Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in bytedvod (PyPI) MAL-2026-3099 | Malicious | Not scored | 27 Apr, 2026 | PyPI bytedvod |
Malicious release: Malicious code in bytedpymysql (PyPI) MAL-2026-3095 | Malicious | Not scored | 27 Apr, 2026 | PyPI bytedpymysql |
Malicious release: Malicious code in bytedbackground (PyPI) MAL-2026-3088 | Malicious | Not scored | 27 Apr, 2026 | PyPI bytedbackground |
Malicious release: Malicious code in bytedtccc (PyPI) MAL-2026-3096 | Malicious | Not scored | 27 Apr, 2026 | PyPI bytedtccc |
Malicious release: Malicious code in bytedmem (PyPI) MAL-2026-3092 | Malicious | Not scored | 27 Apr, 2026 | PyPI bytedmem |
Malicious release: Malicious code in bytedpgsql (PyPI) MAL-2026-3094 | Malicious | Not scored | 27 Apr, 2026 | PyPI bytedpgsql |
Malicious release: Malicious code in shopify-app-extension-template (npm) MAL-2026-3051 | Malicious | Not scored | 26 Apr, 2026 | npm shopify-app-extension-template |
Malicious release: Malicious code in frank-research-poc-apple (npm) GHSA-78hq-gp8w-grwp, MAL-2026-3081 | Malicious | Not scored | 26 Apr, 2026 | npm frank-research-poc-apple |
Malicious release: Malicious code in @clearpool/streaming (npm) GHSA-m2h2-p59r-798j, MAL-2026-3057 | Malicious | Not scored | 26 Apr, 2026 | npm @clearpool/streaming |
Malicious release: Malicious code in @clearpool/table (npm) GHSA-vxmm-j4j5-8q23, MAL-2026-3058 | Malicious | Not scored | 26 Apr, 2026 | npm @clearpool/table |
Malicious release: Malicious code in @clearpool/comms (npm) GHSA-fr5f-hf7f-p9w9, MAL-2026-3056 | Malicious | Not scored | 26 Apr, 2026 | npm @clearpool/comms |
Malicious release: Malicious code in @clearpool/utils (npm) MAL-2026-3059 | Malicious | Not scored | 26 Apr, 2026 | npm @clearpool/utils |
Malicious release: Malicious code in classlink (npm) MAL-2026-3049 | Malicious | Not scored | 26 Apr, 2026 | npm classlink |
Malicious release: Malicious code in robase-fast-install (PyPI) MAL-2026-3050 | Malicious | Not scored | 26 Apr, 2026 | PyPI robase-fast-install |
Malicious release: Malicious code in robase-gui-api (PyPI) MAL-2026-3048 | Malicious | Not scored | 26 Apr, 2026 | PyPI robase-gui-api |
Malicious release: Malicious code in robase-gui (PyPI) MAL-2026-3047 | Malicious | Not scored | 26 Apr, 2026 | PyPI robase-gui |
Malicious release: Malicious code in frank-bot-gogle-cloning (npm) GHSA-52j3-fx2q-cqm9, MAL-2026-3080 | Malicious | Not scored | 26 Apr, 2026 | npm frank-bot-gogle-cloning |
Malicious release: Malicious code in swisscom-ai-research-keyphrase (PyPI) MAL-2026-3046 | Malicious | Not scored | 26 Apr, 2026 | PyPI swisscom-ai-research-keyphrase |
Malicious release: Malicious code in @tw-marionette/clipboard (npm) GHSA-64qv-3564-73rg, MAL-2026-3070 | Malicious | Not scored | 26 Apr, 2026 | npm @tw-marionette/clipboard |
Malicious release: Malicious code in @ozon-complt/antibot-handler (npm) GHSA-m2jf-j5v5-wwx9, MAL-2026-3066 | Malicious | Not scored | 26 Apr, 2026 | npm @ozon-complt/antibot-handler |
Malicious release: Malicious code in @ozon-complt/split (npm) GHSA-cvr6-x554-xx2x, MAL-2026-3067 | Malicious | Not scored | 26 Apr, 2026 | npm @ozon-complt/split |
Malicious release: Malicious code in quicktestybesty (PyPI) MAL-2026-3045 | Malicious | Not scored | 26 Apr, 2026 | PyPI quicktestybesty |
Malicious release: Malicious code in quicksolving (PyPI) MAL-2026-3044 | Malicious | Not scored | 25 Apr, 2026 | PyPI quicksolving |
Malicious release: Malicious code in rosolver (PyPI) MAL-2026-3043 | Malicious | Not scored | 25 Apr, 2026 | PyPI rosolver |
Malicious release: Malicious code in pycolorlib001 (PyPI) MAL-2026-3042 | Malicious | Not scored | 25 Apr, 2026 | PyPI pycolorlib001 |
Malicious release: Malicious code in robase-library-quick-install (PyPI) MAL-2026-3041 | Malicious | Not scored | 25 Apr, 2026 | PyPI robase-library-quick-install |
Malicious release: Malicious code in @apple-pay-trust/merchant-session (npm) GHSA-28hg-c8r7-mcvq, MAL-2026-3053 | Malicious | Not scored | 25 Apr, 2026 | npm @apple-pay-trust/merchant-session |
Malicious release: Malicious code in @google-pay-trust/cancelled (npm) GHSA-468m-q27w-9r8c, MAL-2026-3062 | Malicious | Not scored | 25 Apr, 2026 | npm @google-pay-trust/cancelled |
Malicious release: Malicious code in @google-pay-trust/authorize-payment (npm) GHSA-rpp8-r54f-pm33, MAL-2026-3061 | Malicious | Not scored | 25 Apr, 2026 | npm @google-pay-trust/authorize-payment |
Malicious release: Malicious code in @apple-pay-trust/start (npm) GHSA-crv2-p353-52gh, MAL-2026-3054 | Malicious | Not scored | 25 Apr, 2026 | npm @apple-pay-trust/start |
Malicious release: Malicious code in @google-pay-trust/init-google-pay (npm) GHSA-772p-cqpx-g783, MAL-2026-3064 | Malicious | Not scored | 25 Apr, 2026 | npm @google-pay-trust/init-google-pay |
Malicious release: Malicious code in @google-pay-trust/finish (npm) GHSA-g326-rcxw-2m3g, MAL-2026-3063 | Malicious | Not scored | 25 Apr, 2026 | npm @google-pay-trust/finish |
Malicious release: Malicious code in @apple-pay-trust/validate-merchant (npm) GHSA-wqf2-mrc2-r8j3, MAL-2026-3055 | Malicious | Not scored | 25 Apr, 2026 | npm @apple-pay-trust/validate-merchant |
Malicious release: Malicious code in apollo-vertex (npm) GHSA-ch5h-3gj9-4r8q, MAL-2026-3040 | Malicious | Not scored | 25 Apr, 2026 | npm apollo-vertex |
Malicious release: Malicious code in apollo-landing (npm) GHSA-9qp9-qwfr-p72c, MAL-2026-3038 | Malicious | Not scored | 25 Apr, 2026 | npm apollo-landing |
Malicious release: Malicious code in process-app-task (npm) GHSA-388h-jcvw-5634, MAL-2026-3039 | Malicious | Not scored | 25 Apr, 2026 | npm process-app-task |
Malicious release: Malicious code in @tw-models/storage (npm) GHSA-qr4v-hj88-g7j6, MAL-2026-3072 | Malicious | Not scored | 25 Apr, 2026 | npm @tw-models/storage |
Malicious release: Malicious code in @tw-marionette/input (npm) GHSA-584r-4qf7-jqf3, MAL-2026-3071 | Malicious | Not scored | 25 Apr, 2026 | npm @tw-marionette/input |
Malicious release: Malicious code in @tw-utils/static (npm) GHSA-v3mw-r645-qc2r, MAL-2026-3073 | Malicious | Not scored | 25 Apr, 2026 | npm @tw-utils/static |
Malicious release: Malicious code in standalone-apps (npm) GHSA-9whf-2j26-8mhh, MAL-2026-3037 | Malicious | Not scored | 25 Apr, 2026 | npm standalone-apps |
Malicious release: Malicious code in uipath-ui-widgets (npm) GHSA-x45w-938v-6p65, MAL-2026-3036 | Malicious | Not scored | 25 Apr, 2026 | npm uipath-ui-widgets |
Malicious release: Malicious code in kl-b2c-ui-kit (npm) GHSA-jwhp-97gv-chg5, MAL-2026-3082 | Malicious | Not scored | 25 Apr, 2026 | npm kl-b2c-ui-kit |
Malicious release: Malicious code in ort-moe (PyPI) MAL-2026-3034 | Malicious | Not scored | 25 Apr, 2026 | PyPI ort-moe |
Malicious release: Malicious code in promptflow-runtime (PyPI) MAL-2026-3035 | Malicious | Not scored | 25 Apr, 2026 | PyPI promptflow-runtime |
Malicious release: Malicious code in @sbt_gitverse/analytics-client (npm) GHSA-q9xj-mpqj-qpcc, MAL-2026-3068 | Malicious | Not scored | 25 Apr, 2026 | npm @sbt_gitverse/analytics-client |
Malicious release: Malicious code in tether-base (npm) GHSA-gwg8-p6mg-cp7g, MAL-2026-3033 | Malicious | Not scored | 25 Apr, 2026 | npm tether-base |
Malicious release: Malicious code in axis-ui-generator (npm) MAL-2026-3079 | Malicious | Not scored | 25 Apr, 2026 | npm axis-ui-generator |
Malicious release: Malicious code in axis-abc-search-address (npm) GHSA-r78p-pprh-8hvp, MAL-2026-3076 | Malicious | Not scored | 25 Apr, 2026 | npm axis-abc-search-address |
Malicious release: Malicious code in axis-abc-portal-menu (npm) MAL-2026-3074 | Malicious | Not scored | 25 Apr, 2026 | npm axis-abc-portal-menu |
Malicious release: Malicious code in axis-abc-search-account (npm) GHSA-q53f-j5w8-x7vh, MAL-2026-3075 | Malicious | Not scored | 25 Apr, 2026 | npm axis-abc-search-account |