Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Prototype Pollution in bmoor CVE-2020-7736, GHSA-h3rx-g5c9-8q4x, SNYK-JS-BMOOR-598664 | Critical | 1.5% | 02 Oct, 2020 | npm bmoor |
Malicious code in `loadyaml` GHSA-mfc2-93pr-jf92 | Critical | Not scored | 01 Oct, 2020 | npm loadyaml |
Malicious code in `electorn` GHSA-38hx-3542-8fh3 | Critical | Not scored | 01 Oct, 2020 | npm electorn |
TypeORM vulnerable to MAID and Prototype Pollution CVE-2020-8158, GHSA-pf2j-9qmp-jqr2 | Critical | 2.1% | 18 Sep, 2020 | npm typeorm |
Malicious Package in radic-util GHSA-8qh7-xw58-3ww7 | Critical | Not scored | 11 Sep, 2020 | npm radic-util |
Malicious Package in motiv.scss GHSA-2vqq-jgxx-fxjc | Critical | Not scored | 11 Sep, 2020 | npm motiv.scss |
Malicious Package in react-datepicker-plus GHSA-4wcx-c9c4-89p2 | Critical | Not scored | 11 Sep, 2020 | npm react-datepicker-plus |
Malicious Package in precode.js GHSA-5w4r-wwc3-6qcp | Critical | Not scored | 11 Sep, 2020 | npm precode.js |
Malicious Package in scroool GHSA-p7w2-mc6m-mfx2 | Critical | Not scored | 11 Sep, 2020 | npm scroool |
Malicious Package in grunt-radical GHSA-4627-w373-375v | Critical | Not scored | 11 Sep, 2020 | npm grunt-radical |
Malicious Package in ng-ui-library GHSA-2xw5-3767-qxvm | Critical | Not scored | 11 Sep, 2020 | npm ng-ui-library |
Malicious Package in grunt-radic GHSA-9p49-cwh3-4qhf | Critical | Not scored | 11 Sep, 2020 | npm grunt-radic |
Malicious Package in github-jquery-widgets GHSA-c722-pv5w-cfg2 | Critical | Not scored | 11 Sep, 2020 | npm github-jquery-widgets |
Malicious Package in ember-power-timepicker GHSA-28f8-hqmc-7ph8 | Critical | Not scored | 11 Sep, 2020 | npm ember-power-timepicker |
Malicious Package in electron-native-notify GHSA-j8qr-rvcv-crhv | Critical | Not scored | 11 Sep, 2020 | npm electron-native-notify |
Malicious Package in test-module-a GHSA-76xq-58hj-vwm2 | Critical | Not scored | 11 Sep, 2020 | npm test-module-a |
Malicious Package in epress GHSA-vf8q-pw7h-r2x2 | Critical | Not scored | 11 Sep, 2020 | npm epress |
Malicious Package in geoheat GHSA-p32g-242c-76h3 | Critical | Not scored | 11 Sep, 2020 | npm geoheat |
Malicious Package in commmander GHSA-q42c-rrp3-r3xm | Critical | Not scored | 11 Sep, 2020 | npm commmander |
Malicious Package in blubird GHSA-rvww-x6m4-4vc2 | Critical | Not scored | 11 Sep, 2020 | npm blubird |
Malicious Package in angular-location-update GHSA-53jx-4wwh-gcqj | Critical | Not scored | 11 Sep, 2020 | npm angular-location-update |
Malicious Package in commqnder GHSA-4xgp-xrg3-c73w | Critical | Not scored | 11 Sep, 2020 | npm commqnder |
Malicious Package in equest GHSA-mvch-rh6h-2m47 | Critical | Not scored | 11 Sep, 2020 | npm equest |
Malicious Package in angluar-cli GHSA-8mm3-2mcj-cx6r | Critical | Not scored | 11 Sep, 2020 | npm angluar-cli |
Malicious Package in reuest GHSA-r863-p739-275c | Critical | Not scored | 11 Sep, 2020 | npm reuest |
Malicious Package in requst GHSA-8qx4-r7fx-xc4v | Critical | Not scored | 11 Sep, 2020 | npm requst |
Malicious Package in shrugging-logging GHSA-qv78-398w-cxp7 | Critical | Not scored | 11 Sep, 2020 | npm shrugging-logging |
Lack of URL normalization may lead to authorization bypass when URL access rules are used CVE-2020-24660, GHSA-x44x-r84w-8v67 | Critical | 2.5% | 09 Sep, 2020 | npm lemonldap-ng-handler |
Command Injection in traceroute GHSA-rjvj-673q-4hfw | Critical | Not scored | 04 Sep, 2020 | npm traceroute |
Insufficient Entropy in parsel GHSA-vjvw-wcmw-pr26 | Critical | Not scored | 04 Sep, 2020 | npm parsel |
Insecure Cryptography Algorithm in parsel GHSA-wqgx-4q47-j2w5 | Critical | Not scored | 04 Sep, 2020 | npm parsel |
Command Injection in npm-git-publish GHSA-49mg-94fc-2fx6 | Critical | Not scored | 04 Sep, 2020 | npm npm-git-publish |
Command Injection in meta-git GHSA-qcff-ffx3-m25c | Critical | Not scored | 04 Sep, 2020 | npm meta-git |
Malicious Package in 1337qq-js GHSA-7wgh-5q4q-6wx5 | Critical | Not scored | 04 Sep, 2020 | npm 1337qq-js |
Authentication Bypass in express-laravel-passport GHSA-v66p-w7qx-wv98 | Critical | Not scored | 04 Sep, 2020 | npm express-laravel-passport |
Remote Code Execution in mongodb-query-parser GHSA-97mg-3cr6-3x4c | Critical | Not scored | 04 Sep, 2020 | npm mongodb-query-parser |
Command Injection in giting GHSA-7r9x-hr76-jr96 | Critical | Not scored | 04 Sep, 2020 | npm giting |
Improper Authorization in passport-cognito CVE-2019-19723, GHSA-v6c5-hwqg-3x5q | Critical | Not scored | 04 Sep, 2020 | npm passport-cognito |
Command Injection in plotter GHSA-65xx-c85x-wg76 | Critical | Not scored | 04 Sep, 2020 | npm plotter |
Command Injection in gnuplot GHSA-cfwc-xjfp-44jg | Critical | Not scored | 04 Sep, 2020 | npm gnuplot |
Malicious Package in bs85check GHSA-4hq8-v42x-9wx3 | Critical | Not scored | 04 Sep, 2020 | npm bs85check |
Malicious Package in bs58chcek GHSA-97mp-9g5c-6c93 | Critical | Not scored | 04 Sep, 2020 | npm bs58chcek |
Malicious Package in bs58chek GHSA-3cpj-mj3q-82wr | Critical | Not scored | 04 Sep, 2020 | npm bs58chek |
Malicious Package in bpi66 GHSA-7xc4-793x-25jp | Critical | Not scored | 04 Sep, 2020 | npm bpi66 |
Malicious Package in bpi39 GHSA-762c-v946-pf25 | Critical | Not scored | 04 Sep, 2020 | npm bpi39 |
Malicious Package in bp66 GHSA-8gc6-65mm-xr6r | Critical | Not scored | 04 Sep, 2020 | npm bp66 |
Malicious Package in bitcroe-lib GHSA-4m3p-x2hp-2pgx | Critical | Not scored | 04 Sep, 2020 | npm bitcroe-lib |
Malicious Package in bitconijs-lib GHSA-74hh-4rcv-pp27 | Critical | Not scored | 04 Sep, 2020 | npm bitconijs-lib |
Malicious Package in bitconi-ops GHSA-w9hw-v97w-g5f5 | Critical | Not scored | 04 Sep, 2020 | npm bitconi-ops |
Malicious Package in bitconid-rpc GHSA-9298-m7jf-55h2 | Critical | Not scored | 04 Sep, 2020 | npm bitconid-rpc |