Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in chai-await (npm) GHSA-cg22-2f58-35xj, MAL-2026-852 | Malicious | Not scored | 11 Feb, 2026 | npm chai-await |
Malicious release: Malicious code in python-files-mod (PyPI) MAL-2026-851 | Malicious | Not scored | 11 Feb, 2026 | PyPI python-files-mod |
Malicious release: Malicious code in ci-metadata-python-logging (PyPI) MAL-2024-12374 | Malicious | Not scored | 11 Feb, 2026 | PyPI ci-metadata-python-logging |
Malicious release: Malicious code in tablixs (PyPI) MAL-2025-193013 | Malicious | Not scored | 11 Feb, 2026 | PyPI tablixs |
Malicious release: Malicious code in ntoctfutils (PyPI) MAL-2026-850 | Malicious | Not scored | 11 Feb, 2026 | PyPI ntoctfutils |
Malicious release: Malicious code in jsonconfig-utils (PyPI) MAL-2026-849 | Malicious | Not scored | 11 Feb, 2026 | PyPI jsonconfig-utils |
Malicious release: Malicious code in npm_cimetadata (npm) MAL-2026-848 | Malicious | Not scored | 11 Feb, 2026 | npm npm_cimetadata |
Malicious release: Malicious code in cryptowallethash (PyPI) MAL-2026-846 | Malicious | Not scored | 10 Feb, 2026 | PyPI cryptowallethash |
Malicious release: Malicious code in requests-auth-toolkit (PyPI) MAL-2026-847 | Malicious | Not scored | 10 Feb, 2026 | PyPI requests-auth-toolkit |
Malicious release: Malicious code in gpu-discovery (PyPI) MAL-2024-12373 | Malicious | Not scored | 10 Feb, 2026 | PyPI gpu-discovery |
Malicious release: Malicious code in rzr-home (PyPI) MAL-2026-845 | Malicious | Not scored | 10 Feb, 2026 | PyPI rzr-home |
Malicious release: Malicious code in amplify-python-logging (PyPI) MAL-2026-842 | Malicious | Not scored | 10 Feb, 2026 | PyPI amplify-python-logging |
Malicious release: Malicious code in vllm-plugins (PyPI) MAL-2026-844 | Malicious | Not scored | 10 Feb, 2026 | PyPI vllm-plugins |
Malicious release: Malicious code in requests-core-plugin (PyPI) MAL-2026-843 | Malicious | Not scored | 10 Feb, 2026 | PyPI requests-core-plugin |
Malicious release: Malicious code in lyroxpy (PyPI) MAL-2026-841 | Malicious | Not scored | 10 Feb, 2026 | PyPI lyroxpy |
Malicious release: Malicious code in search-newfrontier-podlet (npm) MAL-2026-839 | Malicious | Not scored | 10 Feb, 2026 | npm search-newfrontier-podlet |
Malicious release: Malicious code in notification-saved-search-settings-podlet (npm) MAL-2026-837 | Malicious | Not scored | 10 Feb, 2026 | npm notification-saved-search-settings-podlet |
Malicious release: Malicious code in search-savedsearch-podlet (npm) MAL-2026-840 | Malicious | Not scored | 10 Feb, 2026 | npm search-savedsearch-podlet |
Malicious release: Malicious code in myads-layout (npm) MAL-2026-836 | Malicious | Not scored | 10 Feb, 2026 | npm myads-layout |
Malicious release: Malicious code in realestate-atlas (npm) MAL-2026-838 | Malicious | Not scored | 10 Feb, 2026 | npm realestate-atlas |
Malicious release: Malicious code in @reimorg/config (npm) GHSA-3x6g-grxh-c84v, MAL-2026-828 | Malicious | Not scored | 10 Feb, 2026 | npm @reimorg/config |
Malicious release: Malicious code in @uniconvex/dotenv (npm) GHSA-5hc6-4g5j-c3q2, MAL-2026-829 | Malicious | Not scored | 10 Feb, 2026 | npm @uniconvex/dotenv |
Malicious release: Malicious code in express-configer (npm) GHSA-69cq-35c9-qwg9, MAL-2026-833 | Malicious | Not scored | 10 Feb, 2026 | npm express-configer |
Malicious release: Malicious code in aligners (npm) GHSA-fmr8-mpjc-h8rg, MAL-2026-830 | Malicious | Not scored | 10 Feb, 2026 | npm aligners |
Malicious release: Malicious code in sap-code-style-guides (npm) GHSA-6pjr-w5hp-m7pj, MAL-2026-835 | Malicious | Not scored | 10 Feb, 2026 | npm sap-code-style-guides |
Malicious release: Malicious code in chai-as-approved (npm) GHSA-8j3c-w8c2-jpfr, MAL-2026-832 | Malicious | Not scored | 10 Feb, 2026 | npm chai-as-approved |
Malicious release: Malicious code in bigmathix (npm) GHSA-fvcx-rrjg-gr82, MAL-2026-831 | Malicious | Not scored | 10 Feb, 2026 | npm bigmathix |
Malicious release: Malicious code in graphflowx (npm) GHSA-8jpg-855v-mh37, MAL-2026-834 | Malicious | Not scored | 10 Feb, 2026 | npm graphflowx |
Malicious release: Malicious code in narrow-array (npm) GHSA-6cq7-pjjx-42h3, MAL-2026-827 | Malicious | Not scored | 10 Feb, 2026 | npm narrow-array |
Malicious release: Malicious code in testppe-pkg (PyPI) MAL-2026-826 | Malicious | Not scored | 10 Feb, 2026 | PyPI testppe-pkg |
Malicious release: Malicious code in dev-pipline-test (PyPI) MAL-2026-824 | Malicious | Not scored | 10 Feb, 2026 | PyPI dev-pipline-test |
Malicious release: Malicious code in devtools-webhook-cicd-utils (PyPI) MAL-2026-825 | Malicious | Not scored | 10 Feb, 2026 | PyPI devtools-webhook-cicd-utils |
Malicious release: Malicious code in ntoutils (PyPI) MAL-2026-823 | Malicious | Not scored | 10 Feb, 2026 | PyPI ntoutils |
Malicious release: Malicious code in jwtdotenv (npm) GHSA-8mjx-w3ff-mv8m, MAL-2026-821 | Malicious | Not scored | 09 Feb, 2026 | npm jwtdotenv |
Malicious release: Malicious code in json-web-sources (npm) GHSA-7r6g-f9q3-q5fg, MAL-2026-820 | Malicious | Not scored | 09 Feb, 2026 | npm json-web-sources |
Malicious release: Malicious code in json-mapping-sources (npm) GHSA-vphr-h9xh-66ff, MAL-2026-819 | Malicious | Not scored | 09 Feb, 2026 | npm json-mapping-sources |
Malicious release: Malicious code in react-svg-handler (npm) GHSA-qjpf-p69c-m582, MAL-2026-822 | Malicious | Not scored | 09 Feb, 2026 | npm react-svg-handler |
Malicious release: Malicious code in thecorrectjames (PyPI) MAL-2026-818 | Malicious | Not scored | 09 Feb, 2026 | PyPI thecorrectjames |
Malicious release: Malicious code in ctf-pipline-test (PyPI) MAL-2026-817 | Malicious | Not scored | 09 Feb, 2026 | PyPI ctf-pipline-test |
Malicious release: Malicious code in @skyeng/libs (npm) GHSA-97cm-4mhj-hmf7, MAL-2026-816 | Malicious | Not scored | 09 Feb, 2026 | npm @skyeng/libs |
Malicious release: Malicious code in http-notifier-test (PyPI) MAL-2026-814 | Malicious | Not scored | 09 Feb, 2026 | PyPI http-notifier-test |
Malicious release: Malicious code in skydeo (PyPI) MAL-2026-815 | Malicious | Not scored | 09 Feb, 2026 | PyPI skydeo |
Malicious release: Malicious code in teligram (PyPI) MAL-2026-813 | Malicious | Not scored | 08 Feb, 2026 | PyPI teligram |
Malicious release: Malicious code in hardixx-code (PyPI) MAL-2026-812 | Malicious | Not scored | 08 Feb, 2026 | PyPI hardixx-code |
Malicious release: Malicious code in grokwrapper (PyPI) MAL-2026-811 | Malicious | Not scored | 08 Feb, 2026 | PyPI grokwrapper |
Malicious release: Malicious code in ccxt-bullish (PyPI) MAL-2026-809 | Malicious | Not scored | 08 Feb, 2026 | PyPI ccxt-bullish |
Malicious release: Malicious code in thread-pipeline-test (PyPI) MAL-2026-810 | Malicious | Not scored | 08 Feb, 2026 | PyPI thread-pipeline-test |
Malicious release: Malicious code in carcent (PyPI) MAL-2026-808 | Malicious | Not scored | 06 Feb, 2026 | PyPI carcent |
Malicious release: Malicious code in web3-sinon (npm) GHSA-24w6-mgww-45jc, MAL-2026-807 | Malicious | Not scored | 06 Feb, 2026 | npm web3-sinon |
Malicious release: Malicious code in web3-chain-sinon (npm) GHSA-jq52-9634-mx8p, MAL-2026-806 | Malicious | Not scored | 06 Feb, 2026 | npm web3-chain-sinon |