Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @breezeai-frontend/i18n-config (npm) GHSA-3274-6pmj-53c3, MAL-2026-3293 | Malicious | Not scored | 03 May, 2026 | npm @breezeai-frontend/i18n-config |
Malicious release: Malicious code in apcyber-test-package (npm) GHSA-xr6f-x85p-m7ff, MAL-2026-3304 | Malicious | Not scored | 03 May, 2026 | npm apcyber-test-package |
Malicious release: Malicious code in win-update-helper-tool-v2 (PyPI) MAL-2026-3246 | Malicious | Not scored | 03 May, 2026 | PyPI win-update-helper-tool-v2 |
Malicious release: Malicious code in system-update-tool (PyPI) MAL-2026-3245 | Malicious | Not scored | 03 May, 2026 | PyPI system-update-tool |
Malicious release: Malicious code in ally-whitelist (npm) MAL-2026-3303 | Malicious | Not scored | 03 May, 2026 | npm ally-whitelist |
Malicious release: Malicious code in puan4 (PyPI) MAL-2026-3244 | Malicious | Not scored | 03 May, 2026 | PyPI puan4 |
Malicious release: Malicious code in @allyfinancial/allyfinancial-api (npm) GHSA-g584-r3m7-mrrm, MAL-2026-3290 | Malicious | Not scored | 03 May, 2026 | npm @allyfinancial/allyfinancial-api |
Malicious release: Malicious code in ally-json-threat-protect (npm) GHSA-9vx9-c8j6-h9p4, MAL-2026-3301 | Malicious | Not scored | 03 May, 2026 | npm ally-json-threat-protect |
Malicious release: Malicious code in ally-starter-api (npm) MAL-2026-3302 | Malicious | Not scored | 03 May, 2026 | npm ally-starter-api |
Malicious release: Malicious code in ally-forms (npm) MAL-2026-3300 | Malicious | Not scored | 03 May, 2026 | npm ally-forms |
Malicious release: Malicious code in ally-ccapi (npm) GHSA-29c6-x862-p526, MAL-2026-3298 | Malicious | Not scored | 03 May, 2026 | npm ally-ccapi |
Malicious release: Malicious code in ally-badges (npm) GHSA-9pfp-jfc9-q69j, MAL-2026-3296 | Malicious | Not scored | 03 May, 2026 | npm ally-badges |
Malicious release: Malicious code in puan3 (PyPI) MAL-2026-3243 | Malicious | Not scored | 03 May, 2026 | PyPI puan3 |
Malicious release: Malicious code in sf-vmeval-requests (PyPI) MAL-2026-3242 | Malicious | Not scored | 03 May, 2026 | PyPI sf-vmeval-requests |
Malicious release: Malicious code in nextjs-chat-with-ai-service (npm) GHSA-88fc-46q8-6h4p, MAL-2026-3241 | Malicious | Not scored | 03 May, 2026 | npm nextjs-chat-with-ai-service |
Malicious release: Malicious code in timesmcplib (PyPI) MAL-2026-3240 | Malicious | Not scored | 03 May, 2026 | PyPI timesmcplib |
Malicious release: Malicious code in timermcplib (PyPI) MAL-2026-3239 | Malicious | Not scored | 02 May, 2026 | PyPI timermcplib |
Malicious release: Malicious code in timemcplib (PyPI) MAL-2026-3238 | Malicious | Not scored | 02 May, 2026 | PyPI timemcplib |
Malicious release: Malicious code in protocol-stub-generator (PyPI) MAL-2026-3237 | Malicious | Not scored | 02 May, 2026 | PyPI protocol-stub-generator |
Malicious release: Malicious code in aocl-sparse-v3 (PyPI) MAL-2026-3236 | Malicious | Not scored | 02 May, 2026 | PyPI aocl-sparse-v3 |
Malicious release: Malicious code in apexomni-client (PyPI) MAL-2026-3235 | Malicious | Not scored | 02 May, 2026 | PyPI apexomni-client |
Malicious release: Malicious code in apexpro (npm) GHSA-4jwh-w2xx-p5rq, MAL-2026-3234 | Malicious | Not scored | 02 May, 2026 | npm apexpro |
Malicious release: Malicious code in apexomni (npm) GHSA-m6v2-w5cf-f85x, MAL-2026-3233 | Malicious | Not scored | 02 May, 2026 | npm apexomni |
Malicious release: Malicious code in ams-ssk (npm) GHSA-827p-whjw-xp3w, MAL-2026-3287 | Malicious | Not scored | 02 May, 2026 | npm ams-ssk |
Malicious release: Malicious code in common-tg-service (npm) GHSA-wvhv-cgwm-v2hv, MAL-2026-3288 | Malicious | Not scored | 02 May, 2026 | npm common-tg-service |
Malicious release: Malicious code in codewhisperer-streaming (npm) MAL-2026-3232 | Malicious | Not scored | 02 May, 2026 | npm codewhisperer-streaming |
Malicious release: Malicious code in currenttimerlib (PyPI) MAL-2026-3229 | Malicious | Not scored | 02 May, 2026 | PyPI currenttimerlib |
Malicious release: Malicious code in currenttimerpy (PyPI) MAL-2026-3230 | Malicious | Not scored | 02 May, 2026 | PyPI currenttimerpy |
Malicious release: Malicious code in timermcp (PyPI) MAL-2026-3231 | Malicious | Not scored | 02 May, 2026 | PyPI timermcp |
Malicious release: Malicious code in as89ufnaisufn (PyPI) MAL-2026-3225 | Malicious | Not scored | 02 May, 2026 | PyPI as89ufnaisufn |
Malicious release: Malicious code in timingmcp (PyPI) MAL-2026-3227 | Malicious | Not scored | 02 May, 2026 | PyPI timingmcp |
Malicious release: Malicious code in timesmcp (PyPI) MAL-2026-3226 | Malicious | Not scored | 02 May, 2026 | PyPI timesmcp |
Malicious release: Malicious code in ziugxfbvo (PyPI) MAL-2026-3228 | Malicious | Not scored | 02 May, 2026 | PyPI ziugxfbvo |
Malicious release: Malicious code in graphicctx (PyPI) MAL-2026-3224 | Malicious | Not scored | 01 May, 2026 | PyPI graphicctx |
Malicious release: Malicious code in oracle-lag-sniper (PyPI) MAL-2026-3223 | Malicious | Not scored | 01 May, 2026 | PyPI oracle-lag-sniper |
Malicious release: Malicious code in graphicsctxs (PyPI) MAL-2026-3222 | Malicious | Not scored | 01 May, 2026 | PyPI graphicsctxs |
Malicious release: Malicious code in aocl-sparse-v2 (PyPI) MAL-2026-3221 | Malicious | Not scored | 01 May, 2026 | PyPI aocl-sparse-v2 |
Malicious release: Malicious code in py-clob-clients (PyPI) MAL-2026-3220 | Malicious | Not scored | 01 May, 2026 | PyPI py-clob-clients |
Malicious release: Malicious code in tns-py (PyPI) MAL-2026-3219 | Malicious | Not scored | 01 May, 2026 | PyPI tns-py |
Malicious release: Malicious code in aocl-sparse (PyPI) MAL-2026-3217 | Malicious | Not scored | 01 May, 2026 | PyPI aocl-sparse |
Malicious release: Malicious code in my-pipeline-watcher-poc (PyPI) MAL-2026-3218 | Malicious | Not scored | 01 May, 2026 | PyPI my-pipeline-watcher-poc |
Malicious release: Malicious code in httpx-utils (PyPI) MAL-2026-3216 | Malicious | Not scored | 01 May, 2026 | PyPI httpx-utils |
Malicious release: Malicious code in bpmn-studio (npm) GHSA-j2xc-x6gx-xqq8, MAL-2026-3306 | Malicious | Not scored | 01 May, 2026 | npm bpmn-studio |
Malicious release: Malicious code in archetype-style (npm) GHSA-m9f5-cp7r-48pm, MAL-2026-3215 | Malicious | Not scored | 01 May, 2026 | npm archetype-style |
Malicious release: Malicious code in update-db (npm) MAL-2026-3315 | Malicious | Not scored | 01 May, 2026 | npm update-db |
Malicious release: Malicious code in update-browserslist (npm) MAL-2026-3314 | Malicious | Not scored | 01 May, 2026 | npm update-browserslist |
Malicious release: Malicious code in browserslist-db (npm) MAL-2026-3307 | Malicious | Not scored | 01 May, 2026 | npm browserslist-db |
Malicious release: Malicious code in common-roles (npm) MAL-2026-3308 | Malicious | Not scored | 01 May, 2026 | npm common-roles |
Malicious release: Malicious code in renderkitcore (PyPI) MAL-2026-3214 | Malicious | Not scored | 01 May, 2026 | PyPI renderkitcore |
Malicious release: Malicious code in funkratov-renderkit (PyPI) MAL-2026-3213 | Malicious | Not scored | 01 May, 2026 | PyPI funkratov-renderkit |