Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in elf-stats-cranberry-sleigh-853 (npm) MAL-2025-191978 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-cranberry-sleigh-853 |
Malicious release: Malicious code in elf-stats-rooftop-giftbox-464 (npm) MAL-2025-192122 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-rooftop-giftbox-464 |
Malicious release: Malicious code in elf-stats-lanternlit-sled-571 (npm) MAL-2025-192078 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-lanternlit-sled-571 |
Malicious release: Malicious code in elf-stats-mistletoe-sparkler-211 (npm) MAL-2025-192099 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-mistletoe-sparkler-211 |
Malicious release: Malicious code in elf-stats-rooftop-stockpile-626 (npm) GHSA-3hg9-rgh9-x5j4, MAL-2025-191977 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-rooftop-stockpile-626 |
Malicious release: Malicious code in elf-stats-merry-cookiejar-987 (npm) MAL-2025-191975 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-merry-cookiejar-987 |
Malicious release: Malicious code in elf-stats-sleighing-bow-514 (npm) MAL-2025-191976 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-sleighing-bow-514 |
Malicious release: Malicious code in elf-stats-wintry-northstar-674 (npm) MAL-2025-191974 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-wintry-northstar-674 |
Malicious release: Malicious code in elf-stats-bright-cushion-246 (npm) MAL-2025-191993 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-bright-cushion-246 |
Malicious release: Malicious code in elf-stats-fuzzy-fir-973 (npm) GHSA-868x-5vrm-qv2m, MAL-2025-191973 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-fuzzy-fir-973 |
Malicious release: Malicious code in elf-stats-evergreen-muffin-867 (npm) GHSA-6qx7-784r-ff4x, MAL-2025-192024 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-evergreen-muffin-867 |
Malicious release: Malicious code in @testfei/hallo-word (npm) GHSA-pvc8-vm69-c9g2, MAL-2025-191971 | Malicious | Not scored | 03 Dec, 2025 | npm @testfei/hallo-word |
Malicious release: Malicious code in karemm5 (npm) MAL-2025-191966 | Malicious | Not scored | 03 Dec, 2025 | npm karemm5 |
Malicious release: Malicious code in karemm6 (npm) MAL-2025-191967 | Malicious | Not scored | 03 Dec, 2025 | npm karemm6 |
Malicious release: Malicious code in karemm7 (npm) MAL-2025-191968 | Malicious | Not scored | 03 Dec, 2025 | npm karemm7 |
Malicious release: Malicious code in karemm3 (npm) MAL-2025-191965 | Malicious | Not scored | 03 Dec, 2025 | npm karemm3 |
Malicious release: Malicious code in @wb-drive/icons (npm) GHSA-pp9p-p4m6-rh8x, MAL-2025-191951 | Malicious | Not scored | 03 Dec, 2025 | npm @wb-drive/icons |
Malicious release: Malicious code in angular-trackjs (npm) GHSA-wm69-3896-655x, MAL-2025-191952 | Malicious | Not scored | 03 Dec, 2025 | npm angular-trackjs |
Malicious release: Malicious code in @hand-talk/yotta-icons (npm) MAL-2025-191950 | Malicious | Not scored | 03 Dec, 2025 | npm @hand-talk/yotta-icons |
Malicious release: Malicious code in elf-stats-cosy-stockpile-694 (npm) MAL-2025-191953 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-cosy-stockpile-694 |
Malicious release: Malicious code in elf-stats-silvered-ornament-756 (npm) MAL-2025-191954 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-silvered-ornament-756 |
Malicious release: Malicious code in elf-stats-snowdusted-sparkler-261 (npm) MAL-2025-191955 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-snowdusted-sparkler-261 |
Malicious release: Malicious code in elf-stats-snowdusted-wishlist-166 (npm) MAL-2025-191956 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-snowdusted-wishlist-166 |
Malicious release: Malicious code in elf-stats-sparkly-hammer-880 (npm) MAL-2025-191957 | Malicious | Not scored | 03 Dec, 2025 | npm elf-stats-sparkly-hammer-880 |
Malicious release: Malicious code in karem5 (npm) MAL-2025-191961 | Malicious | Not scored | 03 Dec, 2025 | npm karem5 |
Malicious release: Malicious code in karemm2 (npm) MAL-2025-191964 | Malicious | Not scored | 03 Dec, 2025 | npm karemm2 |
Malicious release: Malicious code in karemm1 (npm) MAL-2025-191963 | Malicious | Not scored | 03 Dec, 2025 | npm karemm1 |
Malicious release: Malicious code in karem10 (npm) MAL-2025-191959 | Malicious | Not scored | 03 Dec, 2025 | npm karem10 |
Malicious release: Malicious code in karem7 (npm) MAL-2025-191962 | Malicious | Not scored | 03 Dec, 2025 | npm karem7 |
Malicious release: Malicious code in karem4 (npm) MAL-2025-191960 | Malicious | Not scored | 03 Dec, 2025 | npm karem4 |
Malicious release: Malicious code in karem1 (npm) MAL-2025-191958 | Malicious | Not scored | 03 Dec, 2025 | npm karem1 |
Malicious release: Malicious code in kkkaremn (npm) MAL-2025-191969 | Malicious | Not scored | 03 Dec, 2025 | npm kkkaremn |
Malicious release: Malicious code in karemz (npm) MAL-2025-191947 | Malicious | Not scored | 03 Dec, 2025 | npm karemz |
Malicious release: Malicious code in kmz1 (npm) MAL-2025-191949 | Malicious | Not scored | 03 Dec, 2025 | npm kmz1 |
Malicious release: Malicious code in kwp-router (npm) GHSA-m6rh-gg4p-9c8g, MAL-2025-191970 | Malicious | Not scored | 03 Dec, 2025 | npm kwp-router |
Malicious release: Malicious code in kkkarem (npm) MAL-2025-191948 | Malicious | Not scored | 03 Dec, 2025 | npm kkkarem |
Malicious release: Malicious code in wfui-dbd-react-ui (npm) GHSA-gxh6-cc7g-p7g8, MAL-2025-191668 | Malicious | Not scored | 02 Dec, 2025 | npm wfui-dbd-react-ui |
Malicious release: Malicious code in wfui-dsm-react-ui (npm) GHSA-j5pp-2wcm-mf3m, MAL-2025-191669 | Malicious | Not scored | 02 Dec, 2025 | npm wfui-dsm-react-ui |
Malicious release: Malicious code in codemirror-5 (npm) GHSA-494g-rprp-qcj7, MAL-2025-191557 | Malicious | Not scored | 02 Dec, 2025 | npm codemirror-5 |
Malicious release: Malicious code in data-xabit (npm) GHSA-93wh-2c42-vrrj, MAL-2025-191558 | Malicious | Not scored | 02 Dec, 2025 | npm data-xabit |
Malicious release: Malicious code in btc-transaction-helper (npm) GHSA-hrrx-v3pg-9j4m, MAL-2025-191556 | Malicious | Not scored | 02 Dec, 2025 | npm btc-transaction-helper |
Malicious release: Malicious code in chai-status (npm) GHSA-wh9m-xqr4-wc75, MAL-2025-191546, SNYK-JS-CHAISTATUS-14152245, SNYK-JS-CHAISTATUS-14157129 | Malicious | Not scored | 02 Dec, 2025 | npm chai-status |
Malicious release: Malicious code in ui-cluster-driver-otccce (npm) GHSA-m76g-qp4m-jp32, MAL-2025-191555 | Malicious | Not scored | 02 Dec, 2025 | npm ui-cluster-driver-otccce |
Malicious release: Malicious code in internallib_v881 (npm) GHSA-7vhv-q3wg-rc77, MAL-2025-191548 | Malicious | Not scored | 02 Dec, 2025 | npm internallib_v881 |
Malicious release: Malicious code in ddos-l7 (npm) GHSA-378w-r2h3-q97m, MAL-2025-191547 | Malicious | Not scored | 02 Dec, 2025 | npm ddos-l7 |
Malicious release: Malicious code in react-animated-glow (npm) GHSA-rh79-jpg8-28qc, MAL-2025-191550 | Malicious | Not scored | 02 Dec, 2025 | npm react-animated-glow |
Malicious release: Malicious code in multer-cli (npm) GHSA-qx36-9vh9-239w, MAL-2025-191549 | Malicious | Not scored | 02 Dec, 2025 | npm multer-cli |
Malicious release: Malicious code in solana-dexfi-suite (npm) GHSA-87fh-6v83-84j3, MAL-2025-191551 | Malicious | Not scored | 02 Dec, 2025 | npm solana-dexfi-suite |
Malicious release: Malicious code in tensorfi-secure-hash (npm) GHSA-gqx8-mxhr-v69r, MAL-2025-191554 | Malicious | Not scored | 02 Dec, 2025 | npm tensorfi-secure-hash |
Malicious release: Malicious code in tailwind-scrollbar-variant (npm) GHSA-cg4x-fqxw-pwf7, MAL-2025-191553 | Malicious | Not scored | 02 Dec, 2025 | npm tailwind-scrollbar-variant |