Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @freeday-ai/webchat (npm) GHSA-25p9-g8f9-w8g7, MAL-2025-191454 | Malicious | Not scored | 24 Nov, 2025 | npm @freeday-ai/webchat |
Malicious release: Malicious code in @flowfuse/flowfuse (npm) GHSA-mpvf-p8hg-65gw, MAL-2025-191453 | Malicious | Not scored | 24 Nov, 2025 | npm @flowfuse/flowfuse |
Malicious release: Malicious code in shell-exec (npm) GHSA-r9h9-f36g-mchq, MAL-2025-191424 | Malicious | Not scored | 24 Nov, 2025 | npm shell-exec |
Malicious release: Malicious code in @fishingbooker/react-swiper (npm) GHSA-vx4f-7jpj-8q6g, MAL-2025-191224 | Malicious | Not scored | 24 Nov, 2025 | npm @fishingbooker/react-swiper |
Malicious release: Malicious code in @fishingbooker/react-raty (npm) GHSA-25vf-r242-2wx3, MAL-2025-191223 | Malicious | Not scored | 24 Nov, 2025 | npm @fishingbooker/react-raty |
Malicious release: Malicious code in simplejsonform (npm) GHSA-mwfw-83jq-9c9v, MAL-2025-191426 | Malicious | Not scored | 24 Nov, 2025 | npm simplejsonform |
Malicious release: Malicious code in solomon-api-stories (npm) GHSA-xq3p-cxhq-7f5h, MAL-2025-191427 | Malicious | Not scored | 24 Nov, 2025 | npm solomon-api-stories |
Malicious release: Malicious code in @fishingbooker/react-pagination (npm) GHSA-f396-mhj2-3jp7, MAL-2025-191222 | Malicious | Not scored | 24 Nov, 2025 | npm @fishingbooker/react-pagination |
Malicious release: Malicious code in solomon-v3-stories (npm) GHSA-vgp4-pgr5-x2rv, MAL-2025-191428 | Malicious | Not scored | 24 Nov, 2025 | npm solomon-v3-stories |
Malicious release: Malicious code in @fishingbooker/react-loader (npm) GHSA-pqh4-9mxj-w73c, MAL-2025-191221 | Malicious | Not scored | 24 Nov, 2025 | npm @fishingbooker/react-loader |
Malicious release: Malicious code in @fishingbooker/browser-sync-plugin (npm) GHSA-xcvr-rw6f-34vp, MAL-2025-191220 | Malicious | Not scored | 24 Nov, 2025 | npm @fishingbooker/browser-sync-plugin |
Malicious release: Malicious code in solomon-v3-ui-wrapper (npm) GHSA-h8p7-c79w-fx4h, MAL-2025-191429 | Malicious | Not scored | 24 Nov, 2025 | npm solomon-v3-ui-wrapper |
Malicious release: Malicious code in @faq-component/react (npm) GHSA-9vh3-2c3x-mw47, MAL-2025-191219 | Malicious | Not scored | 24 Nov, 2025 | npm @faq-component/react |
Malicious release: Malicious code in soneium-acs (npm) GHSA-4f95-qwx3-jx88, MAL-2025-191430 | Malicious | Not scored | 24 Nov, 2025 | npm soneium-acs |
Malicious release: Malicious code in @faq-component/core (npm) GHSA-qwhw-h8x3-34mm, MAL-2025-191218 | Malicious | Not scored | 24 Nov, 2025 | npm @faq-component/core |
Malicious release: Malicious code in sufetch (npm) GHSA-x8hh-3gmf-mm9r, MAL-2025-191431 | Malicious | Not scored | 24 Nov, 2025 | npm sufetch |
Malicious release: Malicious code in tavily-module (npm) GHSA-593r-h747-h48m, MAL-2025-191432 | Malicious | Not scored | 24 Nov, 2025 | npm tavily-module |
Malicious release: Malicious code in @everreal/web-analytics (npm) GHSA-8hm6-86mw-hwwc, MAL-2025-191217 | Malicious | Not scored | 24 Nov, 2025 | npm @everreal/web-analytics |
Malicious release: Malicious code in test23112222-api (npm) GHSA-fw6c-h4gj-gvvj, MAL-2025-191434 | Malicious | Not scored | 24 Nov, 2025 | npm test23112222-api |
Malicious release: Malicious code in @everreal/validate-esmoduleinterop-imports (npm) GHSA-v335-px5m-mp9p, MAL-2025-191216 | Malicious | Not scored | 24 Nov, 2025 | npm @everreal/validate-esmoduleinterop-imports |
Malicious release: Malicious code in tiptap-shadcn-vue (npm) GHSA-6jhx-v2wm-936m, MAL-2025-191435 | Malicious | Not scored | 24 Nov, 2025 | npm tiptap-shadcn-vue |
Malicious release: Malicious code in @everreal/react-charts (npm) GHSA-hrrf-hf44-9vv7, MAL-2025-191215 | Malicious | Not scored | 24 Nov, 2025 | npm @everreal/react-charts |
Malicious release: Malicious code in toonfetch (npm) GHSA-xwjf-5fpw-52jq, MAL-2025-191436 | Malicious | Not scored | 24 Nov, 2025 | npm toonfetch |
Malicious release: Malicious code in @eventcatalog/generator-asyncapi (npm) GHSA-4qmv-rg2j-245j, MAL-2025-191452 | Malicious | Not scored | 24 Nov, 2025 | npm @eventcatalog/generator-asyncapi |
Malicious release: Malicious code in ts-relay-cursor-paging (npm) GHSA-r9rr-c7vq-r642, MAL-2025-191437 | Malicious | Not scored | 24 Nov, 2025 | npm ts-relay-cursor-paging |
Malicious release: Malicious code in typeface-antonio-complete (npm) GHSA-2755-mvxh-w3g6, MAL-2025-191438 | Malicious | Not scored | 24 Nov, 2025 | npm typeface-antonio-complete |
Malicious release: Malicious code in @devx-commerce/plugin-discounts (npm) GHSA-wmm3-4p5c-ff29, MAL-2025-191451 | Malicious | Not scored | 24 Nov, 2025 | npm @devx-commerce/plugin-discounts |
Malicious release: Malicious code in @dev-blinq/cucumber_client (npm) GHSA-hw88-7qh5-5pvx, MAL-2025-191213 | Malicious | Not scored | 24 Nov, 2025 | npm @dev-blinq/cucumber_client |
Malicious release: Malicious code in @vishadtyagi/full-year-calendar (npm) GHSA-ppf7-mxm7-7h3h, MAL-2025-191330 | Malicious | Not scored | 24 Nov, 2025 | npm @vishadtyagi/full-year-calendar |
Malicious release: Malicious code in @viapip/eslint-config (npm) GHSA-fgrh-6758-g255, MAL-2025-191329 | Malicious | Not scored | 24 Nov, 2025 | npm @viapip/eslint-config |
Malicious release: Malicious code in @trpc-rate-limiter/hono (npm) GHSA-qjrq-hrv7-m27w, MAL-2025-191328 | Malicious | Not scored | 24 Nov, 2025 | npm @trpc-rate-limiter/hono |
Malicious release: Malicious code in @trpc-rate-limiter/cloudflare (npm) GHSA-273p-87m8-h72j, MAL-2025-191327 | Malicious | Not scored | 24 Nov, 2025 | npm @trpc-rate-limiter/cloudflare |
Malicious release: Malicious code in @trackstar/test-package (npm) GHSA-76xf-qh56-36wg, MAL-2025-191326 | Malicious | Not scored | 24 Nov, 2025 | npm @trackstar/test-package |
Malicious release: Malicious code in @trackstar/test-angular-package (npm) GHSA-w5m9-xgcq-gxg3, MAL-2025-191325 | Malicious | Not scored | 24 Nov, 2025 | npm @trackstar/test-angular-package |
Malicious release: Malicious code in @trackstar/react-trackstar-link-upgrade (npm) GHSA-xfjh-5cxg-vvm3, MAL-2025-191324 | Malicious | Not scored | 24 Nov, 2025 | npm @trackstar/react-trackstar-link-upgrade |
Malicious release: Malicious code in @trackstar/react-trackstar-link (npm) GHSA-p25h-8jp6-h7mv, MAL-2025-191323 | Malicious | Not scored | 24 Nov, 2025 | npm @trackstar/react-trackstar-link |
Malicious release: Malicious code in @trackstar/angular-trackstar-link (npm) GHSA-p9gj-r4rh-387h, MAL-2025-191322 | Malicious | Not scored | 24 Nov, 2025 | npm @trackstar/angular-trackstar-link |
Malicious release: Malicious code in @sme-ui/aoma-vevasound-metadata-lib (npm) GHSA-9f3v-q7pp-f2rv, MAL-2025-191321 | Malicious | Not scored | 24 Nov, 2025 | npm @sme-ui/aoma-vevasound-metadata-lib |
Malicious release: Malicious code in @silgi/permission (npm) GHSA-jwr6-gjp6-c6vw, MAL-2025-191317 | Malicious | Not scored | 24 Nov, 2025 | npm @silgi/permission |
Malicious release: Malicious code in @silgi/openapi (npm) GHSA-jjgq-j9mv-qvww, MAL-2025-191316 | Malicious | Not scored | 24 Nov, 2025 | npm @silgi/openapi |
Malicious release: Malicious code in @silgi/module-builder (npm) GHSA-q6vf-hqvr-8x9p, MAL-2025-191315 | Malicious | Not scored | 24 Nov, 2025 | npm @silgi/module-builder |
Malicious release: Malicious code in @silgi/graphql (npm) GHSA-6j4p-9fhf-vrc2, MAL-2025-191314 | Malicious | Not scored | 24 Nov, 2025 | npm @silgi/graphql |
Malicious release: Malicious code in @silgi/ecosystem (npm) GHSA-vc6q-5wm6-qxr9, MAL-2025-191313 | Malicious | Not scored | 24 Nov, 2025 | npm @silgi/ecosystem |
Malicious release: Malicious code in rediff-viewer (npm) GHSA-gw6x-9h9w-2rjg, MAL-2025-191417 | Malicious | Not scored | 24 Nov, 2025 | npm rediff-viewer |
Malicious release: Malicious code in @silgi/drizzle (npm) GHSA-76m7-r4qw-fcr2, MAL-2025-191312 | Malicious | Not scored | 24 Nov, 2025 | npm @silgi/drizzle |
Malicious release: Malicious code in @silgi/better-auth (npm) GHSA-rccx-m2q5-522x, MAL-2025-191311 | Malicious | Not scored | 24 Nov, 2025 | npm @silgi/better-auth |
Malicious release: Malicious code in rediff (npm) GHSA-35xh-7xqf-84xp, MAL-2025-191416 | Malicious | Not scored | 24 Nov, 2025 | npm rediff |
Malicious release: Malicious code in @sameepsi/sor2 (npm) GHSA-rq97-rqcj-h44v, MAL-2025-191310 | Malicious | Not scored | 24 Nov, 2025 | npm @sameepsi/sor2 |
Malicious release: Malicious code in @sameepsi/sor (npm) GHSA-jwrx-rx3q-v25q, MAL-2025-191309 | Malicious | Not scored | 24 Nov, 2025 | npm @sameepsi/sor |
Malicious release: Malicious code in react-scrambled-text (npm) GHSA-wpc4-3h4p-fwj5, MAL-2025-191415 | Malicious | Not scored | 24 Nov, 2025 | npm react-scrambled-text |