Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in jshint-groups (npm) GHSA-f2cq-h2rx-cjw6, MAL-2026-656 | Malicious | Not scored | 03 Feb, 2026 | npm jshint-groups |
Malicious release: Malicious code in pipeline-poision-test (PyPI) MAL-2026-655 | Malicious | Not scored | 02 Feb, 2026 | PyPI pipeline-poision-test |
Malicious release: Malicious code in cat-admin-tool (PyPI) MAL-2026-651 | Malicious | Not scored | 02 Feb, 2026 | PyPI cat-admin-tool |
Malicious release: Malicious code in chia-pool-reference (PyPI) MAL-2026-652 | Malicious | Not scored | 02 Feb, 2026 | PyPI chia-pool-reference |
Malicious release: Malicious code in credit-decision-metrics (PyPI) MAL-2026-653 | Malicious | Not scored | 02 Feb, 2026 | PyPI credit-decision-metrics |
Malicious release: Malicious code in zabitog (PyPI) MAL-2026-654 | Malicious | Not scored | 02 Feb, 2026 | PyPI zabitog |
Malicious release: Malicious code in tableapy (PyPI) MAL-2026-650 | Malicious | Not scored | 02 Feb, 2026 | PyPI tableapy |
Malicious release: Malicious code in callapirequests (PyPI) MAL-2026-649 | Malicious | Not scored | 02 Feb, 2026 | PyPI callapirequests |
Malicious release: Malicious code in picking-miniapp (npm) GHSA-8fp4-7xff-mpwm, MAL-2026-646 | Malicious | Not scored | 02 Feb, 2026 | npm picking-miniapp |
Malicious release: Malicious code in react-native-expofp (npm) GHSA-326q-pfrf-3f2v, MAL-2026-647 | Malicious | Not scored | 02 Feb, 2026 | npm react-native-expofp |
Malicious release: Malicious code in dise-pkt (npm) GHSA-jgcj-pm32-hmcj, MAL-2026-644 | Malicious | Not scored | 02 Feb, 2026 | npm dise-pkt |
Malicious release: Malicious code in @hemanshu_patil/xcode (npm) GHSA-7jjv-6pgj-6rv7, MAL-2026-642 | Malicious | Not scored | 02 Feb, 2026 | npm @hemanshu_patil/xcode |
Malicious release: Malicious code in @hemanshu_patil/xcode-windows-x64 (npm) GHSA-p6w8-c7rw-69c8, MAL-2026-643 | Malicious | Not scored | 02 Feb, 2026 | npm @hemanshu_patil/xcode-windows-x64 |
Malicious release: Malicious code in yazxzpedia (npm) GHSA-765g-mfj4-v8fw, MAL-2026-648 | Malicious | Not scored | 02 Feb, 2026 | npm yazxzpedia |
Malicious release: Malicious code in libsignal-yazxzpedia (npm) GHSA-vxf9-w3qp-wrwm, MAL-2026-645 | Malicious | Not scored | 02 Feb, 2026 | npm libsignal-yazxzpedia |
Malicious release: Malicious code in connections-api-requests (PyPI) MAL-2026-641 | Malicious | Not scored | 02 Feb, 2026 | PyPI connections-api-requests |
Malicious release: Malicious code in connections-api-request (PyPI) MAL-2026-640 | Malicious | Not scored | 02 Feb, 2026 | PyPI connections-api-request |
Malicious release: Malicious code in connection-api-requests (PyPI) MAL-2026-639 | Malicious | Not scored | 02 Feb, 2026 | PyPI connection-api-requests |
Malicious release: Malicious code in idv-script (npm) GHSA-2pq9-mrgm-gmmx, MAL-2026-636 | Malicious | Not scored | 02 Feb, 2026 | npm idv-script |
Malicious release: Malicious code in launchdarkly-cpp-networking (npm) GHSA-6pxm-pv2w-jh33, MAL-2026-637 | Malicious | Not scored | 02 Feb, 2026 | npm launchdarkly-cpp-networking |
Malicious release: Malicious code in solhint-plugin-hyperlane (npm) GHSA-mp62-7w25-x8jm, MAL-2026-638 | Malicious | Not scored | 02 Feb, 2026 | npm solhint-plugin-hyperlane |
Malicious release: Malicious code in eslint-config-minecraft-scripting (npm) GHSA-rh9x-2vc7-83hh, MAL-2026-634 | Malicious | Not scored | 02 Feb, 2026 | npm eslint-config-minecraft-scripting |
Malicious release: Malicious code in @casaverso/frontend-core (npm) GHSA-x9r9-7gv6-vrfh, MAL-2026-628 | Malicious | Not scored | 02 Feb, 2026 | npm @casaverso/frontend-core |
Malicious release: Malicious code in client-desktop-web-installer (npm) MAL-2026-629 | Malicious | Not scored | 02 Feb, 2026 | npm client-desktop-web-installer |
Malicious release: Malicious code in cowsay-allcaps (npm) MAL-2026-630 | Malicious | Not scored | 02 Feb, 2026 | npm cowsay-allcaps |
Malicious release: Malicious code in cowsay-caps (npm) MAL-2026-631 | Malicious | Not scored | 02 Feb, 2026 | npm cowsay-caps |
Malicious release: Malicious code in cowsay-deluxe (npm) MAL-2026-632 | Malicious | Not scored | 02 Feb, 2026 | npm cowsay-deluxe |
Malicious release: Malicious code in cowsay-fancy (npm) MAL-2026-633 | Malicious | Not scored | 02 Feb, 2026 | npm cowsay-fancy |
Malicious release: Malicious code in finnairshop (npm) MAL-2026-635 | Malicious | Not scored | 02 Feb, 2026 | npm finnairshop |
Malicious release: Malicious code in hangimani (PyPI) MAL-2026-625 | Malicious | Not scored | 02 Feb, 2026 | PyPI hangimani |
Malicious release: Malicious code in hultine (PyPI) MAL-2026-624 | Malicious | Not scored | 01 Feb, 2026 | PyPI hultine |
Malicious release: Malicious code in base-local-planner (PyPI) MAL-2026-621 | Malicious | Not scored | 01 Feb, 2026 | PyPI base-local-planner |
Malicious release: Malicious code in marshl (PyPI) MAL-2026-623 | Malicious | Not scored | 01 Feb, 2026 | PyPI marshl |
Malicious release: Malicious code in genvia-utils (PyPI) MAL-2026-622 | Malicious | Not scored | 01 Feb, 2026 | PyPI genvia-utils |
Malicious release: Malicious code in colorss (PyPI) MAL-2026-619 | Malicious | Not scored | 01 Feb, 2026 | PyPI colorss |
Malicious release: Malicious code in wandb-widget (PyPI) MAL-2026-620 | Malicious | Not scored | 01 Feb, 2026 | PyPI wandb-widget |
Malicious release: Malicious code in learning-curve-projects (PyPI) MAL-2026-618 | Malicious | Not scored | 31 Jan, 2026 | PyPI learning-curve-projects |
Malicious release: Malicious code in roots-cms-client (npm) GHSA-q57g-x3rh-xj4x, MAL-2026-617 | Malicious | Not scored | 31 Jan, 2026 | npm roots-cms-client |
Malicious release: Malicious code in c11dff444 (npm) GHSA-cpcr-74hm-pg3c, MAL-2026-616 | Malicious | Not scored | 31 Jan, 2026 | npm c11dff444 |
Malicious release: Malicious code in teaser-nav (npm) MAL-2026-615 | Malicious | Not scored | 31 Jan, 2026 | npm teaser-nav |
Malicious release: Malicious code in mkdocs-dataopslive (PyPI) MAL-2026-614 | Malicious | Not scored | 31 Jan, 2026 | PyPI mkdocs-dataopslive |
Malicious release: Malicious code in sharedclasses (npm) MAL-2026-612 | Malicious | Not scored | 30 Jan, 2026 | npm sharedclasses |
Malicious release: Malicious code in fastpi (PyPI) MAL-2026-613 | Malicious | Not scored | 30 Jan, 2026 | PyPI fastpi |
Malicious release: Malicious code in mbo-letters-cl (npm) MAL-2026-611 | Malicious | Not scored | 30 Jan, 2026 | npm mbo-letters-cl |
Malicious release: Malicious code in snapshot-date (PyPI) MAL-2026-610 | Malicious | Not scored | 30 Jan, 2026 | PyPI snapshot-date |
Malicious release: Malicious code in euskalplantxa (npm) MAL-2026-609 | Malicious | Not scored | 30 Jan, 2026 | npm euskalplantxa |
Malicious release: Malicious code in ezviz-shop-mall (npm) MAL-2026-608 | Malicious | Not scored | 30 Jan, 2026 | npm ezviz-shop-mall |
Malicious release: Malicious code in banquet-runtime-modules (npm) GHSA-2mrq-r658-h2pp, MAL-2026-607 | Malicious | Not scored | 30 Jan, 2026 | npm banquet-runtime-modules |
Malicious release: Malicious code in userver-requires-at-least-python-3-10 (PyPI) MAL-2026-606 | Malicious | Not scored | 30 Jan, 2026 | PyPI userver-requires-at-least-python-3-10 |
Malicious release: Malicious code in dhgshop (npm) MAL-2026-605 | Malicious | Not scored | 29 Jan, 2026 | npm dhgshop |