Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in emergentintegrations (PyPI) MAL-2026-2702 | Malicious | Not scored | 16 Apr, 2026 | PyPI emergentintegrations |
Malicious release: Malicious code in sanitize-url (npm) MAL-2026-2701 | Malicious | Not scored | 16 Apr, 2026 | npm sanitize-url |
Malicious release: Malicious code in conventional-changelog-dash (npm) MAL-2026-2700 | Malicious | Not scored | 16 Apr, 2026 | npm conventional-changelog-dash |
Malicious release: Malicious code in monolith-twirp-pullsd-users (RubyGems) GHSA-4hrq-2ffw-r43p, MAL-2026-2816 | Malicious | Not scored | 16 Apr, 2026 | RubyGems monolith-twirp-pullsd-users |
Malicious release: Malicious code in monolith-twirp-pullsd-authorization (RubyGems) GHSA-q95q-37r8-9cmp, MAL-2026-2815 | Malicious | Not scored | 16 Apr, 2026 | RubyGems monolith-twirp-pullsd-authorization |
Malicious release: Malicious code in gitlab-orchestrator (RubyGems) GHSA-fpg3-pj6c-r8g2, MAL-2026-2814 | Malicious | Not scored | 16 Apr, 2026 | RubyGems gitlab-orchestrator |
Malicious release: Malicious code in requests-test-test44 (PyPI) MAL-2026-2812 | Malicious | Not scored | 16 Apr, 2026 | PyPI requests-test-test44 |
Malicious release: Malicious code in requests-testik11 (PyPI) MAL-2026-2813 | Malicious | Not scored | 16 Apr, 2026 | PyPI requests-testik11 |
Malicious release: Malicious code in requests-test-test2 (PyPI) MAL-2026-2810 | Malicious | Not scored | 16 Apr, 2026 | PyPI requests-test-test2 |
Malicious release: Malicious code in requests-test-test3 (PyPI) MAL-2026-2811 | Malicious | Not scored | 16 Apr, 2026 | PyPI requests-test-test3 |
Malicious release: Malicious code in bombonsec-test-123 (PyPI) MAL-2026-2809 | Malicious | Not scored | 16 Apr, 2026 | PyPI bombonsec-test-123 |
Malicious release: Malicious code in youpin (npm) MAL-2026-2806 | Malicious | Not scored | 16 Apr, 2026 | npm youpin |
Malicious release: Malicious code in winston-prisma (npm) MAL-2026-2805 | Malicious | Not scored | 16 Apr, 2026 | npm winston-prisma |
Malicious release: Malicious code in transcript-viewer-ui-demo (npm) MAL-2026-2804 | Malicious | Not scored | 16 Apr, 2026 | npm transcript-viewer-ui-demo |
Malicious release: Malicious code in tailwind-configuration (npm) MAL-2026-2803 | Malicious | Not scored | 16 Apr, 2026 | npm tailwind-configuration |
Malicious release: Malicious code in synthetics-sdk-node (npm) MAL-2026-2802 | Malicious | Not scored | 16 Apr, 2026 | npm synthetics-sdk-node |
Malicious release: Malicious code in sfx-data (npm) MAL-2026-2801 | Malicious | Not scored | 16 Apr, 2026 | npm sfx-data |
Malicious release: Malicious code in separadordeinfo (npm) MAL-2026-2800 | Malicious | Not scored | 16 Apr, 2026 | npm separadordeinfo |
Malicious release: Malicious code in rtxaspnet (npm) MAL-2026-2799 | Malicious | Not scored | 16 Apr, 2026 | npm rtxaspnet |
Malicious release: Malicious code in request-easy-validator (npm) GHSA-6h5g-9vvm-x5jj, MAL-2026-2798 | Malicious | Not scored | 16 Apr, 2026 | npm request-easy-validator |
Malicious release: Malicious code in relion-node (npm) MAL-2026-2797 | Malicious | Not scored | 16 Apr, 2026 | npm relion-node |
Malicious release: Malicious code in relion-chain (npm) MAL-2026-2796 | Malicious | Not scored | 16 Apr, 2026 | npm relion-chain |
Malicious release: Malicious code in react-appfabric-shell (npm) MAL-2026-2795 | Malicious | Not scored | 16 Apr, 2026 | npm react-appfabric-shell |
Malicious release: Malicious code in puzzle-fragment (npm) MAL-2026-2794 | Malicious | Not scored | 16 Apr, 2026 | npm puzzle-fragment |
Malicious release: Malicious code in pil2-stark-js (npm) MAL-2026-2793 | Malicious | Not scored | 16 Apr, 2026 | npm pil2-stark-js |
Malicious release: Malicious code in pil2-proofman-js (npm) MAL-2026-2792 | Malicious | Not scored | 16 Apr, 2026 | npm pil2-proofman-js |
Malicious release: Malicious code in payments-ui (npm) MAL-2026-2791 | Malicious | Not scored | 16 Apr, 2026 | npm payments-ui |
Malicious release: Malicious code in package-with-import-assertions (npm) MAL-2026-2790 | Malicious | Not scored | 16 Apr, 2026 | npm package-with-import-assertions |
Malicious release: Malicious code in otomi-tasks (npm) MAL-2026-2789 | Malicious | Not scored | 16 Apr, 2026 | npm otomi-tasks |
Malicious release: Malicious code in otomi-console (npm) MAL-2026-2788 | Malicious | Not scored | 16 Apr, 2026 | npm otomi-console |
Malicious release: Malicious code in node-syncora (npm) MAL-2026-2787 | Malicious | Not scored | 16 Apr, 2026 | npm node-syncora |
Malicious release: Malicious code in node-metrica (npm) MAL-2026-2786 | Malicious | Not scored | 16 Apr, 2026 | npm node-metrica |
Malicious release: Malicious code in nemo-jaws (npm) GHSA-w22h-mv8v-hqhc, MAL-2026-2785 | Malicious | Not scored | 16 Apr, 2026 | npm nemo-jaws |
Malicious release: Malicious code in nemo-datadrive (npm) MAL-2026-2784 | Malicious | Not scored | 16 Apr, 2026 | npm nemo-datadrive |
Malicious release: Malicious code in mypeopledoc (npm) MAL-2026-2783 | Malicious | Not scored | 16 Apr, 2026 | npm mypeopledoc |
Malicious release: Malicious code in mybibilabu (npm) MAL-2026-2782 | Malicious | Not scored | 16 Apr, 2026 | npm mybibilabu |
Malicious release: Malicious code in minecraft_image_to_blocks (npm) MAL-2026-2781 | Malicious | Not scored | 16 Apr, 2026 | npm minecraft_image_to_blocks |
Malicious release: Malicious code in metrify-node (npm) MAL-2026-2780 | Malicious | Not scored | 16 Apr, 2026 | npm metrify-node |
Malicious release: Malicious code in metrify-chain (npm) MAL-2026-2779 | Malicious | Not scored | 16 Apr, 2026 | npm metrify-chain |
Malicious release: Malicious code in marketing-analytics (npm) MAL-2026-2778 | Malicious | Not scored | 16 Apr, 2026 | npm marketing-analytics |
Malicious release: Malicious code in linode-developers (npm) MAL-2026-2777 | Malicious | Not scored | 16 Apr, 2026 | npm linode-developers |
Malicious release: Malicious code in int-browsing-gateway (npm) MAL-2026-2776 | Malicious | Not scored | 16 Apr, 2026 | npm int-browsing-gateway |
Malicious release: Malicious code in insomnia-smoke-test (npm) MAL-2026-2775 | Malicious | Not scored | 16 Apr, 2026 | npm insomnia-smoke-test |
Malicious release: Malicious code in insomnia-scripting-environment (npm) MAL-2026-2774 | Malicious | Not scored | 16 Apr, 2026 | npm insomnia-scripting-environment |
Malicious release: Malicious code in insomnia-api (npm) MAL-2026-2773 | Malicious | Not scored | 16 Apr, 2026 | npm insomnia-api |
Malicious release: Malicious code in idaasfinancialnodeserv (npm) MAL-2026-2772 | Malicious | Not scored | 16 Apr, 2026 | npm idaasfinancialnodeserv |
Malicious release: Malicious code in icims-express-dot-engine (npm) MAL-2026-2771 | Malicious | Not scored | 16 Apr, 2026 | npm icims-express-dot-engine |
Malicious release: Malicious code in helios-components (npm) MAL-2026-2770 | Malicious | Not scored | 16 Apr, 2026 | npm helios-components |
Malicious release: Malicious code in hardhat-starter-kit (npm) MAL-2026-2769 | Malicious | Not scored | 16 Apr, 2026 | npm hardhat-starter-kit |
Malicious release: Malicious code in h3-next (npm) MAL-2026-2768 | Malicious | Not scored | 16 Apr, 2026 | npm h3-next |