Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in interwebz (PyPI) MAL-2026-2283 | Malicious | Not scored | 29 Mar, 2026 | PyPI interwebz |
Malicious release: Malicious code in @adac-fahrzeugplattform/ui (npm) GHSA-96gm-xh35-6xfw, MAL-2026-2282 | Malicious | Not scored | 29 Mar, 2026 | npm @adac-fahrzeugplattform/ui |
Malicious release: Malicious code in roboats-addition (PyPI) MAL-2026-2281 | Malicious | Not scored | 28 Mar, 2026 | PyPI roboats-addition |
Malicious release: Malicious code in roboat-additions (PyPI) MAL-2026-2280 | Malicious | Not scored | 28 Mar, 2026 | PyPI roboat-additions |
Malicious release: Malicious code in roboat-addition (PyPI) MAL-2026-2279 | Malicious | Not scored | 28 Mar, 2026 | PyPI roboat-addition |
Malicious release: Malicious code in python-aiogram-telegram-updater (PyPI) MAL-2026-2278 | Malicious | Not scored | 28 Mar, 2026 | PyPI python-aiogram-telegram-updater |
Malicious release: Malicious code in aiogram-photo-updater (PyPI) MAL-2026-2277 | Malicious | Not scored | 28 Mar, 2026 | PyPI aiogram-photo-updater |
Malicious release: Malicious code in payerpath-customer-lib (npm) MAL-2026-2276 | Malicious | Not scored | 28 Mar, 2026 | npm payerpath-customer-lib |
Malicious release: Malicious code in autoshipment-public-front (npm) GHSA-qrhg-p488-7f87, MAL-2026-2274 | Malicious | Not scored | 28 Mar, 2026 | npm autoshipment-public-front |
Malicious release: Malicious code in npmamzs (npm) MAL-2026-2275 | Malicious | Not scored | 28 Mar, 2026 | npm npmamzs |
Malicious release: Malicious code in copytrading (PyPI) MAL-2026-2270 | Malicious | Not scored | 27 Mar, 2026 | PyPI copytrading |
Malicious release: Malicious code in trustwallet (PyPI) MAL-2026-2273 | Malicious | Not scored | 27 Mar, 2026 | PyPI trustwallet |
Malicious release: Malicious code in metamask-api (PyPI) MAL-2026-2271 | Malicious | Not scored | 27 Mar, 2026 | PyPI metamask-api |
Malicious release: Malicious code in claude-lite (PyPI) MAL-2026-2269 | Malicious | Not scored | 27 Mar, 2026 | PyPI claude-lite |
Malicious release: Malicious code in solana-api (PyPI) MAL-2026-2272 | Malicious | Not scored | 27 Mar, 2026 | PyPI solana-api |
Malicious release: Malicious code in gemini-ai-api (PyPI) MAL-2026-2268 | Malicious | Not scored | 27 Mar, 2026 | PyPI gemini-ai-api |
Malicious release: Malicious code in monolith-twirp-codingagentintegrations-codingagentintegrations (RubyGems) GHSA-m7wg-pxqp-335v, MAL-2026-2265 | Malicious | Not scored | 27 Mar, 2026 | RubyGems monolith-twirp-codingagentintegrations-codingagentintegrations |
Malicious release: Malicious code in monolith-twirp-copilot-registry (RubyGems) GHSA-7gx2-vrc5-8h3j, MAL-2026-2266 | Malicious | Not scored | 27 Mar, 2026 | RubyGems monolith-twirp-copilot-registry |
Malicious release: Malicious code in monolith-twirp-partitioning-pull_requests (RubyGems) GHSA-8gr7-86m4-34p7, MAL-2026-2267 | Malicious | Not scored | 27 Mar, 2026 | RubyGems monolith-twirp-partitioning-pull_requests |
Malicious release: Malicious code in monolith-twirp-reposinsights-reposinsights (RubyGems) GHSA-jv2c-ggw4-8cx7, MAL-2026-2263 | Malicious | Not scored | 27 Mar, 2026 | RubyGems monolith-twirp-reposinsights-reposinsights |
Malicious release: Malicious code in monolith-twirp-pullsd-teams (RubyGems) GHSA-rgc6-cw8v-59mw, MAL-2026-2262 | Malicious | Not scored | 27 Mar, 2026 | RubyGems monolith-twirp-pullsd-teams |
Malicious release: Malicious code in monolith-twirp-loops-core (RubyGems) GHSA-92p7-h3wm-fr96, MAL-2026-2259 | Malicious | Not scored | 27 Mar, 2026 | RubyGems monolith-twirp-loops-core |
Malicious release: Malicious code in monolith-twirp-pullsd-repositories (RubyGems) GHSA-cmp7-3c7r-c22j, MAL-2026-2261 | Malicious | Not scored | 27 Mar, 2026 | RubyGems monolith-twirp-pullsd-repositories |
Malicious release: Malicious code in monolith-twirp-pullsd-pullrequestinfo (RubyGems) GHSA-88pj-869j-j8c7, MAL-2026-2260 | Malicious | Not scored | 27 Mar, 2026 | RubyGems monolith-twirp-pullsd-pullrequestinfo |
Malicious release: Malicious code in monolith-twirp-scribe-scribe (RubyGems) GHSA-qmwp-cjhr-hwf2, MAL-2026-2264 | Malicious | Not scored | 27 Mar, 2026 | RubyGems monolith-twirp-scribe-scribe |
Malicious release: Malicious code in current-context-urn (npm) MAL-2026-2258 | Malicious | Not scored | 27 Mar, 2026 | npm current-context-urn |
Malicious release: Malicious code in xpna-context (npm) MAL-2026-2257 | Malicious | Not scored | 27 Mar, 2026 | npm xpna-context |
Malicious release: Malicious code in shenxun162938 (npm) GHSA-c8v3-pvm5-9xx2, MAL-2026-2256 | Malicious | Not scored | 27 Mar, 2026 | npm shenxun162938 |
Malicious release: Malicious code in thisismytest123 (PyPI) MAL-2026-2255 | Malicious | Not scored | 27 Mar, 2026 | PyPI thisismytest123 |
Malicious release: Malicious code in telnyx (PyPI) MAL-2026-2254 | Malicious | Not scored | 27 Mar, 2026 | PyPI telnyx |
Malicious release: Malicious code in dgxeon-soket-buttonx (npm) GHSA-7xvw-wvqm-q57f, MAL-2026-2253 | Malicious | Not scored | 27 Mar, 2026 | npm dgxeon-soket-buttonx |
Malicious release: Malicious code in dgxeon-baileys (npm) GHSA-fjqf-7gvm-9qrq, MAL-2026-2252 | Malicious | Not scored | 27 Mar, 2026 | npm dgxeon-baileys |
Malicious release: Malicious code in chai-as-added (npm) GHSA-6r6x-95fj-pw48, MAL-2026-2249 | Malicious | Not scored | 27 Mar, 2026 | npm chai-as-added |
Malicious release: Malicious code in testtestsharp (npm) GHSA-7g34-jxp7-g7r3, MAL-2026-2251 | Malicious | Not scored | 27 Mar, 2026 | npm testtestsharp |
Malicious release: Malicious code in test1sharp (npm) GHSA-89p7-jcpx-6x86, MAL-2026-2250 | Malicious | Not scored | 27 Mar, 2026 | npm test1sharp |
Malicious release: Malicious code in @ev-tech/eva-container-api (npm) GHSA-gphq-fq72-qxwr, MAL-2026-2246 | Malicious | Not scored | 27 Mar, 2026 | npm @ev-tech/eva-container-api |
Malicious release: Malicious code in cua-primitives-server (npm) GHSA-jmx7-4g26-qp86, MAL-2026-2247 | Malicious | Not scored | 27 Mar, 2026 | npm cua-primitives-server |
Malicious release: Malicious code in shop-republik-ch (npm) GHSA-pjmv-p8w4-fjq5, MAL-2026-2248 | Malicious | Not scored | 27 Mar, 2026 | npm shop-republik-ch |
Malicious release: Malicious code in requests-testik111 (PyPI) MAL-2026-2245 | Malicious | Not scored | 26 Mar, 2026 | PyPI requests-testik111 |
Malicious release: Malicious code in fluxhttp (PyPI) MAL-2026-2244 | Malicious | Not scored | 26 Mar, 2026 | PyPI fluxhttp |
Malicious release: Malicious code in browserstack-electron-forge-include-package-plugin (npm) MAL-2026-2243 | Malicious | Not scored | 26 Mar, 2026 | npm browserstack-electron-forge-include-package-plugin |
Malicious release: Malicious code in somepentest-test-package (PyPI) MAL-2026-2242 | Malicious | Not scored | 26 Mar, 2026 | PyPI somepentest-test-package |
Malicious release: Malicious code in spr-i18n-labels (npm) GHSA-6j5m-xf2c-cx8x, MAL-2026-2238 | Malicious | Not scored | 26 Mar, 2026 | npm spr-i18n-labels |
Malicious release: Malicious code in chaostoolkit-turbulence (PyPI) MAL-2026-2239 | Malicious | Not scored | 26 Mar, 2026 | PyPI chaostoolkit-turbulence |
Malicious release: Malicious code in magtape (PyPI) MAL-2026-2240 | Malicious | Not scored | 26 Mar, 2026 | PyPI magtape |
Malicious release: Malicious code in pacbot (PyPI) MAL-2026-2241 | Malicious | Not scored | 26 Mar, 2026 | PyPI pacbot |
Malicious release: Malicious code in jsonify-builder (npm) GHSA-2qfm-86gm-fpjc, MAL-2026-2237 | Malicious | Not scored | 26 Mar, 2026 | npm jsonify-builder |
Malicious release: Malicious code in onboarding-server (npm) MAL-2026-2236 | Malicious | Not scored | 26 Mar, 2026 | npm onboarding-server |
Malicious release: Malicious code in srcsrctest (npm) MAL-2026-2235 | Malicious | Not scored | 26 Mar, 2026 | npm srcsrctest |
Malicious release: Malicious code in security-install-analytics (npm) MAL-2026-2234 | Malicious | Not scored | 26 Mar, 2026 | npm security-install-analytics |