Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in noteasonfnsource (PyPI) MAL-2026-1098 | Malicious | Not scored | 01 Mar, 2026 | PyPI noteasonfnsource |
Malicious release: Malicious code in botbooster (PyPI) MAL-2026-1097 | Malicious | Not scored | 01 Mar, 2026 | PyPI botbooster |
Malicious release: Malicious code in sketch-measure (npm) MAL-2026-1096 | Malicious | Not scored | 01 Mar, 2026 | npm sketch-measure |
Malicious release: Malicious code in jquery-display (npm) MAL-2026-1095 | Malicious | Not scored | 01 Mar, 2026 | npm jquery-display |
Malicious release: Malicious code in dc-web-app (npm) GHSA-29rq-p698-29cj, MAL-2026-1094 | Malicious | Not scored | 01 Mar, 2026 | npm dc-web-app |
Malicious release: Malicious code in naughty-package (npm) MAL-2026-1093 | Malicious | Not scored | 01 Mar, 2026 | npm naughty-package |
Malicious release: Malicious code in jwrincident (PyPI) MAL-2026-1092 | Malicious | Not scored | 28 Feb, 2026 | PyPI jwrincident |
Malicious release: Malicious code in myproject-bola (PyPI) MAL-2026-1091 | Malicious | Not scored | 28 Feb, 2026 | PyPI myproject-bola |
Malicious release: Malicious code in isb (PyPI) MAL-2026-1090 | Malicious | Not scored | 28 Feb, 2026 | PyPI isb |
Malicious release: Malicious code in randomstringgen (PyPI) MAL-2026-1089 | Malicious | Not scored | 28 Feb, 2026 | PyPI randomstringgen |
Malicious release: Malicious code in bladebit (PyPI) MAL-2026-1088 | Malicious | Not scored | 28 Feb, 2026 | PyPI bladebit |
Malicious release: Malicious code in bps-design-system (npm) MAL-2026-1087 | Malicious | Not scored | 28 Feb, 2026 | npm bps-design-system |
Malicious release: Malicious code in tchap-bot (PyPI) MAL-2026-1086 | Malicious | Not scored | 28 Feb, 2026 | PyPI tchap-bot |
Malicious release: Malicious code in ctf-toolkit (PyPI) MAL-2026-1085 | Malicious | Not scored | 28 Feb, 2026 | PyPI ctf-toolkit |
Malicious release: Malicious code in socketxio (PyPI) MAL-2026-1084 | Malicious | Not scored | 28 Feb, 2026 | PyPI socketxio |
Malicious release: Malicious code in dc-mobx (npm) GHSA-rm4v-p5gj-p92w, MAL-2026-1083 | Malicious | Not scored | 28 Feb, 2026 | npm dc-mobx |
Malicious release: Malicious code in cdf-clients (PyPI) MAL-2026-1082 | Malicious | Not scored | 27 Feb, 2026 | PyPI cdf-clients |
Malicious release: Malicious code in marionette-react-view (npm) GHSA-xqmc-68vr-gq64, MAL-2026-1081 | Malicious | Not scored | 27 Feb, 2026 | npm marionette-react-view |
Malicious release: Malicious code in hashtools32 (PyPI) MAL-2026-1080 | Malicious | Not scored | 27 Feb, 2026 | PyPI hashtools32 |
Malicious release: Malicious code in @dgxeon/libsignal-node (npm) GHSA-34p6-99h9-93p8, MAL-2026-1072 | Malicious | Not scored | 27 Feb, 2026 | npm @dgxeon/libsignal-node |
Malicious release: Malicious code in socket-dgxeon (npm) GHSA-rjr7-mc49-vw8f, MAL-2026-1078 | Malicious | Not scored | 27 Feb, 2026 | npm socket-dgxeon |
Malicious release: Malicious code in sokettry (npm) GHSA-69j8-jrgj-x492, MAL-2026-1079 | Malicious | Not scored | 27 Feb, 2026 | npm sokettry |
Malicious release: Malicious code in dgxeon-soket (npm) GHSA-838q-63vp-c27h, MAL-2026-1074 | Malicious | Not scored | 27 Feb, 2026 | npm dgxeon-soket |
Malicious release: Malicious code in dgxeon-soket3 (npm) GHSA-8766-24pj-cr9x, MAL-2026-1076 | Malicious | Not scored | 27 Feb, 2026 | npm dgxeon-soket3 |
Malicious release: Malicious code in dgxeon-soket4 (npm) GHSA-9rff-9hmx-c2wr, MAL-2026-1077 | Malicious | Not scored | 27 Feb, 2026 | npm dgxeon-soket4 |
Malicious release: Malicious code in baileys-xeonbot (npm) GHSA-g44v-v77q-7jpq, MAL-2026-1073 | Malicious | Not scored | 27 Feb, 2026 | npm baileys-xeonbot |
Malicious release: Malicious code in dgxeon-soket2 (npm) GHSA-r65g-wqxj-p5pp, MAL-2026-1075 | Malicious | Not scored | 27 Feb, 2026 | npm dgxeon-soket2 |
Malicious release: Malicious code in @skyzopedia/baileys (npm) GHSA-65cp-mv9p-hrfx, MAL-2026-1065 | Malicious | Not scored | 27 Feb, 2026 | npm @skyzopedia/baileys |
Malicious release: Malicious code in @skyzopedia/baileys-pro (npm) GHSA-9543-wpp8-34w3, MAL-2026-1067 | Malicious | Not scored | 27 Feb, 2026 | npm @skyzopedia/baileys-pro |
Malicious release: Malicious code in @skyzopedia/libsignal-node (npm) GHSA-ccmw-784p-h6x6, MAL-2026-1069 | Malicious | Not scored | 27 Feb, 2026 | npm @skyzopedia/libsignal-node |
Malicious release: Malicious code in libsignal-skyzopedia (npm) GHSA-f6mr-6f43-m4cr, MAL-2026-1071 | Malicious | Not scored | 27 Feb, 2026 | npm libsignal-skyzopedia |
Malicious release: Malicious code in @skyzopedia/baileys-mod (npm) GHSA-gg4c-g7hp-rgp8, MAL-2026-1066 | Malicious | Not scored | 27 Feb, 2026 | npm @skyzopedia/baileys-mod |
Malicious release: Malicious code in @skyzopedia/ubot (npm) GHSA-mw93-6xm9-4mxq, MAL-2026-1070 | Malicious | Not scored | 27 Feb, 2026 | npm @skyzopedia/ubot |
Malicious release: Malicious code in @skyzopedia/brat (npm) GHSA-prrf-qx8x-3283, MAL-2026-1068 | Malicious | Not scored | 27 Feb, 2026 | npm @skyzopedia/brat |
Malicious release: Malicious code in cicd-ppe-redteam-test02 (PyPI) MAL-2026-1064 | Malicious | Not scored | 27 Feb, 2026 | PyPI cicd-ppe-redteam-test02 |
Malicious release: Malicious code in cicd-ppe-redteam-test01 (PyPI) MAL-2026-1063 | Malicious | Not scored | 27 Feb, 2026 | PyPI cicd-ppe-redteam-test01 |
Malicious release: Malicious code in @zinley/orion (npm) MAL-2026-1060 | Malicious | Not scored | 27 Feb, 2026 | npm @zinley/orion |
Malicious release: Malicious code in newman-reporter-genuinepoc (npm) MAL-2026-1061 | Malicious | Not scored | 27 Feb, 2026 | npm newman-reporter-genuinepoc |
Malicious release: Malicious code in express-core-validator (npm) GHSA-pqqv-f6rm-588j, MAL-2026-1062 | Malicious | Not scored | 27 Feb, 2026 | npm express-core-validator |
Malicious release: Malicious code in nuget-task-common (npm) MAL-2026-1059 | Malicious | Not scored | 27 Feb, 2026 | npm nuget-task-common |
Malicious release: Malicious code in foundry-toolkit (npm) MAL-2026-1052 | Malicious | Not scored | 26 Feb, 2026 | npm foundry-toolkit |
Malicious release: Malicious code in launch-darkly-js (npm) GHSA-g8jj-44f9-c9rv, MAL-2026-1050 | Malicious | Not scored | 26 Feb, 2026 | npm launch-darkly-js |
Malicious release: Malicious code in windowston (npm) GHSA-5xm7-fvcm-hr3f, MAL-2026-1057 | Malicious | Not scored | 26 Feb, 2026 | npm windowston |
Malicious release: Malicious code in flycord (PyPI) MAL-2026-1049 | Malicious | Not scored | 26 Feb, 2026 | PyPI flycord |
Malicious release: Malicious code in edx-salesforce (PyPI) MAL-2026-1048 | Malicious | Not scored | 26 Feb, 2026 | PyPI edx-salesforce |
Malicious release: Malicious code in jslint-config (npm) GHSA-39pg-5x8j-wg53, MAL-2026-1055 | Malicious | Not scored | 26 Feb, 2026 | npm jslint-config |
Malicious release: Malicious code in hardhat-node (npm) MAL-2026-1053 | Malicious | Not scored | 26 Feb, 2026 | npm hardhat-node |
Malicious release: Malicious code in zoddle (npm) GHSA-rrcm-fmc5-5m45, MAL-2026-1058 | Malicious | Not scored | 26 Feb, 2026 | npm zoddle |
Malicious release: Malicious code in jest-param-validator (npm) GHSA-48qg-xrrh-4cv3, MAL-2026-1046 | Malicious | Not scored | 26 Feb, 2026 | npm jest-param-validator |
Malicious release: Malicious code in jest-node-paramset (npm) GHSA-jwcf-6pvx-4cwr, MAL-2026-1045 | Malicious | Not scored | 26 Feb, 2026 | npm jest-node-paramset |