Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @silgi/graphql (npm) GHSA-6j4p-9fhf-vrc2, MAL-2025-191314 | Malicious | Not scored | 24 Nov, 2025 | npm @silgi/graphql |
Malicious release: Malicious code in @silgi/ecosystem (npm) GHSA-vc6q-5wm6-qxr9, MAL-2025-191313 | Malicious | Not scored | 24 Nov, 2025 | npm @silgi/ecosystem |
Malicious release: Malicious code in rediff-viewer (npm) GHSA-gw6x-9h9w-2rjg, MAL-2025-191417 | Malicious | Not scored | 24 Nov, 2025 | npm rediff-viewer |
Malicious release: Malicious code in @silgi/drizzle (npm) GHSA-76m7-r4qw-fcr2, MAL-2025-191312 | Malicious | Not scored | 24 Nov, 2025 | npm @silgi/drizzle |
Malicious release: Malicious code in @silgi/better-auth (npm) GHSA-rccx-m2q5-522x, MAL-2025-191311 | Malicious | Not scored | 24 Nov, 2025 | npm @silgi/better-auth |
Malicious release: Malicious code in rediff (npm) GHSA-35xh-7xqf-84xp, MAL-2025-191416 | Malicious | Not scored | 24 Nov, 2025 | npm rediff |
Malicious release: Malicious code in @sameepsi/sor2 (npm) GHSA-rq97-rqcj-h44v, MAL-2025-191310 | Malicious | Not scored | 24 Nov, 2025 | npm @sameepsi/sor2 |
Malicious release: Malicious code in @sameepsi/sor (npm) GHSA-jwrx-rx3q-v25q, MAL-2025-191309 | Malicious | Not scored | 24 Nov, 2025 | npm @sameepsi/sor |
Malicious release: Malicious code in react-scrambled-text (npm) GHSA-wpc4-3h4p-fwj5, MAL-2025-191415 | Malicious | Not scored | 24 Nov, 2025 | npm react-scrambled-text |
Malicious release: Malicious code in @quick-start-soft/quick-remove-image-background (npm) GHSA-7jvf-68x8-pm34, MAL-2025-191308 | Malicious | Not scored | 24 Nov, 2025 | npm @quick-start-soft/quick-remove-image-background |
Malicious release: Malicious code in @quick-start-soft/quick-markdown-translator (npm) GHSA-vv58-87f3-7qmw, MAL-2025-191307 | Malicious | Not scored | 24 Nov, 2025 | npm @quick-start-soft/quick-markdown-translator |
Malicious release: Malicious code in react-packery-component (npm) GHSA-6wgc-f4jw-23rq, MAL-2025-191414 | Malicious | Not scored | 24 Nov, 2025 | npm react-packery-component |
Malicious release: Malicious code in @posthog/rrweb-replay (npm) GHSA-422m-73j5-c7cp, MAL-2025-191299 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/rrweb-replay |
Malicious release: Malicious code in react-native-jam-icons (npm) GHSA-7r7f-q79m-3wxf, MAL-2025-191144 | Malicious | Not scored | 24 Nov, 2025 | npm react-native-jam-icons |
Malicious release: Malicious code in @opentermsarchive/engine (npm) GHSA-gvm9-crhc-3659, MAL-2025-191044 | Malicious | Not scored | 24 Nov, 2025 | npm @opentermsarchive/engine |
Malicious release: Malicious code in @oku-ui/use-composable (npm) GHSA-9jvc-v2vf-6m5r, MAL-2025-191043 | Malicious | Not scored | 24 Nov, 2025 | npm @oku-ui/use-composable |
Malicious release: Malicious code in react-favic (npm) GHSA-3rf6-xpff-h46p, MAL-2025-191143 | Malicious | Not scored | 24 Nov, 2025 | npm react-favic |
Malicious release: Malicious code in react-data-to-export (npm) GHSA-9g6j-66q2-c6hc, MAL-2025-191142 | Malicious | Not scored | 24 Nov, 2025 | npm react-data-to-export |
Malicious release: Malicious code in @oku-ui/slot (npm) GHSA-4qrx-3m9c-5qv4, MAL-2025-191042 | Malicious | Not scored | 24 Nov, 2025 | npm @oku-ui/slot |
Malicious release: Malicious code in @oku-ui/primitives (npm) GHSA-vg47-hfgj-8573, MAL-2025-191041 | Malicious | Not scored | 24 Nov, 2025 | npm @oku-ui/primitives |
Malicious release: Malicious code in @oku-ui/motion (npm) GHSA-cgmm-32f2-5gm4, MAL-2025-191040 | Malicious | Not scored | 24 Nov, 2025 | npm @oku-ui/motion |
Malicious release: Malicious code in @oku-ui/label (npm) GHSA-42j3-f772-chc9, MAL-2025-191039 | Malicious | Not scored | 24 Nov, 2025 | npm @oku-ui/label |
Malicious release: Malicious code in @oku-ui/focus-scope (npm) GHSA-gppm-m3v2-c4pw, MAL-2025-191038 | Malicious | Not scored | 24 Nov, 2025 | npm @oku-ui/focus-scope |
Malicious release: Malicious code in puny-req (npm) GHSA-pxq8-rfrr-4782, MAL-2025-191141 | Malicious | Not scored | 24 Nov, 2025 | npm puny-req |
Malicious release: Malicious code in pergeltest (npm) GHSA-f958-pj5m-m8jv, MAL-2025-191139 | Malicious | Not scored | 24 Nov, 2025 | npm pergeltest |
Malicious release: Malicious code in pergel (npm) GHSA-2w5p-9qrr-g23p, MAL-2025-191138 | Malicious | Not scored | 24 Nov, 2025 | npm pergel |
Malicious release: Malicious code in nitroping (npm) GHSA-472x-2fx6-8gwx, MAL-2025-191134 | Malicious | Not scored | 24 Nov, 2025 | npm nitroping |
Malicious release: Malicious code in nitro-kutu (npm) GHSA-hfpq-3gcm-4mmc, MAL-2025-191132 | Malicious | Not scored | 24 Nov, 2025 | npm nitro-kutu |
Malicious release: Malicious code in nitro-graphql (npm) GHSA-8q6q-44gw-jhxc, MAL-2025-191131 | Malicious | Not scored | 24 Nov, 2025 | npm nitro-graphql |
Malicious release: Malicious code in nitrodeploy (npm) GHSA-5hxg-4cx4-r7jp, MAL-2025-191133 | Malicious | Not scored | 24 Nov, 2025 | npm nitrodeploy |
Malicious release: Malicious code in @oku-ui/accordion (npm) GHSA-mm57-5g37-34jc, MAL-2025-191037 | Malicious | Not scored | 24 Nov, 2025 | npm @oku-ui/accordion |
Malicious release: Malicious code in m25-transaction-utils (npm) GHSA-x328-h4h9-vf2w, MAL-2025-191127 | Malicious | Not scored | 24 Nov, 2025 | npm m25-transaction-utils |
Malicious release: Malicious code in lui-vue-test (npm) GHSA-qj5r-2cxx-2pj6, MAL-2025-191125 | Malicious | Not scored | 24 Nov, 2025 | npm lui-vue-test |
Malicious release: Malicious code in @trigo/atrix-swagger (npm) GHSA-2h9v-r8q6-mqvx, MAL-2025-191059 | Malicious | Not scored | 24 Nov, 2025 | npm @trigo/atrix-swagger |
Malicious release: Malicious code in kns-error-code (npm) GHSA-8x3r-8fmv-7cm4, MAL-2025-191120 | Malicious | Not scored | 24 Nov, 2025 | npm kns-error-code |
Malicious release: Malicious code in @trefox/sleekshop-js (npm) GHSA-q52v-q3qj-5x5v, MAL-2025-191058 | Malicious | Not scored | 24 Nov, 2025 | npm @trefox/sleekshop-js |
Malicious release: Malicious code in kinvey-flex-scripts (npm) GHSA-gp9g-w669-x977, MAL-2025-191119 | Malicious | Not scored | 24 Nov, 2025 | npm kinvey-flex-scripts |
Malicious release: Malicious code in kinvey-cli-wrapper (npm) GHSA-2mch-f3qc-jjgm, MAL-2025-191118 | Malicious | Not scored | 24 Nov, 2025 | npm kinvey-cli-wrapper |
Malicious release: Malicious code in @tiaanduplessis/react-progressbar (npm) GHSA-4h39-m37p-58xp, MAL-2025-191057 | Malicious | Not scored | 24 Nov, 2025 | npm @tiaanduplessis/react-progressbar |
Malicious release: Malicious code in kinetix-default-token-list (npm) GHSA-hghw-4462-36cv, MAL-2025-191117 | Malicious | Not scored | 24 Nov, 2025 | npm kinetix-default-token-list |
Malicious release: Malicious code in just-toasty (npm) GHSA-v73w-2pjf-wq7g, MAL-2025-191115 | Malicious | Not scored | 24 Nov, 2025 | npm just-toasty |
Malicious release: Malicious code in jsonsurge (npm) GHSA-4gh2-4gxh-wxwx, MAL-2025-191114 | Malicious | Not scored | 24 Nov, 2025 | npm jsonsurge |
Malicious release: Malicious code in jaetut-varit-test (npm) GHSA-m22g-prpc-hmcg, MAL-2025-191112 | Malicious | Not scored | 24 Nov, 2025 | npm jaetut-varit-test |
Malicious release: Malicious code in @tiaanduplessis/json (npm) GHSA-7qf3-m8rp-vq57, MAL-2025-191056 | Malicious | Not scored | 24 Nov, 2025 | npm @tiaanduplessis/json |
Malicious release: Malicious code in insomnia-plugin-random-pick (npm) GHSA-hwcw-cr45-5whf, MAL-2025-191111 | Malicious | Not scored | 24 Nov, 2025 | npm insomnia-plugin-random-pick |
Malicious release: Malicious code in @thedelta/eslint-config (npm) GHSA-qqm2-xw5q-6456, MAL-2025-191055 | Malicious | Not scored | 24 Nov, 2025 | npm @thedelta/eslint-config |
Malicious release: Malicious code in @suraj_h/medium-common (npm) GHSA-63qx-67xh-m2v8, MAL-2025-191054 | Malicious | Not scored | 24 Nov, 2025 | npm @suraj_h/medium-common |
Malicious release: Malicious code in @seezo/sdr-mcp-server (npm) GHSA-3c5g-45xx-w65c, MAL-2025-191053 | Malicious | Not scored | 24 Nov, 2025 | npm @seezo/sdr-mcp-server |
Malicious release: Malicious code in inmaa-map (npm) GHSA-h7f3-h7jf-j687, MAL-2025-191110 | Malicious | Not scored | 24 Nov, 2025 | npm inmaa-map |
Malicious release: Malicious code in ids-enterprise-typings (npm) GHSA-jvr2-6364-4x9q, MAL-2025-191109 | Malicious | Not scored | 24 Nov, 2025 | npm ids-enterprise-typings |