Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in web-uj65mn (npm) MAL-2025-191602 | Malicious | Not scored | 01 Dec, 2025 | npm web-uj65mn |
Malicious release: Malicious code in web-nbq6lx (npm) MAL-2025-191601 | Malicious | Not scored | 01 Dec, 2025 | npm web-nbq6lx |
Malicious release: Malicious code in vite-dynamic-chunks (npm) MAL-2025-191600, SNYK-JS-VITEDYNAMICCHUNKS-14152344 | Malicious | Not scored | 01 Dec, 2025 | npm vite-dynamic-chunks |
Malicious release: Malicious code in vbails (npm) MAL-2025-191599 | Malicious | Not scored | 01 Dec, 2025 | npm vbails |
Malicious release: Malicious code in test-dependency-confusion-g3ksec (npm) MAL-2025-191598 | Malicious | Not scored | 01 Dec, 2025 | npm test-dependency-confusion-g3ksec |
Malicious release: Malicious code in tensor-fi-crypto-utils (npm) MAL-2025-191597 | Malicious | Not scored | 01 Dec, 2025 | npm tensor-fi-crypto-utils |
Malicious release: Malicious code in telegram-api-test (npm) MAL-2025-191596 | Malicious | Not scored | 01 Dec, 2025 | npm telegram-api-test |
Malicious release: Malicious code in tailwindcss-forms (npm) MAL-2025-191595, SNYK-JS-TAILWINDCSSFORMS-14152334 | Malicious | Not scored | 01 Dec, 2025 | npm tailwindcss-forms |
Malicious release: Malicious code in tailwind-style-override (npm) MAL-2025-191594, SNYK-JS-TAILWINDSTYLEOVERRIDE-14152321 | Malicious | Not scored | 01 Dec, 2025 | npm tailwind-style-override |
Malicious release: Malicious code in tailwind-state (npm) MAL-2025-191593, SNYK-JS-TAILWINDSTATE-14152320 | Malicious | Not scored | 01 Dec, 2025 | npm tailwind-state |
Malicious release: Malicious code in szsec-infoss-report (npm) MAL-2025-191592 | Malicious | Not scored | 01 Dec, 2025 | npm szsec-infoss-report |
Malicious release: Malicious code in szsec-infos-report-wh2sper (npm) MAL-2025-191591 | Malicious | Not scored | 01 Dec, 2025 | npm szsec-infos-report-wh2sper |
Malicious release: Malicious code in szsec-infos-report-wh1sper (npm) MAL-2025-191590 | Malicious | Not scored | 01 Dec, 2025 | npm szsec-infos-report-wh1sper |
Malicious release: Malicious code in szsec-info-report (npm) MAL-2025-191589 | Malicious | Not scored | 01 Dec, 2025 | npm szsec-info-report |
Malicious release: Malicious code in stringify-coder (npm) MAL-2025-191588, SNYK-JS-STRINGIFYCODER-14152307 | Malicious | Not scored | 01 Dec, 2025 | npm stringify-coder |
Malicious release: Malicious code in sing-fest-es-logger (npm) MAL-2025-191587 | Malicious | Not scored | 01 Dec, 2025 | npm sing-fest-es-logger |
Malicious release: Malicious code in session-validate (npm) MAL-2025-191586, SNYK-JS-SESSIONVALIDATE-14152304 | Malicious | Not scored | 01 Dec, 2025 | npm session-validate |
Malicious release: Malicious code in revit-to-ifc-scheduler (npm) MAL-2025-191585 | Malicious | Not scored | 01 Dec, 2025 | npm revit-to-ifc-scheduler |
Malicious release: Malicious code in redirect-clrm2u (npm) MAL-2025-191584 | Malicious | Not scored | 01 Dec, 2025 | npm redirect-clrm2u |
Malicious release: Malicious code in redirect-5k9q5v (npm) MAL-2025-191583 | Malicious | Not scored | 01 Dec, 2025 | npm redirect-5k9q5v |
Malicious release: Malicious code in react-mandes (npm) MAL-2025-191582, SNYK-JS-REACTMANDES-14152287 | Malicious | Not scored | 01 Dec, 2025 | npm react-mandes |
Malicious release: Malicious code in react-adparser (npm) MAL-2025-191581, SNYK-JS-REACTADPARSER-14152283 | Malicious | Not scored | 01 Dec, 2025 | npm react-adparser |
Malicious release: Malicious code in pixel-bloom (npm) MAL-2025-191580, SNYK-JS-PIXELBLOOM-14152280 | Malicious | Not scored | 01 Dec, 2025 | npm pixel-bloom |
Malicious release: Malicious code in lbank-connector-nodejs (npm) MAL-2025-191579 | Malicious | Not scored | 01 Dec, 2025 | npm lbank-connector-nodejs |
Malicious release: Malicious code in lbank-connector (npm) MAL-2025-191578 | Malicious | Not scored | 01 Dec, 2025 | npm lbank-connector |
Malicious release: Malicious code in kyjnzu (npm) MAL-2025-191577, SNYK-JS-KYJNZU-14152274 | Malicious | Not scored | 01 Dec, 2025 | npm kyjnzu |
Malicious release: Malicious code in jqxcore (npm) MAL-2025-191576 | Malicious | Not scored | 01 Dec, 2025 | npm jqxcore |
Malicious release: Malicious code in ing-ideal-acquiring-shared (npm) MAL-2025-191575 | Malicious | Not scored | 01 Dec, 2025 | npm ing-ideal-acquiring-shared |
Malicious release: Malicious code in eslint-lodash (npm) MAL-2025-191574 | Malicious | Not scored | 01 Dec, 2025 | npm eslint-lodash |
Malicious release: Malicious code in data-noxcqn (npm) MAL-2025-191573 | Malicious | Not scored | 01 Dec, 2025 | npm data-noxcqn |
Malicious release: Malicious code in cwanner (npm) MAL-2025-191572, SNYK-JS-CWANNER-14152252 | Malicious | Not scored | 01 Dec, 2025 | npm cwanner |
Malicious release: Malicious code in ctf2libxmljs2 (npm) MAL-2025-191571 | Malicious | Not scored | 01 Dec, 2025 | npm ctf2libxmljs2 |
Malicious release: Malicious code in core-ruw7ck (npm) MAL-2025-191570 | Malicious | Not scored | 01 Dec, 2025 | npm core-ruw7ck |
Malicious release: Malicious code in cookie-validate (npm) MAL-2025-191569, SNYK-JS-COOKIEVALIDATE-14152250 | Malicious | Not scored | 01 Dec, 2025 | npm cookie-validate |
Malicious release: Malicious code in client-6wr4qk (npm) MAL-2025-191568 | Malicious | Not scored | 01 Dec, 2025 | npm client-6wr4qk |
Malicious release: Malicious code in chai-sync (npm) MAL-2025-191567, SNYK-JS-CHAISYNC-14152246 | Malicious | Not scored | 01 Dec, 2025 | npm chai-sync |
Malicious release: Malicious code in chai-promise-chain (npm) MAL-2025-191566, SNYK-JS-CHAIPROMISECHAIN-14152242 | Malicious | Not scored | 01 Dec, 2025 | npm chai-promise-chain |
Malicious release: Malicious code in auth-1s7epg (npm) MAL-2025-191565 | Malicious | Not scored | 01 Dec, 2025 | npm auth-1s7epg |
Malicious release: Malicious code in aps-simple-viewer-nodejs (npm) MAL-2025-191564 | Malicious | Not scored | 01 Dec, 2025 | npm aps-simple-viewer-nodejs |
Malicious release: Malicious code in @ukg-oneapp/common-lib (npm) MAL-2025-191563 | Malicious | Not scored | 01 Dec, 2025 | npm @ukg-oneapp/common-lib |
Malicious release: Malicious code in @gr-exports/head (npm) MAL-2025-191562 | Malicious | Not scored | 01 Dec, 2025 | npm @gr-exports/head |
Malicious release: Malicious code in @gr-exports/body (npm) MAL-2025-191561 | Malicious | Not scored | 01 Dec, 2025 | npm @gr-exports/body |
Malicious release: Malicious code in @gr-exports/async (npm) MAL-2025-191560 | Malicious | Not scored | 01 Dec, 2025 | npm @gr-exports/async |
Malicious release: Malicious code in @gr-common/async (npm) MAL-2025-191559 | Malicious | Not scored | 01 Dec, 2025 | npm @gr-common/async |
Malicious release: Malicious code in 7715-permissions-shared (npm) GHSA-cr3j-vwfg-rcv8, MAL-2025-191493 | Malicious | Not scored | 30 Nov, 2025 | npm 7715-permissions-shared |
Malicious release: Malicious code in umap-wasm (npm) GHSA-p2rm-9qxp-658x, MAL-2025-191492 | Malicious | Not scored | 30 Nov, 2025 | npm umap-wasm |
Malicious release: Malicious code in babel-plugin-standalone (npm) GHSA-3q93-fg6q-g42q, MAL-2025-191491 | Malicious | Not scored | 30 Nov, 2025 | npm babel-plugin-standalone |
Malicious release: Malicious code in wds-icons (npm) GHSA-jhm5-cg5j-fj77, MAL-2025-191494 | Malicious | Not scored | 29 Nov, 2025 | npm wds-icons |
Malicious release: Malicious code in com.unity.sharp-zip-lib (npm) GHSA-gvf2-cfhj-mmjq, MAL-2025-191490 | Malicious | Not scored | 29 Nov, 2025 | npm com.unity.sharp-zip-lib |
Malicious release: Malicious code in liblynxtextra.so (npm) GHSA-8g38-j744-p228, MAL-2025-191489 | Malicious | Not scored | 29 Nov, 2025 | npm liblynxtextra.so |