Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in xpack-subscription (npm) GHSA-9f55-3p24-3r9c, MAL-2026-1160 | Malicious | Not scored | 03 Mar, 2026 | npm xpack-subscription |
Malicious release: Malicious code in xpack-sui (npm) GHSA-9rq2-6v86-w222, MAL-2026-1161 | Malicious | Not scored | 03 Mar, 2026 | npm xpack-sui |
Malicious release: Malicious code in pool-check (npm) GHSA-vgpx-x7hq-m4fx, MAL-2026-1152 | Malicious | Not scored | 03 Mar, 2026 | npm pool-check |
Malicious release: Malicious code in hackpreinstall (npm) GHSA-34f9-x3r7-8wjj, MAL-2026-1149 | Malicious | Not scored | 03 Mar, 2026 | npm hackpreinstall |
Malicious release: Malicious code in roku-aihub (PyPI) MAL-2026-1144 | Malicious | Not scored | 02 Mar, 2026 | PyPI roku-aihub |
Malicious release: Malicious code in amigapythonupdater (PyPI) MAL-2026-1136 | Malicious | Not scored | 02 Mar, 2026 | PyPI amigapythonupdater |
Malicious release: Malicious code in wisecloudcyberark (PyPI) MAL-2026-1142 | Malicious | Not scored | 02 Mar, 2026 | PyPI wisecloudcyberark |
Malicious release: Malicious code in heimdal-credentials (PyPI) MAL-2026-1140 | Malicious | Not scored | 02 Mar, 2026 | PyPI heimdal-credentials |
Malicious release: Malicious code in wisecloudsecrets (PyPI) MAL-2026-1143 | Malicious | Not scored | 02 Mar, 2026 | PyPI wisecloudsecrets |
Malicious release: Malicious code in fwk-amigapython (PyPI) MAL-2026-1137 | Malicious | Not scored | 02 Mar, 2026 | PyPI fwk-amigapython |
Malicious release: Malicious code in fwk-amigapython-amigamlserver (PyPI) MAL-2026-1138 | Malicious | Not scored | 02 Mar, 2026 | PyPI fwk-amigapython-amigamlserver |
Malicious release: Malicious code in fwk-amigapython-rest-server (PyPI) MAL-2026-1139 | Malicious | Not scored | 02 Mar, 2026 | PyPI fwk-amigapython-rest-server |
Malicious release: Malicious code in identityapi (PyPI) MAL-2026-1141 | Malicious | Not scored | 02 Mar, 2026 | PyPI identityapi |
Malicious release: Malicious code in colorize-console (npm) GHSA-g58r-8w2m-744m, MAL-2026-1128 | Malicious | Not scored | 02 Mar, 2026 | npm colorize-console |
Malicious release: Malicious code in @nazi-team/libsignal-node (npm) GHSA-h265-qvfj-vp46, MAL-2026-1120 | Malicious | Not scored | 02 Mar, 2026 | npm @nazi-team/libsignal-node |
Malicious release: Malicious code in @nazi-team/baileys (npm) GHSA-m2fq-rwf5-8c25, MAL-2026-1119 | Malicious | Not scored | 02 Mar, 2026 | npm @nazi-team/baileys |
Malicious release: Malicious code in @sanzxcode/baileys (npm) GHSA-mqv3-h8qx-p79f, MAL-2026-1121 | Malicious | Not scored | 02 Mar, 2026 | npm @sanzxcode/baileys |
Malicious release: Malicious code in @sanzxcode/libsignal-node (npm) GHSA-q649-w96f-433p, MAL-2026-1122 | Malicious | Not scored | 02 Mar, 2026 | npm @sanzxcode/libsignal-node |
Malicious release: Malicious code in @daffadeveloper/baileys (npm) GHSA-6f99-hrgr-8q4r, MAL-2026-1117 | Malicious | Not scored | 02 Mar, 2026 | npm @daffadeveloper/baileys |
Malicious release: Malicious code in @daffadeveloper/libsignal-node (npm) GHSA-m3xr-v9g3-m4pp, MAL-2026-1118 | Malicious | Not scored | 02 Mar, 2026 | npm @daffadeveloper/libsignal-node |
Malicious release: Malicious code in danzxz (npm) GHSA-58fh-489v-mr28, MAL-2026-1129 | Malicious | Not scored | 02 Mar, 2026 | npm danzxz |
Malicious release: Malicious code in ngaturkids (npm) GHSA-5vg4-hrfg-7vvv, MAL-2026-1131 | Malicious | Not scored | 02 Mar, 2026 | npm ngaturkids |
Malicious release: Malicious code in sukuna-baileys (npm) GHSA-m5x3-m9w7-v86p, MAL-2026-1133 | Malicious | Not scored | 02 Mar, 2026 | npm sukuna-baileys |
Malicious release: Malicious code in yuji-baileys (npm) GHSA-r56q-r5p2-x734, MAL-2026-1135 | Malicious | Not scored | 02 Mar, 2026 | npm yuji-baileys |
Malicious release: Malicious code in kazumarii (npm) GHSA-2rpw-36c3-xcvm, MAL-2026-1130 | Malicious | Not scored | 02 Mar, 2026 | npm kazumarii |
Malicious release: Malicious code in ts-big-number (npm) GHSA-v4cj-rqxr-fp7c, MAL-2026-1134 | Malicious | Not scored | 02 Mar, 2026 | npm ts-big-number |
Malicious release: Malicious code in npm-doc-builder (npm) GHSA-xmrq-xc4p-4552, MAL-2026-1132 | Malicious | Not scored | 02 Mar, 2026 | npm npm-doc-builder |
Malicious release: Malicious code in @yaoii-bails/libsignal-node (npm) GHSA-8m8v-2xpf-gfwq, MAL-2026-1124 | Malicious | Not scored | 02 Mar, 2026 | npm @yaoii-bails/libsignal-node |
Malicious release: Malicious code in @yaoii-bails/socket (npm) GHSA-cwj6-86q5-p4hm, MAL-2026-1126 | Malicious | Not scored | 02 Mar, 2026 | npm @yaoii-bails/socket |
Malicious release: Malicious code in @yaoii-bails/baileys (npm) GHSA-jgwm-f38r-hqj6, MAL-2026-1123 | Malicious | Not scored | 02 Mar, 2026 | npm @yaoii-bails/baileys |
Malicious release: Malicious code in @yaoii-bails/libsignall-node (npm) GHSA-pj6v-c99q-p649, MAL-2026-1125 | Malicious | Not scored | 02 Mar, 2026 | npm @yaoii-bails/libsignall-node |
Malicious release: Malicious code in @yaoii-bails/yaoii-baileys (npm) GHSA-w4wq-33rw-2mxr, MAL-2026-1127 | Malicious | Not scored | 02 Mar, 2026 | npm @yaoii-bails/yaoii-baileys |
Malicious release: Malicious code in chai-vest (npm) GHSA-j383-j4m3-9c75, MAL-2026-1115 | Malicious | Not scored | 02 Mar, 2026 | npm chai-vest |
Malicious release: Malicious code in js-nodecat (npm) GHSA-m3qj-483q-v65m, MAL-2026-1116 | Malicious | Not scored | 02 Mar, 2026 | npm js-nodecat |
Malicious release: Malicious code in hapi-lint (npm) GHSA-3xx3-79g2-hg8f, MAL-2026-1108 | Malicious | Not scored | 02 Mar, 2026 | npm hapi-lint |
Malicious release: Malicious code in bcryptance (npm) GHSA-ww49-jmx8-mjg8, MAL-2026-1102 | Malicious | Not scored | 02 Mar, 2026 | npm bcryptance |
Malicious release: Malicious code in argonist (npm) GHSA-29c7-mqr6-w382, MAL-2026-1101 | Malicious | Not scored | 02 Mar, 2026 | npm argonist |
Malicious release: Malicious code in typoriem (npm) GHSA-c8hp-3fmr-c3r5, MAL-2026-1113 | Malicious | Not scored | 02 Mar, 2026 | npm typoriem |
Malicious release: Malicious code in vitetest-lint (npm) GHSA-rg84-2gf4-9cj4, MAL-2026-1114 | Malicious | Not scored | 02 Mar, 2026 | npm vitetest-lint |
Malicious release: Malicious code in loadash-lint (npm) GHSA-mq8x-7m3h-wgw6, MAL-2026-1110 | Malicious | Not scored | 02 Mar, 2026 | npm loadash-lint |
Malicious release: Malicious code in expressjs-lint (npm) GHSA-9w37-v3hq-ppfh, MAL-2026-1106 | Malicious | Not scored | 02 Mar, 2026 | npm expressjs-lint |
Malicious release: Malicious code in sequelization (npm) GHSA-fwf9-p2gv-vrvx, MAL-2026-1112 | Malicious | Not scored | 02 Mar, 2026 | npm sequelization |
Malicious release: Malicious code in jsnwebapptoken (npm) GHSA-22m6-pxx8-9vgj, MAL-2026-1109 | Malicious | Not scored | 02 Mar, 2026 | npm jsnwebapptoken |
Malicious release: Malicious code in daytonjs (npm) GHSA-3x7f-5p6c-rx9x, MAL-2026-1105 | Malicious | Not scored | 02 Mar, 2026 | npm daytonjs |
Malicious release: Malicious code in bee-quarl (npm) GHSA-vfq3-hxh4-3m5j, MAL-2026-1103 | Malicious | Not scored | 02 Mar, 2026 | npm bee-quarl |
Malicious release: Malicious code in mqttoken (npm) GHSA-qv65-57f4-3x87, MAL-2026-1111 | Malicious | Not scored | 02 Mar, 2026 | npm mqttoken |
Malicious release: Malicious code in bubble-core (npm) GHSA-8vf5-3mff-8gfp, MAL-2026-1104 | Malicious | Not scored | 02 Mar, 2026 | npm bubble-core |
Malicious release: Malicious code in formmiderable (npm) GHSA-frrp-vmmx-gr3c, MAL-2026-1107 | Malicious | Not scored | 02 Mar, 2026 | npm formmiderable |
Malicious release: Malicious code in ng-vzbootstrap (npm) GHSA-25jj-4j8c-cgrq, MAL-2026-1100 | Malicious | Not scored | 01 Mar, 2026 | npm ng-vzbootstrap |
Malicious release: Malicious code in pyclogger (PyPI) MAL-2026-1099 | Malicious | Not scored | 01 Mar, 2026 | PyPI pyclogger |