Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in epicgames-ui (npm) MAL-2025-190618 | Malicious | Not scored | 22 Nov, 2025 | npm epicgames-ui |
Malicious release: Malicious code in lyft-ui (npm) MAL-2025-190620 | Malicious | Not scored | 22 Nov, 2025 | npm lyft-ui |
Malicious release: Malicious code in doordash-ui (npm) MAL-2025-190617 | Malicious | Not scored | 22 Nov, 2025 | npm doordash-ui |
Malicious release: Malicious code in snapchat-ui (npm) MAL-2025-190615 | Malicious | Not scored | 22 Nov, 2025 | npm snapchat-ui |
Malicious release: Malicious code in linkedin-ui (npm) MAL-2025-190613 | Malicious | Not scored | 22 Nov, 2025 | npm linkedin-ui |
Malicious release: Malicious code in sentry-ui (npm) MAL-2025-190614 | Malicious | Not scored | 22 Nov, 2025 | npm sentry-ui |
Malicious release: Malicious code in hilton-ui (npm) MAL-2025-190611 | Malicious | Not scored | 22 Nov, 2025 | npm hilton-ui |
Malicious release: Malicious code in instacart-ui (npm) MAL-2025-190612 | Malicious | Not scored | 22 Nov, 2025 | npm instacart-ui |
Malicious release: Malicious code in uber-ui (npm) MAL-2025-190616 | Malicious | Not scored | 22 Nov, 2025 | npm uber-ui |
Malicious release: Malicious code in @eagleview/ev-mapviewer-interactions (npm) MAL-2025-190621 | Malicious | Not scored | 22 Nov, 2025 | npm @eagleview/ev-mapviewer-interactions |
Malicious release: Malicious code in o2-modal (npm) MAL-2025-190608 | Malicious | Not scored | 22 Nov, 2025 | npm o2-modal |
Malicious release: Malicious code in airbnb-react-router-legacy-v3 (npm) MAL-2025-190605 | Malicious | Not scored | 22 Nov, 2025 | npm airbnb-react-router-legacy-v3 |
Malicious release: Malicious code in airbnb-react-router-legacy (npm) MAL-2025-190604 | Malicious | Not scored | 22 Nov, 2025 | npm airbnb-react-router-legacy |
Malicious release: Malicious code in wishlist_dropdown (npm) MAL-2025-190610 | Malicious | Not scored | 22 Nov, 2025 | npm wishlist_dropdown |
Malicious release: Malicious code in airbnb-blueimp-file-upload (npm) MAL-2025-190601 | Malicious | Not scored | 22 Nov, 2025 | npm airbnb-blueimp-file-upload |
Malicious release: Malicious code in airbnb-vermeer-node (npm) MAL-2025-190607 | Malicious | Not scored | 22 Nov, 2025 | npm airbnb-vermeer-node |
Malicious release: Malicious code in o2-tooltip (npm) MAL-2025-190609 | Malicious | Not scored | 22 Nov, 2025 | npm o2-tooltip |
Malicious release: Malicious code in airbnb-phoenix (npm) MAL-2025-190603 | Malicious | Not scored | 22 Nov, 2025 | npm airbnb-phoenix |
Malicious release: Malicious code in airbnb-luxury-messaging (npm) MAL-2025-190602 | Malicious | Not scored | 22 Nov, 2025 | npm airbnb-luxury-messaging |
Malicious release: Malicious code in airbnb-story-constants (npm) MAL-2025-190606 | Malicious | Not scored | 22 Nov, 2025 | npm airbnb-story-constants |
Malicious release: Malicious code in optly (npm) MAL-2025-190600 | Malicious | Not scored | 21 Nov, 2025 | npm optly |
Malicious release: Malicious code in @vreden-team/baileys (npm) GHSA-rpmx-cvh3-2xqf, MAL-2025-190599, SNYK-JS-VREDENTEAMBAILEYS-14084077 | Malicious | Not scored | 21 Nov, 2025 | npm @vreden-team/baileys |
Malicious release: Malicious code in @ra-ide/udt-frontend (npm) MAL-2025-190598 | Malicious | Not scored | 20 Nov, 2025 | npm @ra-ide/udt-frontend |
Malicious release: Malicious code in @ra-ide/extension-ui (npm) MAL-2025-190591 | Malicious | Not scored | 20 Nov, 2025 | npm @ra-ide/extension-ui |
Malicious release: Malicious code in @ra-ide/system (npm) MAL-2025-190596 | Malicious | Not scored | 20 Nov, 2025 | npm @ra-ide/system |
Malicious release: Malicious code in @ra-ide/logix-frontend (npm) MAL-2025-190593 | Malicious | Not scored | 20 Nov, 2025 | npm @ra-ide/logix-frontend |
Malicious release: Malicious code in @ra-ide/source-code-frontend (npm) MAL-2025-190594 | Malicious | Not scored | 20 Nov, 2025 | npm @ra-ide/source-code-frontend |
Malicious release: Malicious code in @ra-ide/tag-editor-frontend (npm) MAL-2025-190597 | Malicious | Not scored | 20 Nov, 2025 | npm @ra-ide/tag-editor-frontend |
Malicious release: Malicious code in @ra-ide/code-editor-frontend (npm) MAL-2025-190590 | Malicious | Not scored | 20 Nov, 2025 | npm @ra-ide/code-editor-frontend |
Malicious release: Malicious code in @ra-ide/st-frontend (npm) MAL-2025-190595 | Malicious | Not scored | 20 Nov, 2025 | npm @ra-ide/st-frontend |
Malicious release: Malicious code in @ra-ide/ld-frontend (npm) MAL-2025-190592 | Malicious | Not scored | 20 Nov, 2025 | npm @ra-ide/ld-frontend |
Malicious release: Malicious code in @ra-ftds/motion-extension (npm) MAL-2025-190589 | Malicious | Not scored | 20 Nov, 2025 | npm @ra-ftds/motion-extension |
Malicious release: Malicious code in @ra-ftds/ra-flourish-design-tokens (npm) MAL-2025-190588 | Malicious | Not scored | 20 Nov, 2025 | npm @ra-ftds/ra-flourish-design-tokens |
Malicious release: Malicious code in alicenpmpocpackage (npm) MAL-2025-190587 | Malicious | Not scored | 20 Nov, 2025 | npm alicenpmpocpackage |
Malicious release: Malicious code in expertsvc-onboard-offboard (npm) MAL-2025-190585 | Malicious | Not scored | 20 Nov, 2025 | npm expertsvc-onboard-offboard |
Malicious release: Malicious code in identity-authn-core-ui (npm) MAL-2025-190586 | Malicious | Not scored | 20 Nov, 2025 | npm identity-authn-core-ui |
Malicious release: Malicious code in @kiwiiw/ez-lib (npm) GHSA-mjhq-f89r-w6x5, MAL-2025-190584 | Malicious | Not scored | 20 Nov, 2025 | npm @kiwiiw/ez-lib |
Malicious release: Malicious code in com.unity.polyspatial.xr (npm) GHSA-vqfj-g744-cc9j, MAL-2025-190581 | Malicious | Not scored | 20 Nov, 2025 | npm com.unity.polyspatial.xr |
Malicious release: Malicious code in node-calculator-fa00 (npm) GHSA-jfq2-j35r-66j7, MAL-2025-190583 | Malicious | Not scored | 20 Nov, 2025 | npm node-calculator-fa00 |
Malicious release: Malicious code in just-a-calculator (npm) GHSA-qprp-2464-fqq9, MAL-2025-190582 | Malicious | Not scored | 20 Nov, 2025 | npm just-a-calculator |
Malicious release: Malicious code in lululemon-b2b-utils (npm) GHSA-fjhh-wwxc-6722, MAL-2025-190580 | Malicious | Not scored | 19 Nov, 2025 | npm lululemon-b2b-utils |
Malicious release: Malicious code in hellospa (npm) GHSA-r5r4-xjfg-pv5h, MAL-2025-190579 | Malicious | Not scored | 19 Nov, 2025 | npm hellospa |
Malicious release: Malicious code in node-calculator-cf8c (npm) MAL-2025-190578 | Malicious | Not scored | 19 Nov, 2025 | npm node-calculator-cf8c |
Malicious release: Malicious code in alicenpmpackage13 (npm) MAL-2025-190577 | Malicious | Not scored | 19 Nov, 2025 | npm alicenpmpackage13 |
Malicious release: Malicious code in alicenpmpackage1 (npm) MAL-2025-190576 | Malicious | Not scored | 19 Nov, 2025 | npm alicenpmpackage1 |
Malicious release: Malicious code in react-svg-helper (npm) GHSA-g6h3-2jvp-vhqr, MAL-2025-190571 | Malicious | Not scored | 19 Nov, 2025 | npm react-svg-helper |
Malicious release: Malicious code in react-svg-module (npm) GHSA-vc42-m59c-6gw6, MAL-2025-190572 | Malicious | Not scored | 19 Nov, 2025 | npm react-svg-module |
Malicious release: Malicious code in node-calculator-8bf9 (npm) MAL-2025-190570 | Malicious | Not scored | 19 Nov, 2025 | npm node-calculator-8bf9 |
Malicious release: Malicious code in node-calculator-b0e4 (npm) MAL-2025-190569 | Malicious | Not scored | 19 Nov, 2025 | npm node-calculator-b0e4 |
Malicious release: Malicious code in werufgugweuiguiwergqui (npm) MAL-2025-190575 | Malicious | Not scored | 19 Nov, 2025 | npm werufgugweuiguiwergqui |