Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in react-emits (npm) GHSA-8gjf-85f5-p24f, MAL-2026-14403, SNYK-JS-REACTEMITS-19268012 | Malicious | Not scored | 24 Aug, 2026 | npm react-emits |
Malicious release: Malicious code in multyproccess (PyPI) MAL-2026-14401 | Malicious | Not scored | 24 Aug, 2026 | PyPI multyproccess |
Malicious release: Malicious code in agentgui (npm) GHSA-3g4v-p5hc-83qm, MAL-2026-14402 | Malicious | Not scored | 24 Aug, 2026 | npm agentgui |
Malicious release: Malicious code in message-compiler (npm) MAL-2026-14392 | Malicious | Not scored | 24 Aug, 2026 | npm message-compiler |
Malicious release: Malicious code in sm-oauth (npm) GHSA-9v7m-8hh3-3mc3, MAL-2026-14398 | Malicious | Not scored | 24 Aug, 2026 | npm sm-oauth |
Malicious release: Malicious code in amundi-compare (npm) MAL-2026-14390 | Malicious | Not scored | 24 Aug, 2026 | npm amundi-compare |
Malicious release: Malicious code in fund-calculator (npm) MAL-2026-14391 | Malicious | Not scored | 24 Aug, 2026 | npm fund-calculator |
Malicious release: Malicious code in envprovision (PyPI) MAL-2026-14389 | Malicious | Not scored | 23 Aug, 2026 | PyPI envprovision |
Malicious release: Malicious code in cryptgraphy (PyPI) MAL-2026-14388 | Malicious | Not scored | 23 Aug, 2026 | PyPI cryptgraphy |
Malicious release: Malicious code in @opap/player-kyc-widget (npm) GHSA-356g-cp7r-g5f5, MAL-2026-14387 | Malicious | Not scored | 23 Aug, 2026 | npm @opap/player-kyc-widget |
Malicious release: Malicious code in sm-apikey-model (npm) GHSA-r6qx-cjjw-53q3, MAL-2026-14394 | Malicious | Not scored | 23 Aug, 2026 | npm sm-apikey-model |
Malicious release: Malicious code in sm-checkout (npm) GHSA-ccvj-vpx6-qq27, MAL-2026-14397 | Malicious | Not scored | 23 Aug, 2026 | npm sm-checkout |
Malicious release: Malicious code in sm-payment (npm) GHSA-xr9c-mx62-832c, MAL-2026-14399 | Malicious | Not scored | 23 Aug, 2026 | npm sm-payment |
Malicious release: Malicious code in sm-session (npm) GHSA-2f9h-c49j-w22r, MAL-2026-14400 | Malicious | Not scored | 23 Aug, 2026 | npm sm-session |
Malicious release: Malicious code in sm-admin (npm) GHSA-9jm5-rh3f-jr86, MAL-2026-14393 | Malicious | Not scored | 23 Aug, 2026 | npm sm-admin |
Malicious release: Malicious code in sm-cart (npm) GHSA-79hh-8hx9-8jjr, MAL-2026-14396 | Malicious | Not scored | 23 Aug, 2026 | npm sm-cart |
Malicious release: Malicious code in sm-billing-form (npm) GHSA-5fmw-xf3x-g32g, MAL-2026-14395 | Malicious | Not scored | 23 Aug, 2026 | npm sm-billing-form |
Malicious release: Malicious code in mlflow-otel-instrumentor (PyPI) MAL-2026-14384 | Malicious | Not scored | 23 Aug, 2026 | PyPI mlflow-otel-instrumentor |
Malicious release: Malicious code in svelte-dim-kit (npm) GHSA-64x3-8jmm-fhp8, MAL-2026-14386 | Malicious | Not scored | 23 Aug, 2026 | npm svelte-dim-kit |
Malicious release: Malicious code in hydration-dim-kit (npm) GHSA-p33f-w7x3-mxrr, MAL-2026-14385 | Malicious | Not scored | 23 Aug, 2026 | npm hydration-dim-kit |
Malicious release: Malicious code in @sdgdfgdfhhhfd/multiviewr (npm) GHSA-wwgv-4qvc-7339, MAL-2026-14383 | Malicious | Not scored | 23 Aug, 2026 | npm @sdgdfgdfhhhfd/multiviewr |
Malicious release: Malicious code in @sdgdfgdfhhhfd/chainvista (npm) GHSA-849m-c6hc-74xx, MAL-2026-14382 | Malicious | Not scored | 23 Aug, 2026 | npm @sdgdfgdfhhhfd/chainvista |
Malicious release: Malicious code in fund-list-filter (npm) MAL-2026-14380 | Malicious | Not scored | 23 Aug, 2026 | npm fund-list-filter |
Malicious release: Malicious code in fund-portfolio (npm) MAL-2026-14381 | Malicious | Not scored | 23 Aug, 2026 | npm fund-portfolio |
Malicious release: Malicious code in 10-shardsight-web (npm) MAL-2026-14362 | Malicious | Not scored | 23 Aug, 2026 | npm 10-shardsight-web |
Malicious release: Malicious code in 2-loadsight-web (npm) MAL-2026-14363 | Malicious | Not scored | 23 Aug, 2026 | npm 2-loadsight-web |
Malicious release: Malicious code in 3-buildsight-web (npm) MAL-2026-14364 | Malicious | Not scored | 23 Aug, 2026 | npm 3-buildsight-web |
Malicious release: Malicious code in 8-fetchsight-web (npm) MAL-2026-14366 | Malicious | Not scored | 23 Aug, 2026 | npm 8-fetchsight-web |
Malicious release: Malicious code in 6-viewsight-web (npm) MAL-2026-14365 | Malicious | Not scored | 23 Aug, 2026 | npm 6-viewsight-web |
Malicious release: Malicious code in @usaa-grp-personal-profile/personal-profile-common (npm) GHSA-hhfp-ggmv-qx2x, MAL-2026-14370 | Malicious | Not scored | 23 Aug, 2026 | npm @usaa-grp-personal-profile/personal-profile-common |
Malicious release: Malicious code in @syncraft-labs/react (npm) GHSA-4xx4-j6wx-746g, MAL-2026-14368 | Malicious | Not scored | 23 Aug, 2026 | npm @syncraft-labs/react |
Malicious release: Malicious code in create-coin (npm) MAL-2026-14372 | Malicious | Not scored | 23 Aug, 2026 | npm create-coin |
Malicious release: Malicious code in @syncraft-labs/vue (npm) GHSA-pv4r-p86x-36rw, MAL-2026-14369 | Malicious | Not scored | 23 Aug, 2026 | npm @syncraft-labs/vue |
Malicious release: Malicious code in @syncraft-labs/core (npm) GHSA-vhcg-r2h4-gx3m, MAL-2026-14367 | Malicious | Not scored | 23 Aug, 2026 | npm @syncraft-labs/core |
Malicious release: Malicious code in chai-as-testkit (npm) GHSA-wg38-qj68-8g87, MAL-2026-14371 | Malicious | Not scored | 23 Aug, 2026 | npm chai-as-testkit |
Malicious release: Malicious code in rust-testing-utils (npm) MAL-2026-14374 | Malicious | Not scored | 23 Aug, 2026 | npm rust-testing-utils |
Malicious release: Malicious code in solidity-testing-utils (npm) MAL-2026-14375 | Malicious | Not scored | 23 Aug, 2026 | npm solidity-testing-utils |
Malicious release: Malicious code in hatdhat-testkit (npm) MAL-2026-14373 | Malicious | Not scored | 23 Aug, 2026 | npm hatdhat-testkit |
Malicious release: Malicious code in stillm4ddpocs-rtest-bravo (npm) MAL-2026-14378 | Malicious | Not scored | 23 Aug, 2026 | npm stillm4ddpocs-rtest-bravo |
Malicious release: Malicious code in stillm4ddpocs-demo-sprocket (npm) MAL-2026-14376 | Malicious | Not scored | 23 Aug, 2026 | npm stillm4ddpocs-demo-sprocket |
Malicious release: Malicious code in stillm4ddpocs-rtest-alpha (npm) MAL-2026-14377 | Malicious | Not scored | 23 Aug, 2026 | npm stillm4ddpocs-rtest-alpha |
Malicious release: Malicious code in @postman-cse/okta-aio-darwin-arm64 (npm) MAL-2026-14580 | Malicious | Not scored | 23 Aug, 2026 | npm @postman-cse/okta-aio-darwin-arm64 |
Malicious release: Malicious code in stillm4ddpocs-demo-gadget (npm) MAL-2026-14361 | Malicious | Not scored | 22 Aug, 2026 | npm stillm4ddpocs-demo-gadget |
Malicious release: Malicious code in stillm4ddpocs-demo-widget (npm) MAL-2026-14360 | Malicious | Not scored | 22 Aug, 2026 | npm stillm4ddpocs-demo-widget |
Malicious release: Malicious code in internallib_v902 (npm) GHSA-3p65-4jqj-5j69, MAL-2026-14359 | Malicious | Not scored | 22 Aug, 2026 | npm internallib_v902 |
Malicious release: Malicious code in scrambleeeer (PyPI) MAL-2026-14358 | Malicious | Not scored | 22 Aug, 2026 | PyPI scrambleeeer |
Malicious release: Malicious code in @postman-cse/okta-aio-linux-arm64 (npm) GHSA-h84r-259m-g3fg, MAL-2026-14357 | Malicious | Not scored | 22 Aug, 2026 | npm @postman-cse/okta-aio-linux-arm64 |
Malicious release: Malicious code in lumen-pages-community (npm) MAL-2026-14356 | Malicious | Not scored | 21 Aug, 2026 | npm lumen-pages-community |
Malicious release: Malicious code in fuel-react (npm) MAL-2026-14355 | Malicious | Not scored | 21 Aug, 2026 | npm fuel-react |
Malicious release: Malicious code in kelly-sizing (npm) GHSA-vj74-3pcr-5p7j, MAL-2026-14354 | Malicious | Not scored | 21 Aug, 2026 | npm kelly-sizing |