Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in roboat-utils (PyPI) MAL-2026-2512 | Malicious | Not scored | 08 Apr, 2026 | PyPI roboat-utils |
Malicious release: Malicious code in @fairwords/encryption (npm) GHSA-6rgf-v8fm-jf4g, MAL-2026-2506 | Malicious | Not scored | 08 Apr, 2026 | npm @fairwords/encryption |
Malicious release: Malicious code in @fairwords/loopback-connector-es (npm) MAL-2026-2507 | Malicious | Not scored | 08 Apr, 2026 | npm @fairwords/loopback-connector-es |
Malicious release: Malicious code in @fairwords/websocket (npm) GHSA-wr82-83f6-47v8, MAL-2026-2508 | Malicious | Not scored | 08 Apr, 2026 | npm @fairwords/websocket |
Malicious release: Malicious code in @sie-ppr-web-checkout/app (npm) GHSA-qvjv-fpr5-2fmm, MAL-2026-2865 | Malicious | Not scored | 07 Apr, 2026 | npm @sie-ppr-web-checkout/app |
Malicious release: Malicious code in @velora-dex/sdk (npm) MAL-2026-2510 | Malicious | Not scored | 07 Apr, 2026 | npm @velora-dex/sdk |
Malicious release: Malicious code in strapi-plugin-cache (npm) GHSA-389c-9hmg-qfx5, MAL-2026-2504 | Malicious | Not scored | 07 Apr, 2026 | npm strapi-plugin-cache |
Malicious release: Malicious code in @aspect-security/argon2 (npm) GHSA-4fc4-v9cp-846x, MAL-2026-2505 | Malicious | Not scored | 07 Apr, 2026 | npm @aspect-security/argon2 |
Malicious release: Malicious code in argon2-napi (npm) MAL-2026-2511 | Malicious | Not scored | 07 Apr, 2026 | npm argon2-napi |
Malicious release: Malicious code in @langgraphjs/toolkit (npm) GHSA-pq32-2vxj-cr62, MAL-2026-2509 | Malicious | Not scored | 07 Apr, 2026 | npm @langgraphjs/toolkit |
Malicious release: Malicious code in genesis-1p-tools-rpm-bundle (PyPI) MAL-2026-2503 | Malicious | Not scored | 07 Apr, 2026 | PyPI genesis-1p-tools-rpm-bundle |
Malicious release: Malicious code in devkitx (npm) GHSA-x77g-g3p5-frhh, MAL-2026-2871 | Malicious | Not scored | 07 Apr, 2026 | npm devkitx |
Malicious release: Malicious code in databasenaps (PyPI) MAL-2026-2502 | Malicious | Not scored | 07 Apr, 2026 | PyPI databasenaps |
Malicious release: Malicious code in databaselooks (PyPI) MAL-2026-2501 | Malicious | Not scored | 07 Apr, 2026 | PyPI databaselooks |
Malicious release: Malicious code in frontend-backoffice (npm) MAL-2026-2525 | Malicious | Not scored | 06 Apr, 2026 | npm frontend-backoffice |
Malicious release: Malicious code in use-form-builder-plugin (npm) GHSA-pj48-5mp2-8r94, MAL-2026-2529 | Malicious | Not scored | 06 Apr, 2026 | npm use-form-builder-plugin |
Malicious release: Malicious code in a2a-chat-canvas (npm) GHSA-pf4w-8h65-5h66, MAL-2026-2524 | Malicious | Not scored | 06 Apr, 2026 | npm a2a-chat-canvas |
Malicious release: Malicious code in request-js-validator (npm) GHSA-wrcq-4545-xm9w, MAL-2026-2526 | Malicious | Not scored | 06 Apr, 2026 | npm request-js-validator |
Malicious release: Malicious code in nerite-security-audit (npm) MAL-2026-2499 | Malicious | Not scored | 06 Apr, 2026 | npm nerite-security-audit |
Malicious release: Malicious code in totally-safe-util (npm) MAL-2026-2500 | Malicious | Not scored | 06 Apr, 2026 | npm totally-safe-util |
Malicious release: Malicious code in df-sandbox-test (npm) GHSA-89fq-wqxj-rcpg, MAL-2026-2498 | Malicious | Not scored | 06 Apr, 2026 | npm df-sandbox-test |
Malicious release: Malicious code in commerce-utils (npm) GHSA-4m72-8w6v-x24q, MAL-2026-2497 | Malicious | Not scored | 06 Apr, 2026 | npm commerce-utils |
Malicious release: Malicious code in chess-sec-ssrf1 (npm) MAL-2026-2496 | Malicious | Not scored | 06 Apr, 2026 | npm chess-sec-ssrf1 |
Malicious release: Malicious code in cloudera (npm) MAL-2026-2495 | Malicious | Not scored | 05 Apr, 2026 | npm cloudera |
Malicious release: Malicious code in cloudera-poc (npm) MAL-2026-2493 | Malicious | Not scored | 05 Apr, 2026 | npm cloudera-poc |
Malicious release: Malicious code in databasetapes (PyPI) MAL-2026-2494 | Malicious | Not scored | 05 Apr, 2026 | PyPI databasetapes |
Malicious release: Malicious code in admin0911 (npm) GHSA-hr5g-wqxg-m42m, MAL-2026-2492 | Malicious | Not scored | 05 Apr, 2026 | npm admin0911 |
Malicious release: Malicious code in @not-nemo/crypto-tracker (npm) GHSA-hv5v-f7p3-36rp, MAL-2026-2491 | Malicious | Not scored | 05 Apr, 2026 | npm @not-nemo/crypto-tracker |
Malicious release: Malicious code in @needl-ai/common (npm) MAL-2026-2716 | Malicious | Not scored | 05 Apr, 2026 | npm @needl-ai/common |
Malicious release: Malicious code in databaserobooms (PyPI) MAL-2026-2489 | Malicious | Not scored | 04 Apr, 2026 | PyPI databaserobooms |
Malicious release: Malicious code in databaserotacos (PyPI) MAL-2026-2490 | Malicious | Not scored | 04 Apr, 2026 | PyPI databaserotacos |
Malicious release: Malicious code in photo-extractor (PyPI) MAL-2026-2488 | Malicious | Not scored | 04 Apr, 2026 | PyPI photo-extractor |
Malicious release: Malicious code in discord-request (PyPI) MAL-2026-2487 | Malicious | Not scored | 04 Apr, 2026 | PyPI discord-request |
Malicious release: Malicious code in gangomodule (PyPI) MAL-2026-2486 | Malicious | Not scored | 04 Apr, 2026 | PyPI gangomodule |
Malicious release: Malicious code in strapi-plugin-blurhash (npm) GHSA-xvmq-9hxp-c2h5, MAL-2026-2452 | Malicious | Not scored | 03 Apr, 2026 | npm strapi-plugin-blurhash |
Malicious release: Malicious code in strapi-plugin-advanced-uuid (npm) GHSA-cjvp-jrwf-6853, MAL-2026-2450 | Malicious | Not scored | 03 Apr, 2026 | npm strapi-plugin-advanced-uuid |
Malicious release: Malicious code in strapi-plugin-guardarian-ext (npm) GHSA-cmqm-7h4x-mhj6, MAL-2026-2463 | Malicious | Not scored | 03 Apr, 2026 | npm strapi-plugin-guardarian-ext |
Malicious release: Malicious code in strapi-plugin-health-check (npm) GHSA-4jjh-xhm5-454q, MAL-2026-2465 | Malicious | Not scored | 03 Apr, 2026 | npm strapi-plugin-health-check |
Malicious release: Malicious code in strapi-plugin-debug-tools (npm) GHSA-g2g2-54v3-w4w2, MAL-2026-2459 | Malicious | Not scored | 03 Apr, 2026 | npm strapi-plugin-debug-tools |
Malicious release: Malicious code in strapi-plugin-content-sync (npm) GHSA-252m-cq46-x44h, MAL-2026-2455 | Malicious | Not scored | 03 Apr, 2026 | npm strapi-plugin-content-sync |
Malicious release: Malicious code in strapi-plugin-cms-tools (npm) GHSA-5746-8pgw-jwqj, MAL-2026-2453 | Malicious | Not scored | 03 Apr, 2026 | npm strapi-plugin-cms-tools |
Malicious release: Malicious code in strapi-plugin-hextest (npm) GHSA-9vgr-gp6c-6937, MAL-2026-2466 | Malicious | Not scored | 03 Apr, 2026 | npm strapi-plugin-hextest |
Malicious release: Malicious code in strapi-plugin-finseven (npm) GHSA-x87x-x3f6-6c94, MAL-2026-2461 | Malicious | Not scored | 03 Apr, 2026 | npm strapi-plugin-finseven |
Malicious release: Malicious code in strapi-plugin-nordica (npm) GHSA-vq87-37pj-9m5x, MAL-2026-2471 | Malicious | Not scored | 03 Apr, 2026 | npm strapi-plugin-nordica |
Malicious release: Malicious code in strapi-plugin-nordica-deep (npm) GHSA-g5q8-4vqv-7j3r, MAL-2026-2474 | Malicious | Not scored | 03 Apr, 2026 | npm strapi-plugin-nordica-deep |
Malicious release: Malicious code in strapi-plugin-nordica-vhost (npm) GHSA-fh6c-8rm8-5vrq, MAL-2026-2480 | Malicious | Not scored | 03 Apr, 2026 | npm strapi-plugin-nordica-vhost |
Malicious release: Malicious code in strapi-plugin-nordica-stage (npm) GHSA-rm69-7489-723j, MAL-2026-2477 | Malicious | Not scored | 03 Apr, 2026 | npm strapi-plugin-nordica-stage |
Malicious release: Malicious code in strapi-plugin-nordica-recon (npm) GHSA-r72j-h2ch-g7fj, MAL-2026-2476 | Malicious | Not scored | 03 Apr, 2026 | npm strapi-plugin-nordica-recon |
Malicious release: Malicious code in strapi-plugin-nordica-api (npm) GHSA-9fhj-rc6p-fcqh, MAL-2026-2472 | Malicious | Not scored | 03 Apr, 2026 | npm strapi-plugin-nordica-api |
Malicious release: Malicious code in strapi-plugin-nordica-cms (npm) GHSA-xg9c-8cmg-rqc4, MAL-2026-2473 | Malicious | Not scored | 03 Apr, 2026 | npm strapi-plugin-nordica-cms |