Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in robase-help (PyPI) MAL-2026-2561 | Malicious | Not scored | 11 Apr, 2026 | PyPI robase-help |
Malicious release: Malicious code in databasesupalake (PyPI) MAL-2026-2559 | Malicious | Not scored | 11 Apr, 2026 | PyPI databasesupalake |
Malicious release: Malicious code in ts-form-helpers (npm) MAL-2026-2872 | Malicious | Not scored | 11 Apr, 2026 | npm ts-form-helpers |
Malicious release: Malicious code in api-analysis (PyPI) MAL-2026-2556 | Malicious | Not scored | 11 Apr, 2026 | PyPI api-analysis |
Malicious release: Malicious code in robase-utils (PyPI) MAL-2026-2558 | Malicious | Not scored | 11 Apr, 2026 | PyPI robase-utils |
Malicious release: Malicious code in databasesupasafe (PyPI) MAL-2026-2557 | Malicious | Not scored | 11 Apr, 2026 | PyPI databasesupasafe |
Malicious release: Malicious code in api-feature (PyPI) MAL-2026-2555 | Malicious | Not scored | 11 Apr, 2026 | PyPI api-feature |
Malicious release: Malicious code in paysafe-card-payments (npm) GHSA-9c83-p69j-8r99, MAL-2026-2551 | Malicious | Not scored | 11 Apr, 2026 | npm paysafe-card-payments |
Malicious release: Malicious code in paysafe-apple-pay (npm) GHSA-8h4g-8hgw-x4gw, MAL-2026-2550 | Malicious | Not scored | 11 Apr, 2026 | npm paysafe-apple-pay |
Malicious release: Malicious code in paysafe-google-pay (npm) GHSA-v6gg-22rj-hjmc, MAL-2026-2552 | Malicious | Not scored | 11 Apr, 2026 | npm paysafe-google-pay |
Malicious release: Malicious code in paysafe-venmo (npm) GHSA-5rh7-2mgf-g569, MAL-2026-2554 | Malicious | Not scored | 11 Apr, 2026 | npm paysafe-venmo |
Malicious release: Malicious code in paysafe-payments-sdk-common (npm) GHSA-x8ch-r2x5-mwmh, MAL-2026-2553 | Malicious | Not scored | 11 Apr, 2026 | npm paysafe-payments-sdk-common |
Malicious release: Malicious code in ixosmonitoring (PyPI) MAL-2026-2547 | Malicious | Not scored | 11 Apr, 2026 | PyPI ixosmonitoring |
Malicious release: Malicious code in ks-hex2pcap (PyPI) MAL-2026-2548 | Malicious | Not scored | 11 Apr, 2026 | PyPI ks-hex2pcap |
Malicious release: Malicious code in python-aickerso (PyPI) MAL-2026-2549 | Malicious | Not scored | 11 Apr, 2026 | PyPI python-aickerso |
Malicious release: Malicious code in hex2pcap (PyPI) MAL-2026-2546 | Malicious | Not scored | 11 Apr, 2026 | PyPI hex2pcap |
Malicious release: Malicious code in @sap-px/pxapi (npm) GHSA-h45p-wmcx-qr4h, MAL-2026-2545 | Malicious | Not scored | 11 Apr, 2026 | npm @sap-px/pxapi |
Malicious release: Malicious code in roboat-utilities (PyPI) MAL-2026-2544 | Malicious | Not scored | 10 Apr, 2026 | PyPI roboat-utilities |
Malicious release: Malicious code in robase (PyPI) MAL-2026-2543 | Malicious | Not scored | 10 Apr, 2026 | PyPI robase |
Malicious release: Malicious code in databasetrace (PyPI) MAL-2026-2542 | Malicious | Not scored | 10 Apr, 2026 | PyPI databasetrace |
Malicious release: Malicious code in bogus-nydus-op (PyPI) MAL-2026-2538 | Malicious | Not scored | 10 Apr, 2026 | PyPI bogus-nydus-op |
Malicious release: Malicious code in gd-auth (PyPI) MAL-2026-2540 | Malicious | Not scored | 10 Apr, 2026 | PyPI gd-auth |
Malicious release: Malicious code in gd-auth-sso (PyPI) MAL-2026-2541 | Malicious | Not scored | 10 Apr, 2026 | PyPI gd-auth-sso |
Malicious release: Malicious code in customer-local-ops (PyPI) MAL-2026-2539 | Malicious | Not scored | 10 Apr, 2026 | PyPI customer-local-ops |
Malicious release: Malicious code in @b2b-portal/form (npm) GHSA-7rrw-hm44-329g, MAL-2026-2537 | Malicious | Not scored | 10 Apr, 2026 | npm @b2b-portal/form |
Malicious release: Malicious code in emd-ext (PyPI) MAL-2026-2532 | Malicious | Not scored | 10 Apr, 2026 | PyPI emd-ext |
Malicious release: Malicious code in yhaplo1 (PyPI) MAL-2026-2536 | Malicious | Not scored | 10 Apr, 2026 | PyPI yhaplo1 |
Malicious release: Malicious code in bonsaitree1 (PyPI) MAL-2026-2531 | Malicious | Not scored | 10 Apr, 2026 | PyPI bonsaitree1 |
Malicious release: Malicious code in siempyl-sumo (PyPI) MAL-2026-2534 | Malicious | Not scored | 10 Apr, 2026 | PyPI siempyl-sumo |
Malicious release: Malicious code in ttam (PyPI) MAL-2026-2535 | Malicious | Not scored | 10 Apr, 2026 | PyPI ttam |
Malicious release: Malicious code in phasedibd (PyPI) MAL-2026-2533 | Malicious | Not scored | 10 Apr, 2026 | PyPI phasedibd |
Malicious release: Malicious code in @lamoda/seller-ui-kit (npm) GHSA-hcfw-75mq-x3wr, MAL-2026-2588 | Malicious | Not scored | 10 Apr, 2026 | npm @lamoda/seller-ui-kit |
Malicious release: Malicious code in noonhelpers (PyPI) MAL-2026-2530 | Malicious | Not scored | 10 Apr, 2026 | PyPI noonhelpers |
Malicious release: Malicious code in @genoma-ui/components (npm) GHSA-rxx8-qh66-9vfr, MAL-2026-2823 | Malicious | Not scored | 10 Apr, 2026 | npm @genoma-ui/components |
Malicious release: Malicious code in sjs-biginteger (npm) GHSA-38ww-f26r-f8w7, MAL-2026-2527 | Malicious | Not scored | 09 Apr, 2026 | npm sjs-biginteger |
Malicious release: Malicious code in sjs-lint-build1 (npm) GHSA-g48w-hprp-f478, MAL-2026-2528 | Malicious | Not scored | 09 Apr, 2026 | npm sjs-lint-build1 |
Malicious release: Malicious code in st-payment (PyPI) MAL-2026-2522 | Malicious | Not scored | 09 Apr, 2026 | PyPI st-payment |
Malicious release: Malicious code in gc-grocery-api (PyPI) MAL-2026-2521 | Malicious | Not scored | 09 Apr, 2026 | PyPI gc-grocery-api |
Malicious release: Malicious code in @signals-notebook/utils (npm) MAL-2026-2520 | Malicious | Not scored | 09 Apr, 2026 | npm @signals-notebook/utils |
Malicious release: Malicious code in @tableau__catalog-messages/database_lower (npm) GHSA-wmfr-2pvv-wmf3, MAL-2026-2866 | Malicious | Not scored | 09 Apr, 2026 | npm @tableau__catalog-messages/database_lower |
Malicious release: Malicious code in @telekom-wfa/auth-core (npm) GHSA-gg3w-7mmm-rv8g, MAL-2026-2523 | Malicious | Not scored | 09 Apr, 2026 | npm @telekom-wfa/auth-core |
Malicious release: Malicious code in just4testlm (PyPI) MAL-2026-2519 | Malicious | Not scored | 09 Apr, 2026 | PyPI just4testlm |
Malicious release: Malicious code in viewer-assets-generator (npm) GHSA-w3wf-wfpv-gh73, MAL-2026-2518 | Malicious | Not scored | 09 Apr, 2026 | npm viewer-assets-generator |
Malicious release: Malicious code in kraken-trader (PyPI) MAL-2026-2517 | Malicious | Not scored | 08 Apr, 2026 | PyPI kraken-trader |
Malicious release: Malicious code in black-moon-js (npm) GHSA-86hq-c3m7-846h, MAL-2026-2870 | Malicious | Not scored | 08 Apr, 2026 | npm black-moon-js |
Malicious release: Malicious code in sentinel-tool (PyPI) MAL-2026-2516 | Malicious | Not scored | 08 Apr, 2026 | PyPI sentinel-tool |
Malicious release: Malicious code in granulate-utils (PyPI) MAL-2026-2515 | Malicious | Not scored | 08 Apr, 2026 | PyPI granulate-utils |
Malicious release: Malicious code in gprofiler-logging (PyPI) MAL-2026-2514 | Malicious | Not scored | 08 Apr, 2026 | PyPI gprofiler-logging |
Malicious release: Malicious code in gprofiler (npm) GHSA-rcp3-qprr-jrh3, MAL-2026-2513 | Malicious | Not scored | 08 Apr, 2026 | npm gprofiler |
Malicious release: Malicious code in roboat-utils (PyPI) MAL-2026-2512 | Malicious | Not scored | 08 Apr, 2026 | PyPI roboat-utils |