Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @posthog/filter-out-plugin (npm) MAL-2025-191290 | Malicious | Not scored | 25 Nov, 2025 | npm @posthog/filter-out-plugin |
Malicious release: Malicious code in @posthog/heartbeat-plugin (npm) MAL-2025-191291 | Malicious | Not scored | 25 Nov, 2025 | npm @posthog/heartbeat-plugin |
Malicious release: Malicious code in @posthog/icons (npm) MAL-2025-191292 | Malicious | Not scored | 25 Nov, 2025 | npm @posthog/icons |
Malicious release: Malicious code in @posthog/intercom-plugin (npm) MAL-2025-191293 | Malicious | Not scored | 25 Nov, 2025 | npm @posthog/intercom-plugin |
Malicious release: Malicious code in @posthog/laudspeaker-plugin (npm) MAL-2025-191294 | Malicious | Not scored | 25 Nov, 2025 | npm @posthog/laudspeaker-plugin |
Malicious release: Malicious code in @posthog/lemon-ui (npm) MAL-2025-191295 | Malicious | Not scored | 25 Nov, 2025 | npm @posthog/lemon-ui |
Malicious release: Malicious code in @posthog/migrator3000-plugin (npm) MAL-2025-191296 | Malicious | Not scored | 25 Nov, 2025 | npm @posthog/migrator3000-plugin |
Malicious release: Malicious code in @posthog/netdata-event-processing (npm) MAL-2025-191297 | Malicious | Not scored | 25 Nov, 2025 | npm @posthog/netdata-event-processing |
Malicious release: Malicious code in @posthog/postgres-plugin (npm) MAL-2025-191298 | Malicious | Not scored | 25 Nov, 2025 | npm @posthog/postgres-plugin |
Malicious release: Malicious code in @posthog/zendesk-plugin (npm) MAL-2025-191300 | Malicious | Not scored | 25 Nov, 2025 | npm @posthog/zendesk-plugin |
Malicious release: Malicious code in @productdevbook/animejs-vue (npm) MAL-2025-191301 | Malicious | Not scored | 25 Nov, 2025 | npm @productdevbook/animejs-vue |
Malicious release: Malicious code in @productdevbook/auth (npm) MAL-2025-191302 | Malicious | Not scored | 25 Nov, 2025 | npm @productdevbook/auth |
Malicious release: Malicious code in @productdevbook/motion (npm) MAL-2025-191304 | Malicious | Not scored | 25 Nov, 2025 | npm @productdevbook/motion |
Malicious release: Malicious code in @productdevbook/ts-i18n (npm) MAL-2025-191305 | Malicious | Not scored | 25 Nov, 2025 | npm @productdevbook/ts-i18n |
Malicious release: Malicious code in @silgi/ratelimit (npm) MAL-2025-191318 | Malicious | Not scored | 25 Nov, 2025 | npm @silgi/ratelimit |
Malicious release: Malicious code in @silgi/scalar (npm) MAL-2025-191319 | Malicious | Not scored | 25 Nov, 2025 | npm @silgi/scalar |
Malicious release: Malicious code in @silgi/yoga (npm) MAL-2025-191320 | Malicious | Not scored | 25 Nov, 2025 | npm @silgi/yoga |
Malicious release: Malicious code in @voiceflow/anthropic (npm) MAL-2025-191332 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/anthropic |
Malicious release: Malicious code in @voiceflow/circleci-config-sdk-orb-import (npm) MAL-2025-191338 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/circleci-config-sdk-orb-import |
Malicious release: Malicious code in @voiceflow/nestjs-rate-limit (npm) MAL-2025-191359 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/nestjs-rate-limit |
Malicious release: Malicious code in @voiceflow/npm-package-json-lint-config (npm) MAL-2025-191362 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/npm-package-json-lint-config |
Malicious release: Malicious code in @voiceflow/openai (npm) MAL-2025-191363 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/openai |
Malicious release: Malicious code in @voiceflow/pino (npm) MAL-2025-191364 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/pino |
Malicious release: Malicious code in @voiceflow/pino-pretty (npm) MAL-2025-191365 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/pino-pretty |
Malicious release: Malicious code in @voiceflow/runtime-client-js (npm) MAL-2025-191369 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/runtime-client-js |
Malicious release: Malicious code in @voiceflow/serverless-plugin-typescript (npm) MAL-2025-191373 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/serverless-plugin-typescript |
Malicious release: Malicious code in @voiceflow/storybook-config (npm) MAL-2025-191376 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/storybook-config |
Malicious release: Malicious code in @voiceflow/tsconfig-paths (npm) MAL-2025-191380 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/tsconfig-paths |
Malicious release: Malicious code in @voiceflow/vitest-config (npm) MAL-2025-191384 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/vitest-config |
Malicious release: Malicious code in @voiceflow/widget (npm) MAL-2025-191387 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/widget |
Malicious release: Malicious code in @vucod/email (npm) MAL-2025-191388 | Malicious | Not scored | 25 Nov, 2025 | npm @vucod/email |
Malicious release: Malicious code in create-silgi (npm) MAL-2025-191392 | Malicious | Not scored | 25 Nov, 2025 | npm create-silgi |
Malicious release: Malicious code in dialogflow-es (npm) MAL-2025-191393 | Malicious | Not scored | 25 Nov, 2025 | npm dialogflow-es |
Malicious release: Malicious code in drop-events-on-property-plugin (npm) MAL-2025-191394 | Malicious | Not scored | 25 Nov, 2025 | npm drop-events-on-property-plugin |
Malicious release: Malicious code in n8n-nodes-viral-app (npm) MAL-2025-191399 | Malicious | Not scored | 25 Nov, 2025 | npm n8n-nodes-viral-app |
Malicious release: Malicious code in nuxt-keycloak (npm) MAL-2025-191400 | Malicious | Not scored | 25 Nov, 2025 | npm nuxt-keycloak |
Malicious release: Malicious code in posthog-js (npm) MAL-2025-191402 | Malicious | Not scored | 25 Nov, 2025 | npm posthog-js |
Malicious release: Malicious code in prompt-eng-server (npm) MAL-2025-191403 | Malicious | Not scored | 25 Nov, 2025 | npm prompt-eng-server |
Malicious release: Malicious code in selenium-session (npm) MAL-2025-191421 | Malicious | Not scored | 25 Nov, 2025 | npm selenium-session |
Malicious release: Malicious code in selenium-session-client (npm) MAL-2025-191422 | Malicious | Not scored | 25 Nov, 2025 | npm selenium-session-client |
Malicious release: Malicious code in shelf-jwt-sessions (npm) MAL-2025-191423 | Malicious | Not scored | 25 Nov, 2025 | npm shelf-jwt-sessions |
Malicious release: Malicious code in v-plausible (npm) MAL-2025-191445 | Malicious | Not scored | 25 Nov, 2025 | npm v-plausible |
Malicious release: Malicious code in vf-oss-template (npm) MAL-2025-191447 | Malicious | Not scored | 25 Nov, 2025 | npm vf-oss-template |
Malicious release: Malicious code in ra-auth-firebase (npm) GHSA-5368-7p39-6w68, MAL-2025-191413 | Malicious | Not scored | 25 Nov, 2025 | npm ra-auth-firebase |
Malicious release: Malicious code in @bdkinc/knex-ibmi (npm) GHSA-fm7p-vfxp-w9p7, MAL-2025-191192 | Malicious | Not scored | 25 Nov, 2025 | npm @bdkinc/knex-ibmi |
Malicious release: Malicious code in @axinom/mosaic-cli (npm) GHSA-726p-qgrh-hh53, MAL-2025-191450 | Malicious | Not scored | 25 Nov, 2025 | npm @axinom/mosaic-cli |
Malicious release: Malicious code in @alexadark/reusable-functions (npm) GHSA-39q2-m289-q4m9, MAL-2025-191184 | Malicious | Not scored | 25 Nov, 2025 | npm @alexadark/reusable-functions |
Malicious release: Malicious code in @alexadark/gatsby-theme-wordpress-blog (npm) GHSA-cx45-x3v5-f96j, MAL-2025-191183 | Malicious | Not scored | 25 Nov, 2025 | npm @alexadark/gatsby-theme-wordpress-blog |
Malicious release: Malicious code in @alexadark/gatsby-theme-events (npm) GHSA-fvh8-qv4r-rcff, MAL-2025-191182 | Malicious | Not scored | 25 Nov, 2025 | npm @alexadark/gatsby-theme-events |
Malicious release: Malicious code in @alexadark/amadeus-api (npm) GHSA-fcp8-6x83-67q9, MAL-2025-191181 | Malicious | Not scored | 25 Nov, 2025 | npm @alexadark/amadeus-api |