Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in ids-enterprise-ng (npm) GHSA-qcj4-hjhm-cmvp, MAL-2025-191108 | Malicious | Not scored | 24 Nov, 2025 | npm ids-enterprise-ng |
Malicious release: Malicious code in @relyt/mcp-server-relytone (npm) GHSA-9jcv-5hcv-f23r, MAL-2025-191052 | Malicious | Not scored | 24 Nov, 2025 | npm @relyt/mcp-server-relytone |
Malicious release: Malicious code in @relyt/claude-context-mcp (npm) GHSA-r4xp-273q-hmxr, MAL-2025-191051 | Malicious | Not scored | 24 Nov, 2025 | npm @relyt/claude-context-mcp |
Malicious release: Malicious code in ids-enterprise-mcp-server (npm) GHSA-jj4q-9hf2-5rfx, MAL-2025-191107 | Malicious | Not scored | 24 Nov, 2025 | npm ids-enterprise-mcp-server |
Malicious release: Malicious code in @relyt/claude-context-core (npm) GHSA-g2qf-c39v-8ph8, MAL-2025-191050 | Malicious | Not scored | 24 Nov, 2025 | npm @relyt/claude-context-core |
Malicious release: Malicious code in ids-css (npm) GHSA-wv8v-5g6r-6jfm, MAL-2025-191106 | Malicious | Not scored | 24 Nov, 2025 | npm ids-css |
Malicious release: Malicious code in @pruthvi21/use-debounce (npm) GHSA-35wh-x8vx-96h3, MAL-2025-191049 | Malicious | Not scored | 24 Nov, 2025 | npm @pruthvi21/use-debounce |
Malicious release: Malicious code in @pradhumngautam/common-app (npm) GHSA-cxhj-8vrg-j895, MAL-2025-191048 | Malicious | Not scored | 24 Nov, 2025 | npm @pradhumngautam/common-app |
Malicious release: Malicious code in @osmanekrem/error-handler (npm) GHSA-xcwf-q72p-w435, MAL-2025-191047 | Malicious | Not scored | 24 Nov, 2025 | npm @osmanekrem/error-handler |
Malicious release: Malicious code in @osmanekrem/bmad (npm) GHSA-rqjg-7j2x-4r9x, MAL-2025-191046 | Malicious | Not scored | 24 Nov, 2025 | npm @osmanekrem/bmad |
Malicious release: Malicious code in @ntnx/t (npm) GHSA-96fq-r78c-hx8x, MAL-2025-191036 | Malicious | Not scored | 24 Nov, 2025 | npm @ntnx/t |
Malicious release: Malicious code in frontity-starter-theme (npm) GHSA-fv45-3qv4-66gq, MAL-2025-191098 | Malicious | Not scored | 24 Nov, 2025 | npm frontity-starter-theme |
Malicious release: Malicious code in bun-plugin-httpfile (npm) GHSA-h8qf-v6f9-q47h, MAL-2025-191079 | Malicious | Not scored | 24 Nov, 2025 | npm bun-plugin-httpfile |
Malicious release: Malicious code in express-starter-template (npm) GHSA-x8v6-pj44-6wxw, MAL-2025-191089 | Malicious | Not scored | 24 Nov, 2025 | npm express-starter-template |
Malicious release: Malicious code in expo-router-on-rails (npm) GHSA-54vw-hpw5-ghw5, MAL-2025-191088 | Malicious | Not scored | 24 Nov, 2025 | npm expo-router-on-rails |
Malicious release: Malicious code in buffered-interpolation-babylon6 (npm) GHSA-5488-ghv7-7gm5, MAL-2025-191078 | Malicious | Not scored | 24 Nov, 2025 | npm buffered-interpolation-babylon6 |
Malicious release: Malicious code in esbuild-plugin-brotli (npm) GHSA-jh24-3x78-mcqp, MAL-2025-191087 | Malicious | Not scored | 24 Nov, 2025 | npm esbuild-plugin-brotli |
Malicious release: Malicious code in @orbitgtbelgium/mapbox-gl-draw-cut-polygon-mode (npm) GHSA-rr3j-7qx6-m8gv, MAL-2025-191045 | Malicious | Not scored | 24 Nov, 2025 | npm @orbitgtbelgium/mapbox-gl-draw-cut-polygon-mode |
Malicious release: Malicious code in electron-volt (npm) GHSA-grxg-6443-4p64, MAL-2025-191086 | Malicious | Not scored | 24 Nov, 2025 | npm electron-volt |
Malicious release: Malicious code in @ntnx/passport-wso2 (npm) GHSA-r848-vh7x-hh8m, MAL-2025-191035 | Malicious | Not scored | 24 Nov, 2025 | npm @ntnx/passport-wso2 |
Malicious release: Malicious code in better-queue-nedb (npm) GHSA-2vfc-xj5r-xmg4, MAL-2025-191074 | Malicious | Not scored | 24 Nov, 2025 | npm better-queue-nedb |
Malicious release: Malicious code in easypanel-sdk (npm) GHSA-f78c-gcxh-wjpq, MAL-2025-191085 | Malicious | Not scored | 24 Nov, 2025 | npm easypanel-sdk |
Malicious release: Malicious code in @lpdjs/firestore-repo-service (npm) GHSA-fw4c-3fgx-2g9f, MAL-2025-191034 | Malicious | Not scored | 24 Nov, 2025 | npm @lpdjs/firestore-repo-service |
Malicious release: Malicious code in @louisle2/core (npm) GHSA-qh6g-9rw7-vm3f, MAL-2025-191033 | Malicious | Not scored | 24 Nov, 2025 | npm @louisle2/core |
Malicious release: Malicious code in create-director-app (npm) GHSA-g5h7-9qh2-fv5r, MAL-2025-191082 | Malicious | Not scored | 24 Nov, 2025 | npm create-director-app |
Malicious release: Malicious code in better-auth-nuxt (npm) GHSA-8jwp-6329-28fq, MAL-2025-191073 | Malicious | Not scored | 24 Nov, 2025 | npm better-auth-nuxt |
Malicious release: Malicious code in create-kinvey-flex-service (npm) GHSA-j66q-h34h-9fh9, MAL-2025-191083 | Malicious | Not scored | 24 Nov, 2025 | npm create-kinvey-flex-service |
Malicious release: Malicious code in @lessondesk/schoolbus (npm) GHSA-jq3v-mxgw-2cmv, MAL-2025-191032 | Malicious | Not scored | 24 Nov, 2025 | npm @lessondesk/schoolbus |
Malicious release: Malicious code in best_gpio_controller (npm) GHSA-p5cg-vcp7-xqhx, MAL-2025-191072 | Malicious | Not scored | 24 Nov, 2025 | npm best_gpio_controller |
Malicious release: Malicious code in csv-tool-cli (npm) GHSA-9qmf-jjv3-65x3, MAL-2025-191084 | Malicious | Not scored | 24 Nov, 2025 | npm csv-tool-cli |
Malicious release: Malicious code in @lessondesk/react-table-context (npm) GHSA-24jj-p794-g6c6, MAL-2025-191031 | Malicious | Not scored | 24 Nov, 2025 | npm @lessondesk/react-table-context |
Malicious release: Malicious code in babel-preset-kinvey-flex-service (npm) GHSA-c8pf-4gvg-m3qj, MAL-2025-191069 | Malicious | Not scored | 24 Nov, 2025 | npm babel-preset-kinvey-flex-service |
Malicious release: Malicious code in @lessondesk/material-icons (npm) GHSA-4wjj-6347-jhfx, MAL-2025-191030 | Malicious | Not scored | 24 Nov, 2025 | npm @lessondesk/material-icons |
Malicious release: Malicious code in @lessondesk/eslint-config (npm) GHSA-h468-mjf5-vhxv, MAL-2025-191029 | Malicious | Not scored | 24 Nov, 2025 | npm @lessondesk/eslint-config |
Malicious release: Malicious code in @lessondesk/electron-group-api-client (npm) GHSA-mcph-m6ph-vc9h, MAL-2025-191028 | Malicious | Not scored | 24 Nov, 2025 | npm @lessondesk/electron-group-api-client |
Malicious release: Malicious code in @lessondesk/babel-preset (npm) GHSA-92j3-565q-xc26, MAL-2025-191027 | Malicious | Not scored | 24 Nov, 2025 | npm @lessondesk/babel-preset |
Malicious release: Malicious code in @lessondesk/api-client (npm) GHSA-jm29-mp7p-fqqx, MAL-2025-191026 | Malicious | Not scored | 24 Nov, 2025 | npm @lessondesk/api-client |
Malicious release: Malicious code in bytes-to-x (npm) GHSA-4hgc-6hfv-m3qw, MAL-2025-191080 | Malicious | Not scored | 24 Nov, 2025 | npm bytes-to-x |
Malicious release: Malicious code in chrome-extension-downloads (npm) GHSA-cg89-hwpg-m27r, MAL-2025-191081 | Malicious | Not scored | 24 Nov, 2025 | npm chrome-extension-downloads |
Malicious release: Malicious code in benmostyn-frame-print (npm) GHSA-fhmh-4jfp-jcxp, MAL-2025-191071 | Malicious | Not scored | 24 Nov, 2025 | npm benmostyn-frame-print |
Malicious release: Malicious code in barebones-css (npm) GHSA-27gg-rj6x-rpc2, MAL-2025-191070 | Malicious | Not scored | 24 Nov, 2025 | npm barebones-css |
Malicious release: Malicious code in blinqio-executions-cli (npm) GHSA-grm4-x7gc-qhg2, MAL-2025-191076 | Malicious | Not scored | 24 Nov, 2025 | npm blinqio-executions-cli |
Malicious release: Malicious code in blob-to-base64 (npm) GHSA-8m38-v5g6-whxx, MAL-2025-191077 | Malicious | Not scored | 24 Nov, 2025 | npm blob-to-base64 |
Malicious release: Malicious code in axios-timed (npm) GHSA-gcjx-8xwp-g5r4, MAL-2025-191068 | Malicious | Not scored | 24 Nov, 2025 | npm axios-timed |
Malicious release: Malicious code in asciitranslator (npm) GHSA-77fr-xww7-mp2f, MAL-2025-191065 | Malicious | Not scored | 24 Nov, 2025 | npm asciitranslator |
Malicious release: Malicious code in bidirectional-adapter (npm) GHSA-vhm7-gf4p-j2rq, MAL-2025-191075 | Malicious | Not scored | 24 Nov, 2025 | npm bidirectional-adapter |
Malicious release: Malicious code in automation_model (npm) GHSA-3fxp-wv67-62xv, MAL-2025-191066 | Malicious | Not scored | 24 Nov, 2025 | npm automation_model |
Malicious release: Malicious code in avvvatars-vue (npm) GHSA-fvr9-qhw8-v3w6, MAL-2025-191067 | Malicious | Not scored | 24 Nov, 2025 | npm avvvatars-vue |
Malicious release: Malicious code in arc-cli-fc (npm) GHSA-m788-q6w4-jjpr, MAL-2025-191064 | Malicious | Not scored | 24 Nov, 2025 | npm arc-cli-fc |
Malicious release: Malicious code in web-types-htmx (npm) GHSA-958x-98wv-7f7j, MAL-2025-191153 | Malicious | Not scored | 24 Nov, 2025 | npm web-types-htmx |