Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in mega-pro-box (RubyGems) MAL-2026-15715 | Malicious | Not scored | 24 Aug, 2026 | RubyGems mega-pro-box |
Malicious release: Malicious code in mega-lite-kit (RubyGems) MAL-2026-15714 | Malicious | Not scored | 24 Aug, 2026 | RubyGems mega-lite-kit |
Malicious release: Malicious code in mega-fast-sys (RubyGems) MAL-2026-15713 | Malicious | Not scored | 24 Aug, 2026 | RubyGems mega-fast-sys |
Malicious release: Malicious code in mega-clean-sys (RubyGems) MAL-2026-15712 | Malicious | Not scored | 24 Aug, 2026 | RubyGems mega-clean-sys |
Malicious release: Malicious code in hyper-smart-kit (RubyGems) MAL-2026-15711 | Malicious | Not scored | 24 Aug, 2026 | RubyGems hyper-smart-kit |
Malicious release: Malicious code in hyper-sharp-lib (RubyGems) MAL-2026-15710 | Malicious | Not scored | 24 Aug, 2026 | RubyGems hyper-sharp-lib |
Malicious release: Malicious code in hyper-sharp-box (RubyGems) MAL-2026-15709 | Malicious | Not scored | 24 Aug, 2026 | RubyGems hyper-sharp-box |
Malicious release: Malicious code in hyper-safe-kit (RubyGems) MAL-2026-15708 | Malicious | Not scored | 24 Aug, 2026 | RubyGems hyper-safe-kit |
Malicious release: Malicious code in hyper-safe-hub (RubyGems) MAL-2026-15707 | Malicious | Not scored | 24 Aug, 2026 | RubyGems hyper-safe-hub |
Malicious release: Malicious code in hyper-pro-kit (RubyGems) MAL-2026-15705 | Malicious | Not scored | 24 Aug, 2026 | RubyGems hyper-pro-kit |
Malicious release: Malicious code in hyper-quick-kit (RubyGems) MAL-2026-15706 | Malicious | Not scored | 24 Aug, 2026 | RubyGems hyper-quick-kit |
Malicious release: Malicious code in hyper-lite-tool (RubyGems) MAL-2026-15704 | Malicious | Not scored | 24 Aug, 2026 | RubyGems hyper-lite-tool |
Malicious release: Malicious code in giga-sharp-tool (RubyGems) MAL-2026-15703 | Malicious | Not scored | 24 Aug, 2026 | RubyGems giga-sharp-tool |
Malicious release: Malicious code in giga-safe-hub (RubyGems) MAL-2026-15702 | Malicious | Not scored | 24 Aug, 2026 | RubyGems giga-safe-hub |
Malicious release: Malicious code in giga-quick-rb (RubyGems) MAL-2026-15701 | Malicious | Not scored | 24 Aug, 2026 | RubyGems giga-quick-rb |
Malicious release: Malicious code in giga-pure-kit (RubyGems) MAL-2026-15700 | Malicious | Not scored | 24 Aug, 2026 | RubyGems giga-pure-kit |
Malicious release: Malicious code in giga-max-kit (RubyGems) MAL-2026-15698 | Malicious | Not scored | 24 Aug, 2026 | RubyGems giga-max-kit |
Malicious release: Malicious code in giga-max-mod (RubyGems) MAL-2026-15699 | Malicious | Not scored | 24 Aug, 2026 | RubyGems giga-max-mod |
Malicious release: Malicious code in giga-clean-kit (RubyGems) MAL-2026-15696 | Malicious | Not scored | 24 Aug, 2026 | RubyGems giga-clean-kit |
Malicious release: Malicious code in giga-clean-pkg (RubyGems) MAL-2026-15697 | Malicious | Not scored | 24 Aug, 2026 | RubyGems giga-clean-pkg |
Malicious release: Malicious code in giga-clean-box (RubyGems) MAL-2026-15695 | Malicious | Not scored | 24 Aug, 2026 | RubyGems giga-clean-box |
Malicious release: Malicious code in circle-w3s (RubyGems) MAL-2026-15694 | Malicious | Not scored | 24 Aug, 2026 | RubyGems circle-w3s |
Malicious release: Malicious code in py-devoli-common (PyPI) MAL-2026-15693 | Malicious | Not scored | 24 Aug, 2026 | PyPI py-devoli-common |
Malicious release: Malicious code in dotish (npm) GHSA-5xvx-37p2-x7j9, MAL-2026-14418 | Malicious | Not scored | 24 Aug, 2026 | npm dotish |
Malicious release: Malicious code in dims-svelte-ui (npm) GHSA-3jcp-rjh9-wq99, MAL-2026-14417 | Malicious | Not scored | 24 Aug, 2026 | npm dims-svelte-ui |
Malicious release: Malicious code in dims-hydration-ui (npm) GHSA-5hwv-w72c-55qw, MAL-2026-14416 | Malicious | Not scored | 24 Aug, 2026 | npm dims-hydration-ui |
Malicious release: Malicious code in tkyoussef-hb (npm) GHSA-g95w-qwf7-2h4p, MAL-2026-14419 | Malicious | Not scored | 24 Aug, 2026 | npm tkyoussef-hb |
Malicious release: Malicious code in @elc-online/up-analytics (npm) MAL-2026-14443 | Malicious | Not scored | 24 Aug, 2026 | npm @elc-online/up-analytics |
Malicious release: Malicious code in react-dynamic-parser (npm) GHSA-r8wh-m45c-f35g, MAL-2026-14415 | Malicious | Not scored | 24 Aug, 2026 | npm react-dynamic-parser |
Malicious release: Malicious code in livemcp (npm) GHSA-rxwc-v5gg-9hhw, MAL-2026-14413 | Malicious | Not scored | 24 Aug, 2026 | npm livemcp |
Malicious release: Malicious code in mcp-real-chrome (npm) GHSA-vqm6-238c-g856, MAL-2026-14414 | Malicious | Not scored | 24 Aug, 2026 | npm mcp-real-chrome |
Malicious release: Malicious code in @deepaksilaych/sess (npm) GHSA-wxfm-64xv-2h3m, MAL-2026-14412 | Malicious | Not scored | 24 Aug, 2026 | npm @deepaksilaych/sess |
Malicious release: Malicious code in @medisend/webview-bridge (npm) GHSA-j743-3xjm-x63m, MAL-2026-14424 | Malicious | Not scored | 24 Aug, 2026 | npm @medisend/webview-bridge |
Malicious release: Malicious code in dpg-media-7ehemel (npm) MAL-2026-14411 | Malicious | Not scored | 24 Aug, 2026 | npm dpg-media-7ehemel |
Malicious release: Malicious code in msrcpoc (PyPI) MAL-2026-14444 | Malicious | Not scored | 24 Aug, 2026 | PyPI msrcpoc |
Malicious release: Malicious code in @temptation.js/utils (npm) MAL-2026-14410 | Malicious | Not scored | 24 Aug, 2026 | npm @temptation.js/utils |
Malicious release: Malicious code in dext-crate-video (npm) GHSA-299m-84fp-94p9, MAL-2026-14408 | Malicious | Not scored | 24 Aug, 2026 | npm dext-crate-video |
Malicious release: Malicious code in dext-crate-check (npm) GHSA-9m4w-p72c-cqwq, MAL-2026-14406 | Malicious | Not scored | 24 Aug, 2026 | npm dext-crate-check |
Malicious release: Malicious code in create-json-client (npm) GHSA-9m88-8qj5-73j8, MAL-2026-14405 | Malicious | Not scored | 24 Aug, 2026 | npm create-json-client |
Malicious release: Malicious code in dext-crate-image (npm) GHSA-mj2f-654h-x283, MAL-2026-14407 | Malicious | Not scored | 24 Aug, 2026 | npm dext-crate-image |
Malicious release: Malicious code in polis-diraja (npm) GHSA-6rrq-x6hp-4xcm, MAL-2026-14409 | Malicious | Not scored | 24 Aug, 2026 | npm polis-diraja |
Malicious release: Malicious code in @blurrydespair/libsignal-node (npm) GHSA-rw8r-gxqp-rwfh, MAL-2026-14404 | Malicious | Not scored | 24 Aug, 2026 | npm @blurrydespair/libsignal-node |
Malicious release: Malicious code in react-emits (npm) GHSA-8gjf-85f5-p24f, MAL-2026-14403, SNYK-JS-REACTEMITS-19268012 | Malicious | Not scored | 24 Aug, 2026 | npm react-emits |
Malicious release: Malicious code in multyproccess (PyPI) MAL-2026-14401 | Malicious | Not scored | 24 Aug, 2026 | PyPI multyproccess |
Malicious release: Malicious code in agentgui (npm) GHSA-3g4v-p5hc-83qm, MAL-2026-14402 | Malicious | Not scored | 24 Aug, 2026 | npm agentgui |
Malicious release: Malicious code in message-compiler (npm) MAL-2026-14392 | Malicious | Not scored | 24 Aug, 2026 | npm message-compiler |
Malicious release: Malicious code in sm-oauth (npm) GHSA-9v7m-8hh3-3mc3, MAL-2026-14398 | Malicious | Not scored | 24 Aug, 2026 | npm sm-oauth |
Malicious release: Malicious code in amundi-compare (npm) MAL-2026-14390 | Malicious | Not scored | 24 Aug, 2026 | npm amundi-compare |
Malicious release: Malicious code in fund-calculator (npm) MAL-2026-14391 | Malicious | Not scored | 24 Aug, 2026 | npm fund-calculator |
Malicious release: Malicious code in envprovision (PyPI) MAL-2026-14389 | Malicious | Not scored | 23 Aug, 2026 | PyPI envprovision |