Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in gatr (PyPI) MAL-2026-7 | Malicious | Not scored | 02 Jan, 2026 | PyPI gatr |
Malicious release: Malicious code in ziphash (PyPI) MAL-2026-6 | Malicious | Not scored | 01 Jan, 2026 | PyPI ziphash |
Malicious release: Malicious code in queryservice-client (PyPI) MAL-2026-5 | Malicious | Not scored | 01 Jan, 2026 | PyPI queryservice-client |
Malicious release: Malicious code in rules-playground (npm) MAL-2026-4 | Malicious | Not scored | 01 Jan, 2026 | npm rules-playground |
Malicious release: Malicious code in rules-deployer (npm) MAL-2026-3 | Malicious | Not scored | 01 Jan, 2026 | npm rules-deployer |
Malicious release: Malicious code in common-cli-utils (npm) MAL-2026-2 | Malicious | Not scored | 01 Jan, 2026 | npm common-cli-utils |
Malicious release: Malicious code in sfnt2woff-zopfli (PyPI) MAL-2026-1 | Malicious | Not scored | 01 Jan, 2026 | PyPI sfnt2woff-zopfli |
Malicious release: Malicious code in requeses (PyPI) MAL-2025-193011 | Malicious | Not scored | 31 Dec, 2025 | PyPI requeses |
Malicious release: Malicious code in @polystream/streaming (npm) GHSA-fw93-78h7-rwpv, MAL-2025-193009 | Malicious | Not scored | 31 Dec, 2025 | npm @polystream/streaming |
Malicious release: Malicious code in pyrogrqm (PyPI) MAL-2025-193010 | Malicious | Not scored | 31 Dec, 2025 | PyPI pyrogrqm |
Malicious release: Malicious code in telegreph (PyPI) MAL-2025-193008 | Malicious | Not scored | 31 Dec, 2025 | PyPI telegreph |
Malicious release: Malicious code in aiogrem (PyPI) MAL-2025-193007 | Malicious | Not scored | 31 Dec, 2025 | PyPI aiogrem |
Malicious release: Malicious code in accesspdp (PyPI) MAL-2025-193006 | Malicious | Not scored | 31 Dec, 2025 | PyPI accesspdp |
Malicious release: Malicious code in @vietmoney/react-big-calendar (npm) GHSA-2w42-mjvc-7mgq, MAL-2025-192994 | Malicious | Not scored | 31 Dec, 2025 | npm @vietmoney/react-big-calendar |
Malicious release: Malicious code in @vietmoney/vietmoneywork (npm) GHSA-58jp-97fm-4xq3, MAL-2025-193003 | Malicious | Not scored | 31 Dec, 2025 | npm @vietmoney/vietmoneywork |
Malicious release: Malicious code in @vietmoney/react-native-true-id (npm) GHSA-94j6-x699-jcc3, MAL-2025-193001 | Malicious | Not scored | 31 Dec, 2025 | npm @vietmoney/react-native-true-id |
Malicious release: Malicious code in @vietmoney/react-native-image-transformer (npm) GHSA-c475-w7cw-vjcc, MAL-2025-192997 | Malicious | Not scored | 31 Dec, 2025 | npm @vietmoney/react-native-image-transformer |
Malicious release: Malicious code in @vietmoney/react-native-smart-page (npm) GHSA-f7qx-mq63-fxcr, MAL-2025-192999 | Malicious | Not scored | 31 Dec, 2025 | npm @vietmoney/react-native-smart-page |
Malicious release: Malicious code in @vietmoney/vision-camera-code-scanner (npm) GHSA-gmq9-cfc9-7w39, MAL-2025-193004 | Malicious | Not scored | 31 Dec, 2025 | npm @vietmoney/vision-camera-code-scanner |
Malicious release: Malicious code in @vietmoney/react-native-smart-gallery (npm) GHSA-jpfq-j254-3ppf, MAL-2025-192998 | Malicious | Not scored | 31 Dec, 2025 | npm @vietmoney/react-native-smart-gallery |
Malicious release: Malicious code in landingpage-service (npm) GHSA-mhgg-gv4f-whxg, MAL-2025-193005 | Malicious | Not scored | 31 Dec, 2025 | npm landingpage-service |
Malicious release: Malicious code in @vietmoney/react-native-vnpay-merchant (npm) GHSA-pwm4-mv3r-mpx3, MAL-2025-193002 | Malicious | Not scored | 31 Dec, 2025 | npm @vietmoney/react-native-vnpay-merchant |
Malicious release: Malicious code in @vietmoney/react-native-action-button (npm) GHSA-rjr7-qcfc-hjcv, MAL-2025-192995 | Malicious | Not scored | 31 Dec, 2025 | npm @vietmoney/react-native-action-button |
Malicious release: Malicious code in @vietmoney/react-native-tags-input (npm) GHSA-vc6p-43hp-v2xf, MAL-2025-193000 | Malicious | Not scored | 31 Dec, 2025 | npm @vietmoney/react-native-tags-input |
Malicious release: Malicious code in @vietmoney/react-native-htmlview (npm) GHSA-wv3x-qp6r-29w6, MAL-2025-192996 | Malicious | Not scored | 31 Dec, 2025 | npm @vietmoney/react-native-htmlview |
Malicious release: Malicious code in brolool4141412 (PyPI) MAL-2025-192989 | Malicious | Not scored | 31 Dec, 2025 | PyPI brolool4141412 |
Malicious release: Malicious code in broooxddd1414 (PyPI) MAL-2025-192990 | Malicious | Not scored | 31 Dec, 2025 | PyPI broooxddd1414 |
Malicious release: Malicious code in weorewfoi2393 (PyPI) MAL-2025-192993 | Malicious | Not scored | 31 Dec, 2025 | PyPI weorewfoi2393 |
Malicious release: Malicious code in pyrogrem (PyPI) MAL-2025-192991 | Malicious | Not scored | 31 Dec, 2025 | PyPI pyrogrem |
Malicious release: Malicious code in umap (PyPI) MAL-2025-192992 | Malicious | Not scored | 31 Dec, 2025 | PyPI umap |
Malicious release: Malicious code in nbugs-video (npm) GHSA-g2c8-q7fr-7gx3, MAL-2025-192986 | Malicious | Not scored | 30 Dec, 2025 | npm nbugs-video |
Malicious release: Malicious code in npm-xmt (npm) GHSA-2fqg-43mh-6h87, MAL-2025-192987 | Malicious | Not scored | 30 Dec, 2025 | npm npm-xmt |
Malicious release: Malicious code in error-fallback (npm) GHSA-3pfc-mwg4-r94r, MAL-2025-192985 | Malicious | Not scored | 30 Dec, 2025 | npm error-fallback |
Malicious release: Malicious code in chai-promised-chains (npm) GHSA-ccjq-68q9-54h9, MAL-2025-192984 | Malicious | Not scored | 30 Dec, 2025 | npm chai-promised-chains |
Malicious release: Malicious code in @ptest2535/ui-core_mal (npm) GHSA-85qg-c3xq-4w49, MAL-2025-192982 | Malicious | Not scored | 30 Dec, 2025 | npm @ptest2535/ui-core_mal |
Malicious release: Malicious code in @ptest2535/artifactory-demo-ptest (npm) GHSA-9hr6-h5xf-hp2v, MAL-2025-192979 | Malicious | Not scored | 30 Dec, 2025 | npm @ptest2535/artifactory-demo-ptest |
Malicious release: Malicious code in @ptest2535/l_woker_mal (npm) GHSA-q8m4-6xmm-4234, MAL-2025-192980 | Malicious | Not scored | 30 Dec, 2025 | npm @ptest2535/l_woker_mal |
Malicious release: Malicious code in @ptest2535/test_package (npm) GHSA-r34w-369w-v8w9, MAL-2025-192981 | Malicious | Not scored | 30 Dec, 2025 | npm @ptest2535/test_package |
Malicious release: Malicious code in yellowdiscordlookup (npm) GHSA-87w3-vjjr-47gf, MAL-2025-192988 | Malicious | Not scored | 30 Dec, 2025 | npm yellowdiscordlookup |
Malicious release: Malicious code in bigmathex (npm) GHSA-4v7j-fv5q-vv2q, MAL-2025-192983 | Malicious | Not scored | 30 Dec, 2025 | npm bigmathex |
Malicious release: Malicious code in portal-lise (npm) GHSA-h847-vpq8-2hj8, MAL-2025-192970 | Malicious | Not scored | 30 Dec, 2025 | npm portal-lise |
Malicious release: Malicious code in shop-minis-docs (npm) GHSA-2g5f-63gc-p7jh, MAL-2025-192976 | Malicious | Not scored | 30 Dec, 2025 | npm shop-minis-docs |
Malicious release: Malicious code in cdd-plugin-for-datawarrior (npm) GHSA-45h7-9rxv-wjrr, MAL-2025-192966 | Malicious | Not scored | 30 Dec, 2025 | npm cdd-plugin-for-datawarrior |
Malicious release: Malicious code in rt-interactive-card-collection (npm) GHSA-67wx-pprw-w2v6, MAL-2025-192974 | Malicious | Not scored | 30 Dec, 2025 | npm rt-interactive-card-collection |
Malicious release: Malicious code in react-devtools-shared (npm) GHSA-9mmf-qx8w-8798, MAL-2025-192972 | Malicious | Not scored | 30 Dec, 2025 | npm react-devtools-shared |
Malicious release: Malicious code in rt-text-media-collection (npm) GHSA-chc2-cmwr-8f69, MAL-2025-192975 | Malicious | Not scored | 30 Dec, 2025 | npm rt-text-media-collection |
Malicious release: Malicious code in react-devtools-extensions (npm) GHSA-ph84-3h48-w4gw, MAL-2025-192971 | Malicious | Not scored | 30 Dec, 2025 | npm react-devtools-extensions |
Malicious release: Malicious code in react-dom-bindings (npm) GHSA-r2mv-xp84-8cc6, MAL-2025-192973 | Malicious | Not scored | 30 Dec, 2025 | npm react-dom-bindings |
Malicious release: Malicious code in awsmcc (npm) GHSA-r2x7-xp3v-fcwm, MAL-2025-192965 | Malicious | Not scored | 30 Dec, 2025 | npm awsmcc |
Malicious release: Malicious code in shopify-app-react-router (npm) GHSA-rw2j-q47r-j658, MAL-2025-192977 | Malicious | Not scored | 30 Dec, 2025 | npm shopify-app-react-router |