Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @bitunix/test (npm) GHSA-mhwj-ggc3-5228, MAL-2026-2968 | Malicious | Not scored | 22 Apr, 2026 | npm @bitunix/test |
Malicious release: Malicious code in @usealloy/typegen (npm) GHSA-qmfv-9964-cvf2, MAL-2026-2971 | Malicious | Not scored | 22 Apr, 2026 | npm @usealloy/typegen |
Malicious release: Malicious code in aven_types (npm) GHSA-r8xm-rx8q-xmr3, MAL-2026-2972 | Malicious | Not scored | 22 Apr, 2026 | npm aven_types |
Malicious release: Malicious code in 6161test1234 (npm) GHSA-r9qx-xcg2-7wcc, MAL-2026-2967 | Malicious | Not scored | 21 Apr, 2026 | npm 6161test1234 |
Malicious release: Malicious code in com.tencent.puerts.agent (npm) GHSA-xjh5-rr2q-3382, MAL-2026-2966 | Malicious | Not scored | 21 Apr, 2026 | npm com.tencent.puerts.agent |
Malicious release: Malicious code in build-metadata-logger (PyPI) MAL-2026-2965 | Malicious | Not scored | 21 Apr, 2026 | PyPI build-metadata-logger |
Malicious release: Malicious code in buildenv-collector (PyPI) MAL-2026-2964 | Malicious | Not scored | 21 Apr, 2026 | PyPI buildenv-collector |
Malicious release: Malicious code in typelimagic (PyPI) MAL-2026-2963 | Malicious | Not scored | 21 Apr, 2026 | PyPI typelimagic |
Malicious release: Malicious code in my-package-jiecub3 (PyPI) MAL-2026-2962 | Malicious | Not scored | 21 Apr, 2026 | PyPI my-package-jiecub3 |
Malicious release: Malicious code in apple-internal-security-poc-frank (npm) GHSA-84p7-7qvg-vhvf, MAL-2026-2961 | Malicious | Not scored | 21 Apr, 2026 | npm apple-internal-security-poc-frank |
Malicious release: Malicious code in apple-auth-internal (npm) GHSA-m39f-fr86-j7f7, MAL-2026-2960 | Malicious | Not scored | 21 Apr, 2026 | npm apple-auth-internal |
Malicious release: Malicious code in cycode-dev (PyPI) MAL-2026-2957 | Malicious | Not scored | 20 Apr, 2026 | PyPI cycode-dev |
Malicious release: Malicious code in @serasa/core (npm) GHSA-w2qv-ff75-53mf, MAL-2026-2956 | Malicious | Not scored | 20 Apr, 2026 | npm @serasa/core |
Malicious release: Malicious code in @settle-sea/supporting-documents (npm) GHSA-f375-927m-428g, MAL-2026-2952 | Malicious | Not scored | 20 Apr, 2026 | npm @settle-sea/supporting-documents |
Malicious release: Malicious code in bmg-web-features (npm) MAL-2026-2954 | Malicious | Not scored | 20 Apr, 2026 | npm bmg-web-features |
Malicious release: Malicious code in bmg-web (npm) MAL-2026-2953 | Malicious | Not scored | 20 Apr, 2026 | npm bmg-web |
Malicious release: Malicious code in megabank-worklist (npm) MAL-2026-2955 | Malicious | Not scored | 20 Apr, 2026 | npm megabank-worklist |
Malicious release: Malicious code in internal_insights_enabled (npm) GHSA-7xx2-cw9j-xjgc, MAL-2026-2959 | Malicious | Not scored | 20 Apr, 2026 | npm internal_insights_enabled |
Malicious release: Malicious code in hifromhere1 (npm) MAL-2026-2951 | Malicious | Not scored | 20 Apr, 2026 | npm hifromhere1 |
Malicious release: Malicious code in tailwind-text-fill (npm) GHSA-xxgm-722g-xhwg, MAL-2026-2950 | Malicious | Not scored | 20 Apr, 2026 | npm tailwind-text-fill |
Malicious release: Malicious code in pathjoin (PyPI) MAL-2026-2949 | Malicious | Not scored | 20 Apr, 2026 | PyPI pathjoin |
Malicious release: Malicious code in leavemealone (PyPI) MAL-2026-2948 | Malicious | Not scored | 20 Apr, 2026 | PyPI leavemealone |
Malicious release: Malicious code in moonbit-metrics-validator (PyPI) MAL-2026-2946 | Malicious | Not scored | 20 Apr, 2026 | PyPI moonbit-metrics-validator |
Malicious release: Malicious code in moonbit-schema-utils (PyPI) MAL-2026-2947 | Malicious | Not scored | 20 Apr, 2026 | PyPI moonbit-schema-utils |
Malicious release: Malicious code in moonbit-locale-compat (PyPI) MAL-2026-2945 | Malicious | Not scored | 20 Apr, 2026 | PyPI moonbit-locale-compat |
Malicious release: Malicious code in npm-doc-deploy (npm) GHSA-3h77-7q59-chhp, MAL-2026-2941 | Malicious | Not scored | 20 Apr, 2026 | npm npm-doc-deploy |
Malicious release: Malicious code in bignum-ts-v2 (npm) GHSA-m7pg-7qqx-66f5, MAL-2026-2938 | Malicious | Not scored | 20 Apr, 2026 | npm bignum-ts-v2 |
Malicious release: Malicious code in @tushar-br/editing-pack (npm) GHSA-7wjj-mwx4-cxx5, MAL-2026-2936 | Malicious | Not scored | 20 Apr, 2026 | npm @tushar-br/editing-pack |
Malicious release: Malicious code in @tushar-br/desktop (npm) GHSA-crxh-425q-78hj, MAL-2026-2935 | Malicious | Not scored | 20 Apr, 2026 | npm @tushar-br/desktop |
Malicious release: Malicious code in @tushar-br/file11 (npm) GHSA-mxxq-gg42-8p97, MAL-2026-2937 | Malicious | Not scored | 20 Apr, 2026 | npm @tushar-br/file11 |
Malicious release: Malicious code in krdfonts (npm) GHSA-vj4v-6qjg-33v7, MAL-2026-2939 | Malicious | Not scored | 20 Apr, 2026 | npm krdfonts |
Malicious release: Malicious code in @otaxayuns/baileys (npm) GHSA-4vx6-qhj8-f6cr, MAL-2026-2934 | Malicious | Not scored | 20 Apr, 2026 | npm @otaxayuns/baileys |
Malicious release: Malicious code in turbo-he (npm) GHSA-6xh4-h79w-9w2q, MAL-2026-2943 | Malicious | Not scored | 20 Apr, 2026 | npm turbo-he |
Malicious release: Malicious code in optimized-fastest-levenshtein (npm) GHSA-cwvx-mmxj-v8ww, MAL-2026-2942 | Malicious | Not scored | 20 Apr, 2026 | npm optimized-fastest-levenshtein |
Malicious release: Malicious code in mailcraftjs (npm) GHSA-vq82-2629-gfqq, MAL-2026-2940 | Malicious | Not scored | 20 Apr, 2026 | npm mailcraftjs |
Malicious release: Malicious code in turbo-leven (npm) GHSA-w2j4-whh4-rr63, MAL-2026-2944 | Malicious | Not scored | 20 Apr, 2026 | npm turbo-leven |
Malicious release: Malicious code in @kjma/mailcraft (npm) GHSA-xf6v-jvfc-m994, MAL-2026-2933 | Malicious | Not scored | 20 Apr, 2026 | npm @kjma/mailcraft |
Malicious release: Malicious code in chandan-module-test (npm) MAL-2026-2921 | Malicious | Not scored | 19 Apr, 2026 | npm chandan-module-test |
Malicious release: Malicious code in pa-marked-internal (npm) MAL-2026-2928 | Malicious | Not scored | 19 Apr, 2026 | npm pa-marked-internal |
Malicious release: Malicious code in rblx-studio-api (PyPI) MAL-2026-2863 | Malicious | Not scored | 19 Apr, 2026 | PyPI rblx-studio-api |
Malicious release: Malicious code in react-spa-shadcn (npm) GHSA-c6cr-p8wf-qmjh, MAL-2026-2931 | Malicious | Not scored | 19 Apr, 2026 | npm react-spa-shadcn |
Malicious release: Malicious code in robase-setup (PyPI) MAL-2026-2864 | Malicious | Not scored | 19 Apr, 2026 | PyPI robase-setup |
Malicious release: Malicious code in pa-marked (npm) MAL-2026-2927 | Malicious | Not scored | 19 Apr, 2026 | npm pa-marked |
Malicious release: Malicious code in rtms-manager (npm) GHSA-5cq2-xfqr-cmvg, MAL-2026-2862 | Malicious | Not scored | 19 Apr, 2026 | npm rtms-manager |
Malicious release: Malicious code in vinext-monorepo (npm) MAL-2026-2861 | Malicious | Not scored | 19 Apr, 2026 | npm vinext-monorepo |
Malicious release: Malicious code in sy-editor-v3 (npm) MAL-2026-2932 | Malicious | Not scored | 19 Apr, 2026 | npm sy-editor-v3 |
Malicious release: Malicious code in mylib-utils (PyPI) MAL-2026-2860 | Malicious | Not scored | 18 Apr, 2026 | PyPI mylib-utils |
Malicious release: Malicious code in rblx-api (PyPI) MAL-2026-2859 | Malicious | Not scored | 18 Apr, 2026 | PyPI rblx-api |
Malicious release: Malicious code in @shoobx/types (npm) GHSA-9jhq-mjgj-698m, MAL-2026-2857 | Malicious | Not scored | 18 Apr, 2026 | npm @shoobx/types |
Malicious release: Malicious code in @source-row/source-container (npm) GHSA-x8p5-jmxq-hp52, MAL-2026-2858 | Malicious | Not scored | 18 Apr, 2026 | npm @source-row/source-container |