Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in auto-backup-wsl (PyPI) MAL-2026-926 | Malicious | Not scored | 05 Jan, 2026 | PyPI auto-backup-wsl |
Malicious release: Malicious code in auto-backup-wins (PyPI) MAL-2026-925 | Malicious | Not scored | 05 Jan, 2026 | PyPI auto-backup-wins |
Malicious release: Malicious code in react-transition-group-legacy (npm) MAL-2026-57 | Malicious | Not scored | 05 Jan, 2026 | npm react-transition-group-legacy |
Malicious release: Malicious code in @crepo/crepo-url-query-mapper (npm) MAL-2026-56 | Malicious | Not scored | 05 Jan, 2026 | npm @crepo/crepo-url-query-mapper |
Malicious release: Malicious code in lium-io-gztensor (PyPI) MAL-2026-55 | Malicious | Not scored | 05 Jan, 2026 | PyPI lium-io-gztensor |
Malicious release: Malicious code in lium-4-96 (PyPI) MAL-2026-54 | Malicious | Not scored | 05 Jan, 2026 | PyPI lium-4-96 |
Malicious release: Malicious code in async-substrate-interface-upgrade (PyPI) MAL-2026-51 | Malicious | Not scored | 05 Jan, 2026 | PyPI async-substrate-interface-upgrade |
Malicious release: Malicious code in celium-collateral-upgrade (PyPI) MAL-2026-52 | Malicious | Not scored | 05 Jan, 2026 | PyPI celium-collateral-upgrade |
Malicious release: Malicious code in gztensor-cli (PyPI) MAL-2026-53 | Malicious | Not scored | 05 Jan, 2026 | PyPI gztensor-cli |
Malicious release: Malicious code in faceplate-ui (npm) GHSA-vwmp-5366-h59v, MAL-2026-50 | Malicious | Not scored | 05 Jan, 2026 | npm faceplate-ui |
Malicious release: Malicious code in diskho (npm) MAL-2026-49 | Malicious | Not scored | 05 Jan, 2026 | npm diskho |
Malicious release: Malicious code in shop-state (npm) MAL-2026-48 | Malicious | Not scored | 05 Jan, 2026 | npm shop-state |
Malicious release: Malicious code in @airtel-web/legos (npm) GHSA-22x6-7f33-8w4f, MAL-2026-44 | Malicious | Not scored | 05 Jan, 2026 | npm @airtel-web/legos |
Malicious release: Malicious code in @signify/vue-components (npm) GHSA-j8hr-3qpv-xqf3, MAL-2026-45 | Malicious | Not scored | 05 Jan, 2026 | npm @signify/vue-components |
Malicious release: Malicious code in published_at (npm) GHSA-8xrh-276g-pwhf, MAL-2026-43 | Malicious | Not scored | 05 Jan, 2026 | npm published_at |
Malicious release: Malicious code in pyrogrom (PyPI) MAL-2026-42 | Malicious | Not scored | 05 Jan, 2026 | PyPI pyrogrom |
Malicious release: Malicious code in spire.officejs-document (npm) MAL-2026-41 | Malicious | Not scored | 05 Jan, 2026 | npm spire.officejs-document |
Malicious release: Malicious code in spire.officejs-common (npm) MAL-2026-39 | Malicious | Not scored | 05 Jan, 2026 | npm spire.officejs-common |
Malicious release: Malicious code in spire.officejs-editors (npm) MAL-2026-40 | Malicious | Not scored | 05 Jan, 2026 | npm spire.officejs-editors |
Malicious release: Malicious code in aiihttp (PyPI) MAL-2026-35 | Malicious | Not scored | 04 Jan, 2026 | PyPI aiihttp |
Malicious release: Malicious code in aoohttp (PyPI) MAL-2026-37 | Malicious | Not scored | 04 Jan, 2026 | PyPI aoohttp |
Malicious release: Malicious code in auohttp (PyPI) MAL-2026-38 | Malicious | Not scored | 04 Jan, 2026 | PyPI auohttp |
Malicious release: Malicious code in aiohtto (PyPI) MAL-2026-36 | Malicious | Not scored | 04 Jan, 2026 | PyPI aiohtto |
Malicious release: Malicious code in atm_bmw (npm) GHSA-r7mc-c86h-c2h3, MAL-2026-34 | Malicious | Not scored | 04 Jan, 2026 | npm atm_bmw |
Malicious release: Malicious code in blobhunter-depconf-poc (PyPI) MAL-2026-33 | Malicious | Not scored | 04 Jan, 2026 | PyPI blobhunter-depconf-poc |
Malicious release: Malicious code in blobhunter-depconf-poc (npm) GHSA-qm8x-x4wp-qmmw, MAL-2026-32 | Malicious | Not scored | 04 Jan, 2026 | npm blobhunter-depconf-poc |
Malicious release: Malicious code in telstra (PyPI) MAL-2026-31 | Malicious | Not scored | 03 Jan, 2026 | PyPI telstra |
Malicious release: Malicious code in dstny-utils (npm) MAL-2026-30 | Malicious | Not scored | 03 Jan, 2026 | npm dstny-utils |
Malicious release: Malicious code in ipvision-selfcare (npm) MAL-2026-29 | Malicious | Not scored | 03 Jan, 2026 | npm ipvision-selfcare |
Malicious release: Malicious code in chrome-stealth (PyPI) MAL-2026-28 | Malicious | Not scored | 03 Jan, 2026 | PyPI chrome-stealth |
Malicious release: Malicious code in qdatainstaller (PyPI) MAL-2026-27 | Malicious | Not scored | 03 Jan, 2026 | PyPI qdatainstaller |
Malicious release: Malicious code in orchestration-node-common-errors (npm) GHSA-6944-qjj4-p4pp, MAL-2026-21 | Malicious | Not scored | 02 Jan, 2026 | npm orchestration-node-common-errors |
Malicious release: Malicious code in fix-cc-raiesy (npm) GHSA-7q6m-qvfp-37hm, MAL-2026-16 | Malicious | Not scored | 02 Jan, 2026 | npm fix-cc-raiesy |
Malicious release: Malicious code in initializers (npm) GHSA-8jc9-28hh-6773, MAL-2026-18 | Malicious | Not scored | 02 Jan, 2026 | npm initializers |
Malicious release: Malicious code in 511fola (npm) GHSA-9m43-q5hv-rc36, MAL-2026-9 | Malicious | Not scored | 02 Jan, 2026 | npm 511fola |
Malicious release: Malicious code in tickncook-robot (npm) GHSA-p52r-cmjv-v6mr, MAL-2026-24 | Malicious | Not scored | 02 Jan, 2026 | npm tickncook-robot |
Malicious release: Malicious code in ent-file-upload-widget-v2 (npm) GHSA-pqqf-r5w3-jqc2, MAL-2026-13 | Malicious | Not scored | 02 Jan, 2026 | npm ent-file-upload-widget-v2 |
Malicious release: Malicious code in datatables-editor (npm) GHSA-q7mc-g6jm-8pjq, MAL-2026-12 | Malicious | Not scored | 02 Jan, 2026 | npm datatables-editor |
Malicious release: Malicious code in ent-profile-unauth-msr-stop (npm) GHSA-qvgq-rj55-h35g, MAL-2026-14 | Malicious | Not scored | 02 Jan, 2026 | npm ent-profile-unauth-msr-stop |
Malicious release: Malicious code in usaa-authentication-mocks (npm) GHSA-x9pm-m7hq-f2q8, MAL-2026-25 | Malicious | Not scored | 02 Jan, 2026 | npm usaa-authentication-mocks |
Malicious release: Malicious code in babel-preset-ibm-cloud-cognitive (npm) MAL-2026-10 | Malicious | Not scored | 02 Jan, 2026 | npm babel-preset-ibm-cloud-cognitive |
Malicious release: Malicious code in cc-double-1 (npm) MAL-2026-11 | Malicious | Not scored | 02 Jan, 2026 | npm cc-double-1 |
Malicious release: Malicious code in eslint-config-skynet (npm) MAL-2026-15 | Malicious | Not scored | 02 Jan, 2026 | npm eslint-config-skynet |
Malicious release: Malicious code in identity-emitter (npm) MAL-2026-17 | Malicious | Not scored | 02 Jan, 2026 | npm identity-emitter |
Malicious release: Malicious code in jest-config-ibm-cloud-cognitive (npm) MAL-2026-19 | Malicious | Not scored | 02 Jan, 2026 | npm jest-config-ibm-cloud-cognitive |
Malicious release: Malicious code in kid-api (npm) MAL-2026-20 | Malicious | Not scored | 02 Jan, 2026 | npm kid-api |
Malicious release: Malicious code in pkg1bate5apg1 (npm) MAL-2026-22 | Malicious | Not scored | 02 Jan, 2026 | npm pkg1bate5apg1 |
Malicious release: Malicious code in showdownxss (npm) GHSA-7xjm-6wcx-89c2, MAL-2026-23 | Malicious | Not scored | 02 Jan, 2026 | npm showdownxss |
Malicious release: Malicious code in @nitaiapiiro/rand_emoji (npm) MAL-2026-8 | Malicious | Not scored | 02 Jan, 2026 | npm @nitaiapiiro/rand_emoji |
Malicious release: Malicious code in pdatainstaller (PyPI) MAL-2026-26 | Malicious | Not scored | 02 Jan, 2026 | PyPI pdatainstaller |