Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in cookie-breaker (npm) MAL-2025-192727, SNYK-JS-COOKIEBREAKER-14152248 | Malicious | Not scored | 23 Dec, 2025 | npm cookie-breaker |
Malicious release: Malicious code in cms_comp_popup (npm) MAL-2025-192726 | Malicious | Not scored | 23 Dec, 2025 | npm cms_comp_popup |
Malicious release: Malicious code in chai-pack (npm) MAL-2025-192725, SNYK-JS-CHAIPACK-14152241 | Malicious | Not scored | 23 Dec, 2025 | npm chai-pack |
Malicious release: Malicious code in chai-as-validated (npm) GHSA-xhmc-g8hp-fgqq, MAL-2025-192724 | Malicious | Not scored | 23 Dec, 2025 | npm chai-as-validated |
Malicious release: Malicious code in chai-as-tested (npm) MAL-2025-192723, SNYK-JS-CHAIASTESTED-14152236 | Malicious | Not scored | 23 Dec, 2025 | npm chai-as-tested |
Malicious release: Malicious code in chai-as-deploy (npm) MAL-2025-192722, SNYK-JS-CHAIASDEPLOY-14152234 | Malicious | Not scored | 23 Dec, 2025 | npm chai-as-deploy |
Malicious release: Malicious code in caterpillar-test (npm) MAL-2025-192721 | Malicious | Not scored | 23 Dec, 2025 | npm caterpillar-test |
Malicious release: Malicious code in canva-test (npm) MAL-2025-192720 | Malicious | Not scored | 23 Dec, 2025 | npm canva-test |
Malicious release: Malicious code in calculator-40ed (npm) MAL-2025-192719 | Malicious | Not scored | 23 Dec, 2025 | npm calculator-40ed |
Malicious release: Malicious code in bootstrap-setflexcolor (npm) MAL-2025-192718, SNYK-JS-BOOTSTRAPSETFLEXCOLOR-14152233 | Malicious | Not scored | 23 Dec, 2025 | npm bootstrap-setflexcolor |
Malicious release: Malicious code in bootstrap-setcolors (npm) MAL-2025-192717, SNYK-JS-BOOTSTRAPSETCOLORS-14152232 | Malicious | Not scored | 23 Dec, 2025 | npm bootstrap-setcolors |
Malicious release: Malicious code in bootstrap-setcolor (npm) MAL-2025-192716, SNYK-JS-BOOTSTRAPSETCOLOR-14152231 | Malicious | Not scored | 23 Dec, 2025 | npm bootstrap-setcolor |
Malicious release: Malicious code in booms-ai (npm) MAL-2025-192715 | Malicious | Not scored | 23 Dec, 2025 | npm booms-ai |
Malicious release: Malicious code in bignumberx (npm) MAL-2025-192714 | Malicious | Not scored | 23 Dec, 2025 | npm bignumberx |
Malicious release: Malicious code in baidu-src-test4 (npm) MAL-2025-192713 | Malicious | Not scored | 23 Dec, 2025 | npm baidu-src-test4 |
Malicious release: Malicious code in auth-handler (npm) MAL-2025-192712, SNYK-JS-AUTHHANDLER-14152228 | Malicious | Not scored | 23 Dec, 2025 | npm auth-handler |
Malicious release: Malicious code in assert-json-not (npm) MAL-2025-192711, SNYK-JS-ASSERTJSONNOT-14152227 | Malicious | Not scored | 23 Dec, 2025 | npm assert-json-not |
Malicious release: Malicious code in amournapraia (npm) MAL-2025-192710 | Malicious | Not scored | 23 Dec, 2025 | npm amournapraia |
Malicious release: Malicious code in amazon-testpackage (npm) MAL-2025-192709 | Malicious | Not scored | 23 Dec, 2025 | npm amazon-testpackage |
Malicious release: Malicious code in alicenpmpackage (npm) MAL-2025-192708 | Malicious | Not scored | 23 Dec, 2025 | npm alicenpmpackage |
Malicious release: Malicious code in acz.view.src (npm) MAL-2025-192707 | Malicious | Not scored | 23 Dec, 2025 | npm acz.view.src |
Malicious release: Malicious code in @ownbackup/ob-loader (npm) MAL-2025-192705 | Malicious | Not scored | 23 Dec, 2025 | npm @ownbackup/ob-loader |
Malicious release: Malicious code in @ownbackup/ob-query-builder (npm) MAL-2025-192706 | Malicious | Not scored | 23 Dec, 2025 | npm @ownbackup/ob-query-builder |
Malicious release: Malicious code in @ownbackup/ob-design-system (npm) MAL-2025-192704 | Malicious | Not scored | 23 Dec, 2025 | npm @ownbackup/ob-design-system |
Malicious release: Malicious code in @ownbackup/icons (npm) MAL-2025-192703 | Malicious | Not scored | 23 Dec, 2025 | npm @ownbackup/icons |
Malicious release: Malicious code in @ownbackup/data-chart (npm) MAL-2025-192701 | Malicious | Not scored | 23 Dec, 2025 | npm @ownbackup/data-chart |
Malicious release: Malicious code in @ownbackup/data-grid (npm) MAL-2025-192702 | Malicious | Not scored | 23 Dec, 2025 | npm @ownbackup/data-grid |
Malicious release: Malicious code in @ads-core/types (npm) GHSA-6xvr-cfwp-7mv9, MAL-2025-192700 | Malicious | Not scored | 23 Dec, 2025 | npm @ads-core/types |
Malicious release: Malicious code in mw-frontend-utils (npm) GHSA-337v-g6xp-2crp, MAL-2025-192697 | Malicious | Not scored | 22 Dec, 2025 | npm mw-frontend-utils |
Malicious release: Malicious code in ro-mobile (npm) GHSA-85m3-w425-6v48, MAL-2025-192698 | Malicious | Not scored | 22 Dec, 2025 | npm ro-mobile |
Malicious release: Malicious code in @vienna_cancer_center_portal/js (npm) GHSA-98m9-fmm5-76w2, MAL-2025-192692 | Malicious | Not scored | 22 Dec, 2025 | npm @vienna_cancer_center_portal/js |
Malicious release: Malicious code in dc-extras (npm) GHSA-cfqp-cvx7-r4w3, MAL-2025-192694 | Malicious | Not scored | 22 Dec, 2025 | npm dc-extras |
Malicious release: Malicious code in mui-wrapper-core (npm) GHSA-m8v6-5crc-5m6w, MAL-2025-192696 | Malicious | Not scored | 22 Dec, 2025 | npm mui-wrapper-core |
Malicious release: Malicious code in airslate-dep-webpack (npm) MAL-2025-192693 | Malicious | Not scored | 22 Dec, 2025 | npm airslate-dep-webpack |
Malicious release: Malicious code in ivx-cloud-client-v1 (npm) MAL-2025-192695 | Malicious | Not scored | 22 Dec, 2025 | npm ivx-cloud-client-v1 |
Malicious release: Malicious code in cloudy-uvi-sense-v11 (npm) MAL-2025-192691 | Malicious | Not scored | 22 Dec, 2025 | npm cloudy-uvi-sense-v11 |
Malicious release: Malicious code in utif-updated (npm) GHSA-j9gx-q4v7-8gh6, MAL-2025-192688 | Malicious | Not scored | 22 Dec, 2025 | npm utif-updated |
Malicious release: Malicious code in tiny-model-update (npm) GHSA-7m8x-5j4f-qj6p, MAL-2026-47 | Malicious | Not scored | 22 Dec, 2025 | npm tiny-model-update |
Malicious release: Malicious code in commander-stable (npm) GHSA-mmcm-p5h7-xjhw, MAL-2025-192687 | Malicious | Not scored | 22 Dec, 2025 | npm commander-stable |
Malicious release: Malicious code in secguest-lib (npm) GHSA-33c5-f4q2-c358, MAL-2026-169 | Malicious | Not scored | 22 Dec, 2025 | npm secguest-lib |
Malicious release: Malicious code in github-badge-bot (npm) GHSA-r39w-33gw-8p5g, MAL-2026-46 | Malicious | Not scored | 21 Dec, 2025 | npm github-badge-bot |
Malicious release: Malicious code in meta-code-verify (npm) GHSA-vwm7-m2x4-j99q, MAL-2026-134 | Malicious | Not scored | 21 Dec, 2025 | npm meta-code-verify |
Malicious release: Malicious code in @nosinovacao/nosid-mfe-common (npm) GHSA-3xxx-vrmx-pg3x, MAL-2025-192682 | Malicious | Not scored | 20 Dec, 2025 | npm @nosinovacao/nosid-mfe-common |
Malicious release: Malicious code in othw (npm) MAL-2025-192681 | Malicious | Not scored | 20 Dec, 2025 | npm othw |
Malicious release: Malicious code in escaux-scrumboard-api (npm) MAL-2025-192680 | Malicious | Not scored | 20 Dec, 2025 | npm escaux-scrumboard-api |
Malicious release: Malicious code in jest-stable (npm) MAL-2025-192678 | Malicious | Not scored | 19 Dec, 2025 | npm jest-stable |
Malicious release: Malicious code in shakti20261 (npm) GHSA-357m-gr33-h5ww, MAL-2025-192677 | Malicious | Not scored | 19 Dec, 2025 | npm shakti20261 |
Malicious release: Malicious code in wifi-killer-xnet (npm) GHSA-3jp3-7hvx-xvrp, MAL-2025-192672 | Malicious | Not scored | 19 Dec, 2025 | npm wifi-killer-xnet |
Malicious release: Malicious code in zebracros-bahlil (npm) GHSA-3jvv-6p8r-85xm, MAL-2025-192676 | Malicious | Not scored | 19 Dec, 2025 | npm zebracros-bahlil |
Malicious release: Malicious code in adeliana-xnetgpt (npm) GHSA-5vvc-ghph-2q6r, MAL-2025-192662 | Malicious | Not scored | 19 Dec, 2025 | npm adeliana-xnetgpt |