Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in newrubylogger (RubyGems) GHSA-ppf2-mgq7-9q2c, MAL-2026-1002 | Malicious | Not scored | 23 Feb, 2026 | RubyGems newrubylogger |
Malicious release: Malicious code in cnnct-eaas-corre (PyPI) MAL-2026-1003 | Malicious | Not scored | 23 Feb, 2026 | PyPI cnnct-eaas-corre |
Malicious release: Malicious code in request-httpx-4 (PyPI) MAL-2026-1001 | Malicious | Not scored | 23 Feb, 2026 | PyPI request-httpx-4 |
Malicious release: Malicious code in secure-monkey (npm) MAL-2026-1041 | Malicious | Not scored | 23 Feb, 2026 | npm secure-monkey |
Malicious release: Malicious code in scraper-npm (PyPI) MAL-2026-1000 | Malicious | Not scored | 23 Feb, 2026 | PyPI scraper-npm |
Malicious release: Malicious code in react-dropzone-truffle (npm) GHSA-h362-pxfp-fmhj, MAL-2026-999 | Malicious | Not scored | 23 Feb, 2026 | npm react-dropzone-truffle |
Malicious release: Malicious code in npm-security-testing (npm) GHSA-mfx5-vj54-ccc2, MAL-2026-997 | Malicious | Not scored | 23 Feb, 2026 | npm npm-security-testing |
Malicious release: Malicious code in rbxm-tools (npm) GHSA-qjfg-ppv8-33mh, MAL-2026-998 | Malicious | Not scored | 23 Feb, 2026 | npm rbxm-tools |
Malicious release: Malicious code in en-thrift-internal (npm) GHSA-r6q9-qcrw-mc6m, MAL-2026-986 | Malicious | Not scored | 22 Feb, 2026 | npm en-thrift-internal |
Malicious release: Malicious code in conduit-utils (npm) MAL-2026-985 | Malicious | Not scored | 22 Feb, 2026 | npm conduit-utils |
Malicious release: Malicious code in vl-ui-code-preview (npm) MAL-2026-994 | Malicious | Not scored | 22 Feb, 2026 | npm vl-ui-code-preview |
Malicious release: Malicious code in vl-ui-contact-card (npm) MAL-2026-995 | Malicious | Not scored | 22 Feb, 2026 | npm vl-ui-contact-card |
Malicious release: Malicious code in vl-ui-action-group (npm) MAL-2026-988 | Malicious | Not scored | 22 Feb, 2026 | npm vl-ui-action-group |
Malicious release: Malicious code in vl-ui-button (npm) MAL-2026-992 | Malicious | Not scored | 22 Feb, 2026 | npm vl-ui-button |
Malicious release: Malicious code in vl-ui-body (npm) MAL-2026-990 | Malicious | Not scored | 22 Feb, 2026 | npm vl-ui-body |
Malicious release: Malicious code in vl-ui-breadcrumb (npm) MAL-2026-991 | Malicious | Not scored | 22 Feb, 2026 | npm vl-ui-breadcrumb |
Malicious release: Malicious code in vl-ui-checkbox (npm) MAL-2026-993 | Malicious | Not scored | 22 Feb, 2026 | npm vl-ui-checkbox |
Malicious release: Malicious code in vl-ui-accessibility (npm) MAL-2026-987 | Malicious | Not scored | 22 Feb, 2026 | npm vl-ui-accessibility |
Malicious release: Malicious code in vl-ui-alert (npm) MAL-2026-989 | Malicious | Not scored | 22 Feb, 2026 | npm vl-ui-alert |
Malicious release: Malicious code in myasicapi (PyPI) MAL-2026-984 | Malicious | Not scored | 22 Feb, 2026 | PyPI myasicapi |
Malicious release: Malicious code in tensorflow-opt (PyPI) MAL-2026-983 | Malicious | Not scored | 22 Feb, 2026 | PyPI tensorflow-opt |
Malicious release: Malicious code in trunket-dev-driver (PyPI) MAL-2026-982 | Malicious | Not scored | 22 Feb, 2026 | PyPI trunket-dev-driver |
Malicious release: Malicious code in dt-fe-t2d-marketplace (npm) MAL-2026-981 | Malicious | Not scored | 22 Feb, 2026 | npm dt-fe-t2d-marketplace |
Malicious release: Malicious code in the-storyverse (npm) MAL-2026-980 | Malicious | Not scored | 22 Feb, 2026 | npm the-storyverse |
Malicious release: Malicious code in home-robot (PyPI) MAL-2026-979 | Malicious | Not scored | 22 Feb, 2026 | PyPI home-robot |
Malicious release: Malicious code in microsoft-cms-client (npm) GHSA-xcqv-f95p-vrc9, MAL-2026-978 | Malicious | Not scored | 21 Feb, 2026 | npm microsoft-cms-client |
Malicious release: Malicious code in airbnb-identity (PyPI) MAL-2026-977 | Malicious | Not scored | 20 Feb, 2026 | PyPI airbnb-identity |
Malicious release: Malicious code in azure-postgresql-auth (npm) MAL-2026-975 | Malicious | Not scored | 20 Feb, 2026 | npm azure-postgresql-auth |
Malicious release: Malicious code in rollup-plugin-polyfill-swc (npm) GHSA-93mq-v792-4x85, MAL-2026-976 | Malicious | Not scored | 20 Feb, 2026 | npm rollup-plugin-polyfill-swc |
Malicious release: Malicious code in parse-compat (npm) GHSA-g2x2-r9hh-73f2, MAL-2026-967 | Malicious | Not scored | 20 Feb, 2026 | npm parse-compat |
Malicious release: Malicious code in crypto-locale (npm) GHSA-55c2-6c39-jrrp, MAL-2026-955 | Malicious | Not scored | 20 Feb, 2026 | npm crypto-locale |
Malicious release: Malicious code in detect-cache (npm) GHSA-87gx-xxm8-25x2, MAL-2026-957 | Malicious | Not scored | 20 Feb, 2026 | npm detect-cache |
Malicious release: Malicious code in naniod (npm) GHSA-p4cj-w7xw-88p3, MAL-2026-964 | Malicious | Not scored | 20 Feb, 2026 | npm naniod |
Malicious release: Malicious code in locale-loader-pro (npm) GHSA-v45c-qjqp-mw3q, MAL-2026-963 | Malicious | Not scored | 20 Feb, 2026 | npm locale-loader-pro |
Malicious release: Malicious code in scan-store (npm) GHSA-v858-hgfg-q94p, MAL-2026-969 | Malicious | Not scored | 20 Feb, 2026 | npm scan-store |
Malicious release: Malicious code in uudi (npm) GHSA-w9hv-7gxr-9f8f, MAL-2026-972 | Malicious | Not scored | 20 Feb, 2026 | npm uudi |
Malicious release: Malicious code in ethres (npm) GHSA-56j5-62q9-cj2c, MAL-2026-958 | Malicious | Not scored | 20 Feb, 2026 | npm ethres |
Malicious release: Malicious code in veim (npm) GHSA-99w5-2gw8-7w8c, MAL-2026-973 | Malicious | Not scored | 20 Feb, 2026 | npm veim |
Malicious release: Malicious code in yarsg (npm) GHSA-xw78-h8vv-phcj, MAL-2026-974 | Malicious | Not scored | 20 Feb, 2026 | npm yarsg |
Malicious release: Malicious code in rimarf (npm) GHSA-2r7f-gcp3-m5jq, MAL-2026-968 | Malicious | Not scored | 20 Feb, 2026 | npm rimarf |
Malicious release: Malicious code in hardhta (npm) GHSA-c597-v633-vcm6, MAL-2026-960 | Malicious | Not scored | 20 Feb, 2026 | npm hardhta |
Malicious release: Malicious code in format-defaults (npm) GHSA-chmw-4pgg-56w6, MAL-2026-959 | Malicious | Not scored | 20 Feb, 2026 | npm format-defaults |
Malicious release: Malicious code in crypto-reader-info (npm) GHSA-mxvw-w9w3-rqc7, MAL-2026-956 | Malicious | Not scored | 20 Feb, 2026 | npm crypto-reader-info |
Malicious release: Malicious code in secp256 (npm) GHSA-p683-99hw-p2fq, MAL-2026-970 | Malicious | Not scored | 20 Feb, 2026 | npm secp256 |
Malicious release: Malicious code in node-native-bridge (npm) GHSA-qgwv-9xxh-fmph, MAL-2026-965 | Malicious | Not scored | 20 Feb, 2026 | npm node-native-bridge |
Malicious release: Malicious code in suport-color (npm) GHSA-5qvc-hmwr-ghj5, MAL-2026-971 | Malicious | Not scored | 20 Feb, 2026 | npm suport-color |
Malicious release: Malicious code in opencraw (npm) GHSA-6v8f-7cjm-f7f8, MAL-2026-966 | Malicious | Not scored | 20 Feb, 2026 | npm opencraw |
Malicious release: Malicious code in cloude-code (npm) GHSA-8vcq-w335-fh83, MAL-2026-954 | Malicious | Not scored | 20 Feb, 2026 | npm cloude-code |
Malicious release: Malicious code in iru-caches (npm) GHSA-9w7p-hqx2-pjjx, MAL-2026-961 | Malicious | Not scored | 20 Feb, 2026 | npm iru-caches |
Malicious release: Malicious code in cloude (npm) GHSA-fw89-7q74-q5p8, MAL-2026-953 | Malicious | Not scored | 20 Feb, 2026 | npm cloude |