Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in smm-youtube (npm) GHSA-cq9w-cg3h-mhj5, MAL-2025-192639 | Malicious | Not scored | 19 Dec, 2025 | npm smm-youtube |
Malicious release: Malicious code in vdous (npm) GHSA-h39m-cq37-fg6g, MAL-2025-192645 | Malicious | Not scored | 19 Dec, 2025 | npm vdous |
Malicious release: Malicious code in xvxx (npm) GHSA-rxg8-v2hm-3442, MAL-2025-192656 | Malicious | Not scored | 19 Dec, 2025 | npm xvxx |
Malicious release: Malicious code in pwnxmljs2 (npm) GHSA-3cx9-h332-857h, MAL-2025-192637 | Malicious | Not scored | 19 Dec, 2025 | npm pwnxmljs2 |
Malicious release: Malicious code in viktorparserctf2 (npm) GHSA-3wmr-87f4-8rxv, MAL-2025-192648 | Malicious | Not scored | 19 Dec, 2025 | npm viktorparserctf2 |
Malicious release: Malicious code in viktorparserctf4 (npm) GHSA-57v4-px9x-6h6g, MAL-2025-192650 | Malicious | Not scored | 19 Dec, 2025 | npm viktorparserctf4 |
Malicious release: Malicious code in viktorparserctf6 (npm) GHSA-66gw-w3hf-7vw6, MAL-2025-192652 | Malicious | Not scored | 19 Dec, 2025 | npm viktorparserctf6 |
Malicious release: Malicious code in viktorparserctf8 (npm) GHSA-79c8-xmmg-36gp, MAL-2025-192654 | Malicious | Not scored | 19 Dec, 2025 | npm viktorparserctf8 |
Malicious release: Malicious code in viktorparserctf7 (npm) GHSA-8894-22wv-8p8x, MAL-2025-192653 | Malicious | Not scored | 19 Dec, 2025 | npm viktorparserctf7 |
Malicious release: Malicious code in viktorparserctf9 (npm) GHSA-8r5f-99gg-hgjv, MAL-2025-192655 | Malicious | Not scored | 19 Dec, 2025 | npm viktorparserctf9 |
Malicious release: Malicious code in viktor-xml-parser (npm) GHSA-94cq-mxpx-j58j, MAL-2025-192646 | Malicious | Not scored | 19 Dec, 2025 | npm viktor-xml-parser |
Malicious release: Malicious code in viktorparserctf5 (npm) GHSA-9cpw-wc5x-fc5j, MAL-2025-192651 | Malicious | Not scored | 19 Dec, 2025 | npm viktorparserctf5 |
Malicious release: Malicious code in qwqwqw (npm) GHSA-j5wv-7jr9-rg62, MAL-2025-192638 | Malicious | Not scored | 19 Dec, 2025 | npm qwqwqw |
Malicious release: Malicious code in azaza (npm) GHSA-p2cp-m776-2342, MAL-2025-192621 | Malicious | Not scored | 19 Dec, 2025 | npm azaza |
Malicious release: Malicious code in viktorparserctf (npm) GHSA-wq59-w28f-47g9, MAL-2025-192647 | Malicious | Not scored | 19 Dec, 2025 | npm viktorparserctf |
Malicious release: Malicious code in viktorparserctf3 (npm) GHSA-x4q3-mgpq-2wx3, MAL-2025-192649 | Malicious | Not scored | 19 Dec, 2025 | npm viktorparserctf3 |
Malicious release: Malicious code in test-mal-npm-pkg (npm) GHSA-w9g3-xmr8-6c3f, MAL-2025-192643 | Malicious | Not scored | 19 Dec, 2025 | npm test-mal-npm-pkg |
Malicious release: Malicious code in adk-github (npm) GHSA-5rq4-5p9w-gcpj, MAL-2025-192619 | Malicious | Not scored | 19 Dec, 2025 | npm adk-github |
Malicious release: Malicious code in adk-cli (npm) GHSA-w5rp-f22h-pwhr, MAL-2025-192618 | Malicious | Not scored | 19 Dec, 2025 | npm adk-cli |
Malicious release: Malicious code in ppppparserfruit (npm) GHSA-8vgw-rgm5-pjwq, MAL-2025-192636 | Malicious | Not scored | 19 Dec, 2025 | npm ppppparserfruit |
Malicious release: Malicious code in cursorparserfruit (npm) GHSA-qqjh-v9h4-2q9f, MAL-2025-192625 | Malicious | Not scored | 19 Dec, 2025 | npm cursorparserfruit |
Malicious release: Malicious code in hubstyletokens (npm) GHSA-xgqh-xq68-cvpf, MAL-2025-192633 | Malicious | Not scored | 19 Dec, 2025 | npm hubstyletokens |
Malicious release: Malicious code in usage-tracker-janus (npm) GHSA-63gq-h49m-vhwg, MAL-2025-192644 | Malicious | Not scored | 19 Dec, 2025 | npm usage-tracker-janus |
Malicious release: Malicious code in hubspotter-http (npm) GHSA-9xx4-mq9x-hvmh, MAL-2025-192632 | Malicious | Not scored | 19 Dec, 2025 | npm hubspotter-http |
Malicious release: Malicious code in okta-mfa-library (npm) GHSA-f899-4p56-hmr6, MAL-2025-192634 | Malicious | Not scored | 19 Dec, 2025 | npm okta-mfa-library |
Malicious release: Malicious code in foundations-theming-base (npm) GHSA-jhwf-9xjp-jmjc, MAL-2025-192630 | Malicious | Not scored | 19 Dec, 2025 | npm foundations-theming-base |
Malicious release: Malicious code in @xyuxu/i18never (npm) GHSA-jg82-rrfm-828g, MAL-2025-192617 | Malicious | Not scored | 19 Dec, 2025 | npm @xyuxu/i18never |
Malicious release: Malicious code in graphlink (npm) GHSA-r79x-phr5-c8hh, MAL-2025-192631 | Malicious | Not scored | 19 Dec, 2025 | npm graphlink |
Malicious release: Malicious code in tailwind-color-shine (npm) GHSA-3gcf-759q-x9mf, MAL-2025-192641 | Malicious | Not scored | 19 Dec, 2025 | npm tailwind-color-shine |
Malicious release: Malicious code in tailwind-animationbased (npm) GHSA-wp25-rrp2-mfgj, MAL-2025-192640 | Malicious | Not scored | 19 Dec, 2025 | npm tailwind-animationbased |
Malicious release: Malicious code in tailwind-logic (npm) GHSA-wx97-rv6p-cv3m, MAL-2025-192642 | Malicious | Not scored | 19 Dec, 2025 | npm tailwind-logic |
Malicious release: Malicious code in elf-stats-sugarplum-fir-770 (npm) GHSA-qr3v-425m-r87p, MAL-2025-192627 | Malicious | Not scored | 19 Dec, 2025 | npm elf-stats-sugarplum-fir-770 |
Malicious release: Malicious code in chai-async (npm) GHSA-6535-pvh6-vwm7, MAL-2025-192623 | Malicious | Not scored | 19 Dec, 2025 | npm chai-async |
Malicious release: Malicious code in chai-nerd (npm) GHSA-82hw-vpr3-m9xq, MAL-2025-192624 | Malicious | Not scored | 19 Dec, 2025 | npm chai-nerd |
Malicious release: Malicious code in android_teminator_x (npm) GHSA-82q6-mqx2-hr2q, MAL-2025-192620 | Malicious | Not scored | 19 Dec, 2025 | npm android_teminator_x |
Malicious release: Malicious code in @pluxee-design-system/core (npm) GHSA-wp76-x9rq-pfwh, MAL-2025-192616 | Malicious | Not scored | 19 Dec, 2025 | npm @pluxee-design-system/core |
Malicious release: Malicious code in ctfparsertna (npm) GHSA-q2x3-q94m-hf34, MAL-2025-192611 | Malicious | Not scored | 19 Dec, 2025 | npm ctfparsertna |
Malicious release: Malicious code in ctfxmlflgcheck (npm) GHSA-w7xc-m6g5-74rg, MAL-2025-192612 | Malicious | Not scored | 19 Dec, 2025 | npm ctfxmlflgcheck |
Malicious release: Malicious code in parashaxmgflhg (npm) GHSA-39f8-x9x3-mmjh, MAL-2025-192635 | Malicious | Not scored | 19 Dec, 2025 | npm parashaxmgflhg |
Malicious release: Malicious code in my-ctf-package (npm) GHSA-8v4j-c8g9-wfh2, MAL-2025-192613 | Malicious | Not scored | 19 Dec, 2025 | npm my-ctf-package |
Malicious release: Malicious code in tnactgfds (npm) GHSA-gw69-296w-f9h8, MAL-2025-192615 | Malicious | Not scored | 19 Dec, 2025 | npm tnactgfds |
Malicious release: Malicious code in flagstealerfinal (npm) GHSA-x5xj-9r4p-43cv, MAL-2025-192629 | Malicious | Not scored | 19 Dec, 2025 | npm flagstealerfinal |
Malicious release: Malicious code in ctfepakageflgs (npm) GHSA-xw2v-qv2g-q2mx, MAL-2025-192610 | Malicious | Not scored | 19 Dec, 2025 | npm ctfepakageflgs |
Malicious release: Malicious code in react-enhanced-glow (npm) GHSA-gg53-7w5q-f52p, MAL-2025-192614 | Malicious | Not scored | 19 Dec, 2025 | npm react-enhanced-glow |
tinacms is vulnerable to arbitrary code execution CVE-2025-68278, GHSA-529f-9qwm-9628 | High | 0.5% | 18 Dec, 2025 | npm @tinacms/cli npm @tinacms/graphql npm tinacms |
Malicious release: Malicious code in sarumaan_a (npm) MAL-2025-192606 | Malicious | Not scored | 18 Dec, 2025 | npm sarumaan_a |
Storybook manager bundle may expose environment variables during build CVE-2025-68429, GHSA-8452-54wp-rmv6 | High | 0.3% | 17 Dec, 2025 | npm storybook |
Mattermost Desktop App exposes sensitive information in its application logs CVE-2025-13321, GHSA-g6qx-wq5w-wr8v | Low | 0.1% | 17 Dec, 2025 | npm mattermost-desktop |
Malicious release: Malicious code in xbox-bottomnav (npm) MAL-2025-192604 | Malicious | Not scored | 17 Dec, 2025 | npm xbox-bottomnav |
Malicious release: Malicious code in vitor-js (npm) GHSA-x8pc-c9x5-4hj2, MAL-2025-192603 | Malicious | Not scored | 17 Dec, 2025 | npm vitor-js |