Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in pumpswap-sdk-v1 (npm) GHSA-5qr5-f8q7-r844, MAL-2026-16088 | Malicious | Not scored | 09 Sep, 2026 | npm pumpswap-sdk-v1 |
Malicious release: Malicious code in polygon-toolkits-validator (npm) GHSA-cmwm-j5px-xrpf, MAL-2026-16087 | Malicious | Not scored | 09 Sep, 2026 | npm polygon-toolkits-validator |
Malicious release: Malicious code in raydium-clmm-sdk (npm) GHSA-cq4p-x9wg-m5wv, MAL-2026-16089 | Malicious | Not scored | 09 Sep, 2026 | npm raydium-clmm-sdk |
Malicious release: Malicious code in crypto-validates (npm) GHSA-v5v6-h869-g34f, MAL-2026-16085 | Malicious | Not scored | 09 Sep, 2026 | npm crypto-validates |
Malicious release: Malicious code in websetup (PyPI) MAL-2026-16121 | Malicious | Not scored | 09 Sep, 2026 | PyPI websetup |
Malicious release: Malicious code in databricks-webapp-navigation-homepage (PyPI) MAL-2026-16080 | Malicious | Not scored | 09 Sep, 2026 | PyPI databricks-webapp-navigation-homepage |
Malicious release: Malicious code in server-authorized-cleanup (npm) MAL-2026-16079 | Malicious | Not scored | 09 Sep, 2026 | npm server-authorized-cleanup |
Malicious release: Malicious code in cache-cleanup-module (npm) MAL-2026-16078 | Malicious | Not scored | 09 Sep, 2026 | npm cache-cleanup-module |
Malicious release: Malicious code in chai-as-sleek (npm) MAL-2026-16077 | Malicious | Not scored | 09 Sep, 2026 | npm chai-as-sleek |
Malicious release: Malicious code in external_deps_enjoyer (npm) MAL-2026-16076 | Malicious | Not scored | 09 Sep, 2026 | npm external_deps_enjoyer |
Malicious release: Malicious code in easypanel-agent (npm) MAL-2026-16072 | Malicious | Not scored | 09 Sep, 2026 | npm easypanel-agent |
Malicious release: Malicious code in cat-sis2go-utils (npm) MAL-2026-16071 | Malicious | Not scored | 09 Sep, 2026 | npm cat-sis2go-utils |
Malicious release: Malicious code in easypanel-deploy (npm) MAL-2026-16074 | Malicious | Not scored | 09 Sep, 2026 | npm easypanel-deploy |
Malicious release: Malicious code in easypanel-api-client (npm) MAL-2026-16073 | Malicious | Not scored | 09 Sep, 2026 | npm easypanel-api-client |
Malicious release: Malicious code in easypanel-hosting (npm) MAL-2026-16075 | Malicious | Not scored | 09 Sep, 2026 | npm easypanel-hosting |
Malicious release: Malicious code in @fyxzpediaa/baileys (npm) MAL-2026-16070 | Malicious | Not scored | 09 Sep, 2026 | npm @fyxzpediaa/baileys |
Malicious release: Malicious code in reactlogo-load (npm) MAL-2026-16069 | Malicious | Not scored | 09 Sep, 2026 | npm reactlogo-load |
Malicious release: Malicious code in @versacode/baileys (npm) GHSA-fw7g-gr3j-7wf7, MAL-2026-16068 | Malicious | Not scored | 09 Sep, 2026 | npm @versacode/baileys |
Malicious release: Malicious code in @vallensofficial/baileys (npm) GHSA-gg93-mm5f-23v8, MAL-2026-16067 | Malicious | Not scored | 09 Sep, 2026 | npm @vallensofficial/baileys |
Malicious release: Malicious code in @haimiya/baileys (npm) GHSA-q246-72rh-fp8w, MAL-2026-16066 | Malicious | Not scored | 09 Sep, 2026 | npm @haimiya/baileys |
Malicious release: Malicious code in @yongot/canary-mcp-isolation (npm) MAL-2026-16061 | Malicious | Not scored | 09 Sep, 2026 | npm @yongot/canary-mcp-isolation |
Malicious release: Malicious code in express-session-timer (npm) MAL-2026-16065 | Malicious | Not scored | 09 Sep, 2026 | npm express-session-timer |
Malicious release: Malicious code in bx-ui-view (npm) MAL-2026-16064 | Malicious | Not scored | 09 Sep, 2026 | npm bx-ui-view |
Malicious release: Malicious code in @yongot/canary-mcp-test (npm) MAL-2026-16062 | Malicious | Not scored | 09 Sep, 2026 | npm @yongot/canary-mcp-test |
Malicious release: Malicious code in alloy-graphql (npm) MAL-2026-16063 | Malicious | Not scored | 09 Sep, 2026 | npm alloy-graphql |
Malicious release: Malicious code in selfcerts (npm) MAL-2026-16060 | Malicious | Not scored | 09 Sep, 2026 | npm selfcerts |
Malicious release: Malicious code in rojo-rbx (npm) MAL-2026-16059 | Malicious | Not scored | 09 Sep, 2026 | npm rojo-rbx |
Malicious release: Malicious code in file-type-detector (npm) MAL-2026-16053 | Malicious | Not scored | 09 Sep, 2026 | npm file-type-detector |
Malicious release: Malicious code in gloggo (npm) MAL-2026-16054 | Malicious | Not scored | 09 Sep, 2026 | npm gloggo |
Malicious release: Malicious code in sonmors (npm) MAL-2026-16055 | Malicious | Not scored | 09 Sep, 2026 | npm sonmors |
Malicious release: Malicious code in vinzz-wcli (npm) MAL-2026-16058 | Malicious | Not scored | 08 Sep, 2026 | npm vinzz-wcli |
Malicious release: Malicious code in toru-ultimate (npm) MAL-2026-16057 | Malicious | Not scored | 08 Sep, 2026 | npm toru-ultimate |
Malicious release: Malicious code in tailwind-aspect-styles (npm) MAL-2026-16056 | Malicious | Not scored | 08 Sep, 2026 | npm tailwind-aspect-styles |
Malicious release: Malicious code in open-item-validator (npm) GHSA-55qh-42r8-hcgq, MAL-2026-16052 | Malicious | Not scored | 08 Sep, 2026 | npm open-item-validator |
Malicious release: Malicious code in @aspect-adv-ui/consent-manager (npm) MAL-2026-16050 | Malicious | Not scored | 08 Sep, 2026 | npm @aspect-adv-ui/consent-manager |
Malicious release: Malicious code in @umschool/analytics (npm) MAL-2026-16051 | Malicious | Not scored | 08 Sep, 2026 | npm @umschool/analytics |
Malicious release: Malicious code in tailwindcss-aspectratio-styles (npm) MAL-2026-16049 | Malicious | Not scored | 08 Sep, 2026 | npm tailwindcss-aspectratio-styles |
Malicious release: Malicious code in punypump (npm) MAL-2026-16048 | Malicious | Not scored | 08 Sep, 2026 | npm punypump |
Malicious release: Malicious code in @usemosaik/template-react-js (npm) GHSA-8rcc-9ggm-659p, MAL-2026-16047 | Malicious | Not scored | 08 Sep, 2026 | npm @usemosaik/template-react-js |
Malicious release: Malicious code in i18nexus (npm) GHSA-38hw-f37p-99jj, MAL-2026-16045 | Malicious | Not scored | 08 Sep, 2026 | npm i18nexus |
Malicious release: Malicious code in i18nexus-tools (npm) GHSA-9cfw-xh4g-cc2f, MAL-2026-16046 | Malicious | Not scored | 08 Sep, 2026 | npm i18nexus-tools |
Malicious release: Malicious code in @web2apk/baileys (npm) GHSA-f4f2-cqqp-jcrx, MAL-2026-16043 | Malicious | Not scored | 08 Sep, 2026 | npm @web2apk/baileys |
Malicious release: Malicious code in krdpass-auth-react-native (npm) GHSA-3j7p-44mj-76hx, MAL-2026-16042 | Malicious | Not scored | 08 Sep, 2026 | npm krdpass-auth-react-native |
Malicious release: Malicious code in plogme (npm) MAL-2026-16199 | Malicious | Not scored | 08 Sep, 2026 | npm plogme |
Malicious release: Malicious code in telegram-helper (PyPI) MAL-2026-16017 | Malicious | Not scored | 07 Sep, 2026 | PyPI telegram-helper |
Malicious release: Malicious code in cv-train (PyPI) MAL-2026-16016 | Malicious | Not scored | 07 Sep, 2026 | PyPI cv-train |
Malicious release: Malicious code in @cp-shared-14/frontend-ui (npm) MAL-2026-16015 | Malicious | Not scored | 07 Sep, 2026 | npm @cp-shared-14/frontend-ui |
Malicious release: Malicious code in @aircanada/navigation-handler (npm) GHSA-356v-pcf2-7958, MAL-2026-16020 | Malicious | Not scored | 07 Sep, 2026 | npm @aircanada/navigation-handler |
Malicious release: Malicious code in @aircanada/core (npm) GHSA-46mp-56rw-qpmm, MAL-2026-16019 | Malicious | Not scored | 07 Sep, 2026 | npm @aircanada/core |
Malicious release: Malicious code in @aircanada/components (npm) GHSA-w6c3-rrw8-wxrx, MAL-2026-16018 | Malicious | Not scored | 07 Sep, 2026 | npm @aircanada/components |