Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in database-mongoose-kit (npm) GHSA-3c76-cvvv-7wf5, MAL-2025-192398, SNYK-JS-DATABASEMONGOOSEKIT-14287384 | Malicious | Not scored | 10 Dec, 2025 | npm database-mongoose-kit |
Malicious release: Malicious code in @onlytoodles/crypto-jsa (npm) GHSA-8454-2xp4-m86m, MAL-2025-192397 | Malicious | Not scored | 10 Dec, 2025 | npm @onlytoodles/crypto-jsa |
Malicious release: Malicious code in wartsila-text-csv (npm) GHSA-vvf9-w333-7h9q, MAL-2025-192402, SNYK-JS-WARTSILATEXTCSV-14287379 | Malicious | Not scored | 10 Dec, 2025 | npm wartsila-text-csv |
Malicious release: Malicious code in serval-integrations-common-frontend (npm) GHSA-3j9j-c9rg-f95f, MAL-2025-192401, SNYK-JS-SERVALINTEGRATIONSCOMMONFRONTEND-14287374 | Malicious | Not scored | 10 Dec, 2025 | npm serval-integrations-common-frontend |
Malicious release: Malicious code in node-calculator-0d96 (npm) GHSA-mh7x-j32p-xwvh, MAL-2025-192400, SNYK-JS-NODECALCULATOR0D96-14287386 | Malicious | Not scored | 10 Dec, 2025 | npm node-calculator-0d96 |
Malicious release: Malicious code in malicius-pdf (npm) GHSA-w3m5-47q7-h8m4, MAL-2025-192399 | Malicious | Not scored | 10 Dec, 2025 | npm malicius-pdf |
Malicious release: Malicious code in libxmlrussia (npm) MAL-2025-192395 | Malicious | Not scored | 09 Dec, 2025 | npm libxmlrussia |
Malicious release: Malicious code in libxmlussr2 (npm) MAL-2025-192394 | Malicious | Not scored | 09 Dec, 2025 | npm libxmlussr2 |
Malicious release: Malicious code in libxmlussr1 (npm) MAL-2025-192427 | Malicious | Not scored | 09 Dec, 2025 | npm libxmlussr1 |
Malicious release: Malicious code in libxmljsololo2 (npm) MAL-2025-192426 | Malicious | Not scored | 09 Dec, 2025 | npm libxmljsololo2 |
Malicious release: Malicious code in libxmljs2woter (npm) GHSA-h63c-r25g-p7rw, MAL-2025-192390 | Malicious | Not scored | 09 Dec, 2025 | npm libxmljs2woter |
Malicious release: Malicious code in libxmljs2qwerty (npm) MAL-2025-192389 | Malicious | Not scored | 09 Dec, 2025 | npm libxmljs2qwerty |
Malicious release: Malicious code in libxmlfinal2 (npm) MAL-2025-192425 | Malicious | Not scored | 09 Dec, 2025 | npm libxmlfinal2 |
Malicious release: Malicious code in libxmljs2varaboba (npm) MAL-2025-192388 | Malicious | Not scored | 09 Dec, 2025 | npm libxmljs2varaboba |
Malicious release: Malicious code in baidu-oscp (npm) MAL-2025-192424 | Malicious | Not scored | 09 Dec, 2025 | npm baidu-oscp |
Malicious release: Malicious code in jsonify-errors (npm) GHSA-4hp4-98m6-767r, MAL-2025-192384, SNYK-JS-JSONIFYERRORS-14235579 | Malicious | Not scored | 09 Dec, 2025 | npm jsonify-errors |
Malicious release: Malicious code in chai-uuids (npm) GHSA-9gvh-rg3c-5gr6, MAL-2025-192383, SNYK-JS-CHAIUUIDS-14235578 | Malicious | Not scored | 09 Dec, 2025 | npm chai-uuids |
Malicious release: Malicious code in configurator-framework (npm) GHSA-wq4m-xvmv-ch8w, MAL-2025-192381 | Malicious | Not scored | 09 Dec, 2025 | npm configurator-framework |
Malicious release: Malicious code in shop-api-sdk (npm) MAL-2025-192378 | Malicious | Not scored | 08 Dec, 2025 | npm shop-api-sdk |
Malicious release: Malicious code in gs-uitk-lodash (npm) MAL-2025-192377 | Malicious | Not scored | 08 Dec, 2025 | npm gs-uitk-lodash |
Malicious release: Malicious code in @notrainers/nobtrainer-sdk (npm) GHSA-49w9-gcx6-2wfh, MAL-2025-192373 | Malicious | Not scored | 08 Dec, 2025 | npm @notrainers/nobtrainer-sdk |
Malicious release: Malicious code in solana-dexco-basic (npm) GHSA-3377-9226-4w97, MAL-2025-192374 | Malicious | Not scored | 08 Dec, 2025 | npm solana-dexco-basic |
Malicious release: Malicious code in tensor-fi-utils-core (npm) GHSA-hjxg-jf6x-5vqp, MAL-2025-192375, SNYK-JS-TENSORFIUTILSCORE-14221996 | Malicious | Not scored | 08 Dec, 2025 | npm tensor-fi-utils-core |
Malicious release: Malicious code in paysera-checkout-modal (npm) MAL-2025-192368 | Malicious | Not scored | 07 Dec, 2025 | npm paysera-checkout-modal |
Malicious release: Malicious code in tna_xmlparser (npm) MAL-2025-192371 | Malicious | Not scored | 07 Dec, 2025 | npm tna_xmlparser |
Malicious release: Malicious code in react-hook-form-5 (npm) MAL-2025-192366 | Malicious | Not scored | 07 Dec, 2025 | npm react-hook-form-5 |
Malicious release: Malicious code in datadog-checks-base (npm) GHSA-6gq4-p64c-9qqf, MAL-2025-192361 | Malicious | Not scored | 06 Dec, 2025 | npm datadog-checks-base |
Malicious release: Malicious code in fdir5 (npm) MAL-2025-192356 | Malicious | Not scored | 06 Dec, 2025 | npm fdir5 |
Malicious release: Malicious code in ssf-desktop-api-browser (npm) MAL-2025-192359 | Malicious | Not scored | 06 Dec, 2025 | npm ssf-desktop-api-browser |
Malicious release: Malicious code in enclose-eslint (npm) MAL-2025-192352 | Malicious | Not scored | 06 Dec, 2025 | npm enclose-eslint |
Malicious release: Malicious code in fdir1 (npm) MAL-2025-192353 | Malicious | Not scored | 06 Dec, 2025 | npm fdir1 |
Malicious release: Malicious code in ido-sdk-web (npm) MAL-2025-192357 | Malicious | Not scored | 06 Dec, 2025 | npm ido-sdk-web |
Malicious release: Malicious code in fdir4 (npm) MAL-2025-192355 | Malicious | Not scored | 06 Dec, 2025 | npm fdir4 |
Malicious release: Malicious code in sharp32 (npm) MAL-2025-192358 | Malicious | Not scored | 06 Dec, 2025 | npm sharp32 |
Malicious release: Malicious code in fdir2 (npm) MAL-2025-192354 | Malicious | Not scored | 06 Dec, 2025 | npm fdir2 |
Malicious release: Malicious code in ssf-desktop-api-openfin (npm) MAL-2025-192360 | Malicious | Not scored | 06 Dec, 2025 | npm ssf-desktop-api-openfin |
Malicious release: Malicious code in express-my-error-handler (npm) GHSA-vf2p-5pcm-655m, MAL-2025-192350 | Malicious | Not scored | 06 Dec, 2025 | npm express-my-error-handler |
Malicious release: Malicious code in native-component-list (npm) GHSA-857j-xfpm-cxrp, MAL-2025-192345 | Malicious | Not scored | 05 Dec, 2025 | npm native-component-list |
Malicious release: Malicious code in non-modular-buildable (npm) GHSA-wj95-4qrc-6r3h, MAL-2025-192346 | Malicious | Not scored | 05 Dec, 2025 | npm non-modular-buildable |
Malicious release: Malicious code in ambient-map (npm) MAL-2025-192324 | Malicious | Not scored | 05 Dec, 2025 | npm ambient-map |
Malicious release: Malicious code in elf-stats-aurora-mailbag-938 (npm) MAL-2025-192325 | Malicious | Not scored | 05 Dec, 2025 | npm elf-stats-aurora-mailbag-938 |
Malicious release: Malicious code in elf-stats-candlelit-hollyberry-248 (npm) MAL-2025-192326 | Malicious | Not scored | 05 Dec, 2025 | npm elf-stats-candlelit-hollyberry-248 |
Malicious release: Malicious code in elf-stats-candystriped-garland-735 (npm) MAL-2025-192327 | Malicious | Not scored | 05 Dec, 2025 | npm elf-stats-candystriped-garland-735 |
Malicious release: Malicious code in elf-stats-cosy-sled-550 (npm) MAL-2025-192328 | Malicious | Not scored | 05 Dec, 2025 | npm elf-stats-cosy-sled-550 |
Malicious release: Malicious code in elf-stats-cosy-toy-308 (npm) MAL-2025-192329 | Malicious | Not scored | 05 Dec, 2025 | npm elf-stats-cosy-toy-308 |
Malicious release: Malicious code in elf-stats-cranberry-pinecone-878 (npm) MAL-2025-192330 | Malicious | Not scored | 05 Dec, 2025 | npm elf-stats-cranberry-pinecone-878 |
Malicious release: Malicious code in elf-stats-evergreen-satchel-264 (npm) MAL-2025-192331 | Malicious | Not scored | 05 Dec, 2025 | npm elf-stats-evergreen-satchel-264 |
Malicious release: Malicious code in elf-stats-flickering-lantern-502 (npm) MAL-2025-192332 | Malicious | Not scored | 05 Dec, 2025 | npm elf-stats-flickering-lantern-502 |
Malicious release: Malicious code in elf-stats-lanternlit-saddlebag-279 (npm) MAL-2025-192333 | Malicious | Not scored | 05 Dec, 2025 | npm elf-stats-lanternlit-saddlebag-279 |
Malicious release: Malicious code in elf-stats-midnight-rocket-813 (npm) MAL-2025-192334 | Malicious | Not scored | 05 Dec, 2025 | npm elf-stats-midnight-rocket-813 |