Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in strapi-plugin-revs01-meeb322k (npm) MAL-2026-16185 | Malicious | Not scored | 15 Sep, 2026 | npm strapi-plugin-revs01-meeb322k |
Malicious release: Malicious code in strapi-plugin-proccresh-meeb (npm) MAL-2026-16182 | Malicious | Not scored | 15 Sep, 2026 | npm strapi-plugin-proccresh-meeb |
Malicious release: Malicious code in n8n-nodes-buildcheck (npm) MAL-2026-16177 | Malicious | Not scored | 15 Sep, 2026 | npm n8n-nodes-buildcheck |
Malicious release: Malicious code in strapi-plugin-resh-meeb322k (npm) MAL-2026-16183 | Malicious | Not scored | 15 Sep, 2026 | npm strapi-plugin-resh-meeb322k |
Malicious release: Malicious code in strapi-plugin-tryccresh-meeb (npm) MAL-2026-16190 | Malicious | Not scored | 15 Sep, 2026 | npm strapi-plugin-tryccresh-meeb |
Malicious release: Malicious code in strapi-plugin-rs-meeb322k (npm) MAL-2026-16188 | Malicious | Not scored | 15 Sep, 2026 | npm strapi-plugin-rs-meeb322k |
Malicious release: Malicious code in strapi-plugin-plsresh-meeb (npm) MAL-2026-16181 | Malicious | Not scored | 15 Sep, 2026 | npm strapi-plugin-plsresh-meeb |
Malicious release: Malicious code in strapi-plugin-ccresh-meeb (npm) MAL-2026-16180 | Malicious | Not scored | 15 Sep, 2026 | npm strapi-plugin-ccresh-meeb |
Malicious release: Malicious code in csa-mfa (npm) MAL-2026-16175 | Malicious | Not scored | 15 Sep, 2026 | npm csa-mfa |
Malicious release: Malicious code in n8n-nodes-sysdiag2 (npm) MAL-2026-16162 | Malicious | Not scored | 14 Sep, 2026 | npm n8n-nodes-sysdiag2 |
Malicious release: Malicious code in @yggbrasil/api (npm) GHSA-cmxv-8vgc-m43c, MAL-2026-16163 | Malicious | Not scored | 14 Sep, 2026 | npm @yggbrasil/api |
Malicious release: Malicious code in get-power (npm) GHSA-3g9w-hfq8-vr7p, MAL-2026-16156 | Malicious | Not scored | 14 Sep, 2026 | npm get-power |
Malicious release: Malicious code in afhmxiewpsf (npm) GHSA-59f6-ch49-395j, MAL-2026-16158 | Malicious | Not scored | 14 Sep, 2026 | npm afhmxiewpsf |
Malicious release: Malicious code in ultra-ws (npm) GHSA-rwhp-v7w5-c6cc, MAL-2026-16155 | Malicious | Not scored | 14 Sep, 2026 | npm ultra-ws |
Malicious release: Malicious code in noblox-asset.js (npm) MAL-2026-16148 | Malicious | Not scored | 14 Sep, 2026 | npm noblox-asset.js |
Malicious release: Malicious code in postgreesqlhelper (npm) MAL-2026-16150 | Malicious | Not scored | 14 Sep, 2026 | npm postgreesqlhelper |
Malicious release: Malicious code in sql-limit-enforcer (npm) MAL-2026-16151 | Malicious | Not scored | 14 Sep, 2026 | npm sql-limit-enforcer |
Malicious release: Malicious code in n8n-nodes-sysdiag (npm) MAL-2026-16147 | Malicious | Not scored | 14 Sep, 2026 | npm n8n-nodes-sysdiag |
Malicious release: Malicious code in os-info-meeb322k (npm) MAL-2026-16149 | Malicious | Not scored | 14 Sep, 2026 | npm os-info-meeb322k |
Malicious release: Malicious code in strapi-plugin-os-info-meeb322k (npm) MAL-2026-16152 | Malicious | Not scored | 14 Sep, 2026 | npm strapi-plugin-os-info-meeb322k |
Malicious release: Malicious code in web-main (npm) MAL-2026-16153 | Malicious | Not scored | 14 Sep, 2026 | npm web-main |
Malicious release: Malicious code in @aiwfm/communitywfm.scripts.api (npm) MAL-2026-16146 | Malicious | Not scored | 14 Sep, 2026 | npm @aiwfm/communitywfm.scripts.api |
Malicious release: Malicious code in concierge-sdk (npm) MAL-2026-16145 | Malicious | Not scored | 14 Sep, 2026 | npm concierge-sdk |
Malicious release: Malicious code in app-rrhh (npm) MAL-2026-16144 | Malicious | Not scored | 14 Sep, 2026 | npm app-rrhh |
Malicious release: Malicious code in meraz-project-tracker (npm) GHSA-54v8-j59m-366h, MAL-2026-16161 | Malicious | Not scored | 14 Sep, 2026 | npm meraz-project-tracker |
Malicious release: Malicious code in lpulogin (npm) GHSA-5823-3hg3-27v8, MAL-2026-16160 | Malicious | Not scored | 14 Sep, 2026 | npm lpulogin |
Malicious release: Malicious code in @merazmz/project-tracker (npm) GHSA-x98w-cqq8-v3q2, MAL-2026-16157 | Malicious | Not scored | 14 Sep, 2026 | npm @merazmz/project-tracker |
Malicious release: Malicious code in dilxztech (npm) GHSA-5wh2-j94m-rwpf, MAL-2026-16159 | Malicious | Not scored | 14 Sep, 2026 | npm dilxztech |
Malicious release: Malicious code in @biz44/process-runtime-utils (npm) MAL-2026-16171 | Malicious | Not scored | 14 Sep, 2026 | npm @biz44/process-runtime-utils |
Malicious release: Malicious code in @biz44/runtime-utils (npm) MAL-2026-16172 | Malicious | Not scored | 14 Sep, 2026 | npm @biz44/runtime-utils |
Malicious release: Malicious code in webpackbootstrap5 (npm) GHSA-2q27-vrr7-584g, MAL-2026-16201 | Malicious | Not scored | 14 Sep, 2026 | npm webpackbootstrap5 |
Malicious release: Malicious code in @zaka13/thing (npm) GHSA-fxc7-fpjq-q7vf, MAL-2026-16200 | Malicious | Not scored | 14 Sep, 2026 | npm @zaka13/thing |
Malicious release: Malicious code in pino-ulid (npm) MAL-2026-16154 | Malicious | Not scored | 14 Sep, 2026 | npm pino-ulid |
Malicious release: Malicious code in webpackbootstrapscripts (npm) MAL-2026-16202 | Malicious | Not scored | 14 Sep, 2026 | npm webpackbootstrapscripts |
Malicious release: Malicious code in faiss-cpu-avx512 (PyPI) MAL-2026-16203 | Malicious | Not scored | 14 Sep, 2026 | PyPI faiss-cpu-avx512 |
Malicious release: Malicious code in chroma-client (PyPI) MAL-2026-16143 | Malicious | Not scored | 13 Sep, 2026 | PyPI chroma-client |
Malicious release: Malicious code in @biz44/id79-client (npm) MAL-2026-16168 | Malicious | Not scored | 12 Sep, 2026 | npm @biz44/id79-client |
Malicious release: Malicious code in @biz44/id12-client (npm) MAL-2026-16166 | Malicious | Not scored | 12 Sep, 2026 | npm @biz44/id12-client |
Malicious release: Malicious code in @biz44/id10-client (npm) MAL-2026-16165 | Malicious | Not scored | 12 Sep, 2026 | npm @biz44/id10-client |
Malicious release: Malicious code in @biz44/id95-client (npm) MAL-2026-16169 | Malicious | Not scored | 12 Sep, 2026 | npm @biz44/id95-client |
Malicious release: Malicious code in @biz44/id99-client (npm) MAL-2026-16170 | Malicious | Not scored | 12 Sep, 2026 | npm @biz44/id99-client |
Malicious release: Malicious code in id79-client (npm) MAL-2026-16173 | Malicious | Not scored | 12 Sep, 2026 | npm id79-client |
Malicious release: Malicious code in python-fork (PyPI) MAL-2026-16142 | Malicious | Not scored | 12 Sep, 2026 | PyPI python-fork |
Malicious release: Malicious code in @biz44/id44-client (npm) MAL-2026-16167 | Malicious | Not scored | 12 Sep, 2026 | npm @biz44/id44-client |
Malicious release: Malicious code in platform-telemetry-client (PyPI) MAL-2026-16141 | Malicious | Not scored | 11 Sep, 2026 | PyPI platform-telemetry-client |
Malicious release: Malicious code in greensaver (npm) MAL-2026-16138 | Malicious | Not scored | 11 Sep, 2026 | npm greensaver |
Malicious release: Malicious code in cr-bot-common (npm) MAL-2026-16137 | Malicious | Not scored | 11 Sep, 2026 | npm cr-bot-common |
Malicious release: Malicious code in tracker-cloudflare (npm) MAL-2026-16140 | Malicious | Not scored | 11 Sep, 2026 | npm tracker-cloudflare |
Malicious release: Malicious code in langgrap (PyPI) MAL-2026-16133 | Malicious | Not scored | 11 Sep, 2026 | PyPI langgrap |
Malicious release: Malicious code in transfomers (PyPI) MAL-2026-16136 | Malicious | Not scored | 11 Sep, 2026 | PyPI transfomers |