Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @huntersofbook/core (npm) GHSA-52vc-9ph3-9r9c, MAL-2025-191229 | Malicious | Not scored | 24 Nov, 2025 | npm @huntersofbook/core |
Malicious release: Malicious code in unemail (npm) GHSA-jp97-5m3m-pc3f, MAL-2025-191440 | Malicious | Not scored | 24 Nov, 2025 | npm unemail |
Malicious release: Malicious code in @hover-design/react (npm) GHSA-fvpg-6cfc-hf7r, MAL-2025-191227 | Malicious | Not scored | 24 Nov, 2025 | npm @hover-design/react |
Malicious release: Malicious code in @hover-design/core (npm) GHSA-ggpx-9h3v-5mmm, MAL-2025-191226 | Malicious | Not scored | 24 Nov, 2025 | npm @hover-design/core |
Malicious release: Malicious code in unadapter (npm) GHSA-628j-g5jq-hgrf, MAL-2025-191439 | Malicious | Not scored | 24 Nov, 2025 | npm unadapter |
Malicious release: Malicious code in @hapheus/n8n-nodes-pgp (npm) GHSA-4rrp-h9rf-rx2f, MAL-2025-191225 | Malicious | Not scored | 24 Nov, 2025 | npm @hapheus/n8n-nodes-pgp |
Malicious release: Malicious code in revenuecat (npm) GHSA-97v4-65xr-37cr, MAL-2025-191418 | Malicious | Not scored | 24 Nov, 2025 | npm revenuecat |
Malicious release: Malicious code in samesame (npm) GHSA-8g98-gpv6-56mr, MAL-2025-191419 | Malicious | Not scored | 24 Nov, 2025 | npm samesame |
Malicious release: Malicious code in schob (npm) GHSA-h67w-h3fq-998f, MAL-2025-191420 | Malicious | Not scored | 24 Nov, 2025 | npm schob |
Malicious release: Malicious code in @freeday-ai/webchat (npm) GHSA-25p9-g8f9-w8g7, MAL-2025-191454 | Malicious | Not scored | 24 Nov, 2025 | npm @freeday-ai/webchat |
Malicious release: Malicious code in @flowfuse/flowfuse (npm) GHSA-mpvf-p8hg-65gw, MAL-2025-191453 | Malicious | Not scored | 24 Nov, 2025 | npm @flowfuse/flowfuse |
Malicious release: Malicious code in shell-exec (npm) GHSA-r9h9-f36g-mchq, MAL-2025-191424 | Malicious | Not scored | 24 Nov, 2025 | npm shell-exec |
Malicious release: Malicious code in @fishingbooker/react-swiper (npm) GHSA-vx4f-7jpj-8q6g, MAL-2025-191224 | Malicious | Not scored | 24 Nov, 2025 | npm @fishingbooker/react-swiper |
Malicious release: Malicious code in @fishingbooker/react-raty (npm) GHSA-25vf-r242-2wx3, MAL-2025-191223 | Malicious | Not scored | 24 Nov, 2025 | npm @fishingbooker/react-raty |
Malicious release: Malicious code in simplejsonform (npm) GHSA-mwfw-83jq-9c9v, MAL-2025-191426 | Malicious | Not scored | 24 Nov, 2025 | npm simplejsonform |
Malicious release: Malicious code in solomon-api-stories (npm) GHSA-xq3p-cxhq-7f5h, MAL-2025-191427 | Malicious | Not scored | 24 Nov, 2025 | npm solomon-api-stories |
Malicious release: Malicious code in @fishingbooker/react-pagination (npm) GHSA-f396-mhj2-3jp7, MAL-2025-191222 | Malicious | Not scored | 24 Nov, 2025 | npm @fishingbooker/react-pagination |
Malicious release: Malicious code in solomon-v3-stories (npm) GHSA-vgp4-pgr5-x2rv, MAL-2025-191428 | Malicious | Not scored | 24 Nov, 2025 | npm solomon-v3-stories |
Malicious release: Malicious code in @fishingbooker/react-loader (npm) GHSA-pqh4-9mxj-w73c, MAL-2025-191221 | Malicious | Not scored | 24 Nov, 2025 | npm @fishingbooker/react-loader |
Malicious release: Malicious code in @fishingbooker/browser-sync-plugin (npm) GHSA-xcvr-rw6f-34vp, MAL-2025-191220 | Malicious | Not scored | 24 Nov, 2025 | npm @fishingbooker/browser-sync-plugin |
Malicious release: Malicious code in solomon-v3-ui-wrapper (npm) GHSA-h8p7-c79w-fx4h, MAL-2025-191429 | Malicious | Not scored | 24 Nov, 2025 | npm solomon-v3-ui-wrapper |
Malicious release: Malicious code in @faq-component/react (npm) GHSA-9vh3-2c3x-mw47, MAL-2025-191219 | Malicious | Not scored | 24 Nov, 2025 | npm @faq-component/react |
Malicious release: Malicious code in soneium-acs (npm) GHSA-4f95-qwx3-jx88, MAL-2025-191430 | Malicious | Not scored | 24 Nov, 2025 | npm soneium-acs |
Malicious release: Malicious code in @faq-component/core (npm) GHSA-qwhw-h8x3-34mm, MAL-2025-191218 | Malicious | Not scored | 24 Nov, 2025 | npm @faq-component/core |
Malicious release: Malicious code in sufetch (npm) GHSA-x8hh-3gmf-mm9r, MAL-2025-191431 | Malicious | Not scored | 24 Nov, 2025 | npm sufetch |
Malicious release: Malicious code in tavily-module (npm) GHSA-593r-h747-h48m, MAL-2025-191432 | Malicious | Not scored | 24 Nov, 2025 | npm tavily-module |
Malicious release: Malicious code in @everreal/web-analytics (npm) GHSA-8hm6-86mw-hwwc, MAL-2025-191217 | Malicious | Not scored | 24 Nov, 2025 | npm @everreal/web-analytics |
Malicious release: Malicious code in test23112222-api (npm) GHSA-fw6c-h4gj-gvvj, MAL-2025-191434 | Malicious | Not scored | 24 Nov, 2025 | npm test23112222-api |
Malicious release: Malicious code in @everreal/validate-esmoduleinterop-imports (npm) GHSA-v335-px5m-mp9p, MAL-2025-191216 | Malicious | Not scored | 24 Nov, 2025 | npm @everreal/validate-esmoduleinterop-imports |
Malicious release: Malicious code in tiptap-shadcn-vue (npm) GHSA-6jhx-v2wm-936m, MAL-2025-191435 | Malicious | Not scored | 24 Nov, 2025 | npm tiptap-shadcn-vue |
Malicious release: Malicious code in @everreal/react-charts (npm) GHSA-hrrf-hf44-9vv7, MAL-2025-191215 | Malicious | Not scored | 24 Nov, 2025 | npm @everreal/react-charts |
Malicious release: Malicious code in toonfetch (npm) GHSA-xwjf-5fpw-52jq, MAL-2025-191436 | Malicious | Not scored | 24 Nov, 2025 | npm toonfetch |
Malicious release: Malicious code in @eventcatalog/generator-asyncapi (npm) GHSA-4qmv-rg2j-245j, MAL-2025-191452 | Malicious | Not scored | 24 Nov, 2025 | npm @eventcatalog/generator-asyncapi |
Malicious release: Malicious code in ts-relay-cursor-paging (npm) GHSA-r9rr-c7vq-r642, MAL-2025-191437 | Malicious | Not scored | 24 Nov, 2025 | npm ts-relay-cursor-paging |
Malicious release: Malicious code in typeface-antonio-complete (npm) GHSA-2755-mvxh-w3g6, MAL-2025-191438 | Malicious | Not scored | 24 Nov, 2025 | npm typeface-antonio-complete |
Malicious release: Malicious code in @devx-commerce/plugin-discounts (npm) GHSA-wmm3-4p5c-ff29, MAL-2025-191451 | Malicious | Not scored | 24 Nov, 2025 | npm @devx-commerce/plugin-discounts |
Malicious release: Malicious code in @dev-blinq/cucumber_client (npm) GHSA-hw88-7qh5-5pvx, MAL-2025-191213 | Malicious | Not scored | 24 Nov, 2025 | npm @dev-blinq/cucumber_client |
Malicious release: Malicious code in @vishadtyagi/full-year-calendar (npm) GHSA-ppf7-mxm7-7h3h, MAL-2025-191330 | Malicious | Not scored | 24 Nov, 2025 | npm @vishadtyagi/full-year-calendar |
Malicious release: Malicious code in @viapip/eslint-config (npm) GHSA-fgrh-6758-g255, MAL-2025-191329 | Malicious | Not scored | 24 Nov, 2025 | npm @viapip/eslint-config |
Malicious release: Malicious code in @trpc-rate-limiter/hono (npm) GHSA-qjrq-hrv7-m27w, MAL-2025-191328 | Malicious | Not scored | 24 Nov, 2025 | npm @trpc-rate-limiter/hono |
Malicious release: Malicious code in @trpc-rate-limiter/cloudflare (npm) GHSA-273p-87m8-h72j, MAL-2025-191327 | Malicious | Not scored | 24 Nov, 2025 | npm @trpc-rate-limiter/cloudflare |
Malicious release: Malicious code in @trackstar/test-package (npm) GHSA-76xf-qh56-36wg, MAL-2025-191326 | Malicious | Not scored | 24 Nov, 2025 | npm @trackstar/test-package |
Malicious release: Malicious code in @trackstar/test-angular-package (npm) GHSA-w5m9-xgcq-gxg3, MAL-2025-191325 | Malicious | Not scored | 24 Nov, 2025 | npm @trackstar/test-angular-package |
Malicious release: Malicious code in @trackstar/react-trackstar-link-upgrade (npm) GHSA-xfjh-5cxg-vvm3, MAL-2025-191324 | Malicious | Not scored | 24 Nov, 2025 | npm @trackstar/react-trackstar-link-upgrade |
Malicious release: Malicious code in @trackstar/react-trackstar-link (npm) GHSA-p25h-8jp6-h7mv, MAL-2025-191323 | Malicious | Not scored | 24 Nov, 2025 | npm @trackstar/react-trackstar-link |
Malicious release: Malicious code in @trackstar/angular-trackstar-link (npm) GHSA-p9gj-r4rh-387h, MAL-2025-191322 | Malicious | Not scored | 24 Nov, 2025 | npm @trackstar/angular-trackstar-link |
Malicious release: Malicious code in @sme-ui/aoma-vevasound-metadata-lib (npm) GHSA-9f3v-q7pp-f2rv, MAL-2025-191321 | Malicious | Not scored | 24 Nov, 2025 | npm @sme-ui/aoma-vevasound-metadata-lib |
Malicious release: Malicious code in @silgi/permission (npm) GHSA-jwr6-gjp6-c6vw, MAL-2025-191317 | Malicious | Not scored | 24 Nov, 2025 | npm @silgi/permission |
Malicious release: Malicious code in @silgi/openapi (npm) GHSA-jjgq-j9mv-qvww, MAL-2025-191316 | Malicious | Not scored | 24 Nov, 2025 | npm @silgi/openapi |
Malicious release: Malicious code in @silgi/module-builder (npm) GHSA-q6vf-hqvr-8x9p, MAL-2025-191315 | Malicious | Not scored | 24 Nov, 2025 | npm @silgi/module-builder |