Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in pergel (npm) GHSA-2w5p-9qrr-g23p, MAL-2025-191138 | Malicious | Not scored | 24 Nov, 2025 | npm pergel |
Malicious release: Malicious code in nitroping (npm) GHSA-472x-2fx6-8gwx, MAL-2025-191134 | Malicious | Not scored | 24 Nov, 2025 | npm nitroping |
Malicious release: Malicious code in nitro-kutu (npm) GHSA-hfpq-3gcm-4mmc, MAL-2025-191132 | Malicious | Not scored | 24 Nov, 2025 | npm nitro-kutu |
Malicious release: Malicious code in nitro-graphql (npm) GHSA-8q6q-44gw-jhxc, MAL-2025-191131 | Malicious | Not scored | 24 Nov, 2025 | npm nitro-graphql |
Malicious release: Malicious code in nitrodeploy (npm) GHSA-5hxg-4cx4-r7jp, MAL-2025-191133 | Malicious | Not scored | 24 Nov, 2025 | npm nitrodeploy |
Malicious release: Malicious code in @oku-ui/accordion (npm) GHSA-mm57-5g37-34jc, MAL-2025-191037 | Malicious | Not scored | 24 Nov, 2025 | npm @oku-ui/accordion |
Malicious release: Malicious code in m25-transaction-utils (npm) GHSA-x328-h4h9-vf2w, MAL-2025-191127 | Malicious | Not scored | 24 Nov, 2025 | npm m25-transaction-utils |
Malicious release: Malicious code in lui-vue-test (npm) GHSA-qj5r-2cxx-2pj6, MAL-2025-191125 | Malicious | Not scored | 24 Nov, 2025 | npm lui-vue-test |
Malicious release: Malicious code in @trigo/atrix-swagger (npm) GHSA-2h9v-r8q6-mqvx, MAL-2025-191059 | Malicious | Not scored | 24 Nov, 2025 | npm @trigo/atrix-swagger |
Malicious release: Malicious code in kns-error-code (npm) GHSA-8x3r-8fmv-7cm4, MAL-2025-191120 | Malicious | Not scored | 24 Nov, 2025 | npm kns-error-code |
Malicious release: Malicious code in @trefox/sleekshop-js (npm) GHSA-q52v-q3qj-5x5v, MAL-2025-191058 | Malicious | Not scored | 24 Nov, 2025 | npm @trefox/sleekshop-js |
Malicious release: Malicious code in kinvey-flex-scripts (npm) GHSA-gp9g-w669-x977, MAL-2025-191119 | Malicious | Not scored | 24 Nov, 2025 | npm kinvey-flex-scripts |
Malicious release: Malicious code in kinvey-cli-wrapper (npm) GHSA-2mch-f3qc-jjgm, MAL-2025-191118 | Malicious | Not scored | 24 Nov, 2025 | npm kinvey-cli-wrapper |
Malicious release: Malicious code in @tiaanduplessis/react-progressbar (npm) GHSA-4h39-m37p-58xp, MAL-2025-191057 | Malicious | Not scored | 24 Nov, 2025 | npm @tiaanduplessis/react-progressbar |
Malicious release: Malicious code in kinetix-default-token-list (npm) GHSA-hghw-4462-36cv, MAL-2025-191117 | Malicious | Not scored | 24 Nov, 2025 | npm kinetix-default-token-list |
Malicious release: Malicious code in just-toasty (npm) GHSA-v73w-2pjf-wq7g, MAL-2025-191115 | Malicious | Not scored | 24 Nov, 2025 | npm just-toasty |
Malicious release: Malicious code in jsonsurge (npm) GHSA-4gh2-4gxh-wxwx, MAL-2025-191114 | Malicious | Not scored | 24 Nov, 2025 | npm jsonsurge |
Malicious release: Malicious code in jaetut-varit-test (npm) GHSA-m22g-prpc-hmcg, MAL-2025-191112 | Malicious | Not scored | 24 Nov, 2025 | npm jaetut-varit-test |
Malicious release: Malicious code in @tiaanduplessis/json (npm) GHSA-7qf3-m8rp-vq57, MAL-2025-191056 | Malicious | Not scored | 24 Nov, 2025 | npm @tiaanduplessis/json |
Malicious release: Malicious code in insomnia-plugin-random-pick (npm) GHSA-hwcw-cr45-5whf, MAL-2025-191111 | Malicious | Not scored | 24 Nov, 2025 | npm insomnia-plugin-random-pick |
Malicious release: Malicious code in @thedelta/eslint-config (npm) GHSA-qqm2-xw5q-6456, MAL-2025-191055 | Malicious | Not scored | 24 Nov, 2025 | npm @thedelta/eslint-config |
Malicious release: Malicious code in @suraj_h/medium-common (npm) GHSA-63qx-67xh-m2v8, MAL-2025-191054 | Malicious | Not scored | 24 Nov, 2025 | npm @suraj_h/medium-common |
Malicious release: Malicious code in @seezo/sdr-mcp-server (npm) GHSA-3c5g-45xx-w65c, MAL-2025-191053 | Malicious | Not scored | 24 Nov, 2025 | npm @seezo/sdr-mcp-server |
Malicious release: Malicious code in inmaa-map (npm) GHSA-h7f3-h7jf-j687, MAL-2025-191110 | Malicious | Not scored | 24 Nov, 2025 | npm inmaa-map |
Malicious release: Malicious code in ids-enterprise-typings (npm) GHSA-jvr2-6364-4x9q, MAL-2025-191109 | Malicious | Not scored | 24 Nov, 2025 | npm ids-enterprise-typings |
Malicious release: Malicious code in ids-enterprise-ng (npm) GHSA-qcj4-hjhm-cmvp, MAL-2025-191108 | Malicious | Not scored | 24 Nov, 2025 | npm ids-enterprise-ng |
Malicious release: Malicious code in @relyt/mcp-server-relytone (npm) GHSA-9jcv-5hcv-f23r, MAL-2025-191052 | Malicious | Not scored | 24 Nov, 2025 | npm @relyt/mcp-server-relytone |
Malicious release: Malicious code in @relyt/claude-context-mcp (npm) GHSA-r4xp-273q-hmxr, MAL-2025-191051 | Malicious | Not scored | 24 Nov, 2025 | npm @relyt/claude-context-mcp |
Malicious release: Malicious code in ids-enterprise-mcp-server (npm) GHSA-jj4q-9hf2-5rfx, MAL-2025-191107 | Malicious | Not scored | 24 Nov, 2025 | npm ids-enterprise-mcp-server |
Malicious release: Malicious code in @relyt/claude-context-core (npm) GHSA-g2qf-c39v-8ph8, MAL-2025-191050 | Malicious | Not scored | 24 Nov, 2025 | npm @relyt/claude-context-core |
Malicious release: Malicious code in ids-css (npm) GHSA-wv8v-5g6r-6jfm, MAL-2025-191106 | Malicious | Not scored | 24 Nov, 2025 | npm ids-css |
Malicious release: Malicious code in @pruthvi21/use-debounce (npm) GHSA-35wh-x8vx-96h3, MAL-2025-191049 | Malicious | Not scored | 24 Nov, 2025 | npm @pruthvi21/use-debounce |
Malicious release: Malicious code in @pradhumngautam/common-app (npm) GHSA-cxhj-8vrg-j895, MAL-2025-191048 | Malicious | Not scored | 24 Nov, 2025 | npm @pradhumngautam/common-app |
Malicious release: Malicious code in @osmanekrem/error-handler (npm) GHSA-xcwf-q72p-w435, MAL-2025-191047 | Malicious | Not scored | 24 Nov, 2025 | npm @osmanekrem/error-handler |
Malicious release: Malicious code in @osmanekrem/bmad (npm) GHSA-rqjg-7j2x-4r9x, MAL-2025-191046 | Malicious | Not scored | 24 Nov, 2025 | npm @osmanekrem/bmad |
Malicious release: Malicious code in @ntnx/t (npm) GHSA-96fq-r78c-hx8x, MAL-2025-191036 | Malicious | Not scored | 24 Nov, 2025 | npm @ntnx/t |
Malicious release: Malicious code in frontity-starter-theme (npm) GHSA-fv45-3qv4-66gq, MAL-2025-191098 | Malicious | Not scored | 24 Nov, 2025 | npm frontity-starter-theme |
Malicious release: Malicious code in bun-plugin-httpfile (npm) GHSA-h8qf-v6f9-q47h, MAL-2025-191079 | Malicious | Not scored | 24 Nov, 2025 | npm bun-plugin-httpfile |
Malicious release: Malicious code in express-starter-template (npm) GHSA-x8v6-pj44-6wxw, MAL-2025-191089 | Malicious | Not scored | 24 Nov, 2025 | npm express-starter-template |
Malicious release: Malicious code in expo-router-on-rails (npm) GHSA-54vw-hpw5-ghw5, MAL-2025-191088 | Malicious | Not scored | 24 Nov, 2025 | npm expo-router-on-rails |
Malicious release: Malicious code in buffered-interpolation-babylon6 (npm) GHSA-5488-ghv7-7gm5, MAL-2025-191078 | Malicious | Not scored | 24 Nov, 2025 | npm buffered-interpolation-babylon6 |
Malicious release: Malicious code in esbuild-plugin-brotli (npm) GHSA-jh24-3x78-mcqp, MAL-2025-191087 | Malicious | Not scored | 24 Nov, 2025 | npm esbuild-plugin-brotli |
Malicious release: Malicious code in @orbitgtbelgium/mapbox-gl-draw-cut-polygon-mode (npm) GHSA-rr3j-7qx6-m8gv, MAL-2025-191045 | Malicious | Not scored | 24 Nov, 2025 | npm @orbitgtbelgium/mapbox-gl-draw-cut-polygon-mode |
Malicious release: Malicious code in electron-volt (npm) GHSA-grxg-6443-4p64, MAL-2025-191086 | Malicious | Not scored | 24 Nov, 2025 | npm electron-volt |
Malicious release: Malicious code in @ntnx/passport-wso2 (npm) GHSA-r848-vh7x-hh8m, MAL-2025-191035 | Malicious | Not scored | 24 Nov, 2025 | npm @ntnx/passport-wso2 |
Malicious release: Malicious code in better-queue-nedb (npm) GHSA-2vfc-xj5r-xmg4, MAL-2025-191074 | Malicious | Not scored | 24 Nov, 2025 | npm better-queue-nedb |
Malicious release: Malicious code in easypanel-sdk (npm) GHSA-f78c-gcxh-wjpq, MAL-2025-191085 | Malicious | Not scored | 24 Nov, 2025 | npm easypanel-sdk |
Malicious release: Malicious code in @lpdjs/firestore-repo-service (npm) GHSA-fw4c-3fgx-2g9f, MAL-2025-191034 | Malicious | Not scored | 24 Nov, 2025 | npm @lpdjs/firestore-repo-service |
Malicious release: Malicious code in @louisle2/core (npm) GHSA-qh6g-9rw7-vm3f, MAL-2025-191033 | Malicious | Not scored | 24 Nov, 2025 | npm @louisle2/core |
Malicious release: Malicious code in create-director-app (npm) GHSA-g5h7-9qh2-fv5r, MAL-2025-191082 | Malicious | Not scored | 24 Nov, 2025 | npm create-director-app |