Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in dumb-binding-gyp-package (npm) GHSA-p8h8-j624-2qhc, MAL-2026-14546 | Malicious | Not scored | 26 Aug, 2026 | npm dumb-binding-gyp-package |
Malicious release: Malicious code in the_tax_free_cashier_is_at_9f (npm) GHSA-4hc4-fpvc-7chp, MAL-2026-14549 | Malicious | Not scored | 26 Aug, 2026 | npm the_tax_free_cashier_is_at_9f |
Malicious release: Malicious code in tset_racie (npm) GHSA-7978-5fh2-74q2, MAL-2026-14550 | Malicious | Not scored | 26 Aug, 2026 | npm tset_racie |
Malicious release: Malicious code in shai_hulululud (npm) GHSA-c83w-r5p2-qhmj, MAL-2026-14548 | Malicious | Not scored | 26 Aug, 2026 | npm shai_hulululud |
Malicious release: Malicious code in grandfather_of_the_desert (npm) GHSA-fjvc-xq44-gq59, MAL-2026-14547 | Malicious | Not scored | 26 Aug, 2026 | npm grandfather_of_the_desert |
Malicious release: Malicious code in pybitjs (PyPI) MAL-2026-14545 | Malicious | Not scored | 26 Aug, 2026 | PyPI pybitjs |
Malicious release: Malicious code in trongridet (PyPI) MAL-2026-14542 | Malicious | Not scored | 26 Aug, 2026 | PyPI trongridet |
Malicious release: Malicious code in self-sign (npm) GHSA-9jvg-g3cg-g557, MAL-2026-14544 | Malicious | Not scored | 26 Aug, 2026 | npm self-sign |
Malicious release: Malicious code in self-certificates (npm) GHSA-rwg4-cx82-h5hq, MAL-2026-14543 | Malicious | Not scored | 26 Aug, 2026 | npm self-certificates |
Malicious release: Malicious code in svelte-vli-ui (npm) GHSA-hxqf-cq68-wh37, MAL-2026-14541 | Malicious | Not scored | 26 Aug, 2026 | npm svelte-vli-ui |
Malicious release: Malicious code in skxcmwuncbg2 (npm) GHSA-359j-h655-qjj8, MAL-2026-15617 | Malicious | Not scored | 26 Aug, 2026 | npm skxcmwuncbg2 |
Malicious release: Malicious code in ndmushdkeqe (npm) GHSA-37vh-p33m-66qj, MAL-2026-15615 | Malicious | Not scored | 26 Aug, 2026 | npm ndmushdkeqe |
Malicious release: Malicious code in @worrisome/reutil (npm) GHSA-4f5p-mp5p-863f, MAL-2026-15604 | Malicious | Not scored | 26 Aug, 2026 | npm @worrisome/reutil |
Malicious release: Malicious code in mbxcnsuwgs1 (npm) GHSA-4vx3-9fv9-qg2m, MAL-2026-15607 | Malicious | Not scored | 26 Aug, 2026 | npm mbxcnsuwgs1 |
Malicious release: Malicious code in mn3sadkoiewu (npm) GHSA-75jq-g4f8-9qc8, MAL-2026-15610 | Malicious | Not scored | 26 Aug, 2026 | npm mn3sadkoiewu |
Malicious release: Malicious code in ndmfguyhoxc3 (npm) GHSA-78rr-8f2w-5rc6, MAL-2026-15614 | Malicious | Not scored | 26 Aug, 2026 | npm ndmfguyhoxc3 |
Malicious release: Malicious code in m2fcsfyjkuxb (npm) GHSA-7qc3-j6rw-97cj, MAL-2026-15605 | Malicious | Not scored | 26 Aug, 2026 | npm m2fcsfyjkuxb |
Malicious release: Malicious code in m3fdfocdoewn (npm) GHSA-875w-cq68-wx4x, MAL-2026-15606 | Malicious | Not scored | 26 Aug, 2026 | npm m3fdfocdoewn |
Malicious release: Malicious code in mndsxcusiwlk1 (npm) GHSA-9hfw-wfrj-ch4w, MAL-2026-15612 | Malicious | Not scored | 26 Aug, 2026 | npm mndsxcusiwlk1 |
Malicious release: Malicious code in ndmxchdjxn2 (npm) GHSA-fmcc-5g3h-mfcv, MAL-2026-15616 | Malicious | Not scored | 26 Aug, 2026 | npm ndmxchdjxn2 |
Malicious release: Malicious code in mjsdqwocvn (npm) GHSA-g8p8-qh38-wcch, MAL-2026-15608 | Malicious | Not scored | 26 Aug, 2026 | npm mjsdqwocvn |
Malicious release: Malicious code in mn2adskhweox (npm) GHSA-g95p-vc6m-hcc4, MAL-2026-15609 | Malicious | Not scored | 26 Aug, 2026 | npm mn2adskhweox |
Malicious release: Malicious code in tesgfvbncsdbcv (npm) GHSA-g964-6ghm-6425, MAL-2026-15618 | Malicious | Not scored | 26 Aug, 2026 | npm tesgfvbncsdbcv |
Malicious release: Malicious code in mobiwaefhxc3 (npm) GHSA-p3q4-92gv-p4rx, MAL-2026-15613 | Malicious | Not scored | 26 Aug, 2026 | npm mobiwaefhxc3 |
Malicious release: Malicious code in mn4xcouzvhus (npm) GHSA-qq52-45wm-mmfg, MAL-2026-15611 | Malicious | Not scored | 26 Aug, 2026 | npm mn4xcouzvhus |
Malicious release: Malicious code in testdgdbcsd (npm) GHSA-w89m-c7mr-rcm9, MAL-2026-15619 | Malicious | Not scored | 26 Aug, 2026 | npm testdgdbcsd |
Malicious release: Malicious code in vxhjkseuiaqkb (npm) GHSA-x28c-cwx7-wqhf, MAL-2026-15620 | Malicious | Not scored | 26 Aug, 2026 | npm vxhjkseuiaqkb |
Malicious release: Malicious code in zenntechinc-cli (npm) GHSA-6wh9-pcqw-jp9j, MAL-2026-14539 | Malicious | Not scored | 26 Aug, 2026 | npm zenntechinc-cli |
Malicious release: Malicious code in spotify-url-resolvers (npm) GHSA-w77g-6g5j-wr2r, MAL-2026-14538 | Malicious | Not scored | 26 Aug, 2026 | npm spotify-url-resolvers |
Malicious release: Malicious code in chai-plus (npm) GHSA-2r27-f59g-4hcx, MAL-2026-14533 | Malicious | Not scored | 26 Aug, 2026 | npm chai-plus |
Malicious release: Malicious code in commonjs-code-token (npm) MAL-2026-14534 | Malicious | Not scored | 26 Aug, 2026 | npm commonjs-code-token |
Malicious release: Malicious code in analytics-v2 (npm) MAL-2026-14531 | Malicious | Not scored | 26 Aug, 2026 | npm analytics-v2 |
Malicious release: Malicious code in mt-ts-serverless-starter (npm) MAL-2026-14536 | Malicious | Not scored | 26 Aug, 2026 | npm mt-ts-serverless-starter |
Malicious release: Malicious code in hydration-vli-ui (npm) GHSA-v229-xfmv-q98w, MAL-2026-14535 | Malicious | Not scored | 26 Aug, 2026 | npm hydration-vli-ui |
Malicious release: Malicious code in chai-as-org (npm) MAL-2026-14532 | Malicious | Not scored | 26 Aug, 2026 | npm chai-as-org |
Malicious release: Malicious code in octopus-action (npm) GHSA-27rc-jrqq-3wvj, MAL-2026-14537 | Malicious | Not scored | 26 Aug, 2026 | npm octopus-action |
Malicious release: Malicious code in @lordmega/baileys (npm) GHSA-98ch-w7w3-xfq9, MAL-2026-14540 | Malicious | Not scored | 26 Aug, 2026 | npm @lordmega/baileys |
Malicious release: Malicious code in baileys-mbuilder (npm) GHSA-8m87-xx52-4rjw, MAL-2026-14529 | Malicious | Not scored | 26 Aug, 2026 | npm baileys-mbuilder |
Malicious release: Malicious code in @fongsidev/scraper (npm) GHSA-cm89-9x7j-wr2g, MAL-2026-14527 | Malicious | Not scored | 26 Aug, 2026 | npm @fongsidev/scraper |
Malicious release: Malicious code in baileys-inmemory-store (npm) GHSA-gr9h-5xx6-g7cc, MAL-2026-14528 | Malicious | Not scored | 26 Aug, 2026 | npm baileys-inmemory-store |
Malicious release: Malicious code in infomedia (npm) GHSA-mpxq-q6j7-77jh, MAL-2026-14530 | Malicious | Not scored | 26 Aug, 2026 | npm infomedia |
Malicious release: Malicious code in omniauth-recharge-rails-example (npm) MAL-2026-14526 | Malicious | Not scored | 26 Aug, 2026 | npm omniauth-recharge-rails-example |
Malicious release: Malicious code in 0xfighter3 (PyPI) MAL-2026-14525 | Malicious | Not scored | 26 Aug, 2026 | PyPI 0xfighter3 |
Malicious release: Malicious code in bigquery-agent-analytics-tracing (PyPI) MAL-2026-14524 | Malicious | Not scored | 26 Aug, 2026 | PyPI bigquery-agent-analytics-tracing |
Malicious release: Malicious code in rce-test (PyPI) MAL-2026-14523 | Malicious | Not scored | 26 Aug, 2026 | PyPI rce-test |
Malicious release: Malicious code in syntaxerror-package-12345 (PyPI) MAL-2026-14522 | Malicious | Not scored | 26 Aug, 2026 | PyPI syntaxerror-package-12345 |
Malicious release: Malicious code in array-shuffler-utils-99 (npm) GHSA-22jp-536p-wwgr, MAL-2026-14519 | Malicious | Not scored | 26 Aug, 2026 | npm array-shuffler-utils-99 |
Malicious release: Malicious code in fivem-tool-helper-v2 (npm) GHSA-qgxc-chq8-gvrg, MAL-2026-14521 | Malicious | Not scored | 26 Aug, 2026 | npm fivem-tool-helper-v2 |
Malicious release: Malicious code in fivem-tool-helper (npm) GHSA-7jgv-5jq7-38g6, MAL-2026-14520 | Malicious | Not scored | 26 Aug, 2026 | npm fivem-tool-helper |
Malicious release: Malicious code in hydration-ui-cls (npm) GHSA-596w-j9vp-pr5x, MAL-2026-14517 | Malicious | Not scored | 25 Aug, 2026 | npm hydration-ui-cls |