Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @ensdomains/unruggable-gateways (npm) GHSA-g6xr-xj9x-wq24, MAL-2025-190814 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/unruggable-gateways |
Malicious release: Malicious code in open2internet (npm) GHSA-jvr8-3mvh-m887, MAL-2025-190853 | Malicious | Not scored | 24 Nov, 2025 | npm open2internet |
Malicious release: Malicious code in @ensdomains/renewal (npm) GHSA-68rh-g4wj-348g, MAL-2025-190810 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/renewal |
Malicious release: Malicious code in @quick-start-soft/quick-markdown (npm) GHSA-f5p2-8h9p-hw8w, MAL-2025-190821 | Malicious | Not scored | 24 Nov, 2025 | npm @quick-start-soft/quick-markdown |
Malicious release: Malicious code in cpu-instructions (npm) GHSA-hq8x-3j28-4fcx, MAL-2025-190838 | Malicious | Not scored | 24 Nov, 2025 | npm cpu-instructions |
Malicious release: Malicious code in orbit-soap (npm) GHSA-6jhq-hhph-h59v, MAL-2025-190855 | Malicious | Not scored | 24 Nov, 2025 | npm orbit-soap |
Malicious release: Malicious code in @strapbuild/react-native-perspective-image-cropper-2 (npm) GHSA-j4fg-38c8-gw4m, MAL-2025-190826 | Malicious | Not scored | 24 Nov, 2025 | npm @strapbuild/react-native-perspective-image-cropper-2 |
Malicious release: Malicious code in @ensdomains/ui (npm) GHSA-pj7c-59x5-q6vw, MAL-2025-190813 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/ui |
Malicious release: Malicious code in @actbase/react-native-actionsheet (npm) GHSA-jjrv-4rmm-gj4j, MAL-2025-190792 | Malicious | Not scored | 24 Nov, 2025 | npm @actbase/react-native-actionsheet |
Malicious release: Malicious code in @quick-start-soft/quick-git-clean-markdown (npm) GHSA-c7cp-2wjp-3vg9, MAL-2025-190820 | Malicious | Not scored | 24 Nov, 2025 | npm @quick-start-soft/quick-git-clean-markdown |
Malicious release: Malicious code in @actbase/react-native-simple-video (npm) GHSA-qrm3-qmp2-c48g, MAL-2025-190796 | Malicious | Not scored | 24 Nov, 2025 | npm @actbase/react-native-simple-video |
Malicious release: Malicious code in @actbase/react-native-kakao-navi (npm) GHSA-w7cx-96gp-ww7c, MAL-2025-190795 | Malicious | Not scored | 24 Nov, 2025 | npm @actbase/react-native-kakao-navi |
Malicious release: Malicious code in medusa-plugin-zalopay (npm) GHSA-cg3r-9rjv-q8fp, MAL-2025-190851 | Malicious | Not scored | 24 Nov, 2025 | npm medusa-plugin-zalopay |
Malicious release: Malicious code in @quick-start-soft/quick-task-refine (npm) GHSA-c2vq-hfp6-fxxx, MAL-2025-190824 | Malicious | Not scored | 24 Nov, 2025 | npm @quick-start-soft/quick-task-refine |
Malicious release: Malicious code in @kvytech/medusa-plugin-newsletter (npm) GHSA-6chp-f2vh-826p, MAL-2025-190816 | Malicious | Not scored | 24 Nov, 2025 | npm @kvytech/medusa-plugin-newsletter |
Malicious release: Malicious code in @asyncapi/keeper (npm) GHSA-7pwg-fhvr-6h6v, MAL-2025-190799 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/keeper |
Malicious release: Malicious code in zapier-scripts (npm) GHSA-9mg9-5wqh-46qx, MAL-2025-190861 | Malicious | Not scored | 24 Nov, 2025 | npm zapier-scripts |
Malicious release: Malicious code in @ensdomains/mock (npm) GHSA-w28r-89v6-j9w8, MAL-2025-190806 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/mock |
Malicious release: Malicious code in @ensdomains/dnssec-oracle-anchors (npm) GHSA-52rw-wfcc-mwcr, MAL-2025-190804 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/dnssec-oracle-anchors |
Malicious release: Malicious code in @ensdomains/ens-archived-contracts (npm) GHSA-rgj8-7qhv-g7fm, MAL-2025-190805 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/ens-archived-contracts |
Malicious release: Malicious code in @zapier/ai-actions (npm) GHSA-qpwh-h9px-43pw, MAL-2025-190830 | Malicious | Not scored | 24 Nov, 2025 | npm @zapier/ai-actions |
Malicious release: Malicious code in @ensdomains/offchain-resolver-contracts (npm) GHSA-qw8w-c4j7-788x, MAL-2025-190808 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/offchain-resolver-contracts |
Malicious release: Malicious code in @asyncapi/server-api (npm) GHSA-4vf7-5v4w-7358, MAL-2025-190801 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/server-api |
Malicious release: Malicious code in @ensdomains/name-wrapper (npm) GHSA-g92h-2gvg-8pmx, MAL-2025-190807 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/name-wrapper |
Malicious release: Malicious code in create-hardhat3-app (npm) GHSA-9q97-4cxq-xw96, MAL-2025-190839 | Malicious | Not scored | 24 Nov, 2025 | npm create-hardhat3-app |
Malicious release: Malicious code in test-foundry-app (npm) GHSA-pgpr-q3gr-j9hq, MAL-2025-190860 | Malicious | Not scored | 24 Nov, 2025 | npm test-foundry-app |
Malicious release: Malicious code in jan-browser (npm) GHSA-6jqc-mw3x-g53g, MAL-2025-190847 | Malicious | Not scored | 24 Nov, 2025 | npm jan-browser |
Malicious release: Malicious code in go-template (npm) GHSA-6833-ccff-83g5, MAL-2025-190846 | Malicious | Not scored | 24 Nov, 2025 | npm go-template |
Malicious release: Malicious code in @strapbuild/react-native-perspective-image-cropper (npm) GHSA-q9vh-cm3w-668p, MAL-2025-190758 | Malicious | Not scored | 24 Nov, 2025 | npm @strapbuild/react-native-perspective-image-cropper |
Malicious release: Malicious code in manual-billing-system-miniapp-api (npm) GHSA-xvf8-hcj7-3wpp, MAL-2025-190775 | Malicious | Not scored | 24 Nov, 2025 | npm manual-billing-system-miniapp-api |
Malicious release: Malicious code in korea-administrative-area-geo-json-util (npm) GHSA-hcg2-q4w7-7rff, MAL-2025-190774 | Malicious | Not scored | 24 Nov, 2025 | npm korea-administrative-area-geo-json-util |
Malicious release: Malicious code in @actbase/css-to-react-native-transform (npm) GHSA-9qhm-9r8j-hrhc, MAL-2025-190706 | Malicious | Not scored | 24 Nov, 2025 | npm @actbase/css-to-react-native-transform |
Malicious release: Malicious code in @ensdomains/vite-plugin-i18next-loader (npm) GHSA-9g7r-9c2x-w9fj, MAL-2025-190741 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/vite-plugin-i18next-loader |
Malicious release: Malicious code in @actbase/node-server (npm) GHSA-f6v4-qh83-p5x3, MAL-2025-190707 | Malicious | Not scored | 24 Nov, 2025 | npm @actbase/node-server |
Malicious release: Malicious code in @ensdomains/hardhat-toolbox-viem-extended (npm) GHSA-mm56-gm4c-w7f7, MAL-2025-190734 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/hardhat-toolbox-viem-extended |
Malicious release: Malicious code in @actbase/react-native-fast-image (npm) GHSA-jjf5-ggrm-79jq, MAL-2025-190709 | Malicious | Not scored | 24 Nov, 2025 | npm @actbase/react-native-fast-image |
Malicious release: Malicious code in @asyncapi/python-paho-template (npm) GHSA-pw9c-2xp8-8673, MAL-2025-190720 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/python-paho-template |
Malicious release: Malicious code in @asyncapi/go-watermill-template (npm) GHSA-9mx7-r69p-qf3r, MAL-2025-190714 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/go-watermill-template |
Malicious release: Malicious code in @actbase/react-native-less-transformer (npm) GHSA-gr4j-87fv-44gm, MAL-2025-190710 | Malicious | Not scored | 24 Nov, 2025 | npm @actbase/react-native-less-transformer |
Malicious release: Malicious code in @asyncapi/java-template (npm) GHSA-6vm8-wchg-2p9w, MAL-2025-190717 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/java-template |
Malicious release: Malicious code in medusa-plugin-product-reviews-kvy (npm) GHSA-878f-rjv4-9vvx, MAL-2025-190776 | Malicious | Not scored | 24 Nov, 2025 | npm medusa-plugin-product-reviews-kvy |
Malicious release: Malicious code in @aryanhussain/my-angular-lib (npm) GHSA-5q87-h8mq-78q3, MAL-2025-190713 | Malicious | Not scored | 24 Nov, 2025 | npm @aryanhussain/my-angular-lib |
Malicious release: Malicious code in devstart-cli (npm) GHSA-4r7j-94m6-xcmg, MAL-2025-190768 | Malicious | Not scored | 24 Nov, 2025 | npm devstart-cli |
Malicious release: Malicious code in dotnet-template (npm) GHSA-x7qc-cwwv-rj89, MAL-2025-190770 | Malicious | Not scored | 24 Nov, 2025 | npm dotnet-template |
Malicious release: Malicious code in capacitor-plugin-scgssigninwithgoogle (npm) GHSA-j9cw-mx5f-7vpv, MAL-2025-190765 | Malicious | Not scored | 24 Nov, 2025 | npm capacitor-plugin-scgssigninwithgoogle |
Malicious release: Malicious code in @zapier/eslint-plugin-zapier (npm) GHSA-rfrc-w2hh-54fr, MAL-2025-190763 | Malicious | Not scored | 24 Nov, 2025 | npm @zapier/eslint-plugin-zapier |
Malicious release: Malicious code in capacitor-purchase-history (npm) GHSA-6wfp-gm7m-4vcw, MAL-2025-190766 | Malicious | Not scored | 24 Nov, 2025 | npm capacitor-purchase-history |
Malicious release: Malicious code in posthog-plugin-hello-world (npm) GHSA-9mwj-fr6x-j3hg, MAL-2025-190778 | Malicious | Not scored | 24 Nov, 2025 | npm posthog-plugin-hello-world |
Malicious release: Malicious code in @asyncapi/java-spring-cloud-stream-template (npm) GHSA-5m67-23v4-2wgh, MAL-2025-190715 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/java-spring-cloud-stream-template |
Malicious release: Malicious code in esbuild-plugin-httpfile (npm) GHSA-jc9c-xf8q-rwgh, MAL-2025-190771 | Malicious | Not scored | 24 Nov, 2025 | npm esbuild-plugin-httpfile |