Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in ccn-common-react-library (npm) GHSA-p4qp-5cq3-7wp3, MAL-2026-2599 | Malicious | Not scored | 13 Apr, 2026 | npm ccn-common-react-library |
Malicious release: Malicious code in cms-site-api-js-client (npm) GHSA-q428-3gx7-pq9x, MAL-2026-2600 | Malicious | Not scored | 13 Apr, 2026 | npm cms-site-api-js-client |
Malicious release: Malicious code in babel-plugin-fbtee (npm) GHSA-q9p9-vqx4-g8jq, MAL-2026-2598 | Malicious | Not scored | 13 Apr, 2026 | npm babel-plugin-fbtee |
Malicious release: Malicious code in etsy-advocacy (npm) GHSA-rm5h-fvwx-q9x4, MAL-2026-2602 | Malicious | Not scored | 13 Apr, 2026 | npm etsy-advocacy |
Malicious release: Malicious code in kaltura-ngx-client (npm) GHSA-2cfm-8wwp-vpfx, MAL-2026-2605 | Malicious | Not scored | 13 Apr, 2026 | npm kaltura-ngx-client |
Malicious release: Malicious code in symphony-core (npm) GHSA-6vc2-8rcw-cxg8, MAL-2026-2608 | Malicious | Not scored | 13 Apr, 2026 | npm symphony-core |
Malicious release: Malicious code in mdb-react-sortable (npm) GHSA-99fw-xhm5-2382, MAL-2026-2606 | Malicious | Not scored | 13 Apr, 2026 | npm mdb-react-sortable |
Malicious release: Malicious code in experian-design-system-themes (npm) GHSA-qqrr-w9xm-5w7g, MAL-2026-2603 | Malicious | Not scored | 13 Apr, 2026 | npm experian-design-system-themes |
Malicious release: Malicious code in dwaiter-company-web (npm) GHSA-rv36-9mrp-x3ch, MAL-2026-2601 | Malicious | Not scored | 13 Apr, 2026 | npm dwaiter-company-web |
Malicious release: Malicious code in @b2b-portal/core (npm) GHSA-jj8x-58xf-9jwx, MAL-2026-2576 | Malicious | Not scored | 13 Apr, 2026 | npm @b2b-portal/core |
Malicious release: Malicious code in @b2b-portal/kit (npm) GHSA-rpg7-m5pq-947p, MAL-2026-2577 | Malicious | Not scored | 13 Apr, 2026 | npm @b2b-portal/kit |
Malicious release: Malicious code in hiveos-setting (PyPI) MAL-2026-2572 | Malicious | Not scored | 13 Apr, 2026 | PyPI hiveos-setting |
Malicious release: Malicious code in hiveos-settings (PyPI) MAL-2026-2571 | Malicious | Not scored | 13 Apr, 2026 | PyPI hiveos-settings |
Malicious release: Malicious code in pubnub-element (npm) GHSA-pccr-9vgc-6fx6, MAL-2026-2635 | Malicious | Not scored | 13 Apr, 2026 | npm pubnub-element |
Malicious release: Malicious code in babel-plugin-blocks (npm) GHSA-9h8x-6qpc-9v5g, MAL-2026-2631 | Malicious | Not scored | 13 Apr, 2026 | npm babel-plugin-blocks |
Malicious release: Malicious code in seaport-core-16 (npm) GHSA-xwxq-h8q6-2494, MAL-2026-2636 | Malicious | Not scored | 13 Apr, 2026 | npm seaport-core-16 |
Malicious release: Malicious code in markdownlint-rule-link-pattern (npm) GHSA-q3xp-j858-q9xf, MAL-2026-2633 | Malicious | Not scored | 13 Apr, 2026 | npm markdownlint-rule-link-pattern |
Malicious release: Malicious code in bitu-staking (npm) MAL-2026-2915 | Malicious | Not scored | 12 Apr, 2026 | npm bitu-staking |
Malicious release: Malicious code in pt-sc-demo-app (npm) GHSA-wxxw-8cpf-6fv5, MAL-2026-2567 | Malicious | Not scored | 12 Apr, 2026 | npm pt-sc-demo-app |
Malicious release: Malicious code in bloxy-api (PyPI) MAL-2026-2569 | Malicious | Not scored | 12 Apr, 2026 | PyPI bloxy-api |
Malicious release: Malicious code in pt-sc-logger (npm) GHSA-c9cq-89w9-78h3, MAL-2026-2568 | Malicious | Not scored | 12 Apr, 2026 | npm pt-sc-logger |
Malicious release: Malicious code in robase-app (PyPI) MAL-2026-2570 | Malicious | Not scored | 12 Apr, 2026 | PyPI robase-app |
Malicious release: Malicious code in upstart-offer-container (npm) GHSA-232r-w3h2-2hv5, MAL-2026-2613 | Malicious | Not scored | 12 Apr, 2026 | npm upstart-offer-container |
Malicious release: Malicious code in upstartautoretailadmin (npm) GHSA-5vc6-vrhq-w4h9, MAL-2026-2617 | Malicious | Not scored | 12 Apr, 2026 | npm upstartautoretailadmin |
Malicious release: Malicious code in upstartportal (npm) GHSA-q4fh-w299-f753, MAL-2026-2620 | Malicious | Not scored | 12 Apr, 2026 | npm upstartportal |
Malicious release: Malicious code in upstartdr (npm) GHSA-7vv7-22qp-3mj7, MAL-2026-2618 | Malicious | Not scored | 12 Apr, 2026 | npm upstartdr |
Malicious release: Malicious code in upstartadmindashboard- (npm) GHSA-m873-wm98-r6vj, MAL-2026-2615 | Malicious | Not scored | 12 Apr, 2026 | npm upstartadmindashboard- |
Malicious release: Malicious code in upstartloans (npm) GHSA-4jhq-f342-5773, MAL-2026-2619 | Malicious | Not scored | 12 Apr, 2026 | npm upstartloans |
Malicious release: Malicious code in upstart-lending-status (npm) GHSA-w3xp-4hxm-c484, MAL-2026-2611 | Malicious | Not scored | 12 Apr, 2026 | npm upstart-lending-status |
Malicious release: Malicious code in upstartapplicationstatus (npm) GHSA-9hj7-rh99-qm24, MAL-2026-2616 | Malicious | Not scored | 12 Apr, 2026 | npm upstartapplicationstatus |
Malicious release: Malicious code in upstart-loan-status (npm) GHSA-97h2-g27p-2m54, MAL-2026-2612 | Malicious | Not scored | 12 Apr, 2026 | npm upstart-loan-status |
Malicious release: Malicious code in upstart.previewcss (npm) GHSA-g8xh-53qm-mc7m, MAL-2026-2614 | Malicious | Not scored | 12 Apr, 2026 | npm upstart.previewcss |
Malicious release: Malicious code in pinstatsd (npm) GHSA-mwj4-gvm3-8rmh, MAL-2026-2654 | Malicious | Not scored | 12 Apr, 2026 | npm pinstatsd |
Malicious release: Malicious code in pinlogger (npm) GHSA-fw76-452q-hgcm, MAL-2026-2653 | Malicious | Not scored | 12 Apr, 2026 | npm pinlogger |
Malicious release: Malicious code in wm-plugin-visions-recorder (npm) GHSA-x6cr-7xwj-965h, MAL-2026-2566 | Malicious | Not scored | 12 Apr, 2026 | npm wm-plugin-visions-recorder |
Malicious release: Malicious code in gp-auth-lib (npm) GHSA-24hv-mhfh-jc6q, MAL-2026-2564 | Malicious | Not scored | 12 Apr, 2026 | npm gp-auth-lib |
Malicious release: Malicious code in portal-common-ui (npm) GHSA-jfpv-r33m-g47p, MAL-2026-2565 | Malicious | Not scored | 12 Apr, 2026 | npm portal-common-ui |
Malicious release: Malicious code in ts-schema-helpers (npm) MAL-2026-2873 | Malicious | Not scored | 12 Apr, 2026 | npm ts-schema-helpers |
Malicious release: Malicious code in unisys-uka (npm) MAL-2026-2824 | Malicious | Not scored | 11 Apr, 2026 | npm unisys-uka |
Malicious release: Malicious code in unisys-common (npm) MAL-2026-2876 | Malicious | Not scored | 11 Apr, 2026 | npm unisys-common |
Malicious release: Malicious code in unisys-sdk (npm) MAL-2026-2878 | Malicious | Not scored | 11 Apr, 2026 | npm unisys-sdk |
Malicious release: Malicious code in unisys-core (npm) MAL-2026-2877 | Malicious | Not scored | 11 Apr, 2026 | npm unisys-core |
Malicious release: Malicious code in unisys-auth (npm) MAL-2026-2875 | Malicious | Not scored | 11 Apr, 2026 | npm unisys-auth |
Malicious release: Malicious code in unisys-agentic-ai-playground (npm) MAL-2026-2874 | Malicious | Not scored | 11 Apr, 2026 | npm unisys-agentic-ai-playground |
Malicious release: Malicious code in robase-fallback (PyPI) MAL-2026-2562 | Malicious | Not scored | 11 Apr, 2026 | PyPI robase-fallback |
Malicious release: Malicious code in robase-installer (PyPI) MAL-2026-2563 | Malicious | Not scored | 11 Apr, 2026 | PyPI robase-installer |
Malicious release: Malicious code in arlo-meeting-assistant-rtms (npm) MAL-2026-2869 | Malicious | Not scored | 11 Apr, 2026 | npm arlo-meeting-assistant-rtms |
Malicious release: Malicious code in arlo-meeting-assistant-frontend (npm) MAL-2026-2868 | Malicious | Not scored | 11 Apr, 2026 | npm arlo-meeting-assistant-frontend |
Malicious release: Malicious code in arlo-meeting-assistant-backend (npm) MAL-2026-2867 | Malicious | Not scored | 11 Apr, 2026 | npm arlo-meeting-assistant-backend |
Malicious release: Malicious code in @b2b-portal/uch (npm) GHSA-86jx-983h-h77x, MAL-2026-2560 | Malicious | Not scored | 11 Apr, 2026 | npm @b2b-portal/uch |