Every known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in elf-stats-mulled-snowglobe-636 (npm) MAL-2025-192335 | Malicious | Not scored | 05 Dec, 2025 | npm elf-stats-mulled-snowglobe-636 |
Malicious release: Malicious code in elf-stats-northbound-drum-422 (npm) MAL-2025-192336 | Malicious | Not scored | 05 Dec, 2025 | npm elf-stats-northbound-drum-422 |
Malicious release: Malicious code in elf-stats-shimmering-garland-476 (npm) MAL-2025-192337 | Malicious | Not scored | 05 Dec, 2025 | npm elf-stats-shimmering-garland-476 |
Malicious release: Malicious code in elf-stats-shimmering-toolkit-483 (npm) MAL-2025-192338 | Malicious | Not scored | 05 Dec, 2025 | npm elf-stats-shimmering-toolkit-483 |
Malicious release: Malicious code in elf-stats-snowdusted-chimney-406 (npm) MAL-2025-192339 | Malicious | Not scored | 05 Dec, 2025 | npm elf-stats-snowdusted-chimney-406 |
Malicious release: Malicious code in elf-stats-sparkly-icicle-845 (npm) MAL-2025-192340 | Malicious | Not scored | 05 Dec, 2025 | npm elf-stats-sparkly-icicle-845 |
Malicious release: Malicious code in elf-stats-sparkly-workbench-689 (npm) MAL-2025-192341 | Malicious | Not scored | 05 Dec, 2025 | npm elf-stats-sparkly-workbench-689 |
Malicious release: Malicious code in elf-stats-tinsel-muffin-395 (npm) MAL-2025-192342 | Malicious | Not scored | 05 Dec, 2025 | npm elf-stats-tinsel-muffin-395 |
Malicious release: Malicious code in elf-stats-velvet-train-152 (npm) MAL-2025-192343 | Malicious | Not scored | 05 Dec, 2025 | npm elf-stats-velvet-train-152 |
Malicious release: Malicious code in elf-stats-whimsical-pantry-974 (npm) MAL-2025-192344 | Malicious | Not scored | 05 Dec, 2025 | npm elf-stats-whimsical-pantry-974 |
Malicious release: Malicious code in sd-123456 (npm) MAL-2025-192347 | Malicious | Not scored | 05 Dec, 2025 | npm sd-123456 |
Malicious release: Malicious code in json-map-source (npm) GHSA-qfx2-px7q-fq7c, MAL-2025-192321, SNYK-JS-JSONMAPSOURCE-14188259 | Malicious | Not scored | 05 Dec, 2025 | npm json-map-source |
Malicious release: Malicious code in chai-as-deployed (npm) GHSA-3c8c-2jpp-67vq, MAL-2025-192318, SNYK-JS-CHAIASDEPLOYED-14152235 | Malicious | Not scored | 05 Dec, 2025 | npm chai-as-deployed |
Malicious release: Malicious code in chai-promised-chain (npm) GHSA-26mv-pxh2-2mc8, MAL-2025-192319, SNYK-JS-CHAIPROMISEDCHAIN-14188260 | Malicious | Not scored | 05 Dec, 2025 | npm chai-promised-chain |
Malicious release: Malicious code in dotnetenv (npm) GHSA-vphr-fmcc-hxf9, MAL-2025-192320, SNYK-JS-DOTNETENV-14188258 | Malicious | Not scored | 05 Dec, 2025 | npm dotnetenv |
Malicious release: Malicious code in tailwindcss-setfont (npm) GHSA-5hx3-5h6c-3xv9, MAL-2025-192317 | Malicious | Not scored | 05 Dec, 2025 | npm tailwindcss-setfont |
Malicious release: Malicious code in tailwindcss-animation-helper (npm) GHSA-j75p-9523-pwqj, MAL-2025-192316 | Malicious | Not scored | 05 Dec, 2025 | npm tailwindcss-animation-helper |
Malicious release: Malicious code in seeds-random (npm) GHSA-w2qv-99v5-h3f5, MAL-2025-192315, SNYK-JS-SEEDSRANDOM-14152299 | Malicious | Not scored | 05 Dec, 2025 | npm seeds-random |
Malicious release: Malicious code in react-svg-fill (npm) GHSA-hj6v-2wq4-jjf5, MAL-2025-192313 | Malicious | Not scored | 05 Dec, 2025 | npm react-svg-fill |
Malicious release: Malicious code in react-svg-bundler (npm) GHSA-mg29-c6qj-j4qc, MAL-2025-192312 | Malicious | Not scored | 05 Dec, 2025 | npm react-svg-bundler |
Malicious release: Malicious code in react-svg-supporter (npm) GHSA-p835-r6qr-5vww, MAL-2025-192314 | Malicious | Not scored | 05 Dec, 2025 | npm react-svg-supporter |
Malicious release: Malicious code in react-icon-updater (npm) GHSA-c3mg-cwv6-hf7f, MAL-2025-192311 | Malicious | Not scored | 05 Dec, 2025 | npm react-icon-updater |
Malicious release: Malicious code in jsonify-settings (npm) GHSA-69m9-9vpv-rw48, MAL-2025-192307 | Malicious | Not scored | 05 Dec, 2025 | npm jsonify-settings |
Malicious release: Malicious code in node-tailwind (npm) GHSA-75mj-jqg4-927f, MAL-2025-192310 | Malicious | Not scored | 05 Dec, 2025 | npm node-tailwind |
Malicious release: Malicious code in module-listener (npm) GHSA-8r5p-ph77-4q47, MAL-2025-192308 | Malicious | Not scored | 05 Dec, 2025 | npm module-listener |
Malicious release: Malicious code in node-dpapi1 (npm) GHSA-94c7-pr5j-9xpx, MAL-2025-192309 | Malicious | Not scored | 05 Dec, 2025 | npm node-dpapi1 |
Malicious release: Malicious code in elf-stats-northbound-sparkler-410 (npm) MAL-2025-192304 | Malicious | Not scored | 04 Dec, 2025 | npm elf-stats-northbound-sparkler-410 |
Malicious release: Malicious code in elf-stats-snowdusted-cookiejar-250 (npm) MAL-2025-192370 | Malicious | Not scored | 04 Dec, 2025 | npm elf-stats-snowdusted-cookiejar-250 |
Malicious release: Malicious code in elf-stats-caroling-wishlist-626 (npm) MAL-2025-192369 | Malicious | Not scored | 04 Dec, 2025 | npm elf-stats-caroling-wishlist-626 |
Malicious release: Malicious code in elf-stats-ginger-wreath-646 (npm) MAL-2025-192303 | Malicious | Not scored | 04 Dec, 2025 | npm elf-stats-ginger-wreath-646 |
Malicious release: Malicious code in sd-notexsit (npm) MAL-2025-192348 | Malicious | Not scored | 04 Dec, 2025 | npm sd-notexsit |
Malicious release: Malicious code in beep-types (npm) GHSA-29c6-m59j-mpj7, MAL-2025-192296 | Malicious | Not scored | 04 Dec, 2025 | npm beep-types |
Malicious release: Malicious code in elf-stats-bright-cocoa-293 (npm) GHSA-486w-96w2-x9jf, MAL-2025-192297 | Malicious | Not scored | 04 Dec, 2025 | npm elf-stats-bright-cocoa-293 |
Malicious release: Malicious code in elf-stats-candlelit-marshmallow-663 (npm) GHSA-53p4-4v76-pxf5, MAL-2025-192298 | Malicious | Not scored | 04 Dec, 2025 | npm elf-stats-candlelit-marshmallow-663 |
Malicious release: Malicious code in elf-stats-mulled-ornament-810 (npm) GHSA-7fvr-p773-hqhr, MAL-2025-192301 | Malicious | Not scored | 04 Dec, 2025 | npm elf-stats-mulled-ornament-810 |
Malicious release: Malicious code in elf-stats-lanternlit-snowman-834 (npm) GHSA-w8c6-v9jv-g985, MAL-2025-192299 | Malicious | Not scored | 04 Dec, 2025 | npm elf-stats-lanternlit-snowman-834 |
Malicious release: Malicious code in elf-stats-marzipan-cocoa-562 (npm) GHSA-xf3h-9rpq-qxc6, MAL-2025-192300 | Malicious | Not scored | 04 Dec, 2025 | npm elf-stats-marzipan-cocoa-562 |
Malicious release: Malicious code in elf-stats-jubilant-ornament-641 (npm) GHSA-p68c-437g-m8f7, MAL-2025-192295 | Malicious | Not scored | 04 Dec, 2025 | npm elf-stats-jubilant-ornament-641 |
Malicious release: Malicious code in volume-viz (npm) MAL-2025-192372 | Malicious | Not scored | 04 Dec, 2025 | npm volume-viz |
Malicious release: Malicious code in elf-stats-festive-sparkler-275 (npm) GHSA-cqjm-gc5c-7gh9, MAL-2025-192294 | Malicious | Not scored | 04 Dec, 2025 | npm elf-stats-festive-sparkler-275 |
Malicious release: Malicious code in email-regexed (npm) GHSA-65w3-9r4v-34p8, MAL-2025-192291 | Malicious | Not scored | 03 Dec, 2025 | npm email-regexed |
Malicious release: Malicious code in email-validated (npm) GHSA-p7fh-g5c8-3wj4, MAL-2025-192292 | Malicious | Not scored | 03 Dec, 2025 | npm email-validated |
Malicious release: Malicious code in tailwindcss-animation-css (npm) GHSA-rvc7-g7f8-qr5g, MAL-2025-192293 | Malicious | Not scored | 03 Dec, 2025 | npm tailwindcss-animation-css |
Malicious release: Malicious code in dotenv-intend (npm) GHSA-623w-pf6v-gcgv, MAL-2025-192290, SNYK-JS-DOTENVINTEND-14152253 | Malicious | Not scored | 03 Dec, 2025 | npm dotenv-intend |
Malicious release: Malicious code in chai-test-await (npm) GHSA-6hwv-6pq9-wvvc, MAL-2025-192289, SNYK-JS-CHAITESTAWAIT-14152247 | Malicious | Not scored | 03 Dec, 2025 | npm chai-test-await |
Malicious release: Malicious code in self-service-portal-prod (npm) GHSA-6663-4rqc-qqhf, MAL-2025-192288 | Malicious | Not scored | 03 Dec, 2025 | npm self-service-portal-prod |
Malicious release: Malicious code in elf-stats-frostbitten-pantry-235 (npm) MAL-2025-192281 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-frostbitten-pantry-235 |
Malicious release: Malicious code in elf-stats-candystriped-chimney-879 (npm) MAL-2025-192279 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-candystriped-chimney-879 |
Malicious release: Malicious code in elf-stats-aurora-toy-659 (npm) MAL-2025-192278 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-aurora-toy-659 |
Malicious release: Malicious code in elf-stats-evergreen-pantry-410 (npm) MAL-2025-192280 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-evergreen-pantry-410 |