Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in gatsby-plugin-cname (npm) GHSA-9rx2-g59r-84qp, MAL-2025-191100 | Malicious | Not scored | 24 Nov, 2025 | npm gatsby-plugin-cname |
Malicious release: Malicious code in victoria-wallet-core (npm) GHSA-49r7-3f89-26h4, MAL-2025-191146 | Malicious | Not scored | 24 Nov, 2025 | npm victoria-wallet-core |
Malicious release: Malicious code in generator-ng-itobuz (npm) GHSA-h4c2-jv9j-hwh6, MAL-2025-191102 | Malicious | Not scored | 24 Nov, 2025 | npm generator-ng-itobuz |
Malicious release: Malicious code in victoria-wallet-constants (npm) GHSA-9q6m-64x6-7mwf, MAL-2025-191145 | Malicious | Not scored | 24 Nov, 2025 | npm victoria-wallet-constants |
Malicious release: Malicious code in fuzzy-finder (npm) GHSA-m66q-4c3m-7632, MAL-2025-191099 | Malicious | Not scored | 24 Nov, 2025 | npm fuzzy-finder |
Malicious release: Malicious code in get-them-args (npm) GHSA-6779-xgxr-9pcr, MAL-2025-191103 | Malicious | Not scored | 24 Nov, 2025 | npm get-them-args |
Malicious release: Malicious code in formik-store (npm) GHSA-pphm-83cv-4vjr, MAL-2025-191097 | Malicious | Not scored | 24 Nov, 2025 | npm formik-store |
Malicious release: Malicious code in formik-error-focus (npm) GHSA-8fhc-x7mv-mj8f, MAL-2025-191096 | Malicious | Not scored | 24 Nov, 2025 | npm formik-error-focus |
Malicious release: Malicious code in gitsafe (npm) GHSA-c2q8-fv4h-m9xr, MAL-2025-191104 | Malicious | Not scored | 24 Nov, 2025 | npm gitsafe |
Malicious release: Malicious code in flatten-unflatten (npm) GHSA-3rw9-37g7-xvr5, MAL-2025-191095 | Malicious | Not scored | 24 Nov, 2025 | npm flatten-unflatten |
Malicious release: Malicious code in gulp-inject-envs (npm) GHSA-f74h-jm63-v9h3, MAL-2025-191105 | Malicious | Not scored | 24 Nov, 2025 | npm gulp-inject-envs |
Malicious release: Malicious code in flapstacks (npm) GHSA-5g49-4vm7-jqmg, MAL-2025-191094 | Malicious | Not scored | 24 Nov, 2025 | npm flapstacks |
Malicious release: Malicious code in medusa-plugin-logs (npm) GHSA-8583-h7rv-pqr2, MAL-2025-191128 | Malicious | Not scored | 24 Nov, 2025 | npm medusa-plugin-logs |
Malicious release: Malicious code in fittxt (npm) GHSA-pg3w-86hv-66cf, MAL-2025-191093 | Malicious | Not scored | 24 Nov, 2025 | npm fittxt |
Malicious release: Malicious code in jquery-bindings (npm) GHSA-hp23-35fw-9g8j, MAL-2025-191113 | Malicious | Not scored | 24 Nov, 2025 | npm jquery-bindings |
Malicious release: Malicious code in firestore-search-engine (npm) GHSA-vpvg-cpgw-q6h8, MAL-2025-191092 | Malicious | Not scored | 24 Nov, 2025 | npm firestore-search-engine |
Malicious release: Malicious code in kill-port (npm) GHSA-3j2r-p9f6-rw66, MAL-2025-191116 | Malicious | Not scored | 24 Nov, 2025 | npm kill-port |
Malicious release: Malicious code in feature-flip (npm) GHSA-wfc8-g67x-27cc, MAL-2025-191091 | Malicious | Not scored | 24 Nov, 2025 | npm feature-flip |
Malicious release: Malicious code in kwami (npm) GHSA-5x6x-h76w-7669, MAL-2025-191121 | Malicious | Not scored | 24 Nov, 2025 | npm kwami |
Malicious release: Malicious code in fat-fingered (npm) GHSA-qwjf-7284-qjvw, MAL-2025-191090 | Malicious | Not scored | 24 Nov, 2025 | npm fat-fingered |
Malicious release: Malicious code in okta-react-router-6 (npm) GHSA-jvx9-5f88-f6c8, MAL-2025-191137 | Malicious | Not scored | 24 Nov, 2025 | npm okta-react-router-6 |
Malicious release: Malicious code in lang-codes (npm) GHSA-wfh5-5vcc-xmh5, MAL-2025-191122 | Malicious | Not scored | 24 Nov, 2025 | npm lang-codes |
Malicious release: Malicious code in obj-to-css (npm) GHSA-2hf2-pqrh-ph9r, MAL-2025-191136 | Malicious | Not scored | 24 Nov, 2025 | npm obj-to-css |
Malicious release: Malicious code in license-o-matic (npm) GHSA-x23c-fr3f-x5gv, MAL-2025-191123 | Malicious | Not scored | 24 Nov, 2025 | npm license-o-matic |
Malicious release: Malicious code in wenk (npm) GHSA-hjhr-87pr-r7vw, MAL-2025-191155 | Malicious | Not scored | 24 Nov, 2025 | npm wenk |
Malicious release: Malicious code in normal-store (npm) GHSA-h55v-443q-qjm4, MAL-2025-191135 | Malicious | Not scored | 24 Nov, 2025 | npm normal-store |
Malicious release: Malicious code in ngx-wooapi (npm) GHSA-c933-f7h3-47xj, MAL-2025-191130 | Malicious | Not scored | 24 Nov, 2025 | npm ngx-wooapi |
Malicious release: Malicious code in lint-staged-imagemin (npm) GHSA-fc55-r563-7xhq, MAL-2025-191124 | Malicious | Not scored | 24 Nov, 2025 | npm lint-staged-imagemin |
Malicious release: Malicious code in zuper-sdk (npm) GHSA-wr7r-h846-8q95, MAL-2025-191156 | Malicious | Not scored | 24 Nov, 2025 | npm zuper-sdk |
Malicious release: Malicious code in ngx-useful-swiper-prosenjit (npm) GHSA-w6c5-h8g3-hx9c, MAL-2025-191129 | Malicious | Not scored | 24 Nov, 2025 | npm ngx-useful-swiper-prosenjit |
Malicious release: Malicious code in luno-api (npm) GHSA-pw4q-vp83-x535, MAL-2025-191126 | Malicious | Not scored | 24 Nov, 2025 | npm luno-api |
Malicious release: Malicious code in piclite (npm) GHSA-m5f9-vqvp-jrvm, MAL-2025-191140 | Malicious | Not scored | 24 Nov, 2025 | npm piclite |
Malicious release: Malicious code in prime-one-table (npm) GHSA-4x76-fxmf-c62v, MAL-2025-190987 | Malicious | Not scored | 24 Nov, 2025 | npm prime-one-table |
Malicious release: Malicious code in prompt-eng (npm) GHSA-hjww-r2g4-w9fh, MAL-2025-190988 | Malicious | Not scored | 24 Nov, 2025 | npm prompt-eng |
Malicious release: Malicious code in next-styled-nprogress (npm) GHSA-8m3r-xr49-5g64, MAL-2025-190981 | Malicious | Not scored | 24 Nov, 2025 | npm next-styled-nprogress |
Malicious release: Malicious code in react-component-taggers (npm) GHSA-7m4r-gqvv-7q3q, MAL-2025-190989 | Malicious | Not scored | 24 Nov, 2025 | npm react-component-taggers |
Malicious release: Malicious code in next-simple-google-analytics (npm) GHSA-4f6w-f258-xf3r, MAL-2025-190980 | Malicious | Not scored | 24 Nov, 2025 | npm next-simple-google-analytics |
Malicious release: Malicious code in react-hook-form-persist (npm) GHSA-r36f-rrrf-m64g, MAL-2025-190990 | Malicious | Not scored | 24 Nov, 2025 | npm react-hook-form-persist |
Malicious release: Malicious code in @posthog/plugin-server (npm) GHSA-2h4r-hgjf-w9wh, MAL-2025-190947 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/plugin-server |
Malicious release: Malicious code in react-jam-icons (npm) GHSA-2wc6-j9v7-35hw, MAL-2025-190991 | Malicious | Not scored | 24 Nov, 2025 | npm react-jam-icons |
Malicious release: Malicious code in react-keycloak-context (npm) GHSA-xvww-f7x6-72vx, MAL-2025-190992 | Malicious | Not scored | 24 Nov, 2025 | npm react-keycloak-context |
Malicious release: Malicious code in next-circular-dependency (npm) GHSA-cvxx-qf3j-v4w3, MAL-2025-190979 | Malicious | Not scored | 24 Nov, 2025 | npm next-circular-dependency |
Malicious release: Malicious code in react-linear-loader (npm) GHSA-9rcr-762f-rfwj, MAL-2025-190993 | Malicious | Not scored | 24 Nov, 2025 | npm react-linear-loader |
Malicious release: Malicious code in react-micromodal.js (npm) GHSA-96h8-wqrc-f85w, MAL-2025-190994 | Malicious | Not scored | 24 Nov, 2025 | npm react-micromodal.js |
Malicious release: Malicious code in nanoreset (npm) GHSA-jhpm-rxq6-p8vc, MAL-2025-190978 | Malicious | Not scored | 24 Nov, 2025 | npm nanoreset |
Malicious release: Malicious code in react-native-datepicker-modal (npm) GHSA-rrvx-p83r-vmr9, MAL-2025-190995 | Malicious | Not scored | 24 Nov, 2025 | npm react-native-datepicker-modal |
Malicious release: Malicious code in n8n-nodes-vercel-ai-sdk (npm) GHSA-f422-9v6v-3mm2, MAL-2025-190977 | Malicious | Not scored | 24 Nov, 2025 | npm n8n-nodes-vercel-ai-sdk |
Malicious release: Malicious code in @posthog/drop-events-on-property-plugin (npm) GHSA-j655-56wr-xx3r, MAL-2025-190946 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/drop-events-on-property-plugin |
Malicious release: Malicious code in react-native-email (npm) GHSA-32m4-hxwx-rh9j, MAL-2025-190996 | Malicious | Not scored | 24 Nov, 2025 | npm react-native-email |
Malicious release: Malicious code in mon-package-react-typescript (npm) GHSA-m6gj-2fm9-896j, MAL-2025-190976 | Malicious | Not scored | 24 Nov, 2025 | npm mon-package-react-typescript |