Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in rs-lookout-sandbox-poc (npm) MAL-2026-18109 | Malicious | Not scored | 9 days ago | npm rs-lookout-sandbox-poc |
Malicious release: Malicious code in memories-core-web (npm) MAL-2026-18106 | Malicious | Not scored | 9 days ago | npm memories-core-web |
Malicious release: Malicious code in semvver (PyPI) MAL-2026-18104 | Malicious | Not scored | 9 days ago | PyPI semvver |
Malicious release: Malicious code in semveer (PyPI) MAL-2026-18102 | Malicious | Not scored | 9 days ago | PyPI semveer |
Malicious release: Malicious code in semmver (PyPI) MAL-2026-18101 | Malicious | Not scored | 9 days ago | PyPI semmver |
Malicious release: Malicious code in semverr (PyPI) MAL-2026-18103 | Malicious | Not scored | 9 days ago | PyPI semverr |
Malicious release: Malicious code in nwfp-build-config (npm) GHSA-fj85-27r8-hgfg, MAL-2026-18107 | Malicious | Not scored | 9 days ago | npm nwfp-build-config |
Malicious release: Malicious code in unicode-title-normalizer (npm) GHSA-66rv-6q99-h89g, MAL-2026-18100 | Malicious | Not scored | 9 days ago | npm unicode-title-normalizer |
Malicious release: Malicious code in formatting-subtitles-for-claude (npm) GHSA-xxr7-33gg-pcg6, MAL-2026-18099 | Malicious | Not scored | 9 days ago | npm formatting-subtitles-for-claude |
Malicious release: Malicious code in security-research-startup-snapshot-810764b303 (PyPI) MAL-2026-18098 | Malicious | Not scored | 9 days ago | PyPI security-research-startup-snapshot-810764b303 |
Malicious release: Malicious code in research-probe-6150c1c915 (PyPI) MAL-2026-18097 | Malicious | Not scored | 9 days ago | PyPI research-probe-6150c1c915 |
Malicious release: Malicious code in workalender (PyPI) MAL-2026-18096 | Malicious | Not scored | 9 days ago | PyPI workalender |
Malicious release: Malicious code in pafex (PyPI) MAL-2026-18094 | Malicious | Not scored | 9 days ago | PyPI pafex |
Malicious release: Malicious code in resion (PyPI) MAL-2026-18095 | Malicious | Not scored | 9 days ago | PyPI resion |
Malicious release: Malicious code in workcalender (PyPI) MAL-2026-18093 | Malicious | Not scored | 9 days ago | PyPI workcalender |
Malicious release: Malicious code in test-workalendar-internal (PyPI) MAL-2026-18092 | Malicious | Not scored | 9 days ago | PyPI test-workalendar-internal |
Malicious release: Malicious code in @platform-services/hrm-mfe-core (npm) MAL-2026-18091 | Malicious | Not scored | 10 days ago | npm @platform-services/hrm-mfe-core |
Malicious release: Malicious code in sc-announcer (npm) GHSA-fxw2-4j5q-6hwg, MAL-2026-18064 | Malicious | Not scored | 10 days ago | npm sc-announcer |
Malicious release: Malicious code in fanarena-common (npm) MAL-2026-18063 | Malicious | Not scored | 10 days ago | npm fanarena-common |
Malicious release: Malicious code in ccl-global-shopping (npm) GHSA-hh3m-f424-g8v5, MAL-2026-18061 | Malicious | Not scored | 10 days ago | npm ccl-global-shopping |
Malicious release: Malicious code in sc-wizard (npm) MAL-2026-18062 | Malicious | Not scored | 10 days ago | npm sc-wizard |
Malicious release: Malicious code in @an1mshnpmb9c84920/pipe-dns-m19t2 (npm) GHSA-3xpj-mfqg-v52m, MAL-2026-18049 | Malicious | Not scored | 10 days ago | npm @an1mshnpmb9c84920/pipe-dns-m19t2 |
Malicious release: Malicious code in @an1mshnpmb9c84920/stage-repo-m19g7 (npm) GHSA-42h4-pvwr-r87v, MAL-2026-18052 | Malicious | Not scored | 10 days ago | npm @an1mshnpmb9c84920/stage-repo-m19g7 |
Malicious release: Malicious code in @an1mshnpmb9c84920/stage-outer-m19s5 (npm) GHSA-6grm-8w52-497r, MAL-2026-18051 | Malicious | Not scored | 10 days ago | npm @an1mshnpmb9c84920/stage-outer-m19s5 |
Malicious release: Malicious code in @an1mshnpmb9c84920/gat-scope-target-125ec19a (npm) GHSA-87gv-mmww-whrr, MAL-2026-18046 | Malicious | Not scored | 10 days ago | npm @an1mshnpmb9c84920/gat-scope-target-125ec19a |
Malicious release: Malicious code in @an1mshnpmb9c84920/stage-fn-m19p2 (npm) GHSA-h79g-mv9q-7p44, MAL-2026-18050 | Malicious | Not scored | 10 days ago | npm @an1mshnpmb9c84920/stage-fn-m19p2 |
Malicious release: Malicious code in @an1mshnpmb9c84920/pipe-compat-m19r8 (npm) GHSA-hxmq-p768-mjhf, MAL-2026-18048 | Malicious | Not scored | 10 days ago | npm @an1mshnpmb9c84920/pipe-compat-m19r8 |
Malicious release: Malicious code in @an1mshnpmb9c84920/oidc-cross-cafb9d929e (npm) GHSA-mmr7-9m67-9qh5, MAL-2026-18047 | Malicious | Not scored | 10 days ago | npm @an1mshnpmb9c84920/oidc-cross-cafb9d929e |
Malicious release: Malicious code in @decoopus/chatgpt-setup (npm) GHSA-4632-2g34-4r9w, MAL-2026-18053 | Malicious | Not scored | 10 days ago | npm @decoopus/chatgpt-setup |
Malicious release: Malicious code in api-anthropic (npm) GHSA-cj9w-7h22-q93g, MAL-2026-18055 | Malicious | Not scored | 10 days ago | npm api-anthropic |
Malicious release: Malicious code in claude-desktop-setup (npm) GHSA-f4mf-vhm8-xxqc, MAL-2026-18059 | Malicious | Not scored | 10 days ago | npm claude-desktop-setup |
Malicious release: Malicious code in codex-setup (npm) GHSA-h8cg-xwfv-9x77, MAL-2026-18060 | Malicious | Not scored | 10 days ago | npm codex-setup |
Malicious release: Malicious code in @decoopus/claude-setup (npm) GHSA-p7p5-jrq5-q47x, MAL-2026-18054 | Malicious | Not scored | 10 days ago | npm @decoopus/claude-setup |
Malicious release: Malicious code in chatgpt-desktop-setup (npm) GHSA-pgq5-xq28-533m, MAL-2026-18056 | Malicious | Not scored | 10 days ago | npm chatgpt-desktop-setup |
Malicious release: Malicious code in chatgpt-pro-activator (npm) GHSA-qp43-mgx6-56x2, MAL-2026-18057 | Malicious | Not scored | 10 days ago | npm chatgpt-pro-activator |
Malicious release: Malicious code in chatgpt-pro-setup-tool (npm) GHSA-xwx3-5h3q-2v8r, MAL-2026-18058 | Malicious | Not scored | 10 days ago | npm chatgpt-pro-setup-tool |
Malicious release: Malicious code in asurion (PyPI) MAL-2026-18045 | Malicious | Not scored | 10 days ago | PyPI asurion |
Malicious release: Malicious code in vinted-mocked-apis (PyPI) MAL-2026-17943 | Malicious | Not scored | 10 days ago | PyPI vinted-mocked-apis |
Malicious release: Malicious code in esgbz5 (npm) GHSA-25f9-m2r5-6fcq, MAL-2026-18009 | Malicious | Not scored | 10 days ago | npm esgbz5 |
Malicious release: Malicious code in tkacg3 (npm) GHSA-27jv-jmw5-c2v5, MAL-2026-18037 | Malicious | Not scored | 10 days ago | npm tkacg3 |
Malicious release: Malicious code in v49yzy (npm) GHSA-299j-xhj5-p4mq, MAL-2026-18038 | Malicious | Not scored | 10 days ago | npm v49yzy |
Malicious release: Malicious code in 3gr841 (npm) GHSA-3268-6cgx-qmp3, MAL-2026-17946 | Malicious | Not scored | 10 days ago | npm 3gr841 |
Malicious release: Malicious code in 4p9kgm (npm) GHSA-37g4-578m-87mr, MAL-2026-17948 | Malicious | Not scored | 10 days ago | npm 4p9kgm |
Malicious release: Malicious code in j019qc (npm) GHSA-3c65-77q8-3cv8, MAL-2026-18018 | Malicious | Not scored | 10 days ago | npm j019qc |
Malicious release: Malicious code in noe77e (npm) GHSA-3f7v-wqcp-rcj5, MAL-2026-18033 | Malicious | Not scored | 10 days ago | npm noe77e |
Malicious release: Malicious code in 8h66ok (npm) GHSA-4755-8q82-c3cq, MAL-2026-17951 | Malicious | Not scored | 10 days ago | npm 8h66ok |
Malicious release: Malicious code in ju0oud (npm) GHSA-4vwp-4cgf-q7hm, MAL-2026-18020 | Malicious | Not scored | 10 days ago | npm ju0oud |
Malicious release: Malicious code in zubn7b (npm) GHSA-56wf-ffww-7w6r, MAL-2026-18044 | Malicious | Not scored | 10 days ago | npm zubn7b |
Malicious release: Malicious code in lstsyw (npm) GHSA-6f5h-29pq-736p, MAL-2026-18022 | Malicious | Not scored | 10 days ago | npm lstsyw |
Malicious release: Malicious code in g23p4g (npm) GHSA-6jj8-jfq4-rh25, MAL-2026-18013 | Malicious | Not scored | 10 days ago | npm g23p4g |