Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in oneday-worm-research (npm) MAL-2025-192849 | Malicious | Not scored | 23 Dec, 2025 | npm oneday-worm-research |
Malicious release: Malicious code in nokaca (npm) MAL-2025-192848 | Malicious | Not scored | 23 Dec, 2025 | npm nokaca |
Malicious release: Malicious code in node-calculator-x7k9-evil (npm) MAL-2025-192846 | Malicious | Not scored | 23 Dec, 2025 | npm node-calculator-x7k9-evil |
Malicious release: Malicious code in node-calculator-x7k9-grabber (npm) MAL-2025-192847 | Malicious | Not scored | 23 Dec, 2025 | npm node-calculator-x7k9-grabber |
Malicious release: Malicious code in node-calculator-fe54 (npm) MAL-2025-192845 | Malicious | Not scored | 23 Dec, 2025 | npm node-calculator-fe54 |
Malicious release: Malicious code in node-calculator-f483 (npm) MAL-2025-192844 | Malicious | Not scored | 23 Dec, 2025 | npm node-calculator-f483 |
Malicious release: Malicious code in node-calculator-f2af (npm) MAL-2025-192843 | Malicious | Not scored | 23 Dec, 2025 | npm node-calculator-f2af |
Malicious release: Malicious code in node-calculator-e776 (npm) MAL-2025-192842 | Malicious | Not scored | 23 Dec, 2025 | npm node-calculator-e776 |
Malicious release: Malicious code in node-calculator-dfd9 (npm) MAL-2025-192841 | Malicious | Not scored | 23 Dec, 2025 | npm node-calculator-dfd9 |
Malicious release: Malicious code in node-calculator-bde6 (npm) MAL-2025-192840 | Malicious | Not scored | 23 Dec, 2025 | npm node-calculator-bde6 |
Malicious release: Malicious code in node-calculator-ad83 (npm) MAL-2025-192839 | Malicious | Not scored | 23 Dec, 2025 | npm node-calculator-ad83 |
Malicious release: Malicious code in node-calculator-ab44 (npm) MAL-2025-192838 | Malicious | Not scored | 23 Dec, 2025 | npm node-calculator-ab44 |
Malicious release: Malicious code in node-calculator-a34e (npm) MAL-2025-192837 | Malicious | Not scored | 23 Dec, 2025 | npm node-calculator-a34e |
Malicious release: Malicious code in node-calculator-98ba (npm) MAL-2025-192836 | Malicious | Not scored | 23 Dec, 2025 | npm node-calculator-98ba |
Malicious release: Malicious code in node-calculator-8f0c (npm) MAL-2025-192835 | Malicious | Not scored | 23 Dec, 2025 | npm node-calculator-8f0c |
Malicious release: Malicious code in node-calculator-7b82 (npm) MAL-2025-192834 | Malicious | Not scored | 23 Dec, 2025 | npm node-calculator-7b82 |
Malicious release: Malicious code in node-calculator-78c0 (npm) MAL-2025-192833 | Malicious | Not scored | 23 Dec, 2025 | npm node-calculator-78c0 |
Malicious release: Malicious code in node-calculator-73dd (npm) MAL-2025-192832 | Malicious | Not scored | 23 Dec, 2025 | npm node-calculator-73dd |
Malicious release: Malicious code in node-calculator-603e (npm) MAL-2025-192831 | Malicious | Not scored | 23 Dec, 2025 | npm node-calculator-603e |
Malicious release: Malicious code in node-calculator-5b8f (npm) MAL-2025-192830 | Malicious | Not scored | 23 Dec, 2025 | npm node-calculator-5b8f |
Malicious release: Malicious code in node-calculator-40ed (npm) MAL-2025-192829 | Malicious | Not scored | 23 Dec, 2025 | npm node-calculator-40ed |
Malicious release: Malicious code in node-calculator-2eb4 (npm) MAL-2025-192828 | Malicious | Not scored | 23 Dec, 2025 | npm node-calculator-2eb4 |
Malicious release: Malicious code in node-calculator-190a (npm) MAL-2025-192826 | Malicious | Not scored | 23 Dec, 2025 | npm node-calculator-190a |
Malicious release: Malicious code in node-calculator-290c (npm) MAL-2025-192827 | Malicious | Not scored | 23 Dec, 2025 | npm node-calculator-290c |
Malicious release: Malicious code in no-use-extend-native (npm) MAL-2025-192825 | Malicious | Not scored | 23 Dec, 2025 | npm no-use-extend-native |
Malicious release: Malicious code in no-unsanitized (npm) MAL-2025-192824 | Malicious | Not scored | 23 Dec, 2025 | npm no-unsanitized |
Malicious release: Malicious code in nintendo-test (npm) MAL-2025-192823 | Malicious | Not scored | 23 Dec, 2025 | npm nintendo-test |
Malicious release: Malicious code in ke-moma2 (npm) MAL-2025-192822 | Malicious | Not scored | 23 Dec, 2025 | npm ke-moma2 |
Malicious release: Malicious code in karem6 (npm) MAL-2025-192820 | Malicious | Not scored | 23 Dec, 2025 | npm karem6 |
Malicious release: Malicious code in ke-moma (npm) MAL-2025-192821 | Malicious | Not scored | 23 Dec, 2025 | npm ke-moma |
Malicious release: Malicious code in jz-ui-user (npm) MAL-2025-192818 | Malicious | Not scored | 23 Dec, 2025 | npm jz-ui-user |
Malicious release: Malicious code in jz-user-js-bridge (npm) MAL-2025-192819 | Malicious | Not scored | 23 Dec, 2025 | npm jz-user-js-bridge |
Malicious release: Malicious code in jz-native-js-bridge (npm) MAL-2025-192817 | Malicious | Not scored | 23 Dec, 2025 | npm jz-native-js-bridge |
Malicious release: Malicious code in jstoauto (npm) MAL-2025-192815, SNYK-JS-JSTOAUTO-14152273 | Malicious | Not scored | 23 Dec, 2025 | npm jstoauto |
Malicious release: Malicious code in jsxswap (npm) MAL-2025-192816 | Malicious | Not scored | 23 Dec, 2025 | npm jsxswap |
Malicious release: Malicious code in jsswapper (npm) MAL-2025-192814, SNYK-JS-JSSWAPPER-14152272 | Malicious | Not scored | 23 Dec, 2025 | npm jsswapper |
Malicious release: Malicious code in jsonupon (npm) MAL-2025-192813 | Malicious | Not scored | 23 Dec, 2025 | npm jsonupon |
Malicious release: Malicious code in jsonauto (npm) MAL-2025-192811, SNYK-JS-JSONAUTO-14152267 | Malicious | Not scored | 23 Dec, 2025 | npm jsonauto |
Malicious release: Malicious code in jsonrecap (npm) MAL-2025-192812, SNYK-JS-JSONRECAP-14152271 | Malicious | Not scored | 23 Dec, 2025 | npm jsonrecap |
Malicious release: Malicious code in jsonauthcap (npm) MAL-2025-192810, SNYK-JS-JSONAUTHCAP-14152264 | Malicious | Not scored | 23 Dec, 2025 | npm jsonauthcap |
Malicious release: Malicious code in jsonauth (npm) MAL-2025-192809, SNYK-JS-JSONAUTH-14152266 | Malicious | Not scored | 23 Dec, 2025 | npm jsonauth |
Malicious release: Malicious code in jsonapptoken (npm) MAL-2025-192808, SNYK-JS-JSONAPPTOKEN-14152265 | Malicious | Not scored | 23 Dec, 2025 | npm jsonapptoken |
Malicious release: Malicious code in json-panels (npm) MAL-2025-192807, SNYK-JS-JSONPANELS-14152268 | Malicious | Not scored | 23 Dec, 2025 | npm json-panels |
Malicious release: Malicious code in jest-formatting (npm) MAL-2025-192806 | Malicious | Not scored | 23 Dec, 2025 | npm jest-formatting |
Malicious release: Malicious code in intuit-test (npm) MAL-2025-192805 | Malicious | Not scored | 23 Dec, 2025 | npm intuit-test |
Malicious release: Malicious code in injectorpackage (npm) MAL-2025-192804 | Malicious | Not scored | 23 Dec, 2025 | npm injectorpackage |
Malicious release: Malicious code in init-router (npm) MAL-2025-192803, SNYK-JS-INITROUTER-14152257 | Malicious | Not scored | 23 Dec, 2025 | npm init-router |
Malicious release: Malicious code in ingka-test (npm) MAL-2025-192802 | Malicious | Not scored | 23 Dec, 2025 | npm ingka-test |
Malicious release: Malicious code in hiro-docs (npm) MAL-2025-192801 | Malicious | Not scored | 23 Dec, 2025 | npm hiro-docs |
Malicious release: Malicious code in gibertserct8 (npm) MAL-2025-192800 | Malicious | Not scored | 23 Dec, 2025 | npm gibertserct8 |