2026 | npm eslint-plugin-skyscanner-dates |
Malicious release: Malicious code in lightning (PyPI) MAL-2026-3201 | Malicious | Not scored | 30 Apr, 2026 | PyPI lightning |
Malicious release: Malicious code in sirens-lament (npm) GHSA-j844-qq6j-rj39, MAL-2026-3200 | Malicious | Not scored | 30 Apr, 2026 | npm sirens-lament |
Malicious release: Malicious code in blackbeards-navigator (npm) GHSA-cfpj-hqgr-45g3, MAL-2026-3199 | Malicious | Not scored | 30 Apr, 2026 | npm blackbeards-navigator |
Malicious release: Malicious code in apple-internal-security-audit-v99 (npm) GHSA-66w7-4qx2-62w2, MAL-2026-3305 | Malicious | Not scored | 30 Apr, 2026 | npm apple-internal-security-audit-v99 |
Malicious release: Malicious code in timecurrently (PyPI) MAL-2026-3198 | Malicious | Not scored | 30 Apr, 2026 | PyPI timecurrently |
Malicious release: Malicious code in sdoihgio9sudghsiudbg (PyPI) MAL-2026-3197 | Malicious | Not scored | 30 Apr, 2026 | PyPI sdoihgio9sudghsiudbg |
Malicious release: Malicious code in react-dnd-14 (npm) MAL-2026-3196 | Malicious | Not scored | 30 Apr, 2026 | npm react-dnd-14 |
Malicious release: Malicious code in robase-dnb (PyPI) MAL-2026-3194 | Malicious | Not scored | 30 Apr, 2026 | PyPI robase-dnb |
Malicious release: Malicious code in rblx-http (PyPI) MAL-2026-3193 | Malicious | Not scored | 29 Apr, 2026 | PyPI rblx-http |
Malicious release: Malicious code in rblx-https (PyPI) MAL-2026-3191 | Malicious | Not scored | 29 Apr, 2026 | PyPI rblx-https |
Malicious release: Malicious code in ro-db (PyPI) MAL-2026-3192 | Malicious | Not scored | 29 Apr, 2026 | PyPI ro-db |
Malicious release: Malicious code in tanstack (npm) GHSA-5w4c-85pv-cwhv, MAL-2026-3190 | Malicious | Not scored | 29 Apr, 2026 | npm tanstack |
Malicious release: Malicious code in @breezeai-frontend/cargo-ui (npm) GHSA-648m-8w8j-gqr3, MAL-2026-3183 | Malicious | Not scored | 29 Apr, 2026 | npm @breezeai-frontend/cargo-ui |
Malicious release: Malicious code in @breezeai-frontend/tailwind-config (npm) GHSA-2vqh-whcm-r27x, MAL-2026-3184 | Malicious | Not scored | 29 Apr, 2026 | npm @breezeai-frontend/tailwind-config |
Malicious release: Malicious code in ac-sasskit-beta (npm) GHSA-3v69-72f9-jpjc, MAL-2026-3186 | Malicious | Not scored | 29 Apr, 2026 | npm ac-sasskit-beta |
Malicious release: Malicious code in apple-appstore-full-library-utility (npm) GHSA-jqp6-fcpv-q663, MAL-2026-3187 | Malicious | Not scored | 29 Apr, 2026 | npm apple-appstore-full-library-utility |