Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in scgs-capacitor-subscribe (npm) GHSA-762q-h5gh-2w62, MAL-2025-190859 | Malicious | Not scored | 24 Nov, 2025 | npm scgs-capacitor-subscribe |
Malicious release: Malicious code in github-action-for-generator (npm) GHSA-r948-2g4j-wcwx, MAL-2025-190845 | Malicious | Not scored | 24 Nov, 2025 | npm github-action-for-generator |
Malicious release: Malicious code in @strapbuild/react-native-date-time-picker (npm) GHSA-34pr-r6c7-26rw, MAL-2025-190825 | Malicious | Not scored | 24 Nov, 2025 | npm @strapbuild/react-native-date-time-picker |
Malicious release: Malicious code in gate-evm-check-code2 (npm) GHSA-xgp6-vfv2-267j, MAL-2025-190843 | Malicious | Not scored | 24 Nov, 2025 | npm gate-evm-check-code2 |
Malicious release: Malicious code in @quick-start-soft/quick-document-translator (npm) GHSA-wjpv-3759-qmc5, MAL-2025-190819 | Malicious | Not scored | 24 Nov, 2025 | npm @quick-start-soft/quick-document-translator |
Malicious release: Malicious code in lite-serper-mcp-server (npm) GHSA-w7vj-jqhx-2jr7, MAL-2025-190848 | Malicious | Not scored | 24 Nov, 2025 | npm lite-serper-mcp-server |
Malicious release: Malicious code in @asyncapi/edavisualiser (npm) GHSA-573c-q577-rm56, MAL-2025-190798 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/edavisualiser |
Malicious release: Malicious code in @asyncapi/php-template (npm) GHSA-gp65-2rj9-fw97, MAL-2025-190800 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/php-template |
Malicious release: Malicious code in esbuild-plugin-eta (npm) GHSA-hf85-hfqr-63pm, MAL-2025-190840 | Malicious | Not scored | 24 Nov, 2025 | npm esbuild-plugin-eta |
Malicious release: Malicious code in @ensdomains/server-analytics (npm) GHSA-3fjg-x55j-v7fv, MAL-2025-190811 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/server-analytics |
Malicious release: Malicious code in @ensdomains/react-ens-address (npm) GHSA-vj6r-g9qw-frr9, MAL-2025-190809 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/react-ens-address |
Malicious release: Malicious code in zuper-stream (npm) GHSA-f7w4-78r2-578g, MAL-2025-190862 | Malicious | Not scored | 24 Nov, 2025 | npm zuper-stream |
Malicious release: Malicious code in @quick-start-soft/quick-markdown-compose (npm) GHSA-g6gc-fp28-hvm3, MAL-2025-190822 | Malicious | Not scored | 24 Nov, 2025 | npm @quick-start-soft/quick-markdown-compose |
Malicious release: Malicious code in @actbase/react-native-kakao-channel (npm) GHSA-pp99-w7qx-3vrm, MAL-2025-190794 | Malicious | Not scored | 24 Nov, 2025 | npm @actbase/react-native-kakao-channel |
Malicious release: Malicious code in @asyncapi/dotnet-rabbitmq-template (npm) GHSA-5w27-q88q-f5mm, MAL-2025-190797 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/dotnet-rabbitmq-template |
Malicious release: Malicious code in @ensdomains/subdomain-registrar (npm) GHSA-8fxj-7qgm-q65w, MAL-2025-190812 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/subdomain-registrar |
Malicious release: Malicious code in claude-token-updater (npm) GHSA-pxr9-c6pq-g38g, MAL-2025-190837 | Malicious | Not scored | 24 Nov, 2025 | npm claude-token-updater |
Malicious release: Malicious code in evm-checkcode-cli (npm) GHSA-mc99-3j32-7fmh, MAL-2025-190841 | Malicious | Not scored | 24 Nov, 2025 | npm evm-checkcode-cli |
Malicious release: Malicious code in @trigo/atrix-pubsub (npm) GHSA-6fj4-3x5p-5v33, MAL-2025-190828 | Malicious | Not scored | 24 Nov, 2025 | npm @trigo/atrix-pubsub |
Malicious release: Malicious code in @trigo/hapi-auth-signedlink (npm) GHSA-r7h6-h82f-pw8f, MAL-2025-190829 | Malicious | Not scored | 24 Nov, 2025 | npm @trigo/hapi-auth-signedlink |
Malicious release: Malicious code in @strapbuild/react-native-perspective-image-cropper-poojan31 (npm) GHSA-p476-6x8q-2wgq, MAL-2025-190827 | Malicious | Not scored | 24 Nov, 2025 | npm @strapbuild/react-native-perspective-image-cropper-poojan31 |
Malicious release: Malicious code in axios-builder (npm) GHSA-c2p2-wfqm-c359, MAL-2025-190832 | Malicious | Not scored | 24 Nov, 2025 | npm axios-builder |
Malicious release: Malicious code in calc-loan-interest (npm) GHSA-cpq4-j5hc-3hw3, MAL-2025-190834 | Malicious | Not scored | 24 Nov, 2025 | npm calc-loan-interest |
Malicious release: Malicious code in medusa-plugin-announcement (npm) GHSA-q2q9-q3q2-p3f9, MAL-2025-190849 | Malicious | Not scored | 24 Nov, 2025 | npm medusa-plugin-announcement |
Malicious release: Malicious code in @ensdomains/unruggable-gateways (npm) GHSA-g6xr-xj9x-wq24, MAL-2025-190814 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/unruggable-gateways |
Malicious release: Malicious code in open2internet (npm) GHSA-jvr8-3mvh-m887, MAL-2025-190853 | Malicious | Not scored | 24 Nov, 2025 | npm open2internet |
Malicious release: Malicious code in @ensdomains/renewal (npm) GHSA-68rh-g4wj-348g, MAL-2025-190810 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/renewal |
Malicious release: Malicious code in @quick-start-soft/quick-markdown (npm) GHSA-f5p2-8h9p-hw8w, MAL-2025-190821 | Malicious | Not scored | 24 Nov, 2025 | npm @quick-start-soft/quick-markdown |
Malicious release: Malicious code in cpu-instructions (npm) GHSA-hq8x-3j28-4fcx, MAL-2025-190838 | Malicious | Not scored | 24 Nov, 2025 | npm cpu-instructions |
Malicious release: Malicious code in orbit-soap (npm) GHSA-6jhq-hhph-h59v, MAL-2025-190855 | Malicious | Not scored | 24 Nov, 2025 | npm orbit-soap |
Malicious release: Malicious code in @strapbuild/react-native-perspective-image-cropper-2 (npm) GHSA-j4fg-38c8-gw4m, MAL-2025-190826 | Malicious | Not scored | 24 Nov, 2025 | npm @strapbuild/react-native-perspective-image-cropper-2 |
Malicious release: Malicious code in @ensdomains/ui (npm) GHSA-pj7c-59x5-q6vw, MAL-2025-190813 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/ui |
Malicious release: Malicious code in @actbase/react-native-actionsheet (npm) GHSA-jjrv-4rmm-gj4j, MAL-2025-190792 | Malicious | Not scored | 24 Nov, 2025 | npm @actbase/react-native-actionsheet |
Malicious release: Malicious code in @quick-start-soft/quick-git-clean-markdown (npm) GHSA-c7cp-2wjp-3vg9, MAL-2025-190820 | Malicious | Not scored | 24 Nov, 2025 | npm @quick-start-soft/quick-git-clean-markdown |
Malicious release: Malicious code in @actbase/react-native-simple-video (npm) GHSA-qrm3-qmp2-c48g, MAL-2025-190796 | Malicious | Not scored | 24 Nov, 2025 | npm @actbase/react-native-simple-video |
Malicious release: Malicious code in @actbase/react-native-kakao-navi (npm) GHSA-w7cx-96gp-ww7c, MAL-2025-190795 | Malicious | Not scored | 24 Nov, 2025 | npm @actbase/react-native-kakao-navi |
Malicious release: Malicious code in medusa-plugin-zalopay (npm) GHSA-cg3r-9rjv-q8fp, MAL-2025-190851 | Malicious | Not scored | 24 Nov, 2025 | npm medusa-plugin-zalopay |
Malicious release: Malicious code in @quick-start-soft/quick-task-refine (npm) GHSA-c2vq-hfp6-fxxx, MAL-2025-190824 | Malicious | Not scored | 24 Nov, 2025 | npm @quick-start-soft/quick-task-refine |
Malicious release: Malicious code in @kvytech/medusa-plugin-newsletter (npm) GHSA-6chp-f2vh-826p, MAL-2025-190816 | Malicious | Not scored | 24 Nov, 2025 | npm @kvytech/medusa-plugin-newsletter |
Malicious release: Malicious code in @asyncapi/keeper (npm) GHSA-7pwg-fhvr-6h6v, MAL-2025-190799 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/keeper |
Malicious release: Malicious code in zapier-scripts (npm) GHSA-9mg9-5wqh-46qx, MAL-2025-190861 | Malicious | Not scored | 24 Nov, 2025 | npm zapier-scripts |
Malicious release: Malicious code in @ensdomains/mock (npm) GHSA-w28r-89v6-j9w8, MAL-2025-190806 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/mock |
Malicious release: Malicious code in @ensdomains/dnssec-oracle-anchors (npm) GHSA-52rw-wfcc-mwcr, MAL-2025-190804 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/dnssec-oracle-anchors |
Malicious release: Malicious code in @ensdomains/ens-archived-contracts (npm) GHSA-rgj8-7qhv-g7fm, MAL-2025-190805 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/ens-archived-contracts |
Malicious release: Malicious code in @zapier/ai-actions (npm) GHSA-qpwh-h9px-43pw, MAL-2025-190830 | Malicious | Not scored | 24 Nov, 2025 | npm @zapier/ai-actions |
Malicious release: Malicious code in @ensdomains/offchain-resolver-contracts (npm) GHSA-qw8w-c4j7-788x, MAL-2025-190808 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/offchain-resolver-contracts |
Malicious release: Malicious code in @asyncapi/server-api (npm) GHSA-4vf7-5v4w-7358, MAL-2025-190801 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/server-api |
Malicious release: Malicious code in @ensdomains/name-wrapper (npm) GHSA-g92h-2gvg-8pmx, MAL-2025-190807 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/name-wrapper |
Malicious release: Malicious code in create-hardhat3-app (npm) GHSA-9q97-4cxq-xw96, MAL-2025-190839 | Malicious | Not scored | 24 Nov, 2025 | npm create-hardhat3-app |
Malicious release: Malicious code in test-foundry-app (npm) GHSA-pgpr-q3gr-j9hq, MAL-2025-190860 | Malicious | Not scored | 24 Nov, 2025 | npm test-foundry-app |