Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in kc-next (npm) GHSA-cmmm-3vrh-vj98, MAL-2025-190574 | Malicious | Not scored | 19 Nov, 2025 | npm kc-next |
Malicious release: Malicious code in captcha-paypal (npm) MAL-2025-190568 | Malicious | Not scored | 18 Nov, 2025 | npm captcha-paypal |
Malicious release: Malicious code in gbiz-next (npm) GHSA-rfgw-mj8j-mg3g, MAL-2025-190573 | Malicious | Not scored | 18 Nov, 2025 | npm gbiz-next |
Malicious release: Malicious code in security-testing-research22 (npm) MAL-2025-190567 | Malicious | Not scored | 18 Nov, 2025 | npm security-testing-research22 |
Malicious release: Malicious code in node-calculator-3e62 (npm) GHSA-wxfw-hh76-hwr8, MAL-2025-190562 | Malicious | Not scored | 18 Nov, 2025 | npm node-calculator-3e62 |
Malicious release: Malicious code in tailwindcss-breezium (npm) GHSA-f6vh-22p7-hxp5, MAL-2025-190564 | Malicious | Not scored | 18 Nov, 2025 | npm tailwindcss-breezium |
Malicious release: Malicious code in @grumpycoffeecup/hello-npm-world (npm) GHSA-v2r5-pjpm-4cj5, MAL-2025-190557 | Malicious | Not scored | 18 Nov, 2025 | npm @grumpycoffeecup/hello-npm-world |
Malicious release: Malicious code in @profmego/alipay-babyblue (npm) GHSA-7w8p-r52j-w959, MAL-2025-190558 | Malicious | Not scored | 18 Nov, 2025 | npm @profmego/alipay-babyblue |
Malicious release: Malicious code in mongoose-odm (npm) GHSA-v4g2-4g52-qj9j, MAL-2025-190560 | Malicious | Not scored | 18 Nov, 2025 | npm mongoose-odm |
Malicious release: Malicious code in tailwindcss-setfavicon (npm) GHSA-8jr3-598q-gcm6, MAL-2025-190565 | Malicious | Not scored | 18 Nov, 2025 | npm tailwindcss-setfavicon |
Malicious release: Malicious code in scriptstealer (npm) GHSA-277g-646w-r9r6, MAL-2025-190563 | Malicious | Not scored | 18 Nov, 2025 | npm scriptstealer |
Malicious release: Malicious code in 1libxmljs2 (npm) GHSA-2rf3-g9x6-m6fv, MAL-2025-190556 | Malicious | Not scored | 18 Nov, 2025 | npm 1libxmljs2 |
Malicious release: Malicious code in finastealer (npm) GHSA-357r-4r78-6gf6, MAL-2025-190559 | Malicious | Not scored | 18 Nov, 2025 | npm finastealer |
Malicious release: Malicious code in mystealer (npm) GHSA-39r9-xrr6-j5hc, MAL-2025-190561 | Malicious | Not scored | 18 Nov, 2025 | npm mystealer |
Malicious release: Malicious code in workingstealer (npm) GHSA-q7xw-mvh2-96rq, MAL-2025-190566 | Malicious | Not scored | 18 Nov, 2025 | npm workingstealer |
Malicious release: Malicious code in chai-type (npm) GHSA-f2j6-rgp6-p5qp, MAL-2025-190552 | Malicious | Not scored | 18 Nov, 2025 | npm chai-type |
Malicious release: Malicious code in pretty-jsonify (npm) GHSA-f2g5-jc9j-vfp5, MAL-2025-190554 | Malicious | Not scored | 18 Nov, 2025 | npm pretty-jsonify |
Malicious release: Malicious code in tailwindcss-webfont-awesome (npm) GHSA-m49p-f5cm-g686, MAL-2025-190555 | Malicious | Not scored | 18 Nov, 2025 | npm tailwindcss-webfont-awesome |
Malicious release: Malicious code in multi-provider-settings (npm) GHSA-hp2f-4gj9-7rgf, MAL-2025-190553 | Malicious | Not scored | 18 Nov, 2025 | npm multi-provider-settings |
Malicious release: Malicious code in node-calculator-36ae (npm) GHSA-x6xx-3q7v-gm3h, MAL-2025-190551 | Malicious | Not scored | 18 Nov, 2025 | npm node-calculator-36ae |
Malicious release: Malicious code in transparent-example-request99 (npm) MAL-2025-190550 | Malicious | Not scored | 17 Nov, 2025 | npm transparent-example-request99 |
Malicious release: Malicious code in ancestry-unified-logger (npm) MAL-2025-190549 | Malicious | Not scored | 17 Nov, 2025 | npm ancestry-unified-logger |
Malicious release: Malicious code in node-calculator-043e (npm) MAL-2025-190525 | Malicious | Not scored | 17 Nov, 2025 | npm node-calculator-043e |
Malicious release: Malicious code in node-calculator-0c8f (npm) MAL-2025-190526 | Malicious | Not scored | 17 Nov, 2025 | npm node-calculator-0c8f |
Malicious release: Malicious code in node-calculator-1dc0 (npm) MAL-2025-190527 | Malicious | Not scored | 17 Nov, 2025 | npm node-calculator-1dc0 |
Malicious release: Malicious code in node-calculator-215d (npm) MAL-2025-190528 | Malicious | Not scored | 17 Nov, 2025 | npm node-calculator-215d |
Malicious release: Malicious code in node-calculator-239a (npm) MAL-2025-190529 | Malicious | Not scored | 17 Nov, 2025 | npm node-calculator-239a |
Malicious release: Malicious code in node-calculator-25bb (npm) MAL-2025-190530 | Malicious | Not scored | 17 Nov, 2025 | npm node-calculator-25bb |
Malicious release: Malicious code in node-calculator-522f (npm) MAL-2025-190531 | Malicious | Not scored | 17 Nov, 2025 | npm node-calculator-522f |
Malicious release: Malicious code in node-calculator-68f8 (npm) MAL-2025-190532 | Malicious | Not scored | 17 Nov, 2025 | npm node-calculator-68f8 |
Malicious release: Malicious code in node-calculator-8b5f (npm) MAL-2025-190533 | Malicious | Not scored | 17 Nov, 2025 | npm node-calculator-8b5f |
Malicious release: Malicious code in node-calculator-91aa (npm) MAL-2025-190534 | Malicious | Not scored | 17 Nov, 2025 | npm node-calculator-91aa |
Malicious release: Malicious code in node-calculator-98b6 (npm) MAL-2025-190535 | Malicious | Not scored | 17 Nov, 2025 | npm node-calculator-98b6 |
Malicious release: Malicious code in node-calculator-9b93 (npm) MAL-2025-190536 | Malicious | Not scored | 17 Nov, 2025 | npm node-calculator-9b93 |
Malicious release: Malicious code in node-calculator-9c62 (npm) MAL-2025-190537 | Malicious | Not scored | 17 Nov, 2025 | npm node-calculator-9c62 |
Malicious release: Malicious code in node-calculator-b549 (npm) MAL-2025-190538 | Malicious | Not scored | 17 Nov, 2025 | npm node-calculator-b549 |
Malicious release: Malicious code in node-calculator-b57e (npm) MAL-2025-190539 | Malicious | Not scored | 17 Nov, 2025 | npm node-calculator-b57e |
Malicious release: Malicious code in node-calculator-c3ef (npm) MAL-2025-190540 | Malicious | Not scored | 17 Nov, 2025 | npm node-calculator-c3ef |
Malicious release: Malicious code in node-calculator-d234 (npm) MAL-2025-190541 | Malicious | Not scored | 17 Nov, 2025 | npm node-calculator-d234 |
Malicious release: Malicious code in node-calculator-de84 (npm) MAL-2025-190542 | Malicious | Not scored | 17 Nov, 2025 | npm node-calculator-de84 |
Malicious release: Malicious code in node-calculator-e0b2 (npm) MAL-2025-190543 | Malicious | Not scored | 17 Nov, 2025 | npm node-calculator-e0b2 |
Malicious release: Malicious code in node-calculator-ecec (npm) MAL-2025-190544 | Malicious | Not scored | 17 Nov, 2025 | npm node-calculator-ecec |
Malicious release: Malicious code in node-calculator-f209 (npm) MAL-2025-190545 | Malicious | Not scored | 17 Nov, 2025 | npm node-calculator-f209 |
Malicious release: Malicious code in node-calculator-feea (npm) MAL-2025-190546 | Malicious | Not scored | 17 Nov, 2025 | npm node-calculator-feea |
Malicious release: Malicious code in node-calculator-yktt (npm) MAL-2025-190548 | Malicious | Not scored | 17 Nov, 2025 | npm node-calculator-yktt |
Malicious release: Malicious code in node-calculator-8ddb (npm) MAL-2025-190524 | Malicious | Not scored | 17 Nov, 2025 | npm node-calculator-8ddb |
Malicious release: Malicious code in node-calculator-7bea (npm) MAL-2025-190521 | Malicious | Not scored | 17 Nov, 2025 | npm node-calculator-7bea |
Malicious release: Malicious code in node-calculator-ac24 (npm) MAL-2025-190522 | Malicious | Not scored | 17 Nov, 2025 | npm node-calculator-ac24 |
Malicious release: Malicious code in node-calculator-4e41 (npm) GHSA-286m-4cgv-m34g, MAL-2025-190520 | Malicious | Not scored | 17 Nov, 2025 | npm node-calculator-4e41 |
Malicious release: Malicious code in node-calculator-c213 (npm) MAL-2025-190523 | Malicious | Not scored | 17 Nov, 2025 | npm node-calculator-c213 |