Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in mypypipkg (PyPI) MAL-2026-3105 | Malicious | Not scored | 27 Apr, 2026 | PyPI mypypipkg |
Malicious release: Malicious code in apple-app-store-server-library-poc (npm) GHSA-4r99-2267-v7p2, MAL-2026-3123 | Malicious | Not scored | 27 Apr, 2026 | npm apple-app-store-server-library-poc |
Malicious release: Malicious code in robase-ui (PyPI) MAL-2026-3104 | Malicious | Not scored | 27 Apr, 2026 | PyPI robase-ui |
Malicious release: Malicious code in @w3m-frame/session_update (npm) GHSA-48cv-82hq-87cc, MAL-2026-3122 | Malicious | Not scored | 27 Apr, 2026 | npm @w3m-frame/session_update |
Malicious release: Malicious code in @pyme-web/web-api (npm) GHSA-q9v2-86j4-4885, MAL-2026-3120 | Malicious | Not scored | 27 Apr, 2026 | npm @pyme-web/web-api |
Malicious release: Malicious code in @pyme-web/ui-widget (npm) GHSA-5x28-2ff3-64cj, MAL-2026-3119 | Malicious | Not scored | 27 Apr, 2026 | npm @pyme-web/ui-widget |
Malicious release: Malicious code in @pyme-web/ui-base (npm) GHSA-8jh8-42h4-gjg5, MAL-2026-3118 | Malicious | Not scored | 27 Apr, 2026 | npm @pyme-web/ui-base |
Malicious release: Malicious code in fetch-data-api-syncapi (PyPI) MAL-2026-3100 | Malicious | Not scored | 27 Apr, 2026 | PyPI fetch-data-api-syncapi |
Malicious release: Malicious code in @taxmoninor/taxmon (npm) GHSA-qpg7-5r8v-6h76, MAL-2026-3121 | Malicious | Not scored | 27 Apr, 2026 | npm @taxmoninor/taxmon |
Malicious release: Malicious code in @apple-pay-trust/authorize-payment (npm) GHSA-3g77-vg2g-7mjv, MAL-2026-3111 | Malicious | Not scored | 27 Apr, 2026 | npm @apple-pay-trust/authorize-payment |
Malicious release: Malicious code in @activation_code/success (npm) GHSA-hq57-73cg-6253, MAL-2026-3108 | Malicious | Not scored | 27 Apr, 2026 | npm @activation_code/success |
Malicious release: Malicious code in @apple-pay-trust/cancelled (npm) GHSA-2v65-5xfv-p42q, MAL-2026-3112 | Malicious | Not scored | 27 Apr, 2026 | npm @apple-pay-trust/cancelled |
Malicious release: Malicious code in @apiary-annex/meta (npm) GHSA-gqjg-5998-3rmq, MAL-2026-3109 | Malicious | Not scored | 27 Apr, 2026 | npm @apiary-annex/meta |
Malicious release: Malicious code in @business_promocode/cancel_promocode (npm) GHSA-5vjv-9xjr-hq87, MAL-2026-3117 | Malicious | Not scored | 27 Apr, 2026 | npm @business_promocode/cancel_promocode |
Malicious release: Malicious code in @activation_code/activate (npm) GHSA-64fm-mh5q-w2rp, MAL-2026-3106 | Malicious | Not scored | 27 Apr, 2026 | npm @activation_code/activate |
Malicious release: Malicious code in @business_promocode/apply_promocode (npm) GHSA-g79w-grhv-qw3m, MAL-2026-3116 | Malicious | Not scored | 27 Apr, 2026 | npm @business_promocode/apply_promocode |
Malicious release: Malicious code in @b2b_blocker/show_activation_error (npm) GHSA-ppx3-ph2c-gqgm, MAL-2026-3115 | Malicious | Not scored | 27 Apr, 2026 | npm @b2b_blocker/show_activation_error |
Malicious release: Malicious code in @activation_code/error (npm) GHSA-hrpv-vm88-vgfx, MAL-2026-3107 | Malicious | Not scored | 27 Apr, 2026 | npm @activation_code/error |
Malicious release: Malicious code in @apple-pay-trust/finish (npm) GHSA-45wm-8rff-vxfr, MAL-2026-3114 | Malicious | Not scored | 27 Apr, 2026 | npm @apple-pay-trust/finish |
Malicious release: Malicious code in @apple-pay-trust/check-apple-pay-result (npm) GHSA-rcv5-83j3-954q, MAL-2026-3113 | Malicious | Not scored | 27 Apr, 2026 | npm @apple-pay-trust/check-apple-pay-result |
Malicious release: Malicious code in @apiary-annex/title (npm) GHSA-mw85-996v-w3pc, MAL-2026-3110 | Malicious | Not scored | 27 Apr, 2026 | npm @apiary-annex/title |
Malicious release: Malicious code in apple-internal-dev-check (npm) GHSA-p9p8-h8cq-mhq7, MAL-2026-3124 | Malicious | Not scored | 27 Apr, 2026 | npm apple-internal-dev-check |
Malicious release: Malicious code in bytedaaa (PyPI) MAL-2026-3085 | Malicious | Not scored | 27 Apr, 2026 | PyPI bytedaaa |
Malicious release: Malicious code in bytedecs (PyPI) MAL-2026-3090 | Malicious | Not scored | 27 Apr, 2026 | PyPI bytedecs |
Malicious release: Malicious code in bytedvke (PyPI) MAL-2026-3098 | Malicious | Not scored | 27 Apr, 2026 | PyPI bytedvke |
Malicious release: Malicious code in bytedark (PyPI) MAL-2026-3087 | Malicious | Not scored | 27 Apr, 2026 | PyPI bytedark |
Malicious release: Malicious code in bytedai (PyPI) MAL-2026-3086 | Malicious | Not scored | 27 Apr, 2026 | PyPI bytedai |
Malicious release: Malicious code in bytedmlp (PyPI) MAL-2026-3093 | Malicious | Not scored | 27 Apr, 2026 | PyPI bytedmlp |
Malicious release: Malicious code in bytedvefaas (PyPI) MAL-2026-3097 | Malicious | Not scored | 27 Apr, 2026 | PyPI bytedvefaas |
Malicious release: Malicious code in bytedfaas (PyPI) MAL-2026-3091 | Malicious | Not scored | 27 Apr, 2026 | PyPI bytedfaas |
Malicious release: Malicious code in bytedclaw (PyPI) MAL-2026-3089 | Malicious | Not scored | 27 Apr, 2026 | PyPI bytedclaw |
Malicious release: Malicious code in byteclaw (PyPI) MAL-2026-3084 | Malicious | Not scored | 27 Apr, 2026 | PyPI byteclaw |
Malicious release: Malicious code in bytedvod (PyPI) MAL-2026-3099 | Malicious | Not scored | 27 Apr, 2026 | PyPI bytedvod |
Malicious release: Malicious code in bytedpymysql (PyPI) MAL-2026-3095 | Malicious | Not scored | 27 Apr, 2026 | PyPI bytedpymysql |
Malicious release: Malicious code in bytedbackground (PyPI) MAL-2026-3088 | Malicious | Not scored | 27 Apr, 2026 | PyPI bytedbackground |
Malicious release: Malicious code in bytedtccc (PyPI) MAL-2026-3096 | Malicious | Not scored | 27 Apr, 2026 | PyPI bytedtccc |
Malicious release: Malicious code in bytedmem (PyPI) MAL-2026-3092 | Malicious | Not scored | 27 Apr, 2026 | PyPI bytedmem |
Malicious release: Malicious code in bytedpgsql (PyPI) MAL-2026-3094 | Malicious | Not scored | 27 Apr, 2026 | PyPI bytedpgsql |
Malicious release: Malicious code in shopify-app-extension-template (npm) MAL-2026-3051 | Malicious | Not scored | 26 Apr, 2026 | npm shopify-app-extension-template |
Malicious release: Malicious code in frank-research-poc-apple (npm) GHSA-78hq-gp8w-grwp, MAL-2026-3081 | Malicious | Not scored | 26 Apr, 2026 | npm frank-research-poc-apple |
Malicious release: Malicious code in @clearpool/streaming (npm) GHSA-m2h2-p59r-798j, MAL-2026-3057 | Malicious | Not scored | 26 Apr, 2026 | npm @clearpool/streaming |
Malicious release: Malicious code in @clearpool/table (npm) GHSA-vxmm-j4j5-8q23, MAL-2026-3058 | Malicious | Not scored | 26 Apr, 2026 | npm @clearpool/table |
Malicious release: Malicious code in @clearpool/comms (npm) GHSA-fr5f-hf7f-p9w9, MAL-2026-3056 | Malicious | Not scored | 26 Apr, 2026 | npm @clearpool/comms |
Malicious release: Malicious code in @clearpool/utils (npm) MAL-2026-3059 | Malicious | Not scored | 26 Apr, 2026 | npm @clearpool/utils |
Malicious release: Malicious code in classlink (npm) MAL-2026-3049 | Malicious | Not scored | 26 Apr, 2026 | npm classlink |
Malicious release: Malicious code in robase-fast-install (PyPI) MAL-2026-3050 | Malicious | Not scored | 26 Apr, 2026 | PyPI robase-fast-install |
Malicious release: Malicious code in robase-gui-api (PyPI) MAL-2026-3048 | Malicious | Not scored | 26 Apr, 2026 | PyPI robase-gui-api |
Malicious release: Malicious code in robase-gui (PyPI) MAL-2026-3047 | Malicious | Not scored | 26 Apr, 2026 | PyPI robase-gui |
Malicious release: Malicious code in frank-bot-gogle-cloning (npm) GHSA-52j3-fx2q-cqm9, MAL-2026-3080 | Malicious | Not scored | 26 Apr, 2026 | npm frank-bot-gogle-cloning |
Malicious release: Malicious code in swisscom-ai-research-keyphrase (PyPI) MAL-2026-3046 | Malicious | Not scored | 26 Apr, 2026 | PyPI swisscom-ai-research-keyphrase |