Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in designstudiouiux (npm) GHSA-4cm9-fpp9-mjwx, MAL-2025-190955 | Malicious | Not scored | 24 Nov, 2025 | npm designstudiouiux |
Malicious release: Malicious code in dashboard-empty-state (npm) GHSA-c43q-4447-wm7m, MAL-2025-190954 | Malicious | Not scored | 24 Nov, 2025 | npm dashboard-empty-state |
Malicious release: Malicious code in css-dedoupe (npm) GHSA-h8jx-j7rf-fjhh, MAL-2025-190953 | Malicious | Not scored | 24 Nov, 2025 | npm css-dedoupe |
Malicious release: Malicious code in count-it-down (npm) GHSA-xh3p-r6cx-g8hv, MAL-2025-190952 | Malicious | Not scored | 24 Nov, 2025 | npm count-it-down |
Malicious release: Malicious code in composite-reducer (npm) GHSA-grg7-759x-5638, MAL-2025-190951 | Malicious | Not scored | 24 Nov, 2025 | npm composite-reducer |
Malicious release: Malicious code in compare-obj (npm) GHSA-fmgq-4crf-7q98, MAL-2025-190950 | Malicious | Not scored | 24 Nov, 2025 | npm compare-obj |
Malicious release: Malicious code in colors-regex (npm) GHSA-j7f2-j5pr-3r3r, MAL-2025-190949 | Malicious | Not scored | 24 Nov, 2025 | npm colors-regex |
Malicious release: Malicious code in coinmarketcap-api (npm) GHSA-3f5p-9hr6-r692, MAL-2025-190948 | Malicious | Not scored | 24 Nov, 2025 | npm coinmarketcap-api |
Malicious release: Malicious code in sa-company-registration-number-regex (npm) GHSA-wmrc-wxq7-xfh7, MAL-2025-191008 | Malicious | Not scored | 24 Nov, 2025 | npm sa-company-registration-number-regex |
Malicious release: Malicious code in sa-id-gen (npm) GHSA-67cw-9phh-xmf8, MAL-2025-191009 | Malicious | Not scored | 24 Nov, 2025 | npm sa-id-gen |
Malicious release: Malicious code in set-nested-prop (npm) GHSA-r599-4jqx-9665, MAL-2025-191010 | Malicious | Not scored | 24 Nov, 2025 | npm set-nested-prop |
Malicious release: Malicious code in sort-by-distance (npm) GHSA-cvc8-qmc5-3g8g, MAL-2025-191011 | Malicious | Not scored | 24 Nov, 2025 | npm sort-by-distance |
Malicious release: Malicious code in south-african-id-info (npm) GHSA-96x7-jx8q-5h3c, MAL-2025-191012 | Malicious | Not scored | 24 Nov, 2025 | npm south-african-id-info |
Malicious release: Malicious code in stat-fns (npm) GHSA-fcvh-m28w-5rw9, MAL-2025-191013 | Malicious | Not scored | 24 Nov, 2025 | npm stat-fns |
Malicious release: Malicious code in stoor (npm) GHSA-x9g2-h59r-wxg7, MAL-2025-191014 | Malicious | Not scored | 24 Nov, 2025 | npm stoor |
Malicious release: Malicious code in super-commit (npm) GHSA-23rm-x3xw-w5w2, MAL-2025-191015 | Malicious | Not scored | 24 Nov, 2025 | npm super-commit |
Malicious release: Malicious code in svelte-autocomplete-select (npm) GHSA-gmj5-76gr-38p9, MAL-2025-191016 | Malicious | Not scored | 24 Nov, 2025 | npm svelte-autocomplete-select |
Malicious release: Malicious code in svelte-toasty (npm) GHSA-chwq-g27w-8pfr, MAL-2025-191017 | Malicious | Not scored | 24 Nov, 2025 | npm svelte-toasty |
Malicious release: Malicious code in tanstack-shadcn-table (npm) GHSA-q829-4wq9-g9rc, MAL-2025-191018 | Malicious | Not scored | 24 Nov, 2025 | npm tanstack-shadcn-table |
Malicious release: Malicious code in tcsp-draw-test (npm) GHSA-9pw5-2383-f23w, MAL-2025-191019 | Malicious | Not scored | 24 Nov, 2025 | npm tcsp-draw-test |
Malicious release: Malicious code in tcsp-test-vd (npm) GHSA-pg24-m35r-73f9, MAL-2025-191020 | Malicious | Not scored | 24 Nov, 2025 | npm tcsp-test-vd |
Malicious release: Malicious code in template-lib (npm) GHSA-96m7-j7g9-h9mr, MAL-2025-191021 | Malicious | Not scored | 24 Nov, 2025 | npm template-lib |
Malicious release: Malicious code in template-micro-service (npm) GHSA-fgx9-845x-ffwc, MAL-2025-191022 | Malicious | Not scored | 24 Nov, 2025 | npm template-micro-service |
Malicious release: Malicious code in tenacious-fetch (npm) GHSA-vh97-57mq-739v, MAL-2025-191023 | Malicious | Not scored | 24 Nov, 2025 | npm tenacious-fetch |
Malicious release: Malicious code in tiaan (npm) GHSA-wcmm-4xc5-9c5f, MAL-2025-191024 | Malicious | Not scored | 24 Nov, 2025 | npm tiaan |
Malicious release: Malicious code in typefence (npm) GHSA-rjj3-hm27-gx8v, MAL-2025-190936 | Malicious | Not scored | 24 Nov, 2025 | npm typefence |
Malicious release: Malicious code in undefsafe-typed (npm) GHSA-2xxv-jcwp-f6mp, MAL-2025-190937 | Malicious | Not scored | 24 Nov, 2025 | npm undefsafe-typed |
Malicious release: Malicious code in uplandui (npm) GHSA-384v-73ff-24g7, MAL-2025-190938 | Malicious | Not scored | 24 Nov, 2025 | npm uplandui |
Malicious release: Malicious code in upload-to-play-store (npm) GHSA-989p-66c5-wwjg, MAL-2025-190939 | Malicious | Not scored | 24 Nov, 2025 | npm upload-to-play-store |
Malicious release: Malicious code in url-encode-decode (npm) GHSA-mh49-fgjv-fgxx, MAL-2025-190940 | Malicious | Not scored | 24 Nov, 2025 | npm url-encode-decode |
Malicious release: Malicious code in use-unsaved-changes (npm) GHSA-832j-xq5g-9xf4, MAL-2025-190941 | Malicious | Not scored | 24 Nov, 2025 | npm use-unsaved-changes |
Malicious release: Malicious code in valid-south-african-id (npm) GHSA-pw36-3phc-xfph, MAL-2025-190942 | Malicious | Not scored | 24 Nov, 2025 | npm valid-south-african-id |
Malicious release: Malicious code in web-scraper-mcp (npm) GHSA-92qg-p459-45jx, MAL-2025-190943 | Malicious | Not scored | 24 Nov, 2025 | npm web-scraper-mcp |
Malicious release: Malicious code in wellness-expert-ng-gallery (npm) GHSA-9596-qj8m-58q8, MAL-2025-190944 | Malicious | Not scored | 24 Nov, 2025 | npm wellness-expert-ng-gallery |
Malicious release: Malicious code in @ensdomains/ensjs (npm) GHSA-m2h5-6j6w-hgfj, MAL-2025-190933 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/ensjs |
Malicious release: Malicious code in @ensdomains/ensjs-react (npm) GHSA-g8vc-m223-qqx6, MAL-2025-190934 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/ensjs-react |
Malicious release: Malicious code in @ensdomains/ccip-read-cf-worker (npm) GHSA-xv94-32qx-jr53, MAL-2025-190929 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/ccip-read-cf-worker |
Malicious release: Malicious code in @ensdomains/op-resolver-contracts (npm) GHSA-qc24-f7q6-3qgx, MAL-2025-190935 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/op-resolver-contracts |
Malicious release: Malicious code in @ensdomains/ens-test-env (npm) GHSA-chpx-vw24-rp65, MAL-2025-190932 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/ens-test-env |
Malicious release: Malicious code in @ensdomains/durin (npm) GHSA-2g6v-5mhh-wxgf, MAL-2025-190930 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/durin |
Malicious release: Malicious code in @ensdomains/ens-contracts (npm) GHSA-58x9-4xmp-8mg5, MAL-2025-190931 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/ens-contracts |
Malicious release: Malicious code in web-types-lit (npm) GHSA-2mcp-4f58-7jvf, MAL-2025-190927 | Malicious | Not scored | 24 Nov, 2025 | npm web-types-lit |
Malicious release: Malicious code in @posthog/github-release-tracking-plugin (npm) GHSA-2w57-xqr2-mc2w, MAL-2025-190880 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/github-release-tracking-plugin |
Malicious release: Malicious code in @seung-ju/react-native-action-sheet (npm) GHSA-57w6-8vg8-qwwf, MAL-2025-190915 | Malicious | Not scored | 24 Nov, 2025 | npm @seung-ju/react-native-action-sheet |
Malicious release: Malicious code in @ensdomains/buffer (npm) GHSA-f9pq-63hg-w434, MAL-2025-190866 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/buffer |
Malicious release: Malicious code in capacitor-voice-recorder-wav (npm) GHSA-hpp4-86hx-9h3c, MAL-2025-190921 | Malicious | Not scored | 24 Nov, 2025 | npm capacitor-voice-recorder-wav |
Malicious release: Malicious code in @postman/final-node-keytar (npm) GHSA-q245-jh4v-72vg, MAL-2025-190901 | Malicious | Not scored | 24 Nov, 2025 | npm @postman/final-node-keytar |
Malicious release: Malicious code in @mcp-use/cli (npm) MAL-2025-190867 | Malicious | Not scored | 24 Nov, 2025 | npm @mcp-use/cli |
Malicious release: Malicious code in @mcp-use/inspector (npm) MAL-2025-190868 | Malicious | Not scored | 24 Nov, 2025 | npm @mcp-use/inspector |
Malicious release: Malicious code in @mcp-use/mcp-use (npm) MAL-2025-190869 | Malicious | Not scored | 24 Nov, 2025 | npm @mcp-use/mcp-use |