Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in @posthog/siphash (npm) GHSA-2jjg-c6pv-mwm3, MAL-2025-190753 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/siphash |
Malicious release: Malicious code in @posthog/rrweb-record (npm) GHSA-m235-pcqr-5x5g, MAL-2025-190752 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/rrweb-record |
Malicious release: Malicious code in @trigo/atrix-soap (npm) GHSA-7w9p-rp5w-5vg2, MAL-2025-190760 | Malicious | Not scored | 24 Nov, 2025 | npm @trigo/atrix-soap |
Malicious release: Malicious code in eslint-config-zeallat-base (npm) GHSA-f67v-pxvp-9p9v, MAL-2025-190772 | Malicious | Not scored | 24 Nov, 2025 | npm eslint-config-zeallat-base |
Malicious release: Malicious code in @asyncapi/java-spring-template (npm) GHSA-6w4j-664j-g45g, MAL-2025-190716 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/java-spring-template |
Malicious release: Malicious code in iron-shield-miniapp (npm) GHSA-ghrh-qj3w-c6jg, MAL-2025-190773 | Malicious | Not scored | 24 Nov, 2025 | npm iron-shield-miniapp |
Malicious release: Malicious code in create-glee-app (npm) GHSA-35m6-8262-m64p, MAL-2025-190767 | Malicious | Not scored | 24 Nov, 2025 | npm create-glee-app |
Malicious release: Malicious code in @seung-ju/next (npm) GHSA-5xr2-q36p-35p4, MAL-2025-190755 | Malicious | Not scored | 24 Nov, 2025 | npm @seung-ju/next |
Malicious release: Malicious code in @actbase/react-native-tiktok (npm) GHSA-47vw-pwr5-fvr4, MAL-2025-190712 | Malicious | Not scored | 24 Nov, 2025 | npm @actbase/react-native-tiktok |
Malicious release: Malicious code in discord-bot-server (npm) GHSA-qj8r-w8vx-qhhq, MAL-2025-190769 | Malicious | Not scored | 24 Nov, 2025 | npm discord-bot-server |
Malicious release: Malicious code in @seung-ju/openapi-generator (npm) GHSA-gqp2-h6rv-5h94, MAL-2025-190756 | Malicious | Not scored | 24 Nov, 2025 | npm @seung-ju/openapi-generator |
Malicious release: Malicious code in react-native-use-modal (npm) GHSA-w34q-vp4x-hhwf, MAL-2025-190779 | Malicious | Not scored | 24 Nov, 2025 | npm react-native-use-modal |
Malicious release: Malicious code in @seung-ju/react-hooks (npm) GHSA-9xrj-x664-6rgw, MAL-2025-190757 | Malicious | Not scored | 24 Nov, 2025 | npm @seung-ju/react-hooks |
Malicious release: Malicious code in @actbase/react-native-naver-login (npm) GHSA-5hx4-5j88-fjrw, MAL-2025-190711 | Malicious | Not scored | 24 Nov, 2025 | npm @actbase/react-native-naver-login |
Malicious release: Malicious code in @zapier/browserslist-config-zapier (npm) GHSA-x7fh-q8wq-96rx, MAL-2025-190762 | Malicious | Not scored | 24 Nov, 2025 | npm @zapier/browserslist-config-zapier |
Malicious release: Malicious code in @kvytech/medusa-plugin-announcement (npm) GHSA-53mv-xhh4-47h8, MAL-2025-190744 | Malicious | Not scored | 24 Nov, 2025 | npm @kvytech/medusa-plugin-announcement |
Malicious release: Malicious code in @kvytech/components (npm) GHSA-g8xr-cv65-xx89, MAL-2025-190743 | Malicious | Not scored | 24 Nov, 2025 | npm @kvytech/components |
Malicious release: Malicious code in @posthog/nuxt (npm) GHSA-mj3m-hmc6-gmpv, MAL-2025-190749 | Malicious | Not scored | 24 Nov, 2025 | npm @posthog/nuxt |
Malicious release: Malicious code in @asyncapi/web-component (npm) GHSA-v6g6-vg2x-pc27, MAL-2025-190721 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/web-component |
Malicious release: Malicious code in @kvytech/cli (npm) GHSA-99f7-r4pg-4vx5, MAL-2025-190742 | Malicious | Not scored | 24 Nov, 2025 | npm @kvytech/cli |
Malicious release: Malicious code in @ensdomains/solsha1 (npm) GHSA-6x6m-m74g-c89p, MAL-2025-190737 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/solsha1 |
Malicious release: Malicious code in @kvytech/medusa-plugin-management (npm) GHSA-9299-g7fr-hxx9, MAL-2025-190745 | Malicious | Not scored | 24 Nov, 2025 | npm @kvytech/medusa-plugin-management |
Malicious release: Malicious code in @kvytech/medusa-plugin-product-reviews (npm) GHSA-qjqx-mr3f-4f4v, MAL-2025-190746 | Malicious | Not scored | 24 Nov, 2025 | npm @kvytech/medusa-plugin-product-reviews |
Malicious release: Malicious code in @kvytech/web (npm) GHSA-m5r3-j4x6-hfm9, MAL-2025-190747 | Malicious | Not scored | 24 Nov, 2025 | npm @kvytech/web |
Malicious release: Malicious code in scgsffcreator (npm) GHSA-p42c-2fh4-7782, MAL-2025-190781 | Malicious | Not scored | 24 Nov, 2025 | npm scgsffcreator |
Malicious release: Malicious code in vite-plugin-httpfile (npm) GHSA-7635-24fh-8hqw, MAL-2025-190787 | Malicious | Not scored | 24 Nov, 2025 | npm vite-plugin-httpfile |
Malicious release: Malicious code in @ensdomains/curvearithmetics (npm) GHSA-x7jj-9j59-3wx8, MAL-2025-190726 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/curvearithmetics |
Malicious release: Malicious code in @ensdomains/dnsprovejs (npm) GHSA-rg64-7w6m-qmxj, MAL-2025-190727 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/dnsprovejs |
Malicious release: Malicious code in @ensdomains/reverse-records (npm) GHSA-c9jr-gjfx-46q8, MAL-2025-190736 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/reverse-records |
Malicious release: Malicious code in @ensdomains/ccip-read-dns-gateway (npm) GHSA-6cfc-2662-6wqr, MAL-2025-190723 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/ccip-read-dns-gateway |
Malicious release: Malicious code in @ensdomains/unicode-confusables (npm) GHSA-6459-r5c7-44m9, MAL-2025-190740 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/unicode-confusables |
Malicious release: Malicious code in @ensdomains/durin-middleware (npm) GHSA-337m-mwhq-f3v7, MAL-2025-190729 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/durin-middleware |
Malicious release: Malicious code in @ensdomains/ccip-read-worker-viem (npm) GHSA-g8cp-w9cm-p948, MAL-2025-190725 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/ccip-read-worker-viem |
Malicious release: Malicious code in atrix (npm) GHSA-67rf-m6p8-54xh, MAL-2025-190764 | Malicious | Not scored | 24 Nov, 2025 | npm atrix |
Malicious release: Malicious code in @postman/node-keytar (npm) GHSA-wwwq-xpmw-9m2m, MAL-2025-190754 | Malicious | Not scored | 24 Nov, 2025 | npm @postman/node-keytar |
Malicious release: Malicious code in @asyncapi/markdown-template (npm) GHSA-pjvx-43wx-wphw, MAL-2025-190659 | Malicious | Not scored | 24 Nov, 2025 | npm @asyncapi/markdown-template |
Malicious release: Malicious code in exact-ticker (npm) GHSA-2694-2hhp-543w, MAL-2025-190697 | Malicious | Not scored | 24 Nov, 2025 | npm exact-ticker |
Malicious release: Malicious code in @orbitgtbelgium/orbit-components (npm) GHSA-vfcv-7f9v-4xqw, MAL-2025-190669 | Malicious | Not scored | 24 Nov, 2025 | npm @orbitgtbelgium/orbit-components |
Malicious release: Malicious code in react-library-setup (npm) GHSA-p9fr-w89h-x99v, MAL-2025-190700 | Malicious | Not scored | 24 Nov, 2025 | npm react-library-setup |
Malicious release: Malicious code in @orbitgtbelgium/mapbox-gl-draw-scale-rotate-mode (npm) GHSA-947q-3c48-844q, MAL-2025-190668 | Malicious | Not scored | 24 Nov, 2025 | npm @orbitgtbelgium/mapbox-gl-draw-scale-rotate-mode |
Malicious release: Malicious code in @ensdomains/eth-ens-namehash (npm) GHSA-p274-4jv4-6mpx, MAL-2025-190667 | Malicious | Not scored | 24 Nov, 2025 | npm @ensdomains/eth-ens-namehash |
Malicious release: Malicious code in orbit-nebula-draw-tools (npm) GHSA-h6w3-v7r5-j9gg, MAL-2025-190698 | Malicious | Not scored | 24 Nov, 2025 | npm orbit-nebula-draw-tools |
Malicious release: Malicious code in @orbitgtbelgium/time-slider (npm) GHSA-wgfm-v7jm-pc87, MAL-2025-190670 | Malicious | Not scored | 24 Nov, 2025 | npm @orbitgtbelgium/time-slider |
Malicious release: Malicious code in react-element-prompt-inspector (npm) GHSA-2f6g-x664-gcwj, MAL-2025-190699 | Malicious | Not scored | 24 Nov, 2025 | npm react-element-prompt-inspector |
Malicious release: Malicious code in @trigo/pathfinder-ui-css (npm) GHSA-g3xx-r9mq-8vwj, MAL-2025-190689 | Malicious | Not scored | 24 Nov, 2025 | npm @trigo/pathfinder-ui-css |
Malicious release: Malicious code in eslint-config-trigo (npm) GHSA-c6m7-g9xj-wvpp, MAL-2025-190695 | Malicious | Not scored | 24 Nov, 2025 | npm eslint-config-trigo |
Malicious release: Malicious code in @trigo/fsm (npm) GHSA-q593-cpvq-4j3w, MAL-2025-190685 | Malicious | Not scored | 24 Nov, 2025 | npm @trigo/fsm |
Malicious release: Malicious code in @trigo/atrix (npm) GHSA-gp55-5fcm-xvp9, MAL-2025-190677 | Malicious | Not scored | 24 Nov, 2025 | npm @trigo/atrix |
Malicious release: Malicious code in @trigo/atrix-postgres (npm) GHSA-2mvw-652j-m3cc, MAL-2025-190681 | Malicious | Not scored | 24 Nov, 2025 | npm @trigo/atrix-postgres |
Malicious release: Malicious code in trigo-react-app (npm) GHSA-gr3j-396j-pcc4, MAL-2025-190702 | Malicious | Not scored | 24 Nov, 2025 | npm trigo-react-app |