Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in iruchache (npm) GHSA-m47j-9qfx-6jh4, MAL-2026-962 | Malicious | Not scored | 20 Feb, 2026 | npm iruchache |
Malicious release: Malicious code in claud-code (npm) GHSA-p2wm-2x3h-8gq6, MAL-2026-952 | Malicious | Not scored | 20 Feb, 2026 | npm claud-code |
Malicious release: Malicious code in rubocop-vintedmetrics (RubyGems) GHSA-74p9-vf24-gx2h, MAL-2026-996 | Malicious | Not scored | 20 Feb, 2026 | RubyGems rubocop-vintedmetrics |
Malicious release: Malicious code in printrables (PyPI) MAL-2026-951 | Malicious | Not scored | 20 Feb, 2026 | PyPI printrables |
Malicious release: Malicious code in ethrpc (PyPI) MAL-2026-947 | Malicious | Not scored | 19 Feb, 2026 | PyPI ethrpc |
Malicious release: Malicious code in web3tool (PyPI) MAL-2026-950 | Malicious | Not scored | 19 Feb, 2026 | PyPI web3tool |
Malicious release: Malicious code in ethrpc-accounts (PyPI) MAL-2026-948 | Malicious | Not scored | 19 Feb, 2026 | PyPI ethrpc-accounts |
Malicious release: Malicious code in ethrpc-keys (PyPI) MAL-2026-949 | Malicious | Not scored | 19 Feb, 2026 | PyPI ethrpc-keys |
Malicious release: Unauthorized npm publish of cline@2.3.0 with modified postinstall script GHSA-9ppg-jx86-fqw7, MAL-2026-1380 | MaliciousLow | Not scored | 19 Feb, 2026 | npm cline |
Malicious release: Malicious code in ably-forks (npm) GHSA-px78-22pw-hx3r, MAL-2026-939 | Malicious | Not scored | 19 Feb, 2026 | npm ably-forks |
Malicious release: Malicious code in pylibcugraphops (PyPI) MAL-2026-938 | Malicious | Not scored | 19 Feb, 2026 | PyPI pylibcugraphops |
Malicious release: Malicious code in questpro (PyPI) MAL-2026-936 | Malicious | Not scored | 18 Feb, 2026 | PyPI questpro |
Malicious release: Malicious code in telebot-infee (PyPI) MAL-2026-937 | Malicious | Not scored | 18 Feb, 2026 | PyPI telebot-infee |
Malicious release: Malicious code in ui5-cap-event-app-server (npm) MAL-2026-945 | Malicious | Not scored | 18 Feb, 2026 | npm ui5-cap-event-app-server |
Malicious release: Malicious code in telebot-infoe (PyPI) MAL-2026-934 | Malicious | Not scored | 18 Feb, 2026 | PyPI telebot-infoe |
Malicious release: Malicious code in telebot-infoo (PyPI) MAL-2026-935 | Malicious | Not scored | 18 Feb, 2026 | PyPI telebot-infoo |
Malicious release: Malicious code in abcxyzz (npm) MAL-2026-940 | Malicious | Not scored | 18 Feb, 2026 | npm abcxyzz |
Malicious release: Malicious code in easyreg (PyPI) MAL-2026-932 | Malicious | Not scored | 17 Feb, 2026 | PyPI easyreg |
Malicious release: Malicious code in pywin-simple-gui (PyPI) MAL-2026-933 | Malicious | Not scored | 17 Feb, 2026 | PyPI pywin-simple-gui |
Malicious release: Malicious code in telebot-infe (PyPI) MAL-2026-931 | Malicious | Not scored | 17 Feb, 2026 | PyPI telebot-infe |
Malicious release: Malicious code in telebot-info (PyPI) MAL-2026-930 | Malicious | Not scored | 17 Feb, 2026 | PyPI telebot-info |
Malicious release: Malicious code in vds-monarch (npm) GHSA-w2rp-7fhc-hmrm, MAL-2026-929 | Malicious | Not scored | 17 Feb, 2026 | npm vds-monarch |
Malicious release: Malicious code in realestate-ask (npm) GHSA-cq58-2656-w9f6, MAL-2026-944 | Malicious | Not scored | 17 Feb, 2026 | npm realestate-ask |
Malicious release: Malicious code in polyutil (PyPI) MAL-2026-928 | Malicious | Not scored | 17 Feb, 2026 | PyPI polyutil |
Malicious release: Malicious code in polyclawd (PyPI) MAL-2026-927 | Malicious | Not scored | 16 Feb, 2026 | PyPI polyclawd |
Malicious release: Malicious code in compass-e2e-tests (npm) GHSA-j29q-8q6j-p7rr, MAL-2026-922 | Malicious | Not scored | 16 Feb, 2026 | npm compass-e2e-tests |
Malicious release: Malicious code in cicibot-fix-message-naming (PyPI) MAL-2026-921 | Malicious | Not scored | 16 Feb, 2026 | PyPI cicibot-fix-message-naming |
Malicious release: Malicious code in ambar-src (npm) GHSA-qjgj-mrv7-24f7, MAL-2026-920 | Malicious | Not scored | 16 Feb, 2026 | npm ambar-src |
Malicious release: Malicious code in mds-webcomponents (npm) MAL-2026-919 | Malicious | Not scored | 16 Feb, 2026 | npm mds-webcomponents |
Malicious release: Malicious code in webpack-vite (npm) GHSA-pxqh-3wf7-xg38, MAL-2026-918 | Malicious | Not scored | 16 Feb, 2026 | npm webpack-vite |
Malicious release: Malicious code in aliyun-python-sdk-v2 (PyPI) MAL-2026-917 | Malicious | Not scored | 16 Feb, 2026 | PyPI aliyun-python-sdk-v2 |
Malicious release: Malicious code in alibabacloude (PyPI) MAL-2026-916 | Malicious | Not scored | 16 Feb, 2026 | PyPI alibabacloude |
Malicious release: Malicious code in alibabacloud-code-tool (PyPI) MAL-2026-915 | Malicious | Not scored | 16 Feb, 2026 | PyPI alibabacloud-code-tool |
Malicious release: Malicious code in @qualys/react-web (npm) MAL-2026-914 | Malicious | Not scored | 16 Feb, 2026 | npm @qualys/react-web |
Malicious release: Malicious code in groq-ppe-pkg (PyPI) MAL-2026-913 | Malicious | Not scored | 16 Feb, 2026 | PyPI groq-ppe-pkg |
Malicious release: Malicious code in http-request-toolkit (PyPI) MAL-2026-912 | Malicious | Not scored | 16 Feb, 2026 | PyPI http-request-toolkit |
Malicious release: Malicious code in malpkgv2-0 (PyPI) MAL-2026-911 | Malicious | Not scored | 16 Feb, 2026 | PyPI malpkgv2-0 |
Malicious release: Malicious code in dns-execution-test (PyPI) MAL-2026-910 | Malicious | Not scored | 15 Feb, 2026 | PyPI dns-execution-test |
Malicious release: Malicious code in clawdist (PyPI) MAL-2026-909 | Malicious | Not scored | 15 Feb, 2026 | PyPI clawdist |
Malicious release: Malicious code in ethereums-lint (npm) GHSA-25vw-q3mm-9qg8, MAL-2026-943 | Malicious | Not scored | 15 Feb, 2026 | npm ethereums-lint |
Malicious release: Malicious code in ethereum-lint (npm) GHSA-x56c-5jr9-m265, MAL-2026-942 | Malicious | Not scored | 15 Feb, 2026 | npm ethereum-lint |
Malicious release: Malicious code in hops-preset-jest (npm) GHSA-hgp2-cp4x-f69q, MAL-2026-908 | Malicious | Not scored | 15 Feb, 2026 | npm hops-preset-jest |
Malicious release: Malicious code in tronpad (PyPI) MAL-2026-907 | Malicious | Not scored | 15 Feb, 2026 | PyPI tronpad |
Malicious release: Malicious code in cucumber_json_schema (RubyGems) GHSA-mg5m-qmr9-mphv, MAL-2026-906 | Malicious | Not scored | 15 Feb, 2026 | RubyGems cucumber_json_schema |
Malicious release: Malicious code in marshmellows (PyPI) MAL-2026-905 | Malicious | Not scored | 15 Feb, 2026 | PyPI marshmellows |
Malicious release: Malicious code in strands-agents-anthropic (PyPI) MAL-2026-904 | Malicious | Not scored | 15 Feb, 2026 | PyPI strands-agents-anthropic |
Malicious release: Malicious code in requests-toolkit (PyPI) MAL-2026-903 | Malicious | Not scored | 15 Feb, 2026 | PyPI requests-toolkit |
Malicious release: Malicious code in crc32fast (PyPI) MAL-2026-902 | Malicious | Not scored | 14 Feb, 2026 | PyPI crc32fast |
Malicious release: Malicious code in cubaflixdownload (PyPI) MAL-2026-900 | Malicious | Not scored | 14 Feb, 2026 | PyPI cubaflixdownload |
Malicious release: Malicious code in platforms (PyPI) MAL-2026-901 | Malicious | Not scored | 14 Feb, 2026 | PyPI platforms |