Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @ecg-internal/favourites-ui (npm) GHSA-g8hh-8pxg-jr3x, MAL-2026-18208 | Malicious | Not scored | 7 days ago | npm @ecg-internal/favourites-ui |
Malicious release: Malicious code in @ecg-internal/adobe-dmp-js (npm) GHSA-vcj4-3hxm-4rf3, MAL-2026-18206 | Malicious | Not scored | 7 days ago | npm @ecg-internal/adobe-dmp-js |
Malicious release: Malicious code in @ecg-internal/reviews-dialog-ui (npm) GHSA-r47j-grcr-p9h9, MAL-2026-18211 | Malicious | Not scored | 7 days ago | npm @ecg-internal/reviews-dialog-ui |
Malicious release: Malicious code in @tekmidian/pai (npm) GHSA-xvgg-qjjh-gq34, MAL-2026-18205 | Malicious | Not scored | 7 days ago | npm @tekmidian/pai |
Malicious release: Malicious code in react-native-bright-sdk (npm) MAL-2026-18290 | Malicious | Not scored | 7 days ago | npm react-native-bright-sdk |
Malicious release: Malicious code in @factiii/runner (npm) GHSA-9j83-qj34-g5vc, MAL-2026-18204 | Malicious | Not scored | 7 days ago | npm @factiii/runner |
Malicious release: Malicious code in journey-teste-shellhello (PyPI) MAL-2026-18203 | Malicious | Not scored | 7 days ago | PyPI journey-teste-shellhello |
Malicious release: Malicious code in @seggy116/next-diff (npm) GHSA-fv2r-964m-pc2m, MAL-2026-18200 | Malicious | Not scored | 7 days ago | npm @seggy116/next-diff |
Malicious release: Malicious code in @pkgship/frps-linux-amd64 (npm) GHSA-x55v-jc52-q424, MAL-2026-18199 | Malicious | Not scored | 7 days ago | npm @pkgship/frps-linux-amd64 |
Malicious release: Malicious code in @pkgship/frpc-linux-amd64 (npm) GHSA-9pc4-vxvx-5676, MAL-2026-18198 | Malicious | Not scored | 7 days ago | npm @pkgship/frpc-linux-amd64 |
Malicious release: Malicious code in kvarzo8f3atestmetest (npm) GHSA-8vpc-rm6r-5m6c, MAL-2026-18201 | Malicious | Not scored | 7 days ago | npm kvarzo8f3atestmetest |
Malicious release: Malicious code in sdk-utils-testmetest (npm) GHSA-m6qq-33mj-mv9w, MAL-2026-18202 | Malicious | Not scored | 7 days ago | npm sdk-utils-testmetest |
Malicious release: Malicious code in @lumen-labs-dev/whisper-node (npm) GHSA-8mqm-233x-2g2j, MAL-2026-18194 | Malicious | Not scored | 7 days ago | npm @lumen-labs-dev/whisper-node |
Malicious release: Malicious code in darknode-cli (npm) GHSA-6m47-rc2c-6xpg, MAL-2026-18195 | Malicious | Not scored | 7 days ago | npm darknode-cli |
Malicious release: Malicious code in x402-prompt-injection-scan (npm) GHSA-w84w-rhx7-2f7g, MAL-2026-18197 | Malicious | Not scored | 7 days ago | npm x402-prompt-injection-scan |
Malicious release: Malicious code in imgdecode (npm) GHSA-hw69-vrvf-87h5, MAL-2026-18196 | Malicious | Not scored | 7 days ago | npm imgdecode |
Malicious release: Malicious code in @liauto/darwin-x64 (npm) GHSA-pmg6-2w6r-4q4h, MAL-2026-18190 | Malicious | Not scored | 7 days ago | npm @liauto/darwin-x64 |
Malicious release: Malicious code in @pkgship/frpc-darwin-amd64 (npm) GHSA-fhh5-55p8-29hj, MAL-2026-18191 | Malicious | Not scored | 7 days ago | npm @pkgship/frpc-darwin-amd64 |
Malicious release: Malicious code in opencode-skills-collection (npm) GHSA-9855-prwc-mfp2, MAL-2026-18193 | Malicious | Not scored | 7 days ago | npm opencode-skills-collection |
Malicious release: Malicious code in agentic-awesome-skills (npm) GHSA-rgwm-3jj9-h563, MAL-2026-18192 | Malicious | Not scored | 7 days ago | npm agentic-awesome-skills |
Malicious release: Malicious code in 1h1 (PyPI) MAL-2026-18188 | Malicious | Not scored | 7 days ago | PyPI 1h1 |
Malicious release: Malicious code in aanthropic (PyPI) MAL-2026-18189 | Malicious | Not scored | 7 days ago | PyPI aanthropic |
Malicious release: Malicious code in net-codec-testmetest (npm) MAL-2026-18186 | Malicious | Not scored | 7 days ago | npm net-codec-testmetest |
Malicious release: Malicious code in log-rotate-testmetest (npm) MAL-2026-18185 | Malicious | Not scored | 7 days ago | npm log-rotate-testmetest |
Malicious release: Malicious code in formatting-subtitles (npm) MAL-2026-18184 | Malicious | Not scored | 7 days ago | npm formatting-subtitles |
Malicious release: Malicious code in @conduitops/logview-archive (npm) MAL-2026-18183 | Malicious | Not scored | 7 days ago | npm @conduitops/logview-archive |
Malicious release: Malicious code in simplewave (npm) MAL-2026-18187 | Malicious | Not scored | 7 days ago | npm simplewave |
Malicious release: Malicious code in acoustichub (PyPI) MAL-2026-18155 | Malicious | Not scored | 8 days ago | PyPI acoustichub |
Malicious release: Malicious code in phonemeprobe (PyPI) MAL-2026-18164 | Malicious | Not scored | 8 days ago | PyPI phonemeprobe |
Malicious release: Malicious code in ttsflow (PyPI) MAL-2026-18170 | Malicious | Not scored | 8 days ago | PyPI ttsflow |
Malicious release: Malicious code in evalstream (PyPI) MAL-2026-18161 | Malicious | Not scored | 8 days ago | PyPI evalstream |
Malicious release: Malicious code in speakbench (PyPI) MAL-2026-18166 | Malicious | Not scored | 8 days ago | PyPI speakbench |
Malicious release: Malicious code in audiokit (PyPI) MAL-2026-18158 | Malicious | Not scored | 8 days ago | PyPI audiokit |
Malicious release: Malicious code in phonemeforge (PyPI) MAL-2026-18163 | Malicious | Not scored | 8 days ago | PyPI phonemeforge |
Malicious release: Malicious code in vocabbench (PyPI) MAL-2026-18173 | Malicious | Not scored | 8 days ago | PyPI vocabbench |
Malicious release: Malicious code in asrloom (PyPI) MAL-2026-18157 | Malicious | Not scored | 8 days ago | PyPI asrloom |
Malicious release: Malicious code in benchworks (PyPI) MAL-2026-18160 | Malicious | Not scored | 8 days ago | PyPI benchworks |
Malicious release: Malicious code in benchbridge (PyPI) MAL-2026-18159 | Malicious | Not scored | 8 days ago | PyPI benchbridge |
Malicious release: Malicious code in speechprobe (PyPI) MAL-2026-18168 | Malicious | Not scored | 8 days ago | PyPI speechprobe |
Malicious release: Malicious code in soundsocket (PyPI) MAL-2026-18165 | Malicious | Not scored | 8 days ago | PyPI soundsocket |
Malicious release: Malicious code in modelworks (PyPI) MAL-2026-18162 | Malicious | Not scored | 8 days ago | PyPI modelworks |
Malicious release: Malicious code in vocabblend (PyPI) MAL-2026-18174 | Malicious | Not scored | 8 days ago | PyPI vocabblend |
Malicious release: Malicious code in voicekit (PyPI) MAL-2026-18175 | Malicious | Not scored | 8 days ago | PyPI voicekit |
Malicious release: Malicious code in ttsweaver (PyPI) MAL-2026-18172 | Malicious | Not scored | 8 days ago | PyPI ttsweaver |
Malicious release: Malicious code in ttsprobe (PyPI) MAL-2026-18171 | Malicious | Not scored | 8 days ago | PyPI ttsprobe |
Malicious release: Malicious code in ttsdock (PyPI) MAL-2026-18169 | Malicious | Not scored | 8 days ago | PyPI ttsdock |
Malicious release: Malicious code in voxweaver (PyPI) MAL-2026-18176 | Malicious | Not scored | 8 days ago | PyPI voxweaver |
Malicious release: Malicious code in speaksocket (PyPI) MAL-2026-18167 | Malicious | Not scored | 8 days ago | PyPI speaksocket |
Malicious release: Malicious code in asrdock (PyPI) MAL-2026-18156 | Malicious | Not scored | 8 days ago | PyPI asrdock |
Malicious release: Malicious code in pipegrip (PyPI) MAL-2026-18154 | Malicious | Not scored | 8 days ago | PyPI pipegrip |