Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in tailwind-scrollbar-plugin (npm) GHSA-v2q6-hwjq-q4v9, MAL-2025-191552 | Malicious | Not scored | 02 Dec, 2025 | npm tailwind-scrollbar-plugin |
Malicious release: Malicious code in wfui-test-e2e (npm) GHSA-69hf-2v5h-fqx5, MAL-2025-191545 | Malicious | Not scored | 02 Dec, 2025 | npm wfui-test-e2e |
Malicious release: Malicious code in stream-xor-chain (npm) GHSA-x33f-q2pg-mgh6, MAL-2025-191543 | Malicious | Not scored | 02 Dec, 2025 | npm stream-xor-chain |
Malicious release: Malicious code in @shr3k/tdspt-helper-ng (npm) GHSA-737m-f4wr-hfph, MAL-2025-191540 | Malicious | Not scored | 02 Dec, 2025 | npm @shr3k/tdspt-helper-ng |
Malicious release: Malicious code in @shr3k/tdspt-helper (npm) GHSA-mxvw-g6jp-8hhg, MAL-2025-191539 | Malicious | Not scored | 02 Dec, 2025 | npm @shr3k/tdspt-helper |
Malicious release: Malicious code in tdspt-helper (npm) GHSA-wv8c-8vpg-rc5x, MAL-2025-191544 | Malicious | Not scored | 02 Dec, 2025 | npm tdspt-helper |
Malicious release: Malicious code in nodenetbanxsdk (npm) GHSA-549w-jx4q-46gw, MAL-2025-191542, SNYK-JS-NODENETBANXSDK-14157117 | Malicious | Not scored | 02 Dec, 2025 | npm nodenetbanxsdk |
Malicious release: Malicious code in bignumx (npm) GHSA-fqx6-v425-9qwr, MAL-2025-191541, SNYK-JS-BIGNUMX-14157118 | Malicious | Not scored | 02 Dec, 2025 | npm bignumx |
Malicious release: Malicious code in @wxi-dev/serverless-tsc-config (npm) GHSA-8vgr-2977-855f, MAL-2025-191536 | Malicious | Not scored | 02 Dec, 2025 | npm @wxi-dev/serverless-tsc-config |
Malicious release: Malicious code in cyber-fca (npm) GHSA-fwq7-wx79-2667, MAL-2025-191537 | Malicious | Not scored | 02 Dec, 2025 | npm cyber-fca |
Malicious release: Malicious code in angular-promql (npm) MAL-2025-191505 | Malicious | Not scored | 01 Dec, 2025 | npm angular-promql |
Malicious release: Malicious code in animation-debug-app (npm) MAL-2025-191506 | Malicious | Not scored | 01 Dec, 2025 | npm animation-debug-app |
Malicious release: Malicious code in b3dtiles-sample (npm) MAL-2025-191507 | Malicious | Not scored | 01 Dec, 2025 | npm b3dtiles-sample |
Malicious release: Malicious code in dataset-view (npm) MAL-2025-191508 | Malicious | Not scored | 01 Dec, 2025 | npm dataset-view |
Malicious release: Malicious code in debug-common (npm) MAL-2025-191509 | Malicious | Not scored | 01 Dec, 2025 | npm debug-common |
Malicious release: Malicious code in hpi-porsche-app (npm) MAL-2025-191510 | Malicious | Not scored | 01 Dec, 2025 | npm hpi-porsche-app |
Malicious release: Malicious code in iife-sample (npm) MAL-2025-191511 | Malicious | Not scored | 01 Dec, 2025 | npm iife-sample |
Malicious release: Malicious code in kubebuilder (npm) MAL-2025-191512 | Malicious | Not scored | 01 Dec, 2025 | npm kubebuilder |
Malicious release: Malicious code in kubernetes-controller-tools (npm) MAL-2025-191513 | Malicious | Not scored | 01 Dec, 2025 | npm kubernetes-controller-tools |
Malicious release: Malicious code in kubernetes-helm (npm) MAL-2025-191514 | Malicious | Not scored | 01 Dec, 2025 | npm kubernetes-helm |
Malicious release: Malicious code in leafygreen-docs (npm) MAL-2025-191515 | Malicious | Not scored | 01 Dec, 2025 | npm leafygreen-docs |
Malicious release: Malicious code in markdownlint-cli2-action (npm) MAL-2025-191516 | Malicious | Not scored | 01 Dec, 2025 | npm markdownlint-cli2-action |
Malicious release: Malicious code in mongodb-atlas-cli-toc-generator (npm) MAL-2025-191517 | Malicious | Not scored | 01 Dec, 2025 | npm mongodb-atlas-cli-toc-generator |
Malicious release: Malicious code in mongodb-compass (npm) MAL-2025-191518 | Malicious | Not scored | 01 Dec, 2025 | npm mongodb-compass |
Malicious release: Malicious code in mongodb-stitch-server-testutils (npm) MAL-2025-191519 | Malicious | Not scored | 01 Dec, 2025 | npm mongodb-stitch-server-testutils |
Malicious release: Malicious code in nnc-web (npm) MAL-2025-191520 | Malicious | Not scored | 01 Dec, 2025 | npm nnc-web |
Malicious release: Malicious code in nova-angular-project (npm) MAL-2025-191521 | Malicious | Not scored | 01 Dec, 2025 | npm nova-angular-project |
Malicious release: Malicious code in privy-farcaster-demo (npm) MAL-2025-191522 | Malicious | Not scored | 01 Dec, 2025 | npm privy-farcaster-demo |
Malicious release: Malicious code in privy-frames-v2-demo (npm) MAL-2025-191523 | Malicious | Not scored | 01 Dec, 2025 | npm privy-frames-v2-demo |
Malicious release: Malicious code in render-stage (npm) MAL-2025-191524 | Malicious | Not scored | 01 Dec, 2025 | npm render-stage |
Malicious release: Malicious code in ripiocoin (npm) MAL-2025-191525 | Malicious | Not scored | 01 Dec, 2025 | npm ripiocoin |
Malicious release: Malicious code in silentcipherui (npm) MAL-2025-191526 | Malicious | Not scored | 01 Dec, 2025 | npm silentcipherui |
Malicious release: Malicious code in solana-dev-mcp (npm) MAL-2025-191527 | Malicious | Not scored | 01 Dec, 2025 | npm solana-dev-mcp |
Malicious release: Malicious code in telesis (npm) MAL-2025-191528 | Malicious | Not scored | 01 Dec, 2025 | npm telesis |
Malicious release: Malicious code in terrain-sample (npm) MAL-2025-191529 | Malicious | Not scored | 01 Dec, 2025 | npm terrain-sample |
Malicious release: Malicious code in tilt-ui (npm) MAL-2025-191530 | Malicious | Not scored | 01 Dec, 2025 | npm tilt-ui |
Malicious release: Malicious code in usb_dev (npm) MAL-2025-191531 | Malicious | Not scored | 01 Dec, 2025 | npm usb_dev |
Malicious release: Malicious code in yq-go (npm) MAL-2025-191532 | Malicious | Not scored | 01 Dec, 2025 | npm yq-go |
Malicious release: Malicious code in libdebugrouter.so (npm) GHSA-23g4-qxh9-7jj2, MAL-2025-191499 | Malicious | Not scored | 01 Dec, 2025 | npm libdebugrouter.so |
Malicious release: Malicious code in m365-action-sdk (npm) GHSA-6xfg-v6q5-f283, MAL-2025-191500 | Malicious | Not scored | 01 Dec, 2025 | npm m365-action-sdk |
Malicious release: Malicious code in pluxee-design-system (npm) GHSA-h25r-4pmf-r6mf, MAL-2025-191502 | Malicious | Not scored | 01 Dec, 2025 | npm pluxee-design-system |
Malicious release: Malicious code in old-hd-keyring (npm) GHSA-m869-8jgq-53w4, MAL-2025-191501 | Malicious | Not scored | 01 Dec, 2025 | npm old-hd-keyring |
Malicious release: Malicious code in @bingads-webui-clientcenter/instrumentation (npm) MAL-2025-191495 | Malicious | Not scored | 01 Dec, 2025 | npm @bingads-webui-clientcenter/instrumentation |
Malicious release: Malicious code in @hand-talk/yotta-core (npm) MAL-2025-191496 | Malicious | Not scored | 01 Dec, 2025 | npm @hand-talk/yotta-core |
Malicious release: Malicious code in handtalk-test-app (npm) MAL-2025-191497 | Malicious | Not scored | 01 Dec, 2025 | npm handtalk-test-app |
Malicious release: Malicious code in kmf-cookieservice (npm) MAL-2025-191498 | Malicious | Not scored | 01 Dec, 2025 | npm kmf-cookieservice |
Malicious release: Malicious code in start-internal (npm) MAL-2025-191503 | Malicious | Not scored | 01 Dec, 2025 | npm start-internal |
Malicious release: Malicious code in testhaus (npm) MAL-2025-191504 | Malicious | Not scored | 01 Dec, 2025 | npm testhaus |
Malicious release: Malicious code in hl-naduccio (npm) GHSA-2rqw-9jfq-33mm, MAL-2025-191538 | Malicious | Not scored | 01 Dec, 2025 | npm hl-naduccio |
Malicious release: Malicious code in xmenddddl (npm) MAL-2025-191603 | Malicious | Not scored | 01 Dec, 2025 | npm xmenddddl |