Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in jan-browser (npm) GHSA-6jqc-mw3x-g53g, MAL-2025-190847 | Malicious | Not scored | 24 Nov, 2025 | npm jan-browser |
Malicious release: Malicious code in go-template (npm) GHSA-6833-ccff-83g5, MAL-2025-190846 | Malicious | Not scored | 24 Nov, 2025 | npm go-template |
Malicious release: Malicious code in @strapbuild/react-native-perspective-image-cropper (npm) GHSA-q9vh-cm3w-668p, MAL-2025-190758 | Malicious | Not scored | 24 Nov, 2025 | npm @strapbuild/react-native-perspective-image-cropper |
Malicious release: Malicious code in manual-billing-system-miniapp-api (npm) GHSA-xvf8-hcj7-3wpp, MAL-2025-190775 | Malicious | Not scored | 24 Nov, 2025 | npm manual-billing-system-miniapp-api |
Malicious release: Malicious code in korea-administrative-area-geo-json-util (npm) GHSA-hcg2-q4w7-7rff, MAL-2025-190774 | Malicious | Not scored | 24 Nov, 2025 | npm korea-administrative-area-geo-json-util |
Malicious release: Malicious code in @actbase/css-to-react-native-transform (npm) GHSA-9qhm-9r8j-hrhc, MAL-2025-190706 | Malicious | Not scored | 24 Nov, 2025 | npm @actbase/css-to-react-native-transform |
Malicious release: Malicious code in @ensdomains/vite-plugin-i18next-loader (npm) GHSA-9g7r-9c2x-w9fj, MAL-2025-190741 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/vite-plugin-i18next-loader |
Malicious release: Malicious code in @actbase/node-server (npm) GHSA-f6v4-qh83-p5x3, MAL-2025-190707 | Malicious | Not scored | 24 Nov, 2025 | npm @actbase/node-server |
Malicious release: Malicious code in @ensdomains/hardhat-toolbox-viem-extended (npm) GHSA-mm56-gm4c-w7f7, MAL-2025-190734 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/hardhat-toolbox-viem-extended |
Malicious release: Malicious code in @actbase/react-native-fast-image (npm) GHSA-jjf5-ggrm-79jq, MAL-2025-190709 | Malicious | Not scored | 24 Nov, 2025 | npm @actbase/react-native-fast-image |
Malicious release: Malicious code in @asyncapi/python-paho-template (npm) GHSA-pw9c-2xp8-8673, MAL-2025-190720 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/python-paho-template |
Malicious release: Malicious code in @asyncapi/go-watermill-template (npm) GHSA-9mx7-r69p-qf3r, MAL-2025-190714 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/go-watermill-template |
Malicious release: Malicious code in @actbase/react-native-less-transformer (npm) GHSA-gr4j-87fv-44gm, MAL-2025-190710 | Malicious | Not scored | 24 Nov, 2025 | npm @actbase/react-native-less-transformer |
Malicious release: Malicious code in @asyncapi/java-template (npm) GHSA-6vm8-wchg-2p9w, MAL-2025-190717 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/java-template |
Malicious release: Malicious code in medusa-plugin-product-reviews-kvy (npm) GHSA-878f-rjv4-9vvx, MAL-2025-190776 | Malicious | Not scored | 24 Nov, 2025 | npm medusa-plugin-product-reviews-kvy |
Malicious release: Malicious code in @aryanhussain/my-angular-lib (npm) GHSA-5q87-h8mq-78q3, MAL-2025-190713 | Malicious | Not scored | 24 Nov, 2025 | npm @aryanhussain/my-angular-lib |
Malicious release: Malicious code in devstart-cli (npm) GHSA-4r7j-94m6-xcmg, MAL-2025-190768 | Malicious | Not scored | 24 Nov, 2025 | npm devstart-cli |
Malicious release: Malicious code in dotnet-template (npm) GHSA-x7qc-cwwv-rj89, MAL-2025-190770 | Malicious | Not scored | 24 Nov, 2025 | npm dotnet-template |
Malicious release: Malicious code in capacitor-plugin-scgssigninwithgoogle (npm) GHSA-j9cw-mx5f-7vpv, MAL-2025-190765 | Malicious | Not scored | 24 Nov, 2025 | npm capacitor-plugin-scgssigninwithgoogle |
Malicious release: Malicious code in @zapier/eslint-plugin-zapier (npm) GHSA-rfrc-w2hh-54fr, MAL-2025-190763 | Malicious | Not scored | 24 Nov, 2025 | npm @zapier/eslint-plugin-zapier |
Malicious release: Malicious code in capacitor-purchase-history (npm) GHSA-6wfp-gm7m-4vcw, MAL-2025-190766 | Malicious | Not scored | 24 Nov, 2025 | npm capacitor-purchase-history |
Malicious release: Malicious code in posthog-plugin-hello-world (npm) GHSA-9mwj-fr6x-j3hg, MAL-2025-190778 | Malicious | Not scored | 24 Nov, 2025 | npm posthog-plugin-hello-world |
Malicious release: Malicious code in @asyncapi/java-spring-cloud-stream-template (npm) GHSA-5m67-23v4-2wgh, MAL-2025-190715 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/java-spring-cloud-stream-template |
Malicious release: Malicious code in esbuild-plugin-httpfile (npm) GHSA-jc9c-xf8q-rwgh, MAL-2025-190771 | Malicious | Not scored | 24 Nov, 2025 | npm esbuild-plugin-httpfile |
Malicious release: Malicious code in @ensdomains/hardhat-chai-matchers-viem (npm) GHSA-h5cf-hh6x-vm87, MAL-2025-190733 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/hardhat-chai-matchers-viem |
Malicious release: Malicious code in @ensdomains/blacklist (npm) GHSA-hmjx-cmm9-gq7m, MAL-2025-190722 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/blacklist |
Malicious release: Malicious code in @ensdomains/test-utils (npm) GHSA-4rx4-rww2-g7g5, MAL-2025-190738 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/test-utils |
Malicious release: Malicious code in @ensdomains/renewal-widget (npm) GHSA-mq34-p89p-8c9h, MAL-2025-190735 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/renewal-widget |
Malicious release: Malicious code in @ensdomains/hackathon-registrar (npm) GHSA-rc28-7mw4-xv48, MAL-2025-190732 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/hackathon-registrar |
Malicious release: Malicious code in zapier-async-storage (npm) GHSA-8w6h-9qgr-pfxv, MAL-2025-190788 | Malicious | Not scored | 24 Nov, 2025 | npm zapier-async-storage |
Malicious release: Malicious code in @ensdomains/ccip-read-router (npm) GHSA-c65g-2923-px5f, MAL-2025-190724 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/ccip-read-router |
Malicious release: Malicious code in @asyncapi/nodejs-template (npm) GHSA-5xww-jhm3-vmv3, MAL-2025-190718 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/nodejs-template |
Malicious release: Malicious code in @ensdomains/thorin (npm) GHSA-qpqq-p6gg-rqp2, MAL-2025-190739 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/thorin |
Malicious release: Malicious code in @zapier/babel-preset-zapier (npm) GHSA-mjx8-3mvh-x856, MAL-2025-190761 | Malicious | Not scored | 24 Nov, 2025 | npm @zapier/babel-preset-zapier |
Malicious release: Malicious code in @ensdomains/dnssecoraclejs (npm) GHSA-2pmv-9vp5-q844, MAL-2025-190728 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/dnssecoraclejs |
Malicious release: Malicious code in redux-router-kit (npm) GHSA-83f2-m5xj-79wx, MAL-2025-190780 | Malicious | Not scored | 24 Nov, 2025 | npm redux-router-kit |
Malicious release: Malicious code in @ensdomains/ens-avatar (npm) GHSA-pmf2-pqw2-xjc3, MAL-2025-190730 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/ens-avatar |
Malicious release: Malicious code in token.js-fork (npm) GHSA-4j79-hf3r-xwv4, MAL-2025-190785 | Malicious | Not scored | 24 Nov, 2025 | npm token.js-fork |
Malicious release: Malicious code in @actbase/react-daum-postcode (npm) GHSA-h89h-8r6f-cvr4, MAL-2025-190708 | Malicious | Not scored | 24 Nov, 2025 | npm @actbase/react-daum-postcode |
Malicious release: Malicious code in @asyncapi/nodejs-ws-template (npm) GHSA-4w37-25mh-3jcc, MAL-2025-190719 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/nodejs-ws-template |
Malicious release: Malicious code in @posthog/agent (npm) GHSA-g483-gc2j-m258, MAL-2025-190748 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/agent |
Malicious release: Malicious code in @posthog/plugin-contrib (npm) GHSA-g7v2-2xxc-c78j, MAL-2025-190751 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/plugin-contrib |
Malicious release: Malicious code in test-hardhat-app (npm) GHSA-x4cm-hhc8-gmxg, MAL-2025-190784 | Malicious | Not scored | 24 Nov, 2025 | npm test-hardhat-app |
Malicious release: Malicious code in zuper-cli (npm) GHSA-8qh6-9jhf-w6fw, MAL-2025-190789 | Malicious | Not scored | 24 Nov, 2025 | npm zuper-cli |
Malicious release: Malicious code in @ensdomains/ens-validation (npm) GHSA-7qf5-372p-99qc, MAL-2025-190731 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/ens-validation |
Malicious release: Malicious code in skills-use (npm) GHSA-vqq7-66xf-8cmr, MAL-2025-190783 | Malicious | Not scored | 24 Nov, 2025 | npm skills-use |
Malicious release: Malicious code in @posthog/piscina (npm) GHSA-v2pm-8g3h-7h3r, MAL-2025-190750 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/piscina |
Malicious release: Malicious code in typeorm-orbit (npm) GHSA-3359-gx7x-7392, MAL-2025-190786 | Malicious | Not scored | 24 Nov, 2025 | npm typeorm-orbit |
Malicious release: Malicious code in orbit-nebula-editor (npm) GHSA-3x7w-5rj2-h2gj, MAL-2025-190777 | Malicious | Not scored | 24 Nov, 2025 | npm orbit-nebula-editor |
Malicious release: Malicious code in @trigo/atrix-elasticsearch (npm) GHSA-q33f-82f4-cfhf, MAL-2025-190759 | Malicious | Not scored | 24 Nov, 2025 | npm @trigo/atrix-elasticsearch |