Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in secure-test-browser-7lp0evnc (npm) GHSA-wq25-mm66-7r52, MAL-2026-15298 | Malicious | Not scored | 28 Aug, 2026 | npm secure-test-browser-7lp0evnc |
Malicious release: Malicious code in secure-test-browser-xynt39lg (npm) GHSA-wqj4-68pj-rg86, MAL-2026-15455 | Malicious | Not scored | 28 Aug, 2026 | npm secure-test-browser-xynt39lg |
Malicious release: Malicious code in secure-test-browser-y4yd7ndu (npm) GHSA-wvqw-jc46-rh22, MAL-2026-15456 | Malicious | Not scored | 28 Aug, 2026 | npm secure-test-browser-y4yd7ndu |
Malicious release: Malicious code in secure-test-browser-khflxpz7 (npm) GHSA-xf8p-w65g-3q5x, MAL-2026-15376 | Malicious | Not scored | 28 Aug, 2026 | npm secure-test-browser-khflxpz7 |
Malicious release: Malicious code in secure-test-browser-1yjarnvk (npm) GHSA-6fwp-p6m6-f567, MAL-2026-15266 | Malicious | Not scored | 28 Aug, 2026 | npm secure-test-browser-1yjarnvk |
Malicious release: Malicious code in secure-test-browser-z6d4ruii (npm) GHSA-6gqq-8v8v-hhwj, MAL-2026-15465 | Malicious | Not scored | 28 Aug, 2026 | npm secure-test-browser-z6d4ruii |
Malicious release: Malicious code in secure-test-browser-r270knja (npm) GHSA-fpp3-rrjf-8849, MAL-2026-15416 | Malicious | Not scored | 28 Aug, 2026 | npm secure-test-browser-r270knja |
Malicious release: Malicious code in secure-test-browser-ezbajpcd (npm) GHSA-rrh9-56m7-ww4w, MAL-2026-15339 | Malicious | Not scored | 28 Aug, 2026 | npm secure-test-browser-ezbajpcd |
Malicious release: Malicious code in cacao1 (npm) MAL-2026-14591 | Malicious | Not scored | 28 Aug, 2026 | npm cacao1 |
Malicious release: Malicious code in yamlformat-tools (PyPI) MAL-2026-14589 | Malicious | Not scored | 28 Aug, 2026 | PyPI yamlformat-tools |
Malicious release: Malicious code in yamlformatter-utils (PyPI) MAL-2026-14590 | Malicious | Not scored | 28 Aug, 2026 | PyPI yamlformatter-utils |
Malicious release: Malicious code in pygame-renderkit (PyPI) MAL-2026-14587 | Malicious | Not scored | 28 Aug, 2026 | PyPI pygame-renderkit |
Malicious release: Malicious code in yaml-report-formatter (PyPI) MAL-2026-14588 | Malicious | Not scored | 28 Aug, 2026 | PyPI yaml-report-formatter |
Malicious release: Malicious code in @fleetbo/svro (npm) GHSA-4hrx-gqq5-q956, MAL-2026-14586 | Malicious | Not scored | 28 Aug, 2026 | npm @fleetbo/svro |
Malicious release: Malicious code in @znan/wabot (npm) GHSA-2jxx-8fv2-h8mj, MAL-2026-14585 | Malicious | Not scored | 28 Aug, 2026 | npm @znan/wabot |
Malicious release: Malicious code in pushgitquickx (npm) GHSA-wx29-h78g-ww4f, MAL-2026-14578 | Malicious | Not scored | 27 Aug, 2026 | npm pushgitquickx |
Malicious release: Malicious code in @hd-team/app-dnpkg-prod (npm) GHSA-35w7-82wv-vwxj, MAL-2026-14571 | Malicious | Not scored | 27 Aug, 2026 | npm @hd-team/app-dnpkg-prod |
Malicious release: Malicious code in @hd-team/app-dnpkg-beta (npm) GHSA-6p53-v557-745c, MAL-2026-14569 | Malicious | Not scored | 27 Aug, 2026 | npm @hd-team/app-dnpkg-beta |
Malicious release: Malicious code in @hd-team/app-impkg-prod (npm) GHSA-g7cq-7vcf-rp48, MAL-2026-14575 | Malicious | Not scored | 27 Aug, 2026 | npm @hd-team/app-impkg-prod |
Malicious release: Malicious code in @hd-team/app-impkg-test (npm) GHSA-hxxw-mprp-h9w7, MAL-2026-14576 | Malicious | Not scored | 27 Aug, 2026 | npm @hd-team/app-impkg-test |
Malicious release: Malicious code in @hd-team/app-dnpkg-three (npm) GHSA-qwcv-3958-fhq5, MAL-2026-14574 | Malicious | Not scored | 27 Aug, 2026 | npm @hd-team/app-dnpkg-three |
Malicious release: Malicious code in @hd-team/app-dnpkg-test (npm) GHSA-6fm3-xp27-2556, MAL-2026-14573 | Malicious | Not scored | 27 Aug, 2026 | npm @hd-team/app-dnpkg-test |
Malicious release: Malicious code in @hd-team/app-dnpkg-eight (npm) GHSA-97qc-463w-p2jr, MAL-2026-14570 | Malicious | Not scored | 27 Aug, 2026 | npm @hd-team/app-dnpkg-eight |
Malicious release: Malicious code in @hd-team/app-dnpkg-ten (npm) GHSA-q7mf-7f69-7qpr, MAL-2026-14572 | Malicious | Not scored | 27 Aug, 2026 | npm @hd-team/app-dnpkg-ten |
Malicious release: Malicious code in flyteplugins-redis (PyPI) MAL-2026-14584 | Malicious | Not scored | 27 Aug, 2026 | PyPI flyteplugins-redis |
Malicious release: Malicious code in flyteplugins-nsight (PyPI) MAL-2026-14583 | Malicious | Not scored | 27 Aug, 2026 | PyPI flyteplugins-nsight |
Malicious release: Malicious code in flyteplugins-agento11y (PyPI) MAL-2026-14581 | Malicious | Not scored | 27 Aug, 2026 | PyPI flyteplugins-agento11y |
Malicious release: Malicious code in flyteplugins-echo (PyPI) MAL-2026-14582 | Malicious | Not scored | 27 Aug, 2026 | PyPI flyteplugins-echo |
Malicious release: Malicious code in svelte-ui-dlx (npm) GHSA-7qq8-vjh5-hpgw, MAL-2026-14579 | Malicious | Not scored | 27 Aug, 2026 | npm svelte-ui-dlx |
Malicious release: Malicious code in hydration-ui-dlx (npm) GHSA-j5x7-qc6j-xwg4, MAL-2026-14577 | Malicious | Not scored | 27 Aug, 2026 | npm hydration-ui-dlx |
Malicious release: Malicious code in tailwindcss-3d-animate (npm) GHSA-683p-54mf-9297, MAL-2026-14567 | Malicious | Not scored | 27 Aug, 2026 | npm tailwindcss-3d-animate |
Malicious release: Malicious code in tailwindcss-form-styles (npm) GHSA-8wj9-gw6r-6vqh, MAL-2026-14568 | Malicious | Not scored | 27 Aug, 2026 | npm tailwindcss-form-styles |
Malicious release: Malicious code in stackpaths (npm) GHSA-6hcw-m358-fq4q, MAL-2026-14565 | Malicious | Not scored | 27 Aug, 2026 | npm stackpaths |
Malicious release: Malicious code in inspectstack (npm) GHSA-xjx7-pff2-34gp, MAL-2026-14560 | Malicious | Not scored | 27 Aug, 2026 | npm inspectstack |
Malicious release: Malicious code in deepjoin (npm) GHSA-37cw-jw3f-qf4v, MAL-2026-14558 | Malicious | Not scored | 27 Aug, 2026 | npm deepjoin |
Malicious release: Malicious code in charclass (npm) GHSA-ccgj-rp72-9hvj, MAL-2026-14557 | Malicious | Not scored | 27 Aug, 2026 | npm charclass |
Malicious release: Malicious code in veloq (npm) GHSA-gccc-9phc-w64p, MAL-2026-14566 | Malicious | Not scored | 27 Aug, 2026 | npm veloq |
Malicious release: Malicious code in module-relpath (npm) GHSA-pmg4-2q5x-v3x5, MAL-2026-14561 | Malicious | Not scored | 27 Aug, 2026 | npm module-relpath |
Malicious release: Malicious code in sigcheck (npm) GHSA-qm8v-w5qj-32jq, MAL-2026-14564 | Malicious | Not scored | 27 Aug, 2026 | npm sigcheck |
Malicious release: Malicious code in morglog (npm) GHSA-v899-gp96-p5rv, MAL-2026-14562 | Malicious | Not scored | 27 Aug, 2026 | npm morglog |
Malicious release: Malicious code in decoris (PyPI) MAL-2026-14554 | Malicious | Not scored | 27 Aug, 2026 | PyPI decoris |
Malicious release: Malicious code in sap-quarterly-report (PyPI) MAL-2026-14556 | Malicious | Not scored | 27 Aug, 2026 | PyPI sap-quarterly-report |
Malicious release: Malicious code in ekx-report-utils (PyPI) MAL-2026-14555 | Malicious | Not scored | 27 Aug, 2026 | PyPI ekx-report-utils |
Malicious release: Malicious code in imo-allowlist-xss-poc (npm) GHSA-4whj-8383-9gc6, MAL-2026-14559 | Malicious | Not scored | 27 Aug, 2026 | npm imo-allowlist-xss-poc |
Malicious release: Malicious code in rn-push-provisioning (npm) GHSA-mjgw-fv57-pvwm, MAL-2026-14563 | Malicious | Not scored | 27 Aug, 2026 | npm rn-push-provisioning |
Malicious release: Malicious code in mathkitlite (PyPI) MAL-2026-14552 | Malicious | Not scored | 27 Aug, 2026 | PyPI mathkitlite |
Malicious release: Malicious code in @cortana-md/engine (npm) GHSA-2569-5468-g975, MAL-2026-14553 | Malicious | Not scored | 27 Aug, 2026 | npm @cortana-md/engine |
Malicious release: Malicious code in bnotify-web-sdk (npm) GHSA-h2p9-v9rw-px6c, MAL-2026-14551 | Malicious | Not scored | 27 Aug, 2026 | npm bnotify-web-sdk |
Malicious release: Malicious code in dumb-binding-gyp-package (npm) GHSA-p8h8-j624-2qhc, MAL-2026-14546 | Malicious | Not scored | 26 Aug, 2026 | npm dumb-binding-gyp-package |
Malicious release: Malicious code in the_tax_free_cashier_is_at_9f (npm) GHSA-4hc4-fpvc-7chp, MAL-2026-14549 | Malicious | Not scored | 26 Aug, 2026 | npm the_tax_free_cashier_is_at_9f |