Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in twitter-request-diagnostics (PyPI) MAL-2026-18403 | Malicious | Not scored | 3 hours ago | PyPI twitter-request-diagnostics |
Malicious release: Malicious code in test-01-rafamarrara-learning-dc (PyPI) MAL-2026-18402 | Malicious | Not scored | 3 hours ago | PyPI test-01-rafamarrara-learning-dc |
Malicious release: Malicious code in dowload_ebok_lolita_by_vladimir_nabokov_oy1gy (npm) GHSA-cjmr-6xg2-vf8h, MAL-2026-18399 | Malicious | Not scored | 4 hours ago | npm dowload_ebok_lolita_by_vladimir_nabokov_oy1gy |
Malicious release: Malicious code in dowload_ebok_el_piso_mil_el_piso_mil_1_by_katharine_mcgee_h1llc (npm) GHSA-j272-m9j4-g3v9, MAL-2026-18398 | Malicious | Not scored | 4 hours ago | npm dowload_ebok_el_piso_mil_el_piso_mil_1_by_katharine_mcgee_h1llc |
Malicious release: Malicious code in dowload_ebok_nur_mal_schnell_das_mammut_retten_by_knut_kruger_eva_schoffmann_davidov_ouz6t (npm) GHSA-5cmc-vx46-22wx, MAL-2026-18400 | Malicious | Not scored | 4 hours ago | npm dowload_ebok_nur_mal_schnell_das_mammut_retten_by_knut_kruger_eva_schoffmann_davidov_ouz6t |
Malicious release: Malicious code in dowload_ebok_reiki_sviluppa_e_usa_lenergia_reiki_by_matt_harvey_9q55p (npm) GHSA-h86m-7gvf-j79h, MAL-2026-18401 | Malicious | Not scored | 4 hours ago | npm dowload_ebok_reiki_sviluppa_e_usa_lenergia_reiki_by_matt_harvey_9q55p |
Malicious release: Malicious code in dowload_ebok_armageddon_by_max_hastings_kv3s4 (npm) GHSA-p6mc-228w-6q75, MAL-2026-18397 | Malicious | Not scored | 4 hours ago | npm dowload_ebok_armageddon_by_max_hastings_kv3s4 |
Malicious release: Malicious code in bq-helix-build-hook-6ade983e (PyPI) MAL-2026-18395 | Malicious | Not scored | 6 hours ago | PyPI bq-helix-build-hook-6ade983e |
Malicious release: Malicious code in bq-helix-recon-6ade983e (PyPI) MAL-2026-18396 | Malicious | Not scored | 6 hours ago | PyPI bq-helix-recon-6ade983e |
Malicious release: Malicious code in orderbook-volt-plugin (npm) GHSA-w9pq-6r9f-pj96, MAL-2026-18393 | Malicious | Not scored | 7 hours ago | npm orderbook-volt-plugin |
Malicious release: Malicious code in react-native-drago-callkit (npm) GHSA-jp74-4rg3-7ppj, MAL-2026-18394 | Malicious | Not scored | 8 hours ago | npm react-native-drago-callkit |
Malicious release: Malicious code in @chatunitycenter/baileys (npm) GHSA-g6j7-j669-23g6, MAL-2026-18392 | Malicious | Not scored | 9 hours ago | npm @chatunitycenter/baileys |
Malicious release: Malicious code in 789bet-vip-login (npm) GHSA-4rjq-j97h-cqxc, MAL-2026-18387 | Malicious | Not scored | 11 hours ago | npm 789bet-vip-login |
Malicious release: Malicious code in 789bet-entrance (npm) GHSA-6xqc-cfvp-q89v, MAL-2026-18383 | Malicious | Not scored | 11 hours ago | npm 789bet-entrance |
Malicious release: Malicious code in 789bet-vip-online-login (npm) GHSA-f5mv-v4rc-qq2q, MAL-2026-18388 | Malicious | Not scored | 11 hours ago | npm 789bet-vip-online-login |
Malicious release: Malicious code in 789bet-slot (npm) GHSA-q68g-454g-9qww, MAL-2026-18385 | Malicious | Not scored | 11 hours ago | npm 789bet-slot |
Malicious release: Malicious code in 789bet-vip (npm) GHSA-rvxc-82gp-xpr6, MAL-2026-18386 | Malicious | Not scored | 11 hours ago | npm 789bet-vip |
Malicious release: Malicious code in 789bet-login-th (npm) GHSA-wg3r-wqgc-7fgf, MAL-2026-18384 | Malicious | Not scored | 11 hours ago | npm 789bet-login-th |
Malicious release: Malicious code in m98bet (npm) GHSA-6ggw-hqvq-8wcm, MAL-2026-18389 | Malicious | Not scored | 11 hours ago | npm m98bet |
Malicious release: Malicious code in 789bet (npm) GHSA-cccw-qphx-7whg, MAL-2026-18382 | Malicious | Not scored | 11 hours ago | npm 789bet |
Malicious release: Malicious code in m98vip (npm) GHSA-gp92-xqcg-876c, MAL-2026-18391 | Malicious | Not scored | 11 hours ago | npm m98vip |
Malicious release: Malicious code in m98th (npm) GHSA-x82c-crm3-jcwv, MAL-2026-18390 | Malicious | Not scored | 11 hours ago | npm m98th |
Malicious release: Malicious code in @jasperquinn/postcss-motion-helpers (npm) GHSA-88vx-c9pj-9527, MAL-2026-18379 | Malicious | Not scored | 11 hours ago | npm @jasperquinn/postcss-motion-helpers |
Malicious release: Malicious code in black-spindle-2 (npm) MAL-2026-18376 | Malicious | Not scored | 11 hours ago | npm black-spindle-2 |
Malicious release: Malicious code in poc-revshell (PyPI) MAL-2026-18378 | Malicious | Not scored | 11 hours ago | PyPI poc-revshell |
Malicious release: Malicious code in spectral-core (npm) MAL-2026-18377 | Malicious | Not scored | 11 hours ago | npm spectral-core |
Malicious release: Malicious code in @dmangal/curse-dependent-ecto (npm) MAL-2026-18375 | Malicious | Not scored | 11 hours ago | npm @dmangal/curse-dependent-ecto |
Malicious release: Malicious code in cjlowuxbnexkhgpzq (npm) GHSA-pr23-gvcv-c422, MAL-2026-18381 | Malicious | Not scored | 12 hours ago | npm cjlowuxbnexkhgpzq |
Malicious release: Malicious code in bcxhdh1kjlopsde (npm) GHSA-v78q-7787-v9rq, MAL-2026-18380 | Malicious | Not scored | 12 hours ago | npm bcxhdh1kjlopsde |
Malicious release: Malicious code in mw-communication-client (npm) MAL-2026-18370 | Malicious | Not scored | 13 hours ago | npm mw-communication-client |
Malicious release: Malicious code in mw-test-utils (npm) MAL-2026-18371 | Malicious | Not scored | 13 hours ago | npm mw-test-utils |
Malicious release: Malicious code in mui-wrapper-x-date-pickers (npm) MAL-2026-18369 | Malicious | Not scored | 13 hours ago | npm mui-wrapper-x-date-pickers |
Malicious release: Malicious code in monte-md-baileys (npm) MAL-2026-17399 | Malicious | Not scored | 13 hours ago | npm monte-md-baileys |
Malicious release: Malicious code in noxleyss (npm) MAL-2026-17402 | Malicious | Not scored | 13 hours ago | npm noxleyss |
Malicious release: Malicious code in @rennnpm/baileys (npm) MAL-2026-17374 | Malicious | Not scored | 13 hours ago | npm @rennnpm/baileys |
Malicious release: Malicious code in seapy-ops (PyPI) MAL-2026-17880 | Malicious | Not scored | 13 hours ago | PyPI seapy-ops |
Malicious release: Malicious code in @testsecuiitytestme/cache-helper (npm) MAL-2026-18358 | Malicious | Not scored | 13 hours ago | npm @testsecuiitytestme/cache-helper |
Malicious release: Malicious code in dsh-volcengine-provider (npm) GHSA-8hr2-m7vq-fhpg, MAL-2026-18374 | Malicious | Not scored | 17 hours ago | npm dsh-volcengine-provider |
Malicious release: Malicious code in dsh-redteam-mode (npm) GHSA-r4m9-8735-g966, MAL-2026-18366 | Malicious | Not scored | 21 hours ago | npm dsh-redteam-mode |
Malicious release: Malicious code in b20miner (npm) GHSA-fw7x-6chc-4244, MAL-2026-18365 | Malicious | Not scored | 1 day ago | npm b20miner |
Malicious release: Malicious code in @zaip-ai/cli (npm) GHSA-ffq4-h5jm-8pqr, MAL-2026-18364 | Malicious | Not scored | 1 day ago | npm @zaip-ai/cli |
Malicious release: Malicious code in itsa-utils (npm) GHSA-x788-rmcm-4x49, MAL-2026-18363 | Malicious | Not scored | 1 day ago | npm itsa-utils |
Malicious release: Malicious code in itsa-react-checkbox (npm) GHSA-46r9-rx5f-hqqf, MAL-2026-18360 | Malicious | Not scored | 1 day ago | npm itsa-react-checkbox |
Malicious release: Malicious code in transaction-info-generate-sdk (npm) GHSA-23j5-jj88-v9f3, MAL-2026-18362 | Malicious | Not scored | 1 day ago | npm transaction-info-generate-sdk |
Malicious release: Malicious code in mock-transactions-sdk (npm) GHSA-357r-x5jp-3p8f, MAL-2026-18361 | Malicious | Not scored | 1 day ago | npm mock-transactions-sdk |
Malicious release: Malicious code in black-spindle (npm) MAL-2026-18359 | Malicious | Not scored | 1 day ago | npm black-spindle |
Malicious release: Malicious code in @zmtcdn/components (npm) MAL-2026-18372 | Malicious | Not scored | 1 day ago | npm @zmtcdn/components |
Malicious release: Malicious code in @zmtcdn/ui (npm) MAL-2026-18373 | Malicious | Not scored | 1 day ago | npm @zmtcdn/ui |
Malicious release: Malicious code in identity-two-factor (npm) MAL-2026-18367 | Malicious | Not scored | 1 day ago | npm identity-two-factor |
Malicious release: Malicious code in spectral-net-probe (npm) MAL-2026-18368 | Malicious | Not scored | 1 day ago | npm spectral-net-probe |