Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @voiceflow/eslint-config (npm) GHSA-8624-gc9h-3mfj, MAL-2025-191345 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/eslint-config |
Malicious release: Malicious code in @voiceflow/chat-types (npm) GHSA-8j92-6vpr-72v7, MAL-2025-191337 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/chat-types |
Malicious release: Malicious code in @voiceflow/eslint-plugin (npm) GHSA-8qwv-8v32-9x47, MAL-2025-191346 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/eslint-plugin |
Malicious release: Malicious code in @voiceflow/secrets-provider (npm) GHSA-9532-2xg7-9jgr, MAL-2025-191371 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/secrets-provider |
Malicious release: Malicious code in @voiceflow/semantic-release-config (npm) GHSA-97w9-v7w9-jc93, MAL-2025-191372 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/semantic-release-config |
Malicious release: Malicious code in @voiceflow/common (npm) GHSA-9gp9-qjxp-vv82, MAL-2025-191340 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/common |
Malicious release: Malicious code in @actbase/native (npm) GHSA-9h93-h6x9-6j4j, MAL-2025-191178 | Malicious | Not scored | 25 Nov, 2025 | npm @actbase/native |
Malicious release: Malicious code in @voiceflow/body-parser (npm) GHSA-c89h-mw7j-hh48, MAL-2025-191336 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/body-parser |
Malicious release: Malicious code in @voiceflow/logger (npm) GHSA-c8h8-j498-cv9w, MAL-2025-191354 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/logger |
Malicious release: Malicious code in @dev-blinq/ui-systems (npm) GHSA-ccc8-rh82-3xvr, MAL-2025-191214 | Malicious | Not scored | 25 Nov, 2025 | npm @dev-blinq/ui-systems |
Malicious release: Malicious code in @dev-blinq/ai-qa-logic (npm) GHSA-cm2v-23m3-m672, MAL-2025-191210 | Malicious | Not scored | 25 Nov, 2025 | npm @dev-blinq/ai-qa-logic |
Malicious release: Malicious code in gatsby-plugin-antd (npm) GHSA-cvhw-3383-wcw3, MAL-2025-191396 | Malicious | Not scored | 25 Nov, 2025 | npm gatsby-plugin-antd |
Malicious release: Malicious code in command-irail (npm) GHSA-g478-4wxq-7w77, MAL-2025-191391 | Malicious | Not scored | 25 Nov, 2025 | npm command-irail |
Malicious release: Malicious code in @voiceflow/fetch (npm) GHSA-h72r-3grf-6mvr, MAL-2025-191348 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/fetch |
Malicious release: Malicious code in @productdevbook/chatwoot (npm) GHSA-hc3f-8qvq-qr3v, MAL-2025-191303 | Malicious | Not scored | 25 Nov, 2025 | npm @productdevbook/chatwoot |
Malicious release: Malicious code in @voiceflow/git-branch-check (npm) GHSA-hhxh-3pg7-v6rm, MAL-2025-191350 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/git-branch-check |
Malicious release: Malicious code in @voiceflow/google-types (npm) GHSA-hq26-8vww-cmm8, MAL-2025-191352 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/google-types |
Malicious release: Malicious code in @voiceflow/default-prompt-wrappers (npm) GHSA-m38g-96rv-2v8w, MAL-2025-191341 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/default-prompt-wrappers |
Malicious release: Malicious code in @voiceflow/prettier-config (npm) GHSA-mjm4-9rx8-2f3w, MAL-2025-191366 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/prettier-config |
Malicious release: Malicious code in @browserbasehq/stagehand (npm) GHSA-mmp7-557c-74pq, MAL-2025-191198 | Malicious | Not scored | 25 Nov, 2025 | npm @browserbasehq/stagehand |
Malicious release: Malicious code in hyper-fullfacing (npm) GHSA-mv92-7x3f-qm3c, MAL-2025-191397 | Malicious | Not scored | 25 Nov, 2025 | npm hyper-fullfacing |
Malicious release: Malicious code in @voiceflow/nestjs-mongodb (npm) GHSA-pgh2-wwvc-g564, MAL-2025-191358 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/nestjs-mongodb |
Malicious release: Malicious code in @alexcolls/nuxt-socket.io (npm) GHSA-q564-hpqp-4cmg, MAL-2025-191185 | Malicious | Not scored | 25 Nov, 2025 | npm @alexcolls/nuxt-socket.io |
Malicious release: Malicious code in @voiceflow/exception (npm) GHSA-q7cp-f4mj-8m39, MAL-2025-191347 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/exception |
Malicious release: Malicious code in tcsp (npm) GHSA-qfmw-hgxp-rppm, MAL-2025-191433 | Malicious | Not scored | 25 Nov, 2025 | npm tcsp |
Malicious release: Malicious code in @voiceflow/base-types (npm) GHSA-qh85-xh2g-7fph, MAL-2025-191335 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/base-types |
Malicious release: Malicious code in @voiceflow/dependency-cruiser-config (npm) GHSA-qr77-hmp6-8qwv, MAL-2025-191342 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/dependency-cruiser-config |
Malicious release: Malicious code in @voiceflow/commitlint-config (npm) GHSA-r464-qjp3-q96h, MAL-2025-191339 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/commitlint-config |
Malicious release: Malicious code in @voiceflow/react-chat (npm) GHSA-r7m3-3p95-v4rc, MAL-2025-191367 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/react-chat |
Malicious release: Malicious code in @voiceflow/nestjs-timeout (npm) GHSA-r967-g522-c8gc, MAL-2025-191361 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/nestjs-timeout |
Malicious release: Malicious code in @voiceflow/verror (npm) GHSA-rqwf-q33h-28w2, MAL-2025-191382 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/verror |
Malicious release: Malicious code in @voiceflow/backend-utils (npm) GHSA-rxrh-wp76-98jm, MAL-2025-191334 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/backend-utils |
Malicious release: Malicious code in @voiceflow/slate-serializer (npm) GHSA-vh49-8mp2-7r75, MAL-2025-191374 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/slate-serializer |
Malicious release: Malicious code in @voiceflow/utils-designer (npm) GHSA-vqr4-cfjx-rx6h, MAL-2025-191381 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/utils-designer |
Malicious release: Malicious code in @voiceflow/api-sdk (npm) GHSA-w6mp-8jg5-f9g7, MAL-2025-191333 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/api-sdk |
Malicious release: Malicious code in @alexcolls/nuxt-ux (npm) GHSA-wfwg-6872-q985, MAL-2025-191186 | Malicious | Not scored | 25 Nov, 2025 | npm @alexcolls/nuxt-ux |
Malicious release: Malicious code in @voiceflow/voice-types (npm) GHSA-wm3x-47jv-6946, MAL-2025-191385 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/voice-types |
Malicious release: Malicious code in @voiceflow/encryption (npm) GHSA-wq75-fgvh-2wcg, MAL-2025-191344 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/encryption |
Malicious release: Malicious code in @mizzle-dev/orm (npm) GHSA-wvh7-p34g-qx94, MAL-2025-191247 | Malicious | Not scored | 25 Nov, 2025 | npm @mizzle-dev/orm |
Malicious release: Malicious code in @voiceflow/vite-config (npm) GHSA-xvwg-rm88-pvj8, MAL-2025-191383 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/vite-config |
Malicious release: Malicious code in @voiceflow/metrics (npm) GHSA-xxjx-ccwm-wm65, MAL-2025-191355 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/metrics |
Malicious release: Malicious code in @voiceflow/general-types (npm) GHSA-xxr5-4rpj-p266, MAL-2025-191349 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/general-types |
Malicious release: Malicious code in @afetcan/api (npm) MAL-2025-191179 | Malicious | Not scored | 25 Nov, 2025 | npm @afetcan/api |
Malicious release: Malicious code in @afetcan/storage (npm) MAL-2025-191180 | Malicious | Not scored | 25 Nov, 2025 | npm @afetcan/storage |
Malicious release: Malicious code in @antstackio/eslint-config-antstack (npm) MAL-2025-191187 | Malicious | Not scored | 25 Nov, 2025 | npm @antstackio/eslint-config-antstack |
Malicious release: Malicious code in @antstackio/express-graphql-proxy (npm) MAL-2025-191188 | Malicious | Not scored | 25 Nov, 2025 | npm @antstackio/express-graphql-proxy |
Malicious release: Malicious code in @antstackio/json-to-graphql (npm) MAL-2025-191190 | Malicious | Not scored | 25 Nov, 2025 | npm @antstackio/json-to-graphql |
Malicious release: Malicious code in @antstackio/shelbysam (npm) MAL-2025-191191 | Malicious | Not scored | 25 Nov, 2025 | npm @antstackio/shelbysam |
Malicious release: Malicious code in @browserbasehq/mcp-server-browserbase (npm) MAL-2025-191196 | Malicious | Not scored | 25 Nov, 2025 | npm @browserbasehq/mcp-server-browserbase |
Malicious release: Malicious code in @browserbasehq/sdk-functions (npm) MAL-2025-191197 | Malicious | Not scored | 25 Nov, 2025 | npm @browserbasehq/sdk-functions |