Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in dotjsenv (npm) GHSA-63qm-964q-w2w5, MAL-2025-192755 | Malicious | Not scored | 23 Dec, 2025 | npm dotjsenv |
Malicious release: Malicious code in qxytest1 (npm) GHSA-cw4m-2fcc-rpc5, MAL-2025-192757 | Malicious | Not scored | 23 Dec, 2025 | npm qxytest1 |
Malicious release: Malicious code in qxytest (npm) GHSA-hvqc-82p3-6gpf, MAL-2025-192756 | Malicious | Not scored | 23 Dec, 2025 | npm qxytest |
Malicious release: Malicious code in start-log-plugin (npm) GHSA-qc6r-xf7q-j45q, MAL-2025-192759 | Malicious | Not scored | 23 Dec, 2025 | npm start-log-plugin |
Malicious release: Malicious code in start-log-backend (npm) GHSA-qqfh-xwc2-gx36, MAL-2025-192758 | Malicious | Not scored | 23 Dec, 2025 | npm start-log-backend |
Malicious release: Malicious code in trial-guard (npm) GHSA-vjg7-9cf4-mpp8, MAL-2025-192764 | Malicious | Not scored | 23 Dec, 2025 | npm trial-guard |
Malicious release: Malicious code in chai-max (npm) GHSA-cgcm-g6p8-2xxm, MAL-2025-192754 | Malicious | Not scored | 23 Dec, 2025 | npm chai-max |
Malicious release: Malicious code in chai-async-chains (npm) GHSA-r8fq-6pxg-2f6q, MAL-2025-192753 | Malicious | Not scored | 23 Dec, 2025 | npm chai-async-chains |
Malicious release: Malicious code in excluder-mcp (npm) GHSA-gg9p-qcrr-r7fv, MAL-2025-192746 | Malicious | Not scored | 23 Dec, 2025 | npm excluder-mcp |
Malicious release: Malicious code in excluder-mcp-package (npm) GHSA-h43q-7r78-rf73, MAL-2025-192747 | Malicious | Not scored | 23 Dec, 2025 | npm excluder-mcp-package |
Malicious release: Malicious code in rpc-validate (npm) GHSA-xqfj-679p-362j, MAL-2025-192749 | Malicious | Not scored | 23 Dec, 2025 | npm rpc-validate |
Malicious release: Malicious code in lotusbail (npm) GHSA-qmh8-v4jq-m242, MAL-2025-192748 | Malicious | Not scored | 23 Dec, 2025 | npm lotusbail |
Malicious release: Malicious code in @aa-techops-ui/ping-authentication (npm) GHSA-jvg2-gw63-4hq4, MAL-2025-192745 | Malicious | Not scored | 23 Dec, 2025 | npm @aa-techops-ui/ping-authentication |
Malicious release: Malicious code in chai-tests-await (npm) GHSA-g8cf-w8cw-2659, MAL-2025-192742 | Malicious | Not scored | 23 Dec, 2025 | npm chai-tests-await |
Malicious release: Malicious code in dotenv-extend (npm) GHSA-jr68-9xqf-rp8q, MAL-2025-192743 | Malicious | Not scored | 23 Dec, 2025 | npm dotenv-extend |
Malicious release: Malicious code in huangmingming-demo (npm) GHSA-33cf-82vq-86w6, MAL-2025-192744 | Malicious | Not scored | 23 Dec, 2025 | npm huangmingming-demo |
Malicious release: Malicious code in streamixer (npm) GHSA-c5q9-xg8w-2hv3, MAL-2025-192729 | Malicious | Not scored | 23 Dec, 2025 | npm streamixer |
Malicious release: Malicious code in verificator (RubyGems) GHSA-7rh7-qcx5-r482, MAL-2025-192925 | Malicious | Not scored | 23 Dec, 2025 | RubyGems verificator |
Malicious release: Malicious code in u2f_client (RubyGems) GHSA-2xmq-87m8-w8jv, MAL-2025-192924 | Malicious | Not scored | 23 Dec, 2025 | RubyGems u2f_client |
Malicious release: Malicious code in test_gem_978483406ebb19126a2e8c001649a4eb (RubyGems) GHSA-39r9-2gm5-5wx7, MAL-2025-192923 | Malicious | Not scored | 23 Dec, 2025 | RubyGems test_gem_978483406ebb19126a2e8c001649a4eb |
Malicious release: Malicious code in stripe-server (RubyGems) GHSA-whq7-q96m-x8jh, MAL-2025-192922 | Malicious | Not scored | 23 Dec, 2025 | RubyGems stripe-server |
Malicious release: Malicious code in stripe-rubocop (RubyGems) GHSA-f97f-9jmh-gcv2, MAL-2025-192921 | Malicious | Not scored | 23 Dec, 2025 | RubyGems stripe-rubocop |
Malicious release: Malicious code in sq-samsa (RubyGems) GHSA-69j9-f8qf-87xw, MAL-2025-192919 | Malicious | Not scored | 23 Dec, 2025 | RubyGems sq-samsa |
Malicious release: Malicious code in stripe-backup (RubyGems) GHSA-f6vm-pcj3-pp9g, MAL-2025-192920 | Malicious | Not scored | 23 Dec, 2025 | RubyGems stripe-backup |
Malicious release: Malicious code in space-commander (RubyGems) GHSA-c64m-6q6c-x7m5, MAL-2025-192917 | Malicious | Not scored | 23 Dec, 2025 | RubyGems space-commander |
Malicious release: Malicious code in sq-mdc (RubyGems) GHSA-h6jf-262m-h7cg, MAL-2025-192918 | Malicious | Not scored | 23 Dec, 2025 | RubyGems sq-mdc |
Malicious release: Malicious code in redis_connectable (RubyGems) GHSA-jcpm-3wq9-c6g9, MAL-2025-192916 | Malicious | Not scored | 23 Dec, 2025 | RubyGems redis_connectable |
Malicious release: Malicious code in rails-structured-logging (RubyGems) GHSA-4j8p-mfc7-qrrj, MAL-2025-192915 | Malicious | Not scored | 23 Dec, 2025 | RubyGems rails-structured-logging |
Malicious release: Malicious code in queenbee-plugin (RubyGems) GHSA-v7j5-ccf7-5prj, MAL-2025-192914 | Malicious | Not scored | 23 Dec, 2025 | RubyGems queenbee-plugin |
Malicious release: Malicious code in prometheus_gcstat (RubyGems) GHSA-72qc-7wh3-cmf2, MAL-2025-192913 | Malicious | Not scored | 23 Dec, 2025 | RubyGems prometheus_gcstat |
Malicious release: Malicious code in prometheus_client_ruby (RubyGems) GHSA-4p5q-r9hj-2qwq, MAL-2025-192912 | Malicious | Not scored | 23 Dec, 2025 | RubyGems prometheus_client_ruby |
Malicious release: Malicious code in lanchain-openai (PyPI) MAL-2025-192699 | Malicious | Not scored | 23 Dec, 2025 | PyPI lanchain-openai |
Malicious release: Malicious code in md_confluence (RubyGems) GHSA-p7p5-wq77-5m4p, MAL-2025-192911 | Malicious | Not scored | 23 Dec, 2025 | RubyGems md_confluence |
Malicious release: Malicious code in macklemore (RubyGems) GHSA-v2fc-fvqh-vg8c, MAL-2025-192910 | Malicious | Not scored | 23 Dec, 2025 | RubyGems macklemore |
Malicious release: Malicious code in html_scrubber (RubyGems) GHSA-5j53-gxh6-wvx8, MAL-2025-192909 | Malicious | Not scored | 23 Dec, 2025 | RubyGems html_scrubber |
Malicious release: Malicious code in hola_rreichel3github (RubyGems) GHSA-pwhf-jhrv-rp5h, MAL-2025-192908 | Malicious | Not scored | 23 Dec, 2025 | RubyGems hola_rreichel3github |
Malicious release: Malicious code in haybales (RubyGems) GHSA-r2cm-m2p4-r229, MAL-2025-192906 | Malicious | Not scored | 23 Dec, 2025 | RubyGems haybales |
Malicious release: Malicious code in hockeystick (RubyGems) GHSA-vr9g-rx8r-fv3f, MAL-2025-192907 | Malicious | Not scored | 23 Dec, 2025 | RubyGems hockeystick |
Malicious release: Malicious code in critter (RubyGems) GHSA-f93c-chq5-5xvv, MAL-2025-192905 | Malicious | Not scored | 23 Dec, 2025 | RubyGems critter |
Malicious release: Malicious code in cocoapod (RubyGems) GHSA-8w8q-j2qm-8gfp, MAL-2025-192904 | Malicious | Not scored | 23 Dec, 2025 | RubyGems cocoapod |
Malicious release: Malicious code in chalk-thrift (RubyGems) GHSA-wpx5-rqqc-wwpq, MAL-2025-192903 | Malicious | Not scored | 23 Dec, 2025 | RubyGems chalk-thrift |
Malicious release: Malicious code in chalk-service (RubyGems) GHSA-mmrp-j38f-6pvw, MAL-2025-192902 | Malicious | Not scored | 23 Dec, 2025 | RubyGems chalk-service |
Malicious release: Malicious code in chalk-hostname (RubyGems) GHSA-cfqc-qhv4-7w9q, MAL-2025-192899 | Malicious | Not scored | 23 Dec, 2025 | RubyGems chalk-hostname |
Malicious release: Malicious code in chalk-interface (RubyGems) GHSA-g98x-9jhj-3j9h, MAL-2025-192900 | Malicious | Not scored | 23 Dec, 2025 | RubyGems chalk-interface |
Malicious release: Malicious code in chalk-sentry (RubyGems) GHSA-hj29-rphg-wm74, MAL-2025-192901 | Malicious | Not scored | 23 Dec, 2025 | RubyGems chalk-sentry |
Malicious release: Malicious code in chalk-henson (RubyGems) GHSA-v867-6gqg-f76m, MAL-2025-192898 | Malicious | Not scored | 23 Dec, 2025 | RubyGems chalk-henson |
Malicious release: Malicious code in chalk-consul (RubyGems) GHSA-xm5g-gqcf-3fh8, MAL-2025-192897 | Malicious | Not scored | 23 Dec, 2025 | RubyGems chalk-consul |
Malicious release: Malicious code in chalk-cli (RubyGems) GHSA-4p78-xfgj-hmqm, MAL-2025-192896 | Malicious | Not scored | 23 Dec, 2025 | RubyGems chalk-cli |
Malicious release: Malicious code in chalk-aws (RubyGems) GHSA-3c36-fj22-cjxw, MAL-2025-192895 | Malicious | Not scored | 23 Dec, 2025 | RubyGems chalk-aws |
Malicious release: Malicious code in activestorage-redundancy (RubyGems) GHSA-hhwf-9gc7-jxcj, MAL-2025-192894 | Malicious | Not scored | 23 Dec, 2025 | RubyGems activestorage-redundancy |