Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @mparpaillon/connector-parse (npm) MAL-2025-190870 | Malicious | Not scored | 24 Nov, 2025 | npm @mparpaillon/connector-parse |
Malicious release: Malicious code in @mparpaillon/imagesloaded (npm) MAL-2025-190871 | Malicious | Not scored | 24 Nov, 2025 | npm @mparpaillon/imagesloaded |
Malicious release: Malicious code in @mparpaillon/page (npm) MAL-2025-190872 | Malicious | Not scored | 24 Nov, 2025 | npm @mparpaillon/page |
Malicious release: Malicious code in @posthog/automatic-cohorts-plugin (npm) MAL-2025-190873 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/automatic-cohorts-plugin |
Malicious release: Malicious code in @posthog/currency-normalization-plugin (npm) MAL-2025-190874 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/currency-normalization-plugin |
Malicious release: Malicious code in @posthog/customerio-plugin (npm) MAL-2025-190875 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/customerio-plugin |
Malicious release: Malicious code in @posthog/databricks-plugin (npm) MAL-2025-190876 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/databricks-plugin |
Malicious release: Malicious code in @posthog/event-sequence-timer-plugin (npm) MAL-2025-190877 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/event-sequence-timer-plugin |
Malicious release: Malicious code in @posthog/first-time-event-tracker (npm) MAL-2025-190878 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/first-time-event-tracker |
Malicious release: Malicious code in @posthog/geoip-plugin (npm) MAL-2025-190879 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/geoip-plugin |
Malicious release: Malicious code in @posthog/gitub-star-sync-plugin (npm) MAL-2025-190881 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/gitub-star-sync-plugin |
Malicious release: Malicious code in @posthog/hedgehog-mode (npm) MAL-2025-190882 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/hedgehog-mode |
Malicious release: Malicious code in @posthog/ingestion-alert-plugin (npm) MAL-2025-190883 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/ingestion-alert-plugin |
Malicious release: Malicious code in @posthog/kinesis-plugin (npm) MAL-2025-190884 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/kinesis-plugin |
Malicious release: Malicious code in @posthog/maxmind-plugin (npm) MAL-2025-190885 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/maxmind-plugin |
Malicious release: Malicious code in @posthog/nextjs (npm) MAL-2025-190886 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/nextjs |
Malicious release: Malicious code in @posthog/nextjs-config (npm) MAL-2025-190887 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/nextjs-config |
Malicious release: Malicious code in @posthog/pagerduty-plugin (npm) MAL-2025-190888 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/pagerduty-plugin |
Malicious release: Malicious code in @posthog/plugin-unduplicates (npm) MAL-2025-190889 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/plugin-unduplicates |
Malicious release: Malicious code in @posthog/react-rrweb-player (npm) MAL-2025-190890 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/react-rrweb-player |
Malicious release: Malicious code in @posthog/rrweb-player (npm) MAL-2025-190891 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/rrweb-player |
Malicious release: Malicious code in @posthog/sendgrid-plugin (npm) MAL-2025-190892 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/sendgrid-plugin |
Malicious release: Malicious code in @posthog/snowflake-export-plugin (npm) MAL-2025-190893 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/snowflake-export-plugin |
Malicious release: Malicious code in @posthog/taxonomy-plugin (npm) MAL-2025-190894 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/taxonomy-plugin |
Malicious release: Malicious code in @posthog/twilio-plugin (npm) MAL-2025-190895 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/twilio-plugin |
Malicious release: Malicious code in @posthog/twitter-followers-plugin (npm) MAL-2025-190896 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/twitter-followers-plugin |
Malicious release: Malicious code in @posthog/url-normalizer-plugin (npm) MAL-2025-190897 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/url-normalizer-plugin |
Malicious release: Malicious code in @posthog/variance-plugin (npm) MAL-2025-190898 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/variance-plugin |
Malicious release: Malicious code in @posthog/web-dev-server (npm) MAL-2025-190899 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/web-dev-server |
Malicious release: Malicious code in @posthog/wizard (npm) MAL-2025-190900 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/wizard |
Malicious release: Malicious code in @postman/mcp-ui-client (npm) MAL-2025-190902 | Malicious | Not scored | 24 Nov, 2025 | npm @postman/mcp-ui-client |
Malicious release: Malicious code in @postman/pm-bin-linux-x64 (npm) MAL-2025-190903 | Malicious | Not scored | 24 Nov, 2025 | npm @postman/pm-bin-linux-x64 |
Malicious release: Malicious code in @postman/pm-bin-macos-arm64 (npm) MAL-2025-190904 | Malicious | Not scored | 24 Nov, 2025 | npm @postman/pm-bin-macos-arm64 |
Malicious release: Malicious code in @postman/pm-bin-macos-x64 (npm) MAL-2025-190905 | Malicious | Not scored | 24 Nov, 2025 | npm @postman/pm-bin-macos-x64 |
Malicious release: Malicious code in @postman/pm-bin-windows-x64 (npm) MAL-2025-190906 | Malicious | Not scored | 24 Nov, 2025 | npm @postman/pm-bin-windows-x64 |
Malicious release: Malicious code in @postman/postman-collection-fork (npm) MAL-2025-190907 | Malicious | Not scored | 24 Nov, 2025 | npm @postman/postman-collection-fork |
Malicious release: Malicious code in @postman/postman-mcp-cli (npm) MAL-2025-190908 | Malicious | Not scored | 24 Nov, 2025 | npm @postman/postman-mcp-cli |
Malicious release: Malicious code in @postman/postman-mcp-server (npm) MAL-2025-190909 | Malicious | Not scored | 24 Nov, 2025 | npm @postman/postman-mcp-server |
Malicious release: Malicious code in @postman/pretty-ms (npm) MAL-2025-190910 | Malicious | Not scored | 24 Nov, 2025 | npm @postman/pretty-ms |
Malicious release: Malicious code in @postman/secret-scanner-wasm (npm) MAL-2025-190911 | Malicious | Not scored | 24 Nov, 2025 | npm @postman/secret-scanner-wasm |
Malicious release: Malicious code in @postman/wdio-allure-reporter (npm) MAL-2025-190912 | Malicious | Not scored | 24 Nov, 2025 | npm @postman/wdio-allure-reporter |
Malicious release: Malicious code in @postman/wdio-junit-reporter (npm) MAL-2025-190913 | Malicious | Not scored | 24 Nov, 2025 | npm @postman/wdio-junit-reporter |
Malicious release: Malicious code in @zapier/ai-actions-react (npm) MAL-2025-190917 | Malicious | Not scored | 24 Nov, 2025 | npm @zapier/ai-actions-react |
Malicious release: Malicious code in @zapier/mcp-integration (npm) MAL-2025-190918 | Malicious | Not scored | 24 Nov, 2025 | npm @zapier/mcp-integration |
Malicious release: Malicious code in @zapier/spectral-api-ruleset (npm) MAL-2025-190919 | Malicious | Not scored | 24 Nov, 2025 | npm @zapier/spectral-api-ruleset |
Malicious release: Malicious code in @zapier/stubtree (npm) MAL-2025-190920 | Malicious | Not scored | 24 Nov, 2025 | npm @zapier/stubtree |
Malicious release: Malicious code in create-mcp-use-app (npm) MAL-2025-190922 | Malicious | Not scored | 24 Nov, 2025 | npm create-mcp-use-app |
Malicious release: Malicious code in mcp-use (npm) MAL-2025-190923 | Malicious | Not scored | 24 Nov, 2025 | npm mcp-use |
Malicious release: Malicious code in posthog-docusaurus (npm) MAL-2025-190924 | Malicious | Not scored | 24 Nov, 2025 | npm posthog-docusaurus |
Malicious release: Malicious code in posthog-node (npm) MAL-2025-190925 | Malicious | Not scored | 24 Nov, 2025 | npm posthog-node |