Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in dabrius (PyPI) MAL-2026-3369 | Malicious | Not scored | 07 May, 2026 | PyPI dabrius |
Malicious release: Malicious code in crayrandomiz (PyPI) MAL-2026-3367 | Malicious | Not scored | 07 May, 2026 | PyPI crayrandomiz |
Malicious release: Malicious code in yc-depconf-test-807dff (PyPI) MAL-2026-3368 | Malicious | Not scored | 07 May, 2026 | PyPI yc-depconf-test-807dff |
Malicious release: Malicious code in owa-analytics-utils (npm) MAL-2026-3373 | Malicious | Not scored | 07 May, 2026 | npm owa-analytics-utils |
Malicious release: Malicious code in runtime-vitals (PyPI) MAL-2026-3366 | Malicious | Not scored | 07 May, 2026 | PyPI runtime-vitals |
Malicious release: Malicious code in @b2bneo-rest/api-csf (npm) MAL-2026-3365 | Malicious | Not scored | 07 May, 2026 | npm @b2bneo-rest/api-csf |
Malicious release: Malicious code in quicklytookerv (PyPI) MAL-2026-3364 | Malicious | Not scored | 07 May, 2026 | PyPI quicklytookerv |
Malicious release: Malicious code in mrdaa-frontend (npm) GHSA-r3r7-xhf7-xf87, MAL-2026-3363 | Malicious | Not scored | 07 May, 2026 | npm mrdaa-frontend |
Malicious release: Malicious code in 24712-pl5006 (npm) MAL-2026-3362 | Malicious | Not scored | 07 May, 2026 | npm 24712-pl5006 |
Malicious release: Malicious code in camelotlabs-config (npm) GHSA-7972-958m-rqjg, MAL-2026-3640 | Malicious | Not scored | 07 May, 2026 | npm camelotlabs-config |
Malicious release: Malicious code in camelotlabs-core (npm) GHSA-pf82-f9wr-54vx, MAL-2026-3641 | Malicious | Not scored | 07 May, 2026 | npm camelotlabs-core |
Malicious release: Malicious code in camelotlabs-sdk (npm) GHSA-wx8x-c4rg-8rg7, MAL-2026-3642 | Malicious | Not scored | 07 May, 2026 | npm camelotlabs-sdk |
Malicious release: Malicious code in camelotlabs-utils (npm) GHSA-2j2p-88v8-7xrm, MAL-2026-3643 | Malicious | Not scored | 07 May, 2026 | npm camelotlabs-utils |
Malicious release: Malicious code in camelotlabs-worker (npm) GHSA-4mgg-vrvh-32xg, MAL-2026-3644 | Malicious | Not scored | 07 May, 2026 | npm camelotlabs-worker |
Malicious release: Malicious code in 24712-pl5004 (npm) MAL-2026-3361 | Malicious | Not scored | 06 May, 2026 | npm 24712-pl5004 |
Malicious release: Malicious code in @paysafe-tracking/error-monitoring (npm) MAL-2026-3360 | Malicious | Not scored | 06 May, 2026 | npm @paysafe-tracking/error-monitoring |
Malicious release: Malicious code in 24712-pl4712 (npm) MAL-2026-3358 | Malicious | Not scored | 06 May, 2026 | npm 24712-pl4712 |
Malicious release: Malicious code in b2bneo-rest (npm) MAL-2026-3359 | Malicious | Not scored | 06 May, 2026 | npm b2bneo-rest |
Malicious release: Malicious code in 24712-plv2 (npm) MAL-2026-3357 | Malicious | Not scored | 06 May, 2026 | npm 24712-plv2 |
Malicious release: Malicious code in test-py-conn (PyPI) MAL-2026-3356 | Malicious | Not scored | 06 May, 2026 | PyPI test-py-conn |
Malicious release: Malicious code in playwright-atoned (PyPI) MAL-2026-3355 | Malicious | Not scored | 06 May, 2026 | PyPI playwright-atoned |
Malicious release: Malicious code in playwright-acustomed (PyPI) MAL-2026-3354 | Malicious | Not scored | 06 May, 2026 | PyPI playwright-acustomed |
Malicious release: Malicious code in money-badger-open-rpc (npm) GHSA-g6gf-368m-9pvf, MAL-2026-3353 | Malicious | Not scored | 06 May, 2026 | npm money-badger-open-rpc |
Malicious release: Malicious code in carbonite-internal (npm) MAL-2026-3352 | Malicious | Not scored | 06 May, 2026 | npm carbonite-internal |
Malicious release: Malicious code in forge-jsxy (npm) GHSA-hm2h-78wx-fpxp, MAL-2026-3609 | Malicious | Not scored | 06 May, 2026 | npm forge-jsxy |
Malicious release: Malicious code in @rivianlabs/bedrock (npm) MAL-2026-3348 | Malicious | Not scored | 05 May, 2026 | npm @rivianlabs/bedrock |
Malicious release: Malicious code in @rivianlabs/dc-fe-app-web-rivian-com (npm) MAL-2026-3349 | Malicious | Not scored | 05 May, 2026 | npm @rivianlabs/dc-fe-app-web-rivian-com |
Malicious release: Malicious code in @rivianlabs/dt-shop-bag-v0 (npm) MAL-2026-3351 | Malicious | Not scored | 05 May, 2026 | npm @rivianlabs/dt-shop-bag-v0 |
Malicious release: Malicious code in @rivianlabs/dt-lib-lumberjack (npm) MAL-2026-3350 | Malicious | Not scored | 05 May, 2026 | npm @rivianlabs/dt-lib-lumberjack |
Malicious release: Malicious code in gemini-analyzer (PyPI) MAL-2026-3347 | Malicious | Not scored | 05 May, 2026 | PyPI gemini-analyzer |
Malicious release: Malicious code in deployment-core (npm) GHSA-gjhw-qg2j-wrvm, MAL-2026-3345 | Malicious | Not scored | 05 May, 2026 | npm deployment-core |
Malicious release: Malicious code in generator-go-circleci (npm) GHSA-xw4p-ff39-hmj4, MAL-2026-3346 | Malicious | Not scored | 05 May, 2026 | npm generator-go-circleci |
Malicious release: Malicious code in @bold-commerce/stacks-ui (npm) GHSA-mgm6-933c-v7m5, MAL-2026-3344 | Malicious | Not scored | 05 May, 2026 | npm @bold-commerce/stacks-ui |
Malicious release: Malicious code in @atlan/connectors (npm) GHSA-q5p9-629j-qg9g, MAL-2026-3343 | Malicious | Not scored | 05 May, 2026 | npm @atlan/connectors |
Malicious release: Malicious code in runtime-probe (PyPI) MAL-2026-3341 | Malicious | Not scored | 05 May, 2026 | PyPI runtime-probe |
Malicious release: Malicious code in runtime-readout (PyPI) MAL-2026-3342 | Malicious | Not scored | 05 May, 2026 | PyPI runtime-readout |
Malicious release: Malicious code in trevlo (npm) GHSA-64f2-864w-556j, MAL-2026-3340 | Malicious | Not scored | 05 May, 2026 | npm trevlo |
Malicious release: Malicious code in nf-ui-components (npm) GHSA-9vr2-f57v-r6r2, MAL-2026-3339 | Malicious | Not scored | 05 May, 2026 | npm nf-ui-components |
Malicious release: Malicious code in fanduel (npm) GHSA-mjhc-2rfg-vh93, MAL-2026-3334 | Malicious | Not scored | 04 May, 2026 | npm fanduel |
Malicious release: Malicious code in rogiant-quick-install (PyPI) MAL-2026-3333 | Malicious | Not scored | 04 May, 2026 | PyPI rogiant-quick-install |
Malicious release: Malicious code in rogiant (PyPI) MAL-2026-3332 | Malicious | Not scored | 04 May, 2026 | PyPI rogiant |
Malicious release: Malicious code in lazyhtml-scripts (npm) MAL-2026-3331 | Malicious | Not scored | 04 May, 2026 | npm lazyhtml-scripts |
Malicious release: Malicious code in ms.analytics-web (npm) MAL-2026-3338 | Malicious | Not scored | 04 May, 2026 | npm ms.analytics-web |
Malicious release: Malicious code in api-typings (npm) GHSA-gjx9-hrcc-f6qj, MAL-2026-3329 | Malicious | Not scored | 04 May, 2026 | npm api-typings |
Malicious release: Malicious code in seek-pass (npm) GHSA-q39g-5xh5-89h3, MAL-2026-3330 | Malicious | Not scored | 04 May, 2026 | npm seek-pass |
Malicious release: Malicious code in pocpoc2626 (npm) MAL-2026-3328 | Malicious | Not scored | 04 May, 2026 | npm pocpoc2626 |
Malicious release: Malicious code in capacitor-plugin-service-worker (npm) GHSA-qg5c-9jmq-fpmf, MAL-2026-3327 | Malicious | Not scored | 04 May, 2026 | npm capacitor-plugin-service-worker |
Malicious release: Malicious code in @channel_bot/xa0 (npm) MAL-2026-3336 | Malicious | Not scored | 04 May, 2026 | npm @channel_bot/xa0 |
Malicious release: Malicious code in paychex-common-vendor-lib (npm) GHSA-64fr-896g-cjfw, MAL-2026-3326 | Malicious | Not scored | 04 May, 2026 | npm paychex-common-vendor-lib |
Malicious release: Malicious code in cloudauth-sdk (PyPI) MAL-2026-3325 | Malicious | Not scored | 04 May, 2026 | PyPI cloudauth-sdk |