Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in nanoreset (npm) GHSA-jhpm-rxq6-p8vc, MAL-2025-190978 | Malicious | Not scored | 24 Nov, 2025 | npm nanoreset |
Malicious release: Malicious code in react-native-datepicker-modal (npm) GHSA-rrvx-p83r-vmr9, MAL-2025-190995 | Malicious | Not scored | 24 Nov, 2025 | npm react-native-datepicker-modal |
Malicious release: Malicious code in n8n-nodes-vercel-ai-sdk (npm) GHSA-f422-9v6v-3mm2, MAL-2025-190977 | Malicious | Not scored | 24 Nov, 2025 | npm n8n-nodes-vercel-ai-sdk |
Malicious release: Malicious code in @posthog/drop-events-on-property-plugin (npm) GHSA-j655-56wr-xx3r, MAL-2025-190946 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/drop-events-on-property-plugin |
Malicious release: Malicious code in react-native-email (npm) GHSA-32m4-hxwx-rh9j, MAL-2025-190996 | Malicious | Not scored | 24 Nov, 2025 | npm react-native-email |
Malicious release: Malicious code in mon-package-react-typescript (npm) GHSA-m6gj-2fm9-896j, MAL-2025-190976 | Malicious | Not scored | 24 Nov, 2025 | npm mon-package-react-typescript |
Malicious release: Malicious code in react-native-fetch (npm) GHSA-887c-pvp7-c2fw, MAL-2025-190997 | Malicious | Not scored | 24 Nov, 2025 | npm react-native-fetch |
Malicious release: Malicious code in react-native-get-pixel-dimensions (npm) GHSA-pc7r-3qqx-jjrv, MAL-2025-190998 | Malicious | Not scored | 24 Nov, 2025 | npm react-native-get-pixel-dimensions |
Malicious release: Malicious code in react-native-google-maps-directions (npm) GHSA-cq73-ffwg-8vpj, MAL-2025-190999 | Malicious | Not scored | 24 Nov, 2025 | npm react-native-google-maps-directions |
Malicious release: Malicious code in @posthog/clickhouse (npm) GHSA-h33f-hhfm-c5wv, MAL-2025-190945 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/clickhouse |
Malicious release: Malicious code in mod10-check-digit (npm) GHSA-3qrx-wr7w-8gcm, MAL-2025-190975 | Malicious | Not scored | 24 Nov, 2025 | npm mod10-check-digit |
Malicious release: Malicious code in react-native-modest-checkbox (npm) GHSA-9xp5-c3gg-w93r, MAL-2025-191001 | Malicious | Not scored | 24 Nov, 2025 | npm react-native-modest-checkbox |
Malicious release: Malicious code in react-native-modest-storage (npm) GHSA-jf26-rx5x-g3r3, MAL-2025-191002 | Malicious | Not scored | 24 Nov, 2025 | npm react-native-modest-storage |
Malicious release: Malicious code in react-native-log-level (npm) GHSA-3pcc-7gj8-5h47, MAL-2025-191000 | Malicious | Not scored | 24 Nov, 2025 | npm react-native-log-level |
Malicious release: Malicious code in react-native-phone-call (npm) GHSA-5wc3-6r84-xf8m, MAL-2025-191003 | Malicious | Not scored | 24 Nov, 2025 | npm react-native-phone-call |
Malicious release: Malicious code in react-native-retriable-fetch (npm) GHSA-6vjr-pfj7-c95r, MAL-2025-191004 | Malicious | Not scored | 24 Nov, 2025 | npm react-native-retriable-fetch |
Malicious release: Malicious code in react-native-view-finder (npm) GHSA-g7w8-gjr6-w2j7, MAL-2025-191005 | Malicious | Not scored | 24 Nov, 2025 | npm react-native-view-finder |
Malicious release: Malicious code in react-native-websocket (npm) GHSA-mjmr-345m-q4j2, MAL-2025-191006 | Malicious | Not scored | 24 Nov, 2025 | npm react-native-websocket |
Malicious release: Malicious code in react-qr-image (npm) GHSA-2f7q-xhmg-345j, MAL-2025-191007 | Malicious | Not scored | 24 Nov, 2025 | npm react-qr-image |
Malicious release: Malicious code in jacob-zuma (npm) GHSA-7cqw-82xh-p6qp, MAL-2025-190974 | Malicious | Not scored | 24 Nov, 2025 | npm jacob-zuma |
Malicious release: Malicious code in itobuz-angular-button (npm) GHSA-vhcq-fc6c-hqx4, MAL-2025-190973 | Malicious | Not scored | 24 Nov, 2025 | npm itobuz-angular-button |
Malicious release: Malicious code in itobuz-angular-auth (npm) GHSA-6c53-64xr-m4p9, MAL-2025-190972 | Malicious | Not scored | 24 Nov, 2025 | npm itobuz-angular-auth |
Malicious release: Malicious code in itobuz-angular (npm) GHSA-fchc-834c-jcv5, MAL-2025-190971 | Malicious | Not scored | 24 Nov, 2025 | npm itobuz-angular |
Malicious release: Malicious code in ito-button (npm) GHSA-52jx-7qwg-x7q4, MAL-2025-190970 | Malicious | Not scored | 24 Nov, 2025 | npm ito-button |
Malicious release: Malicious code in invo (npm) GHSA-qpx2-q62m-74q7, MAL-2025-190969 | Malicious | Not scored | 24 Nov, 2025 | npm invo |
Malicious release: Malicious code in image-to-uri (npm) GHSA-g4f7-4w33-8wv7, MAL-2025-190968 | Malicious | Not scored | 24 Nov, 2025 | npm image-to-uri |
Malicious release: Malicious code in hyperterm-hipster (npm) GHSA-27x7-vhhh-g7q8, MAL-2025-190967 | Malicious | Not scored | 24 Nov, 2025 | npm hyperterm-hipster |
Malicious release: Malicious code in httpness (npm) GHSA-8vhw-p3h4-5g3v, MAL-2025-190966 | Malicious | Not scored | 24 Nov, 2025 | npm httpness |
Malicious release: Malicious code in hover-design-prototype (npm) GHSA-qv6c-x8r4-46ff, MAL-2025-190965 | Malicious | Not scored | 24 Nov, 2025 | npm hover-design-prototype |
Malicious release: Malicious code in hopedraw (npm) GHSA-x432-g43r-56x8, MAL-2025-190964 | Malicious | Not scored | 24 Nov, 2025 | npm hopedraw |
Malicious release: Malicious code in hope-mapboxdraw (npm) GHSA-x6p5-q554-49mq, MAL-2025-190963 | Malicious | Not scored | 24 Nov, 2025 | npm hope-mapboxdraw |
Malicious release: Malicious code in haufe-axera-api-client (npm) GHSA-6ph8-544h-3q6p, MAL-2025-190962 | Malicious | Not scored | 24 Nov, 2025 | npm haufe-axera-api-client |
Sentry's sensitive headers are leaked when `sendDefaultPii` is set to `true` CVE-2025-65944, GHSA-6465-jgvq-jhgp | Medium | 0.4% | 24 Nov, 2025 | npm @sentry/astro npm @sentry/aws-serverless npm @sentry/bun npm @sentry/google-cloud-serverless +8 more |
Malicious release: Malicious code in pico-uid (npm) GHSA-8wv5-pgf3-6fwf, MAL-2025-190986 | Malicious | Not scored | 24 Nov, 2025 | npm pico-uid |
Malicious release: Malicious code in pdf-annotation (npm) GHSA-5r9h-vrq7-h3vr, MAL-2025-190985 | Malicious | Not scored | 24 Nov, 2025 | npm pdf-annotation |
Malicious release: Malicious code in parcel-plugin-asset-copier (npm) GHSA-48jp-f8c9-6wqq, MAL-2025-190984 | Malicious | Not scored | 24 Nov, 2025 | npm parcel-plugin-asset-copier |
Malicious release: Malicious code in package-tester (npm) GHSA-3vw7-p3qq-2fx6, MAL-2025-190983 | Malicious | Not scored | 24 Nov, 2025 | npm package-tester |
Malicious release: Malicious code in orchestrix (npm) GHSA-3x79-5xrq-p9wh, MAL-2025-190982 | Malicious | Not scored | 24 Nov, 2025 | npm orchestrix |
Malicious release: Malicious code in expressos (npm) GHSA-p3w8-q8jq-wf9v, MAL-2025-190961 | Malicious | Not scored | 24 Nov, 2025 | npm expressos |
Malicious release: Malicious code in eslint-config-nitpicky (npm) GHSA-x4pj-7345-wvrc, MAL-2025-190960 | Malicious | Not scored | 24 Nov, 2025 | npm eslint-config-nitpicky |
Malicious release: Malicious code in enforce-branch-name (npm) GHSA-hwm2-qqc6-37g2, MAL-2025-190959 | Malicious | Not scored | 24 Nov, 2025 | npm enforce-branch-name |
Malicious release: Malicious code in email-deliverability-tester (npm) GHSA-29rw-64fm-h282, MAL-2025-190958 | Malicious | Not scored | 24 Nov, 2025 | npm email-deliverability-tester |
Malicious release: Malicious code in dont-go (npm) GHSA-84rh-wv6h-wp3f, MAL-2025-190957 | Malicious | Not scored | 24 Nov, 2025 | npm dont-go |
Malicious release: Malicious code in docusaurus-plugin-vanilla-extract (npm) GHSA-2cxc-854w-7972, MAL-2025-190956 | Malicious | Not scored | 24 Nov, 2025 | npm docusaurus-plugin-vanilla-extract |
Malicious release: Malicious code in designstudiouiux (npm) GHSA-4cm9-fpp9-mjwx, MAL-2025-190955 | Malicious | Not scored | 24 Nov, 2025 | npm designstudiouiux |
Malicious release: Malicious code in dashboard-empty-state (npm) GHSA-c43q-4447-wm7m, MAL-2025-190954 | Malicious | Not scored | 24 Nov, 2025 | npm dashboard-empty-state |
Malicious release: Malicious code in css-dedoupe (npm) GHSA-h8jx-j7rf-fjhh, MAL-2025-190953 | Malicious | Not scored | 24 Nov, 2025 | npm css-dedoupe |
Malicious release: Malicious code in count-it-down (npm) GHSA-xh3p-r6cx-g8hv, MAL-2025-190952 | Malicious | Not scored | 24 Nov, 2025 | npm count-it-down |
Malicious release: Malicious code in composite-reducer (npm) GHSA-grg7-759x-5638, MAL-2025-190951 | Malicious | Not scored | 24 Nov, 2025 | npm composite-reducer |
Malicious release: Malicious code in compare-obj (npm) GHSA-fmgq-4crf-7q98, MAL-2025-190950 | Malicious | Not scored | 24 Nov, 2025 | npm compare-obj |