Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in ollamaa (PyPI) MAL-2026-16134 | Malicious | Not scored | 11 Sep, 2026 | PyPI ollamaa |
Malicious release: Malicious code in openaii (PyPI) MAL-2026-16135 | Malicious | Not scored | 11 Sep, 2026 | PyPI openaii |
Malicious release: Malicious code in @nimbusedge/auth (npm) MAL-2026-16132 | Malicious | Not scored | 11 Sep, 2026 | npm @nimbusedge/auth |
Malicious release: Malicious code in tailwind-form-kit (npm) GHSA-8p5f-pjcw-69mw, MAL-2026-16139 | Malicious | Not scored | 11 Sep, 2026 | npm tailwind-form-kit |
Malicious release: Malicious code in aitextutils-py (PyPI) MAL-2026-16131 | Malicious | Not scored | 11 Sep, 2026 | PyPI aitextutils-py |
Malicious release: Malicious code in aitextkit-py (PyPI) MAL-2026-16130 | Malicious | Not scored | 11 Sep, 2026 | PyPI aitextkit-py |
Malicious release: Malicious code in pymem-win (PyPI) MAL-2026-16128 | Malicious | Not scored | 11 Sep, 2026 | PyPI pymem-win |
Malicious release: Malicious code in eth-account-web3 (PyPI) MAL-2026-16127 | Malicious | Not scored | 11 Sep, 2026 | PyPI eth-account-web3 |
Malicious release: Malicious code in web3-eth-account (PyPI) MAL-2026-16129 | Malicious | Not scored | 11 Sep, 2026 | PyPI web3-eth-account |
Malicious release: Malicious code in strapi-plugin-vinsoc-1109 (npm) MAL-2026-16126 | Malicious | Not scored | 11 Sep, 2026 | npm strapi-plugin-vinsoc-1109 |
Malicious release: Malicious code in lucy-python-script-2030 (PyPI) MAL-2026-16125 | Malicious | Not scored | 10 Sep, 2026 | PyPI lucy-python-script-2030 |
Malicious release: Malicious code in pinochiomathm (npm) MAL-2026-16123 | Malicious | Not scored | 10 Sep, 2026 | npm pinochiomathm |
Malicious release: Malicious code in tailwindcss-contact-forms (npm) MAL-2026-16124 | Malicious | Not scored | 10 Sep, 2026 | npm tailwindcss-contact-forms |
Malicious release: Malicious code in pylever (PyPI) MAL-2026-16122 | Malicious | Not scored | 10 Sep, 2026 | PyPI pylever |
Malicious release: Malicious code in etoro-cashout (npm) MAL-2026-16117 | Malicious | Not scored | 10 Sep, 2026 | npm etoro-cashout |
Malicious release: Malicious code in etoro-builders (npm) MAL-2026-16116 | Malicious | Not scored | 10 Sep, 2026 | npm etoro-builders |
Malicious release: Malicious code in etoro-aggregator (npm) MAL-2026-16111 | Malicious | Not scored | 10 Sep, 2026 | npm etoro-aggregator |
Malicious release: Malicious code in etoro-analytics (npm) MAL-2026-16112 | Malicious | Not scored | 10 Sep, 2026 | npm etoro-analytics |
Malicious release: Malicious code in etoro-api (npm) MAL-2026-16113 | Malicious | Not scored | 10 Sep, 2026 | npm etoro-api |
Malicious release: Malicious code in etoro-client (npm) MAL-2026-16119 | Malicious | Not scored | 10 Sep, 2026 | npm etoro-client |
Malicious release: Malicious code in etoro-core (npm) MAL-2026-16120 | Malicious | Not scored | 10 Sep, 2026 | npm etoro-core |
Malicious release: Malicious code in etoro-charts (npm) MAL-2026-16118 | Malicious | Not scored | 10 Sep, 2026 | npm etoro-charts |
Malicious release: Malicious code in etoro-auth (npm) MAL-2026-16114 | Malicious | Not scored | 10 Sep, 2026 | npm etoro-auth |
Malicious release: Malicious code in etoro-billing (npm) MAL-2026-16115 | Malicious | Not scored | 10 Sep, 2026 | npm etoro-billing |
Malicious release: Malicious code in @nexustechpro/baileys (npm) GHSA-8w6v-4xp9-rvrr, MAL-2026-16104 | Malicious | Not scored | 09 Sep, 2026 | npm @nexustechpro/baileys |
Malicious release: Malicious code in @neroxkira/vangal-baileys (npm) MAL-2026-16103 | Malicious | Not scored | 09 Sep, 2026 | npm @neroxkira/vangal-baileys |
Malicious release: Malicious code in @sahril2nd/baileys (npm) MAL-2026-16105 | Malicious | Not scored | 09 Sep, 2026 | npm @sahril2nd/baileys |
Malicious release: Malicious code in @auction-fe/ui-kit (npm) GHSA-2r37-886p-hj65, MAL-2026-16109 | Malicious | Not scored | 09 Sep, 2026 | npm @auction-fe/ui-kit |
Malicious release: Malicious code in @auction-fe/reporting-system (npm) GHSA-4x79-pcqv-r9rf, MAL-2026-16108 | Malicious | Not scored | 09 Sep, 2026 | npm @auction-fe/reporting-system |
Malicious release: Malicious code in @auction-fe/portal (npm) GHSA-qmw2-mp2f-cgg3, MAL-2026-16107 | Malicious | Not scored | 09 Sep, 2026 | npm @auction-fe/portal |
Malicious release: Malicious code in @auction-fe/base (npm) GHSA-w6hj-c25h-wgh7, MAL-2026-16106 | Malicious | Not scored | 09 Sep, 2026 | npm @auction-fe/base |
Malicious release: Malicious code in @convertics/script (npm) GHSA-c74p-4c5p-6v9r, MAL-2026-16110 | Malicious | Not scored | 09 Sep, 2026 | npm @convertics/script |
Malicious release: Malicious code in mfatest2 (npm) MAL-2026-16102 | Malicious | Not scored | 09 Sep, 2026 | npm mfatest2 |
Malicious release: Malicious code in mfaby (npm) MAL-2026-16101 | Malicious | Not scored | 09 Sep, 2026 | npm mfaby |
Malicious release: Malicious code in discord-mfa-solver (npm) GHSA-vf4w-775x-ccfh, MAL-2026-16100 | Malicious | Not scored | 09 Sep, 2026 | npm discord-mfa-solver |
Malicious release: Malicious code in bq-sdist-probe-vrp (PyPI) MAL-2026-16099 | Malicious | Not scored | 09 Sep, 2026 | PyPI bq-sdist-probe-vrp |
Malicious release: Malicious code in bq-build-probe-vrp-2026 (PyPI) MAL-2026-16098 | Malicious | Not scored | 09 Sep, 2026 | PyPI bq-build-probe-vrp-2026 |
Malicious release: Malicious code in matrixkit-js (npm) MAL-2026-16095 | Malicious | Not scored | 09 Sep, 2026 | npm matrixkit-js |
Malicious release: Malicious code in gmgn-trading-kit (npm) MAL-2026-16094 | Malicious | Not scored | 09 Sep, 2026 | npm gmgn-trading-kit |
Malicious release: Malicious code in twilio-hackerone-poc-b8f21a (npm) MAL-2026-16097 | Malicious | Not scored | 09 Sep, 2026 | npm twilio-hackerone-poc-b8f21a |
Malicious release: Malicious code in soltinel-pro (npm) MAL-2026-16096 | Malicious | Not scored | 09 Sep, 2026 | npm soltinel-pro |
Malicious release: Malicious code in sams-run-style (npm) GHSA-2r8h-5pr4-fr3v, MAL-2026-16090 | Malicious | Not scored | 09 Sep, 2026 | npm sams-run-style |
Malicious release: Malicious code in graphql-js-client-transform (npm) GHSA-xm59-fwxf-vq6g, MAL-2026-16086 | Malicious | Not scored | 09 Sep, 2026 | npm graphql-js-client-transform |
Malicious release: Malicious code in sams-text-style (npm) GHSA-xqx8-w483-rq8x, MAL-2026-16091 | Malicious | Not scored | 09 Sep, 2026 | npm sams-text-style |
Malicious release: Malicious code in @staticj/cropperxmjs (npm) MAL-2026-16081 | Malicious | Not scored | 09 Sep, 2026 | npm @staticj/cropperxmjs |
Malicious release: Malicious code in @umschool/platform (npm) MAL-2026-16082 | Malicious | Not scored | 09 Sep, 2026 | npm @umschool/platform |
Malicious release: Malicious code in vinnleys (npm) GHSA-p8f8-xjrg-2v4g, MAL-2026-16092 | Malicious | Not scored | 09 Sep, 2026 | npm vinnleys |
Malicious release: Malicious code in @vnxsync/libsignal-node (npm) GHSA-369v-phqf-c9g9, MAL-2026-16083 | Malicious | Not scored | 09 Sep, 2026 | npm @vnxsync/libsignal-node |
Malicious release: Malicious code in amprem-activator (npm) GHSA-4crw-26f5-4v62, MAL-2026-16084 | Malicious | Not scored | 09 Sep, 2026 | npm amprem-activator |
Malicious release: Malicious code in xbailsync (npm) GHSA-vfrg-29g4-854p, MAL-2026-16093 | Malicious | Not scored | 09 Sep, 2026 | npm xbailsync |