Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in node-calculator-9e41 (npm) MAL-2025-190518 | Malicious | Not scored | 17 Nov, 2025 | npm node-calculator-9e41 |
Malicious release: Malicious code in node-calculator-1b6e (npm) MAL-2025-190517 | Malicious | Not scored | 17 Nov, 2025 | npm node-calculator-1b6e |
Malicious release: Malicious code in node-calculator-fc9a (npm) MAL-2025-190519 | Malicious | Not scored | 17 Nov, 2025 | npm node-calculator-fc9a |
Malicious release: Malicious code in node-calculator-0f50 (npm) GHSA-q8f8-w9w7-p4xv, MAL-2025-190516 | Malicious | Not scored | 17 Nov, 2025 | npm node-calculator-0f50 |
Malicious release: Malicious code in node-calculator-x7k9 (npm) GHSA-f23r-hrcx-5m33, MAL-2025-190547 | Malicious | Not scored | 17 Nov, 2025 | npm node-calculator-x7k9 |
Malicious release: Malicious code in node-calculator-f4d5 (npm) MAL-2025-190515 | Malicious | Not scored | 17 Nov, 2025 | npm node-calculator-f4d5 |
Malicious release: Malicious code in node-calculator-6a88 (npm) MAL-2025-190514 | Malicious | Not scored | 17 Nov, 2025 | npm node-calculator-6a88 |
Malicious release: Malicious code in tailwind-view-ui (npm) GHSA-wx22-fj4j-v5m6, MAL-2025-190513 | Malicious | Not scored | 17 Nov, 2025 | npm tailwind-view-ui |
Malicious release: Malicious code in bcryptkit (npm) GHSA-fpgg-wq63-vcv8, MAL-2025-190512 | Malicious | Not scored | 17 Nov, 2025 | npm bcryptkit |
Malicious release: Malicious code in application-phskck (npm) GHSA-3c48-qp8w-c7w3, MAL-2025-190502 | Malicious | Not scored | 17 Nov, 2025 | npm application-phskck |
Malicious release: Malicious code in integrator-2829 (npm) GHSA-7f99-9p5f-5x2q, MAL-2025-190506 | Malicious | Not scored | 17 Nov, 2025 | npm integrator-2829 |
Malicious release: Malicious code in dsidospsodlks (npm) GHSA-8728-j7mh-2gwr, MAL-2025-190505 | Malicious | Not scored | 17 Nov, 2025 | npm dsidospsodlks |
Malicious release: Malicious code in integrator-filescrypt2025 (npm) GHSA-cr93-h7c6-wcp5, MAL-2025-190508 | Malicious | Not scored | 17 Nov, 2025 | npm integrator-filescrypt2025 |
Malicious release: Malicious code in integrator-2830 (npm) GHSA-f59x-2qgp-j2c2, MAL-2025-190507 | Malicious | Not scored | 17 Nov, 2025 | npm integrator-2830 |
Malicious release: Malicious code in applicationooks21 (npm) GHSA-p95v-8f68-x5vh, MAL-2025-190503 | Malicious | Not scored | 17 Nov, 2025 | npm applicationooks21 |
Malicious release: Malicious code in signals-embed (npm) GHSA-pjxr-h3qv-879p, MAL-2025-190511 | Malicious | Not scored | 17 Nov, 2025 | npm signals-embed |
Malicious release: Malicious code in chai-proxify (npm) GHSA-532g-9ffw-j8mq, MAL-2025-190504 | Malicious | Not scored | 17 Nov, 2025 | npm chai-proxify |
Malicious release: Malicious code in react-native-animated-shine (npm) GHSA-f849-6pjg-5fhc, MAL-2025-190510 | Malicious | Not scored | 17 Nov, 2025 | npm react-native-animated-shine |
Malicious release: Malicious code in react-confetti-modern (npm) GHSA-fj72-f875-9vw7, MAL-2025-190509 | Malicious | Not scored | 17 Nov, 2025 | npm react-confetti-modern |
Malicious release: Malicious code in tailwind-styled-scrollbar (npm) GHSA-p2jq-3496-h69h, MAL-2025-190501 | Malicious | Not scored | 17 Nov, 2025 | npm tailwind-styled-scrollbar |
Malicious release: Malicious code in com.mixpanel.unity (npm) MAL-2025-190500 | Malicious | Not scored | 16 Nov, 2025 | npm com.mixpanel.unity |
Malicious release: Malicious code in filifecycleserv-paypal (npm) GHSA-gj5f-c6h7-9v2f, MAL-2025-190499 | Malicious | Not scored | 15 Nov, 2025 | npm filifecycleserv-paypal |
Malicious release: Malicious code in loger-parser (npm) GHSA-c448-fx5r-7ggw, MAL-2025-190496, SNYK-JS-LOGERPARSER-13961689 | Malicious | Not scored | 14 Nov, 2025 | npm loger-parser |
Malicious release: Malicious code in tailwindcss-setflex (npm) GHSA-rf9v-4rc9-33wg, MAL-2025-190497 | Malicious | Not scored | 14 Nov, 2025 | npm tailwindcss-setflex |
Malicious release: Malicious code in validator-node (npm) GHSA-hxf9-58r2-q8f4, MAL-2025-190498, SNYK-JS-VALIDATORNODE-13961690 | Malicious | Not scored | 14 Nov, 2025 | npm validator-node |
Malicious release: Malicious code in chain-test-async (npm) GHSA-m3ww-fr92-p4xx, MAL-2025-190495, SNYK-JS-CHAINTESTASYNC-13961687 | Malicious | Not scored | 14 Nov, 2025 | npm chain-test-async |
Malicious release: Malicious code in chai-test-async (npm) GHSA-pm4f-x94x-7v26, MAL-2025-190494, SNYK-JS-CHAITESTASYNC-13961688 | Malicious | Not scored | 14 Nov, 2025 | npm chai-test-async |
Malicious release: Malicious code in com.unity.polyspatial (npm) GHSA-3v5x-69xc-6277, MAL-2025-190493 | Malicious | Not scored | 13 Nov, 2025 | npm com.unity.polyspatial |
Malicious release: Malicious code in bitsight (npm) MAL-2025-190490 | Malicious | Not scored | 13 Nov, 2025 | npm bitsight |
Malicious release: Malicious code in form-classifier (npm) MAL-2025-190491 | Malicious | Not scored | 13 Nov, 2025 | npm form-classifier |
Malicious release: Malicious code in worldskills (npm) MAL-2025-190492 | Malicious | Not scored | 13 Nov, 2025 | npm worldskills |
Malicious release: Malicious code in @walletify/backend (npm) GHSA-6w28-jf63-4wpq, MAL-2025-185350 | Malicious | Not scored | 13 Nov, 2025 | npm @walletify/backend |
Malicious release: Malicious code in @walletify/ui (npm) GHSA-h59v-jw97-cw7g, MAL-2025-185352 | Malicious | Not scored | 13 Nov, 2025 | npm @walletify/ui |
Malicious release: Malicious code in @walletify/core (npm) GHSA-pq5h-xj9v-2wxh, MAL-2025-185351 | Malicious | Not scored | 13 Nov, 2025 | npm @walletify/core |
Malicious release: Malicious code in vite-chunk-master (npm) GHSA-g4jc-qxwg-2vmx, MAL-2025-190176 | Malicious | Not scored | 13 Nov, 2025 | npm vite-chunk-master |
Malicious release: Malicious code in abiogenesis-airbnb-supernova-rollup (npm) MAL-2025-185353 | Malicious | Not scored | 13 Nov, 2025 | npm abiogenesis-airbnb-supernova-rollup |
Malicious release: Malicious code in abiogenesis-cli-start-jest (npm) MAL-2025-185354 | Malicious | Not scored | 13 Nov, 2025 | npm abiogenesis-cli-start-jest |
Malicious release: Malicious code in abiogenesis-cli-tachyon-miranda (npm) MAL-2025-185355 | Malicious | Not scored | 13 Nov, 2025 | npm abiogenesis-cli-tachyon-miranda |
Malicious release: Malicious code in abiogenesis-cluster-astrophysics-epigenetics (npm) MAL-2025-185356 | Malicious | Not scored | 13 Nov, 2025 | npm abiogenesis-cluster-astrophysics-epigenetics |
Malicious release: Malicious code in abiogenesis-proxima-astro-backend (npm) MAL-2025-185357 | Malicious | Not scored | 13 Nov, 2025 | npm abiogenesis-proxima-astro-backend |
Malicious release: Malicious code in abiogenesis-start-petrology-webdriverio (npm) MAL-2025-185358 | Malicious | Not scored | 13 Nov, 2025 | npm abiogenesis-start-petrology-webdriverio |
Malicious release: Malicious code in abiogenesis-terraforming-sublimation-supercluster (npm) MAL-2025-185359 | Malicious | Not scored | 13 Nov, 2025 | npm abiogenesis-terraforming-sublimation-supercluster |
Malicious release: Malicious code in abiogenesis-version-magnetosphere-typeorm (npm) MAL-2025-185360 | Malicious | Not scored | 13 Nov, 2025 | npm abiogenesis-version-magnetosphere-typeorm |
Malicious release: Malicious code in ablation-entanglement-got-epigenetics (npm) MAL-2025-185361 | Malicious | Not scored | 13 Nov, 2025 | npm ablation-entanglement-got-epigenetics |
Malicious release: Malicious code in ablation-rigel-phoenix-despina (npm) MAL-2025-185362 | Malicious | Not scored | 13 Nov, 2025 | npm ablation-rigel-phoenix-despina |
Malicious release: Malicious code in ablation-scripts-pino-terraforming (npm) MAL-2025-185363 | Malicious | Not scored | 13 Nov, 2025 | npm ablation-scripts-pino-terraforming |
Malicious release: Malicious code in ablation-semantic-ui-readable-xerxes (npm) MAL-2025-185364 | Malicious | Not scored | 13 Nov, 2025 | npm ablation-semantic-ui-readable-xerxes |
Malicious release: Malicious code in abstract-decrypt-async-public-phi (npm) MAL-2025-185365 | Malicious | Not scored | 13 Nov, 2025 | npm abstract-decrypt-async-public-phi |
Malicious release: Malicious code in abstract-hash-key-report-load (npm) MAL-2025-185366 | Malicious | Not scored | 13 Nov, 2025 | npm abstract-hash-key-report-load |
Malicious release: Malicious code in abstract-interface-stub-delta-cloud (npm) MAL-2025-185367 | Malicious | Not scored | 13 Nov, 2025 | npm abstract-interface-stub-delta-cloud |