Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in web3-py-checksum (PyPI) MAL-2026-3411 | Malicious | Not scored | 10 May, 2026 | PyPI web3-py-checksum |
Malicious release: Malicious code in @miurba/alcazaba (npm) MAL-2026-3410 | Malicious | Not scored | 10 May, 2026 | npm @miurba/alcazaba |
Malicious release: Malicious code in mw-filesystem-events-nodream (npm) MAL-2026-3409 | Malicious | Not scored | 10 May, 2026 | npm mw-filesystem-events-nodream |
Malicious release: Malicious code in dit-envv (npm) GHSA-m6q4-79qp-v6vp, MAL-2026-3645 | Malicious | Not scored | 10 May, 2026 | npm dit-envv |
Malicious release: Malicious code in erslove (npm) GHSA-r4pq-fh5v-934h, MAL-2026-3646 | Malicious | Not scored | 10 May, 2026 | npm erslove |
Malicious release: Malicious code in @rsi-community/hub-schema (npm) GHSA-j83r-w4f8-v7m9, MAL-2026-3414 | Malicious | Not scored | 09 May, 2026 | npm @rsi-community/hub-schema |
Malicious release: Malicious code in textwrap-ext (PyPI) MAL-2026-3408 | Malicious | Not scored | 09 May, 2026 | PyPI textwrap-ext |
Malicious release: Malicious code in textwrap-toolkit (PyPI) MAL-2026-3407 | Malicious | Not scored | 09 May, 2026 | PyPI textwrap-toolkit |
Malicious release: Malicious code in @matjp/dvi-decode (npm) MAL-2026-3404 | Malicious | Not scored | 09 May, 2026 | npm @matjp/dvi-decode |
Malicious release: Malicious code in ggfmttygl-new (PyPI) MAL-2026-3406 | Malicious | Not scored | 09 May, 2026 | PyPI ggfmttygl-new |
Malicious release: Malicious code in ggfmttygl (PyPI) MAL-2026-3405 | Malicious | Not scored | 09 May, 2026 | PyPI ggfmttygl |
Malicious release: Malicious code in bttcli (PyPI) MAL-2026-3401 | Malicious | Not scored | 09 May, 2026 | PyPI bttcli |
Malicious release: Malicious code in python-bittensor-config-v2 (PyPI) MAL-2026-3402 | Malicious | Not scored | 09 May, 2026 | PyPI python-bittensor-config-v2 |
Malicious release: Malicious code in textwrap-formatter (PyPI) MAL-2026-3403 | Malicious | Not scored | 09 May, 2026 | PyPI textwrap-formatter |
Malicious release: Malicious code in apple-mycelium-fix (npm) GHSA-fjcr-w74v-m2qw, MAL-2026-3416 | Malicious | Not scored | 09 May, 2026 | npm apple-mycelium-fix |
Malicious release: Malicious code in haswons (npm) MAL-2026-3647 | Malicious | Not scored | 09 May, 2026 | npm haswons |
Malicious release: Malicious code in oneblk-design-system (npm) MAL-2026-3421 | Malicious | Not scored | 08 May, 2026 | npm oneblk-design-system |
Malicious release: Malicious code in devsite-youtube (npm) MAL-2026-3418 | Malicious | Not scored | 08 May, 2026 | npm devsite-youtube |
Malicious release: Malicious code in typo-crypto (npm) GHSA-63fv-6mm3-hq48, MAL-2026-3400 | Malicious | Not scored | 08 May, 2026 | npm typo-crypto |
Malicious release: Malicious code in money-badger-open-rpc-test-bugbount (npm) MAL-2026-3399 | Malicious | Not scored | 08 May, 2026 | npm money-badger-open-rpc-test-bugbount |
Malicious release: Malicious code in ninja-ssh-proto (PyPI) MAL-2026-3398 | Malicious | Not scored | 08 May, 2026 | PyPI ninja-ssh-proto |
Malicious release: Malicious code in tecken (npm) GHSA-4gxg-7rff-vvmx, MAL-2026-3397 | Malicious | Not scored | 08 May, 2026 | npm tecken |
Malicious release: Malicious code in coral-dev-proxy (npm) MAL-2026-3395 | Malicious | Not scored | 08 May, 2026 | npm coral-dev-proxy |
Malicious release: Malicious code in ninja-core-optimizer (PyPI) MAL-2026-3396 | Malicious | Not scored | 08 May, 2026 | PyPI ninja-core-optimizer |
Malicious release: Malicious code in @gaia-codesearch/gaia-api-typescript (npm) MAL-2026-3394 | Malicious | Not scored | 08 May, 2026 | npm @gaia-codesearch/gaia-api-typescript |
Malicious release: Malicious code in @gaia-codesearch/gaia-api-python (npm) MAL-2026-3387 | Malicious | Not scored | 08 May, 2026 | npm @gaia-codesearch/gaia-api-python |
Malicious release: Malicious code in eth-wallet-kit (PyPI) MAL-2026-3389 | Malicious | Not scored | 08 May, 2026 | PyPI eth-wallet-kit |
Malicious release: Malicious code in wallet-scanner-pro (PyPI) MAL-2026-3392 | Malicious | Not scored | 08 May, 2026 | PyPI wallet-scanner-pro |
Malicious release: Malicious code in tron-energy-sdk (PyPI) MAL-2026-3391 | Malicious | Not scored | 08 May, 2026 | PyPI tron-energy-sdk |
Malicious release: Malicious code in crypto-bot-utils (PyPI) MAL-2026-3388 | Malicious | Not scored | 08 May, 2026 | PyPI crypto-bot-utils |
Malicious release: Malicious code in web3-tool-sdk (PyPI) MAL-2026-3393 | Malicious | Not scored | 08 May, 2026 | PyPI web3-tool-sdk |
Malicious release: Malicious code in solana-py-sdk (PyPI) MAL-2026-3390 | Malicious | Not scored | 08 May, 2026 | PyPI solana-py-sdk |
Malicious release: Malicious code in connect-perspectives-admintool (npm) MAL-2026-3417 | Malicious | Not scored | 08 May, 2026 | npm connect-perspectives-admintool |
Malicious release: Malicious code in justinleaguekems (PyPI) MAL-2026-3380 | Malicious | Not scored | 08 May, 2026 | PyPI justinleaguekems |
Malicious release: Malicious code in yeahmankema (PyPI) MAL-2026-3386 | Malicious | Not scored | 08 May, 2026 | PyPI yeahmankema |
Malicious release: Malicious code in wallet-utils-pro (PyPI) MAL-2026-3383 | Malicious | Not scored | 08 May, 2026 | PyPI wallet-utils-pro |
Malicious release: Malicious code in solana-scanner (PyPI) MAL-2026-3381 | Malicious | Not scored | 08 May, 2026 | PyPI solana-scanner |
Malicious release: Malicious code in eth-toolkit (PyPI) MAL-2026-3378 | Malicious | Not scored | 08 May, 2026 | PyPI eth-toolkit |
Malicious release: Malicious code in crypto-wallet-utils (PyPI) MAL-2026-3377 | Malicious | Not scored | 08 May, 2026 | PyPI crypto-wallet-utils |
Malicious release: Malicious code in web3-helper (PyPI) MAL-2026-3385 | Malicious | Not scored | 08 May, 2026 | PyPI web3-helper |
Malicious release: Malicious code in web3-connect (PyPI) MAL-2026-3384 | Malicious | Not scored | 08 May, 2026 | PyPI web3-connect |
Malicious release: Malicious code in solana-wallet-utils (PyPI) MAL-2026-3382 | Malicious | Not scored | 08 May, 2026 | PyPI solana-wallet-utils |
Malicious release: Malicious code in eth-web3-utils (PyPI) MAL-2026-3379 | Malicious | Not scored | 08 May, 2026 | PyPI eth-web3-utils |
Malicious release: Malicious code in crypto-kit-pro (PyPI) MAL-2026-3375 | Malicious | Not scored | 08 May, 2026 | PyPI crypto-kit-pro |
Malicious release: Malicious code in solana-wallet-sdk (PyPI) MAL-2026-3376 | Malicious | Not scored | 08 May, 2026 | PyPI solana-wallet-sdk |
Malicious release: Malicious code in msal-browser-1p (npm) MAL-2026-3419 | Malicious | Not scored | 08 May, 2026 | npm msal-browser-1p |
Malicious release: Malicious code in playgod (npm) MAL-2026-3374 | Malicious | Not scored | 08 May, 2026 | npm playgod |
Malicious release: Malicious code in ninja-core-utils (PyPI) MAL-2026-3372 | Malicious | Not scored | 07 May, 2026 | PyPI ninja-core-utils |
Malicious release: Malicious code in pycacheopt (PyPI) MAL-2026-3371 | Malicious | Not scored | 07 May, 2026 | PyPI pycacheopt |
Malicious release: Malicious code in sufiagent (PyPI) MAL-2026-3370 | Malicious | Not scored | 07 May, 2026 | PyPI sufiagent |