Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in researchpoc (PyPI) MAL-2026-504 | Malicious | Not scored | 25 Jan, 2026 | PyPI researchpoc |
Malicious release: Malicious code in system-integration-toxi (PyPI) MAL-2026-501 | Malicious | Not scored | 25 Jan, 2026 | PyPI system-integration-toxi |
Malicious release: Malicious code in test-poc-package-for-session (PyPI) MAL-2026-502 | Malicious | Not scored | 25 Jan, 2026 | PyPI test-poc-package-for-session |
Malicious release: Malicious code in test-poc-package-for-session-2 (PyPI) MAL-2026-503 | Malicious | Not scored | 25 Jan, 2026 | PyPI test-poc-package-for-session-2 |
Malicious release: Malicious code in zabittest11 (npm) MAL-2026-500 | Malicious | Not scored | 25 Jan, 2026 | npm zabittest11 |
Malicious release: Malicious code in system-integration (PyPI) MAL-2026-499 | Malicious | Not scored | 25 Jan, 2026 | PyPI system-integration |
Malicious release: Malicious code in instascan-pro (PyPI) MAL-2026-498 | Malicious | Not scored | 24 Jan, 2026 | PyPI instascan-pro |
Malicious release: Malicious code in overstock-jenkins (npm) GHSA-wg22-7286-wgvx, MAL-2026-515 | Malicious | Not scored | 23 Jan, 2026 | npm overstock-jenkins |
Malicious release: Malicious code in overstock-health-express (npm) GHSA-8689-38pm-xg5f, MAL-2026-514 | Malicious | Not scored | 23 Jan, 2026 | npm overstock-health-express |
Malicious release: Malicious code in h-jsencrypt (npm) GHSA-5cc8-j5c8-6wrc, MAL-2026-495 | Malicious | Not scored | 23 Jan, 2026 | npm h-jsencrypt |
Malicious release: Malicious code in eits (npm) GHSA-6pm6-xfgg-f722, MAL-2026-494 | Malicious | Not scored | 23 Jan, 2026 | npm eits |
Malicious release: Malicious code in hemi-btc-staking-actions (npm) GHSA-96cq-3x5w-5fr2, MAL-2026-496 | Malicious | Not scored | 23 Jan, 2026 | npm hemi-btc-staking-actions |
Malicious release: Malicious code in test-on-other (npm) MAL-2026-497 | Malicious | Not scored | 23 Jan, 2026 | npm test-on-other |
Malicious release: Malicious code in oxnoxon (npm) GHSA-3qj6-c6x2-w2w6, MAL-2026-493 | Malicious | Not scored | 23 Jan, 2026 | npm oxnoxon |
Malicious release: Malicious code in tableates (PyPI) MAL-2026-492 | Malicious | Not scored | 23 Jan, 2026 | PyPI tableates |
Malicious release: Malicious code in test-on-other-again (npm) MAL-2026-491 | Malicious | Not scored | 23 Jan, 2026 | npm test-on-other-again |
Malicious release: Malicious code in tabletes (PyPI) MAL-2026-490 | Malicious | Not scored | 23 Jan, 2026 | PyPI tabletes |
Malicious release: Malicious code in rank4222wun (npm) GHSA-3phq-qxp9-55pv, MAL-2026-489 | Malicious | Not scored | 23 Jan, 2026 | npm rank4222wun |
Malicious release: Malicious code in a5xm (npm) GHSA-8v27-jw75-7v3c, MAL-2026-486 | Malicious | Not scored | 23 Jan, 2026 | npm a5xm |
Malicious release: Malicious code in ntwsc (npm) GHSA-g39p-gprj-c37g, MAL-2026-487 | Malicious | Not scored | 23 Jan, 2026 | npm ntwsc |
Malicious release: Malicious code in ntwsx (npm) GHSA-qqcc-7qrm-mf75, MAL-2026-488 | Malicious | Not scored | 23 Jan, 2026 | npm ntwsx |
Malicious release: Malicious code in a4wu (npm) GHSA-q3gw-cjjf-gqq5, MAL-2026-485 | Malicious | Not scored | 23 Jan, 2026 | npm a4wu |
Malicious release: Malicious code in kwp-shared-components-production-system (npm) GHSA-5rrx-w333-h86q, MAL-2026-480 | Malicious | Not scored | 23 Jan, 2026 | npm kwp-shared-components-production-system |
Malicious release: Malicious code in translation-note (npm) GHSA-7888-g6c7-rm6g, MAL-2026-484 | Malicious | Not scored | 23 Jan, 2026 | npm translation-note |
Malicious release: Malicious code in @acqui-calm-library/acqui-hero-carousel-section (npm) MAL-2026-471 | Malicious | Not scored | 23 Jan, 2026 | npm @acqui-calm-library/acqui-hero-carousel-section |
Malicious release: Malicious code in @landing-platform/data-bridge (npm) MAL-2026-472 | Malicious | Not scored | 23 Jan, 2026 | npm @landing-platform/data-bridge |
Malicious release: Malicious code in @transaction-list/transaction-list-lg (npm) MAL-2026-473 | Malicious | Not scored | 23 Jan, 2026 | npm @transaction-list/transaction-list-lg |
Malicious release: Malicious code in @transaction-list/transaction-list-md (npm) MAL-2026-474 | Malicious | Not scored | 23 Jan, 2026 | npm @transaction-list/transaction-list-md |
Malicious release: Malicious code in @transaction-list/transaction-list-sm (npm) MAL-2026-475 | Malicious | Not scored | 23 Jan, 2026 | npm @transaction-list/transaction-list-sm |
Malicious release: Malicious code in @transaction-list/transaction-list-xs (npm) MAL-2026-476 | Malicious | Not scored | 23 Jan, 2026 | npm @transaction-list/transaction-list-xs |
Malicious release: Malicious code in bttr-devs (npm) MAL-2026-477 | Malicious | Not scored | 23 Jan, 2026 | npm bttr-devs |
Malicious release: Malicious code in domino-elements (npm) MAL-2026-478 | Malicious | Not scored | 23 Jan, 2026 | npm domino-elements |
Malicious release: Malicious code in integromat-ui (npm) MAL-2026-479 | Malicious | Not scored | 23 Jan, 2026 | npm integromat-ui |
Malicious release: Malicious code in oasis-os-provider-messaging (npm) MAL-2026-481 | Malicious | Not scored | 23 Jan, 2026 | npm oasis-os-provider-messaging |
Malicious release: Malicious code in public-site-boostmoney-ui (npm) MAL-2026-482 | Malicious | Not scored | 23 Jan, 2026 | npm public-site-boostmoney-ui |
Malicious release: Malicious code in public-site-cms-ui (npm) MAL-2026-483 | Malicious | Not scored | 23 Jan, 2026 | npm public-site-cms-ui |
Malicious release: Malicious code in urlsssser (PyPI) MAL-2026-470 | Malicious | Not scored | 22 Jan, 2026 | PyPI urlsssser |
Malicious release: Malicious code in cflashfiles (PyPI) MAL-2026-469 | Malicious | Not scored | 22 Jan, 2026 | PyPI cflashfiles |
Malicious release: Malicious code in urlsser (PyPI) MAL-2026-468 | Malicious | Not scored | 22 Jan, 2026 | PyPI urlsser |
Malicious release: Malicious code in uuu8lgd (npm) MAL-2026-466 | Malicious | Not scored | 22 Jan, 2026 | npm uuu8lgd |
Malicious release: Malicious code in icloud-recovery (PyPI) MAL-2026-467 | Malicious | Not scored | 22 Jan, 2026 | PyPI icloud-recovery |
Malicious release: Malicious code in @ikeacn/utils (npm) GHSA-8hww-h75w-hmhr, MAL-2026-465 | Malicious | Not scored | 22 Jan, 2026 | npm @ikeacn/utils |
Malicious release: Malicious code in @ikeacn/icons (npm) GHSA-f867-45wh-g5pw, MAL-2026-464 | Malicious | Not scored | 22 Jan, 2026 | npm @ikeacn/icons |
Malicious release: Malicious code in @corp-front/corporate-filter-company-select (npm) MAL-2026-461 | Malicious | Not scored | 22 Jan, 2026 | npm @corp-front/corporate-filter-company-select |
Malicious release: Malicious code in @ikeacn/ui (npm) GHSA-f6r6-w68v-687q, MAL-2026-462 | Malicious | Not scored | 22 Jan, 2026 | npm @ikeacn/ui |
Malicious release: Malicious code in corporate-blocking (npm) MAL-2026-463 | Malicious | Not scored | 22 Jan, 2026 | npm corporate-blocking |
Malicious release: Malicious code in pay-by-bank-dashboard-server (npm) GHSA-chxm-rhfj-8x2f, MAL-2026-460 | Malicious | Not scored | 22 Jan, 2026 | npm pay-by-bank-dashboard-server |
Malicious release: Malicious code in un112 (npm) MAL-2026-459 | Malicious | Not scored | 22 Jan, 2026 | npm un112 |
Malicious release: Malicious code in @mailpoet/eslint-config (npm) GHSA-2c25-xv7m-4cp8, MAL-2026-456 | Malicious | Not scored | 22 Jan, 2026 | npm @mailpoet/eslint-config |
Malicious release: Malicious code in @mailpoet/components (npm) GHSA-6qjh-33jg-r2wf, MAL-2026-455 | Malicious | Not scored | 22 Jan, 2026 | npm @mailpoet/components |