Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in react-hook-form-persist (npm) GHSA-r36f-rrrf-m64g, MAL-2025-190990 | Malicious | Not scored | 24 Nov, 2025 | npm react-hook-form-persist |
Malicious release: Malicious code in @posthog/plugin-server (npm) GHSA-2h4r-hgjf-w9wh, MAL-2025-190947 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/plugin-server |
Malicious release: Malicious code in react-jam-icons (npm) GHSA-2wc6-j9v7-35hw, MAL-2025-190991 | Malicious | Not scored | 24 Nov, 2025 | npm react-jam-icons |
Malicious release: Malicious code in react-keycloak-context (npm) GHSA-xvww-f7x6-72vx, MAL-2025-190992 | Malicious | Not scored | 24 Nov, 2025 | npm react-keycloak-context |
Malicious release: Malicious code in next-circular-dependency (npm) GHSA-cvxx-qf3j-v4w3, MAL-2025-190979 | Malicious | Not scored | 24 Nov, 2025 | npm next-circular-dependency |
Malicious release: Malicious code in react-linear-loader (npm) GHSA-9rcr-762f-rfwj, MAL-2025-190993 | Malicious | Not scored | 24 Nov, 2025 | npm react-linear-loader |
Malicious release: Malicious code in react-micromodal.js (npm) GHSA-96h8-wqrc-f85w, MAL-2025-190994 | Malicious | Not scored | 24 Nov, 2025 | npm react-micromodal.js |
Malicious release: Malicious code in nanoreset (npm) GHSA-jhpm-rxq6-p8vc, MAL-2025-190978 | Malicious | Not scored | 24 Nov, 2025 | npm nanoreset |
Malicious release: Malicious code in react-native-datepicker-modal (npm) GHSA-rrvx-p83r-vmr9, MAL-2025-190995 | Malicious | Not scored | 24 Nov, 2025 | npm react-native-datepicker-modal |
Malicious release: Malicious code in n8n-nodes-vercel-ai-sdk (npm) GHSA-f422-9v6v-3mm2, MAL-2025-190977 | Malicious | Not scored | 24 Nov, 2025 | npm n8n-nodes-vercel-ai-sdk |
Malicious release: Malicious code in @posthog/drop-events-on-property-plugin (npm) GHSA-j655-56wr-xx3r, MAL-2025-190946 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/drop-events-on-property-plugin |
Malicious release: Malicious code in react-native-email (npm) GHSA-32m4-hxwx-rh9j, MAL-2025-190996 | Malicious | Not scored | 24 Nov, 2025 | npm react-native-email |
Malicious release: Malicious code in mon-package-react-typescript (npm) GHSA-m6gj-2fm9-896j, MAL-2025-190976 | Malicious | Not scored | 24 Nov, 2025 | npm mon-package-react-typescript |
Malicious release: Malicious code in react-native-fetch (npm) GHSA-887c-pvp7-c2fw, MAL-2025-190997 | Malicious | Not scored | 24 Nov, 2025 | npm react-native-fetch |
Malicious release: Malicious code in react-native-get-pixel-dimensions (npm) GHSA-pc7r-3qqx-jjrv, MAL-2025-190998 | Malicious | Not scored | 24 Nov, 2025 | npm react-native-get-pixel-dimensions |
Malicious release: Malicious code in react-native-google-maps-directions (npm) GHSA-cq73-ffwg-8vpj, MAL-2025-190999 | Malicious | Not scored | 24 Nov, 2025 | npm react-native-google-maps-directions |
Malicious release: Malicious code in @posthog/clickhouse (npm) GHSA-h33f-hhfm-c5wv, MAL-2025-190945 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/clickhouse |
Malicious release: Malicious code in mod10-check-digit (npm) GHSA-3qrx-wr7w-8gcm, MAL-2025-190975 | Malicious | Not scored | 24 Nov, 2025 | npm mod10-check-digit |
Malicious release: Malicious code in react-native-modest-checkbox (npm) GHSA-9xp5-c3gg-w93r, MAL-2025-191001 | Malicious | Not scored | 24 Nov, 2025 | npm react-native-modest-checkbox |
Malicious release: Malicious code in react-native-modest-storage (npm) GHSA-jf26-rx5x-g3r3, MAL-2025-191002 | Malicious | Not scored | 24 Nov, 2025 | npm react-native-modest-storage |
Malicious release: Malicious code in react-native-log-level (npm) GHSA-3pcc-7gj8-5h47, MAL-2025-191000 | Malicious | Not scored | 24 Nov, 2025 | npm react-native-log-level |
Malicious release: Malicious code in react-native-phone-call (npm) GHSA-5wc3-6r84-xf8m, MAL-2025-191003 | Malicious | Not scored | 24 Nov, 2025 | npm react-native-phone-call |
Malicious release: Malicious code in react-native-retriable-fetch (npm) GHSA-6vjr-pfj7-c95r, MAL-2025-191004 | Malicious | Not scored | 24 Nov, 2025 | npm react-native-retriable-fetch |
Malicious release: Malicious code in react-native-view-finder (npm) GHSA-g7w8-gjr6-w2j7, MAL-2025-191005 | Malicious | Not scored | 24 Nov, 2025 | npm react-native-view-finder |
Malicious release: Malicious code in react-native-websocket (npm) GHSA-mjmr-345m-q4j2, MAL-2025-191006 | Malicious | Not scored | 24 Nov, 2025 | npm react-native-websocket |
Malicious release: Malicious code in react-qr-image (npm) GHSA-2f7q-xhmg-345j, MAL-2025-191007 | Malicious | Not scored | 24 Nov, 2025 | npm react-qr-image |
Malicious release: Malicious code in jacob-zuma (npm) GHSA-7cqw-82xh-p6qp, MAL-2025-190974 | Malicious | Not scored | 24 Nov, 2025 | npm jacob-zuma |
Malicious release: Malicious code in itobuz-angular-button (npm) GHSA-vhcq-fc6c-hqx4, MAL-2025-190973 | Malicious | Not scored | 24 Nov, 2025 | npm itobuz-angular-button |
Malicious release: Malicious code in itobuz-angular-auth (npm) GHSA-6c53-64xr-m4p9, MAL-2025-190972 | Malicious | Not scored | 24 Nov, 2025 | npm itobuz-angular-auth |
Malicious release: Malicious code in itobuz-angular (npm) GHSA-fchc-834c-jcv5, MAL-2025-190971 | Malicious | Not scored | 24 Nov, 2025 | npm itobuz-angular |
Malicious release: Malicious code in ito-button (npm) GHSA-52jx-7qwg-x7q4, MAL-2025-190970 | Malicious | Not scored | 24 Nov, 2025 | npm ito-button |
Malicious release: Malicious code in invo (npm) GHSA-qpx2-q62m-74q7, MAL-2025-190969 | Malicious | Not scored | 24 Nov, 2025 | npm invo |
Malicious release: Malicious code in image-to-uri (npm) GHSA-g4f7-4w33-8wv7, MAL-2025-190968 | Malicious | Not scored | 24 Nov, 2025 | npm image-to-uri |
Malicious release: Malicious code in hyperterm-hipster (npm) GHSA-27x7-vhhh-g7q8, MAL-2025-190967 | Malicious | Not scored | 24 Nov, 2025 | npm hyperterm-hipster |
Malicious release: Malicious code in httpness (npm) GHSA-8vhw-p3h4-5g3v, MAL-2025-190966 | Malicious | Not scored | 24 Nov, 2025 | npm httpness |
Malicious release: Malicious code in hover-design-prototype (npm) GHSA-qv6c-x8r4-46ff, MAL-2025-190965 | Malicious | Not scored | 24 Nov, 2025 | npm hover-design-prototype |
Malicious release: Malicious code in hopedraw (npm) GHSA-x432-g43r-56x8, MAL-2025-190964 | Malicious | Not scored | 24 Nov, 2025 | npm hopedraw |
Malicious release: Malicious code in hope-mapboxdraw (npm) GHSA-x6p5-q554-49mq, MAL-2025-190963 | Malicious | Not scored | 24 Nov, 2025 | npm hope-mapboxdraw |
Malicious release: Malicious code in haufe-axera-api-client (npm) GHSA-6ph8-544h-3q6p, MAL-2025-190962 | Malicious | Not scored | 24 Nov, 2025 | npm haufe-axera-api-client |
Malicious release: Malicious code in pico-uid (npm) GHSA-8wv5-pgf3-6fwf, MAL-2025-190986 | Malicious | Not scored | 24 Nov, 2025 | npm pico-uid |
Malicious release: Malicious code in pdf-annotation (npm) GHSA-5r9h-vrq7-h3vr, MAL-2025-190985 | Malicious | Not scored | 24 Nov, 2025 | npm pdf-annotation |
Malicious release: Malicious code in parcel-plugin-asset-copier (npm) GHSA-48jp-f8c9-6wqq, MAL-2025-190984 | Malicious | Not scored | 24 Nov, 2025 | npm parcel-plugin-asset-copier |
Malicious release: Malicious code in package-tester (npm) GHSA-3vw7-p3qq-2fx6, MAL-2025-190983 | Malicious | Not scored | 24 Nov, 2025 | npm package-tester |
Malicious release: Malicious code in orchestrix (npm) GHSA-3x79-5xrq-p9wh, MAL-2025-190982 | Malicious | Not scored | 24 Nov, 2025 | npm orchestrix |
Malicious release: Malicious code in expressos (npm) GHSA-p3w8-q8jq-wf9v, MAL-2025-190961 | Malicious | Not scored | 24 Nov, 2025 | npm expressos |
Malicious release: Malicious code in eslint-config-nitpicky (npm) GHSA-x4pj-7345-wvrc, MAL-2025-190960 | Malicious | Not scored | 24 Nov, 2025 | npm eslint-config-nitpicky |
Malicious release: Malicious code in enforce-branch-name (npm) GHSA-hwm2-qqc6-37g2, MAL-2025-190959 | Malicious | Not scored | 24 Nov, 2025 | npm enforce-branch-name |
Malicious release: Malicious code in email-deliverability-tester (npm) GHSA-29rw-64fm-h282, MAL-2025-190958 | Malicious | Not scored | 24 Nov, 2025 | npm email-deliverability-tester |
Malicious release: Malicious code in dont-go (npm) GHSA-84rh-wv6h-wp3f, MAL-2025-190957 | Malicious | Not scored | 24 Nov, 2025 | npm dont-go |
Malicious release: Malicious code in docusaurus-plugin-vanilla-extract (npm) GHSA-2cxc-854w-7972, MAL-2025-190956 | Malicious | Not scored | 24 Nov, 2025 | npm docusaurus-plugin-vanilla-extract |