Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @crysnovax/baileys-fixed (npm) GHSA-262v-p7h8-9574, MAL-2026-15944 | Malicious | Not scored | 04 Sep, 2026 | npm @crysnovax/baileys-fixed |
Malicious release: Malicious code in @crysnovax/baileys-stable (npm) GHSA-p579-542j-6v98, MAL-2026-15945 | Malicious | Not scored | 04 Sep, 2026 | npm @crysnovax/baileys-stable |
Malicious release: Malicious code in @crysnovax/plug (npm) GHSA-vg98-2r8g-7qw2, MAL-2026-15946 | Malicious | Not scored | 04 Sep, 2026 | npm @crysnovax/plug |
Malicious release: Malicious code in qoeoe (PyPI) MAL-2026-15927 | Malicious | Not scored | 04 Sep, 2026 | PyPI qoeoe |
Malicious release: Malicious code in astlsi (PyPI) MAL-2026-15926 | Malicious | Not scored | 04 Sep, 2026 | PyPI astlsi |
Malicious release: Malicious code in tailwind-contact-forms (npm) MAL-2026-15925 | Malicious | Not scored | 04 Sep, 2026 | npm tailwind-contact-forms |
Malicious release: Malicious code in box-sign-client-poc (npm) MAL-2026-15921 | Malicious | Not scored | 04 Sep, 2026 | npm box-sign-client-poc |
Malicious release: Malicious code in box-sign-client (npm) MAL-2026-15920 | Malicious | Not scored | 04 Sep, 2026 | npm box-sign-client |
Malicious release: Malicious code in claude-channel-discord (npm) MAL-2026-15922 | Malicious | Not scored | 04 Sep, 2026 | npm claude-channel-discord |
Malicious release: Malicious code in real-router-telemetry (npm) MAL-2026-15924 | Malicious | Not scored | 04 Sep, 2026 | npm real-router-telemetry |
Malicious release: Malicious code in line-through (npm) MAL-2026-15923 | Malicious | Not scored | 04 Sep, 2026 | npm line-through |
Malicious release: Malicious code in taskforge-9xv (npm) MAL-2026-15914 | Malicious | Not scored | 04 Sep, 2026 | npm taskforge-9xv |
Malicious release: Malicious code in taskforge-8xv (npm) MAL-2026-15913 | Malicious | Not scored | 04 Sep, 2026 | npm taskforge-8xv |
Malicious release: Malicious code in text-transform-plus (npm) MAL-2026-15915 | Malicious | Not scored | 04 Sep, 2026 | npm text-transform-plus |
Malicious release: Malicious code in tailwind-aspect (npm) MAL-2026-15912 | Malicious | Not scored | 04 Sep, 2026 | npm tailwind-aspect |
Malicious release: Malicious code in 2nestjs (npm) MAL-2026-15911 | Malicious | Not scored | 04 Sep, 2026 | npm 2nestjs |
Malicious release: Malicious code in xcryption (npm) MAL-2026-15916 | Malicious | Not scored | 04 Sep, 2026 | npm xcryption |
Malicious release: Malicious code in timeweave (PyPI) MAL-2026-15910 | Malicious | Not scored | 04 Sep, 2026 | PyPI timeweave |
Malicious release: Malicious code in net-util-y8 (npm) MAL-2026-15901 | Malicious | Not scored | 04 Sep, 2026 | npm net-util-y8 |
Malicious release: Malicious code in easypanel-ctl (npm) MAL-2026-15898 | Malicious | Not scored | 04 Sep, 2026 | npm easypanel-ctl |
Malicious release: Malicious code in tailwindcss-3d-styles (npm) MAL-2026-15905 | Malicious | Not scored | 04 Sep, 2026 | npm tailwindcss-3d-styles |
Malicious release: Malicious code in easypanel-core (npm) MAL-2026-15897 | Malicious | Not scored | 04 Sep, 2026 | npm easypanel-core |
Malicious release: Malicious code in easypanel-client (npm) MAL-2026-15896 | Malicious | Not scored | 04 Sep, 2026 | npm easypanel-client |
Malicious release: Malicious code in easypanel-app (npm) MAL-2026-15895 | Malicious | Not scored | 04 Sep, 2026 | npm easypanel-app |
Malicious release: Malicious code in easypanel-docker (npm) MAL-2026-15899 | Malicious | Not scored | 04 Sep, 2026 | npm easypanel-docker |
Malicious release: Malicious code in tailwindcss-animate-styles (npm) MAL-2026-15906 | Malicious | Not scored | 04 Sep, 2026 | npm tailwindcss-animate-styles |
Malicious release: Malicious code in peertube-plugin-video-views-counter (npm) MAL-2026-15902 | Malicious | Not scored | 04 Sep, 2026 | npm peertube-plugin-video-views-counter |
Malicious release: Malicious code in tailwind-scrollbar-styles (npm) MAL-2026-15904 | Malicious | Not scored | 04 Sep, 2026 | npm tailwind-scrollbar-styles |
Malicious release: Malicious code in tiny-folder-tree (npm) MAL-2026-15907 | Malicious | Not scored | 04 Sep, 2026 | npm tiny-folder-tree |
Malicious release: Malicious code in tailwind-container-queries (npm) MAL-2026-15903 | Malicious | Not scored | 04 Sep, 2026 | npm tailwind-container-queries |
Malicious release: Malicious code in hydration-ui-pkg (npm) MAL-2026-15900 | Malicious | Not scored | 04 Sep, 2026 | npm hydration-ui-pkg |
Malicious release: Malicious code in wallet-watcher (npm) GHSA-jq3q-655j-wjqh, MAL-2026-15871 | Malicious | Not scored | 04 Sep, 2026 | npm wallet-watcher |
Malicious release: Malicious code in vitest-cli-dev (npm) MAL-2026-15870 | Malicious | Not scored | 04 Sep, 2026 | npm vitest-cli-dev |
Malicious release: Malicious code in mcp-consultasdeveiculos-client (npm) MAL-2026-15869 | Malicious | Not scored | 04 Sep, 2026 | npm mcp-consultasdeveiculos-client |
Malicious release: Malicious code in @bx-ui-framework/authentication (npm) MAL-2026-15866 | Malicious | Not scored | 04 Sep, 2026 | npm @bx-ui-framework/authentication |
Malicious release: Malicious code in @bx-ui-framework/microfrontend (npm) MAL-2026-15868 | Malicious | Not scored | 04 Sep, 2026 | npm @bx-ui-framework/microfrontend |
Malicious release: Malicious code in @bx-ui-framework/common (npm) MAL-2026-15867 | Malicious | Not scored | 04 Sep, 2026 | npm @bx-ui-framework/common |
Malicious release: Malicious code in orbitron-tui (npm) MAL-2026-16011 | Malicious | Not scored | 04 Sep, 2026 | npm orbitron-tui |
Malicious release: Malicious code in orbitron-cli (npm) MAL-2026-16012 | Malicious | Not scored | 04 Sep, 2026 | npm orbitron-cli |
Malicious release: Malicious code in agent-free (npm) MAL-2026-16013 | Malicious | Not scored | 04 Sep, 2026 | npm agent-free |
Malicious release: Malicious code in prime-coding-agent (npm) MAL-2026-16014 | Malicious | Not scored | 04 Sep, 2026 | npm prime-coding-agent |
Malicious release: Malicious code in tsshare (PyPI) MAL-2026-16044 | Malicious | Not scored | 04 Sep, 2026 | PyPI tsshare |
Malicious release: Malicious code in @avigilon/node-webrtc (npm) MAL-2026-15865 | Malicious | Not scored | 03 Sep, 2026 | npm @avigilon/node-webrtc |
Malicious release: Malicious code in 1nestjs (npm) MAL-2026-15909 | Malicious | Not scored | 03 Sep, 2026 | npm 1nestjs |
Malicious release: Malicious code in 0nestjs (npm) MAL-2026-15908 | Malicious | Not scored | 03 Sep, 2026 | npm 0nestjs |
Malicious release: Malicious code in asti (PyPI) MAL-2026-15864 | Malicious | Not scored | 03 Sep, 2026 | PyPI asti |
Malicious release: Malicious code in @modss/baileys (npm) GHSA-4c9v-m7qm-2mpr, MAL-2026-15918 | Malicious | Not scored | 03 Sep, 2026 | npm @modss/baileys |
Malicious release: Malicious code in @crysnovax/baileys (npm) GHSA-c34p-4828-cg5g, MAL-2026-15917 | Malicious | Not scored | 03 Sep, 2026 | npm @crysnovax/baileys |
Malicious release: Malicious code in megan-baileys (npm) MAL-2026-15919 | Malicious | Not scored | 03 Sep, 2026 | npm megan-baileys |
Malicious release: Malicious code in py-1requests (PyPI) MAL-2026-15861 | Malicious | Not scored | 03 Sep, 2026 | PyPI py-1requests |