Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @imhuman/fw-logger (npm) GHSA-6qpc-26c3-fqx4, MAL-2026-1248 | Malicious | Not scored | 05 Mar, 2026 | npm @imhuman/fw-logger |
Malicious release: Malicious code in imhuman-fw-logger (npm) GHSA-v8g3-qq8j-v4hp, MAL-2026-1249 | Malicious | Not scored | 05 Mar, 2026 | npm imhuman-fw-logger |
Malicious release: Malicious code in pear-apps-lib-ui-react-hooks (npm) GHSA-8332-hw5x-q6rx, MAL-2026-1251 | Malicious | Not scored | 05 Mar, 2026 | npm pear-apps-lib-ui-react-hooks |
Malicious release: Malicious code in pear-apps-utils-avatar-initials (npm) GHSA-g582-vfxj-j9qp, MAL-2026-1252 | Malicious | Not scored | 05 Mar, 2026 | npm pear-apps-utils-avatar-initials |
Malicious release: Malicious code in pear-apps-utils-date (npm) GHSA-j8cc-p8rq-xhvh, MAL-2026-1253 | Malicious | Not scored | 05 Mar, 2026 | npm pear-apps-utils-date |
Malicious release: Malicious code in pear-apps-utils-qr (npm) GHSA-jxj8-p2mm-gjr9, MAL-2026-1254 | Malicious | Not scored | 05 Mar, 2026 | npm pear-apps-utils-qr |
Malicious release: Malicious code in pearpass-lib-data-export (npm) GHSA-h3vq-4m22-hrmf, MAL-2026-1255 | Malicious | Not scored | 05 Mar, 2026 | npm pearpass-lib-data-export |
Malicious release: Malicious code in pear-apps-lib-feedback (npm) GHSA-64j5-x9g6-59pm, MAL-2026-1250 | Malicious | Not scored | 05 Mar, 2026 | npm pear-apps-lib-feedback |
Malicious release: Malicious code in pearpass-lib-data-import (npm) GHSA-xrpx-878r-jfmq, MAL-2026-1256 | Malicious | Not scored | 05 Mar, 2026 | npm pearpass-lib-data-import |
Malicious release: Malicious code in pearpass-utils-password-check (npm) GHSA-pjg5-rffv-3xj5, MAL-2026-1246 | Malicious | Not scored | 05 Mar, 2026 | npm pearpass-utils-password-check |
Malicious release: Malicious code in nf-referral-backend-placeholder (npm) GHSA-g4g8-rr9p-7rcm, MAL-2026-1245 | Malicious | Not scored | 05 Mar, 2026 | npm nf-referral-backend-placeholder |
Malicious release: Malicious code in spectral-corsair-navigator (npm) GHSA-g844-gph2-p427, MAL-2026-1244 | Malicious | Not scored | 05 Mar, 2026 | npm spectral-corsair-navigator |
Malicious release: Malicious code in nf-referral-backend (npm) GHSA-7fwh-38h4-x929, MAL-2026-1243 | Malicious | Not scored | 05 Mar, 2026 | npm nf-referral-backend |
Malicious release: Malicious code in yaml-manifest-utils-mynarratorai (npm) MAL-2026-1242 | Malicious | Not scored | 04 Mar, 2026 | npm yaml-manifest-utils-mynarratorai |
Malicious release: Malicious code in requests-ml-min (PyPI) MAL-2026-1240 | Malicious | Not scored | 04 Mar, 2026 | PyPI requests-ml-min |
Malicious release: Malicious code in pearpass-lib-vault (npm) GHSA-h4ch-r74v-826j, MAL-2026-1238 | Malicious | Not scored | 04 Mar, 2026 | npm pearpass-lib-vault |
Malicious release: Malicious code in pearpass-lib-vault-core (npm) GHSA-2ghq-7hh3-2x5g, MAL-2026-1239 | Malicious | Not scored | 04 Mar, 2026 | npm pearpass-lib-vault-core |
Malicious release: Malicious code in pearpass-lib-ui-theme-provider (npm) GHSA-vqrg-7m7p-6r59, MAL-2026-1237 | Malicious | Not scored | 04 Mar, 2026 | npm pearpass-lib-ui-theme-provider |
Malicious release: Malicious code in @get-wrecked/overlay (npm) GHSA-w5g4-m76j-qxg7, MAL-2026-1241 | Malicious | Not scored | 04 Mar, 2026 | npm @get-wrecked/overlay |
Malicious release: Malicious code in @molb-prelogin/gobiz-config (npm) MAL-2026-1236 | Malicious | Not scored | 04 Mar, 2026 | npm @molb-prelogin/gobiz-config |
Malicious release: Malicious code in dakhara (PyPI) MAL-2026-1235 | Malicious | Not scored | 03 Mar, 2026 | PyPI dakhara |
Malicious release: Malicious code in qwery-core (PyPI) MAL-2026-1226 | Malicious | Not scored | 03 Mar, 2026 | PyPI qwery-core |
Malicious release: Malicious code in spark-ml-utilities (PyPI) MAL-2026-1224 | Malicious | Not scored | 03 Mar, 2026 | PyPI spark-ml-utilities |
Malicious release: Malicious code in risk-utilities (PyPI) MAL-2026-1223 | Malicious | Not scored | 03 Mar, 2026 | PyPI risk-utilities |
Malicious release: Malicious code in optimal-spark-config (PyPI) MAL-2026-1222 | Malicious | Not scored | 03 Mar, 2026 | PyPI optimal-spark-config |
Malicious release: Malicious code in urllib-slim (PyPI) MAL-2026-1225 | Malicious | Not scored | 03 Mar, 2026 | PyPI urllib-slim |
Malicious release: Malicious code in corp-build-utils-poc (npm) GHSA-788f-4r73-p46j, MAL-2026-1220 | Malicious | Not scored | 03 Mar, 2026 | npm corp-build-utils-poc |
Malicious release: Malicious code in xrpl-dev-portal (npm) GHSA-j96c-7pv4-pj3m, MAL-2026-1221 | Malicious | Not scored | 03 Mar, 2026 | npm xrpl-dev-portal |
Malicious release: Malicious code in demo-pipelinetest (npm) GHSA-m44x-4wqj-wpvf, MAL-2026-1219 | Malicious | Not scored | 03 Mar, 2026 | npm demo-pipelinetest |
Malicious release: Malicious code in @vk-cloud-billing/common (npm) GHSA-r3mx-c972-cmjg, MAL-2026-1217 | Malicious | Not scored | 03 Mar, 2026 | npm @vk-cloud-billing/common |
Malicious release: Malicious code in chai-as-confirmed (npm) GHSA-w36w-mf9p-w4r9, MAL-2026-1218 | Malicious | Not scored | 03 Mar, 2026 | npm chai-as-confirmed |
Malicious release: Malicious code in gaia-marionette (npm) MAL-2026-1227 | Malicious | Not scored | 03 Mar, 2026 | npm gaia-marionette |
Malicious release: Malicious code in pdfjs-dist-v5 (npm) MAL-2026-1216 | Malicious | Not scored | 03 Mar, 2026 | npm pdfjs-dist-v5 |
Malicious release: Malicious code in polymarket-trade-bot-api (npm) GHSA-66ch-w669-vp22, MAL-2026-1206 | Malicious | Not scored | 03 Mar, 2026 | npm polymarket-trade-bot-api |
Malicious release: Malicious code in polmarket (npm) GHSA-8qhc-629g-gmwr, MAL-2026-1203 | Malicious | Not scored | 03 Mar, 2026 | npm polmarket |
Malicious release: Malicious code in whop-sdk (npm) GHSA-jvvr-2542-jh22, MAL-2026-1215 | Malicious | Not scored | 03 Mar, 2026 | npm whop-sdk |
Malicious release: Malicious code in chai-as-proofed (npm) GHSA-8g87-54x4-gfx2, MAL-2026-1192 | Malicious | Not scored | 03 Mar, 2026 | npm chai-as-proofed |
Malicious release: Malicious code in chai-as-mock (npm) GHSA-vp25-hhqc-cx25, MAL-2026-1191 | Malicious | Not scored | 03 Mar, 2026 | npm chai-as-mock |
Malicious release: Malicious code in cmc-client (npm) GHSA-ffqq-2q7r-p599, MAL-2026-1194 | Malicious | Not scored | 03 Mar, 2026 | npm cmc-client |
Malicious release: Malicious code in polymarket-provider (npm) GHSA-g254-h8vh-66j7, MAL-2026-1205 | Malicious | Not scored | 03 Mar, 2026 | npm polymarket-provider |
Malicious release: Malicious code in mvn-runtime (npm) GHSA-5937-7cj9-h84g, MAL-2026-1202 | Malicious | Not scored | 03 Mar, 2026 | npm mvn-runtime |
Malicious release: Malicious code in alpha-replicator (npm) GHSA-93qm-662c-9rp8, MAL-2026-1188 | Malicious | Not scored | 03 Mar, 2026 | npm alpha-replicator |
Malicious release: Malicious code in tailwindcss-form-bundler (npm) GHSA-rc4v-mwgh-rq6w, MAL-2026-1209 | Malicious | Not scored | 03 Mar, 2026 | npm tailwindcss-form-bundler |
Malicious release: Malicious code in tailwindcss-fonts-bundler (npm) GHSA-wjf6-j74r-vpqg, MAL-2026-1208 | Malicious | Not scored | 03 Mar, 2026 | npm tailwindcss-fonts-bundler |
Malicious release: Malicious code in polygon-bitquery-api (npm) GHSA-3rf2-3wr3-9mh6, MAL-2026-1204 | Malicious | Not scored | 03 Mar, 2026 | npm polygon-bitquery-api |
Malicious release: Malicious code in mongos-api (npm) GHSA-7w62-875h-3rvj, MAL-2026-1201 | Malicious | Not scored | 03 Mar, 2026 | npm mongos-api |
Malicious release: Malicious code in tailwindcss-forms-animation (npm) GHSA-j98w-v7mh-wx8v, MAL-2026-1210 | Malicious | Not scored | 03 Mar, 2026 | npm tailwindcss-forms-animation |
Malicious release: Malicious code in mongoose-apis (npm) GHSA-m4gq-cqjp-prx9, MAL-2026-1200 | Malicious | Not scored | 03 Mar, 2026 | npm mongoose-apis |
Malicious release: Malicious code in cloud-apis (npm) GHSA-v37x-qc88-g574, MAL-2026-1193 | Malicious | Not scored | 03 Mar, 2026 | npm cloud-apis |
Malicious release: Malicious code in turbo-json-parser (npm) GHSA-q8qv-x9hx-52j4, MAL-2026-1213 | Malicious | Not scored | 03 Mar, 2026 | npm turbo-json-parser |