Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @ensdomains/hardhat-chai-matchers-viem (npm) GHSA-h5cf-hh6x-vm87, MAL-2025-190733 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/hardhat-chai-matchers-viem |
Malicious release: Malicious code in @ensdomains/blacklist (npm) GHSA-hmjx-cmm9-gq7m, MAL-2025-190722 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/blacklist |
Malicious release: Malicious code in @ensdomains/test-utils (npm) GHSA-4rx4-rww2-g7g5, MAL-2025-190738 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/test-utils |
Malicious release: Malicious code in @ensdomains/renewal-widget (npm) GHSA-mq34-p89p-8c9h, MAL-2025-190735 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/renewal-widget |
Malicious release: Malicious code in @ensdomains/hackathon-registrar (npm) GHSA-rc28-7mw4-xv48, MAL-2025-190732 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/hackathon-registrar |
Malicious release: Malicious code in zapier-async-storage (npm) GHSA-8w6h-9qgr-pfxv, MAL-2025-190788 | Malicious | Not scored | 24 Nov, 2025 | npm zapier-async-storage |
Malicious release: Malicious code in @ensdomains/ccip-read-router (npm) GHSA-c65g-2923-px5f, MAL-2025-190724 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/ccip-read-router |
Malicious release: Malicious code in @asyncapi/nodejs-template (npm) GHSA-5xww-jhm3-vmv3, MAL-2025-190718 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/nodejs-template |
Malicious release: Malicious code in @ensdomains/thorin (npm) GHSA-qpqq-p6gg-rqp2, MAL-2025-190739 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/thorin |
Malicious release: Malicious code in @zapier/babel-preset-zapier (npm) GHSA-mjx8-3mvh-x856, MAL-2025-190761 | Malicious | Not scored | 24 Nov, 2025 | npm @zapier/babel-preset-zapier |
Malicious release: Malicious code in @ensdomains/dnssecoraclejs (npm) GHSA-2pmv-9vp5-q844, MAL-2025-190728 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/dnssecoraclejs |
Malicious release: Malicious code in redux-router-kit (npm) GHSA-83f2-m5xj-79wx, MAL-2025-190780 | Malicious | Not scored | 24 Nov, 2025 | npm redux-router-kit |
Malicious release: Malicious code in @ensdomains/ens-avatar (npm) GHSA-pmf2-pqw2-xjc3, MAL-2025-190730 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/ens-avatar |
Malicious release: Malicious code in token.js-fork (npm) GHSA-4j79-hf3r-xwv4, MAL-2025-190785 | Malicious | Not scored | 24 Nov, 2025 | npm token.js-fork |
Malicious release: Malicious code in @actbase/react-daum-postcode (npm) GHSA-h89h-8r6f-cvr4, MAL-2025-190708 | Malicious | Not scored | 24 Nov, 2025 | npm @actbase/react-daum-postcode |
Malicious release: Malicious code in @asyncapi/nodejs-ws-template (npm) GHSA-4w37-25mh-3jcc, MAL-2025-190719 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/nodejs-ws-template |
Malicious release: Malicious code in @posthog/agent (npm) GHSA-g483-gc2j-m258, MAL-2025-190748 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/agent |
Malicious release: Malicious code in @posthog/plugin-contrib (npm) GHSA-g7v2-2xxc-c78j, MAL-2025-190751 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/plugin-contrib |
Malicious release: Malicious code in test-hardhat-app (npm) GHSA-x4cm-hhc8-gmxg, MAL-2025-190784 | Malicious | Not scored | 24 Nov, 2025 | npm test-hardhat-app |
Malicious release: Malicious code in zuper-cli (npm) GHSA-8qh6-9jhf-w6fw, MAL-2025-190789 | Malicious | Not scored | 24 Nov, 2025 | npm zuper-cli |
Malicious release: Malicious code in @ensdomains/ens-validation (npm) GHSA-7qf5-372p-99qc, MAL-2025-190731 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/ens-validation |
Malicious release: Malicious code in skills-use (npm) GHSA-vqq7-66xf-8cmr, MAL-2025-190783 | Malicious | Not scored | 24 Nov, 2025 | npm skills-use |
Malicious release: Malicious code in @posthog/piscina (npm) GHSA-v2pm-8g3h-7h3r, MAL-2025-190750 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/piscina |
Malicious release: Malicious code in typeorm-orbit (npm) GHSA-3359-gx7x-7392, MAL-2025-190786 | Malicious | Not scored | 24 Nov, 2025 | npm typeorm-orbit |
Malicious release: Malicious code in orbit-nebula-editor (npm) GHSA-3x7w-5rj2-h2gj, MAL-2025-190777 | Malicious | Not scored | 24 Nov, 2025 | npm orbit-nebula-editor |
Malicious release: Malicious code in @trigo/atrix-elasticsearch (npm) GHSA-q33f-82f4-cfhf, MAL-2025-190759 | Malicious | Not scored | 24 Nov, 2025 | npm @trigo/atrix-elasticsearch |
Malicious release: Malicious code in @posthog/siphash (npm) GHSA-2jjg-c6pv-mwm3, MAL-2025-190753 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/siphash |
Malicious release: Malicious code in @posthog/rrweb-record (npm) GHSA-m235-pcqr-5x5g, MAL-2025-190752 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/rrweb-record |
Malicious release: Malicious code in @trigo/atrix-soap (npm) GHSA-7w9p-rp5w-5vg2, MAL-2025-190760 | Malicious | Not scored | 24 Nov, 2025 | npm @trigo/atrix-soap |
Malicious release: Malicious code in eslint-config-zeallat-base (npm) GHSA-f67v-pxvp-9p9v, MAL-2025-190772 | Malicious | Not scored | 24 Nov, 2025 | npm eslint-config-zeallat-base |
Malicious release: Malicious code in @asyncapi/java-spring-template (npm) GHSA-6w4j-664j-g45g, MAL-2025-190716 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/java-spring-template |
Malicious release: Malicious code in iron-shield-miniapp (npm) GHSA-ghrh-qj3w-c6jg, MAL-2025-190773 | Malicious | Not scored | 24 Nov, 2025 | npm iron-shield-miniapp |
Malicious release: Malicious code in create-glee-app (npm) GHSA-35m6-8262-m64p, MAL-2025-190767 | Malicious | Not scored | 24 Nov, 2025 | npm create-glee-app |
Malicious release: Malicious code in @seung-ju/next (npm) GHSA-5xr2-q36p-35p4, MAL-2025-190755 | Malicious | Not scored | 24 Nov, 2025 | npm @seung-ju/next |
Malicious release: Malicious code in @actbase/react-native-tiktok (npm) GHSA-47vw-pwr5-fvr4, MAL-2025-190712 | Malicious | Not scored | 24 Nov, 2025 | npm @actbase/react-native-tiktok |
Malicious release: Malicious code in discord-bot-server (npm) GHSA-qj8r-w8vx-qhhq, MAL-2025-190769 | Malicious | Not scored | 24 Nov, 2025 | npm discord-bot-server |
Malicious release: Malicious code in @seung-ju/openapi-generator (npm) GHSA-gqp2-h6rv-5h94, MAL-2025-190756 | Malicious | Not scored | 24 Nov, 2025 | npm @seung-ju/openapi-generator |
Malicious release: Malicious code in react-native-use-modal (npm) GHSA-w34q-vp4x-hhwf, MAL-2025-190779 | Malicious | Not scored | 24 Nov, 2025 | npm react-native-use-modal |
Malicious release: Malicious code in @seung-ju/react-hooks (npm) GHSA-9xrj-x664-6rgw, MAL-2025-190757 | Malicious | Not scored | 24 Nov, 2025 | npm @seung-ju/react-hooks |
Malicious release: Malicious code in @actbase/react-native-naver-login (npm) GHSA-5hx4-5j88-fjrw, MAL-2025-190711 | Malicious | Not scored | 24 Nov, 2025 | npm @actbase/react-native-naver-login |
Malicious release: Malicious code in @zapier/browserslist-config-zapier (npm) GHSA-x7fh-q8wq-96rx, MAL-2025-190762 | Malicious | Not scored | 24 Nov, 2025 | npm @zapier/browserslist-config-zapier |
Malicious release: Malicious code in @kvytech/medusa-plugin-announcement (npm) GHSA-53mv-xhh4-47h8, MAL-2025-190744 | Malicious | Not scored | 24 Nov, 2025 | npm @kvytech/medusa-plugin-announcement |
Malicious release: Malicious code in @kvytech/components (npm) GHSA-g8xr-cv65-xx89, MAL-2025-190743 | Malicious | Not scored | 24 Nov, 2025 | npm @kvytech/components |
Malicious release: Malicious code in @posthog/nuxt (npm) GHSA-mj3m-hmc6-gmpv, MAL-2025-190749 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/nuxt |
Malicious release: Malicious code in @asyncapi/web-component (npm) GHSA-v6g6-vg2x-pc27, MAL-2025-190721 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/web-component |
Malicious release: Malicious code in @kvytech/cli (npm) GHSA-99f7-r4pg-4vx5, MAL-2025-190742 | Malicious | Not scored | 24 Nov, 2025 | npm @kvytech/cli |
Malicious release: Malicious code in @ensdomains/solsha1 (npm) GHSA-6x6m-m74g-c89p, MAL-2025-190737 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/solsha1 |
Malicious release: Malicious code in @kvytech/medusa-plugin-management (npm) GHSA-9299-g7fr-hxx9, MAL-2025-190745 | Malicious | Not scored | 24 Nov, 2025 | npm @kvytech/medusa-plugin-management |
Malicious release: Malicious code in @kvytech/medusa-plugin-product-reviews (npm) GHSA-qjqx-mr3f-4f4v, MAL-2025-190746 | Malicious | Not scored | 24 Nov, 2025 | npm @kvytech/medusa-plugin-product-reviews |
Malicious release: Malicious code in @kvytech/web (npm) GHSA-m5r3-j4x6-hfm9, MAL-2025-190747 | Malicious | Not scored | 24 Nov, 2025 | npm @kvytech/web |