Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @accordproject/template-engine (npm) GHSA-66gc-q38v-x275, MAL-2025-191177 | Malicious | Not scored | 25 Nov, 2025 | npm @accordproject/template-engine |
Malicious release: Malicious code in @accordproject/markdown-it-cicero (npm) GHSA-prvc-95mx-pwc6, MAL-2025-191176 | Malicious | Not scored | 25 Nov, 2025 | npm @accordproject/markdown-it-cicero |
Malicious release: Malicious code in @accordproject/markdown-cli (npm) GHSA-qcr2-r7rc-67v6, MAL-2025-191449 | Malicious | Not scored | 25 Nov, 2025 | npm @accordproject/markdown-cli |
Malicious release: Malicious code in @accordproject/concerto-types (npm) GHSA-qxcj-pr67-jr5x, MAL-2025-191175 | Malicious | Not scored | 25 Nov, 2025 | npm @accordproject/concerto-types |
Malicious release: Malicious code in @accordproject/concerto-metamodel (npm) GHSA-4jjv-h96f-8p55, MAL-2025-191174 | Malicious | Not scored | 25 Nov, 2025 | npm @accordproject/concerto-metamodel |
Malicious release: Malicious code in @accordproject/concerto-linter-default-ruleset (npm) GHSA-wjqq-qr7q-fgv8, MAL-2025-191173 | Malicious | Not scored | 25 Nov, 2025 | npm @accordproject/concerto-linter-default-ruleset |
Malicious release: Malicious code in @accordproject/concerto-linter (npm) GHSA-jgmx-8q5r-q7fg, MAL-2025-191172 | Malicious | Not scored | 25 Nov, 2025 | npm @accordproject/concerto-linter |
Malicious release: Malicious code in @accordproject/concerto-analysis (npm) GHSA-h27j-vm9v-5mpm, MAL-2025-191171 | Malicious | Not scored | 25 Nov, 2025 | npm @accordproject/concerto-analysis |
Malicious release: Malicious code in @browserbasehq/stagehand-docs (npm) GHSA-4rjx-92xj-8cj8, MAL-2025-191199 | Malicious | Not scored | 25 Nov, 2025 | npm @browserbasehq/stagehand-docs |
Malicious release: Malicious code in @browserbasehq/mcp (npm) GHSA-j9hg-hmwf-9qx7, MAL-2025-191195 | Malicious | Not scored | 25 Nov, 2025 | npm @browserbasehq/mcp |
Malicious release: Malicious code in @browserbasehq/director-ai (npm) GHSA-h638-vgm6-2xm2, MAL-2025-191194 | Malicious | Not scored | 25 Nov, 2025 | npm @browserbasehq/director-ai |
Malicious release: Malicious code in @browserbasehq/bb9 (npm) GHSA-xxg4-p932-cqpg, MAL-2025-191193 | Malicious | Not scored | 25 Nov, 2025 | npm @browserbasehq/bb9 |
Malicious release: Malicious code in @commute/market-data-chartjs (npm) GHSA-99gc-8v36-q594, MAL-2025-191209 | Malicious | Not scored | 25 Nov, 2025 | npm @commute/market-data-chartjs |
Malicious release: Malicious code in @commute/market-data (npm) GHSA-cv5q-hjmq-hwmh, MAL-2025-191208 | Malicious | Not scored | 25 Nov, 2025 | npm @commute/market-data |
Malicious release: Malicious code in @commute/bloom (npm) GHSA-9jw5-858g-gvr8, MAL-2025-191207 | Malicious | Not scored | 25 Nov, 2025 | npm @commute/bloom |
Malicious release: Malicious code in @cllbk/ghl (npm) GHSA-3rxf-v4q2-5xwv, MAL-2025-191206 | Malicious | Not scored | 25 Nov, 2025 | npm @cllbk/ghl |
Malicious release: Malicious code in @clausehq/flows-step-taskscreateurl (npm) GHSA-qg35-pmqr-3w7w, MAL-2025-191205 | Malicious | Not scored | 25 Nov, 2025 | npm @clausehq/flows-step-taskscreateurl |
Malicious release: Malicious code in @clausehq/flows-step-sendgridemail (npm) GHSA-8rvw-jhfc-pjw9, MAL-2025-191204 | Malicious | Not scored | 25 Nov, 2025 | npm @clausehq/flows-step-sendgridemail |
Malicious release: Malicious code in @clausehq/flows-step-mqtt (npm) GHSA-pg4m-q7gp-8hc8, MAL-2025-191203 | Malicious | Not scored | 25 Nov, 2025 | npm @clausehq/flows-step-mqtt |
Malicious release: Malicious code in @clausehq/flows-step-jsontoxml (npm) GHSA-f23q-xj4h-4w4r, MAL-2025-191202 | Malicious | Not scored | 25 Nov, 2025 | npm @clausehq/flows-step-jsontoxml |
Malicious release: Malicious code in @clausehq/flows-step-httprequest (npm) GHSA-f924-8rxv-9mfj, MAL-2025-191201 | Malicious | Not scored | 25 Nov, 2025 | npm @clausehq/flows-step-httprequest |
Malicious release: Malicious code in @chtijs/eslint-config (npm) GHSA-4c6h-33gm-vqcx, MAL-2025-191200 | Malicious | Not scored | 25 Nov, 2025 | npm @chtijs/eslint-config |
Malicious release: Malicious code in @micado-digital/stadtmarketing-kufstein-external (npm) GHSA-22qc-qppx-23m4, MAL-2025-191246 | Malicious | Not scored | 24 Nov, 2025 | npm @micado-digital/stadtmarketing-kufstein-external |
Malicious release: Malicious code in @medusajs/medusa-oas-cli (npm) GHSA-j424-cj2g-m49g, MAL-2025-191458 | Malicious | Not scored | 24 Nov, 2025 | npm @medusajs/medusa-oas-cli |
Malicious release: Malicious code in @medusajs/medusa (npm) GHSA-w66q-hw37-2234, MAL-2025-191457 | Malicious | Not scored | 24 Nov, 2025 | npm @medusajs/medusa |
Malicious release: Malicious code in @medusajs/analytics-posthog (npm) GHSA-4v29-c29x-mwvv, MAL-2025-191456 | Malicious | Not scored | 24 Nov, 2025 | npm @medusajs/analytics-posthog |
Malicious release: Malicious code in quickswap-v2-sdk (npm) GHSA-368p-3hrq-9frx, MAL-2025-191412 | Malicious | Not scored | 24 Nov, 2025 | npm quickswap-v2-sdk |
Malicious release: Malicious code in @lui-ui/lui-vue (npm) GHSA-mvx8-7fx3-6p38, MAL-2025-191245 | Malicious | Not scored | 24 Nov, 2025 | npm @lui-ui/lui-vue |
Malicious release: Malicious code in quickswap-token-lists (npm) GHSA-3wr7-7xcq-457p, MAL-2025-191411 | Malicious | Not scored | 24 Nov, 2025 | npm quickswap-token-lists |
Malicious release: Malicious code in @lui-ui/lui-tailwindcss (npm) GHSA-cv7r-4h7p-x4rm, MAL-2025-191244 | Malicious | Not scored | 24 Nov, 2025 | npm @lui-ui/lui-tailwindcss |
Malicious release: Malicious code in quickswap-smart-order-router (npm) GHSA-fcpc-rxv5-qgj5, MAL-2025-191410 | Malicious | Not scored | 24 Nov, 2025 | npm quickswap-smart-order-router |
Malicious release: Malicious code in @lui-ui/lui-nuxt (npm) GHSA-8chq-7g5h-q6g8, MAL-2025-191243 | Malicious | Not scored | 24 Nov, 2025 | npm @lui-ui/lui-nuxt |
Malicious release: Malicious code in quickswap-sdk (npm) GHSA-w225-qmgx-c49c, MAL-2025-191409 | Malicious | Not scored | 24 Nov, 2025 | npm quickswap-sdk |
Malicious release: Malicious code in quickswap-router-sdk (npm) GHSA-8c7v-hf69-hh6h, MAL-2025-191408 | Malicious | Not scored | 24 Nov, 2025 | npm quickswap-router-sdk |
Malicious release: Malicious code in quickswap-default-token-list (npm) GHSA-4jf5-q7wr-9jgf, MAL-2025-191407 | Malicious | Not scored | 24 Nov, 2025 | npm quickswap-default-token-list |
Malicious release: Malicious code in @kvytech/habbit-e2e-test (npm) GHSA-56r3-gr3f-rwpx, MAL-2025-191239 | Malicious | Not scored | 24 Nov, 2025 | npm @kvytech/habbit-e2e-test |
Malicious release: Malicious code in quickswap-default-staking-list-address (npm) GHSA-2gvr-84pm-6f34, MAL-2025-191406 | Malicious | Not scored | 24 Nov, 2025 | npm quickswap-default-staking-list-address |
Malicious release: Malicious code in @kong/spec-renderer (npm) GHSA-3r2q-8jxp-mjmh, MAL-2025-191455 | Malicious | Not scored | 24 Nov, 2025 | npm @kong/spec-renderer |
Malicious release: Malicious code in quickswap-default-staking-list (npm) GHSA-9hjg-rgm7-hx2q, MAL-2025-191405 | Malicious | Not scored | 24 Nov, 2025 | npm quickswap-default-staking-list |
Malicious release: Malicious code in @jayeshsadhwani/telemetry-sdk (npm) GHSA-chj9-q7h2-mrfr, MAL-2025-191238 | Malicious | Not scored | 24 Nov, 2025 | npm @jayeshsadhwani/telemetry-sdk |
Malicious release: Malicious code in vue-browserupdate-nuxt (npm) GHSA-m9rg-5c6r-vg2h, MAL-2025-191448 | Malicious | Not scored | 24 Nov, 2025 | npm vue-browserupdate-nuxt |
Malicious release: Malicious code in @ifings/metatron3 (npm) GHSA-6wc8-6mq8-g895, MAL-2025-191237 | Malicious | Not scored | 24 Nov, 2025 | npm @ifings/metatron3 |
Malicious release: Malicious code in @ifings/design-system (npm) GHSA-3p9v-5g48-hmr6, MAL-2025-191236 | Malicious | Not scored | 24 Nov, 2025 | npm @ifings/design-system |
Malicious release: Malicious code in valuedex-sdk (npm) GHSA-x462-r8jr-ch8w, MAL-2025-191446 | Malicious | Not scored | 24 Nov, 2025 | npm valuedex-sdk |
Malicious release: Malicious code in uniswap-test-sdk-core (npm) GHSA-ccph-p2q2-gx2p, MAL-2025-191443 | Malicious | Not scored | 24 Nov, 2025 | npm uniswap-test-sdk-core |
Malicious release: Malicious code in @ifelsedeveloper/protocol-contracts-svm-idl (npm) GHSA-xgj5-84xr-63rm, MAL-2025-191235 | Malicious | Not scored | 24 Nov, 2025 | npm @ifelsedeveloper/protocol-contracts-svm-idl |
Malicious release: Malicious code in unsearch (npm) GHSA-m354-9mf4-72ph, MAL-2025-191444 | Malicious | Not scored | 24 Nov, 2025 | npm unsearch |
Malicious release: Malicious code in @hyperlook/telemetry-sdk (npm) GHSA-r4v8-wfrc-5gj8, MAL-2025-191234 | Malicious | Not scored | 24 Nov, 2025 | npm @hyperlook/telemetry-sdk |
Malicious release: Malicious code in uniswap-smart-order-router (npm) GHSA-4jp7-ch66-mvmv, MAL-2025-191442 | Malicious | Not scored | 24 Nov, 2025 | npm uniswap-smart-order-router |
Malicious release: Malicious code in uniswap-router-sdk (npm) GHSA-9j59-mghw-5mwf, MAL-2025-191441 | Malicious | Not scored | 24 Nov, 2025 | npm uniswap-router-sdk |