Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @orbitgtbelgium/mapbox-gl-draw-cut-polygon-mode (npm) GHSA-rr3j-7qx6-m8gv, MAL-2025-191045 | Malicious | Not scored | 24 Nov, 2025 | npm @orbitgtbelgium/mapbox-gl-draw-cut-polygon-mode |
Malicious release: Malicious code in electron-volt (npm) GHSA-grxg-6443-4p64, MAL-2025-191086 | Malicious | Not scored | 24 Nov, 2025 | npm electron-volt |
Malicious release: Malicious code in @ntnx/passport-wso2 (npm) GHSA-r848-vh7x-hh8m, MAL-2025-191035 | Malicious | Not scored | 24 Nov, 2025 | npm @ntnx/passport-wso2 |
Malicious release: Malicious code in better-queue-nedb (npm) GHSA-2vfc-xj5r-xmg4, MAL-2025-191074 | Malicious | Not scored | 24 Nov, 2025 | npm better-queue-nedb |
Malicious release: Malicious code in easypanel-sdk (npm) GHSA-f78c-gcxh-wjpq, MAL-2025-191085 | Malicious | Not scored | 24 Nov, 2025 | npm easypanel-sdk |
Malicious release: Malicious code in @lpdjs/firestore-repo-service (npm) GHSA-fw4c-3fgx-2g9f, MAL-2025-191034 | Malicious | Not scored | 24 Nov, 2025 | npm @lpdjs/firestore-repo-service |
Malicious release: Malicious code in @louisle2/core (npm) GHSA-qh6g-9rw7-vm3f, MAL-2025-191033 | Malicious | Not scored | 24 Nov, 2025 | npm @louisle2/core |
Malicious release: Malicious code in create-director-app (npm) GHSA-g5h7-9qh2-fv5r, MAL-2025-191082 | Malicious | Not scored | 24 Nov, 2025 | npm create-director-app |
Malicious release: Malicious code in better-auth-nuxt (npm) GHSA-8jwp-6329-28fq, MAL-2025-191073 | Malicious | Not scored | 24 Nov, 2025 | npm better-auth-nuxt |
Malicious release: Malicious code in create-kinvey-flex-service (npm) GHSA-j66q-h34h-9fh9, MAL-2025-191083 | Malicious | Not scored | 24 Nov, 2025 | npm create-kinvey-flex-service |
Malicious release: Malicious code in @lessondesk/schoolbus (npm) GHSA-jq3v-mxgw-2cmv, MAL-2025-191032 | Malicious | Not scored | 24 Nov, 2025 | npm @lessondesk/schoolbus |
Malicious release: Malicious code in best_gpio_controller (npm) GHSA-p5cg-vcp7-xqhx, MAL-2025-191072 | Malicious | Not scored | 24 Nov, 2025 | npm best_gpio_controller |
Malicious release: Malicious code in csv-tool-cli (npm) GHSA-9qmf-jjv3-65x3, MAL-2025-191084 | Malicious | Not scored | 24 Nov, 2025 | npm csv-tool-cli |
Malicious release: Malicious code in @lessondesk/react-table-context (npm) GHSA-24jj-p794-g6c6, MAL-2025-191031 | Malicious | Not scored | 24 Nov, 2025 | npm @lessondesk/react-table-context |
Malicious release: Malicious code in babel-preset-kinvey-flex-service (npm) GHSA-c8pf-4gvg-m3qj, MAL-2025-191069 | Malicious | Not scored | 24 Nov, 2025 | npm babel-preset-kinvey-flex-service |
Malicious release: Malicious code in @lessondesk/material-icons (npm) GHSA-4wjj-6347-jhfx, MAL-2025-191030 | Malicious | Not scored | 24 Nov, 2025 | npm @lessondesk/material-icons |
Malicious release: Malicious code in @lessondesk/eslint-config (npm) GHSA-h468-mjf5-vhxv, MAL-2025-191029 | Malicious | Not scored | 24 Nov, 2025 | npm @lessondesk/eslint-config |
Malicious release: Malicious code in @lessondesk/electron-group-api-client (npm) GHSA-mcph-m6ph-vc9h, MAL-2025-191028 | Malicious | Not scored | 24 Nov, 2025 | npm @lessondesk/electron-group-api-client |
Malicious release: Malicious code in @lessondesk/babel-preset (npm) GHSA-92j3-565q-xc26, MAL-2025-191027 | Malicious | Not scored | 24 Nov, 2025 | npm @lessondesk/babel-preset |
Malicious release: Malicious code in @lessondesk/api-client (npm) GHSA-jm29-mp7p-fqqx, MAL-2025-191026 | Malicious | Not scored | 24 Nov, 2025 | npm @lessondesk/api-client |
Malicious release: Malicious code in bytes-to-x (npm) GHSA-4hgc-6hfv-m3qw, MAL-2025-191080 | Malicious | Not scored | 24 Nov, 2025 | npm bytes-to-x |
Malicious release: Malicious code in chrome-extension-downloads (npm) GHSA-cg89-hwpg-m27r, MAL-2025-191081 | Malicious | Not scored | 24 Nov, 2025 | npm chrome-extension-downloads |
Malicious release: Malicious code in benmostyn-frame-print (npm) GHSA-fhmh-4jfp-jcxp, MAL-2025-191071 | Malicious | Not scored | 24 Nov, 2025 | npm benmostyn-frame-print |
Malicious release: Malicious code in barebones-css (npm) GHSA-27gg-rj6x-rpc2, MAL-2025-191070 | Malicious | Not scored | 24 Nov, 2025 | npm barebones-css |
Malicious release: Malicious code in blinqio-executions-cli (npm) GHSA-grm4-x7gc-qhg2, MAL-2025-191076 | Malicious | Not scored | 24 Nov, 2025 | npm blinqio-executions-cli |
Malicious release: Malicious code in blob-to-base64 (npm) GHSA-8m38-v5g6-whxx, MAL-2025-191077 | Malicious | Not scored | 24 Nov, 2025 | npm blob-to-base64 |
Malicious release: Malicious code in axios-timed (npm) GHSA-gcjx-8xwp-g5r4, MAL-2025-191068 | Malicious | Not scored | 24 Nov, 2025 | npm axios-timed |
Malicious release: Malicious code in asciitranslator (npm) GHSA-77fr-xww7-mp2f, MAL-2025-191065 | Malicious | Not scored | 24 Nov, 2025 | npm asciitranslator |
Malicious release: Malicious code in bidirectional-adapter (npm) GHSA-vhm7-gf4p-j2rq, MAL-2025-191075 | Malicious | Not scored | 24 Nov, 2025 | npm bidirectional-adapter |
Malicious release: Malicious code in automation_model (npm) GHSA-3fxp-wv67-62xv, MAL-2025-191066 | Malicious | Not scored | 24 Nov, 2025 | npm automation_model |
Malicious release: Malicious code in avvvatars-vue (npm) GHSA-fvr9-qhw8-v3w6, MAL-2025-191067 | Malicious | Not scored | 24 Nov, 2025 | npm avvvatars-vue |
Malicious release: Malicious code in arc-cli-fc (npm) GHSA-m788-q6w4-jjpr, MAL-2025-191064 | Malicious | Not scored | 24 Nov, 2025 | npm arc-cli-fc |
Malicious release: Malicious code in web-types-htmx (npm) GHSA-958x-98wv-7f7j, MAL-2025-191153 | Malicious | Not scored | 24 Nov, 2025 | npm web-types-htmx |
Malicious release: Malicious code in ai-crowl-shield (npm) GHSA-cvq8-r6mf-xq9q, MAL-2025-191063 | Malicious | Not scored | 24 Nov, 2025 | npm ai-crowl-shield |
Malicious release: Malicious code in webpack-loader-httpfile (npm) GHSA-4j6q-7396-655g, MAL-2025-191154 | Malicious | Not scored | 24 Nov, 2025 | npm webpack-loader-httpfile |
Malicious release: Malicious code in 02-echo (npm) GHSA-q2q8-5wg4-g6jq, MAL-2025-191025 | Malicious | Not scored | 24 Nov, 2025 | npm 02-echo |
Malicious release: Malicious code in wallet-type (npm) GHSA-xm23-2mgm-6phh, MAL-2025-191152 | Malicious | Not scored | 24 Nov, 2025 | npm wallet-type |
Malicious release: Malicious code in @varsityvibe/validation-schemas (npm) GHSA-jqcj-cc9g-j67v, MAL-2025-191062 | Malicious | Not scored | 24 Nov, 2025 | npm @varsityvibe/validation-schemas |
Malicious release: Malicious code in wallet-evm (npm) GHSA-jp5h-qqgg-qxxv, MAL-2025-191151 | Malicious | Not scored | 24 Nov, 2025 | npm wallet-evm |
Malicious release: Malicious code in @varsityvibe/utils (npm) GHSA-j7jj-r9w2-8q2g, MAL-2025-191061 | Malicious | Not scored | 24 Nov, 2025 | npm @varsityvibe/utils |
Malicious release: Malicious code in @varsityvibe/api-client (npm) GHSA-xjm6-4grq-326j, MAL-2025-191060 | Malicious | Not scored | 24 Nov, 2025 | npm @varsityvibe/api-client |
Malicious release: Malicious code in victoriaxoaquyet-wallet-core (npm) GHSA-2h5q-5pq9-866v, MAL-2025-191150 | Malicious | Not scored | 24 Nov, 2025 | npm victoriaxoaquyet-wallet-core |
Malicious release: Malicious code in victoria-wallet-validator (npm) GHSA-9h6m-q36c-7hvg, MAL-2025-191149 | Malicious | Not scored | 24 Nov, 2025 | npm victoria-wallet-validator |
Malicious release: Malicious code in victoria-wallet-utils (npm) GHSA-5hrc-f97f-hgp9, MAL-2025-191148 | Malicious | Not scored | 24 Nov, 2025 | npm victoria-wallet-utils |
Malicious release: Malicious code in victoria-wallet-type (npm) GHSA-gq28-p5p8-8v6f, MAL-2025-191147 | Malicious | Not scored | 24 Nov, 2025 | npm victoria-wallet-type |
Malicious release: Malicious code in generator-meteor-stock (npm) GHSA-f53h-6gfq-fcmj, MAL-2025-191101 | Malicious | Not scored | 24 Nov, 2025 | npm generator-meteor-stock |
Malicious release: Malicious code in gatsby-plugin-cname (npm) GHSA-9rx2-g59r-84qp, MAL-2025-191100 | Malicious | Not scored | 24 Nov, 2025 | npm gatsby-plugin-cname |
Malicious release: Malicious code in victoria-wallet-core (npm) GHSA-49r7-3f89-26h4, MAL-2025-191146 | Malicious | Not scored | 24 Nov, 2025 | npm victoria-wallet-core |
Malicious release: Malicious code in generator-ng-itobuz (npm) GHSA-h4c2-jv9j-hwh6, MAL-2025-191102 | Malicious | Not scored | 24 Nov, 2025 | npm generator-ng-itobuz |
Malicious release: Malicious code in victoria-wallet-constants (npm) GHSA-9q6m-64x6-7mwf, MAL-2025-191145 | Malicious | Not scored | 24 Nov, 2025 | npm victoria-wallet-constants |