Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @voiceflow/voiceflow-types (npm) GHSA-3hw8-3r29-j4gm, MAL-2025-191386 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/voiceflow-types |
Malicious release: Malicious code in silgi (npm) GHSA-43x8-586r-rr56, MAL-2025-191425 | Malicious | Not scored | 25 Nov, 2025 | npm silgi |
Malicious release: Malicious code in @voiceflow/sdk-runtime (npm) GHSA-443c-69pp-ccw3, MAL-2025-191370 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/sdk-runtime |
Malicious release: Malicious code in @dev-blinq/cucumber-js (npm) GHSA-4m8j-88r6-6phh, MAL-2025-191212 | Malicious | Not scored | 25 Nov, 2025 | npm @dev-blinq/cucumber-js |
Malicious release: Malicious code in @voiceflow/natural-language-commander (npm) GHSA-4xjf-wwjc-fmhv, MAL-2025-191356 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/natural-language-commander |
Malicious release: Malicious code in @voiceflow/alexa-types (npm) GHSA-56wg-3462-8w3r, MAL-2025-191331 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/alexa-types |
Malicious release: Malicious code in @voiceflow/test-common (npm) GHSA-574j-2rmr-3gv5, MAL-2025-191378 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/test-common |
Malicious release: Malicious code in @antstackio/graphql-body-parser (npm) GHSA-592m-mwpw-hq99, MAL-2025-191189 | Malicious | Not scored | 25 Nov, 2025 | npm @antstackio/graphql-body-parser |
Malicious release: Malicious code in @voiceflow/runtime (npm) GHSA-59v7-979j-g8cq, MAL-2025-191368 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/runtime |
Malicious release: Malicious code in @voiceflow/stylelint-config (npm) GHSA-5qm4-x7j8-95q7, MAL-2025-191377 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/stylelint-config |
Malicious release: Malicious code in @voiceflow/dtos-interact (npm) GHSA-69fv-v5hx-vg3h, MAL-2025-191343 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/dtos-interact |
Malicious release: Malicious code in @voiceflow/stitches-react (npm) GHSA-69v5-rhjr-mxf9, MAL-2025-191375 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/stitches-react |
Malicious release: Malicious code in quickswap-ads-list (npm) GHSA-6p37-f5x8-p8fh, MAL-2025-191404 | Malicious | Not scored | 25 Nov, 2025 | npm quickswap-ads-list |
Malicious release: Malicious code in @voiceflow/husky-config (npm) GHSA-7744-xv9c-x2h3, MAL-2025-191353 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/husky-config |
Malicious release: Malicious code in my-saeed-lib (npm) GHSA-782j-pc5m-hw7m, MAL-2025-191398 | Malicious | Not scored | 25 Nov, 2025 | npm my-saeed-lib |
Malicious release: Malicious code in @voiceflow/nestjs-redis (npm) GHSA-7gf9-4m37-59gv, MAL-2025-191360 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/nestjs-redis |
Malicious release: Malicious code in axios-cancelable (npm) GHSA-7h7g-wg9p-wf94, MAL-2025-191389 | Malicious | Not scored | 25 Nov, 2025 | npm axios-cancelable |
Malicious release: Malicious code in @kvytech/medusa-plugin-promotion (npm) GHSA-7wrg-wj98-r3m4, MAL-2025-191240 | Malicious | Not scored | 25 Nov, 2025 | npm @kvytech/medusa-plugin-promotion |
Malicious release: Malicious code in pkg-readme (npm) GHSA-848w-qv8p-xx6g, MAL-2025-191401 | Malicious | Not scored | 25 Nov, 2025 | npm pkg-readme |
Malicious release: Malicious code in @voiceflow/eslint-config (npm) GHSA-8624-gc9h-3mfj, MAL-2025-191345 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/eslint-config |
Malicious release: Malicious code in @voiceflow/chat-types (npm) GHSA-8j92-6vpr-72v7, MAL-2025-191337 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/chat-types |
Malicious release: Malicious code in @voiceflow/eslint-plugin (npm) GHSA-8qwv-8v32-9x47, MAL-2025-191346 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/eslint-plugin |
Malicious release: Malicious code in @voiceflow/secrets-provider (npm) GHSA-9532-2xg7-9jgr, MAL-2025-191371 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/secrets-provider |
Malicious release: Malicious code in @voiceflow/semantic-release-config (npm) GHSA-97w9-v7w9-jc93, MAL-2025-191372 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/semantic-release-config |
Malicious release: Malicious code in @voiceflow/common (npm) GHSA-9gp9-qjxp-vv82, MAL-2025-191340 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/common |
Malicious release: Malicious code in @actbase/native (npm) GHSA-9h93-h6x9-6j4j, MAL-2025-191178 | Malicious | Not scored | 25 Nov, 2025 | npm @actbase/native |
Malicious release: Malicious code in @voiceflow/body-parser (npm) GHSA-c89h-mw7j-hh48, MAL-2025-191336 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/body-parser |
Malicious release: Malicious code in @voiceflow/logger (npm) GHSA-c8h8-j498-cv9w, MAL-2025-191354 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/logger |
Malicious release: Malicious code in @dev-blinq/ui-systems (npm) GHSA-ccc8-rh82-3xvr, MAL-2025-191214 | Malicious | Not scored | 25 Nov, 2025 | npm @dev-blinq/ui-systems |
Malicious release: Malicious code in @dev-blinq/ai-qa-logic (npm) GHSA-cm2v-23m3-m672, MAL-2025-191210 | Malicious | Not scored | 25 Nov, 2025 | npm @dev-blinq/ai-qa-logic |
Malicious release: Malicious code in gatsby-plugin-antd (npm) GHSA-cvhw-3383-wcw3, MAL-2025-191396 | Malicious | Not scored | 25 Nov, 2025 | npm gatsby-plugin-antd |
Malicious release: Malicious code in command-irail (npm) GHSA-g478-4wxq-7w77, MAL-2025-191391 | Malicious | Not scored | 25 Nov, 2025 | npm command-irail |
Malicious release: Malicious code in @voiceflow/fetch (npm) GHSA-h72r-3grf-6mvr, MAL-2025-191348 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/fetch |
Malicious release: Malicious code in @productdevbook/chatwoot (npm) GHSA-hc3f-8qvq-qr3v, MAL-2025-191303 | Malicious | Not scored | 25 Nov, 2025 | npm @productdevbook/chatwoot |
Malicious release: Malicious code in @voiceflow/git-branch-check (npm) GHSA-hhxh-3pg7-v6rm, MAL-2025-191350 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/git-branch-check |
Malicious release: Malicious code in @voiceflow/google-types (npm) GHSA-hq26-8vww-cmm8, MAL-2025-191352 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/google-types |
Malicious release: Malicious code in @voiceflow/default-prompt-wrappers (npm) GHSA-m38g-96rv-2v8w, MAL-2025-191341 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/default-prompt-wrappers |
Malicious release: Malicious code in @voiceflow/prettier-config (npm) GHSA-mjm4-9rx8-2f3w, MAL-2025-191366 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/prettier-config |
Malicious release: Malicious code in @browserbasehq/stagehand (npm) GHSA-mmp7-557c-74pq, MAL-2025-191198 | Malicious | Not scored | 25 Nov, 2025 | npm @browserbasehq/stagehand |
Malicious release: Malicious code in hyper-fullfacing (npm) GHSA-mv92-7x3f-qm3c, MAL-2025-191397 | Malicious | Not scored | 25 Nov, 2025 | npm hyper-fullfacing |
Malicious release: Malicious code in @voiceflow/nestjs-mongodb (npm) GHSA-pgh2-wwvc-g564, MAL-2025-191358 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/nestjs-mongodb |
Malicious release: Malicious code in @alexcolls/nuxt-socket.io (npm) GHSA-q564-hpqp-4cmg, MAL-2025-191185 | Malicious | Not scored | 25 Nov, 2025 | npm @alexcolls/nuxt-socket.io |
Malicious release: Malicious code in @voiceflow/exception (npm) GHSA-q7cp-f4mj-8m39, MAL-2025-191347 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/exception |
Malicious release: Malicious code in tcsp (npm) GHSA-qfmw-hgxp-rppm, MAL-2025-191433 | Malicious | Not scored | 25 Nov, 2025 | npm tcsp |
Malicious release: Malicious code in @voiceflow/base-types (npm) GHSA-qh85-xh2g-7fph, MAL-2025-191335 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/base-types |
Malicious release: Malicious code in @voiceflow/dependency-cruiser-config (npm) GHSA-qr77-hmp6-8qwv, MAL-2025-191342 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/dependency-cruiser-config |
Malicious release: Malicious code in @voiceflow/commitlint-config (npm) GHSA-r464-qjp3-q96h, MAL-2025-191339 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/commitlint-config |
Malicious release: Malicious code in @voiceflow/react-chat (npm) GHSA-r7m3-3p95-v4rc, MAL-2025-191367 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/react-chat |
Malicious release: Malicious code in @voiceflow/nestjs-timeout (npm) GHSA-r967-g522-c8gc, MAL-2025-191361 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/nestjs-timeout |
Malicious release: Malicious code in @voiceflow/verror (npm) GHSA-rqwf-q33h-28w2, MAL-2025-191382 | Malicious | Not scored | 25 Nov, 2025 | npm @voiceflow/verror |