Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in dzuseragents (PyPI) MAL-2026-899 | Malicious | Not scored | 14 Feb, 2026 | PyPI dzuseragents |
Malicious release: Malicious code in langraph (PyPI) MAL-2024-12375 | Malicious | Not scored | 14 Feb, 2026 | PyPI langraph |
Malicious release: Malicious code in magicwolf (PyPI) MAL-2026-898 | Malicious | Not scored | 14 Feb, 2026 | PyPI magicwolf |
Malicious release: Malicious code in clawdest (PyPI) MAL-2026-897 | Malicious | Not scored | 13 Feb, 2026 | PyPI clawdest |
Malicious release: Malicious code in sinon-web3-chain (npm) GHSA-r5gp-3j8c-8rpr, MAL-2026-896 | Malicious | Not scored | 13 Feb, 2026 | npm sinon-web3-chain |
Malicious release: Malicious code in json-mapping-src (npm) GHSA-vc3m-m5cg-4h7m, MAL-2026-895 | Malicious | Not scored | 13 Feb, 2026 | npm json-mapping-src |
Malicious release: Malicious code in troncloud (PyPI) MAL-2026-894 | Malicious | Not scored | 13 Feb, 2026 | PyPI troncloud |
Malicious release: Malicious code in contosoapp (npm) GHSA-67mx-f364-8rpr, MAL-2026-881 | Malicious | Not scored | 13 Feb, 2026 | npm contosoapp |
Malicious release: Malicious code in responsible-ai (npm) GHSA-6rqj-6g7j-8mgh, MAL-2026-890 | Malicious | Not scored | 13 Feb, 2026 | npm responsible-ai |
Malicious release: Malicious code in codexworld (npm) GHSA-fpff-jvx6-7wxw, MAL-2026-879 | Malicious | Not scored | 13 Feb, 2026 | npm codexworld |
Malicious release: Malicious code in responses-starter-app (npm) GHSA-2gw2-3gjc-c357, MAL-2026-889 | Malicious | Not scored | 13 Feb, 2026 | npm responses-starter-app |
Malicious release: Malicious code in pyrefly (npm) GHSA-2mj4-8c65-f5p4, MAL-2026-887 | Malicious | Not scored | 13 Feb, 2026 | npm pyrefly |
Malicious release: Malicious code in pyright-root (npm) GHSA-j4q3-7f72-hm94, MAL-2026-888 | Malicious | Not scored | 13 Feb, 2026 | npm pyright-root |
Malicious release: Malicious code in ecosystem_ui (npm) GHSA-rfm3-w7v3-89mx, MAL-2026-883 | Malicious | Not scored | 13 Feb, 2026 | npm ecosystem_ui |
Malicious release: Malicious code in open-answer-engine-frontend (npm) GHSA-vwq3-gg4r-gq8g, MAL-2026-886 | Malicious | Not scored | 13 Feb, 2026 | npm open-answer-engine-frontend |
Malicious release: Malicious code in hxz-protection (npm) GHSA-r49f-jwqc-c4pr, MAL-2026-884 | Malicious | Not scored | 13 Feb, 2026 | npm hxz-protection |
Malicious release: Malicious code in wropz-6module (npm) GHSA-m2hg-26pv-w27r, MAL-2026-891 | Malicious | Not scored | 13 Feb, 2026 | npm wropz-6module |
Malicious release: Malicious code in wropz-module (npm) GHSA-8vvw-57pj-xxfv, MAL-2026-892 | Malicious | Not scored | 13 Feb, 2026 | npm wropz-module |
Malicious release: Malicious code in metadata-stripper (npm) GHSA-8r3c-vhmx-vmwr, MAL-2026-885 | Malicious | Not scored | 13 Feb, 2026 | npm metadata-stripper |
Malicious release: Malicious code in xsstesting (npm) GHSA-f2r4-9pvw-jg83, MAL-2026-893 | Malicious | Not scored | 13 Feb, 2026 | npm xsstesting |
Malicious release: Malicious code in console-style-pro0o0o0o (npm) GHSA-r4v3-x2p5-xc5v, MAL-2026-880 | Malicious | Not scored | 13 Feb, 2026 | npm console-style-pro0o0o0o |
Malicious release: Malicious code in despicable-me (npm) GHSA-w8vg-4rq2-wh29, MAL-2026-882 | Malicious | Not scored | 13 Feb, 2026 | npm despicable-me |
Malicious release: Malicious code in magichat (PyPI) MAL-2026-878 | Malicious | Not scored | 13 Feb, 2026 | PyPI magichat |
Malicious release: Malicious code in displaydoc (PyPI) MAL-2026-875 | Malicious | Not scored | 13 Feb, 2026 | PyPI displaydoc |
Malicious release: Malicious code in acpi-tables (PyPI) MAL-2026-876 | Malicious | Not scored | 13 Feb, 2026 | PyPI acpi-tables |
Malicious release: Malicious code in arrayvec (PyPI) MAL-2026-877 | Malicious | Not scored | 13 Feb, 2026 | PyPI arrayvec |
Malicious release: Malicious code in google-search-result (PyPI) MAL-2026-874 | Malicious | Not scored | 12 Feb, 2026 | PyPI google-search-result |
Malicious release: Malicious code in @depro0x/despicable-me (npm) MAL-2026-873 | Malicious | Not scored | 12 Feb, 2026 | npm @depro0x/despicable-me |
Malicious release: Malicious code in stylelint-recommended (npm) GHSA-prwr-p62p-3qr2, MAL-2026-872 | Malicious | Not scored | 12 Feb, 2026 | npm stylelint-recommended |
Malicious release: Malicious code in envoy1 (npm) GHSA-f4fg-xj6v-j6r8, MAL-2026-871 | Malicious | Not scored | 12 Feb, 2026 | npm envoy1 |
Malicious release: Malicious code in ether-lint (npm) GHSA-9p23-x4p4-m392, MAL-2026-941 | Malicious | Not scored | 12 Feb, 2026 | npm ether-lint |
Malicious release: Malicious code in b10connoisseur (PyPI) MAL-2026-870 | Malicious | Not scored | 12 Feb, 2026 | PyPI b10connoisseur |
Malicious release: Malicious code in ritch (PyPI) MAL-2026-869 | Malicious | Not scored | 12 Feb, 2026 | PyPI ritch |
Malicious release: Malicious code in oraceldb (PyPI) MAL-2026-866 | Malicious | Not scored | 12 Feb, 2026 | PyPI oraceldb |
Malicious release: Malicious code in krbutils (PyPI) MAL-2026-863 | Malicious | Not scored | 12 Feb, 2026 | PyPI krbutils |
Malicious release: Malicious code in pydantics (PyPI) MAL-2026-868 | Malicious | Not scored | 12 Feb, 2026 | PyPI pydantics |
Malicious release: Malicious code in pandaai (PyPI) MAL-2026-867 | Malicious | Not scored | 12 Feb, 2026 | PyPI pandaai |
Malicious release: Malicious code in opentelematry-api (PyPI) MAL-2026-865 | Malicious | Not scored | 12 Feb, 2026 | PyPI opentelematry-api |
Malicious release: Malicious code in marshmellow (PyPI) MAL-2026-864 | Malicious | Not scored | 12 Feb, 2026 | PyPI marshmellow |
Malicious release: Malicious code in lala6992 (PyPI) MAL-2026-946 | Malicious | Not scored | 12 Feb, 2026 | PyPI lala6992 |
Malicious release: Malicious code in get-incorrect-name-bob (PyPI) MAL-2026-862 | Malicious | Not scored | 12 Feb, 2026 | PyPI get-incorrect-name-bob |
Malicious release: Malicious code in express-gueues (npm) GHSA-x2xw-8qjm-mcvr, MAL-2026-861 | Malicious | Not scored | 11 Feb, 2026 | npm express-gueues |
Malicious release: Malicious code in osopackagepy (PyPI) MAL-2026-860 | Malicious | Not scored | 11 Feb, 2026 | PyPI osopackagepy |
Malicious release: Malicious code in systemtest-network (npm) GHSA-2cmj-2pj3-9369, MAL-2026-859 | Malicious | Not scored | 11 Feb, 2026 | npm systemtest-network |
Malicious release: Malicious code in osopackage (npm) GHSA-hc86-54fq-c4mf, MAL-2026-857 | Malicious | Not scored | 11 Feb, 2026 | npm osopackage |
Malicious release: Malicious code in systemtest-information (npm) GHSA-j464-mvwq-jr58, MAL-2026-858 | Malicious | Not scored | 11 Feb, 2026 | npm systemtest-information |
Malicious release: Malicious code in chai-prop (npm) GHSA-4p6w-3gcj-crr5, MAL-2026-856 | Malicious | Not scored | 11 Feb, 2026 | npm chai-prop |
Malicious release: Malicious code in config-toolkit (PyPI) MAL-2026-855 | Malicious | Not scored | 11 Feb, 2026 | PyPI config-toolkit |
Malicious release: Malicious code in node-dotenv-cli (npm) GHSA-46v6-58g3-h5qh, MAL-2026-853 | Malicious | Not scored | 11 Feb, 2026 | npm node-dotenv-cli |
Malicious release: Malicious code in sinon-node (npm) GHSA-777h-658h-v2g3, MAL-2026-854 | Malicious | Not scored | 11 Feb, 2026 | npm sinon-node |