Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @asyncapi/optimizer (npm) GHSA-xgcr-6c5m-pmwv, MAL-2025-190663 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/optimizer |
Malicious release: Malicious code in @asyncapi/cli (npm) GHSA-w364-4jj5-wj22, MAL-2025-190653 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/cli |
Malicious release: Malicious code in @asyncapi/diff (npm) GHSA-hc6m-f55c-m5w8, MAL-2025-190655 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/diff |
Malicious release: Malicious code in @alaan/s2s-auth (npm) GHSA-236w-wpxw-gpx8, MAL-2025-190651 | Malicious | Not scored | 24 Nov, 2025 | npm @alaan/s2s-auth |
Malicious release: Malicious code in @asyncapi/html-template (npm) GHSA-5xrp-p7m9-wfff, MAL-2025-190658 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/html-template |
Malicious release: Malicious code in signup-failover (npm) GHSA-w32r-5p54-c423, MAL-2025-190650 | Malicious | Not scored | 24 Nov, 2025 | npm signup-failover |
Malicious release: Malicious code in @asyncapi/bundler (npm) GHSA-g63r-6vp8-gm3j, MAL-2025-190652 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/bundler |
Malicious release: Malicious code in @asyncapi/nunjucks-filters (npm) GHSA-qwpr-jrjh-g495, MAL-2025-190662 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/nunjucks-filters |
Malicious release: Malicious code in crypto-addr-codec (npm) GHSA-c5wm-5vwx-297r, MAL-2025-190694 | Malicious | Not scored | 24 Nov, 2025 | npm crypto-addr-codec |
Malicious release: Malicious code in @ensdomains/content-hash (npm) GHSA-29f6-8xrp-f68w, MAL-2025-190666 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/content-hash |
Malicious release: Malicious code in @ensdomains/address-encoder (npm) GHSA-6gpw-2wh2-2xcm, MAL-2025-190665 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/address-encoder |
Malicious release: Malicious code in zapier-platform-core (npm) GHSA-5qxq-q93m-f952, MAL-2025-190704 | Malicious | Not scored | 24 Nov, 2025 | npm zapier-platform-core |
Malicious release: Malicious code in zapier-platform-schema (npm) GHSA-qq72-jcf9-h52h, MAL-2025-190705 | Malicious | Not scored | 24 Nov, 2025 | npm zapier-platform-schema |
Malicious release: Malicious code in @zapier/secret-scrubber (npm) GHSA-xg54-qg46-ph4x, MAL-2025-190691 | Malicious | Not scored | 24 Nov, 2025 | npm @zapier/secret-scrubber |
Malicious release: Malicious code in @posthog/cli (npm) GHSA-4394-7mcj-mw82, MAL-2025-190671 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/cli |
Malicious release: Malicious code in @asyncapi/multi-parser (npm) GHSA-63gg-qx3x-ph2j, MAL-2025-190661 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/multi-parser |
Malicious release: Malicious code in @asyncapi/converter (npm) GHSA-3cr2-p3pg-xrhw, MAL-2025-190654 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/converter |
Malicious release: Malicious code in posthog-react-native-session-replay (npm) GHSA-mmg5-758v-292x, MAL-2025-190649 | Malicious | Not scored | 24 Nov, 2025 | npm posthog-react-native-session-replay |
Malicious release: Malicious code in @postman/csv-parse (npm) GHSA-j942-2f3x-w9mc, MAL-2025-190646 | Malicious | Not scored | 24 Nov, 2025 | npm @postman/csv-parse |
Malicious release: Malicious code in @asyncapi/generator-react-sdk (npm) GHSA-j57g-3wpg-r49m, MAL-2025-190637 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/generator-react-sdk |
Malicious release: Malicious code in @asyncapi/modelina (npm) GHSA-8x8q-8r37-g7g5, MAL-2025-190638 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/modelina |
Malicious release: Malicious code in @posthog/ai (npm) GHSA-mjv6-3w2m-7669, MAL-2025-190644 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/ai |
Malicious release: Malicious code in @asyncapi/generator (npm) GHSA-9658-p648-rc4q, MAL-2025-190636 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/generator |
Malicious release: Malicious code in @asyncapi/react-component (npm) GHSA-62jw-fq3q-mxq5, MAL-2025-190642 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/react-component |
Malicious release: Malicious code in @asyncapi/protobuf-schema-parser (npm) GHSA-2wj6-h4j4-v3mm, MAL-2025-190641 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/protobuf-schema-parser |
Malicious release: Malicious code in @asyncapi/avro-schema-parser (npm) GHSA-9vpg-29cm-rvq6, MAL-2025-190635 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/avro-schema-parser |
Malicious release: Malicious code in @asyncapi/openapi-schema-parser (npm) GHSA-hf2q-r24h-7qvm, MAL-2025-190639 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/openapi-schema-parser |
Malicious release: Malicious code in @asyncapi/parser (npm) GHSA-wjmr-9cr8-3wgj, MAL-2025-190640 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/parser |
Malicious release: Malicious code in @postman/tunnel-agent (npm) GHSA-wrhq-7m36-c43f, MAL-2025-190647 | Malicious | Not scored | 24 Nov, 2025 | npm @postman/tunnel-agent |
Malicious release: Malicious code in @asyncapi/specs (npm) GHSA-5jj9-3vg7-7785, MAL-2025-190643 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/specs |
Malicious release: Malicious code in @posthog/core (npm) GHSA-3f6v-43gc-g8fr, MAL-2025-190645 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/core |
Malicious release: Malicious code in @zapier/zapier-sdk (npm) GHSA-hxq5-5w35-rmpp, MAL-2025-190648 | Malicious | Not scored | 24 Nov, 2025 | npm @zapier/zapier-sdk |
Malicious release: Malicious code in @ensdomains/cypress-metamask (npm) GHSA-xc86-vfw2-q5gj, MAL-2025-190803 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/cypress-metamask |
Malicious release: Malicious code in @validate-pubkey/hex (npm) GHSA-4f7x-m25q-x292, MAL-2025-190634, SNYK-JS-VALIDATEPUBKEYHEX-14102887 | Malicious | Not scored | 24 Nov, 2025 | npm @validate-pubkey/hex |
Malicious release: Malicious code in parse-session (npm) GHSA-3w6m-fgww-62wh, MAL-2025-190630, SNYK-JS-PARSESESSION-14102884 | Malicious | Not scored | 24 Nov, 2025 | npm parse-session |
Malicious release: Malicious code in chai-async-chain (npm) GHSA-9c7f-644c-p3xw, MAL-2025-190627, SNYK-JS-CHAIASYNCCHAIN-14102888 | Malicious | Not scored | 24 Nov, 2025 | npm chai-async-chain |
Malicious release: Malicious code in tailwind-inquirer (npm) GHSA-rgrq-p348-q687, MAL-2025-190631 | Malicious | Not scored | 24 Nov, 2025 | npm tailwind-inquirer |
Malicious release: Malicious code in tailwind-pulse (npm) GHSA-wwch-7p98-fc3h, MAL-2025-190632 | Malicious | Not scored | 24 Nov, 2025 | npm tailwind-pulse |
Malicious release: Malicious code in hash-guard (npm) GHSA-4cv7-jcc9-9gwf, MAL-2025-190628 | Malicious | Not scored | 24 Nov, 2025 | npm hash-guard |
Malicious release: Malicious code in loliloli (npm) GHSA-36fv-222j-ppf5, MAL-2025-190629 | Malicious | Not scored | 24 Nov, 2025 | npm loliloli |
Malicious release: Malicious code in token-verify-passport (npm) GHSA-gjj2-6wcj-mv3q, MAL-2025-190633 | Malicious | Not scored | 24 Nov, 2025 | npm token-verify-passport |
Malicious release: Malicious code in vue3-transpiler (npm) MAL-2025-190626 | Malicious | Not scored | 24 Nov, 2025 | npm vue3-transpiler |
Malicious release: Malicious code in shinhan-limit-scrap (npm) GHSA-p92h-9qvq-2vq2, MAL-2025-190782 | Malicious | Not scored | 24 Nov, 2025 | npm shinhan-limit-scrap |
Malicious release: Malicious code in @quick-start-soft/quick-markdown-image (npm) GHSA-62qm-7xcr-w8mv, MAL-2025-190823 | Malicious | Not scored | 24 Nov, 2025 | npm @quick-start-soft/quick-markdown-image |
Malicious release: Malicious code in @quick-start-soft/quick-markdown-print (npm) GHSA-89j8-wr2j-w75m, MAL-2025-191306 | Malicious | Not scored | 24 Nov, 2025 | npm @quick-start-soft/quick-markdown-print |
Malicious release: Malicious code in base62-58x (npm) GHSA-35vp-3qxv-xfp5, MAL-2025-190624, SNYK-JS-BASE6258X-14102877 | Malicious | Not scored | 24 Nov, 2025 | npm base62-58x |
Malicious release: Malicious code in lion-second-package (npm) GHSA-jmrp-jrpv-w3xp, MAL-2025-190625 | Malicious | Not scored | 24 Nov, 2025 | npm lion-second-package |
Malicious release: Malicious code in cbre-flow-common (npm) MAL-2025-190623 | Malicious | Not scored | 24 Nov, 2025 | npm cbre-flow-common |
Malicious release: Malicious code in com.unity.xr.visionos (npm) GHSA-453j-55mv-5p43, MAL-2025-190622 | Malicious | Not scored | 23 Nov, 2025 | npm com.unity.xr.visionos |
Malicious release: Malicious code in hyatt-ui (npm) MAL-2025-190619 | Malicious | Not scored | 22 Nov, 2025 | npm hyatt-ui |