Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in portal-lise (npm) GHSA-h847-vpq8-2hj8, MAL-2025-192970 | Malicious | Not scored | 30 Dec, 2025 | npm portal-lise |
Malicious release: Malicious code in shop-minis-docs (npm) GHSA-2g5f-63gc-p7jh, MAL-2025-192976 | Malicious | Not scored | 30 Dec, 2025 | npm shop-minis-docs |
Malicious release: Malicious code in cdd-plugin-for-datawarrior (npm) GHSA-45h7-9rxv-wjrr, MAL-2025-192966 | Malicious | Not scored | 30 Dec, 2025 | npm cdd-plugin-for-datawarrior |
Malicious release: Malicious code in rt-interactive-card-collection (npm) GHSA-67wx-pprw-w2v6, MAL-2025-192974 | Malicious | Not scored | 30 Dec, 2025 | npm rt-interactive-card-collection |
Malicious release: Malicious code in react-devtools-shared (npm) GHSA-9mmf-qx8w-8798, MAL-2025-192972 | Malicious | Not scored | 30 Dec, 2025 | npm react-devtools-shared |
Malicious release: Malicious code in rt-text-media-collection (npm) GHSA-chc2-cmwr-8f69, MAL-2025-192975 | Malicious | Not scored | 30 Dec, 2025 | npm rt-text-media-collection |
Malicious release: Malicious code in react-devtools-extensions (npm) GHSA-ph84-3h48-w4gw, MAL-2025-192971 | Malicious | Not scored | 30 Dec, 2025 | npm react-devtools-extensions |
Malicious release: Malicious code in react-dom-bindings (npm) GHSA-r2mv-xp84-8cc6, MAL-2025-192973 | Malicious | Not scored | 30 Dec, 2025 | npm react-dom-bindings |
Malicious release: Malicious code in awsmcc (npm) GHSA-r2x7-xp3v-fcwm, MAL-2025-192965 | Malicious | Not scored | 30 Dec, 2025 | npm awsmcc |
Malicious release: Malicious code in shopify-app-react-router (npm) GHSA-rw2j-q47r-j658, MAL-2025-192977 | Malicious | Not scored | 30 Dec, 2025 | npm shopify-app-react-router |
Malicious release: Malicious code in eb-csr (npm) GHSA-x757-3w6f-f9rm, MAL-2025-192967 | Malicious | Not scored | 30 Dec, 2025 | npm eb-csr |
Malicious release: Malicious code in @peter_wilson12091/internal-json-test-parser (npm) GHSA-26xj-cgvf-rcmv, MAL-2025-192964 | Malicious | Not scored | 30 Dec, 2025 | npm @peter_wilson12091/internal-json-test-parser |
Malicious release: Malicious code in express-js-web (npm) GHSA-wpr4-9cjg-p8mm, MAL-2025-192968 | Malicious | Not scored | 30 Dec, 2025 | npm express-js-web |
Malicious release: Malicious code in tailwindcss-typography-style (npm) GHSA-gg45-2h47-hmmj, MAL-2025-192978 | Malicious | Not scored | 30 Dec, 2025 | npm tailwindcss-typography-style |
Malicious release: Malicious code in pepsico-ds (npm) GHSA-9xh2-g3jf-q47w, MAL-2025-192969 | Malicious | Not scored | 30 Dec, 2025 | npm pepsico-ds |
Malicious release: Malicious code in @bugdtest/test1 (npm) GHSA-xwx3-8548-fqr3, MAL-2025-192963 | Malicious | Not scored | 30 Dec, 2025 | npm @bugdtest/test1 |
Malicious release: Malicious code in kcheck (npm) GHSA-rw58-vpg4-jcpx, MAL-2025-192960 | Malicious | Not scored | 29 Dec, 2025 | npm kcheck |
Malicious release: Malicious code in intl-tel-input-utils (npm) GHSA-478v-fp9g-73v2, MAL-2025-192959 | Malicious | Not scored | 29 Dec, 2025 | npm intl-tel-input-utils |
Malicious release: Malicious code in crypto-trade-analyzer (npm) MAL-2025-192957 | Malicious | Not scored | 29 Dec, 2025 | npm crypto-trade-analyzer |
Malicious release: Malicious code in eslint-config-pexip-engage (npm) MAL-2025-192955 | Malicious | Not scored | 28 Dec, 2025 | npm eslint-config-pexip-engage |
Malicious release: Malicious code in api-umbrella-admin-ui (npm) GHSA-pq2q-gwxh-rmh2, MAL-2025-192954 | Malicious | Not scored | 28 Dec, 2025 | npm api-umbrella-admin-ui |
Malicious release: Malicious code in eslint-config-sdk (npm) MAL-2025-192952 | Malicious | Not scored | 27 Dec, 2025 | npm eslint-config-sdk |
Malicious release: Malicious code in ugc-kit (npm) GHSA-v4w5-3vhx-g64x, MAL-2025-192951 | Malicious | Not scored | 27 Dec, 2025 | npm ugc-kit |
Malicious release: Malicious code in ing-feat-malware-detection (npm) GHSA-838c-jj63-x7mf, MAL-2025-192949 | Malicious | Not scored | 27 Dec, 2025 | npm ing-feat-malware-detection |
Malicious release: Malicious code in ing-feat-ui-image (npm) GHSA-6wj8-2g22-38w9, MAL-2025-192950 | Malicious | Not scored | 27 Dec, 2025 | npm ing-feat-ui-image |
Malicious release: Malicious code in backstage-plugin-glean (npm) GHSA-86v9-6365-r69x, MAL-2025-192944 | Malicious | Not scored | 27 Dec, 2025 | npm backstage-plugin-glean |
Malicious release: Malicious code in bola511 (npm) MAL-2025-192941 | Malicious | Not scored | 26 Dec, 2025 | npm bola511 |
Malicious release: Malicious code in yunxohang4 (npm) GHSA-qqjp-xcww-46gp, MAL-2026-184 | Malicious | Not scored | 26 Dec, 2025 | npm yunxohang4 |
Malicious release: Malicious code in magic-poc (npm) GHSA-m6v9-f3q8-q9qj, MAL-2025-192939 | Malicious | Not scored | 26 Dec, 2025 | npm magic-poc |
Malicious release: Malicious code in bettermode-icons (npm) MAL-2025-192938 | Malicious | Not scored | 25 Dec, 2025 | npm bettermode-icons |
Malicious release: Malicious code in bettermode-common (npm) GHSA-w55f-m97h-c6pf, MAL-2025-192937 | Malicious | Not scored | 25 Dec, 2025 | npm bettermode-common |
Malicious release: Malicious code in ing-feat-kyc-consent (npm) GHSA-r682-hfrx-mp6j, MAL-2025-192934 | Malicious | Not scored | 25 Dec, 2025 | npm ing-feat-kyc-consent |
Malicious release: Malicious code in ing-feat-auth-idin (npm) GHSA-mqvw-23c8-9fxf, MAL-2025-192933 | Malicious | Not scored | 25 Dec, 2025 | npm ing-feat-auth-idin |
Malicious release: Malicious code in ing-feat-mortgage-consent-starter (npm) MAL-2025-192935 | Malicious | Not scored | 25 Dec, 2025 | npm ing-feat-mortgage-consent-starter |
Malicious release: Malicious code in ing-feat-pis-single-payments (npm) MAL-2025-192936 | Malicious | Not scored | 25 Dec, 2025 | npm ing-feat-pis-single-payments |
Malicious release: Malicious code in cc-raiesy (npm) MAL-2025-192932 | Malicious | Not scored | 25 Dec, 2025 | npm cc-raiesy |
Malicious release: Malicious code in adril7123 (npm) GHSA-wx7c-p492-4g92, MAL-2025-192927 | Malicious | Not scored | 24 Dec, 2025 | npm adril7123 |
Malicious release: Malicious code in @airtel-web/clickstream (npm) GHSA-5qc2-32p6-rqq4, MAL-2025-192926 | Malicious | Not scored | 24 Dec, 2025 | npm @airtel-web/clickstream |
Malicious release: Malicious code in secguest-react-lib (npm) GHSA-42jv-5r4v-m7qq, MAL-2026-170 | Malicious | Not scored | 24 Dec, 2025 | npm secguest-react-lib |
Malicious release: Malicious code in @google_recaptcha/js (npm) GHSA-j3x4-vhvj-627x, MAL-2025-192752 | Malicious | Not scored | 23 Dec, 2025 | npm @google_recaptcha/js |
Malicious release: Malicious code in supply_chain_dummy_test_2 (npm) GHSA-6rjq-vggp-p672, MAL-2025-192761 | Malicious | Not scored | 23 Dec, 2025 | npm supply_chain_dummy_test_2 |
Malicious release: Malicious code in supply_chain_dummy_test_4 (npm) GHSA-q5x2-6fv5-qxp8, MAL-2025-192763 | Malicious | Not scored | 23 Dec, 2025 | npm supply_chain_dummy_test_4 |
Malicious release: Malicious code in supply_chain_dummy_test_3 (npm) GHSA-r6g5-cgp3-h24c, MAL-2025-192762 | Malicious | Not scored | 23 Dec, 2025 | npm supply_chain_dummy_test_3 |
Malicious release: Malicious code in supply_chain_dummy_test_1 (npm) GHSA-vh5p-f9g9-c2mg, MAL-2025-192760 | Malicious | Not scored | 23 Dec, 2025 | npm supply_chain_dummy_test_1 |
Malicious release: Malicious code in dotjsenv (npm) GHSA-63qm-964q-w2w5, MAL-2025-192755 | Malicious | Not scored | 23 Dec, 2025 | npm dotjsenv |
Malicious release: Malicious code in qxytest1 (npm) GHSA-cw4m-2fcc-rpc5, MAL-2025-192757 | Malicious | Not scored | 23 Dec, 2025 | npm qxytest1 |
Malicious release: Malicious code in qxytest (npm) GHSA-hvqc-82p3-6gpf, MAL-2025-192756 | Malicious | Not scored | 23 Dec, 2025 | npm qxytest |
Malicious release: Malicious code in start-log-plugin (npm) GHSA-qc6r-xf7q-j45q, MAL-2025-192759 | Malicious | Not scored | 23 Dec, 2025 | npm start-log-plugin |
Malicious release: Malicious code in start-log-backend (npm) GHSA-qqfh-xwc2-gx36, MAL-2025-192758 | Malicious | Not scored | 23 Dec, 2025 | npm start-log-backend |
Malicious release: Malicious code in trial-guard (npm) GHSA-vjg7-9cf4-mpp8, MAL-2025-192764 | Malicious | Not scored | 23 Dec, 2025 | npm trial-guard |