Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @trigo/atrix-postgres (npm) GHSA-2mvw-652j-m3cc, MAL-2025-190681 | Malicious | Not scored | 24 Nov, 2025 | npm @trigo/atrix-postgres |
Malicious release: Malicious code in trigo-react-app (npm) GHSA-gr3j-396j-pcc4, MAL-2025-190702 | Malicious | Not scored | 24 Nov, 2025 | npm trigo-react-app |
Malicious release: Malicious code in @trigo/bool-expressions (npm) GHSA-h5rr-wvrw-9gr8, MAL-2025-190683 | Malicious | Not scored | 24 Nov, 2025 | npm @trigo/bool-expressions |
Malicious release: Malicious code in @trigo/eslint-config-trigo (npm) GHSA-v5mg-qxxx-3jxx, MAL-2025-190684 | Malicious | Not scored | 24 Nov, 2025 | npm @trigo/eslint-config-trigo |
Malicious release: Malicious code in @trigo/trigo-hapijs (npm) GHSA-pcgx-2p87-9rfg, MAL-2025-190690 | Malicious | Not scored | 24 Nov, 2025 | npm @trigo/trigo-hapijs |
Malicious release: Malicious code in @trigo/node-soap (npm) GHSA-4wr7-pxm7-hr89, MAL-2025-190688 | Malicious | Not scored | 24 Nov, 2025 | npm @trigo/node-soap |
Malicious release: Malicious code in @trigo/jsdt (npm) GHSA-7qm5-m3m4-5j5r, MAL-2025-190686 | Malicious | Not scored | 24 Nov, 2025 | npm @trigo/jsdt |
Malicious release: Malicious code in bool-expressions (npm) GHSA-9c62-j24x-77xv, MAL-2025-190693 | Malicious | Not scored | 24 Nov, 2025 | npm bool-expressions |
Malicious release: Malicious code in @trigo/atrix-redis (npm) GHSA-v6gx-vc9g-vfw6, MAL-2025-190682 | Malicious | Not scored | 24 Nov, 2025 | npm @trigo/atrix-redis |
Malicious release: Malicious code in @trigo/atrix-acl (npm) GHSA-cmrc-89ch-44wj, MAL-2025-190678 | Malicious | Not scored | 24 Nov, 2025 | npm @trigo/atrix-acl |
Malicious release: Malicious code in @trigo/atrix-orientdb (npm) GHSA-fh54-cv88-rhfg, MAL-2025-190680 | Malicious | Not scored | 24 Nov, 2025 | npm @trigo/atrix-orientdb |
Malicious release: Malicious code in @trigo/keycloak-api (npm) GHSA-rqj9-54mw-87qx, MAL-2025-190687 | Malicious | Not scored | 24 Nov, 2025 | npm @trigo/keycloak-api |
Malicious release: Malicious code in @asyncapi/problem (npm) GHSA-2rp9-v657-8w4r, MAL-2025-190664 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/problem |
Malicious release: Malicious code in @trigo/atrix-mongoose (npm) GHSA-j682-rcr4-3m7w, MAL-2025-190679 | Malicious | Not scored | 24 Nov, 2025 | npm @trigo/atrix-mongoose |
Malicious release: Malicious code in @posthog/rrdom (npm) GHSA-r8fm-xf88-xm57, MAL-2025-190672 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/rrdom |
Malicious release: Malicious code in @posthog/rrweb-snapshot (npm) GHSA-rm23-5f98-rwvf, MAL-2025-190674 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/rrweb-snapshot |
Malicious release: Malicious code in atrix-mongoose (npm) GHSA-pc63-7f4c-3qv5, MAL-2025-190692 | Malicious | Not scored | 24 Nov, 2025 | npm atrix-mongoose |
Malicious release: Malicious code in @posthog/rrweb-utils (npm) GHSA-wv74-vq9j-p6qv, MAL-2025-190675 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/rrweb-utils |
Malicious release: Malicious code in ethereum-ens (npm) GHSA-whx3-vxm3-8xjh, MAL-2025-190696 | Malicious | Not scored | 24 Nov, 2025 | npm ethereum-ens |
Malicious release: Malicious code in @posthog/rrweb (npm) GHSA-c37j-qh72-54w3, MAL-2025-190673 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/rrweb |
Malicious release: Malicious code in zapier-platform-cli (npm) GHSA-6958-78jx-vxp3, MAL-2025-190703 | Malicious | Not scored | 24 Nov, 2025 | npm zapier-platform-cli |
Malicious release: Malicious code in @asyncapi/generator-helpers (npm) GHSA-gw3q-hxvp-x7vm, MAL-2025-190657 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/generator-helpers |
Malicious release: Malicious code in @asyncapi/generator-components (npm) GHSA-m6ch-4fxh-v72c, MAL-2025-190656 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/generator-components |
Malicious release: Malicious code in @postman/aether-icons (npm) GHSA-pr99-cvwr-49x5, MAL-2025-190676 | Malicious | Not scored | 24 Nov, 2025 | npm @postman/aether-icons |
Malicious release: Malicious code in redux-forge (npm) GHSA-mrqr-92qq-v899, MAL-2025-190701 | Malicious | Not scored | 24 Nov, 2025 | npm redux-forge |
Malicious release: Malicious code in @asyncapi/modelina-cli (npm) GHSA-gvjp-vq8c-93fv, MAL-2025-190660 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/modelina-cli |
Malicious release: Malicious code in @asyncapi/optimizer (npm) GHSA-xgcr-6c5m-pmwv, MAL-2025-190663 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/optimizer |
Malicious release: Malicious code in @asyncapi/cli (npm) GHSA-w364-4jj5-wj22, MAL-2025-190653 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/cli |
Malicious release: Malicious code in @asyncapi/diff (npm) GHSA-hc6m-f55c-m5w8, MAL-2025-190655 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/diff |
Malicious release: Malicious code in @alaan/s2s-auth (npm) GHSA-236w-wpxw-gpx8, MAL-2025-190651 | Malicious | Not scored | 24 Nov, 2025 | npm @alaan/s2s-auth |
Malicious release: Malicious code in @asyncapi/html-template (npm) GHSA-5xrp-p7m9-wfff, MAL-2025-190658 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/html-template |
Malicious release: Malicious code in signup-failover (npm) GHSA-w32r-5p54-c423, MAL-2025-190650 | Malicious | Not scored | 24 Nov, 2025 | npm signup-failover |
Malicious release: Malicious code in @asyncapi/bundler (npm) GHSA-g63r-6vp8-gm3j, MAL-2025-190652 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/bundler |
Malicious release: Malicious code in @asyncapi/nunjucks-filters (npm) GHSA-qwpr-jrjh-g495, MAL-2025-190662 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/nunjucks-filters |
Malicious release: Malicious code in crypto-addr-codec (npm) GHSA-c5wm-5vwx-297r, MAL-2025-190694 | Malicious | Not scored | 24 Nov, 2025 | npm crypto-addr-codec |
Malicious release: Malicious code in @ensdomains/content-hash (npm) GHSA-29f6-8xrp-f68w, MAL-2025-190666 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/content-hash |
Malicious release: Malicious code in @ensdomains/address-encoder (npm) GHSA-6gpw-2wh2-2xcm, MAL-2025-190665 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/address-encoder |
Malicious release: Malicious code in zapier-platform-core (npm) GHSA-5qxq-q93m-f952, MAL-2025-190704 | Malicious | Not scored | 24 Nov, 2025 | npm zapier-platform-core |
Malicious release: Malicious code in zapier-platform-schema (npm) GHSA-qq72-jcf9-h52h, MAL-2025-190705 | Malicious | Not scored | 24 Nov, 2025 | npm zapier-platform-schema |
Malicious release: Malicious code in @zapier/secret-scrubber (npm) GHSA-xg54-qg46-ph4x, MAL-2025-190691 | Malicious | Not scored | 24 Nov, 2025 | npm @zapier/secret-scrubber |
Malicious release: Malicious code in @posthog/cli (npm) GHSA-4394-7mcj-mw82, MAL-2025-190671 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/cli |
Malicious release: Malicious code in @asyncapi/multi-parser (npm) GHSA-63gg-qx3x-ph2j, MAL-2025-190661 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/multi-parser |
Malicious release: Malicious code in @asyncapi/converter (npm) GHSA-3cr2-p3pg-xrhw, MAL-2025-190654 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/converter |
Malicious release: Malicious code in posthog-react-native-session-replay (npm) GHSA-mmg5-758v-292x, MAL-2025-190649 | Malicious | Not scored | 24 Nov, 2025 | npm posthog-react-native-session-replay |
Malicious release: Malicious code in @postman/csv-parse (npm) GHSA-j942-2f3x-w9mc, MAL-2025-190646 | Malicious | Not scored | 24 Nov, 2025 | npm @postman/csv-parse |
Malicious release: Malicious code in @asyncapi/generator-react-sdk (npm) GHSA-j57g-3wpg-r49m, MAL-2025-190637 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/generator-react-sdk |
Malicious release: Malicious code in @asyncapi/modelina (npm) GHSA-8x8q-8r37-g7g5, MAL-2025-190638 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/modelina |
Malicious release: Malicious code in @posthog/ai (npm) GHSA-mjv6-3w2m-7669, MAL-2025-190644 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/ai |
Malicious release: Malicious code in @asyncapi/generator (npm) GHSA-9658-p648-rc4q, MAL-2025-190636 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/generator |
Malicious release: Malicious code in @asyncapi/react-component (npm) GHSA-62jw-fq3q-mxq5, MAL-2025-190642 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/react-component |