Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in chai-max (npm) GHSA-cgcm-g6p8-2xxm, MAL-2025-192754 | Malicious | Not scored | 23 Dec, 2025 | npm chai-max |
Malicious release: Malicious code in chai-async-chains (npm) GHSA-r8fq-6pxg-2f6q, MAL-2025-192753 | Malicious | Not scored | 23 Dec, 2025 | npm chai-async-chains |
Malicious release: Malicious code in excluder-mcp (npm) GHSA-gg9p-qcrr-r7fv, MAL-2025-192746 | Malicious | Not scored | 23 Dec, 2025 | npm excluder-mcp |
Malicious release: Malicious code in excluder-mcp-package (npm) GHSA-h43q-7r78-rf73, MAL-2025-192747 | Malicious | Not scored | 23 Dec, 2025 | npm excluder-mcp-package |
Malicious release: Malicious code in rpc-validate (npm) GHSA-xqfj-679p-362j, MAL-2025-192749 | Malicious | Not scored | 23 Dec, 2025 | npm rpc-validate |
Malicious release: Malicious code in lotusbail (npm) GHSA-qmh8-v4jq-m242, MAL-2025-192748 | Malicious | Not scored | 23 Dec, 2025 | npm lotusbail |
Malicious release: Malicious code in @aa-techops-ui/ping-authentication (npm) GHSA-jvg2-gw63-4hq4, MAL-2025-192745 | Malicious | Not scored | 23 Dec, 2025 | npm @aa-techops-ui/ping-authentication |
Malicious release: Malicious code in chai-tests-await (npm) GHSA-g8cf-w8cw-2659, MAL-2025-192742 | Malicious | Not scored | 23 Dec, 2025 | npm chai-tests-await |
Malicious release: Malicious code in dotenv-extend (npm) GHSA-jr68-9xqf-rp8q, MAL-2025-192743 | Malicious | Not scored | 23 Dec, 2025 | npm dotenv-extend |
Malicious release: Malicious code in huangmingming-demo (npm) GHSA-33cf-82vq-86w6, MAL-2025-192744 | Malicious | Not scored | 23 Dec, 2025 | npm huangmingming-demo |
Malicious release: Malicious code in streamixer (npm) GHSA-c5q9-xg8w-2hv3, MAL-2025-192729 | Malicious | Not scored | 23 Dec, 2025 | npm streamixer |
Malicious release: Malicious code in workvivo-chatbot (npm) MAL-2025-192887 | Malicious | Not scored | 23 Dec, 2025 | npm workvivo-chatbot |
Malicious release: Malicious code in workvivo-layout-extension (npm) MAL-2025-192888 | Malicious | Not scored | 23 Dec, 2025 | npm workvivo-layout-extension |
Malicious release: Malicious code in workvivo-anniversary-automation (npm) MAL-2025-192886 | Malicious | Not scored | 23 Dec, 2025 | npm workvivo-anniversary-automation |
Malicious release: Malicious code in wealthbox-marketing (npm) MAL-2025-192885 | Malicious | Not scored | 23 Dec, 2025 | npm wealthbox-marketing |
Malicious release: Malicious code in vite-react-setting (npm) MAL-2025-192884 | Malicious | Not scored | 23 Dec, 2025 | npm vite-react-setting |
Malicious release: Malicious code in varshade-afc (npm) MAL-2025-192883 | Malicious | Not scored | 23 Dec, 2025 | npm varshade-afc |
Malicious release: Malicious code in vapark-boost-v1 (npm) MAL-2025-192882 | Malicious | Not scored | 23 Dec, 2025 | npm vapark-boost-v1 |
Malicious release: Malicious code in typeface-maison-neue (npm) MAL-2025-192881 | Malicious | Not scored | 23 Dec, 2025 | npm typeface-maison-neue |
Malicious release: Malicious code in tierlist (npm) MAL-2025-192880 | Malicious | Not scored | 23 Dec, 2025 | npm tierlist |
Malicious release: Malicious code in tescoutils (npm) MAL-2025-192879 | Malicious | Not scored | 23 Dec, 2025 | npm tescoutils |
Malicious release: Malicious code in teeseest (npm) MAL-2025-192878 | Malicious | Not scored | 23 Dec, 2025 | npm teeseest |
Malicious release: Malicious code in tdm-react (npm) MAL-2025-192877 | Malicious | Not scored | 23 Dec, 2025 | npm tdm-react |
Malicious release: Malicious code in suntik-tiktok (npm) MAL-2025-192876 | Malicious | Not scored | 23 Dec, 2025 | npm suntik-tiktok |
Malicious release: Malicious code in sturdyfetch9 (npm) MAL-2025-192875 | Malicious | Not scored | 23 Dec, 2025 | npm sturdyfetch9 |
Malicious release: Malicious code in sturdyfetch5 (npm) MAL-2025-192874 | Malicious | Not scored | 23 Dec, 2025 | npm sturdyfetch5 |
Malicious release: Malicious code in sturdyfetch4 (npm) MAL-2025-192873 | Malicious | Not scored | 23 Dec, 2025 | npm sturdyfetch4 |
Malicious release: Malicious code in sturdyfetch3 (npm) MAL-2025-192872 | Malicious | Not scored | 23 Dec, 2025 | npm sturdyfetch3 |
Malicious release: Malicious code in sturdyfetch22 (npm) MAL-2025-192871 | Malicious | Not scored | 23 Dec, 2025 | npm sturdyfetch22 |
Malicious release: Malicious code in sturdyfetch21 (npm) MAL-2025-192870 | Malicious | Not scored | 23 Dec, 2025 | npm sturdyfetch21 |
Malicious release: Malicious code in sturdyfetch18 (npm) MAL-2025-192868 | Malicious | Not scored | 23 Dec, 2025 | npm sturdyfetch18 |
Malicious release: Malicious code in sturdyfetch19 (npm) MAL-2025-192869 | Malicious | Not scored | 23 Dec, 2025 | npm sturdyfetch19 |
Malicious release: Malicious code in sturdyfetch17 (npm) MAL-2025-192867 | Malicious | Not scored | 23 Dec, 2025 | npm sturdyfetch17 |
Malicious release: Malicious code in sturdyfetch15 (npm) MAL-2025-192866 | Malicious | Not scored | 23 Dec, 2025 | npm sturdyfetch15 |
Malicious release: Malicious code in streamlinear (npm) MAL-2025-192865 | Malicious | Not scored | 23 Dec, 2025 | npm streamlinear |
Malicious release: Malicious code in stream-chain-xor (npm) MAL-2025-192864 | Malicious | Not scored | 23 Dec, 2025 | npm stream-chain-xor |
Malicious release: Malicious code in smart-parser (npm) MAL-2025-192863, SNYK-JS-SMARTPARSER-14152306 | Malicious | Not scored | 23 Dec, 2025 | npm smart-parser |
Malicious release: Malicious code in session-parse (npm) MAL-2025-192862, SNYK-JS-SESSIONPARSE-14152303 | Malicious | Not scored | 23 Dec, 2025 | npm session-parse |
Malicious release: Malicious code in session-keeper (npm) MAL-2025-192861, SNYK-JS-SESSIONKEEPER-14152301 | Malicious | Not scored | 23 Dec, 2025 | npm session-keeper |
Malicious release: Malicious code in security-testing-research- (npm) MAL-2025-192859 | Malicious | Not scored | 23 Dec, 2025 | npm security-testing-research- |
Malicious release: Malicious code in security-testing-research99 (npm) MAL-2025-192860 | Malicious | Not scored | 23 Dec, 2025 | npm security-testing-research99 |
Malicious release: Malicious code in resethp (npm) MAL-2025-192858 | Malicious | Not scored | 23 Dec, 2025 | npm resethp |
Malicious release: Malicious code in redux-motion (npm) MAL-2025-192857, SNYK-JS-REDUXMOTION-14152297 | Malicious | Not scored | 23 Dec, 2025 | npm redux-motion |
Malicious release: Malicious code in react-resizable-text (npm) MAL-2025-192856, SNYK-JS-REACTRESIZABLETEXT-14152288 | Malicious | Not scored | 23 Dec, 2025 | npm react-resizable-text |
Malicious release: Malicious code in react-flex-tools (npm) MAL-2025-192855, SNYK-JS-REACTFLEXTOOLS-14152285 | Malicious | Not scored | 23 Dec, 2025 | npm react-flex-tools |
Malicious release: Malicious code in react-confetti-enhanced (npm) MAL-2025-192854 | Malicious | Not scored | 23 Dec, 2025 | npm react-confetti-enhanced |
Malicious release: Malicious code in portal-aes (npm) MAL-2025-192853 | Malicious | Not scored | 23 Dec, 2025 | npm portal-aes |
Malicious release: Malicious code in polyfill-corejs2 (npm) MAL-2025-192852 | Malicious | Not scored | 23 Dec, 2025 | npm polyfill-corejs2 |
Malicious release: Malicious code in petco-test (npm) MAL-2025-192851 | Malicious | Not scored | 23 Dec, 2025 | npm petco-test |
Malicious release: Malicious code in pentestlyio-testpackage (npm) MAL-2025-192850 | Malicious | Not scored | 23 Dec, 2025 | npm pentestlyio-testpackage |