Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in posthog-react-native (npm) MAL-2025-190926 | Malicious | Not scored | 24 Nov, 2025 | npm posthog-react-native |
Malicious release: Malicious code in zapier-platform-legacy-scripting-runner (npm) MAL-2025-190928 | Malicious | Not scored | 24 Nov, 2025 | npm zapier-platform-legacy-scripting-runner |
Malicious release: Malicious code in @darwinex/react-custom-scrollbars (npm) MAL-2025-190865 | Malicious | Not scored | 24 Nov, 2025 | npm @darwinex/react-custom-scrollbars |
Malicious release: Malicious code in @sauravthakur/corplib (npm) MAL-2025-190914 | Malicious | Not scored | 24 Nov, 2025 | npm @sauravthakur/corplib |
Malicious release: Malicious code in @tezign/html-webpack-plugin (npm) MAL-2025-190916 | Malicious | Not scored | 24 Nov, 2025 | npm @tezign/html-webpack-plugin |
Malicious release: Malicious code in @asyncapi/studio (npm) GHSA-89qm-xqwh-65mf, MAL-2025-190863 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/studio |
Malicious release: Malicious code in ra-data-firebase (npm) GHSA-p32f-rx7g-853g, MAL-2025-190864 | Malicious | Not scored | 24 Nov, 2025 | npm ra-data-firebase |
Malicious release: Malicious code in rollup-plugin-httpfile (npm) GHSA-r8fp-87cr-5cf2, MAL-2025-190858 | Malicious | Not scored | 24 Nov, 2025 | npm rollup-plugin-httpfile |
Malicious release: Malicious code in @caretive/caret-cli (npm) GHSA-xmjh-29q5-x6r6, MAL-2025-190802 | Malicious | Not scored | 24 Nov, 2025 | npm @caretive/caret-cli |
Malicious release: Malicious code in poper-react-sdk (npm) GHSA-vjcj-rxjp-6jmr, MAL-2025-190856 | Malicious | Not scored | 24 Nov, 2025 | npm poper-react-sdk |
Malicious release: Malicious code in react-native-worklet-functions (npm) GHSA-gqg6-r9cg-42hh, MAL-2025-190857 | Malicious | Not scored | 24 Nov, 2025 | npm react-native-worklet-functions |
Malicious release: Malicious code in @ensdomains/web3modal (npm) GHSA-8g58-jm4g-p8h5, MAL-2025-190815 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/web3modal |
Malicious release: Malicious code in n8n-nodes-tmdb (npm) GHSA-44rc-f8j4-fw99, MAL-2025-190852 | Malicious | Not scored | 24 Nov, 2025 | npm n8n-nodes-tmdb |
Malicious release: Malicious code in orbit-boxicons (npm) GHSA-gj6q-cmmq-vv58, MAL-2025-190854 | Malicious | Not scored | 24 Nov, 2025 | npm orbit-boxicons |
Malicious release: Malicious code in gate-evm-tools-test (npm) GHSA-r39v-gqh6-q9mr, MAL-2025-190844 | Malicious | Not scored | 24 Nov, 2025 | npm gate-evm-tools-test |
Malicious release: Malicious code in @louisle2/cortex-js (npm) GHSA-jvhp-wxfw-v9j5, MAL-2025-190817 | Malicious | Not scored | 24 Nov, 2025 | npm @louisle2/cortex-js |
Malicious release: Malicious code in capacitor-plugin-purchase (npm) GHSA-cm39-p5ww-5hfc, MAL-2025-190836 | Malicious | Not scored | 24 Nov, 2025 | npm capacitor-plugin-purchase |
Malicious release: Malicious code in expo-audio-session (npm) GHSA-jj4m-v9c9-3v2w, MAL-2025-190842 | Malicious | Not scored | 24 Nov, 2025 | npm expo-audio-session |
Malicious release: Malicious code in capacitor-plugin-apptrackingios (npm) GHSA-9fc6-h656-g2cg, MAL-2025-190835 | Malicious | Not scored | 24 Nov, 2025 | npm capacitor-plugin-apptrackingios |
Malicious release: Malicious code in @markvivanco/app-version-checker (npm) GHSA-h8fg-29cr-mrj7, MAL-2025-190818 | Malicious | Not scored | 24 Nov, 2025 | npm @markvivanco/app-version-checker |
Malicious release: Malicious code in asyncapi-preview (npm) GHSA-w754-gg42-pr43, MAL-2025-190831 | Malicious | Not scored | 24 Nov, 2025 | npm asyncapi-preview |
Malicious release: Malicious code in bytecode-checker-cli (npm) GHSA-7wcp-8hwr-3922, MAL-2025-190833 | Malicious | Not scored | 24 Nov, 2025 | npm bytecode-checker-cli |
Malicious release: Malicious code in @actbase/react-native-devtools (npm) GHSA-26qv-hrjj-8p7c, MAL-2025-190793 | Malicious | Not scored | 24 Nov, 2025 | npm @actbase/react-native-devtools |
Malicious release: Malicious code in @actbase/react-absolute (npm) GHSA-vpjg-3fp8-xw95, MAL-2025-190790 | Malicious | Not scored | 24 Nov, 2025 | npm @actbase/react-absolute |
Malicious release: Malicious code in @actbase/react-kakaosdk (npm) GHSA-mg32-pcj3-6rm8, MAL-2025-190791 | Malicious | Not scored | 24 Nov, 2025 | npm @actbase/react-kakaosdk |
Malicious release: Malicious code in medusa-plugin-momo (npm) GHSA-3whr-4xm2-9pvr, MAL-2025-190850 | Malicious | Not scored | 24 Nov, 2025 | npm medusa-plugin-momo |
Malicious release: Malicious code in scgs-capacitor-subscribe (npm) GHSA-762q-h5gh-2w62, MAL-2025-190859 | Malicious | Not scored | 24 Nov, 2025 | npm scgs-capacitor-subscribe |
Malicious release: Malicious code in github-action-for-generator (npm) GHSA-r948-2g4j-wcwx, MAL-2025-190845 | Malicious | Not scored | 24 Nov, 2025 | npm github-action-for-generator |
Malicious release: Malicious code in @strapbuild/react-native-date-time-picker (npm) GHSA-34pr-r6c7-26rw, MAL-2025-190825 | Malicious | Not scored | 24 Nov, 2025 | npm @strapbuild/react-native-date-time-picker |
Malicious release: Malicious code in gate-evm-check-code2 (npm) GHSA-xgp6-vfv2-267j, MAL-2025-190843 | Malicious | Not scored | 24 Nov, 2025 | npm gate-evm-check-code2 |
Malicious release: Malicious code in @quick-start-soft/quick-document-translator (npm) GHSA-wjpv-3759-qmc5, MAL-2025-190819 | Malicious | Not scored | 24 Nov, 2025 | npm @quick-start-soft/quick-document-translator |
Malicious release: Malicious code in lite-serper-mcp-server (npm) GHSA-w7vj-jqhx-2jr7, MAL-2025-190848 | Malicious | Not scored | 24 Nov, 2025 | npm lite-serper-mcp-server |
Malicious release: Malicious code in @asyncapi/edavisualiser (npm) GHSA-573c-q577-rm56, MAL-2025-190798 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/edavisualiser |
Malicious release: Malicious code in @asyncapi/php-template (npm) GHSA-gp65-2rj9-fw97, MAL-2025-190800 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/php-template |
Malicious release: Malicious code in esbuild-plugin-eta (npm) GHSA-hf85-hfqr-63pm, MAL-2025-190840 | Malicious | Not scored | 24 Nov, 2025 | npm esbuild-plugin-eta |
Malicious release: Malicious code in @ensdomains/server-analytics (npm) GHSA-3fjg-x55j-v7fv, MAL-2025-190811 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/server-analytics |
Malicious release: Malicious code in @ensdomains/react-ens-address (npm) GHSA-vj6r-g9qw-frr9, MAL-2025-190809 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/react-ens-address |
Malicious release: Malicious code in zuper-stream (npm) GHSA-f7w4-78r2-578g, MAL-2025-190862 | Malicious | Not scored | 24 Nov, 2025 | npm zuper-stream |
Malicious release: Malicious code in @quick-start-soft/quick-markdown-compose (npm) GHSA-g6gc-fp28-hvm3, MAL-2025-190822 | Malicious | Not scored | 24 Nov, 2025 | npm @quick-start-soft/quick-markdown-compose |
Malicious release: Malicious code in @actbase/react-native-kakao-channel (npm) GHSA-pp99-w7qx-3vrm, MAL-2025-190794 | Malicious | Not scored | 24 Nov, 2025 | npm @actbase/react-native-kakao-channel |
Malicious release: Malicious code in @asyncapi/dotnet-rabbitmq-template (npm) GHSA-5w27-q88q-f5mm, MAL-2025-190797 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/dotnet-rabbitmq-template |
Malicious release: Malicious code in @ensdomains/subdomain-registrar (npm) GHSA-8fxj-7qgm-q65w, MAL-2025-190812 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/subdomain-registrar |
Malicious release: Malicious code in claude-token-updater (npm) GHSA-pxr9-c6pq-g38g, MAL-2025-190837 | Malicious | Not scored | 24 Nov, 2025 | npm claude-token-updater |
Malicious release: Malicious code in evm-checkcode-cli (npm) GHSA-mc99-3j32-7fmh, MAL-2025-190841 | Malicious | Not scored | 24 Nov, 2025 | npm evm-checkcode-cli |
Malicious release: Malicious code in @trigo/atrix-pubsub (npm) GHSA-6fj4-3x5p-5v33, MAL-2025-190828 | Malicious | Not scored | 24 Nov, 2025 | npm @trigo/atrix-pubsub |
Malicious release: Malicious code in @trigo/hapi-auth-signedlink (npm) GHSA-r7h6-h82f-pw8f, MAL-2025-190829 | Malicious | Not scored | 24 Nov, 2025 | npm @trigo/hapi-auth-signedlink |
Malicious release: Malicious code in @strapbuild/react-native-perspective-image-cropper-poojan31 (npm) GHSA-p476-6x8q-2wgq, MAL-2025-190827 | Malicious | Not scored | 24 Nov, 2025 | npm @strapbuild/react-native-perspective-image-cropper-poojan31 |
Malicious release: Malicious code in axios-builder (npm) GHSA-c2p2-wfqm-c359, MAL-2025-190832 | Malicious | Not scored | 24 Nov, 2025 | npm axios-builder |
Malicious release: Malicious code in calc-loan-interest (npm) GHSA-cpq4-j5hc-3hw3, MAL-2025-190834 | Malicious | Not scored | 24 Nov, 2025 | npm calc-loan-interest |
Malicious release: Malicious code in medusa-plugin-announcement (npm) GHSA-q2q9-q3q2-p3f9, MAL-2025-190849 | Malicious | Not scored | 24 Nov, 2025 | npm medusa-plugin-announcement |