Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @tw-marionette/clipboard (npm) GHSA-64qv-3564-73rg, MAL-2026-3070 | Malicious | Not scored | 26 Apr, 2026 | npm @tw-marionette/clipboard |
Malicious release: Malicious code in @ozon-complt/antibot-handler (npm) GHSA-m2jf-j5v5-wwx9, MAL-2026-3066 | Malicious | Not scored | 26 Apr, 2026 | npm @ozon-complt/antibot-handler |
Malicious release: Malicious code in @ozon-complt/split (npm) GHSA-cvr6-x554-xx2x, MAL-2026-3067 | Malicious | Not scored | 26 Apr, 2026 | npm @ozon-complt/split |
Malicious release: Malicious code in quicktestybesty (PyPI) MAL-2026-3045 | Malicious | Not scored | 26 Apr, 2026 | PyPI quicktestybesty |
Malicious release: Malicious code in quicksolving (PyPI) MAL-2026-3044 | Malicious | Not scored | 25 Apr, 2026 | PyPI quicksolving |
Malicious release: Malicious code in rosolver (PyPI) MAL-2026-3043 | Malicious | Not scored | 25 Apr, 2026 | PyPI rosolver |
Malicious release: Malicious code in pycolorlib001 (PyPI) MAL-2026-3042 | Malicious | Not scored | 25 Apr, 2026 | PyPI pycolorlib001 |
Malicious release: Malicious code in robase-library-quick-install (PyPI) MAL-2026-3041 | Malicious | Not scored | 25 Apr, 2026 | PyPI robase-library-quick-install |
Malicious release: Malicious code in @apple-pay-trust/merchant-session (npm) GHSA-28hg-c8r7-mcvq, MAL-2026-3053 | Malicious | Not scored | 25 Apr, 2026 | npm @apple-pay-trust/merchant-session |
Malicious release: Malicious code in @google-pay-trust/cancelled (npm) GHSA-468m-q27w-9r8c, MAL-2026-3062 | Malicious | Not scored | 25 Apr, 2026 | npm @google-pay-trust/cancelled |
Malicious release: Malicious code in @google-pay-trust/authorize-payment (npm) GHSA-rpp8-r54f-pm33, MAL-2026-3061 | Malicious | Not scored | 25 Apr, 2026 | npm @google-pay-trust/authorize-payment |
Malicious release: Malicious code in @apple-pay-trust/start (npm) GHSA-crv2-p353-52gh, MAL-2026-3054 | Malicious | Not scored | 25 Apr, 2026 | npm @apple-pay-trust/start |
Malicious release: Malicious code in @google-pay-trust/init-google-pay (npm) GHSA-772p-cqpx-g783, MAL-2026-3064 | Malicious | Not scored | 25 Apr, 2026 | npm @google-pay-trust/init-google-pay |
Malicious release: Malicious code in @google-pay-trust/finish (npm) GHSA-g326-rcxw-2m3g, MAL-2026-3063 | Malicious | Not scored | 25 Apr, 2026 | npm @google-pay-trust/finish |
Malicious release: Malicious code in @apple-pay-trust/validate-merchant (npm) GHSA-wqf2-mrc2-r8j3, MAL-2026-3055 | Malicious | Not scored | 25 Apr, 2026 | npm @apple-pay-trust/validate-merchant |
Malicious release: Malicious code in apollo-vertex (npm) GHSA-ch5h-3gj9-4r8q, MAL-2026-3040 | Malicious | Not scored | 25 Apr, 2026 | npm apollo-vertex |
Malicious release: Malicious code in apollo-landing (npm) GHSA-9qp9-qwfr-p72c, MAL-2026-3038 | Malicious | Not scored | 25 Apr, 2026 | npm apollo-landing |
Malicious release: Malicious code in process-app-task (npm) GHSA-388h-jcvw-5634, MAL-2026-3039 | Malicious | Not scored | 25 Apr, 2026 | npm process-app-task |
Malicious release: Malicious code in @tw-models/storage (npm) GHSA-qr4v-hj88-g7j6, MAL-2026-3072 | Malicious | Not scored | 25 Apr, 2026 | npm @tw-models/storage |
Malicious release: Malicious code in @tw-marionette/input (npm) GHSA-584r-4qf7-jqf3, MAL-2026-3071 | Malicious | Not scored | 25 Apr, 2026 | npm @tw-marionette/input |
Malicious release: Malicious code in @tw-utils/static (npm) GHSA-v3mw-r645-qc2r, MAL-2026-3073 | Malicious | Not scored | 25 Apr, 2026 | npm @tw-utils/static |
Malicious release: Malicious code in standalone-apps (npm) GHSA-9whf-2j26-8mhh, MAL-2026-3037 | Malicious | Not scored | 25 Apr, 2026 | npm standalone-apps |
Malicious release: Malicious code in uipath-ui-widgets (npm) GHSA-x45w-938v-6p65, MAL-2026-3036 | Malicious | Not scored | 25 Apr, 2026 | npm uipath-ui-widgets |
Malicious release: Malicious code in kl-b2c-ui-kit (npm) GHSA-jwhp-97gv-chg5, MAL-2026-3082 | Malicious | Not scored | 25 Apr, 2026 | npm kl-b2c-ui-kit |
Malicious release: Malicious code in ort-moe (PyPI) MAL-2026-3034 | Malicious | Not scored | 25 Apr, 2026 | PyPI ort-moe |
Malicious release: Malicious code in promptflow-runtime (PyPI) MAL-2026-3035 | Malicious | Not scored | 25 Apr, 2026 | PyPI promptflow-runtime |
Malicious release: Malicious code in @sbt_gitverse/analytics-client (npm) GHSA-q9xj-mpqj-qpcc, MAL-2026-3068 | Malicious | Not scored | 25 Apr, 2026 | npm @sbt_gitverse/analytics-client |
Malicious release: Malicious code in tether-base (npm) GHSA-gwg8-p6mg-cp7g, MAL-2026-3033 | Malicious | Not scored | 25 Apr, 2026 | npm tether-base |
Malicious release: Malicious code in axis-ui-generator (npm) MAL-2026-3079 | Malicious | Not scored | 25 Apr, 2026 | npm axis-ui-generator |
Malicious release: Malicious code in axis-abc-search-address (npm) GHSA-r78p-pprh-8hvp, MAL-2026-3076 | Malicious | Not scored | 25 Apr, 2026 | npm axis-abc-search-address |
Malicious release: Malicious code in axis-abc-portal-menu (npm) MAL-2026-3074 | Malicious | Not scored | 25 Apr, 2026 | npm axis-abc-portal-menu |
Malicious release: Malicious code in axis-abc-search-account (npm) GHSA-q53f-j5w8-x7vh, MAL-2026-3075 | Malicious | Not scored | 25 Apr, 2026 | npm axis-abc-search-account |
Malicious release: Malicious code in axis-notification (npm) GHSA-2fp7-j74x-chvv, MAL-2026-3078 | Malicious | Not scored | 25 Apr, 2026 | npm axis-notification |
Malicious release: Malicious code in axis-charts (npm) MAL-2026-3077 | Malicious | Not scored | 25 Apr, 2026 | npm axis-charts |
Malicious release: Malicious code in js-component-explorer (npm) MAL-2026-3032 | Malicious | Not scored | 25 Apr, 2026 | npm js-component-explorer |
Malicious release: Malicious code in @tochka-ui/foundation (npm) GHSA-hf3j-mx5g-jc8r, MAL-2026-3069 | Malicious | Not scored | 24 Apr, 2026 | npm @tochka-ui/foundation |
Malicious release: Malicious code in elementary-data (PyPI) MAL-2026-3083 | Malicious | Not scored | 24 Apr, 2026 | PyPI elementary-data |
Malicious release: Malicious code in @frengki0707/google-cloud-clone (npm) MAL-2026-3060 | Malicious | Not scored | 24 Apr, 2026 | npm @frengki0707/google-cloud-clone |
Malicious release: Malicious code in @alfa.life.mapp/app.web (npm) GHSA-68cm-x784-c9gw, MAL-2026-3052 | Malicious | Not scored | 24 Apr, 2026 | npm @alfa.life.mapp/app.web |
Malicious release: Malicious code in swampo (PyPI) MAL-2026-3031 | Malicious | Not scored | 24 Apr, 2026 | PyPI swampo |
Malicious release: Malicious code in @m0ntana/app.web (npm) GHSA-m6jr-4x3f-2ph2, MAL-2026-3065 | Malicious | Not scored | 24 Apr, 2026 | npm @m0ntana/app.web |
Malicious release: Malicious code in model-poc-suhail (npm) GHSA-cpqg-wgv2-g29r, MAL-2026-3030 | Malicious | Not scored | 24 Apr, 2026 | npm model-poc-suhail |
Malicious release: Malicious code in auth0-ui-components-docs (npm) GHSA-78cj-64p5-2wh5, MAL-2026-3024 | Malicious | Not scored | 24 Apr, 2026 | npm auth0-ui-components-docs |
Malicious release: Malicious code in next-rwa (npm) GHSA-qr67-r552-v99q, MAL-2026-3025 | Malicious | Not scored | 24 Apr, 2026 | npm next-rwa |
Malicious release: Malicious code in wrapped-logger-utils (npm) GHSA-wm52-75j2-vmr3, MAL-2026-3027 | Malicious | Not scored | 24 Apr, 2026 | npm wrapped-logger-utils |
Malicious release: Malicious code in sagat-core (npm) GHSA-53hj-4c4g-2wqq, MAL-2026-3026 | Malicious | Not scored | 24 Apr, 2026 | npm sagat-core |
Malicious release: Malicious code in amplitude-ma-ts (npm) GHSA-987f-7782-4mjj, MAL-2026-3028 | Malicious | Not scored | 24 Apr, 2026 | npm amplitude-ma-ts |
Malicious release: Malicious code in test-pkg-jie (PyPI) MAL-2026-3023 | Malicious | Not scored | 23 Apr, 2026 | PyPI test-pkg-jie |
Malicious release: Malicious code in lightspark-js (npm) MAL-2026-3021 | Malicious | Not scored | 23 Apr, 2026 | npm lightspark-js |
Malicious release: Malicious code in jie-utility-package (PyPI) MAL-2026-3022 | Malicious | Not scored | 23 Apr, 2026 | PyPI jie-utility-package |