Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in sonic-config-engine (PyPI) MAL-2026-2180 | Malicious | Not scored | 25 Mar, 2026 | PyPI sonic-config-engine |
Malicious release: Malicious code in sonic-yang-mgmt (PyPI) MAL-2026-2182 | Malicious | Not scored | 25 Mar, 2026 | PyPI sonic-yang-mgmt |
Malicious release: Malicious code in kusto (PyPI) MAL-2026-2176 | Malicious | Not scored | 25 Mar, 2026 | PyPI kusto |
Malicious release: Malicious code in sonic-platform-common (PyPI) MAL-2026-2181 | Malicious | Not scored | 25 Mar, 2026 | PyPI sonic-platform-common |
Malicious release: Malicious code in batch-shipyard (PyPI) MAL-2026-2174 | Malicious | Not scored | 25 Mar, 2026 | PyPI batch-shipyard |
Malicious release: Malicious code in aristanetworks (PyPI) MAL-2026-2173 | Malicious | Not scored | 25 Mar, 2026 | PyPI aristanetworks |
Malicious release: Malicious code in python-glue (PyPI) MAL-2026-2179 | Malicious | Not scored | 25 Mar, 2026 | PyPI python-glue |
Malicious release: Malicious code in lm-sys (PyPI) MAL-2026-2178 | Malicious | Not scored | 25 Mar, 2026 | PyPI lm-sys |
Malicious release: Malicious code in @shennmine/libsignal-node (npm) GHSA-6w26-75vp-gf97, MAL-2026-2167 | Malicious | Not scored | 25 Mar, 2026 | npm @shennmine/libsignal-node |
Malicious release: Malicious code in @shennmine/baileys (npm) GHSA-p4gv-m838-2xq9, MAL-2026-2166 | Malicious | Not scored | 25 Mar, 2026 | npm @shennmine/baileys |
Malicious release: Malicious code in allergan (npm) GHSA-pjwm-q9hh-23wj, MAL-2026-2197 | Malicious | Not scored | 25 Mar, 2026 | npm allergan |
Malicious release: Malicious code in console-loggers (npm) GHSA-ppr8-pvc2-8f99, MAL-2026-2169 | Malicious | Not scored | 25 Mar, 2026 | npm console-loggers |
Malicious release: Malicious code in chai-patch (npm) GHSA-h2h6-q29m-3mm3, MAL-2026-2168 | Malicious | Not scored | 25 Mar, 2026 | npm chai-patch |
Malicious release: Malicious code in @rexxtheproject/keyed-db (npm) GHSA-38c4-cmg5-vpvc, MAL-2026-2165 | Malicious | Not scored | 25 Mar, 2026 | npm @rexxtheproject/keyed-db |
Malicious release: Malicious code in @rexxtheproject/elaina-libsignal (npm) GHSA-3qf5-vfww-7p7g, MAL-2026-2164 | Malicious | Not scored | 25 Mar, 2026 | npm @rexxtheproject/elaina-libsignal |
Malicious release: Malicious code in @rexxtheproject/elaina-baileys (npm) GHSA-pjxj-7mxh-9348, MAL-2026-2163 | Malicious | Not scored | 25 Mar, 2026 | npm @rexxtheproject/elaina-baileys |
Malicious release: Malicious code in chai-as-chain (npm) GHSA-8cpf-9rj8-q68m, MAL-2026-2160 | Malicious | Not scored | 25 Mar, 2026 | npm chai-as-chain |
Malicious release: Malicious code in path-external (npm) GHSA-3j5q-xvjq-rqxq, MAL-2026-2161 | Malicious | Not scored | 25 Mar, 2026 | npm path-external |
Malicious release: Malicious code in @eric-orderbuddyinfo/react-noval (npm) GHSA-82fx-cjgq-fc8v, MAL-2026-2159 | Malicious | Not scored | 25 Mar, 2026 | npm @eric-orderbuddyinfo/react-noval |
Malicious release: Malicious code in svg-sizer-responsive (npm) GHSA-7qgj-3cfq-g4g4, MAL-2026-2162 | Malicious | Not scored | 25 Mar, 2026 | npm svg-sizer-responsive |
Malicious release: Malicious code in torchunmix (PyPI) MAL-2026-2158 | Malicious | Not scored | 25 Mar, 2026 | PyPI torchunmix |
Malicious release: Malicious code in chai-as-emitted (npm) GHSA-jffg-8cwf-786h, MAL-2026-2154 | Malicious | Not scored | 25 Mar, 2026 | npm chai-as-emitted |
Malicious release: Malicious code in pino-pretty-log (npm) GHSA-p885-4m86-h35r, MAL-2026-2155 | Malicious | Not scored | 25 Mar, 2026 | npm pino-pretty-log |
Malicious release: Malicious code in tailwind-animationbasis (npm) GHSA-x2c8-m9xp-3qmv, MAL-2026-2156 | Malicious | Not scored | 25 Mar, 2026 | npm tailwind-animationbasis |
Malicious release: Malicious code in transitive_lib (npm) GHSA-76ph-2x99-486x, MAL-2026-2157 | Malicious | Not scored | 25 Mar, 2026 | npm transitive_lib |
Malicious release: Malicious code in @xvortexsockets/baileys (npm) GHSA-p5gg-75q6-vp64, MAL-2026-2153 | Malicious | Not scored | 25 Mar, 2026 | npm @xvortexsockets/baileys |
Malicious release: Malicious code in mattermost-data-warehouse (PyPI) MAL-2026-2148 | Malicious | Not scored | 24 Mar, 2026 | PyPI mattermost-data-warehouse |
Malicious release: Malicious code in snooty (PyPI) MAL-2026-2150 | Malicious | Not scored | 24 Mar, 2026 | PyPI snooty |
Malicious release: Malicious code in sentry-filter-forks (PyPI) MAL-2026-2149 | Malicious | Not scored | 24 Mar, 2026 | PyPI sentry-filter-forks |
Malicious release: Malicious code in mattermost-airflow (PyPI) MAL-2026-2147 | Malicious | Not scored | 24 Mar, 2026 | PyPI mattermost-airflow |
Malicious release: Malicious code in databricks-clean-room-orchestrator (PyPI) MAL-2026-2146 | Malicious | Not scored | 24 Mar, 2026 | PyPI databricks-clean-room-orchestrator |
Malicious release: Malicious code in compose-rl (PyPI) MAL-2026-2145 | Malicious | Not scored | 24 Mar, 2026 | PyPI compose-rl |
Malicious release: Malicious code in target-iceberg (PyPI) MAL-2026-2152 | Malicious | Not scored | 24 Mar, 2026 | PyPI target-iceberg |
Malicious release: Malicious code in tap-wordpress (PyPI) MAL-2026-2151 | Malicious | Not scored | 24 Mar, 2026 | PyPI tap-wordpress |
Malicious release: Malicious code in roboat-util (PyPI) MAL-2026-2142 | Malicious | Not scored | 24 Mar, 2026 | PyPI roboat-util |
Malicious release: Malicious code in roboated (PyPI) MAL-2026-2143 | Malicious | Not scored | 24 Mar, 2026 | PyPI roboated |
Malicious release: Malicious code in corexloader (PyPI) MAL-2026-2141 | Malicious | Not scored | 24 Mar, 2026 | PyPI corexloader |
Malicious release: Malicious code in coreloader (PyPI) MAL-2026-2140 | Malicious | Not scored | 24 Mar, 2026 | PyPI coreloader |
Malicious release: Malicious code in stats-helpers (PyPI) MAL-2026-2139 | Malicious | Not scored | 24 Mar, 2026 | PyPI stats-helpers |
Malicious release: Malicious code in open-vp-cal (PyPI) MAL-2026-2138 | Malicious | Not scored | 24 Mar, 2026 | PyPI open-vp-cal |
Malicious release: Malicious code in xrpl-hooks-ide (npm) MAL-2026-2398 | Malicious | Not scored | 24 Mar, 2026 | npm xrpl-hooks-ide |
Malicious release: Malicious code in wraith-module (npm) MAL-2026-2397 | Malicious | Not scored | 24 Mar, 2026 | npm wraith-module |
Malicious release: Malicious code in voodoo-internal-api (npm) MAL-2026-2396 | Malicious | Not scored | 24 Mar, 2026 | npm voodoo-internal-api |
Malicious release: Malicious code in uuidvalidatorarabis (npm) MAL-2026-2395 | Malicious | Not scored | 24 Mar, 2026 | npm uuidvalidatorarabis |
Malicious release: Malicious code in typescript-mock-data (npm) MAL-2026-2394 | Malicious | Not scored | 24 Mar, 2026 | npm typescript-mock-data |
Malicious release: Malicious code in this-is-my-test-package (npm) MAL-2026-2393 | Malicious | Not scored | 24 Mar, 2026 | npm this-is-my-test-package |
Malicious release: Malicious code in stormbreaker-shade (npm) MAL-2026-2392 | Malicious | Not scored | 24 Mar, 2026 | npm stormbreaker-shade |
Malicious release: Malicious code in ssr-catalogue-sfcc (npm) MAL-2026-2391 | Malicious | Not scored | 24 Mar, 2026 | npm ssr-catalogue-sfcc |
Malicious release: Malicious code in ssh-common (npm) MAL-2026-2390 | Malicious | Not scored | 24 Mar, 2026 | npm ssh-common |
Malicious release: Malicious code in spectral-module (npm) MAL-2026-2389 | Malicious | Not scored | 24 Mar, 2026 | npm spectral-module |