Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in eb-csr (npm) GHSA-x757-3w6f-f9rm, MAL-2025-192967 | Malicious | Not scored | 30 Dec, 2025 | npm eb-csr |
Malicious release: Malicious code in @peter_wilson12091/internal-json-test-parser (npm) GHSA-26xj-cgvf-rcmv, MAL-2025-192964 | Malicious | Not scored | 30 Dec, 2025 | npm @peter_wilson12091/internal-json-test-parser |
Malicious release: Malicious code in express-js-web (npm) GHSA-wpr4-9cjg-p8mm, MAL-2025-192968 | Malicious | Not scored | 30 Dec, 2025 | npm express-js-web |
Malicious release: Malicious code in tailwindcss-typography-style (npm) GHSA-gg45-2h47-hmmj, MAL-2025-192978 | Malicious | Not scored | 30 Dec, 2025 | npm tailwindcss-typography-style |
Malicious release: Malicious code in pepsico-ds (npm) GHSA-9xh2-g3jf-q47w, MAL-2025-192969 | Malicious | Not scored | 30 Dec, 2025 | npm pepsico-ds |
Malicious release: Malicious code in @bugdtest/test1 (npm) GHSA-xwx3-8548-fqr3, MAL-2025-192963 | Malicious | Not scored | 30 Dec, 2025 | npm @bugdtest/test1 |
Malicious release: Malicious code in rippling-cli (PyPI) MAL-2025-192962 | Malicious | Not scored | 30 Dec, 2025 | PyPI rippling-cli |
Malicious release: Malicious code in awsutil (PyPI) MAL-2025-192961 | Malicious | Not scored | 29 Dec, 2025 | PyPI awsutil |
Malicious release: Malicious code in kcheck (npm) GHSA-rw58-vpg4-jcpx, MAL-2025-192960 | Malicious | Not scored | 29 Dec, 2025 | npm kcheck |
Malicious release: Malicious code in intl-tel-input-utils (npm) GHSA-478v-fp9g-73v2, MAL-2025-192959 | Malicious | Not scored | 29 Dec, 2025 | npm intl-tel-input-utils |
Malicious release: Malicious code in smtmlib (PyPI) MAL-2025-192958 | Malicious | Not scored | 29 Dec, 2025 | PyPI smtmlib |
Malicious release: Malicious code in crypto-trade-analyzer (npm) MAL-2025-192957 | Malicious | Not scored | 29 Dec, 2025 | npm crypto-trade-analyzer |
Malicious release: Malicious code in cryptozip (PyPI) MAL-2025-192956 | Malicious | Not scored | 28 Dec, 2025 | PyPI cryptozip |
Malicious release: Malicious code in eslint-config-pexip-engage (npm) MAL-2025-192955 | Malicious | Not scored | 28 Dec, 2025 | npm eslint-config-pexip-engage |
Malicious release: Malicious code in api-umbrella-admin-ui (npm) GHSA-pq2q-gwxh-rmh2, MAL-2025-192954 | Malicious | Not scored | 28 Dec, 2025 | npm api-umbrella-admin-ui |
Malicious release: Malicious code in aiogram-types-v3 (PyPI) MAL-2025-192953 | Malicious | Not scored | 28 Dec, 2025 | PyPI aiogram-types-v3 |
Malicious release: Malicious code in eslint-config-sdk (npm) MAL-2025-192952 | Malicious | Not scored | 27 Dec, 2025 | npm eslint-config-sdk |
Malicious release: Malicious code in ugc-kit (npm) GHSA-v4w5-3vhx-g64x, MAL-2025-192951 | Malicious | Not scored | 27 Dec, 2025 | npm ugc-kit |
Malicious release: Malicious code in ing-feat-malware-detection (npm) GHSA-838c-jj63-x7mf, MAL-2025-192949 | Malicious | Not scored | 27 Dec, 2025 | npm ing-feat-malware-detection |
Malicious release: Malicious code in ing-feat-ui-image (npm) GHSA-6wj8-2g22-38w9, MAL-2025-192950 | Malicious | Not scored | 27 Dec, 2025 | npm ing-feat-ui-image |
Malicious release: Malicious code in extrazip (PyPI) MAL-2025-192948 | Malicious | Not scored | 27 Dec, 2025 | PyPI extrazip |
Malicious release: Malicious code in crypo (PyPI) MAL-2025-192947 | Malicious | Not scored | 27 Dec, 2025 | PyPI crypo |
Malicious release: Malicious code in crpto (PyPI) MAL-2025-192946 | Malicious | Not scored | 27 Dec, 2025 | PyPI crpto |
Malicious release: Malicious code in flaask (PyPI) MAL-2025-192945 | Malicious | Not scored | 27 Dec, 2025 | PyPI flaask |
Malicious release: Malicious code in backstage-plugin-glean (npm) GHSA-86v9-6365-r69x, MAL-2025-192944 | Malicious | Not scored | 27 Dec, 2025 | npm backstage-plugin-glean |
Malicious release: Malicious code in telebot-bot (PyPI) MAL-2025-192942 | Malicious | Not scored | 26 Dec, 2025 | PyPI telebot-bot |
Malicious release: Malicious code in telegrem (PyPI) MAL-2025-192943 | Malicious | Not scored | 26 Dec, 2025 | PyPI telegrem |
Malicious release: Malicious code in bola511 (npm) MAL-2025-192941 | Malicious | Not scored | 26 Dec, 2025 | npm bola511 |
Malicious release: Malicious code in yunxohang4 (npm) GHSA-qqjp-xcww-46gp, MAL-2026-184 | Malicious | Not scored | 26 Dec, 2025 | npm yunxohang4 |
Malicious release: Malicious code in aiogram-3 (PyPI) MAL-2025-192940 | Malicious | Not scored | 26 Dec, 2025 | PyPI aiogram-3 |
Malicious release: Malicious code in magic-poc (npm) GHSA-m6v9-f3q8-q9qj, MAL-2025-192939 | Malicious | Not scored | 26 Dec, 2025 | npm magic-poc |
Malicious release: Malicious code in bettermode-icons (npm) MAL-2025-192938 | Malicious | Not scored | 25 Dec, 2025 | npm bettermode-icons |
Malicious release: Malicious code in bettermode-common (npm) GHSA-w55f-m97h-c6pf, MAL-2025-192937 | Malicious | Not scored | 25 Dec, 2025 | npm bettermode-common |
Malicious release: Malicious code in ing-feat-kyc-consent (npm) GHSA-r682-hfrx-mp6j, MAL-2025-192934 | Malicious | Not scored | 25 Dec, 2025 | npm ing-feat-kyc-consent |
Malicious release: Malicious code in ing-feat-auth-idin (npm) GHSA-mqvw-23c8-9fxf, MAL-2025-192933 | Malicious | Not scored | 25 Dec, 2025 | npm ing-feat-auth-idin |
Malicious release: Malicious code in ing-feat-mortgage-consent-starter (npm) MAL-2025-192935 | Malicious | Not scored | 25 Dec, 2025 | npm ing-feat-mortgage-consent-starter |
Malicious release: Malicious code in ing-feat-pis-single-payments (npm) MAL-2025-192936 | Malicious | Not scored | 25 Dec, 2025 | npm ing-feat-pis-single-payments |
Malicious release: Malicious code in cc-raiesy (npm) MAL-2025-192932 | Malicious | Not scored | 25 Dec, 2025 | npm cc-raiesy |
Malicious release: Malicious code in aiogram-sever-patch (PyPI) MAL-2025-192931 | Malicious | Not scored | 25 Dec, 2025 | PyPI aiogram-sever-patch |
Malicious release: Malicious code in pxdbench (PyPI) MAL-2025-192930 | Malicious | Not scored | 25 Dec, 2025 | PyPI pxdbench |
Malicious release: Malicious code in envtoolsx (PyPI) MAL-2025-192929 | Malicious | Not scored | 24 Dec, 2025 | PyPI envtoolsx |
Malicious release: Malicious code in livekit-agents-hedra (PyPI) MAL-2025-192928 | Malicious | Not scored | 24 Dec, 2025 | PyPI livekit-agents-hedra |
Malicious release: Malicious code in adril7123 (npm) GHSA-wx7c-p492-4g92, MAL-2025-192927 | Malicious | Not scored | 24 Dec, 2025 | npm adril7123 |
Malicious release: Malicious code in @airtel-web/clickstream (npm) GHSA-5qc2-32p6-rqq4, MAL-2025-192926 | Malicious | Not scored | 24 Dec, 2025 | npm @airtel-web/clickstream |
Malicious release: Malicious code in secguest-react-lib (npm) GHSA-42jv-5r4v-m7qq, MAL-2026-170 | Malicious | Not scored | 24 Dec, 2025 | npm secguest-react-lib |
Malicious release: Malicious code in @google_recaptcha/js (npm) GHSA-j3x4-vhvj-627x, MAL-2025-192752 | Malicious | Not scored | 23 Dec, 2025 | npm @google_recaptcha/js |
Malicious release: Malicious code in supply_chain_dummy_test_2 (npm) GHSA-6rjq-vggp-p672, MAL-2025-192761 | Malicious | Not scored | 23 Dec, 2025 | npm supply_chain_dummy_test_2 |
Malicious release: Malicious code in supply_chain_dummy_test_4 (npm) GHSA-q5x2-6fv5-qxp8, MAL-2025-192763 | Malicious | Not scored | 23 Dec, 2025 | npm supply_chain_dummy_test_4 |
Malicious release: Malicious code in supply_chain_dummy_test_3 (npm) GHSA-r6g5-cgp3-h24c, MAL-2025-192762 | Malicious | Not scored | 23 Dec, 2025 | npm supply_chain_dummy_test_3 |
Malicious release: Malicious code in supply_chain_dummy_test_1 (npm) GHSA-vh5p-f9g9-c2mg, MAL-2025-192760 | Malicious | Not scored | 23 Dec, 2025 | npm supply_chain_dummy_test_1 |