Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in eslint-plugin-react-hooks-published (npm) GHSA-35rg-r2fv-8hp3, MAL-2025-191488 | Malicious | Not scored | 29 Nov, 2025 | npm eslint-plugin-react-hooks-published |
Malicious release: Malicious code in chain-selectors (npm) GHSA-2p37-4g2g-f26j, MAL-2025-191487 | Malicious | Not scored | 29 Nov, 2025 | npm chain-selectors |
Malicious release: Malicious code in vitest-environment-jsdom-patched (npm) GHSA-g639-r35h-h4pw, MAL-2025-191486 | Malicious | Not scored | 29 Nov, 2025 | npm vitest-environment-jsdom-patched |
Malicious release: Malicious code in x402-legacy (npm) GHSA-4q5j-w322-jwjq, MAL-2025-191485 | Malicious | Not scored | 29 Nov, 2025 | npm x402-legacy |
Malicious release: Malicious code in browser-client-neptune (npm) GHSA-367v-g33p-g8jc, MAL-2025-191484 | Malicious | Not scored | 28 Nov, 2025 | npm browser-client-neptune |
Malicious release: Malicious code in accounts-base (npm) GHSA-64q9-hhhw-wg7q, MAL-2025-191480 | Malicious | Not scored | 27 Nov, 2025 | npm accounts-base |
Malicious release: Malicious code in wartsila-application-json (npm) GHSA-9872-7p83-qwqv, MAL-2025-191482 | Malicious | Not scored | 27 Nov, 2025 | npm wartsila-application-json |
Malicious release: Malicious code in chia-gaming-lobby-connection (npm) GHSA-qqrm-g247-g8f2, MAL-2025-191479 | Malicious | Not scored | 27 Nov, 2025 | npm chia-gaming-lobby-connection |
Malicious release: Malicious code in bitcoin-lib-js (npm) GHSA-6wg2-qx3c-5w54, MAL-2025-191478 | Malicious | Not scored | 27 Nov, 2025 | npm bitcoin-lib-js |
Malicious release: Malicious code in bitcoin-main-lib (npm) GHSA-2869-rqcg-vfpc, MAL-2025-191477 | Malicious | Not scored | 26 Nov, 2025 | npm bitcoin-main-lib |
Malicious release: Malicious code in br2s-ui-componentlibrary_r2 (npm) GHSA-p229-7wq7-fxmp, MAL-2025-191481 | Malicious | Not scored | 26 Nov, 2025 | npm br2s-ui-componentlibrary_r2 |
Malicious release: Malicious code in vite-dynachunk (npm) GHSA-f3jr-c664-4426, MAL-2025-191474, SNYK-JS-VITEDYNACHUNK-14114718 | Malicious | Not scored | 26 Nov, 2025 | npm vite-dynachunk |
Malicious release: Malicious code in chai-jsons (npm) GHSA-5qcc-669p-2584, MAL-2025-191473 | Malicious | Not scored | 26 Nov, 2025 | npm chai-jsons |
Malicious release: Malicious code in chai-auth (npm) GHSA-mp9m-mrc8-rrvj, MAL-2025-191472, SNYK-JS-CHAIAUTH-14114720 | Malicious | Not scored | 26 Nov, 2025 | npm chai-auth |
Malicious release: Malicious code in ahmed_salem_t (npm) GHSA-4hmm-c7vc-3m4v, MAL-2025-191471 | Malicious | Not scored | 26 Nov, 2025 | npm ahmed_salem_t |
Malicious release: Malicious code in @lokeswari-satyanarayanan/rn-zustand-expo-template (npm) MAL-2025-191468 | Malicious | Not scored | 26 Nov, 2025 | npm @lokeswari-satyanarayanan/rn-zustand-expo-template |
Malicious release: Malicious code in bip40 (npm) GHSA-vh2r-52fp-rj7h, MAL-2025-191469 | Malicious | Not scored | 25 Nov, 2025 | npm bip40 |
Malicious release: Malicious code in xrpl-api (npm) GHSA-47c3-m332-vx5q, MAL-2025-191467 | Malicious | Not scored | 25 Nov, 2025 | npm xrpl-api |
Malicious release: Malicious code in rpc-validator (npm) GHSA-9w3c-c34p-h7m8, MAL-2025-191466 | Malicious | Not scored | 25 Nov, 2025 | npm rpc-validator |
Malicious release: Malicious code in mcp-polymarket (npm) GHSA-f8cg-j5h4-4v2j, MAL-2025-191465 | Malicious | Not scored | 25 Nov, 2025 | npm mcp-polymarket |
Malicious release: Malicious code in mayhem-wma (npm) GHSA-m7f2-m25c-crj6, MAL-2025-191464 | Malicious | Not scored | 25 Nov, 2025 | npm mayhem-wma |
Malicious release: Malicious code in initial-path (npm) GHSA-xqrj-354c-mg93, MAL-2025-191463, SNYK-JS-INITIALPATH-14111278 | Malicious | Not scored | 25 Nov, 2025 | npm initial-path |
Malicious release: Malicious code in react-svgs-helper (npm) GHSA-5rpr-mpxw-57vp, MAL-2025-191462 | Malicious | Not scored | 25 Nov, 2025 | npm react-svgs-helper |
Malicious release: Malicious code in baidu-src-test3 (npm) MAL-2025-191461 | Malicious | Not scored | 25 Nov, 2025 | npm baidu-src-test3 |
Malicious release: Malicious code in baidu-src-test (npm) MAL-2025-191460 | Malicious | Not scored | 25 Nov, 2025 | npm baidu-src-test |
Malicious release: Malicious code in @vleo-dev/a11y-js-service (npm) GHSA-487m-gw8w-94hc, MAL-2025-191459 | Malicious | Not scored | 25 Nov, 2025 | npm @vleo-dev/a11y-js-service |
Malicious release: Malicious code in eslint-config-kinvey-flex-service (npm) GHSA-26r9-3qfg-cx8c, MAL-2025-191395 | Malicious | Not scored | 25 Nov, 2025 | npm eslint-config-kinvey-flex-service |
Malicious release: Malicious code in ceviz (npm) GHSA-2g8r-3grq-jx99, MAL-2025-191390 | Malicious | Not scored | 25 Nov, 2025 | npm ceviz |
Malicious release: Malicious code in @voiceflow/tsconfig (npm) GHSA-2p99-x643-gvfv, MAL-2025-191379 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/tsconfig |
Malicious release: Malicious code in @voiceflow/nestjs-common (npm) GHSA-2qr3-584r-qj9v, MAL-2025-191357 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/nestjs-common |
Malicious release: Malicious code in @voiceflow/google-dfes-types (npm) GHSA-3gc8-xqj9-q2gv, MAL-2025-191351 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/google-dfes-types |
Malicious release: Malicious code in @voiceflow/voiceflow-types (npm) GHSA-3hw8-3r29-j4gm, MAL-2025-191386 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/voiceflow-types |
Malicious release: Malicious code in silgi (npm) GHSA-43x8-586r-rr56, MAL-2025-191425 | Malicious | Not scored | 25 Nov, 2025 | npm silgi |
Malicious release: Malicious code in @voiceflow/sdk-runtime (npm) GHSA-443c-69pp-ccw3, MAL-2025-191370 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/sdk-runtime |
Malicious release: Malicious code in @dev-blinq/cucumber-js (npm) GHSA-4m8j-88r6-6phh, MAL-2025-191212 | Malicious | Not scored | 25 Nov, 2025 | npm @dev-blinq/cucumber-js |
Malicious release: Malicious code in @voiceflow/natural-language-commander (npm) GHSA-4xjf-wwjc-fmhv, MAL-2025-191356 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/natural-language-commander |
Malicious release: Malicious code in @voiceflow/alexa-types (npm) GHSA-56wg-3462-8w3r, MAL-2025-191331 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/alexa-types |
Malicious release: Malicious code in @voiceflow/test-common (npm) GHSA-574j-2rmr-3gv5, MAL-2025-191378 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/test-common |
Malicious release: Malicious code in @antstackio/graphql-body-parser (npm) GHSA-592m-mwpw-hq99, MAL-2025-191189 | Malicious | Not scored | 25 Nov, 2025 | npm @antstackio/graphql-body-parser |
Malicious release: Malicious code in @voiceflow/runtime (npm) GHSA-59v7-979j-g8cq, MAL-2025-191368 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/runtime |
Malicious release: Malicious code in @voiceflow/stylelint-config (npm) GHSA-5qm4-x7j8-95q7, MAL-2025-191377 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/stylelint-config |
Malicious release: Malicious code in @voiceflow/dtos-interact (npm) GHSA-69fv-v5hx-vg3h, MAL-2025-191343 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/dtos-interact |
Malicious release: Malicious code in @voiceflow/stitches-react (npm) GHSA-69v5-rhjr-mxf9, MAL-2025-191375 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/stitches-react |
Malicious release: Malicious code in quickswap-ads-list (npm) GHSA-6p37-f5x8-p8fh, MAL-2025-191404 | Malicious | Not scored | 25 Nov, 2025 | npm quickswap-ads-list |
Malicious release: Malicious code in @voiceflow/husky-config (npm) GHSA-7744-xv9c-x2h3, MAL-2025-191353 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/husky-config |
Malicious release: Malicious code in my-saeed-lib (npm) GHSA-782j-pc5m-hw7m, MAL-2025-191398 | Malicious | Not scored | 25 Nov, 2025 | npm my-saeed-lib |
Malicious release: Malicious code in @voiceflow/nestjs-redis (npm) GHSA-7gf9-4m37-59gv, MAL-2025-191360 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/nestjs-redis |
Malicious release: Malicious code in axios-cancelable (npm) GHSA-7h7g-wg9p-wf94, MAL-2025-191389 | Malicious | Not scored | 25 Nov, 2025 | npm axios-cancelable |
Malicious release: Malicious code in @kvytech/medusa-plugin-promotion (npm) GHSA-7wrg-wj98-r3m4, MAL-2025-191240 | Malicious | Not scored | 25 Nov, 2025 | npm @kvytech/medusa-plugin-promotion |
Malicious release: Malicious code in pkg-readme (npm) GHSA-848w-qv8p-xx6g, MAL-2025-191401 | Malicious | Not scored | 25 Nov, 2025 | npm pkg-readme |