Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in iron-signals (npm) GHSA-qjw5-fmpc-w42r, MAL-2026-1315 | Malicious | Not scored | 10 Mar, 2026 | npm iron-signals |
Malicious release: Malicious code in amt-package-united-icons (npm) GHSA-rjmf-gw43-xhq4, MAL-2026-1304 | Malicious | Not scored | 10 Mar, 2026 | npm amt-package-united-icons |
Malicious release: Malicious code in iron-image (npm) GHSA-2ggx-x8w4-989p, MAL-2026-1308 | Malicious | Not scored | 10 Mar, 2026 | npm iron-image |
Malicious release: Malicious code in xc-input-toggle (npm) GHSA-9mxj-qv8w-v2qx, MAL-2026-1316 | Malicious | Not scored | 10 Mar, 2026 | npm xc-input-toggle |
Malicious release: Malicious code in iron-media-query (npm) GHSA-c62p-2739-c88f, MAL-2026-1310 | Malicious | Not scored | 10 Mar, 2026 | npm iron-media-query |
Malicious release: Malicious code in monoping (npm) GHSA-mq8p-wfj2-j6cq, MAL-2026-1299 | Malicious | Not scored | 10 Mar, 2026 | npm monoping |
Malicious release: Malicious code in jsonify-core (npm) GHSA-865m-mjxh-x6h8, MAL-2026-1298 | Malicious | Not scored | 09 Mar, 2026 | npm jsonify-core |
Malicious release: Malicious code in json-merge-tool (npm) GHSA-cpf2-rx79-x333, MAL-2026-1297 | Malicious | Not scored | 09 Mar, 2026 | npm json-merge-tool |
Malicious release: Malicious code in hxq-misc-utils-0379 (PyPI) MAL-2026-1453 | Malicious | Not scored | 09 Mar, 2026 | PyPI hxq-misc-utils-0379 |
Malicious release: Malicious code in bpsm (PyPI) MAL-2026-1296 | Malicious | Not scored | 09 Mar, 2026 | PyPI bpsm |
Malicious release: Malicious code in causal-canvas (PyPI) MAL-2026-1294 | Malicious | Not scored | 09 Mar, 2026 | PyPI causal-canvas |
Malicious release: Malicious code in tabformerlite (PyPI) MAL-2026-1295 | Malicious | Not scored | 09 Mar, 2026 | PyPI tabformerlite |
Malicious release: Malicious code in odds-analyzer (npm) GHSA-89vf-5w9c-qf87, MAL-2026-1292 | Malicious | Not scored | 09 Mar, 2026 | npm odds-analyzer |
Malicious release: Malicious code in tw-modern-ui (npm) GHSA-m4gf-v2v4-3qh2, MAL-2026-1293 | Malicious | Not scored | 09 Mar, 2026 | npm tw-modern-ui |
Malicious release: Malicious code in requests-lite (PyPI) MAL-2026-1291 | Malicious | Not scored | 09 Mar, 2026 | PyPI requests-lite |
Malicious release: Malicious code in remjsonparse (PyPI) MAL-2026-1290 | Malicious | Not scored | 09 Mar, 2026 | PyPI remjsonparse |
Malicious release: Malicious code in aioutil3 (PyPI) MAL-2026-1289 | Malicious | Not scored | 08 Mar, 2026 | PyPI aioutil3 |
Malicious release: Malicious code in arnavtest123 (PyPI) MAL-2026-1288 | Malicious | Not scored | 08 Mar, 2026 | PyPI arnavtest123 |
Malicious release: Malicious code in simple-text-parser (PyPI) MAL-2026-1287 | Malicious | Not scored | 08 Mar, 2026 | PyPI simple-text-parser |
Malicious release: Malicious code in demozecosse (PyPI) MAL-2026-1286 | Malicious | Not scored | 08 Mar, 2026 | PyPI demozecosse |
Malicious release: Malicious code in demozecob (PyPI) MAL-2026-1283 | Malicious | Not scored | 08 Mar, 2026 | PyPI demozecob |
Malicious release: Malicious code in demozecox (PyPI) MAL-2026-1285 | Malicious | Not scored | 08 Mar, 2026 | PyPI demozecox |
Malicious release: Malicious code in demozecosso (PyPI) MAL-2026-1284 | Malicious | Not scored | 08 Mar, 2026 | PyPI demozecosso |
Malicious release: Malicious code in xmrig-miner (PyPI) MAL-2026-1282 | Malicious | Not scored | 08 Mar, 2026 | PyPI xmrig-miner |
Malicious release: Malicious code in py-sysbench (PyPI) MAL-2026-1280 | Malicious | Not scored | 08 Mar, 2026 | PyPI py-sysbench |
Malicious release: Malicious code in cpucheck (PyPI) MAL-2026-1279 | Malicious | Not scored | 08 Mar, 2026 | PyPI cpucheck |
Malicious release: Malicious code in pyutils-helper (PyPI) MAL-2026-1281 | Malicious | Not scored | 08 Mar, 2026 | PyPI pyutils-helper |
Malicious release: Malicious code in chat-xdk (PyPI) MAL-2026-1278 | Malicious | Not scored | 07 Mar, 2026 | PyPI chat-xdk |
Malicious release: Malicious code in prateek-yadav23 (PyPI) MAL-2026-1277 | Malicious | Not scored | 06 Mar, 2026 | PyPI prateek-yadav23 |
Malicious release: Malicious code in flowfix (PyPI) MAL-2026-1276 | Malicious | Not scored | 06 Mar, 2026 | PyPI flowfix |
Malicious release: Malicious code in hostlists-plugins-default (PyPI) MAL-2026-1275 | Malicious | Not scored | 06 Mar, 2026 | PyPI hostlists-plugins-default |
Malicious release: Malicious code in qq-console (npm) GHSA-whff-563x-2xmr, MAL-2026-1271 | Malicious | Not scored | 06 Mar, 2026 | npm qq-console |
Malicious release: Malicious code in @wgu-edu/wgu-core (npm) GHSA-9pc5-g685-53f7, MAL-2026-1269 | Malicious | Not scored | 06 Mar, 2026 | npm @wgu-edu/wgu-core |
Malicious release: Malicious code in @wgu-edu/wgu-icons (npm) GHSA-r3w8-f4f4-mvvw, MAL-2026-1270 | Malicious | Not scored | 06 Mar, 2026 | npm @wgu-edu/wgu-icons |
Malicious release: Malicious code in @shenira/baileysx (npm) GHSA-24xg-rj5c-2r2c, MAL-2026-1267 | Malicious | Not scored | 06 Mar, 2026 | npm @shenira/baileysx |
Malicious release: Malicious code in @shenira/baileys (npm) GHSA-gwh9-jq72-g4mw, MAL-2026-1266 | Malicious | Not scored | 06 Mar, 2026 | npm @shenira/baileys |
Malicious release: Malicious code in @shenira/libsignal-node (npm) GHSA-vr9m-wh7r-4xfx, MAL-2026-1268 | Malicious | Not scored | 06 Mar, 2026 | npm @shenira/libsignal-node |
Malicious release: Malicious code in test-mal-npm-pkg-not-local (npm) GHSA-5q4h-v7c2-v9r2, MAL-2026-1274 | Malicious | Not scored | 06 Mar, 2026 | npm test-mal-npm-pkg-not-local |
Malicious release: Malicious code in test-mal-npm-pkg-local (npm) GHSA-6258-pr46-j4rc, MAL-2026-1273 | Malicious | Not scored | 06 Mar, 2026 | npm test-mal-npm-pkg-local |
Malicious release: Malicious code in test-mal-npm-pkg-2 (npm) GHSA-855h-6c4m-f9m7, MAL-2026-1272 | Malicious | Not scored | 06 Mar, 2026 | npm test-mal-npm-pkg-2 |
Malicious release: Malicious code in aaaaaxxxxx (npm) GHSA-w24m-g68p-7wmq, MAL-2026-1265 | Malicious | Not scored | 06 Mar, 2026 | npm aaaaaxxxxx |
Malicious release: Malicious code in python-requirements (PyPI) MAL-2026-1264 | Malicious | Not scored | 06 Mar, 2026 | PyPI python-requirements |
Malicious release: Malicious code in python-module-installer (PyPI) MAL-2026-1263 | Malicious | Not scored | 06 Mar, 2026 | PyPI python-module-installer |
Malicious release: Malicious code in fastapi-requests (PyPI) MAL-2026-1261 | Malicious | Not scored | 06 Mar, 2026 | PyPI fastapi-requests |
Malicious release: Malicious code in fastapis-requests (PyPI) MAL-2026-1262 | Malicious | Not scored | 06 Mar, 2026 | PyPI fastapis-requests |
Malicious release: Malicious code in webmd-url (npm) GHSA-853v-5vhr-jmpc, MAL-2026-1260 | Malicious | Not scored | 06 Mar, 2026 | npm webmd-url |
Malicious release: Malicious code in pino-sdk-v2 (npm) GHSA-h6xh-3v8c-jhjf, MAL-2026-1259 | Malicious | Not scored | 06 Mar, 2026 | npm pino-sdk-v2 |
Malicious release: Malicious code in tether-dev-docs (npm) GHSA-6c8j-272h-r6h7, MAL-2026-1258 | Malicious | Not scored | 06 Mar, 2026 | npm tether-dev-docs |
Malicious release: Malicious code in pdfjs-dist-fourth (npm) MAL-2026-1257 | Malicious | Not scored | 05 Mar, 2026 | npm pdfjs-dist-fourth |
Malicious release: Malicious code in @imhuman/corp-build-utils-poc (npm) GHSA-53gc-6rwm-8qvx, MAL-2026-1247 | Malicious | Not scored | 05 Mar, 2026 | npm @imhuman/corp-build-utils-poc |