Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in ai-crowl-shield (npm) GHSA-cvq8-r6mf-xq9q, MAL-2025-191063 | Malicious | Not scored | 24 Nov, 2025 | npm ai-crowl-shield |
Malicious release: Malicious code in webpack-loader-httpfile (npm) GHSA-4j6q-7396-655g, MAL-2025-191154 | Malicious | Not scored | 24 Nov, 2025 | npm webpack-loader-httpfile |
Malicious release: Malicious code in 02-echo (npm) GHSA-q2q8-5wg4-g6jq, MAL-2025-191025 | Malicious | Not scored | 24 Nov, 2025 | npm 02-echo |
Malicious release: Malicious code in wallet-type (npm) GHSA-xm23-2mgm-6phh, MAL-2025-191152 | Malicious | Not scored | 24 Nov, 2025 | npm wallet-type |
Malicious release: Malicious code in @varsityvibe/validation-schemas (npm) GHSA-jqcj-cc9g-j67v, MAL-2025-191062 | Malicious | Not scored | 24 Nov, 2025 | npm @varsityvibe/validation-schemas |
Malicious release: Malicious code in wallet-evm (npm) GHSA-jp5h-qqgg-qxxv, MAL-2025-191151 | Malicious | Not scored | 24 Nov, 2025 | npm wallet-evm |
Malicious release: Malicious code in @varsityvibe/utils (npm) GHSA-j7jj-r9w2-8q2g, MAL-2025-191061 | Malicious | Not scored | 24 Nov, 2025 | npm @varsityvibe/utils |
Malicious release: Malicious code in @varsityvibe/api-client (npm) GHSA-xjm6-4grq-326j, MAL-2025-191060 | Malicious | Not scored | 24 Nov, 2025 | npm @varsityvibe/api-client |
Malicious release: Malicious code in victoriaxoaquyet-wallet-core (npm) GHSA-2h5q-5pq9-866v, MAL-2025-191150 | Malicious | Not scored | 24 Nov, 2025 | npm victoriaxoaquyet-wallet-core |
Malicious release: Malicious code in victoria-wallet-validator (npm) GHSA-9h6m-q36c-7hvg, MAL-2025-191149 | Malicious | Not scored | 24 Nov, 2025 | npm victoria-wallet-validator |
Malicious release: Malicious code in victoria-wallet-utils (npm) GHSA-5hrc-f97f-hgp9, MAL-2025-191148 | Malicious | Not scored | 24 Nov, 2025 | npm victoria-wallet-utils |
Malicious release: Malicious code in victoria-wallet-type (npm) GHSA-gq28-p5p8-8v6f, MAL-2025-191147 | Malicious | Not scored | 24 Nov, 2025 | npm victoria-wallet-type |
Malicious release: Malicious code in generator-meteor-stock (npm) GHSA-f53h-6gfq-fcmj, MAL-2025-191101 | Malicious | Not scored | 24 Nov, 2025 | npm generator-meteor-stock |
Malicious release: Malicious code in gatsby-plugin-cname (npm) GHSA-9rx2-g59r-84qp, MAL-2025-191100 | Malicious | Not scored | 24 Nov, 2025 | npm gatsby-plugin-cname |
Malicious release: Malicious code in victoria-wallet-core (npm) GHSA-49r7-3f89-26h4, MAL-2025-191146 | Malicious | Not scored | 24 Nov, 2025 | npm victoria-wallet-core |
Malicious release: Malicious code in generator-ng-itobuz (npm) GHSA-h4c2-jv9j-hwh6, MAL-2025-191102 | Malicious | Not scored | 24 Nov, 2025 | npm generator-ng-itobuz |
Malicious release: Malicious code in victoria-wallet-constants (npm) GHSA-9q6m-64x6-7mwf, MAL-2025-191145 | Malicious | Not scored | 24 Nov, 2025 | npm victoria-wallet-constants |
Malicious release: Malicious code in fuzzy-finder (npm) GHSA-m66q-4c3m-7632, MAL-2025-191099 | Malicious | Not scored | 24 Nov, 2025 | npm fuzzy-finder |
Malicious release: Malicious code in get-them-args (npm) GHSA-6779-xgxr-9pcr, MAL-2025-191103 | Malicious | Not scored | 24 Nov, 2025 | npm get-them-args |
Malicious release: Malicious code in formik-store (npm) GHSA-pphm-83cv-4vjr, MAL-2025-191097 | Malicious | Not scored | 24 Nov, 2025 | npm formik-store |
Malicious release: Malicious code in formik-error-focus (npm) GHSA-8fhc-x7mv-mj8f, MAL-2025-191096 | Malicious | Not scored | 24 Nov, 2025 | npm formik-error-focus |
Malicious release: Malicious code in gitsafe (npm) GHSA-c2q8-fv4h-m9xr, MAL-2025-191104 | Malicious | Not scored | 24 Nov, 2025 | npm gitsafe |
Malicious release: Malicious code in flatten-unflatten (npm) GHSA-3rw9-37g7-xvr5, MAL-2025-191095 | Malicious | Not scored | 24 Nov, 2025 | npm flatten-unflatten |
Malicious release: Malicious code in gulp-inject-envs (npm) GHSA-f74h-jm63-v9h3, MAL-2025-191105 | Malicious | Not scored | 24 Nov, 2025 | npm gulp-inject-envs |
Malicious release: Malicious code in flapstacks (npm) GHSA-5g49-4vm7-jqmg, MAL-2025-191094 | Malicious | Not scored | 24 Nov, 2025 | npm flapstacks |
Malicious release: Malicious code in medusa-plugin-logs (npm) GHSA-8583-h7rv-pqr2, MAL-2025-191128 | Malicious | Not scored | 24 Nov, 2025 | npm medusa-plugin-logs |
Malicious release: Malicious code in fittxt (npm) GHSA-pg3w-86hv-66cf, MAL-2025-191093 | Malicious | Not scored | 24 Nov, 2025 | npm fittxt |
Malicious release: Malicious code in jquery-bindings (npm) GHSA-hp23-35fw-9g8j, MAL-2025-191113 | Malicious | Not scored | 24 Nov, 2025 | npm jquery-bindings |
Malicious release: Malicious code in firestore-search-engine (npm) GHSA-vpvg-cpgw-q6h8, MAL-2025-191092 | Malicious | Not scored | 24 Nov, 2025 | npm firestore-search-engine |
Malicious release: Malicious code in kill-port (npm) GHSA-3j2r-p9f6-rw66, MAL-2025-191116 | Malicious | Not scored | 24 Nov, 2025 | npm kill-port |
Malicious release: Malicious code in feature-flip (npm) GHSA-wfc8-g67x-27cc, MAL-2025-191091 | Malicious | Not scored | 24 Nov, 2025 | npm feature-flip |
Malicious release: Malicious code in kwami (npm) GHSA-5x6x-h76w-7669, MAL-2025-191121 | Malicious | Not scored | 24 Nov, 2025 | npm kwami |
Malicious release: Malicious code in fat-fingered (npm) GHSA-qwjf-7284-qjvw, MAL-2025-191090 | Malicious | Not scored | 24 Nov, 2025 | npm fat-fingered |
Malicious release: Malicious code in okta-react-router-6 (npm) GHSA-jvx9-5f88-f6c8, MAL-2025-191137 | Malicious | Not scored | 24 Nov, 2025 | npm okta-react-router-6 |
Malicious release: Malicious code in lang-codes (npm) GHSA-wfh5-5vcc-xmh5, MAL-2025-191122 | Malicious | Not scored | 24 Nov, 2025 | npm lang-codes |
Malicious release: Malicious code in obj-to-css (npm) GHSA-2hf2-pqrh-ph9r, MAL-2025-191136 | Malicious | Not scored | 24 Nov, 2025 | npm obj-to-css |
Malicious release: Malicious code in license-o-matic (npm) GHSA-x23c-fr3f-x5gv, MAL-2025-191123 | Malicious | Not scored | 24 Nov, 2025 | npm license-o-matic |
Malicious release: Malicious code in wenk (npm) GHSA-hjhr-87pr-r7vw, MAL-2025-191155 | Malicious | Not scored | 24 Nov, 2025 | npm wenk |
Malicious release: Malicious code in normal-store (npm) GHSA-h55v-443q-qjm4, MAL-2025-191135 | Malicious | Not scored | 24 Nov, 2025 | npm normal-store |
Malicious release: Malicious code in ngx-wooapi (npm) GHSA-c933-f7h3-47xj, MAL-2025-191130 | Malicious | Not scored | 24 Nov, 2025 | npm ngx-wooapi |
Malicious release: Malicious code in lint-staged-imagemin (npm) GHSA-fc55-r563-7xhq, MAL-2025-191124 | Malicious | Not scored | 24 Nov, 2025 | npm lint-staged-imagemin |
Malicious release: Malicious code in zuper-sdk (npm) GHSA-wr7r-h846-8q95, MAL-2025-191156 | Malicious | Not scored | 24 Nov, 2025 | npm zuper-sdk |
Malicious release: Malicious code in ngx-useful-swiper-prosenjit (npm) GHSA-w6c5-h8g3-hx9c, MAL-2025-191129 | Malicious | Not scored | 24 Nov, 2025 | npm ngx-useful-swiper-prosenjit |
Malicious release: Malicious code in luno-api (npm) GHSA-pw4q-vp83-x535, MAL-2025-191126 | Malicious | Not scored | 24 Nov, 2025 | npm luno-api |
Malicious release: Malicious code in piclite (npm) GHSA-m5f9-vqvp-jrvm, MAL-2025-191140 | Malicious | Not scored | 24 Nov, 2025 | npm piclite |
Malicious release: Malicious code in prime-one-table (npm) GHSA-4x76-fxmf-c62v, MAL-2025-190987 | Malicious | Not scored | 24 Nov, 2025 | npm prime-one-table |
Malicious release: Malicious code in prompt-eng (npm) GHSA-hjww-r2g4-w9fh, MAL-2025-190988 | Malicious | Not scored | 24 Nov, 2025 | npm prompt-eng |
Malicious release: Malicious code in next-styled-nprogress (npm) GHSA-8m3r-xr49-5g64, MAL-2025-190981 | Malicious | Not scored | 24 Nov, 2025 | npm next-styled-nprogress |
Malicious release: Malicious code in react-component-taggers (npm) GHSA-7m4r-gqvv-7q3q, MAL-2025-190989 | Malicious | Not scored | 24 Nov, 2025 | npm react-component-taggers |
Malicious release: Malicious code in next-simple-google-analytics (npm) GHSA-4f6w-f258-xf3r, MAL-2025-190980 | Malicious | Not scored | 24 Nov, 2025 | npm next-simple-google-analytics |