Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in scgsffcreator (npm) GHSA-p42c-2fh4-7782, MAL-2025-190781 | Malicious | Not scored | 24 Nov, 2025 | npm scgsffcreator |
Malicious release: Malicious code in vite-plugin-httpfile (npm) GHSA-7635-24fh-8hqw, MAL-2025-190787 | Malicious | Not scored | 24 Nov, 2025 | npm vite-plugin-httpfile |
Malicious release: Malicious code in @ensdomains/curvearithmetics (npm) GHSA-x7jj-9j59-3wx8, MAL-2025-190726 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/curvearithmetics |
Malicious release: Malicious code in @ensdomains/dnsprovejs (npm) GHSA-rg64-7w6m-qmxj, MAL-2025-190727 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/dnsprovejs |
Malicious release: Malicious code in @ensdomains/reverse-records (npm) GHSA-c9jr-gjfx-46q8, MAL-2025-190736 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/reverse-records |
Malicious release: Malicious code in @ensdomains/ccip-read-dns-gateway (npm) GHSA-6cfc-2662-6wqr, MAL-2025-190723 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/ccip-read-dns-gateway |
Malicious release: Malicious code in @ensdomains/unicode-confusables (npm) GHSA-6459-r5c7-44m9, MAL-2025-190740 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/unicode-confusables |
Malicious release: Malicious code in @ensdomains/durin-middleware (npm) GHSA-337m-mwhq-f3v7, MAL-2025-190729 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/durin-middleware |
Malicious release: Malicious code in @ensdomains/ccip-read-worker-viem (npm) GHSA-g8cp-w9cm-p948, MAL-2025-190725 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/ccip-read-worker-viem |
Malicious release: Malicious code in atrix (npm) GHSA-67rf-m6p8-54xh, MAL-2025-190764 | Malicious | Not scored | 24 Nov, 2025 | npm atrix |
Malicious release: Malicious code in @postman/node-keytar (npm) GHSA-wwwq-xpmw-9m2m, MAL-2025-190754 | Malicious | Not scored | 24 Nov, 2025 | npm @postman/node-keytar |
Malicious release: Malicious code in @asyncapi/markdown-template (npm) GHSA-pjvx-43wx-wphw, MAL-2025-190659 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/markdown-template |
Malicious release: Malicious code in exact-ticker (npm) GHSA-2694-2hhp-543w, MAL-2025-190697 | Malicious | Not scored | 24 Nov, 2025 | npm exact-ticker |
Malicious release: Malicious code in @orbitgtbelgium/orbit-components (npm) GHSA-vfcv-7f9v-4xqw, MAL-2025-190669 | Malicious | Not scored | 24 Nov, 2025 | npm @orbitgtbelgium/orbit-components |
Malicious release: Malicious code in react-library-setup (npm) GHSA-p9fr-w89h-x99v, MAL-2025-190700 | Malicious | Not scored | 24 Nov, 2025 | npm react-library-setup |
Malicious release: Malicious code in @orbitgtbelgium/mapbox-gl-draw-scale-rotate-mode (npm) GHSA-947q-3c48-844q, MAL-2025-190668 | Malicious | Not scored | 24 Nov, 2025 | npm @orbitgtbelgium/mapbox-gl-draw-scale-rotate-mode |
Malicious release: Malicious code in @ensdomains/eth-ens-namehash (npm) GHSA-p274-4jv4-6mpx, MAL-2025-190667 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/eth-ens-namehash |
Malicious release: Malicious code in orbit-nebula-draw-tools (npm) GHSA-h6w3-v7r5-j9gg, MAL-2025-190698 | Malicious | Not scored | 24 Nov, 2025 | npm orbit-nebula-draw-tools |
Malicious release: Malicious code in @orbitgtbelgium/time-slider (npm) GHSA-wgfm-v7jm-pc87, MAL-2025-190670 | Malicious | Not scored | 24 Nov, 2025 | npm @orbitgtbelgium/time-slider |
Malicious release: Malicious code in react-element-prompt-inspector (npm) GHSA-2f6g-x664-gcwj, MAL-2025-190699 | Malicious | Not scored | 24 Nov, 2025 | npm react-element-prompt-inspector |
Malicious release: Malicious code in @trigo/pathfinder-ui-css (npm) GHSA-g3xx-r9mq-8vwj, MAL-2025-190689 | Malicious | Not scored | 24 Nov, 2025 | npm @trigo/pathfinder-ui-css |
Malicious release: Malicious code in eslint-config-trigo (npm) GHSA-c6m7-g9xj-wvpp, MAL-2025-190695 | Malicious | Not scored | 24 Nov, 2025 | npm eslint-config-trigo |
Malicious release: Malicious code in @trigo/fsm (npm) GHSA-q593-cpvq-4j3w, MAL-2025-190685 | Malicious | Not scored | 24 Nov, 2025 | npm @trigo/fsm |
Malicious release: Malicious code in @trigo/atrix (npm) GHSA-gp55-5fcm-xvp9, MAL-2025-190677 | Malicious | Not scored | 24 Nov, 2025 | npm @trigo/atrix |
Malicious release: Malicious code in @trigo/atrix-postgres (npm) GHSA-2mvw-652j-m3cc, MAL-2025-190681 | Malicious | Not scored | 24 Nov, 2025 | npm @trigo/atrix-postgres |
Malicious release: Malicious code in trigo-react-app (npm) GHSA-gr3j-396j-pcc4, MAL-2025-190702 | Malicious | Not scored | 24 Nov, 2025 | npm trigo-react-app |
Malicious release: Malicious code in @trigo/bool-expressions (npm) GHSA-h5rr-wvrw-9gr8, MAL-2025-190683 | Malicious | Not scored | 24 Nov, 2025 | npm @trigo/bool-expressions |
Malicious release: Malicious code in @trigo/eslint-config-trigo (npm) GHSA-v5mg-qxxx-3jxx, MAL-2025-190684 | Malicious | Not scored | 24 Nov, 2025 | npm @trigo/eslint-config-trigo |
Malicious release: Malicious code in @trigo/trigo-hapijs (npm) GHSA-pcgx-2p87-9rfg, MAL-2025-190690 | Malicious | Not scored | 24 Nov, 2025 | npm @trigo/trigo-hapijs |
Malicious release: Malicious code in @trigo/node-soap (npm) GHSA-4wr7-pxm7-hr89, MAL-2025-190688 | Malicious | Not scored | 24 Nov, 2025 | npm @trigo/node-soap |
Malicious release: Malicious code in @trigo/jsdt (npm) GHSA-7qm5-m3m4-5j5r, MAL-2025-190686 | Malicious | Not scored | 24 Nov, 2025 | npm @trigo/jsdt |
Malicious release: Malicious code in bool-expressions (npm) GHSA-9c62-j24x-77xv, MAL-2025-190693 | Malicious | Not scored | 24 Nov, 2025 | npm bool-expressions |
Malicious release: Malicious code in @trigo/atrix-redis (npm) GHSA-v6gx-vc9g-vfw6, MAL-2025-190682 | Malicious | Not scored | 24 Nov, 2025 | npm @trigo/atrix-redis |
Malicious release: Malicious code in @trigo/atrix-acl (npm) GHSA-cmrc-89ch-44wj, MAL-2025-190678 | Malicious | Not scored | 24 Nov, 2025 | npm @trigo/atrix-acl |
Malicious release: Malicious code in @trigo/atrix-orientdb (npm) GHSA-fh54-cv88-rhfg, MAL-2025-190680 | Malicious | Not scored | 24 Nov, 2025 | npm @trigo/atrix-orientdb |
Malicious release: Malicious code in @trigo/keycloak-api (npm) GHSA-rqj9-54mw-87qx, MAL-2025-190687 | Malicious | Not scored | 24 Nov, 2025 | npm @trigo/keycloak-api |
Malicious release: Malicious code in @asyncapi/problem (npm) GHSA-2rp9-v657-8w4r, MAL-2025-190664 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/problem |
Malicious release: Malicious code in @trigo/atrix-mongoose (npm) GHSA-j682-rcr4-3m7w, MAL-2025-190679 | Malicious | Not scored | 24 Nov, 2025 | npm @trigo/atrix-mongoose |
Malicious release: Malicious code in @posthog/rrdom (npm) GHSA-r8fm-xf88-xm57, MAL-2025-190672 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/rrdom |
Malicious release: Malicious code in @posthog/rrweb-snapshot (npm) GHSA-rm23-5f98-rwvf, MAL-2025-190674 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/rrweb-snapshot |
Malicious release: Malicious code in atrix-mongoose (npm) GHSA-pc63-7f4c-3qv5, MAL-2025-190692 | Malicious | Not scored | 24 Nov, 2025 | npm atrix-mongoose |
Malicious release: Malicious code in @posthog/rrweb-utils (npm) GHSA-wv74-vq9j-p6qv, MAL-2025-190675 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/rrweb-utils |
Malicious release: Malicious code in ethereum-ens (npm) GHSA-whx3-vxm3-8xjh, MAL-2025-190696 | Malicious | Not scored | 24 Nov, 2025 | npm ethereum-ens |
Malicious release: Malicious code in @posthog/rrweb (npm) GHSA-c37j-qh72-54w3, MAL-2025-190673 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/rrweb |
Malicious release: Malicious code in zapier-platform-cli (npm) GHSA-6958-78jx-vxp3, MAL-2025-190703 | Malicious | Not scored | 24 Nov, 2025 | npm zapier-platform-cli |
Malicious release: Malicious code in @asyncapi/generator-helpers (npm) GHSA-gw3q-hxvp-x7vm, MAL-2025-190657 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/generator-helpers |
Malicious release: Malicious code in @asyncapi/generator-components (npm) GHSA-m6ch-4fxh-v72c, MAL-2025-190656 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/generator-components |
Malicious release: Malicious code in @postman/aether-icons (npm) GHSA-pr99-cvwr-49x5, MAL-2025-190676 | Malicious | Not scored | 24 Nov, 2025 | npm @postman/aether-icons |
Malicious release: Malicious code in redux-forge (npm) GHSA-mrqr-92qq-v899, MAL-2025-190701 | Malicious | Not scored | 24 Nov, 2025 | npm redux-forge |
Malicious release: Malicious code in @asyncapi/modelina-cli (npm) GHSA-gvjp-vq8c-93fv, MAL-2025-190660 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/modelina-cli |