Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in cms-catalogue (npm) MAL-2026-2011 | Malicious | Not scored | 21 Mar, 2026 | npm cms-catalogue |
Malicious release: Malicious code in yelp-react-component-badge (npm) GHSA-fr9v-hm5m-rv52, MAL-2026-2010 | Malicious | Not scored | 21 Mar, 2026 | npm yelp-react-component-badge |
Malicious release: Malicious code in repo-typescript-config (npm) GHSA-767f-p685-mw32, MAL-2026-2009 | Malicious | Not scored | 21 Mar, 2026 | npm repo-typescript-config |
Malicious release: Malicious code in nintendoamerica-ncom (npm) GHSA-j836-pcqv-w9c9, MAL-2026-2008 | Malicious | Not scored | 21 Mar, 2026 | npm nintendoamerica-ncom |
Malicious release: Malicious code in uniswap-info (npm) MAL-2026-2007 | Malicious | Not scored | 21 Mar, 2026 | npm uniswap-info |
Malicious release: Malicious code in mangrove-sdk (PyPI) MAL-2026-2006 | Malicious | Not scored | 20 Mar, 2026 | PyPI mangrove-sdk |
Malicious release: Malicious code in efghr-honeybee-sdk (PyPI) MAL-2026-2005 | Malicious | Not scored | 20 Mar, 2026 | PyPI efghr-honeybee-sdk |
Malicious release: Malicious code in flyio-token-client-efgh (PyPI) MAL-2026-2004 | Malicious | Not scored | 20 Mar, 2026 | PyPI flyio-token-client-efgh |
Malicious release: Malicious code in shakti-strings (npm) MAL-2026-2003 | Malicious | Not scored | 20 Mar, 2026 | npm shakti-strings |
Malicious release: Malicious code in nflx-cmisc (npm) MAL-2026-2002 | Malicious | Not scored | 20 Mar, 2026 | npm nflx-cmisc |
Malicious release: Malicious code in laserlogsink (npm) GHSA-g52g-7jj2-8phv, MAL-2026-2001 | Malicious | Not scored | 20 Mar, 2026 | npm laserlogsink |
Malicious release: Malicious code in tui-ascii-art (PyPI) MAL-2026-2117 | Malicious | Not scored | 20 Mar, 2026 | PyPI tui-ascii-art |
Malicious release: Malicious code in indpack (PyPI) MAL-2026-2114 | Malicious | Not scored | 20 Mar, 2026 | PyPI indpack |
Malicious release: Malicious code in reqpack (PyPI) MAL-2026-2116 | Malicious | Not scored | 20 Mar, 2026 | PyPI reqpack |
Malicious release: Malicious code in gcpipwrap (PyPI) MAL-2026-2113 | Malicious | Not scored | 20 Mar, 2026 | PyPI gcpipwrap |
Malicious release: Malicious code in nspack (PyPI) MAL-2026-2115 | Malicious | Not scored | 20 Mar, 2026 | PyPI nspack |
Malicious release: Malicious code in cfgmgr-sync (PyPI) MAL-2026-2000 | Malicious | Not scored | 20 Mar, 2026 | PyPI cfgmgr-sync |
Malicious release: Malicious code in cfgmgr-syn (PyPI) MAL-2026-1999 | Malicious | Not scored | 20 Mar, 2026 | PyPI cfgmgr-syn |
Malicious release: Malicious code in delphoi (npm) MAL-2026-1998 | Malicious | Not scored | 20 Mar, 2026 | npm delphoi |
Malicious release: Malicious code in bic-seo (npm) MAL-2026-1995 | Malicious | Not scored | 20 Mar, 2026 | npm bic-seo |
Malicious release: Malicious code in puzzle-gateway (npm) MAL-2026-1996 | Malicious | Not scored | 20 Mar, 2026 | npm puzzle-gateway |
Malicious release: Malicious code in ty-web-session (npm) MAL-2026-1997 | Malicious | Not scored | 20 Mar, 2026 | npm ty-web-session |
Malicious release: Malicious code in init2winit (PyPI) MAL-2026-1989 | Malicious | Not scored | 20 Mar, 2026 | PyPI init2winit |
Malicious release: Malicious code in airio (PyPI) MAL-2026-1984 | Malicious | Not scored | 20 Mar, 2026 | PyPI airio |
Malicious release: Malicious code in nsscache (PyPI) MAL-2026-1991 | Malicious | Not scored | 20 Mar, 2026 | PyPI nsscache |
Malicious release: Malicious code in spatialmedia (PyPI) MAL-2026-1994 | Malicious | Not scored | 20 Mar, 2026 | PyPI spatialmedia |
Malicious release: Malicious code in pubsub2inbox (PyPI) MAL-2026-1993 | Malicious | Not scored | 20 Mar, 2026 | PyPI pubsub2inbox |
Malicious release: Malicious code in perfkitbenchmarker (PyPI) MAL-2026-1992 | Malicious | Not scored | 20 Mar, 2026 | PyPI perfkitbenchmarker |
Malicious release: Malicious code in composer-dev (PyPI) MAL-2026-1987 | Malicious | Not scored | 20 Mar, 2026 | PyPI composer-dev |
Malicious release: Malicious code in dataflux-pytorch (PyPI) MAL-2026-1988 | Malicious | Not scored | 20 Mar, 2026 | PyPI dataflux-pytorch |
Malicious release: Malicious code in mcp-transport-proto (PyPI) MAL-2026-1990 | Malicious | Not scored | 20 Mar, 2026 | PyPI mcp-transport-proto |
Malicious release: Malicious code in cloud-datasets (PyPI) MAL-2026-1986 | Malicious | Not scored | 20 Mar, 2026 | PyPI cloud-datasets |
Malicious release: Malicious code in azure-eventhub-checkpointstoretable (PyPI) MAL-2026-1985 | Malicious | Not scored | 20 Mar, 2026 | PyPI azure-eventhub-checkpointstoretable |
Malicious release: Malicious code in uipathisfun (npm) GHSA-9674-vwjj-qxjp, MAL-2026-1983 | Malicious | Not scored | 20 Mar, 2026 | npm uipathisfun |
Malicious release: Malicious code in chai-as-chayn (npm) GHSA-9mp5-2jp4-wmww, MAL-2026-1975 | Malicious | Not scored | 20 Mar, 2026 | npm chai-as-chayn |
Malicious release: Malicious code in innocent-pkg (npm) GHSA-6vcv-6xjg-jm7w, MAL-2026-1976 | Malicious | Not scored | 20 Mar, 2026 | npm innocent-pkg |
Malicious release: Malicious code in @fr3newera/baileys (npm) GHSA-5g2c-h3r8-6w3g, MAL-2026-1974 | Malicious | Not scored | 20 Mar, 2026 | npm @fr3newera/baileys |
Malicious release: Malicious code in xyztttxyz (npm) GHSA-p427-hrfp-pc52, MAL-2026-1982 | Malicious | Not scored | 20 Mar, 2026 | npm xyztttxyz |
Malicious release: Malicious code in xyzttt (npm) GHSA-q46m-r8wj-v4p9, MAL-2026-1981 | Malicious | Not scored | 20 Mar, 2026 | npm xyzttt |
Malicious release: Malicious code in svg-content-validation (npm) GHSA-f46r-3xg5-w2wm, MAL-2026-1980 | Malicious | Not scored | 20 Mar, 2026 | npm svg-content-validation |
Malicious release: Malicious code in json-bundling (npm) GHSA-58m2-f8rc-wwq2, MAL-2026-1977 | Malicious | Not scored | 20 Mar, 2026 | npm json-bundling |
Malicious release: Malicious code in json-specular (npm) GHSA-gmvg-736c-7g9f, MAL-2026-1978 | Malicious | Not scored | 20 Mar, 2026 | npm json-specular |
Malicious release: Malicious code in rollup-plugin-polyfill-utils (npm) GHSA-74r2-ggvc-h778, MAL-2026-1979 | Malicious | Not scored | 20 Mar, 2026 | npm rollup-plugin-polyfill-utils |
Malicious release: Malicious code in novi-cli (npm) GHSA-36wg-c889-h26j, MAL-2026-1961 | Malicious | Not scored | 20 Mar, 2026 | npm novi-cli |
Malicious release: Malicious code in couplus-cli (npm) GHSA-fp44-gpc5-cc43, MAL-2026-1944 | Malicious | Not scored | 20 Mar, 2026 | npm couplus-cli |
Malicious release: Malicious code in woltpickerapp (npm) GHSA-cp44-cvhx-wf33, MAL-2026-1973 | Malicious | Not scored | 20 Mar, 2026 | npm woltpickerapp |
Malicious release: Malicious code in cryptopapi (npm) GHSA-3qf9-476p-8j7f, MAL-2026-1945 | Malicious | Not scored | 20 Mar, 2026 | npm cryptopapi |
Malicious release: Malicious code in kyxserver-everything (npm) GHSA-2273-pvh3-9x6j, MAL-2026-1955 | Malicious | Not scored | 20 Mar, 2026 | npm kyxserver-everything |
Malicious release: Malicious code in kyxhiagent123 (npm) GHSA-h29v-mffh-vf54, MAL-2026-1954 | Malicious | Not scored | 20 Mar, 2026 | npm kyxhiagent123 |
Malicious release: Malicious code in hiagenttest (npm) GHSA-j4p4-x5rc-96xx, MAL-2026-1950 | Malicious | Not scored | 20 Mar, 2026 | npm hiagenttest |