Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in timenow (PyPI) MAL-2026-3145 | Malicious | Not scored | 29 Apr, 2026 | PyPI timenow |
Malicious release: Malicious code in timemcp-utils (PyPI) MAL-2026-3143 | Malicious | Not scored | 29 Apr, 2026 | PyPI timemcp-utils |
Malicious release: Malicious code in timemcp190825790125120985125 (PyPI) MAL-2026-3144 | Malicious | Not scored | 29 Apr, 2026 | PyPI timemcp190825790125120985125 |
Malicious release: Malicious code in timemcp-client (PyPI) MAL-2026-3142 | Malicious | Not scored | 29 Apr, 2026 | PyPI timemcp-client |
Malicious release: Malicious code in coinmate-api (PyPI) MAL-2026-3141 | Malicious | Not scored | 29 Apr, 2026 | PyPI coinmate-api |
Malicious release: Malicious code in core-roblox-utils (PyPI) MAL-2026-3137 | Malicious | Not scored | 28 Apr, 2026 | PyPI core-roblox-utils |
Malicious release: Malicious code in robase-start (PyPI) MAL-2026-3139 | Malicious | Not scored | 28 Apr, 2026 | PyPI robase-start |
Malicious release: Malicious code in robase-apis (PyPI) MAL-2026-3138 | Malicious | Not scored | 28 Apr, 2026 | PyPI robase-apis |
Malicious release: Malicious code in sf-th-requests (PyPI) MAL-2026-3135 | Malicious | Not scored | 28 Apr, 2026 | PyPI sf-th-requests |
Malicious release: Malicious code in timestamp-py (PyPI) MAL-2026-3136 | Malicious | Not scored | 28 Apr, 2026 | PyPI timestamp-py |
Malicious release: Malicious code in timemcp-py (PyPI) MAL-2026-3134 | Malicious | Not scored | 28 Apr, 2026 | PyPI timemcp-py |
Malicious release: Malicious code in fetchapi-syncdata-pypi (PyPI) MAL-2026-3133 | Malicious | Not scored | 28 Apr, 2026 | PyPI fetchapi-syncdata-pypi |
Malicious release: Malicious code in timemcp (PyPI) MAL-2026-3132 | Malicious | Not scored | 28 Apr, 2026 | PyPI timemcp |
Malicious release: Malicious code in fivem-monitor (npm) GHSA-fc78-r45j-m7f5, MAL-2026-3140 | Malicious | Not scored | 28 Apr, 2026 | npm fivem-monitor |
Malicious release: Malicious code in kcvlib (PyPI) MAL-2026-3131 | Malicious | Not scored | 28 Apr, 2026 | PyPI kcvlib |
Malicious release: Malicious code in genmedia-izumi-agent (PyPI) MAL-2026-3130 | Malicious | Not scored | 28 Apr, 2026 | PyPI genmedia-izumi-agent |
Malicious release: Malicious code in wm-plugin-teach-me-widget (npm) GHSA-qgp5-pp55-46vj, MAL-2026-3128 | Malicious | Not scored | 28 Apr, 2026 | npm wm-plugin-teach-me-widget |
Malicious release: Malicious code in coloreasyprint (PyPI) MAL-2026-3127 | Malicious | Not scored | 28 Apr, 2026 | PyPI coloreasyprint |
Malicious release: Malicious code in mypypipkg (PyPI) MAL-2026-3105 | Malicious | Not scored | 27 Apr, 2026 | PyPI mypypipkg |
Malicious release: Malicious code in apple-app-store-server-library-poc (npm) GHSA-4r99-2267-v7p2, MAL-2026-3123 | Malicious | Not scored | 27 Apr, 2026 | npm apple-app-store-server-library-poc |
Malicious release: Malicious code in robase-ui (PyPI) MAL-2026-3104 | Malicious | Not scored | 27 Apr, 2026 | PyPI robase-ui |
Malicious release: Malicious code in @w3m-frame/session_update (npm) GHSA-48cv-82hq-87cc, MAL-2026-3122 | Malicious | Not scored | 27 Apr, 2026 | npm @w3m-frame/session_update |
Malicious release: Malicious code in @pyme-web/web-api (npm) GHSA-q9v2-86j4-4885, MAL-2026-3120 | Malicious | Not scored | 27 Apr, 2026 | npm @pyme-web/web-api |
Malicious release: Malicious code in @pyme-web/ui-widget (npm) GHSA-5x28-2ff3-64cj, MAL-2026-3119 | Malicious | Not scored | 27 Apr, 2026 | npm @pyme-web/ui-widget |
Malicious release: Malicious code in @pyme-web/ui-base (npm) GHSA-8jh8-42h4-gjg5, MAL-2026-3118 | Malicious | Not scored | 27 Apr, 2026 | npm @pyme-web/ui-base |
Malicious release: Malicious code in fetch-data-api-syncapi (PyPI) MAL-2026-3100 | Malicious | Not scored | 27 Apr, 2026 | PyPI fetch-data-api-syncapi |
Malicious release: Malicious code in @taxmoninor/taxmon (npm) GHSA-qpg7-5r8v-6h76, MAL-2026-3121 | Malicious | Not scored | 27 Apr, 2026 | npm @taxmoninor/taxmon |
Malicious release: Malicious code in @apple-pay-trust/authorize-payment (npm) GHSA-3g77-vg2g-7mjv, MAL-2026-3111 | Malicious | Not scored | 27 Apr, 2026 | npm @apple-pay-trust/authorize-payment |
Malicious release: Malicious code in @activation_code/success (npm) GHSA-hq57-73cg-6253, MAL-2026-3108 | Malicious | Not scored | 27 Apr, 2026 | npm @activation_code/success |
Malicious release: Malicious code in @apple-pay-trust/cancelled (npm) GHSA-2v65-5xfv-p42q, MAL-2026-3112 | Malicious | Not scored | 27 Apr, 2026 | npm @apple-pay-trust/cancelled |
Malicious release: Malicious code in @apiary-annex/meta (npm) GHSA-gqjg-5998-3rmq, MAL-2026-3109 | Malicious | Not scored | 27 Apr, 2026 | npm @apiary-annex/meta |
Malicious release: Malicious code in @business_promocode/cancel_promocode (npm) GHSA-5vjv-9xjr-hq87, MAL-2026-3117 | Malicious | Not scored | 27 Apr, 2026 | npm @business_promocode/cancel_promocode |
Malicious release: Malicious code in @activation_code/activate (npm) GHSA-64fm-mh5q-w2rp, MAL-2026-3106 | Malicious | Not scored | 27 Apr, 2026 | npm @activation_code/activate |
Malicious release: Malicious code in @business_promocode/apply_promocode (npm) GHSA-g79w-grhv-qw3m, MAL-2026-3116 | Malicious | Not scored | 27 Apr, 2026 | npm @business_promocode/apply_promocode |
Malicious release: Malicious code in @b2b_blocker/show_activation_error (npm) GHSA-ppx3-ph2c-gqgm, MAL-2026-3115 | Malicious | Not scored | 27 Apr, 2026 | npm @b2b_blocker/show_activation_error |
Malicious release: Malicious code in @activation_code/error (npm) GHSA-hrpv-vm88-vgfx, MAL-2026-3107 | Malicious | Not scored | 27 Apr, 2026 | npm @activation_code/error |
Malicious release: Malicious code in @apple-pay-trust/finish (npm) GHSA-45wm-8rff-vxfr, MAL-2026-3114 | Malicious | Not scored | 27 Apr, 2026 | npm @apple-pay-trust/finish |
Malicious release: Malicious code in @apple-pay-trust/check-apple-pay-result (npm) GHSA-rcv5-83j3-954q, MAL-2026-3113 | Malicious | Not scored | 27 Apr, 2026 | npm @apple-pay-trust/check-apple-pay-result |
Malicious release: Malicious code in @apiary-annex/title (npm) GHSA-mw85-996v-w3pc, MAL-2026-3110 | Malicious | Not scored | 27 Apr, 2026 | npm @apiary-annex/title |
Malicious release: Malicious code in apple-internal-dev-check (npm) GHSA-p9p8-h8cq-mhq7, MAL-2026-3124 | Malicious | Not scored | 27 Apr, 2026 | npm apple-internal-dev-check |
Malicious release: Malicious code in bytedaaa (PyPI) MAL-2026-3085 | Malicious | Not scored | 27 Apr, 2026 | PyPI bytedaaa |
Malicious release: Malicious code in bytedecs (PyPI) MAL-2026-3090 | Malicious | Not scored | 27 Apr, 2026 | PyPI bytedecs |
Malicious release: Malicious code in bytedvke (PyPI) MAL-2026-3098 | Malicious | Not scored | 27 Apr, 2026 | PyPI bytedvke |
Malicious release: Malicious code in bytedark (PyPI) MAL-2026-3087 | Malicious | Not scored | 27 Apr, 2026 | PyPI bytedark |
Malicious release: Malicious code in bytedai (PyPI) MAL-2026-3086 | Malicious | Not scored | 27 Apr, 2026 | PyPI bytedai |
Malicious release: Malicious code in bytedmlp (PyPI) MAL-2026-3093 | Malicious | Not scored | 27 Apr, 2026 | PyPI bytedmlp |
Malicious release: Malicious code in bytedvefaas (PyPI) MAL-2026-3097 | Malicious | Not scored | 27 Apr, 2026 | PyPI bytedvefaas |
Malicious release: Malicious code in bytedfaas (PyPI) MAL-2026-3091 | Malicious | Not scored | 27 Apr, 2026 | PyPI bytedfaas |
Malicious release: Malicious code in bytedclaw (PyPI) MAL-2026-3089 | Malicious | Not scored | 27 Apr, 2026 | PyPI bytedclaw |
Malicious release: Malicious code in byteclaw (PyPI) MAL-2026-3084 | Malicious | Not scored | 27 Apr, 2026 | PyPI byteclaw |